calderonth commented on issue #650:
URL: https://github.com/apache/mina-sshd/issues/650#issuecomment-2748952180

   Are we sure this is fully fixed @tomaswolf ?
   
   I am using the 2.15.1-SNAPSHOT JAR and I am still not fully able to use ssh 
user certificates against Apache SSHD Mina implementation.
   It seems to work partially but it might be missing something to bubble up 
the fact that authentication has succeeded in the session.
   I am trying to add suppor to gerrit and you can see from the `sshd_log` that 
it successfully authed me with a cert (great) but somehow then `sshd` still 
throws an error complaining about the state.
   
   ```
   ==> /var/tmp/gerrit-site/logs/sshd_log <==
   [2025-03-24T13:39:47.249-04:00] a70ce66f 
[sshd-SshDaemon[687313e1](port=22)-nio2-thread-27] tcalderon a/1000001 LOGIN 
FROM 10.20.91.29
   
   ==> /var/tmp/gerrit-site/logs/error_log <==
   [2025-03-24T13:39:47.342-04:00] 
[sshd-SshDaemon[687313e1](port=22)-nio2-thread-28] WARN  
org.apache.sshd.server.session.ServerUserAuthService : 
handleUserAuthRequestMessage(ServerSessionImpl[null@/10.20.91.29:36060]) Failed 
(IllegalStateException) to authenticate using factory method=publickey: null
   [2025-03-24T13:39:47.343-04:00] 
[sshd-SshDaemon[687313e1](port=22)-nio2-thread-28] WARN  
org.apache.sshd.server.session.ServerUserAuthService : 
handleUserAuthRequestMessage(ServerSessionImpl[null@/10.20.91.29:36060]) Failed 
(IllegalStateException) to authenticate using factory method=publickey: null
   
   ==> /var/tmp/gerrit-site/logs/sshd_log <==
   [2025-03-24T13:39:47.346-04:00] a70ce66f 
[sshd-SshDaemon[687313e1](port=22)-nio2-thread-29] tcalderon a/1000001 LOGOUT
   
   ```
   
   Any insights into what's missing?


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@mina.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@mina.apache.org
For additional commands, e-mail: dev-h...@mina.apache.org

Reply via email to