[
https://issues.apache.org/jira/browse/SSHD-1014?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Rohini Jori updated SSHD-1014:
------------------------------
Description:
*Question:*
Wanted to know why the 'handleClientPasswordChangeRequest' method is working
with 'sshd-core-2.3.0' jar and not with the 'sshd-core-2.3.1' jar?
*Description*:
In case of password change request, the authenticate method of
PasswordAuthenticator class throws the 'PasswordChangeRequiredException'
which will internally calls 'handleClientPasswordChangeRequest' method where
the password is changed for the user.
Method calls sequence-
1. PasswordAuthenticator.authenticate()
2. authenticate() method throws PasswordChangeRequiredException.
3. UserAuthPassword.checkPassword()
4. UserAuthPassword.handlePasswordChangeRequest()
5. shows the prompt to get the new password from user. Then click ok.
6. UserAuthPassword.handleClientPasswordChangeRequest() - change old password.
*So the problem* is that when we used the sshd-core-2.3.1 jar, The
'handleClientPasswordChangeRequest' is not getting called after we receive the
password-change request.
But When we used the 'sshd-core-2.3.0' jar the
'handleClientPasswordChangeRequest' method is getting called and also the
password changed successfully.
But after that we got the problem in authentication. we get the
'authentication failed' error.
I have attached the logs & image for reference.
was:
*Question:*
Wanted to know why the 'handleClientPasswordChangeRequest' method is working
with 'sshd-core-2.3.0' jar and not with the 'sshd-core-2.3.1' jar?
In case of password change request, the authenticate method of
PasswordAuthenticator class throws the 'PasswordChangeRequiredException'
which will internally calls 'handleClientPasswordChangeRequest' method where
the password is changed for the user.
Method calls sequence-
1. PasswordAuthenticator.authenticate()
2. authenticate() method throws PasswordChangeRequiredException.
3. UserAuthPassword.checkPassword()
4. UserAuthPassword.handlePasswordChangeRequest()
5. shows the prompt to get the new password from user. Then click ok.
6. UserAuthPassword.handleClientPasswordChangeRequest() - change old password.
*So the problem* is that when we used the sshd-core-2.3.1 jar, The
'handleClientPasswordChangeRequest' is not getting called after we receive the
password-change request.
But When we used the 'sshd-core-2.3.0' jar the
'handleClientPasswordChangeRequest' method is getting called and also the
password changed successfully.
But after that we got the problem in authentication. we get the
'authentication failed' error.
I have attached the logs & image for reference.
> Password Change Request - 'handleClientPasswordChangeRequest' not getting
> called with the sshd-core-2.3.1 jar version used.
> ---------------------------------------------------------------------------------------------------------------------------
>
> Key: SSHD-1014
> URL: https://issues.apache.org/jira/browse/SSHD-1014
> Project: MINA SSHD
> Issue Type: Bug
> Reporter: Rohini Jori
> Priority: Major
> Attachments: Normal-Login-LOGS.txt, error1.png,
> handleClientPasswordChange CODE.txt, password-change-Request- LOGS.txt
>
>
> *Question:*
> Wanted to know why the 'handleClientPasswordChangeRequest' method is working
> with 'sshd-core-2.3.0' jar and not with the 'sshd-core-2.3.1' jar?
> *Description*:
> In case of password change request, the authenticate method of
> PasswordAuthenticator class throws the 'PasswordChangeRequiredException'
> which will internally calls 'handleClientPasswordChangeRequest' method where
> the password is changed for the user.
> Method calls sequence-
> 1. PasswordAuthenticator.authenticate()
> 2. authenticate() method throws PasswordChangeRequiredException.
> 3. UserAuthPassword.checkPassword()
> 4. UserAuthPassword.handlePasswordChangeRequest()
> 5. shows the prompt to get the new password from user. Then click ok.
> 6. UserAuthPassword.handleClientPasswordChangeRequest() - change old
> password.
>
>
> *So the problem* is that when we used the sshd-core-2.3.1 jar, The
> 'handleClientPasswordChangeRequest' is not getting called after we receive
> the password-change request.
>
> But When we used the 'sshd-core-2.3.0' jar the
> 'handleClientPasswordChangeRequest' method is getting called and also the
> password changed successfully.
> But after that we got the problem in authentication. we get the
> 'authentication failed' error.
> I have attached the logs & image for reference.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
