[NIFI-1956] Add "keyboard-interactive" option to SFTPTransfer

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.0.0, 0.7.0
• Fix Version/s: 1.0.0, 0.7.0, 1.0.0-Beta
• Assignee: Oleg Zhurakousky
• Reporter: Oleg Zhurakousky
• Created: 01/Jun/16 20:01
• Updated: 04/Aug/16 21:29
• Resolved: 06/Jun/16 17:34

Description

With RFC-4256 some SSH servers may no longer support or enable "password" as a valid authentication option in favor of "keyboard-interactive".
This results in

Exception in thread "main" com.jcraft.jsch.JSchException: Auth fail

And even though the spec discusses the authentication mechanism where user will be prompted for a password, JSch provides an authentication provider which handles such prompt behind the scenes as long as user sets password in a session.
Belo code shows how to reproduce the issue (at least in osx):

public static void main(String[] args) throws Exception {
        JSch jsch = new JSch();
        Session session = jsch.getSession("<user>", "localhost", 22);
        session.setPassword("<password>");
        Properties properties = new Properties();
        properties.setProperty("StrictHostKeyChecking", "no");
        //properties.setProperty("PreferredAuthentications", "publickey,password,keyboard-interactive");
        properties.setProperty("PreferredAuthentications", "publickey,password");
        session.setConfig(properties);
        session.connect();
        System.out.println("connected");
    }

Issue Links

• links to: GitHub Pull Request #487