[jira] [Commented] (SSHD-1019) how to get Server Auth methods in client

["Lyor Goldstein (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/SSHD-1019?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17139550#comment-17139550 ] 

Lyor Goldstein commented on SSHD-1019:
--------------------------------------

{quote}
Lets say in server I have set auth method as password and public key
then In SSHD client how I can get supported methods?
{quote}
I believe there is some confusion as to how authentication works - one has to configure the supported authentication mechanisms on +both+ ends - client and server via {{setUserAuthFactories}} (this also configures their preferred +order+). The client then executes potentially several rounds of {{SSH_MSG_USERAUTH_REQUEST}} - each time specifying a method. If it is successful, then fine - otherwise the client may try some other method. That means that if the server supports authentication methods that neither of them is supported by the client then no authentication can take place. Usually, servers support (almost) all types of authentication - at least "classical" ones. There are some recommendations to disable password and allow only public key (though no special recommendation exists AFAIK for keyboard-interactive).

I am not aware of any standard way for either the client or the server to publish ahead of time the methods each one of them supports.

> how to get Server Auth methods in client
> ----------------------------------------
>
>                 Key: SSHD-1019
>                 URL: https://issues.apache.org/jira/browse/SSHD-1019
>             Project: MINA SSHD
>          Issue Type: Question
>            Reporter: Sandeep
>            Priority: Major
>
> Lets say in server I have set auth method as password and public key
> then In SSHD client how I can get supported methods?



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@mina.apache.org
For additional commands, e-mail: dev-help@mina.apache.org