com.jcraft.jsch

Class UserAuthGSSAPIWithMIC

java.lang.Object

com.jcraft.jsch.UserAuth

com.jcraft.jsch.UserAuthGSSAPIWithMIC

public class UserAuthGSSAPIWithMIC
extends UserAuth

Usually not to be used by applications. Implements the User Authentication method gssapi-with-mic as described in RFC 4462, section 3, which works by using the GSS-API on both client and server.

For now, we only support the mechanism 1.2.840.113554.1.2.2, i.e. Kerberos 5 authentication (but more could be added by simply changing some private constants in the class, and adding the corresponding GSSContext implementation).

For the actual method-specific calculations we use an implementation of GSSContext which wraps a GSS-API implementation. We will get an implementation class name from the configuration, then instantiate it with the no-argument constructor. To create a context, the create method will be called. After this, we initialize the context with init (using maybe more than one such call) to authenticate the user. Then we use once getMIC to sign some data (containing the SSH session identifier), increasing resistance against man-in-the-middle attacks (where the session identifier will be different on both sides).

See Also:

RFC 4462: Generic Security Service Application Program Interface (GSS-API) Authentication and Key Exchange for the Secure Shell (SSH) Protocol

Field Summary

Fields inherited from class com.jcraft.jsch.UserAuth

buf, packet, SSH_MSG_USERAUTH_BANNER, SSH_MSG_USERAUTH_FAILURE, SSH_MSG_USERAUTH_INFO_REQUEST, SSH_MSG_USERAUTH_INFO_RESPONSE, SSH_MSG_USERAUTH_PK_OK, SSH_MSG_USERAUTH_REQUEST, SSH_MSG_USERAUTH_SUCCESS, userinfo, username

Constructor Summary

Constructors

Constructor and Description
UserAuthGSSAPIWithMIC()

Method Summary

Modifier and Type	Method and Description
boolean	start(Session session) Does the actual authentication, i.e. sends the necessary packets to the other side and receives some from there.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

UserAuthGSSAPIWithMIC

public UserAuthGSSAPIWithMIC()

Method Detail

start

public boolean start(Session session)
              throws Exception

Does the actual authentication, i.e. sends the necessary packets to the other side and receives some from there.

Overrides:

start in class UserAuth

Returns:

true if the authentication was successful, else false.

Throws:

Exception