Page MenuHomePhabricator

Add an optional "--sshd-key" argument to "bin/ssh-auth" for reading "%k" from modern sshd
ClosedPublic

Authored by epriestley on Oct 29 2019, 12:49 AM.
Tags
None
Referenced Files
F18610585: D20874.diff
Sun, Sep 14, 5:07 AM
F18571018: D20874.id49763.diff
Wed, Sep 10, 4:17 AM
F18571016: D20874.id49761.diff
Wed, Sep 10, 4:17 AM
F18567494: D20874.id.diff
Tue, Sep 9, 3:50 PM
F18207398: D20874.id49761.diff
Aug 18 2025, 6:29 PM
F18189881: D20874.id49763.diff
Aug 16 2025, 10:39 PM
F18100776: D20874.id.diff
Aug 9 2025, 12:04 PM
F18063933: D20874.id.diff
Aug 4 2025, 1:18 PM
Subscribers
None

Details

Summary

Depends on D20873. Ref T13436. Allow callers to configure "bin/ssh-auth --sshd-key %k" as an "AuthorizedKeysCommand"; if they do, and we recognize the key, emit just that key in the output.

Test Plan
  • Used git pull locally, still worked fine.
  • Instrumented things, saw the public key lookup actually work and emit a single key.
  • Ran without "--sshd-key", got a full key list as before.

Diff Detail

Repository
rP Phabricator
Branch
ssh-auth2
Lint
Lint Passed
SeverityLocationCodeMessage
Advicescripts/ssh/ssh-auth.php:7XHP16TODO Comment
Unit
No Test Coverage
Build Status
Buildable 23590
Build 32425: Run Core Tests
Build 32424: arc lint + arc unit