search

citrusframework / citrus

Framework for automated integration tests with focus on messaging integration
https://citrusframework.org
Apache License 2.0
460 stars 137 forks source link

Add ssh and scp client preferred authentications setting #1252

Open ubertsch opened 2 weeks ago

ubertsch commented 2 weeks ago

Please provide for the SSH and SCP Client the same Solution implemented in the Ticket "Add SFTP client preferred authentications setting #483"

Jsch Sftp client provides the configuration setting for preferred authentication methods

session.setConfig("PreferredAuthentications", "publickey,password,keyboard-interactive"); By default gssapi-with-mic is the first method which results in any client operation to promt for Kerberos 5 username and password credentials. Add this configuration setting to the client endpoint component so users can choose the order of preferred authentication methods.

By default choose publickey,password,gssapi-with-mic,keyboard-interactive

https://[citrusframework.org/schema/sftp/config/citrus-sftp-config.xsd](https://citrusframework.org/schema/sftp/config/citrus-sftp-config.xsd)

Ordered list of preferred authentications. Client will try to authentication with these methods first.
bbortt commented 2 weeks ago

hi and thanks for the ticket!

By default choose publickey,password,gssapi-with-mic,keyboard-interactive

is that based on your personal experience or some standard (or library that implements auth in this order)?

and would you be willing to submit this feature (with help, if needed)? it should be done quit fast.

ubertsch commented 2 weeks ago

Hi,

The default order is not important. As in the implementation of the sftp client, it must be possible to pass a list of supported authentication algorithms. Unsupported algorithms can also be omitted.

Our Real ssh/scp server did not support gssapi-with-mic. If this ist he first algorithmen choosen by Jsch Library no connection will be established.

Thanks

Ulrich Bertsch

Von: Timon Borter @.> Gesendet: Dienstag, 5. November 2024 22:06 An: citrusframework/citrus @.> Cc: Ulrich Bertsch @.>; Author @.> Betreff: Re: [citrusframework/citrus] Add ssh and scp client preferred authentications setting (Issue #1252)

hi and thanks for the ticket!

By default choose publickey,password,gssapi-with-mic,keyboard-interactive

is that based on your personal experience or some standard (or library that implements auth in this order)?

and would you be willing to submit this feature (with help, if needed)? it should be done quit fast.

- Reply to this email directly, view it on GitHubhttps://github.com/citrusframework/citrus/issues/1252#issuecomment-2458150442, or unsubscribehttps://github.com/notifications/unsubscribe-auth/BMV22PF2NEU37MQYR3WRED3Z7EXMZAVCNFSM6AAAAABRGUZYS2VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDINJYGE2TANBUGI. You are receiving this because you authored the thread.Message ID: @.**@.>>