CkPython

SSH Auth Failure Reason (AuthenticatePwPk)

See more SSH Examples

This example demonstrates how to determine the failure reason for the case where both a password and private key are required for authentication. If authentication fails, was it because of an invalid private key, or an invalid password? CkPython

import sys
import chilkat

success = False

# This example assumes the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

# Load a private key to be used for SSH authentication.
key = chilkat.CkSshKey()
key.put_Password("key_password")

success = key.FromOpenSshPrivateKey(key.loadText("qa_data/my_private_key_file"))
if (success == False):
    print(key.lastErrorText())
    sys.exit()

ssh = chilkat.CkSsh()

success = ssh.Connect("ssh.example.com",22)
if (success == False):
    print(ssh.lastErrorText())
    sys.exit()

# Authenticate using both a password and private key.
success = ssh.AuthenticatePwPk("myLogin","myPassword",key)
if (success == True):
    print("Authentication is successful!")
    sys.exit()

# If we get here, it means the authentication failed.
# Examine the last JSON data to get information..

json = chilkat.CkJsonObject()
ssh.GetLastJsonData(json)

json.put_EmitCompact(False)

# This is the JSON if the key is correct, but the password is incorrect:

# {
#   "public_key_type": "rsa",
#   "partialAuthResult": "publickey success. continue to authenticate with password...",
#   "authResult": "failed",
#   "authFailReason": "Password is incorrect"
# }

# This is the JSON if the key is incorrect.  We won't know if the password is also incorrect until
# the key is made correct so that authentication proceeds to check the password.

# {
#   "public_key_type": "rsa",
#   "authResult": "failed",
#   "authFailReason": "Key is incorrect"
# }

# To get the authResult anbd authFailReason:
print("authResult: " + json.stringOf("authResult"))
print("authFailReason: " + json.stringOf("authFailReason"))