Java

Start SSH Tunnel Keyboard-Interactive Authentication

Demonstrates the Chilkat SshTunnel.StartKeyboardAuth method, which begins keyboard-interactive authentication. The only argument is the login name. It returns XML describing the server's prompts, which are answered with ContinueKeyboardAuth.

Background: Keyboard-interactive is the prompt-driven authentication method: the server sends one or more questions — a password, a one-time code, a security question — and the client answers each. This is how a tunnel supports two-factor and other challenge-response schemes. The returned XML says exactly what to ask and whether to mask the input.

Chilkat Java Downloads

Download Chilkat for Java

Chilkat2 Java

import com.chilkatsoft.chilkat2.ChilkatException;
import com.chilkatsoft.chilkat2.SshTunnel;

public class ChilkatExample {

    public static void main(String[] args) {
        // Demonstrates the SshTunnel.StartKeyboardAuth method, which begins keyboard-interactive
        // authentication.  The only argument is the login name.  It returns XML describing the server's
        // prompts, which are answered with ContinueKeyboardAuth.

        SshTunnel tunnel = new SshTunnel();

        // The tunnel forwards accepted local connections to this destination through the SSH server.
        tunnel.setDestHostname("db.internal.example.com");
        tunnel.setDestPort(5432);

        // Connect to the SSH server.  This performs the TCP/proxy connection and SSH handshake, but
        // does not authenticate yet.
        int sshPort = 22;
        String infoRequestXml;
        try {
            tunnel.connect("ssh.example.com", sshPort);

            // Begin keyboard-interactive authentication.  The returned XML describes the server's prompts.
            infoRequestXml = tunnel.startKeyboardAuth("mySshLogin");
        } catch (ChilkatException e) {
            System.out.println(e.getLastErrorText());
            return;
        }

        System.out.println(infoRequestXml);

        // Answer the prompt(s) with ContinueKeyboardAuth, then call BeginAccepting.

        boolean waitForThreadExit = true;
        try {
            tunnel.closeTunnel(waitForThreadExit);
        } catch (ChilkatException e) {
            System.out.println(e.getLastErrorText());
            return;
        }
    }
}