Page MenuHomePhabricator

Add an optional "--sshd-key" argument to "bin/ssh-auth" for reading "%k" from modern sshd
ClosedPublic

Authored by epriestley on Oct 29 2019, 12:49 AM.
Tags
None
Referenced Files
Unknown Object (File)
Thu, Apr 11, 9:05 AM
Unknown Object (File)
Mon, Apr 1, 10:00 PM
Unknown Object (File)
Dec 27 2023, 1:18 PM
Unknown Object (File)
Dec 22 2023, 6:22 PM
Unknown Object (File)
Dec 22 2023, 2:46 AM
Unknown Object (File)
Dec 21 2023, 2:49 PM
Unknown Object (File)
Dec 19 2023, 8:27 AM
Unknown Object (File)
Dec 17 2023, 6:35 AM
Subscribers
None

Details

Summary

Depends on D20873. Ref T13436. Allow callers to configure "bin/ssh-auth --sshd-key %k" as an "AuthorizedKeysCommand"; if they do, and we recognize the key, emit just that key in the output.

Test Plan
  • Used git pull locally, still worked fine.
  • Instrumented things, saw the public key lookup actually work and emit a single key.
  • Ran without "--sshd-key", got a full key list as before.

Diff Detail

Repository
rP Phabricator
Lint
Lint Not Applicable
Unit
Tests Not Applicable