You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@mina.apache.org by "Guillaume Nodet (JIRA)" <ji...@apache.org> on 2014/04/14 13:39:17 UTC
[jira] [Updated] (SSHD-300) Double public key authentication
[ https://issues.apache.org/jira/browse/SSHD-300?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Guillaume Nodet updated SSHD-300:
---------------------------------
Fix Version/s: (was: 0.10.2)
0.11.0
> Double public key authentication
> --------------------------------
>
> Key: SSHD-300
> URL: https://issues.apache.org/jira/browse/SSHD-300
> Project: MINA SSHD
> Issue Type: Bug
> Affects Versions: 0.10.1
> Reporter: David Ostrovsky
> Assignee: Guillaume Nodet
> Priority: Minor
> Fix For: 0.11.0
>
> Attachments: 0001-SSHD-300-Prevent-double-public-key-authentication.patch
>
>
> PublickeyAuthenticator.authenticate() method is called twice, even though the first call of this method already authenticated the user and returned true.
> This is a preformance issue, as server may need to hit database/caches to retrieve the list of public key(s) for the user to preform the check against.
> Or the authenticate() implementation needs to be adjusted to preform the check that the user was alreay authenticated.
> Reproducer patch is attaced. The problem only occurs when the test is called from open SSH client. Own SSHD's client works as expected.
> To reproduce, start the attached unit test as Java application, and issue the command:
> ssh localhost -p 29418 -l joe
> [1] https://gerrit-review.googlesource.com/55193
>
--
This message was sent by Atlassian JIRA
(v6.2#6252)