--- UserAuthPassword.java.old	2011-10-20 17:51:32.000000000 -0600
+++ UserAuthPassword.java	2011-12-06 21:36:32.000000000 -0700
@@ -31,6 +31,7 @@
 
 class UserAuthPassword extends UserAuth{
   private final int SSH_MSG_USERAUTH_PASSWD_CHANGEREQ=60;
+  private final int MAX_ATTEMPTS_USERAUTH_FAILURE=6;
 
   public boolean start(Session session) throws Exception{
     super.start(session);
@@ -42,7 +43,7 @@
     }
 
     try{
-
+    int userauthfailurecount = 0;
     while(true){
       if(password==null){
 	if(userinfo==null){
@@ -157,7 +158,12 @@
 	  if(partial_success!=0){
 	    throw new JSchPartialAuthException(Util.byte2str(foo));
 	  }
-	  break;
+      userauthfailurecount++;
+	  if(userauthfailurecount>=MAX_ATTEMPTS_USERAUTH_FAILURE) {
+        return false;
+      } else {
+        break;
+      }
 	}
 	else{
           //System.err.println("USERAUTH fail ("+buf.getCommand()+")");