Bug 1779

Summary: SSH does not honor request to surpress echo for passwords
Product: Portable OpenSSH Reporter: Mike <sshbugzilla10>
Component: sshAssignee: Assigned to nobody <unassigned-bugs>
Status: CLOSED WORKSFORME    
Severity: minor CC: djm
Priority: P2    
Version: 5.2p1   
Hardware: All   
OS: All   

Description Mike 2010-06-10 07:48:42 AEST
I've tried this on multiple versions of SSH, but the most recent is 5.2p1, tested on Linux and Solaris.

When passing a command on the command line that requires a secondary password, ssh echos the password to the console.

For example:
ssh me@example.com "mysqldump -u root -p mysql" > file.sql

Will result in asking me for the ssh password correctly and then echoing the mysql password to the console.  I believe it should not do that.
Comment 1 Damien Miller 2010-06-10 13:26:37 AEST
This behaviour is expected.

When you specify a command on the ssh command-line you turn off TTY allocation, which is necessary to suppress keyboard echo. You can force the use of a TTY using the -t flag to ssh.
Comment 2 Damien Miller 2011-01-24 12:33:30 AEDT
Move resolved bugs to CLOSED after 5.7 release