[Cyberduck-trac] [Cyberduck] #10714: Fails to authenticate where keyboard-interactive mechanism is not supported

Cyberduck trac at cyberduck.io
Thu Aug 15 21:50:11 UTC 2019


#10714: Fails to authenticate where keyboard-interactive mechanism is not supported
-------------------------+-------------------------
 Reporter:  Seayou       |         Owner:  dkocher
     Type:  defect       |        Status:  reopened
 Priority:  normal       |     Milestone:  7.1
Component:  sftp         |       Version:  6.9.4
 Severity:  normal       |    Resolution:
 Keywords:               |  Architecture:  Intel
 Platform:  macOS 10.12  |
-------------------------+-------------------------
Changes (by Seayou):

 * status:  closed => reopened
 * resolution:  thirdparty =>


Comment:

 Hi, original poster here. Well, I think because the client blindly tries
 with keyboard-interactive without asking the supported methods from the
 server.

 https://www.ietf.org/rfc/rfc4252.txt Section 4.

 The server drives the authentication by telling the client which
    authentication methods can be used to continue the exchange at any
    given time.  The client has the freedom to try the methods listed by
    the server in any order.  This gives the server complete control over
    the authentication process if desired, but also gives enough
    flexibility for the client to use the methods it supports or that are
    most convenient for the user, when multiple methods are offered by
    the server.

--
Ticket URL: <https://trac.cyberduck.io/ticket/10714#comment:12>
Cyberduck <https://cyberduck.io>
Libre FTP, SFTP, WebDAV, S3 & OpenStack Swift browser for Mac and Windows


More information about the Cyberduck-trac mailing list