whitelist: Allow forcing a username in the pubkey comment field

[patatetom]

hi,

the comment, if present, could it be used as a nickname ? combined with the removal of the /nick command, this could allow the server administrator to set user nicknames...

regards.

[shazow]

Your comments aren't shared with the server, they're just parsed by your ssh client, so there is nothing ssh-chat can do about this.

[shazow]

We have some issues about username registration though that you might like. Please check our existing issues. :)

[patatetom]

I was talking about the comment that can be added at the end of the public key inserted in the white list and maintained by the server administrator (this public key = this nickname).

thanks for ssh-chat.

[shazow]

Oh, you mean for the public key whitelisting feature? That's an interesting idea.

[davidpellerin]

@shazow I believe in ssh-chat, the public keys that admins paste into the whitelist file can't contain the comment typically found in people's public keys? Is that true?

[shazow]

@davidpellerin I don't know off the top of my head, but is there any reason why that can't be fixed either way?

[davidpellerin]

@shazow I think currently I am pasting in public keys without the comments at the end, which makes it confusing to remember who I've whitelisted... I could be wrong about this, but it would be awesome if we could allow those comments to be supported at the end of each line in the whitelist file. Because if I want to revoke a user's access, right now I have to figure out who owns which key.

[shazow]

@davidpellerin Could you confirm it doesn't already work and open an issue for this please?

[davidpellerin]

@shazow Looks like I can't seem to reproduce it! (this is a good thing!) thanks!

[patatetom]

I use these added comments without any problem in my whitelist.

I also have a small script that regenerates the motd from the whitelist entries and restart ssh-chat :

cat ./whitelist 
ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAslc3lKVnC4njbIPc1Ktuz+DKC7I1p+6uskwABo2ALcXdOHSxmimbHc5+uDsXUnVddLP2Gzrbnp4ugvXcEJY3IjrT1MsIEfgACd5dCpMwHGFV7TlZhxXzCXV1DwbwtI5mSNs4olcL6mtuWnal2Ms9LjhEYpojbhwaCe/aTYIRqKGf12FIsi7OF7y+mQW1JXfobl+rhor5ECndVkJx2rx6piLi8kKEkCdHNBjojZ1VTIL5xlkqitRL9nNUfKKHtNWv8v+cYbe7LXnX2vZFC/GHmIEOts9mmF2ftKPRsmR36Ur+Kon+rNFthAqj0s3+4dqv+uyAaAC4K9KCYVooQBdHzQ== Alice
ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAteIlB8GO+H3Okrn7NDgdN4/kjnggyzombFXLbVuzqLLFSXzZvjm3vVzVEEVThMOwzsZBIC0/ZR6DbkuB89TQcOpbVDYAJd7lYFTSyMzdtRD/ahSDIWN1Z9EjAqq3D65Y+ajdbLj2uvVKGVWcu0YkIL6CwHJU0CMTK//BOG7ycdY/nO5lRmG+wZPJsIVIYAPwVdcwesGKGAY4lfcV745IC9eTbUqqUDT8HYaDOEc+wekBetwO0TxutF+iT7lZTdkSLynfnsdBsy3zwrbWqSR+FbMmQH4/mCPALspDz/YjAIw/44sgFB3rESGIsWd9Lw8c0evc0U8bZ9683WFWMrfuXw== Bob

#!/usr/bin/bash
clear > ./motd
printf "\n\033[91mHello\033[0m (/help for help)\n\n" >> ./motd
ssh-keygen -lf ./whitelist | awk '{print substr($2, 8), $3}' | sort -k 2 | tee -a ./motd
systemctl restart ssh-chat

cat ./motd

Hello (/help for help)

w7AYQn3pGt2trXu/MhLsUaruVWqMjSVLcCi/SkRWHNI Alice
53UhutGBzeUi4o5VA4N5vMaiAOsvBkqsFwO96XXWyzM Bob