You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@mina.apache.org by "Neil Culver (JIRA)" <ji...@apache.org> on 2013/07/03 15:57:20 UTC
[jira] [Created] (SSHD-231) Failed authentication method isnt
removed from list of allowed methods
Neil Culver created SSHD-231:
--------------------------------
Summary: Failed authentication method isnt removed from list of allowed methods
Key: SSHD-231
URL: https://issues.apache.org/jira/browse/SSHD-231
Project: MINA SSHD
Issue Type: Bug
Affects Versions: 0.7.0
Reporter: Neil Culver
Priority: Minor
Hi,
Whilst investigating an authentication problem with a client connection I've noticed that the code which removes failed authentication methods from the list of allowed methods always specifies "none", instead of the actual method which failed.
Code from ServerSession.userAuth method :
NamedFactory.Utils.remove(userAuthFactories, "none"); // 'none' MUST NOT be listed
instead I would expect the actual method to be removed, i.e. :
NamedFactory.Utils.remove(userAuthFactories, method);
I'm not sure if this is by design or not ?
Thanks
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira