LL-LIN opened a new pull request, #3926:
URL: https://github.com/apache/hertzbeat/pull/3926

   The global singleton sshClient was shared across all connections,   causing 
identity (passwords/keys) to accumulate globally.   When with ProxyJump - 
authentication attempts would mix identities from different sessions,   
exceeding the server's MaxAuthTries and triggering   "Too many authentication 
failures".
   
   ## What's changed?
   
   <!-- Describe Your PR Here -->
   
   1. For ProxyJump connections, create a dedicated, short-lived SshClient 
instance per connection to avoid global identity contamination.
   2. Ensure proper lifecycle management: scoped clients are stopped when the 
session closes or on failure.
   
   ## Checklist
   
   - [x]  I have read the [Contributing 
Guide](https://hertzbeat.apache.org/docs/community/code_style_and_quality_guide)
   - [ ]  I have written the necessary doc or comment.
   - [ ]  I have added the necessary unit tests and all cases have passed.
   
   ## Add or update API
   
   - [ ] I have added the necessary [e2e 
tests](https://github.com/apache/hertzbeat/tree/master/e2e) and all cases have 
passed.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to