SSH OTP does not work

Vault
11

I have got it working finally.

  1. I have mistakenly remarked @include common-session instead of @include common-auth

  2. auth requisite and auth optional should be above @include common-auth so as to trigger connection to Vault server

  3. @include common-auth must be remarked, or SSH will still fail even successfully verified by Vault server.

(Actually I want the destination server accept both traditional SSH key and also Vault OTP)

  1. In /etc/vault-ssh-helper.d/config.hcl, allowed_cidr_list must be defined.
    Vault ssh cannot connect to remote sucessfully - #8 by liu

Thanks.