Hi Daiki,

Daiki Ueno wrote:
> The attached are:
> 
> - a patch which adds callback-based function for "publickey" authentication
>   (The existing file-based function is now implemented with the
>   callback-based function)
> 
> - a sample program which demonstrates authentication using ssh-agent
>   (To play with this, add ssh2_agent.c to noinst_PROGRAMS in
>   example/simple/Makefile.am, rebuild, and run it as "ssh2_agent host user")

I think that we want to have more of ssh2_agent.c within libssh2
itself, I'm not sure about the callback approach.

The thing to keep in mind here is that applications should be able to
control which keys will be tried for the auth. Servers might accept
only 1 attempt for the pubkey auth, and if there are several keys
available (some in file, some in agent) then it is important to be
able to choose which one to use. I don't know exactly how to expose
this.

On one hand I want a function "do pubkey auth" which will just do the
right thing possibly trying all keys, on the other hand I want to
allow control over which keys will be tried, in which order.


Also note that Pageant is the de-facto standard agent in Windows and
it uses different IPC than the OpenSSH agent, so that needs to be
abstracted. Ideally we would also support OpenSSH ssh-agent on
Cygwin, which probably uses yet another form of IPC.

I like where this is going though!


//Peter
_______________________________________________
libssh2-devel http://cool.haxx.se/cgi-bin/mailman/listinfo/libssh2-devel

Reply via email to