Page MenuHomePhabricator

Add an optional "--sshd-key" argument to "bin/ssh-auth" for reading "%k" from modern sshd
ClosedPublic

Authored by epriestley on Oct 29 2019, 12:49 AM.
Tags
None
Referenced Files
F18827504: D20874.id.diff
Fri, Oct 24, 10:31 AM
F18822595: D20874.diff
Thu, Oct 23, 7:38 AM
F18807062: D20874.id.diff
Sat, Oct 18, 10:50 PM
F18790515: D20874.id49761.diff
Oct 15 2025, 3:10 PM
F18739697: D20874.id49761.diff
Oct 1 2025, 10:34 PM
F18610585: D20874.diff
Sep 14 2025, 5:07 AM
F18571018: D20874.id49763.diff
Sep 10 2025, 4:17 AM
F18571016: D20874.id49761.diff
Sep 10 2025, 4:17 AM
Subscribers
None

Details

Summary

Depends on D20873. Ref T13436. Allow callers to configure "bin/ssh-auth --sshd-key %k" as an "AuthorizedKeysCommand"; if they do, and we recognize the key, emit just that key in the output.

Test Plan
  • Used git pull locally, still worked fine.
  • Instrumented things, saw the public key lookup actually work and emit a single key.
  • Ran without "--sshd-key", got a full key list as before.

Diff Detail

Repository
rP Phabricator
Lint
Lint Not Applicable
Unit
Tests Not Applicable