Hi,

 

I am doing a FileUpload operation through my web application which is
running inside a tomcat engine on a Linux server. Basically we select a
file from a client machine by browsing & selecting the file in a html
page. The URL of the server along with the user credentials are
mentioned in the source of the editable html page. Then we click on the
submit button. Then we click on the submit button & then our business
logic transfers the file from the windows client machine to the Linux
server. The file could be of any type such as text file, image file or a
zip file.

 

But strangely this operation is a succeeding for user "A" where as is
failing for user "B". Both the user A & B has the read & write
permissions on the destination directory on the server where the file is
getting uploaded. I am seeing the following error messages in the
application's log

 

 

2011-06-27 16:17:23,472 [catalina-exec-237] ERROR
com.altair.gw.aif.servlets.Upload (Upload.java:625) - File upload
exception: java.util.concurrent.ExecutionException:
javax.security.auth.login.FailedLoginException: Authentication failed:
javax.security.auth.login.LoginException: Authentication Failed: SSH
connect failed: com.jcraft.jsch.JSchException: Session.connect:
java.io.IOException: invalid data

com.altair.gw.aif.exceptions.NotAuthorizedException:
java.util.concurrent.ExecutionException:
javax.security.auth.login.FailedLoginException: Authentication failed:
javax.security.auth.login.LoginException: Authentication Failed: SSH
connect failed: com.jcraft.jsch.JSchException: Session.connect:
java.io.IOException: invalid data

        at
com.altair.gw.aif.applications.utils.SecurityUtils.verifyPrincipal(Secur
ityUtils.java:222)

 

 

Both the users are able to do SSH login to the server machine through
command line

 

Help Needed to fix this issue.

 

Thanks

Ayasaknt-

------------------------------------------------------------------------------
All of the data generated in your IT infrastructure is seriously valuable.
Why? It contains a definitive record of application performance, security 
threats, fraudulent activity, and more. Splunk takes this data and makes 
sense of it. IT sense. And common sense.
http://p.sf.net/sfu/splunk-d2d-c2
_______________________________________________
JSch-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/jsch-users

Reply via email to