[GH-ISSUE #427] An alternative method to log into bastion. #114

Open
opened 2026-05-07 00:19:05 +02:00 by BreizhHardware · 0 comments

Originally created by @thelittlerocket on GitHub (Oct 22, 2023).
Original GitHub issue: https://github.com/ovh/the-bastion/issues/427

Thanks for the awesome project.
I am currently testing the-bastion and It looks like to me that if I lost my private key that was added to the bastion server as an ingress key, I lost the connection to the bastion server. I still can log in to the host of the bastion server, but I found no binary or command that I can enter the interactive interface from the host.

I have been using sshportal for a few years and looking for an alternative because it has been inactivated for a long time and would like to migrate to a more activated project in case not supported by a future OS.

sshportal using a token(like, invite:BpLnfgDsc2WD8F2q) when first logging into the bastion and if the token is vaild, it will add the current SSH key to the account associated with the token which means I can add myself to bastion as long as I still have the token in hand which is handy compared to keep the private key in the password manager or maybe there is a better way to archive this.

Would like to know if I can log in to the bastion using other than a key pair in case the private key has been lost or on a new device that access to the bastion is needed. A password auth maybe? And would like to know if the token part as above can be a feature request.

Thanks,

Originally created by @thelittlerocket on GitHub (Oct 22, 2023). Original GitHub issue: https://github.com/ovh/the-bastion/issues/427 Thanks for the awesome project. I am currently testing the-bastion and It looks like to me that if I lost my private key that was added to the bastion server as an ingress key, I lost the connection to the bastion server. I still can log in to the host of the bastion server, but I found no binary or command that I can enter the interactive interface from the host. I have been using [sshportal](https://github.com/moul/sshportal) for a few years and looking for an alternative because it has been inactivated for a long time and would like to migrate to a more activated project in case not supported by a future OS. sshportal using a token(like, ```invite:BpLnfgDsc2WD8F2q```) when first logging into the bastion and if the token is vaild, it will add the current SSH key to the account associated with the token which means I can add myself to bastion as long as I still have the token in hand which is handy compared to keep the private key in the password manager or maybe there is a better way to archive this. Would like to know if I can log in to the bastion using other than a key pair in case the private key has been lost or on a new device that access to the bastion is needed. A password auth maybe? And would like to know if the token part as above can be a feature request. Thanks,
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/the-bastion#114
No description provided.