OpenSSH linkable library

Damien Miller djm at mindrot.org
Wed Sep 19 09:26:17 EST 2001


On Tue, 18 Sep 2001, Brian Hamon wrote:

> One technique that will work is to run ssh as a coprocess, with stdin and 
> stdout piped into your main process (similar to popen). The most important 
> consequence is that the password prompt will not work correctly (it uses 
> the pty directly, rather than stdin/stdout). Password authentication is 
> therefore not usable without adding unsavory patches to the OpenSSH source 
> code. This limitation is reasonable; however, since an automaton should 
> really be using RSA authentication anyway.

This isn't true - OpenSSH reads pass{words,phrases} directly from the TTY
(if present) and will thus bypass stdio redirection. This is how sftp and
scp work.

-d

-- 
| Damien Miller <djm at mindrot.org> \ ``E-mail attachments are the poor man's 
| http://www.mindrot.org          /   distributed filesystem'' - Dan Geer




More information about the openssh-unix-dev mailing list