(MFC) SSH Auth Failure Reason (AuthenticatePwPk)

This example demonstrates how to determine the failure reason for the case where both a password and private key are required for authentication. If authentication fails, was it because of an invalid private key, or an invalid password?

Note: This example requires a feature introduced in Chilkat v9.5.0.79

Chilkat C/C++ Library Downloads MS Visual C/C++ Libs

See Also: Using MFC CString in Chilkat

#include <CkSshKey.h>
#include <CkSsh.h>
#include <CkJsonObject.h>

void ChilkatSample(void)
    {
    CkString strOut;

    // This example assumes the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    // Load a private key to be used for SSH authentication.
    CkSshKey key;
    key.put_Password("key_password");

    bool success = key.FromOpenSshPrivateKey(key.loadText("qa_data/my_private_key_file"));
    if (success != true) {
        strOut.append(key.lastErrorText());
        strOut.append("\r\n");
        SetDlgItemText(IDC_EDIT1,strOut.getUnicode());
        return;
    }

    CkSsh ssh;

    success = ssh.Connect("ssh.example.com",22);
    if (success != true) {
        strOut.append(ssh.lastErrorText());
        strOut.append("\r\n");
        SetDlgItemText(IDC_EDIT1,strOut.getUnicode());
        return;
    }

    // Authenticate using both a password and private key.
    success = ssh.AuthenticatePwPk("myLogin","myPassword",key);
    if (success == true) {
        strOut.append("Authentication is successful!");
        strOut.append("\r\n");
        SetDlgItemText(IDC_EDIT1,strOut.getUnicode());
        return;
    }

    // If we get here, it means the authentication failed.
    // To find out why, get the LastJsonData
    // This is a feature added in Chilkat v9.5.0.79

    CkJsonObject *json = ssh.LastJsonData();
    json->put_EmitCompact(false);

    // This is the JSON if the key is correct, but the password is incorrect:

    // {
    //   "public_key_type": "rsa",
    //   "partialAuthResult": "publickey success. continue to authenticate with password...",
    //   "authResult": "failed",
    //   "authFailReason": "Password is incorrect"
    // }

    // This is the JSON if the key is incorrect.  We won't know if the password is also incorrect until
    // the key is made correct so that authentication proceeds to check the password.

    // {
    //   "public_key_type": "rsa",
    //   "authResult": "failed",
    //   "authFailReason": "Key is incorrect"
    // }

    // To get the authResult anbd authFailReason:
    strOut.append("authResult: ");
    strOut.append(json->stringOf("authResult"));
    strOut.append("\r\n");
    strOut.append("authFailReason: ");
    strOut.append(json->stringOf("authFailReason"));
    strOut.append("\r\n");

    delete json;


    SetDlgItemText(IDC_EDIT1,strOut.getUnicode());

    }