Re: Release Mina SSHD 2.0.0

2018-07-22 Thread elijah baley
SSHD 2.0 is available on Maven Central Note that it is not 100% backward compatible with 1.7 - mainly SFTP, SCP, MINA, Netty, CLI have been extracted into separate m odules For usage see https://github.com/apache/mina-sshd/

Re: SSH server key is not presented to the client

2018-07-13 Thread elijah baley
I don't think there is such a timeout directly, but since the server presenting its key to the client for verification is part of the authentication protocol perhaps you could use the authentication timeout for this purpose. It's not exactly what you want, but it should do the job. This is

Re: [VOTE] Apache Mina 2.0.19

2018-06-08 Thread elijah baley
+1 From: Emmanuel Lécharny Sent: Friday, June 8, 2018 12:24 AM To: dev@mina.apache.org Subject: [VOTE] Apache Mina 2.0.19 Hi ! I'm calling for a vote of Apache MINA 2.0.19 release. This is a fix for the previous release (2.0.18) which broke the API by

Re: possible SSHD-704 fix

2018-03-23 Thread elijah baley
Can you publish this as a PR ? Easier to review and test... From: Juan Antonio Nazabal Urriza Sent: Friday, March 23, 2018 5:20 PM To: dev@mina.apache.org Subject: possible SSHD-704 fix

Re: Apache Mina Error if file owner is found to be blank on remote sftp

2018-03-06 Thread elijah baley
1. Please open a JIRA issue: https://issues.apache.org/jira/ 2. Can you please attach a link + exact quote from the SFTP version 6 protocol specification that states how to handle such a case ? System Dashboard - ASF JIRA - issues.apache.org

Re: mina-sshd git commit: [SSHD-805] Return a clone of the RFC8268 modulu number bytes to avoid inadvertent modification of the shared instance

2018-03-05 Thread elijah baley
> +public static byte[] readOakleyGroup(String name) { > The method was private, but making it public would need just a bit of javadoc explaining the input/output. I don't really see the need, since we have the getP16() and similar methods that are already public though... >> In general in

Re: How to use system proxy for connections in Mina ssh

2018-02-08 Thread elijah baley
I am not sure I understand what you mean by >> If My network under proxy my server and client not working. What do you mean by "proxy" ? SOCKS ? Tunneling ? >> I want to know how to establish a client connection over the proxy. Can >> you please help how to use system proxy for connections

Re: [VOTE] Release Apache Mina SSHD 1.7.0

2018-01-22 Thread elijah baley
>> Note that some dependencies could be bumped up. True (Bouncycastle) but not worth delaying the release for it... From: Emmanuel Lécharny Sent: Monday, January 22, 2018 12:56 PM To: dev@mina.apache.org Subject: Re: [VOTE] Release Apache

Re: [VOTE] Release Apache Mina SSHD 1.7.0

2018-01-11 Thread elijah baley
+1 ... From: Guillaume Nodet Sent: Thursday, January 11, 2018 8:59 PM To: dev@mina.apache.org Subject: [VOTE] Release Apache Mina SSHD 1.7.0 I've staged a candidate release for SSHD 1.7.0. Staging repository:

Re: New release soon

2018-01-11 Thread elijah baley
Any progress ?... From: Emmanuel Lécharny Sent: Thursday, October 26, 2017 3:56 PM To: dev Subject: New release soon Hi guys, I'm going to cut MINA-2.0.17 in the coming days. Just FYI. -- Emmanuel Lecharny Symas.com

Re: Apache Mina SSHD Client Code Example

2018-01-08 Thread elijah baley
* The SSHClient class itself has a main method that can give some ideas how to initialize the code and use it (ditto for SftpCommand and DefaultScpClient) * The https://github.com/apache/mina-sshd/ site has quite a few examples of how to setup client/server code for different purposes

Release 1.7 ?

2017-12-20 Thread elijah baley
I believe we have accumulated a respectable amount of bug fixes and new features to warrant a new release... Anyone else feels the same ?

Re: The heartbeat task of client not support keepalive function well,is it a bug?

2017-10-26 Thread elijah baley
Not a bug - this how heartbeats are sent From: Mei Sent: Thursday, October 26, 2017 2:55 PM To: dev@mina.apache.org; us...@mina.apache.org Subject: The heartbeat task of client not support keepalive function well,is it a bug? The

Re: How to use the heartbeat properly

2017-10-25 Thread elijah baley
1. Please use the latest released version - 1.6.0 >> it only send keepAlive every interal time,but not to check the reply of the >> keepAlive timeout. It cannot check for reply since it is a no-reply request >> how does the client know that the server is available it doesn't have to - the

Re: How does the HeartBeat work?

2017-10-22 Thread elijah baley
You don't even have to set these parameters - there are some defaults that are used anyway (unless you override them). The recommendation is to intervene only if the defaults are not compatible with your needs and/or to disable the features From: mxf

Re: SCPClient upload: FilePermission depends on setting Timestamp

2017-08-05 Thread elijah baley
You seem to have a point - I see no reason why "0644" is chosen if timestamp is not preserved... From: carsten.moel...@fiduciagad.de Sent: Thursday, July 27, 2017 5:55 PM To: dev@mina.apache.org Subject: SCPClient upload:

Re: SFTP Server implementation

2017-07-13 Thread elijah baley
There is not SFTP implementation per-se - all you need to do is to create an SSH server instance, register the SFTP subsystem and start the server. See more details in the https://github.com/apache/mina-sshd/ main page README

Re: [VOTE] Apache Mina SSHD 1.6.0

2017-06-29 Thread elijah baley
+1 - if my vote counts since I wrote a lot of the fixes/features Lyor From: Guillaume Nodet Sent: Thursday, June 29, 2017 12:36 PM To: dev@mina.apache.org Subject: [VOTE] Apache Mina SSHD 1.6.0 I've staged a release for SSHD 1.6.0 at:

Re: Release 1.6 ?

2017-06-27 Thread elijah baley
2017-06-26 18:28 GMT+02:00 elijah baley <e_ba...@outlook.com>: > I was wondering where we are on the (re-)release of 1.6 instead of the > cancelled 1.5. I assume the legal concerns have been addressed, so perhaps > now would be a good time to release 1.6 - especially since we hav

Release 1.6 ?

2017-06-26 Thread elijah baley
I was wondering where we are on the (re-)release of 1.6 instead of the cancelled 1.5. I assume the legal concerns have been addressed, so perhaps now would be a good time to release 1.6 - especially since we have added some useful bug fixes and features.

Re: [VOTE] Release Apache Mina SSHD 1.5.0

2017-05-30 Thread elijah baley
If I may put in my 2 cents - these libraries are declared as optional dependency (see below) net.i2p.crypto eddsa true This also means that they are not packaged - just to make sure , I checked the assembly project ZIP/TAR.GZ

Re: [CANCEL] [VOTE] Release Apache Mina SSHD 1.5.0

2017-05-30 Thread elijah baley
If so, perhaps we can jump and release 1.6 with the latest fixes... From: Guillaume Nodet Sent: Tuesday, May 30, 2017 11:20 AM To: dev@mina.apache.org Subject: [CANCEL] [VOTE] Release Apache Mina SSHD 1.5.0 I'm cancelling this vote to fix the

Re: [VOTE] Release Apache Mina SSHD 1.5.0

2017-05-15 Thread elijah baley
+1 Lyor From: Guillaume Nodet Sent: Monday, May 15, 2017 12:25 PM To: dev@mina.apache.org Subject: [VOTE] Release Apache Mina SSHD 1.5.0 I've staged a release for SSHD 1.5.0. Repository:

Re: [DISCUSS] Release SSHD 1.5.0

2017-05-10 Thread elijah baley
I am all in favor of releasing 1.5 Lyor From: Guillaume Nodet Sent: Wednesday, May 10, 2017 6:14 PM To: dev@mina.apache.org Subject: [DISCUSS] Release SSHD 1.5.0 We've been asked for plans on the 1.5.0 release on the user list. I don't have

Re: Apache MINA SSHd default ShellFactory Chocked the resources

2017-03-08 Thread elijah baley
Sorry, e-mail is not suitable for debugging - Eclipse/Intellij/NetBeans are... From: waseem.farooqui Sent: Wednesday, March 8, 2017 8:05 AM To: dev@mina.apache.org Subject: Re: Apache MINA SSHd default ShellFactory Chocked the

Re: Apache MINA SSHd default ShellFactory Chocked the resources

2017-03-07 Thread elijah baley
You are doing something wrong (just what - is difficult to say) - if you run the code in SshServer#main you can connect several clients - I did it - connected both PUTTY and Ubuntu SSH client to a server running SshServer#main. All that remains is now for you to compare your code with the one

Re: Apache MINA SSHd default ShellFactory Chocked the resources

2017-03-07 Thread elijah baley
Basically the main method of SshServer does all this. It can be run as a standalone server and see that multiple clients can connect to it concurrently From: Guillaume Nodet Sent: Tuesday, March 7, 2017 10:59 AM To: dev@mina.apache.org

Re: Apache MINA SSHd default ShellFactory Chocked the resources

2017-03-06 Thread elijah baley
It seems that you are doing something wrong - e.g., not spawning a new thread for each shell, or using some kind of mutual exclusion mechanism, or using a single threaded thread "pool" - the possibilities are endless. AFAIK the code supports multiple concurrent shell sessions - I doubt

Re: How to handle Ctrl+C and other Sigint

2017-03-02 Thread elijah baley
The answer is very long and complex however here are a few pointers - See Signal(s) and how to register for them - Do some research into reading from the peer input stream and detecting key combinations and/or special characters. From: waseem.farooqui

Re: Apache MINA SSHd default ShellFactory Chocked the resources

2017-03-02 Thread elijah baley
Seems like the wrong way - the SSHDServer is a singleton and should be created only once (!). Please read the documentation on the MINA side about how to set up a server and how to configure command/shell factories. From: waseem.farooqui

Re: Apache MINA SSHd default ShellFactory Chocked the resources

2017-02-27 Thread elijah baley
"I am creating a new Thread for every user but If more than one user connect at the same time I just allow 1 user to enter the command. " How do you do that ? Perhaps the load you are experiencing originates from a malformed exclusion mechanism Also, try using the built-in

Re: Release of SSHD 1.4 ?

2017-02-14 Thread elijah baley
elease of SSHD 1.4 ? Sounds good to me. Do you want to try doing the release ? Else I can give it a try this week. 2017-02-13 18:32 GMT+01:00 elijah baley <e_ba...@outlook.com>: > There are no pending features or bugs that I am aware of that justify > delaying the release. > &g

Release of SSHD 1.4 ?

2017-02-13 Thread elijah baley
There are no pending features or bugs that I am aware of that justify delaying the release. There are many useful features and fixes that are awaited by the users (certainly those that reported them). I recommend we release 1.4 version.

Re: TCP-Connection

2016-10-19 Thread elijah baley
ntation on serverside ) | -> | TCP I hope it's clearer now what I mean. Sorry for the inconvenience and thanks in advance. Best Regards, Chris > On 10 Oct 2016, at 17:06, elijah baley <e_ba...@outlook.com> wrote: > > Please elaborate some more the use-case scenario - I am not sure I u

Re: TCP-Connection

2016-10-10 Thread elijah baley
Please elaborate some more the use-case scenario - I am not sure I understand what "enable the SSH-server to establish the TCP connection itself." means. If you mean that the SSH server initiates the connection, then I am not sure it is according to any RFC nor do I see the use-case for it -

The SSHD project contribution challenge

2016-10-03 Thread elijah baley
Hi everybody, We have recently released SSHD version 1.3, and are already working on 1.4 improvements. As part of this work, there are a few open issues that would really help us make version 1.4 even better. Since there aren't many of us working on this and we have pretty limited time

Re: Bouncy Castle FIPS 1.0

2016-09-05 Thread elijah baley
Thanks for bringing this to the attention of the MINA SSHD project. To answer your question, no, we have not evaluated the FIPS version, nor does it seem like we are likely to do it in the near future. That being said, you are more than welcome to open a JIRA issue on

Re: SSHD v1.2.0 client sending SSH_MSG_USERAUTH_REQUEST packet as service name 'ssh-connection'?

2016-08-29 Thread elijah baley
packet as service name 'ssh-connection'? Ok, thanks. This helps me understand the context better. So is the java.lang.IllegalArgumentException I detailed not an issue? -Original Message- From: elijah baley [mailto:e_ba...@outlook.com] Sent: Monday, August 29, 2016 2:10 PM To: dev@mina.apac

Re: SSHD v1.2.0 client sending SSH_MSG_USERAUTH_REQUEST packet as service name 'ssh-connection'?

2016-08-29 Thread elijah baley
ntation. Thanks for the input -matt -Original Message----- From: elijah baley [mailto:e_ba...@outlook.com] Sent: Monday, August 29, 2016 1:03 PM To: dev@mina.apache.org Subject: Re: SSHD v1.2.0 client sending SSH_MSG_USERAUTH_REQUEST packet as service name 'ssh-connection'? Can you post some

Re: SSHD v1.2.0 client sending SSH_MSG_USERAUTH_REQUEST packet as service name 'ssh-connection'?

2016-08-29 Thread elijah baley
ed yet. This is only happening on the Cisco ASA devices... I have several other devices that are working fine with 1.2.0 and my existing code, so I'm wondering too if it is something with Cisco's SSH implementation. Thanks for the input -matt -Original Message- From: elijah baley [mailt

Re: SSHD v1.2.0 client sending SSH_MSG_USERAUTH_REQUEST packet as service name 'ssh-connection'?

2016-08-29 Thread elijah baley
Here is how the code should work (there are other options but this is the simplest): SshClient client = SshClient.setupDefaultClient(); client.set... - override if needed some defaults try (ClientSession session = client.connect(user, host,

Re: SSHD v1.2.0 client sending SSH_MSG_USERAUTH_REQUEST packet as service name 'ssh-connection'?

2016-08-29 Thread elijah baley
Can you post some code that shows the client side ? My concern is with "Could this be because I am specifying my authentication at the session level rather than the client level?" In order to do that correctly one needs to use a SessionListener#sessionCreated and modify the KEX:

RE: Partial Disabling of port 22 using apache-mina SSHD

2016-06-28 Thread elijah baley
rtial Disabling of port 22 using apache-mina SSHD > To: dev@mina.apache.org > > Hey, > > The whole reason is to accept SFTP over 22 and reject the traffic coming > via SSH. > > -Garima Jain. > > On Mon, Jun 27, 2016 at 9:00 PM, elijah baley <e_ba...@outlook.com&g

RE: Partial Disabling of port 22 using apache-mina SSHD

2016-06-27 Thread elijah baley
e is SSH? > > -Garima Jain. > > On Wed, Jun 22, 2016 at 9:29 PM, elijah baley <e_ba...@outlook.com> wrote: > > > Sorry, mail communication is best I can do for now... > > > > > Date: Wed, 22 Jun 2016 00:04:31 +0530 > > > Subject: RE: Partial D

RE: Block all the incoming traffic using Blacklist.

2016-06-22 Thread elijah baley
In MINA SSHD you can register a SessionEventListener and be notified when a connection is eastablished. At that point you can examine the remote peer (client) address against your white/black list and throw an exception if it is not allowed to connect. > From: jain.garim...@gmail.com > Date:

RE: Partial Disabling of port 22 using apache-mina SSHD

2016-06-22 Thread elijah baley
we can have a chat > other than mail communication in case needed. > > -Garima Jain > On Jun 21, 2016 11:48 PM, "elijah baley" <e_ba...@outlook.com> wrote: > > > The topic is too wide to cover in a short mail message - I suggest you > > look into the code

RE: Partial Disabling of port 22 using apache-mina SSHD

2016-06-21 Thread elijah baley
ng apache-mina SSHD > From: jain.garim...@gmail.com > To: dev@mina.apache.org > > Hey, > > What shell commands can be executed and how? Or how to provide tunnel? > Can you provide sample code for the same? > > Any methods from sftp class? > > -Garima Jain >

RE: Partial Disabling of port 22 using apache-mina SSHD

2016-06-21 Thread elijah baley
t; <paliwalash...@gmail.com> wrote: > > > >> On Mon, Jun 20, 2016 at 9:43 AM, garima jain <jain.garim...@gmail.com> > >> wrote: > >> > Can we use black list/whitelist feature? > >> > >> This is what you should use. > >> &g

RE: Partial Disabling of port 22 using apache-mina SSHD

2016-06-20 Thread elijah baley
t; -Garima Jain. > > On Fri, Jun 17, 2016 at 3:27 PM, elijah baley <e_ba...@outlook.com> wrote: > > > Is there some reason your code cannot examine the incoming client address > > and reject it if it does not match some specified criteria (e.g., mask, > > network, c

RE: Partial Disabling of port 22 using apache-mina SSHD

2016-06-17 Thread elijah baley
Is there some reason your code cannot examine the incoming client address and reject it if it does not match some specified criteria (e.g., mask, network, closed group of IPs - whatever...) ? > From: jain.garim...@gmail.com > Date: Fri, 17 Jun 2016 14:50:51 +0530 > Subject: Partial Disabling of

RE: VirtualFileSystem able to mkdir and chdir to non rooted directory

2016-04-11 Thread elijah baley
above (it can be cleaned up, but is mostly the same). > > Maybe my version is out of date or there is still an issue? > > On Sat, Apr 9, 2016 at 12:45 AM, elijah baley <e_ba...@outlook.com> wrote: > > > This has been fixed in version 1.1 and up via SSHD-605 > > >

RE: VirtualFileSystem able to mkdir and chdir to non rooted directory

2016-04-09 Thread elijah baley
This has been fixed in version 1.1 and up via SSHD-605 > Date: Fri, 8 Apr 2016 15:48:10 -0700 > Subject: VirtualFileSystem able to mkdir and chdir to non rooted directory > From: a...@linkedin.com.INVALID > To: dev@mina.apache.org > > Hi SSHD team, > > Not sure if this is a bug or not, but when

RE: [VOTE] Release Apache Mina SSHD 1.2.0

2016-03-15 Thread elijah baley
+1 > From: gno...@apache.org > Date: Tue, 15 Mar 2016 15:41:47 +0100 > Subject: Re: [VOTE] Release Apache Mina SSHD 1.2.0 > To: dev@mina.apache.org > > +1 > > 2016-03-09 11:30 GMT+01:00 Guillaume Nodet : > > > I've staged a release candidate for SSHD 1.2.0 > > > >

RE: [VOTE] Release Apache Mina SSHD 1.1.1

2016-03-09 Thread elijah baley
+1Lyor > Subject: Re: [VOTE] Release Apache Mina SSHD 1.1.1 > From: jgenen...@apache.org > Date: Wed, 9 Mar 2016 06:28:49 -0700 > To: dev@mina.apache.org > > +1 > > Jeff > > > On Mar 9, 2016, at 3:32 AM, Guillaume Nodet wrote: > > > > I've staged a release candidate for

RE: Bug in 1.1.0 Fixed in trunk.

2016-03-07 Thread elijah baley
I believe the bug that you describe is related to SSHD-639. A fix release named 1.1.1 was supposed to have been out already – Guillaume, can you update where are we on this ? I also called for a vote on releasing 1.2 – for some reason it was not delivered to the mailing list… From:

Ready for release 1.2 (?)

2016-02-28 Thread elijah baley
Hi everybody, I feel we have reached a respectable threshold of features and bug fixes to warrant a 1.2 release - especially in view of the SSHD-639 and SSHD-646 fixes which hopefully will be released as 1.1.1 soon. I therefore would like to ask those of you who posted bugs or feature

Re[2]: Take 2: Release 1.1.1 or 1.2 ?

2016-02-24 Thread Elijah Baley
elease (1-2 days...). Guillaume 2016-02-23 12:56 GMT+01:00 Elijah Baley <e_ba...@outlook.com>: Hi, Following SSHD-639 and its impact on other projects, I have backported it to a 1.1.1 version which could be released as a patch rather quickly. I also backported SSHD-646 to

Take 2: Release 1.1.1 or 1.2 ?

2016-02-23 Thread Elijah Baley
there goes take 2... Guillaume - what is your take on it ? Thanks, Lyor Goldstein (Elijah Baley is a pseudonym I use if this confuses some of you...)

Re[2]: CloseFuture listener alternative to channel.waitFor()

2016-02-20 Thread Elijah Baley
See SSHD-652... -- Original Message -- From: XXX To: dev@mina.apache.org Sent: 20-Feb-16 12:19:17 Subject: Re: CloseFuture listener alternative to channel.waitFor() Please open a JIRA issue at https://issues.apache.org/jira/browse/SSHD and specify the scenario that would require such

Re: CloseFuture listener alternative to channel.waitFor()

2016-02-20 Thread Elijah Baley
Please open a JIRA issue at https://issues.apache.org/jira/browse/SSHD and specify the scenario that would require such an API. Please note that when you call Channel#close, the return value is a CloseFuture to which one can add listeners. Also, the ClientChannel has a waitFor method that can

Release 1.1.1 or 1.2 ?

2016-02-18 Thread Elijah Baley
Hi, Following SSHD-639 and its impact on other projects, I have backported it to a 1.1.1 version which could be released as a patch rather quickly. I have noticed however that despite previous correspondence we never did release 1.1 (or at least I did not find it published anywhere).

Apache SSHD file stores - updated

2016-02-16 Thread Elijah Baley
Someone already beat us to the punch - see https://github.com/Upplication/Amazon-S3-FileSystem-NIO2. This means that it is now possible to expose S3 buckets via SFTP / SCP.