[esb-issues] [JBoss JIRA] Updated: (JBESB-2875) Support sftp (ssh) keyboard-interactive auth

[Tom Eicher (JIRA)]

     [ https://jira.jboss.org/jira/browse/JBESB-2875?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Tom Eicher updated JBESB-2875:
------------------------------

    Description: 
JSch, as it is currently used in SecureFtpOverSSH, does only allow "password" authentication.
However, this requires that the target system has ssh configured for "PasswordAuthentication yes" in sshd_conf, which is by default "no" nowadays...
Connections will fail with 
org.jboss.soa.esb.util.RemoteFileSystemException: com.jcraft.jsch.JSchException: Auth fail

To allow connections to servers configured like this, we need to support "keyboard-interactive" additionally:

1. SecureFtpImpl:
change session.setConfig("PreferredAuthentications", "password");
to session.setConfig("PreferredAuthentications", "password,keyboard-interactive");

2. SecureFtpUserInfo:
additionally implement JSch interface UIKeyboardInteractive:

    public String[] promptKeyboardInteractive(
    		String destination,
            String name,
            String instruction,
            String[] prompt,
            boolean[] echo){
    	if(prompt.length!=1 || echo[0]!=false || this.password==null){
          return null;
    	}
    	String[] response=new String[1];
    	response[0]=this.password;
    	return response;
    }



  was:
JSch, as it is currently used in SecureFtpOverSSH, does only allow "password" authentication.
However, this requires that the target system has ssh configured for "PasswordAuthentication yes" in sshd_conf, which is by default "no" nowadays...
Connections will fail with 
{code}
org.jboss.soa.esb.util.RemoteFileSystemException: com.jcraft.jsch.JSchException: Auth fail
{code}
To allow connections to servers configured like this, we need to support "keyboard-interactive" additionally:

1. SecureFtpImpl:
change session.setConfig("PreferredAuthentications", "password");
to session.setConfig("PreferredAuthentications", "password,keyboard-interactive");

2. SecureFtpUserInfo:
additionally implement JSch interface UIKeyboardInteractive:
{code}
    public String[] promptKeyboardInteractive(
    		String destination,
            String name,
            String instruction,
            String[] prompt,
            boolean[] echo){
    	if(prompt.length!=1 || echo[0]!=false || this.password==null){
          return null;
    	}
    	String[] response=new String[1];
    	response[0]=this.password;
    	return response;
    }
{code}



> Support sftp (ssh) keyboard-interactive auth
> --------------------------------------------
>
>                 Key: JBESB-2875
>                 URL: https://jira.jboss.org/jira/browse/JBESB-2875
>             Project: JBoss ESB
>          Issue Type: Feature Request
>      Security Level: Public(Everyone can see) 
>          Components: Adapters
>            Reporter: Tom Eicher
>            Priority: Minor
>
> JSch, as it is currently used in SecureFtpOverSSH, does only allow "password" authentication.
> However, this requires that the target system has ssh configured for "PasswordAuthentication yes" in sshd_conf, which is by default "no" nowadays...
> Connections will fail with 
> org.jboss.soa.esb.util.RemoteFileSystemException: com.jcraft.jsch.JSchException: Auth fail
> To allow connections to servers configured like this, we need to support "keyboard-interactive" additionally:
> 1. SecureFtpImpl:
> change session.setConfig("PreferredAuthentications", "password");
> to session.setConfig("PreferredAuthentications", "password,keyboard-interactive");
> 2. SecureFtpUserInfo:
> additionally implement JSch interface UIKeyboardInteractive:
>     public String[] promptKeyboardInteractive(
>     		String destination,
>             String name,
>             String instruction,
>             String[] prompt,
>             boolean[] echo){
>     	if(prompt.length!=1 || echo[0]!=false || this.password==null){
>           return null;
>     	}
>     	String[] response=new String[1];
>     	response[0]=this.password;
>     	return response;
>     }

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira