Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support password authentication without sshpass binary (use SSH_ASKPASS) #33

Open
clue opened this issue Apr 24, 2022 · 0 comments
Open
Labels
help wanted Extra attention is needed new feature New feature or request

Comments

@clue
Copy link
Owner

clue commented Apr 24, 2022

We should support password authentication without requiring the additional sshpass binary. The binary works perfectly fine, however it is non-standard and requires an explicit installation like this on Debian/Ubuntu-based systems:

$ sudo apt install ssh-askpass

As an alternative, we should be able to set the SSH_ASKPASS environment when launching the ssh binary:

$ SSH_ASKPASS="echo foo" ssh [email protected]

Special care still needs to be taken to not leak the password to the process list. On top of this, we may have to set SSH_ASKPASS_REQUIRE=force (available as of OpenSSH 8.4 released 2020-09-27) or resort to setting additional environment variables to control this behavior (https://unix.stackexchange.com/questions/125427/force-ssh-to-always-use-ssh-askpass).

I'm not currently working on this myself, but figured it makes sense to post here anyway. If you need this for a commercial project and you want to help sponsor this feature, feel free to reach out and I'm happy to take a look. PRs are also welcome 👍

@clue clue added new feature New feature or request help wanted Extra attention is needed labels Apr 24, 2022
@clue clue mentioned this issue Apr 24, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
help wanted Extra attention is needed new feature New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant