Bug 1779 - SSH does not honor request to surpress echo for passwords
Summary: SSH does not honor request to surpress echo for passwords
Status: CLOSED WORKSFORME
Alias: None
Product: Portable OpenSSH
Classification: Unclassified
Component: ssh (show other bugs)
Version: 5.2p1
Hardware: All All
: P2 minor
Assignee: Assigned to nobody
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2010-06-10 07:48 AEST by Mike
Modified: 2011-01-24 12:33 AEDT (History)
1 user (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Mike 2010-06-10 07:48:42 AEST 
I've tried this on multiple versions of SSH, but the most recent is 5.2p1, tested on Linux and Solaris.

When passing a command on the command line that requires a secondary password, ssh echos the password to the console.

For example:
ssh me@example.com "mysqldump -u root -p mysql" > file.sql

Will result in asking me for the ssh password correctly and then echoing the mysql password to the console.  I believe it should not do that.
Comment 1 Damien Miller 2010-06-10 13:26:37 AEST 
This behaviour is expected.

When you specify a command on the ssh command-line you turn off TTY allocation, which is necessary to suppress keyboard echo. You can force the use of a TTY using the -t flag to ssh.
Comment 2 Damien Miller 2011-01-24 12:33:30 AEDT 
Move resolved bugs to CLOSED after 5.7 release