[Cyberduck-trac] [Cyberduck] #10714: Fails to authenticate where keyboard-interactive mechanism is not supported
Cyberduck
trac at cyberduck.io
Thu Aug 15 21:50:11 UTC 2019
#10714: Fails to authenticate where keyboard-interactive mechanism is not supported
-------------------------+-------------------------
Reporter: Seayou | Owner: dkocher
Type: defect | Status: reopened
Priority: normal | Milestone: 7.1
Component: sftp | Version: 6.9.4
Severity: normal | Resolution:
Keywords: | Architecture: Intel
Platform: macOS 10.12 |
-------------------------+-------------------------
Changes (by Seayou):
* status: closed => reopened
* resolution: thirdparty =>
Comment:
Hi, original poster here. Well, I think because the client blindly tries
with keyboard-interactive without asking the supported methods from the
server.
https://www.ietf.org/rfc/rfc4252.txt Section 4.
The server drives the authentication by telling the client which
authentication methods can be used to continue the exchange at any
given time. The client has the freedom to try the methods listed by
the server in any order. This gives the server complete control over
the authentication process if desired, but also gives enough
flexibility for the client to use the methods it supports or that are
most convenient for the user, when multiple methods are offered by
the server.
--
Ticket URL: <https://trac.cyberduck.io/ticket/10714#comment:12>
Cyberduck <https://cyberduck.io>
Libre FTP, SFTP, WebDAV, S3 & OpenStack Swift browser for Mac and Windows
More information about the Cyberduck-trac
mailing list