tomaswolf opened a new issue, #533:
URL: https://github.com/apache/mina-sshd/issues/533

   ### Version
   
   master
   
   ### Bug description
   
   (Split from #531)
   
   `ClientUserAuthService` ignores "authentication methods that can continue" 
on SSH_MSG_USERAUTH_FAILURE if not a partialSuccess.
   
   ### Actual behavior
   
   Server replies during publickey authentication
   ```
   SSH_MSG_USERAUTH_FAILURE - partial=false, methods=password
   ```
   Client continues with publickey authentication all the same:
   ```
   send SSH_MSG_USERAUTH_REQUEST request publickey type=rsa-sha2-256 - 
fingerprint=...
   ```
   
   
   ### Expected behavior
   
   Client should switch to password authentication, and not continue with 
publickey authentication.
   
   ### Relevant log output
   
   _No response_
   
   ### Other information
   
   This may be related to 
[SSHD-1229](https://issues.apache.org/jira/browse/SSHD-1229). There is another, 
related problem in `ClientUserAuthService`, which may have been what prompted 
the report in SSHD-1229: if a server is configured to require multiple 
authentications and "publickey" is mentioned more than once (for instance 
`AuthenticationMethods publickey,publickey`: user has to authenticate with two 
different keys), `ClientUserAuthService` misbehaves and tries the first key 
again.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@mina.apache.org.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@mina.apache.org
For additional commands, e-mail: dev-h...@mina.apache.org

Reply via email to