Tcl

SSH Auth Failure Reason (AuthenticatePwPk)

See more SSH Examples

This example demonstrates how to determine the failure reason for the case where both a password and private key are required for authentication. If authentication fails, was it because of an invalid private key, or an invalid password? Tcl

load ./chilkat.dll

set success 0

# This example assumes the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

# Load a private key to be used for SSH authentication.
set key [new_CkSshKey]

CkSshKey_put_Password $key "key_password"

set success [CkSshKey_FromOpenSshPrivateKey $key [CkSshKey_loadText $key "qa_data/my_private_key_file"]]
if {$success == 0} then {
    puts [CkSshKey_lastErrorText $key]
    delete_CkSshKey $key
    exit
}

set ssh [new_CkSsh]

set success [CkSsh_Connect $ssh "ssh.example.com" 22]
if {$success == 0} then {
    puts [CkSsh_lastErrorText $ssh]
    delete_CkSshKey $key
    delete_CkSsh $ssh
    exit
}

# Authenticate using both a password and private key.
set success [CkSsh_AuthenticatePwPk $ssh "myLogin" "myPassword" $key]
if {$success == 1} then {
    puts "Authentication is successful!"
    delete_CkSshKey $key
    delete_CkSsh $ssh
    exit
}

# If we get here, it means the authentication failed.
# Examine the last JSON data to get information..

set json [new_CkJsonObject]

CkSsh_GetLastJsonData $ssh $json

CkJsonObject_put_EmitCompact $json 0

# This is the JSON if the key is correct, but the password is incorrect:

# {
#   "public_key_type": "rsa",
#   "partialAuthResult": "publickey success. continue to authenticate with password...",
#   "authResult": "failed",
#   "authFailReason": "Password is incorrect"
# }

# This is the JSON if the key is incorrect.  We won't know if the password is also incorrect until
# the key is made correct so that authentication proceeds to check the password.

# {
#   "public_key_type": "rsa",
#   "authResult": "failed",
#   "authFailReason": "Key is incorrect"
# }

# To get the authResult anbd authFailReason:
puts "authResult: [CkJsonObject_stringOf $json authResult]"
puts "authFailReason: [CkJsonObject_stringOf $json authFailReason]"

delete_CkSshKey $key
delete_CkSsh $ssh
delete_CkJsonObject $json