(PECL ssh2 >= 0.9.0)
ssh2_auth_password — Authenticate over SSH using a plain password
Authenticate over SSH using a plain password
An SSH connection link identifier, obtained from a call to ssh2_connect().
Remote user name.
Password for username
Gibt bei Erfolg TRUE zurück. Im Fehlerfall wird FALSE zurückgegeben.
Beispiel #1 Authenticating with a password
<?php
$connection = ssh2_connect('shell.example.com', 22);
if (ssh2_auth_password($connection, 'username', 'secret')) {
echo "Authentication Successful!\n";
} else {
die('Authentication Failed...');
}
?>
This function will only work if SSH server has 'password' authentication method enabled.
It won't work if only 'keyboard-interactive' is enabled (is there a way to override this in PHP?).
To check what methods of authentication are alowed, use ssh2_auth_none.
This function is useful for authenticating website clients against local (or remote) Unix users.
I'd played around with Apache+PAM, various mod_auths and homebrewed shell programs and even NIS, but to authenticate a user against a Unix shadow file fundamentally requires root priviledges, so either your PHP script needs root or an external program needs it's sticky bit set. Both of these have *serious* security implications.
Using SSH, the overhead is obviously going to be greater but you're trusting a root service that's been (and continues to be) really well tested. Just try authing with SSH against localhost (or another host if you want).
Do not try to authenticate or log in more than once on a ssh2 connection. It won't work. You'll need a new connection via ssh2_connect() which will result in a poor performance if you're doing several connects to the same server.
The sshd you are trying to connect to requires PasswordAuthentication yes in its sshd_config file.
Most normal SSH features work with this off, but this requires it on. Note, this defaults to off in FreeBSD 5.x