Mailing List Archive

[Bug 3590] Why is the service name in the USERAUTH REQUEST message "ssh-connect" instead of "ssh-userauth"?
https://bugzilla.mindrot.org/show_bug.cgi?id=3590

Damien Miller <djm@mindrot.org> changed:

What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |RESOLVED
CC| |djm@mindrot.org
Resolution|--- |FIXED

--- Comment #1 from Damien Miller <djm@mindrot.org> ---
It's explained in rfc4252 section 5:

> The 'service name' specifies the service to start after
> authentication. There may be several different authenticated
> services provided. If the requested service is not available, the
> server MAY disconnect immediately or at any later time. Sending a
> proper disconnect message is RECOMMENDED. In any case, if the
> service does not exist, authentication MUST NOT be accepted.

"ssh-userauth" is used in an earlier SSH2_MSG_SERVICE_REQUEST to
request the authentication service, but the authentication is being
performed to request access to the "ssh-connection" service.

--
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.
_______________________________________________
openssh-bugs mailing list
openssh-bugs@mindrot.org
https://lists.mindrot.org/mailman/listinfo/openssh-bugs