This function is useful for authenticating website clients against local (or remote) Unix users.
I'd played around with Apache+PAM, various mod_auths and homebrewed shell programs and even NIS, but to authenticate a user against a Unix shadow file fundamentally requires root priviledges, so either your PHP script needs root or an external program needs it's sticky bit set. Both of these have *serious* security implications.
Using SSH, the overhead is obviously going to be greater but you're trusting a root service that's been (and continues to be) really well tested. Just try authing with SSH against localhost (or another host if you want).
ssh2_auth_password
(PECL ssh2 >= 0.9.0)
ssh2_auth_password — Identification via SSH en utilisant un mot de passe en clair
Description
bool ssh2_auth_password
( resource
$session
, string $username
, string $password
)Identification via SSH en utilisant un mot de passe en clair. Depuis la version 0.12, cette fonction supporte également la méthode keyboard_interactive.
Liste de paramètres
-
session -
Un identifiant de connexion SSH, obtenu depuis la fonction ssh2_connect().
-
username -
Nom d'utilisateur distant.
-
password -
Mot de passe pour l'utilisateur
username.
Valeurs de retour
Cette fonction retourne TRUE en cas de
succès ou FALSE si une erreur survient.
Exemples
Exemple #1 Identification avec un mot de passe
<?php
$connection = ssh2_connect('shell.example.com', 22);
if (ssh2_auth_password($connection, 'username', 'secret')) {
echo "Identification réussi !\n";
} else {
die('Echec de l\'identification...');
}
?>
wally at soggysoftware dot co dot uk ¶
6 years ago
noels01 at gmx dot net ¶
7 years ago
Do not try to authenticate or log in more than once on a ssh2 connection. It won't work. You'll need a new connection via ssh2_connect() which will result in a poor performance if you're doing several connects to the same server.
