type authResult … const authFailure … const authPartialSuccess … const authSuccess … // clientAuthenticate authenticates with the remote server. See RFC 4252. func (c *connection) clientAuthenticate(config *ClientConfig) error { … } func contains(list []string, e string) bool { … } type AuthMethod … type noneAuth … func (n *noneAuth) auth(session []byte, user string, c packetConn, rand io.Reader, _ map[string][]byte) (authResult, []string, error) { … } func (n *noneAuth) method() string { … } type passwordCallback … func (cb passwordCallback) auth(session []byte, user string, c packetConn, rand io.Reader, _ map[string][]byte) (authResult, []string, error) { … } func (cb passwordCallback) method() string { … } // Password returns an AuthMethod using the given password. func Password(secret string) AuthMethod { … } // PasswordCallback returns an AuthMethod that uses a callback for // fetching a password. func PasswordCallback(prompt func() (secret string, err error)) AuthMethod { … } type publickeyAuthMsg … type publicKeyCallback … func (cb publicKeyCallback) method() string { … } func pickSignatureAlgorithm(signer Signer, extensions map[string][]byte) (MultiAlgorithmSigner, string, error) { … } func (cb publicKeyCallback) auth(session []byte, user string, c packetConn, rand io.Reader, extensions map[string][]byte) (authResult, []string, error) { … } // validateKey validates the key provided is acceptable to the server. func validateKey(key PublicKey, algo string, user string, c packetConn) (bool, error) { … } func confirmKeyAck(key PublicKey, c packetConn) (bool, error) { … } // PublicKeys returns an AuthMethod that uses the given key // pairs. func PublicKeys(signers ...Signer) AuthMethod { … } // PublicKeysCallback returns an AuthMethod that runs the given // function to obtain a list of key pairs. func PublicKeysCallback(getSigners func() (signers []Signer, err error)) AuthMethod { … } // handleAuthResponse returns whether the preceding authentication request succeeded // along with a list of remaining authentication methods to try next and // an error if an unexpected response was received. func handleAuthResponse(c packetConn) (authResult, []string, error) { … } func handleBannerResponse(c packetConn, packet []byte) error { … } type KeyboardInteractiveChallenge … // KeyboardInteractive returns an AuthMethod using a prompt/response // sequence controlled by the server. func KeyboardInteractive(challenge KeyboardInteractiveChallenge) AuthMethod { … } func (cb KeyboardInteractiveChallenge) method() string { … } func (cb KeyboardInteractiveChallenge) auth(session []byte, user string, c packetConn, rand io.Reader, _ map[string][]byte) (authResult, []string, error) { … } type retryableAuthMethod … func (r *retryableAuthMethod) auth(session []byte, user string, c packetConn, rand io.Reader, extensions map[string][]byte) (ok authResult, methods []string, err error) { … } func (r *retryableAuthMethod) method() string { … } // RetryableAuthMethod is a decorator for other auth methods enabling them to // be retried up to maxTries before considering that AuthMethod itself failed. // If maxTries is <= 0, will retry indefinitely // // This is useful for interactive clients using challenge/response type // authentication (e.g. Keyboard-Interactive, Password, etc) where the user // could mistype their response resulting in the server issuing a // SSH_MSG_USERAUTH_FAILURE (rfc4252 #8 [password] and rfc4256 #3.4 // [keyboard-interactive]); Without this decorator, the non-retryable // AuthMethod would be removed from future consideration, and never tried again // (and so the user would never be able to retry their entry). func RetryableAuthMethod(auth AuthMethod, maxTries int) AuthMethod { … } // GSSAPIWithMICAuthMethod is an AuthMethod with "gssapi-with-mic" authentication. // See RFC 4462 section 3 // gssAPIClient is implementation of the GSSAPIClient interface, see the definition of the interface for details. // target is the server host you want to log in to. func GSSAPIWithMICAuthMethod(gssAPIClient GSSAPIClient, target string) AuthMethod { … } type gssAPIWithMICCallback … func (g *gssAPIWithMICCallback) auth(session []byte, user string, c packetConn, rand io.Reader, _ map[string][]byte) (authResult, []string, error) { … } func (g *gssAPIWithMICCallback) method() string { … }
Codebase Browser
kubernetes