Neil Culver created SSHD-231:
--------------------------------

             Summary: Failed authentication method isnt removed from list of 
allowed methods
                 Key: SSHD-231
                 URL: https://issues.apache.org/jira/browse/SSHD-231
             Project: MINA SSHD
          Issue Type: Bug
    Affects Versions: 0.7.0
            Reporter: Neil Culver
            Priority: Minor


Hi,
    Whilst investigating an authentication problem with a client connection 
I've noticed that the code which removes failed authentication methods from the 
list of allowed methods always specifies "none",  instead of the actual method 
which failed.  

Code from ServerSession.userAuth method :

                NamedFactory.Utils.remove(userAuthFactories, "none"); // 'none' 
MUST NOT be listed

instead I would expect the actual method to be removed,  i.e. :

                NamedFactory.Utils.remove(userAuthFactories, method); 

I'm not sure if this is by design or not ? 

Thanks

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Reply via email to