[tahoe-lafs-trac-stream] [tahoe-lafs] #1411: sftp server does not accept pubkey auth

tahoe-lafs trac at tahoe-lafs.org
Tue Aug 23 17:21:24 PDT 2011


#1411: sftp server does not accept pubkey auth
-------------------------------+---------------------------------
     Reporter:  gdt            |      Owner:  davidsarah
         Type:  enhancement    |     Status:  assigned
     Priority:  major          |  Milestone:  1.10.0
    Component:  code-frontend  |    Version:  1.8.2
   Resolution:                 |   Keywords:  sftp usability fuse
Launchpad Bug:                 |
-------------------------------+---------------------------------

Comment (by warner):

 Looks like the easy half is done: {{{frontends/auth.py}}} parses the
 pubkey lines from the account file and stashes them in the right place.

 The hard half will involve code from {{{twisted/conch/checkers.py}}},
 probably from {{{SSHPublicKeyDatabase._cbRequestAvatarId}}}, specifically
 this bit:

 {{{
 pubKey = keys.Key.fromString(credentials.blob)
 if pubKey.verify(credentials.signature, credentials.sigData):
     return credentials.username
 }}}

 plus some code to make sure we're using the right key for the requested
 username.

-- 
Ticket URL: <http://tahoe-lafs.org/trac/tahoe-lafs/ticket/1411#comment:3>
tahoe-lafs <http://tahoe-lafs.org>
secure decentralized storage


More information about the tahoe-lafs-trac-stream mailing list