mina-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Rohini Jori (Jira)" <j...@apache.org>
Subject [jira] [Updated] (SSHD-1014) Password Change Request - 'handleClientPasswordChangeRequest' not getting invoked with the sshd-core-2.3.1 jar version used.
Date Wed, 10 Jun 2020 06:25:00 GMT

     [ https://issues.apache.org/jira/browse/SSHD-1014?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel

Rohini Jori updated SSHD-1014:
    Attachment: Password-change-Not Working- version -2.3.1.txt

> Password Change Request - 'handleClientPasswordChangeRequest' not getting invoked with
the sshd-core-2.3.1 jar version used.
> ----------------------------------------------------------------------------------------------------------------------------
>                 Key: SSHD-1014
>                 URL: https://issues.apache.org/jira/browse/SSHD-1014
>             Project: MINA SSHD
>          Issue Type: New Feature
>            Reporter: Rohini Jori
>            Priority: Major
>         Attachments: Normal-Login-LOGS.txt, Password-change-Not Working- version -2.3.1.txt,
error1.png, handleClientPasswordChange  CODE.txt, password-change-Request- LOGS.txt
> *Question:*
> Wanted to know  why the 'handleClientPasswordChangeRequest' method is working with
'sshd-core-2.3.0' jar and not with the 'sshd-core-2.3.1' jar?
> *Description*:
>  In case of password change request, the authenticate method of PasswordAuthenticator
class throws the 'PasswordChangeRequiredException' 
>  which will internally calls 'handleClientPasswordChangeRequest' method where the password
is changed for the user.
> Method calls sequence-
>  1. PasswordAuthenticator.authenticate()
>  2. authenticate() method throws PasswordChangeRequiredException.
>  3. UserAuthPassword.checkPassword()
>  4. UserAuthPassword.handlePasswordChangeRequest()
>  5. shows the prompt to get the new password from user. Then click ok.
>  6. UserAuthPassword.handleClientPasswordChangeRequest() - change old password.
>  *So the problem* is that  when we used the sshd-core-2.3.1 jar, The 'handleClientPasswordChangeRequest'
is not getting called after we receive the password-change request. 
>  But  When we used the 'sshd-core-2.3.0' jar  the 'handleClientPasswordChangeRequest'
method is getting called and also the password changed successfully.
>  But after that we got the problem in authentication. we get the  'Server refused to
start a shell/command' authentication failed error.
> I have attached the logs & image for reference.
> So Is this dependent on 'sshd-core' jar? Could you please help?

This message was sent by Atlassian Jira

To unsubscribe, e-mail: dev-unsubscribe@mina.apache.org
For additional commands, e-mail: dev-help@mina.apache.org

View raw message