Maven Wagon
  1. Maven Wagon
  2. WAGON-200

authentication with passwords can fail in some environments

    Details

    • Type: Bug Bug
    • Status: Closed Closed
    • Priority: Minor Minor
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 1.0-alpha-5
    • Component/s: wagon-ssh
    • Labels:
      None
    • Number of attachments :
      2

      Description

      if the repository use username / password authentication and the server (openssh here) has "PasswordAuthentication no" option set, it fail to auth. I can log in using others ssh clients thow.

      Changing PasswordAuthentication to yes, makes wagon succeed , but it is not a practical solution.

      1. WAGON-13.diff
        2 kB
        Juan F. Codagnone
      2. WAGONSSH-13-b.diff
        11 kB
        Juan F. Codagnone

        Issue Links

          Activity

          Hide
          Juan F. Codagnone added a comment -

          my interpretation of jsch code jsch-0.1.21/src/com/jcraft/jsch/Session.java[1] around line 357 shows the jsch will choose the order depending the servers order.

          So the best i think is to provide a safe default, and a way to change it (configure it) (like i want to configure it in WAGON-12). The nice thing about programing to interafaces and having a IoC container is that you can replace everything. I will work in a real solution if you like. (not this hack)

          [1] they dont have a viewcvs or any javadoc

          Show
          Juan F. Codagnone added a comment - my interpretation of jsch code jsch-0.1.21/src/com/jcraft/jsch/Session.java [1] around line 357 shows the jsch will choose the order depending the servers order. So the best i think is to provide a safe default, and a way to change it (configure it) (like i want to configure it in WAGON-12 ). The nice thing about programing to interafaces and having a IoC container is that you can replace everything. I will work in a real solution if you like. (not this hack) [1] they dont have a viewcvs or any javadoc
          Hide
          Juan F. Codagnone added a comment -

          attached a configurable solution

          Some warnings:

          • i still dont know much about plexus
          • It handles a bit better the input than WAGONSSH-12 because i didn't know about the existense of pluxus-prompter when i wrote that patch.
          Show
          Juan F. Codagnone added a comment - attached a configurable solution Some warnings: i still dont know much about plexus It handles a bit better the input than WAGONSSH-12 because i didn't know about the existense of pluxus-prompter when i wrote that patch.
          Hide
          Brett Porter added a comment -

          applied, thanks!

          the keyboard interactive didn't seem to ever get called for me... so I also added prompting to the userinfo

          Show
          Brett Porter added a comment - applied, thanks! the keyboard interactive didn't seem to ever get called for me... so I also added prompting to the userinfo
          Hide
          Juan F. Codagnone added a comment -

          org.codehaus.plexus.components.interactivity.DefaultInputHandler is being used, and its readPassword() just call
          java.io.BufferedReader#readLine(), echoing the password.

          Show
          Juan F. Codagnone added a comment - org.codehaus.plexus.components.interactivity.DefaultInputHandler is being used, and its readPassword() just call java.io.BufferedReader#readLine(), echoing the password.
          Hide
          Brett Porter added a comment -

          yes, I know. we've had a few issues with jline and pulled it out.

          Show
          Brett Porter added a comment - yes, I know. we've had a few issues with jline and pulled it out.

            People

            • Assignee:
              Brett Porter
              Reporter:
              Juan F. Codagnone
            • Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: