Re[2]: gCvs: Can SSH authentication be done over the cvsgui pipe?

Richard Wirth <[email protected]> Fri, 10 Mar 2006 21:54:02 +0100
Newsgroups gmane.comp.version-control.cvs.gui.devel
Organization Ing.Büro Richard Wirth
Message-ID <[email protected]>
Hello Guy,

Friday, March 10, 2006, 8:29:31 PM, you wrote:

---
GR>
GR>  Hmmm, curious.  From Jens reply, it's not cvsnt that is prompting for
GR>  the password, but rather SSH after cvsnt has passed the request on to
GR>  it.  The situation may be a little different in Windows, since SSH is
GR>  not a native protocol there.

In cvsnt on windows platform ssh is a build in protocol and handled
most the same way like the other protocols are.

In *nix environments ssh is a separate process and handles the
password request itself.
The password-prompt-dialog on gCvs is the standard ssh-askpass dialog
which comes whith the systems implementation.
If you want your password cached for future use ssh-agent is used.

----
GR>
GR>  I'm curious how the Windows implementation is working.  You
GR>  say that WinCvs pops up a password prompt for SSH.  I'm guessing it 
GR>  gives it back to cvsnt, which then fires up cvsagent to remember it.

No, cvsnt uses putty-code to implement the ssh-protocoll. So the
interface to cvsagent is the same as for other password requiering
protocolls.

if on unix the password prompt is displayed in a command window, it
comes because ssh detects the involved process has a console attached
(stdin and stdout are tty). If there is no console attached, the
ssh invoces ssh-askapss to query the users password.

So there is no way in catching the password dialog from ssh. If this
whould be possible, one could intercept the dialog and log the users
password.

-- 
Best regards,
 Richard                            mailto:[email protected]



 
Yahoo! Groups Links

<*> To visit your group on the web, go to:
    http://groups.yahoo.com/group/cvsgui-dev/

<*> To unsubscribe from this group, send an email to:
    [email protected]

<*> Your use of Yahoo! Groups is subject to:
    http://docs.yahoo.com/info/terms/