Objective-C

SSH Auth Failure Reason (AuthenticatePwPk)

See more SSH Examples

This example demonstrates how to determine the failure reason for the case where both a password and private key are required for authentication. If authentication fails, was it because of an invalid private key, or an invalid password? Objective-C

#import <CkoSshKey.h>
#import <CkoSsh.h>
#import <CkoJsonObject.h>

BOOL success = NO;

// This example assumes the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

// Load a private key to be used for SSH authentication.
CkoSshKey *key = [[CkoSshKey alloc] init];
key.Password = @"key_password";

success = [key FromOpenSshPrivateKey: [key LoadText: @"qa_data/my_private_key_file"]];
if (success == NO) {
    NSLog(@"%@",key.LastErrorText);
    return;
}

CkoSsh *ssh = [[CkoSsh alloc] init];

success = [ssh Connect: @"ssh.example.com" port: [NSNumber numberWithInt: 22]];
if (success == NO) {
    NSLog(@"%@",ssh.LastErrorText);
    return;
}

// Authenticate using both a password and private key.
success = [ssh AuthenticatePwPk: @"myLogin" password: @"myPassword" privateKey: key];
if (success == YES) {
    NSLog(@"%@",@"Authentication is successful!");
    return;
}

// If we get here, it means the authentication failed.
// Examine the last JSON data to get information..

CkoJsonObject *json = [[CkoJsonObject alloc] init];
[ssh GetLastJsonData: json];

json.EmitCompact = NO;

// This is the JSON if the key is correct, but the password is incorrect:

// {
//   "public_key_type": "rsa",
//   "partialAuthResult": "publickey success. continue to authenticate with password...",
//   "authResult": "failed",
//   "authFailReason": "Password is incorrect"
// }

// This is the JSON if the key is incorrect.  We won't know if the password is also incorrect until
// the key is made correct so that authentication proceeds to check the password.

// {
//   "public_key_type": "rsa",
//   "authResult": "failed",
//   "authFailReason": "Key is incorrect"
// }

// To get the authResult anbd authFailReason:
NSLog(@"%@%@",@"authResult: ",[json StringOf: @"authResult"]);
NSLog(@"%@%@",@"authFailReason: ",[json StringOf: @"authFailReason"]);