[SSHD-74] Even if I do setPublicKeyAuthenticator(null) (or setPasswordAuthenticator(null)) Apache SSHD still reports that it supports that kind of authentication

• Type: Bug
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Fix Version/s: 0.4.0
• Assignee: Guillaume Nodet
• Reporter: Marcus Lagergren
• Created: 12/Feb/10 08:10
• Updated: 28/Apr/10 18:50
• Resolved: 28/Apr/10 18:50

Description

Even if I do setPublicKeyAuthenticator(null) (or setPasswordAuthenticator(null)) Apache SSHD still reports that it supports that kind of authentication

While this is no security problem it is still annoying. If I try to log in using my private key and the public key authenticator is set to null I still get

debug1: Authentications that can continue: password,publickey
debug3: start over, passed a different list password,publickey
debug3: preferred gssapi-with-mic,publickey,keyboard-interactive,password
debug3: authmethod_lookup publickey
debug3: remaining preferred: keyboard-interactive,password
debug3: authmethod_is_enabled publickey
debug1: Next authentication method: publickey
debug1: Trying private key: private-key

from SSHD.

This is confusing. I DON'T want SSHD to tell me publickey authentication if there is no authenticator. Symmetrical problem with password authentications.