Does SSH Tunnel 2 support keys + password

[scrupul0us]

Some of the bastion hosts I use require both an authorized_key and a password.

Does the software support this feature?

[yang (Yang.Y)]

It depends, "yes" if you use Proxy Jump to pass through bastion hosts, but "no" if you use ProxyCommand directive.

Please refer to this post to get detailed information of Proxy Jump:

Jump Hosts -- Passing Through a Gateway or Two

It is possible to connect to another host via one or more intermediaries so that the client can act as if the connection were direct. The main method is to use an SSH connection to forward the SSH protocol through one or more jump hosts, using the ProxyJump directive, to an SSH server running on the target destination host. This is the most secure method because encryption is end-to-end. In addition to whatever other encryption goes on, the end points of the chain encrypt and decrypt each oth…

[scrupul0us]

My usage would be for local forwards:

127.0.0.1:8080 <=> bastion <=> remote_host:80

The bastion requires the SSH authorized_key and local account password.

Thanks.

[yang (Yang.Y)]

You can do a quick test: