Unicode C

SSH Auth Failure Reason (AuthenticatePwPk)

See more SSH Examples

This example demonstrates how to determine the failure reason for the case where both a password and private key are required for authentication. If authentication fails, was it because of an invalid private key, or an invalid password? Unicode C

#include <C_CkSshKeyW.h>
#include <C_CkSshW.h>
#include <C_CkJsonObjectW.h>

void ChilkatSample(void)
    {
    BOOL success;
    HCkSshKeyW key;
    HCkSshW ssh;
    HCkJsonObjectW json;

    success = FALSE;

    // This example assumes the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    // Load a private key to be used for SSH authentication.
    key = CkSshKeyW_Create();
    CkSshKeyW_putPassword(key,L"key_password");

    success = CkSshKeyW_FromOpenSshPrivateKey(key,CkSshKeyW_loadText(key,L"qa_data/my_private_key_file"));
    if (success == FALSE) {
        wprintf(L"%s\n",CkSshKeyW_lastErrorText(key));
        CkSshKeyW_Dispose(key);
        return;
    }

    ssh = CkSshW_Create();

    success = CkSshW_Connect(ssh,L"ssh.example.com",22);
    if (success == FALSE) {
        wprintf(L"%s\n",CkSshW_lastErrorText(ssh));
        CkSshKeyW_Dispose(key);
        CkSshW_Dispose(ssh);
        return;
    }

    // Authenticate using both a password and private key.
    success = CkSshW_AuthenticatePwPk(ssh,L"myLogin",L"myPassword",key);
    if (success == TRUE) {
        wprintf(L"Authentication is successful!\n");
        CkSshKeyW_Dispose(key);
        CkSshW_Dispose(ssh);
        return;
    }

    // If we get here, it means the authentication failed.
    // Examine the last JSON data to get information..

    json = CkJsonObjectW_Create();
    CkSshW_GetLastJsonData(ssh,json);

    CkJsonObjectW_putEmitCompact(json,FALSE);

    // This is the JSON if the key is correct, but the password is incorrect:

    // {
    //   "public_key_type": "rsa",
    //   "partialAuthResult": "publickey success. continue to authenticate with password...",
    //   "authResult": "failed",
    //   "authFailReason": "Password is incorrect"
    // }

    // This is the JSON if the key is incorrect.  We won't know if the password is also incorrect until
    // the key is made correct so that authentication proceeds to check the password.

    // {
    //   "public_key_type": "rsa",
    //   "authResult": "failed",
    //   "authFailReason": "Key is incorrect"
    // }

    // To get the authResult anbd authFailReason:
    wprintf(L"authResult: %s\n",CkJsonObjectW_stringOf(json,L"authResult"));
    wprintf(L"authFailReason: %s\n",CkJsonObjectW_stringOf(json,L"authFailReason"));


    CkSshKeyW_Dispose(key);
    CkSshW_Dispose(ssh);
    CkJsonObjectW_Dispose(json);

    }