Page MenuHomePhabricator

Add an optional "--sshd-key" argument to "bin/ssh-auth" for reading "%k" from modern sshd
ClosedPublic

Authored by epriestley on Oct 29 2019, 12:49 AM.
Tags
None
Referenced Files
F15440433: D20874.id49761.diff
Wed, Mar 26, 12:50 PM
F15433047: D20874.id49761.diff
Mon, Mar 24, 9:07 PM
F15431509: D20874.id.diff
Mon, Mar 24, 12:41 PM
F15419693: D20874.diff
Fri, Mar 21, 8:07 AM
F15415275: D20874.diff
Thu, Mar 20, 5:09 AM
F15404550: D20874.diff
Mar 18 2025, 8:13 AM
F15404003: D20874.id.diff
Mar 18 2025, 5:50 AM
F15361301: D20874.id49763.diff
Mar 11 2025, 12:11 PM
Subscribers
None

Details

Summary

Depends on D20873. Ref T13436. Allow callers to configure "bin/ssh-auth --sshd-key %k" as an "AuthorizedKeysCommand"; if they do, and we recognize the key, emit just that key in the output.

Test Plan
  • Used git pull locally, still worked fine.
  • Instrumented things, saw the public key lookup actually work and emit a single key.
  • Ran without "--sshd-key", got a full key list as before.

Diff Detail

Repository
rP Phabricator
Lint
Lint Not Applicable
Unit
Tests Not Applicable