Subject: Re: ssh2_exec.c does not support keyboard-interactive, intentional?

Re: ssh2_exec.c does not support keyboard-interactive, intentional?

From: Mikhail Gusarov <dottedmag_at_dottedmag.net>
Date: Mon, 19 Apr 2010 18:15:04 +0700

Twas brillig at 13:11:52 19.04.2010 UTC+02 when daniel_at_haxx.se did gyre and gimble:

>> I don't think that blindly sending out the password is setting a good example.

 DS> You mean you want a getpass() or similar to be used to get the password?

Keyboard-Interactive may ask for everything, from password or OTP to
solution of puzzle, given as challenge.

The way to handle it is to output the challenge(s) and provide user with
the means to give answers, and then send responses back to server,
without hardcoding any knowledge of "password" in client.

-- 
  http://fossarchy.blogspot.com/

_______________________________________________
libssh2-devel http://cool.haxx.se/cgi-bin/mailman/listinfo/libssh2-devel

Received on 2010-04-19