citrusframework
Add ssh and scp client preferred authentications setting
Please provide for the SSH and SCP Client the same Solution implemented in the Ticket "Add SFTP client preferred authentications setting #483"
Jsch Sftp client provides the configuration setting for preferred authentication methods
session.setConfig("PreferredAuthentications", "publickey,password,keyboard-interactive"); By default gssapi-with-mic is the first method which results in any client operation to promt for Kerberos 5 username and password credentials. Add this configuration setting to the client endpoint component so users can choose the order of preferred authentication methods.
By default choose publickey,password,gssapi-with-mic,keyboard-interactive
https://citrusframework.org/schema/sftp/config/citrus-sftp-config.xsd <xs:attribute name="preferred-authentications" type="xs:string"> xs:annotation xs:documentation Ordered list of preferred authentications. Client will try to authentication with these methods first. </xs:documentation> </xs:annotation> </xs:attribute>
hi and thanks for the ticket!
By default choose publickey,password,gssapi-with-mic,keyboard-interactive
is that based on your personal experience or some standard (or library that implements auth in this order)?
and would you be willing to submit this feature (with help, if needed)? it should be done quit fast.
Hi,
The default order is not important. As in the implementation of the sftp client, it must be possible to pass a list of supported authentication algorithms. Unsupported algorithms can also be omitted.
Our Real ssh/scp server did not support gssapi-with-mic. If this ist he first algorithmen choosen by Jsch Library no connection will be established.
Thanks
Ulrich Bertsch
Von: Timon Borter @.> Gesendet: Dienstag, 5. November 2024 22:06 An: citrusframework/citrus @.> Cc: Ulrich Bertsch @.>; Author @.> Betreff: Re: [citrusframework/citrus] Add ssh and scp client preferred authentications setting (Issue #1252)
hi and thanks for the ticket!
By default choose publickey,password,gssapi-with-mic,keyboard-interactive
is that based on your personal experience or some standard (or library that implements auth in this order)?
and would you be willing to submit this feature (with help, if needed)? it should be done quit fast.
Reply to this email directly, view it on GitHubhttps://github.com/citrusframework/citrus/issues/1252#issuecomment-2458150442, or unsubscribehttps://github.com/notifications/unsubscribe-auth/BMV22PF2NEU37MQYR3WRED3Z7EXMZAVCNFSM6AAAAABRGUZYS2VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDINJYGE2TANBUGI. You are receiving this because you authored the thread.Message ID: @.@.>>