openssh unix dev - Mar 2004 - Feature request

Hi,

I have a small problem, I want to specify the SSH password via the command
line:


root at bla:~# ssh -dmypassword user at host

I know this is insecure and normally it is better to use key based
authentication to log into the remote system without specifying a password,
but in my case, this is not a possibility.

So would you accept a patch to add a new command line option (suggestion: -d)
to specify a password directly on the command line?

This option would of course only be enabled if the configure script has been
called with a special option (--with-insecure-cl-pass for example).

We also could use a ":" to separate the username and the password:

root at bla:~# ssh -l user:password host


Please reply off-list, because I'm not subscribed.


Thank you,
Martin Kluge
-- 
Name      : Martin Kluge
email     : martin at elxsi.info
Phone     : +49 160 1515182
Projects  : http://www.aa-security.de
GPG Key   : http://www.elxsi.de/key.pub

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url :
http://lists.mindrot.org/pipermail/openssh-unix-dev/attachments/20040314/1d2d9008/attachment.bin

On Sun, Mar 14, 2004 at 05:55:13PM +0100, Martin Kluge
wrote:
> So would you accept a patch to add a new command line option
> (suggestion: -d) to specify a password directly on the command line?
This has been requested before but declined because it promotes insecure
behavior. (Your system may be isolated, but all aren't and it's usually
possible to see any arguments of all processes in the system.)

I seem to remember discussion about accepting the password on a file
descriptor however. Search the mailing list and bugzilla.mindrot.org.


//Peter

Hi Martin,

check this: "http://expect.nist.gov/FAQ.html#q1"


Martin Kluge wrote:
>Hi,
>
>I have a small problem, I want to specify the SSH password via the command
>line:
>
>
>root at bla:~# ssh -dmypassword user at host
>
>[SNIP]
>
>Thank you,
>Martin Kluge
>  
>