org.apache.sshd.client.auth.keyboard

Class UserAuthKeyboardInteractive

java.lang.Object

org.apache.sshd.common.util.logging.AbstractLoggingBean

org.apache.sshd.client.auth.AbstractUserAuth

org.apache.sshd.client.auth.keyboard.UserAuthKeyboardInteractive

All Implemented Interfaces:

UserAuth, ClientSessionHolder, UserAuthInstance<ClientSession>, NamedResource

public class UserAuthKeyboardInteractive
extends AbstractUserAuth

Manages a "keyboard-interactive" exchange according to RFC4256

Author:

Apache MINA SSHD Project

Field Summary

Fields

Modifier and Type	Field and Description
static String	DEFAULT_INTERACTIVE_LANGUAGE_TAG
static String	DEFAULT_INTERACTIVE_SUBMETHODS
static String	INTERACTIVE_LANGUAGE_TAG
static String	INTERACTIVE_SUBMETHODS
static String	NAME

Fields inherited from class org.apache.sshd.common.util.logging.AbstractLoggingBean

log

Fields inherited from interface org.apache.sshd.common.NamedResource

BY_NAME_COMPARATOR, NAME_EXTRACTOR

Constructor Summary

Constructors

Constructor and Description
UserAuthKeyboardInteractive()

Method Summary

Modifier and Type	Method and Description
static String	getAuthCommandName(int cmd)
protected String	getCurrentPasswordCandidate()
protected String	getExchangeLanguageTag(ClientSession session)
protected String	getExchangeSubMethods(ClientSession session)
protected String[]	getUserResponses(String name, String instruction, String lang, String[] prompt, boolean[] echo)
void	init(ClientSession session, String service)
protected boolean	processAuthDataRequest(ClientSession session, String service, Buffer buffer)
protected boolean	sendAuthDataRequest(ClientSession session, String service)
protected boolean	useCurrentPassword(ClientSession session, String password, String name, String instruction, String lang, String[] prompt, boolean[] echo) Checks if we have a candidate password and exactly one prompt is requested with no echo, and the prompt matches a configurable pattern.
protected boolean	verifyTrialsCount(ClientSession session, String service, int cmd, int nbTrials, int maxAllowed)

Methods inherited from class org.apache.sshd.client.auth.AbstractUserAuth

destroy, getClientSession, getName, getService, getSession, process, toString

Methods inherited from class org.apache.sshd.common.util.logging.AbstractLoggingBean

getSimplifiedLogger

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Methods inherited from interface org.apache.sshd.common.NamedResource

findByName, getNameList, getNames, ofName, removeByName

Field Detail

NAME

public static final String NAME

See Also:

Constant Field Values

INTERACTIVE_LANGUAGE_TAG

public static final String INTERACTIVE_LANGUAGE_TAG

See Also:

Constant Field Values

DEFAULT_INTERACTIVE_LANGUAGE_TAG

public static final String DEFAULT_INTERACTIVE_LANGUAGE_TAG

See Also:

Constant Field Values

INTERACTIVE_SUBMETHODS

public static final String INTERACTIVE_SUBMETHODS

See Also:

Constant Field Values

DEFAULT_INTERACTIVE_SUBMETHODS

public static final String DEFAULT_INTERACTIVE_SUBMETHODS

See Also:

Constant Field Values

Constructor Detail

UserAuthKeyboardInteractive

public UserAuthKeyboardInteractive()

Method Detail

init

public void init(ClientSession session,
                 String service)
          throws Exception

Specified by:

init in interface UserAuth

Overrides:

init in class AbstractUserAuth

Parameters:

session - The ClientSession

service - The requesting service name

Throws:

Exception - If failed to initialize the mechanism

sendAuthDataRequest

protected boolean sendAuthDataRequest(ClientSession session,
                                      String service)
                               throws Exception

Specified by:

sendAuthDataRequest in class AbstractUserAuth

Throws:

Exception

processAuthDataRequest

protected boolean processAuthDataRequest(ClientSession session,
                                         String service,
                                         Buffer buffer)
                                  throws Exception

Specified by:

processAuthDataRequest in class AbstractUserAuth

Throws:

Exception

getExchangeLanguageTag

protected String getExchangeLanguageTag(ClientSession session)

getExchangeSubMethods

protected String getExchangeSubMethods(ClientSession session)

getCurrentPasswordCandidate

protected String getCurrentPasswordCandidate()

verifyTrialsCount

protected boolean verifyTrialsCount(ClientSession session,
                                    String service,
                                    int cmd,
                                    int nbTrials,
                                    int maxAllowed)

getUserResponses

protected String[] getUserResponses(String name,
                                    String instruction,
                                    String lang,
                                    String[] prompt,
                                    boolean[] echo)

Parameters:

name - The interaction name - may be empty

instruction - The instruction - may be empty

lang - The language tag - may be empty

prompt - The prompts - may be empty

echo - Whether to echo the response for the prompt or not - same length as the prompts

Returns:

The response for each prompt - if null then the assumption is that some internal error occurred and no response is sent. Note: according to RFC4256 the number of responses should be exactly the same as the number of prompts. However, since it is the server's responsibility to enforce this we do not validate the response (other than logging it as a warning...)

useCurrentPassword

protected boolean useCurrentPassword(ClientSession session,
                                     String password,
                                     String name,
                                     String instruction,
                                     String lang,
                                     String[] prompt,
                                     boolean[] echo)

Checks if we have a candidate password and exactly one prompt is requested with no echo, and the prompt matches a configurable pattern.

Parameters:

session - The ClientSession through which the request is received

password - The current password candidate to use

name - The service name

instruction - The request instruction

lang - The reported language tag

prompt - The requested prompts

echo - The matching prompts echo flags

Returns:

Whether to use the password candidate as reply to the prompts

See Also:

INTERACTIVE_PASSWORD_PROMPT, CHECK_INTERACTIVE_PASSWORD_DELIM

getAuthCommandName

public static String getAuthCommandName(int cmd)