You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@nifi.apache.org by "David Handermann (Jira)" <ji...@apache.org> on 2021/06/16 21:59:00 UTC
[jira] [Updated] (NIFI-8711) Support keyboard-interactive
authentication for SFTP
[ https://issues.apache.org/jira/browse/NIFI-8711?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
David Handermann updated NIFI-8711:
-----------------------------------
Status: Patch Available (was: In Progress)
> Support keyboard-interactive authentication for SFTP
> ----------------------------------------------------
>
> Key: NIFI-8711
> URL: https://issues.apache.org/jira/browse/NIFI-8711
> Project: Apache NiFi
> Issue Type: Improvement
> Components: Extensions
> Affects Versions: 1.13.2, 1.10.0
> Reporter: David Handermann
> Assignee: David Handermann
> Priority: Major
> Labels: SFTP, SSH, security, sshj
>
> Changing the supporting library from JSch to SSHJ resulted in removing support for keyboard-interactive authentication when configuring a password in SFTP components.
> Some SSH servers disable password authentication but support keyboard-interactive authentication. SSHJ provides support for keyboard-interactive authentication using a password, and SFTP components should attempt both password authentication and keyboard-interactive authentication when a password is configured.
> Without support for keyboard-interactive authentication, SFTP processors report the following error even when configured with valid username and password credentials:
> {{UserAuthException: Exhausted available authentication methods}}
> SSHJ reports the following debug log with valid credentials when the server has disabled password authentication:
> {{net.schmizz.sshj.userauth.UserAuthImpl `password` auth failed}}
--
This message was sent by Atlassian Jira
(v8.3.4#803005)