Method createGSSAPIConfig

internal/sshserver/serverImpl.go:384–427

(
	connectionMetadata metadata.ConnectionMetadata,
	handlerNetworkConnection *networkConnectionWrapper,
	logger log.Logger,
)

}

func (s *serverImpl) createGSSAPIConfig(
	connectionMetadata metadata.ConnectionMetadata,
	handlerNetworkConnection *networkConnectionWrapper,
	logger log.Logger,
) *ssh.GSSAPIWithMICConfig {
	var gssConfig *ssh.GSSAPIWithMICConfig

	gssServer := handlerNetworkConnection.OnAuthGSSAPI(connectionMetadata)
	if gssServer != nil {
		gssConfig = &ssh.GSSAPIWithMICConfig{
			AllowLogin: func(conn ssh.ConnMetadata, srcName string) (*ssh.Permissions, error) {
				if !gssServer.Success() {
					if gssServer.Error() == nil {
						return nil, messageCodes.NewMessage(
							messageCodes.ESSHAuthFailed,
							"Authentication failed",
						)
					}
					return nil, gssServer.Error()
				}

				authenticating := connectionMetadata.StartAuthentication(string(conn.ClientVersion()), conn.User())
				authenticated, err := gssServer.AllowLogin(conn.User(), authenticating)
				if err != nil {
					return nil, s.wrapAndLogAuthFailure(logger, authenticating, "GSSAPI", err)
				}
				handlerNetworkConnection.authenticatedMetadata = authenticated
				s.logAuthSuccessful(logger, authenticated, "GSSAPI")

				marshaledMetadata, err := json.Marshal(authenticated)
				if err != nil {
					return nil, err
				}
				return &ssh.Permissions{
					Extensions: map[string]string{
						"containerssh-metadata": string(marshaledMetadata),
					},
				}, err
			},
			Server: gssServer,
		}
	}
	return gssConfig
}

func (s *serverImpl) createKeyboardInteractiveCallback(
	connectionMetadata metadata.ConnectionMetadata,