Examples of org.vngx.jsch.userauth.Identity

org.vngx.jsch.userauth.Identity

Interface for defining an SSH identity for performing user authentication and agent forwarding.

The goal of using Identity/Pubkey authentication is to remove the need for static passwords. Instead of providing a password, which could be captured by a keystroke logger or witnessed as you type it, you have a key pair on your disk that you use to authenticate. Your account on the SSH server has a list of Identities/Pubkeys that it trusts, and if you can prove you have the public and private key then you are granted access without supplying a password.

Some of the nice features of this form of authentication are:

No one can shoulder-surf your password and log in to your accounts; they'd need both your Identity passphrase and the private key from your machine.
The server administrator could disable password authentication entirely, to prevent password guessing attacks.
You can use the ssh-agent and SSH agent forwarding to have your authentication credentials 'follow' you.
You can place restrictions on Identities/Pubkeys, for example forbidding port forwards, forcing predetermined commands, regardless of what the user wanted to run, and more.

@author Atsuhiko Yamanaka @author Michael Laudati

      byte[] blob = _readBuffer.getString();
      byte[] data = _readBuffer.getString();
      @SuppressWarnings("unused")
      int flags = _readBuffer.getInt();


      Identity identity = null;
      synchronized ( identities ) {
        for( Identity _identity : identities ) {
          if( _identity.getPublicKeyBlob() == null ) {
            continue;
          }
          if( !Arrays.equals(blob, _identity.getPublicKeyBlob()) ) {
            continue;
          }
          if( _identity.isEncrypted() ) {
            if( userinfo == null ) {
              continue;
            }
            while( _identity.isEncrypted() ) {
              if( !userinfo.promptPassphrase(String.format(MessageConstants.PROMPT_PASSPHRASE, _identity.getName())) ) {
                break;
              }
              String _passphrase = userinfo.getPassphrase();
              if( _passphrase == null ) {
                break;
              }


              byte[] passphrase = Util.str2byte(_passphrase);
              try {
                if( _identity.setPassphrase(passphrase) ) {
                  break;
                }
              } catch(JSchException e) {
                break;
              }
            }
          }


          if( !_identity.isEncrypted() ) {
            identity = _identity;
            break;
          }
        }
      }


      byte[] signature = null;
      if( identity != null ) {
        signature = identity.getSignature(data);
      }


      _messageBuffer.reset();
      if( signature == null ) {
        _messageBuffer.putByte(SSH2_AGENT_FAILURE);

Examples of org.vngx.jsch.userauth.Identity

Related Classes of org.vngx.jsch.userauth.Identity