Twas brillig at 13:11:52 19.04.2010 UTC+02 when daniel_at_haxx.se did gyre and gimble:
>> I don't think that blindly sending out the password is setting a good example.
DS> You mean you want a getpass() or similar to be used to get the password?
Keyboard-Interactive may ask for everything, from password or OTP to
solution of puzzle, given as challenge.
The way to handle it is to output the challenge(s) and provide user with
the means to give answers, and then send responses back to server,
without hardcoding any knowledge of "password" in client.
-- http://fossarchy.blogspot.com/
_______________________________________________
libssh2-devel http://cool.haxx.se/cgi-bin/mailman/listinfo/libssh2-devel