Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Howto create Tunnel with ssh password #54

Closed
ghost opened this issue Sep 21, 2017 · 5 comments
Closed

Howto create Tunnel with ssh password #54

ghost opened this issue Sep 21, 2017 · 5 comments

Comments

@ghost
Copy link

ghost commented Sep 21, 2017

Hi, I have SSH username and password - is there currently any way how to authenticate ssh tunnel with password? I don't know - overriding something, creating some objects by myself, etc? I'd really need to pass the password to connect. Any hints would be useful.

Thanks

@lordmauve
Copy link
Owner

lordmauve commented Sep 25, 2017

Chopsticks has no plans to support password authentication. The solution is always to use password-less SSH, ie. by using your password to set up a cryptographic identity.

Issue #45 tracks writing some documentation about how to do this, but a basic configuration would be a little like this, and takes about 5 minutes to set up.

@meshy
Copy link

meshy commented Sep 25, 2017

One of the things that I would hope to configure on a server would be passwordless SSH, and chopsticks seems like it would be a great tool for setting up servers in that way.

Having no way to authenticate with a password means that that first step needs to be done manually. Is there any possible workaround for this that would allow for chopsticks to be used for that initial bootstrap step?

@meshy
Copy link

meshy commented Sep 25, 2017

I'm sorry, I should have read your link before posting.

It looks like this can be done with a simple ssh-copy-id command before commencing -- that's good enough for my purposes :)

@lordmauve
Copy link
Owner

Many cloud providers can be configured to drop your SSH identity on all newly created hosts. Because cryptographic authentication is commonplace, and more secure in any case, in my opinion password authentication is not a feature that is important enough, these days, to justify investing time in. I'm also scared of it - I think it's relatively difficult to trick the SSH password prompt into having a dialogue with the Chopsticks process, and it risks being brittle and non-portable even if we succeed.

@lordmauve
Copy link
Owner

According to stack exchange, if you really must do this there's a sshpass program that looks like it would be easy to wrap into a Chopsticks tunnel.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants