Tcl

SFTP Auth Failure Reason (AuthenticatePwPk)

See more SFTP Examples

This example demonstrates how to determine the failure reason for the case where both a password and private key are required for authentication. If authentication fails, was it because of an invalid private key, or an invalid password? Tcl

load ./chilkat.dll

set success 0

# This example assumes the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

# Load a private key to be used for SSH authentication.
set key [new_CkSshKey]

CkSshKey_put_Password $key "key_password"

set success [CkSshKey_FromOpenSshPrivateKey $key [CkSshKey_loadText $key "qa_data/my_private_key_file"]]
if {$success == 0} then {
    puts [CkSshKey_lastErrorText $key]
    delete_CkSshKey $key
    exit
}

set sftp [new_CkSFtp]

set success [CkSFtp_Connect $sftp "sftp.example.com" 22]
if {$success == 0} then {
    puts [CkSFtp_lastErrorText $sftp]
    delete_CkSshKey $key
    delete_CkSFtp $sftp
    exit
}

# Authenticate using both a password and private key.
set success [CkSFtp_AuthenticatePwPk $sftp "myLogin" "myPassword" $key]
if {$success == 1} then {
    puts "Authentication is successful!"
    delete_CkSshKey $key
    delete_CkSFtp $sftp
    exit
}

# If we get here, it means the authentication failed.
# Examine the last JSON data..

set json [new_CkJsonObject]

CkSFtp_GetLastJsonData $sftp $json

CkJsonObject_put_EmitCompact $json 0

# This is the JSON if the key is correct, but the password is incorrect:

# {
#   "public_key_type": "rsa",
#   "partialAuthResult": "publickey success. continue to authenticate with password...",
#   "authResult": "failed",
#   "authFailReason": "Password is incorrect"
# }

# This is the JSON if the key is incorrect.  We won't know if the password is also incorrect until
# the key is made correct so that authentication proceeds to check the password.

# {
#   "public_key_type": "rsa",
#   "authResult": "failed",
#   "authFailReason": "Key is incorrect"
# }

# To get the authResult anbd authFailReason:
puts "authResult: [CkJsonObject_stringOf $json authResult]"
puts "authFailReason: [CkJsonObject_stringOf $json authFailReason]"

delete_CkSshKey $key
delete_CkSFtp $sftp
delete_CkJsonObject $json