RE: Looking for SSH authorized_keys cookie for CVS

[Douglas Finkle]

> On Thu, Feb 14, 2002 at 06:33:18PM -0500, Douglas Finkle wrote:
> > Thoughts, references, examples?  
> 
> Don't know if this will help, but here's a key I use for
> port-forwarding a pop3 connection to give you an idea of the general
> format:
> 
> command="sleep 
> 10",no-X11-forwarding,no-agent-forwarding,no-pty ssh-dss AAAAB3Nz
> [more pubkey lines]
> DSHxqmbVujg= Pop Forwarding
> 
> Basically, you just specify options before the key. You might not be
> able to do what you want, as the I think the command must be matched
> exactly, and I expect that cvs issues lots of different commands.
> 
> Steve


Thanks, Steve.  I'm using F-Secure SSH2-- does your example work for 
protocol v2, or are you using SSH1?

In SSH2 the keys look quite different:

Here's a public key I can use to authenticate my login.  Where would
your command string be inserted?

---- BEGIN SSH2 PUBLIC KEY ----
Subject: dfinkle
Comment: "1024-bit dsa, address@hidden, Thu Feb 14 2002 23:19:40"
AAAAB3NzaC1kc3MAAACBAKHEapFhmpEYhnhudsanshusisadiudsans2MiObsyCOs8wtT8
... more key hash ...
3nMyjZfcYF1caq5M0JDY69+PMZJtjsadhudsdsdsadsaSRjuO9tKz7ESGAeZL84vuGK3Qc
yFsB8AMEN6xaG4JSuxw=
---- END SSH2 PUBLIC KEY ----


In SSH1 I think this is the syntax, but as you see the key is quite
different in this example.  Also, I did manage to fins that the CVS's
magic command is "cvs server".  Now for how to shove it into SSH2...

command="cvs server" 1024 35 117026948781 ...more hash ...486938847
address@hidden