-
Notifications
You must be signed in to change notification settings - Fork 1
/
Copy pathkwalletaskpass.1
290 lines (290 loc) · 7.5 KB
/
kwalletaskpass.1
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
.\" $MirOS: contrib/hosted/tg/code/kwalletcli/kwalletaskpass.1,v 1.17 2024/01/05 02:08:51 tg Exp $
.\"-
.\" Copyright © 2009, 2010, 2011, 2016
.\" mirabilos <[email protected]>
.\"
.\" Provided that these terms and disclaimer and all copyright notices
.\" are retained or reproduced in an accompanying document, permission
.\" is granted to deal in this work without restriction, including un‐
.\" limited rights to use, publicly perform, distribute, sell, modify,
.\" merge, give away, or sublicence.
.\"
.\" This work is provided “AS IS” and WITHOUT WARRANTY of any kind, to
.\" the utmost extent permitted by applicable law, neither express nor
.\" implied; without malicious intent or gross negligence. In no event
.\" may a licensor, author or contributor be held liable for indirect,
.\" direct, other damage, loss, or other issues arising in any way out
.\" of dealing in the work, even if advised of the possibility of such
.\" damage or existence of a defect, except proven that it results out
.\" of said person’s immediate fault when using the work as intended.
.\"-
.\" $miros: contrib/samples/portmdoc,v 1.23 2024/01/04 22:52:50 tg Exp $
.\"-
.\" Copyright © 2008, 2009, 2010, 2016, 2018, 2020, 2023
.\" mirabilos <[email protected]>
.\"
.\" Glue GNU groff (BSD and GNU mdoc both) to AT&T nroff (UCB mdoc).
.\" * ` generates ‘ in gnroff, so use \`
.\" * ' generates ’ in gnroff, \' generates ´, so use \*(aq
.\" * - generates ‐ in gnroff, \- generates −, so .tr it to -
.\" thus use - for hyphens and \- for minus signs and option dashes
.\" * ~ is size-reduced and placed atop in groff, so use \*(TI
.\" * ^ is size-reduced and placed atop in groff, so use \*(ha
.\" * \(en does not work in nroff, so use \*(en for a solo en dash
.\" * and \*(EM for a correctly spaced em dash
.\" * <>| are problematic, so redefine and use \*(Lt\*(Gt\*(Ba
.\" Also make sure to use \& *before* a punctuation char that is to not
.\" be interpreted as punctuation, and especially with two-letter words
.\" but also (after) a period that does not end a sentence (“e.g.\&”).
.\"-
.\"
.\" Implement .Dd with the Mdocdate RCS keyword
.\"
.rn Dd xD
.de Dd
.ie \\$1$Mdocdate: \{\
. xD \\$2 \\$3, \\$4
.\}
.el .xD \\$1 \\$2 \\$3
..
.\"
.\" .Dd must come before most everything, because when called
.\" with -mandoc it loads -mdoc via .so in .Dd (first macro).
.\"
.Dd $Mdocdate: January 5 2024 $
.\"
.\" Check which macro package we use, and do other -mdoc setup.
.\"
.ie \n(.g \{\
. if n .ss \n[.ss] 0
. if \*[.T]ascii .tr \-\N'45'
. if \*[.T]latin1 .tr \-\N'45'
. if \*[.T]utf8 .tr \-\N'45'
. if \*[.T]utf8 .tr \(la\*(Lt
. if \*[.T]utf8 .tr \(ra\*(Gt
. ds <= \(<=
. ds >= \(>=
. ds Rq \(rq
. ds Lq \(lq
. ds sL \(aq
. ds sR \(aq
. if \*[.T]utf8 .ds sL `
. if \*[.T]ps .ds sL `
. if \*[.T]utf8 .ds sR '
. if \*[.T]ps .ds sR '
. ds aq \(aq
. ds TI \(ti
. ds ha \(ha
. ds en \(en
. ie d volume-ds-1 .ds tT gnu
. el .ie d doc-volume-ds-1 .ds tT gnp
. el .ds tT bsd
.\}
.el \{\
. ds aq '
. ds TI ~
. ds ha ^
. ds en \(em
. ds tT ucb
.\}
.ie n \{\
. ds EM \ \(em\ \&
.\}
.el \{\
. ds EM \f(TR\|\(em\|\fP
.\}
.\"
.\" Add UCB mdoc compatibility to GNU mdoc
.\" Implement .Mx (MirBSD)
.\"
.ie "\*(tT"gnu" \{\
. ds sP \s0
. ds tN \*[Tn-font-size]
. eo
. de Mx
. nr curr-font \n[.f]
. nr curr-size \n[.ps]
. ds str-Mx \f[\n[curr-font]]\s[\n[curr-size]u]
. ds str-Mx1 \*(tN\%MirBSD\*[str-Mx]
. if !\n[arg-limit] \
. if \n[.$] \{\
. ds macro-name Mx
. parse-args \$@
. \}
. if (\n[arg-limit] > \n[arg-ptr]) \{\
. nr arg-ptr +1
. ie (\n[type\n[arg-ptr]] == 2) \
. ds str-Mx1 \*(tN\%MirBSD\~#\*[arg\n[arg-ptr]]\*[str-Mx]
. el \
. nr arg-ptr -1
. \}
. ds arg\n[arg-ptr] "\*[str-Mx1]
. nr type\n[arg-ptr] 2
. ds space\n[arg-ptr] "\*[space]
. nr num-args (\n[arg-limit] - \n[arg-ptr])
. nr arg-limit \n[arg-ptr]
. if \n[num-args] \
. parse-space-vector
. print-recursive
..
. de Aq
. if !\n[arg-limit] \
. ds macro-name Aq
. ie \n[in-authors-section] \{\
. ds quote-left \*(Lt
. ds quote-right \*(Gt
. \}
. el \{\
. ds quote-left \[la]
. ds quote-right \[ra]
. \}
. enclose-string \$@
..
. ec
.\}
.el .ie "\*(tT"gnp" \{\
. ds sP \s0
. ie t .ds tN \s[(\n[.ps]u-1z)]
. el .ds tN
. eo
. de Mx
. nr doc-curr-font \n[.f]
. nr doc-curr-size \n[.ps]
. ds doc-str-Mx \f[\n[doc-curr-font]]\s[\n[doc-curr-size]u]
. ds doc-str-Mx1 \*(tN\%MirBSD\*[doc-str-Mx]
. if !\n[doc-arg-limit] \
. if \n[.$] \{\
. ds doc-macro-name Mx
. doc-parse-args \$@
. \}
. if (\n[doc-arg-limit] > \n[doc-arg-ptr]) \{\
. nr doc-arg-ptr +1
. ie (\n[doc-type\n[doc-arg-ptr]] == 2) \
. ds doc-str-Mx1 \*(tN\%MirBSD\~#\*[doc-arg\n[doc-arg-ptr]]\*[doc-str-Mx]
. el \
. nr doc-arg-ptr -1
. \}
. ds doc-arg\n[doc-arg-ptr] "\*[doc-str-Mx1]
. nr doc-type\n[doc-arg-ptr] 2
. ds doc-space\n[doc-arg-ptr] "\*[doc-space]
. nr doc-num-args (\n[doc-arg-limit] - \n[doc-arg-ptr])
. nr doc-arg-limit \n[doc-arg-ptr]
. if \n[doc-num-args] \
. doc-parse-space-vector
. doc-print-recursive
..
. ec
.\}
.el \{\
. de Mx
. nr cF \\n(.f
. nr cZ \\n(.s
. ds aa \&\f\\n(cF\s\\n(cZ
. if \\n(aC==0 \{\
. ie \\n(.$==0 \&\\*(tNMirBSD\\*(aa
. el .aV \\$1 \\$2 \\$3 \\$4 \\$5 \\$6 \\$7 \\$8 \\$9
. \}
. if \\n(aC>\\n(aP \{\
. nr aP \\n(aP+1
. ie \\n(C\\n(aP==2 \{\
. nr xX 0
. nr xX 1+\\*(A\\n(aP
. as b1 \&\\*(tNMirBSD\ \&
. if \\n(xX>0 .as b1 #\&
. as b1 \&\\*(A\\n(aP\\*(aa
. rr xX
. ie \\n(aC>\\n(aP \{\
. nr aP \\n(aP+1
. nR
. \}
. el .aZ
. \}
. el \{\
. as b1 \&\\*(tNMirBSD\\*(aa
. nR
. \}
. \}
..
.\}
.\" </MirCVS://contrib/samples/portmdoc>
.\"-
.Dt KWALLETASKPASS 1
.Os
.Sh NAME
.Nm kwalletaskpass
.Nd kwallet-based pass-phrase dialog for use with OpenSSH
.Sh SYNOPSIS
.Nm
.Op Ar options
.Ar label
.Sh DESCRIPTION
.Nm
is a kwallet- and pinentry-based pass-phrase dialog for use with OpenSSH.
It is intended to be called from the
.Xr ssh\-add 1
program and not invoked directly.
.Pp
If a passphrase is requested,
.Nm
works by first looking up the passphrase in the KWallet by means of
.Xr kwalletcli 1 ;
using it if found, then calling
.Xr kwalletcli_getpin 1
to interactively retrieve an answer from the user via
.Nm pinentry
otherwise.
If the user specifies a passphrase,
.Xr kwalletcli_getpin 1
is run again to ask if the passphrase should be stored in the KWallet.
Negative answers will be stored in the KWallet to avoid being asked each time.
.Nm
uses the KWallet folders
.Ic kwalletaskpass
and
.Ic kwalletaskpass\-blacklist
with matching entry names.
.Pp
If anything other than a key passphrase is requested, it is merely relayed to
.Xr kwalletcli_getpin 1 .
Some requests are known to require a boolean answer and are relayed
using the boolean query flag; all others are relayed using a PIN query.
.Xr ssh 1
accepts either the literal word
.Dq yes
.Pq case-insensitively matched
or an empty answer (both only when using the OK button) as confirmation.
.Pp
There are currently no options.
.Sh RETURN VALUES
.Nm
exits 0 on success, 1 if the user cancelled the dialogue,
or \*(Gt1 if an error occurred.
.Sh ENVIRONMENT
.Bl -tag -width PINENTRY
.It Ev DISPLAY
The X11 display to use for child processes.
If this is unset or empty,
.Nm kwalletcli
will not be called.
.It Ev PINENTRY
The
.Nm pinentry
program to use.
The default is inherited from
.Xr kwalletcli_getpin 1 .
.El
.Sh SEE ALSO
.Xr kwalletcli 1 ,
.Xr kwalletcli_getpin 1 ,
.Xr ssh\-add 1 ,
.Xr ssh\-askpass 1
.Sh AUTHORS
.Nm
was written by
.An mirabilos Aq [email protected]
mostly for tarent solutions GmbH.
The idea came from an
.Pa askpass.C
file found somewhere on the 'net, with no author information.
Since it was licenced less freely, this is a rewrite from scratch;
modular and with more functionality, too.