mina-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Yuefeng (Jira)" <j...@apache.org>
Subject [jira] [Created] (SSHD-955) API to over-ride "password" key-phrase in prompt for a session
Date Fri, 08 Nov 2019 22:53:00 GMT
Yuefeng created SSHD-955:
----------------------------

             Summary: API to over-ride "password" key-phrase in prompt for a session
                 Key: SSHD-955
                 URL: https://issues.apache.org/jira/browse/SSHD-955
             Project: MINA SSHD
          Issue Type: Bug
            Reporter: Yuefeng


mina ssh expects "password" in the prompt.  In UserAuthKeyboardInteractive, 
{code:java}
protected boolean useCurrentPassword(String password, String name, String instruction, String
lang, String[] prompt, boolean[] echo) {
    int num = GenericUtils.length(prompt);
    if (num == 1 && password != null && !echo[0]) {
        String value = GenericUtils.trimToEmpty(prompt[0]).toLowerCase();
        int passPos = value.lastIndexOf("password");
        if (passPos < 0) {
            return false;
        } else {
            int sepPos = value.lastIndexOf(58);
            return sepPos > passPos;
        }
    } else {
        return false;
    }
}{code}
 

but the password prompt does not always contain "password".  On Cisco device, the prompt
is configurable with
{code:java}
aaa authentication password-prompt passcode
{code}
As the result of this config, when logging into the box, the prompt is "passcode".

Is there a way to over-ride key-phrase "password" in prompt, for a ssh session?



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@mina.apache.org
For additional commands, e-mail: dev-help@mina.apache.org


Mime
View raw message