OpenSSH
[Top] [All Lists]

Re: SSH_ASKPASS behavior change proposal

To: Iain Morgan <imorgan@nas.nasa.gov>
Subject: Re: SSH_ASKPASS behavior change proposal
From: Lance E Sloan <lsloan@umich.edu>
Date: Fri, 19 Jan 2007 14:17:56 -0500
Cc: openssh-unix-dev@mindrot.org
Delivered-to: sp-com-lists@consult.net
Delivered-to: openssh-unix-dev-list1@securepoint.com
Delivered-to: openssh-unix-dev-tmda@mindrot.org
Delivered-to: openssh-unix-dev@mindrot.org
In-reply-to: <200701191708.l0JH8n7u002505@ganymede.nas.nasa.gov>
List-archive: <http://lists.mindrot.org/pipermail/openssh-unix-dev>
List-help: <mailto:openssh-unix-dev-request@mindrot.org?subject=help>
List-id: Development of portable OpenSSH <openssh-unix-dev.mindrot.org>
List-post: <mailto:openssh-unix-dev@mindrot.org>
List-subscribe: <http://lists.mindrot.org/mailman/listinfo/openssh-unix-dev>, <mailto:openssh-unix-dev-request@mindrot.org?subject=subscribe>
List-unsubscribe: <http://lists.mindrot.org/mailman/listinfo/openssh-unix-dev>, <mailto:openssh-unix-dev-request@mindrot.org?subject=unsubscribe>
References: <200701191708.l0JH8n7u002505@ganymede.nas.nasa.gov>
Sender: openssh-unix-dev-bounces+openssh-unix-dev-list1=securepoint.com@mindrot.org
User-agent: Internet Messaging Program (IMP) H3 (4.0.5)
Mr. Morgan, thank you very much for the response.

Yes, I think I see how that could help.  I could start up an ssh 
control master in another window that connects to the CVS/SVN 
repository before I start a client.

I have a question about the "ask" setting for ControlMaster.  The 
manpage says:

Setting this to ``ask'' will cause ssh to listen for control 
connections, but require confirmation using the SSH_ASKPASS program 
before they are accepted (see ssh-add(1) for details).

I tried this, and ssh did indeed invoke my SSH_ASKPASS, but I wasn't 
sure what the correct response was.  I tried my password for the remote 
host and password for my local host.  Neither worked.  Then I noticed 
that it was prompting "Allow shared connection to [hostname_here]?", so 
I tried answering "y" and "yes", but neither of those worked, either.

What kind of answer is it expecting?

Quoting Iain Morgan <imorgan@nas.nasa.gov> (Fri 19 Jan 2007 12:08:49 PM EST):
> You could address the CVS/SVN issue using session multiplexing. See
> the entries for ControlMaster and ControlPath in the ssh(1) man page.
>
> Sometime ago, Lance E Sloan wrote:
>> I propose that the ssh command-line client be changed so that it will
>> use whatever program is specified in the SSH_ASKPASS environment
>> variable regardless of whether ssh has a terminal associated with it
>> or not.

-- 
Lance E Sloan, Application Developer
Evil is my middle name.  Some people think it's Eugene, though.
U-M ITCS ITCom Information Systems
http://www.itcom.itcs.umich.edu/
_______________________________________________
openssh-unix-dev mailing list
openssh-unix-dev@mindrot.org
http://lists.mindrot.org/mailman/listinfo/openssh-unix-dev

<Prev in Thread] Current Thread [Next in Thread>