Topic "SSH / Password change request support"

Author Message
Guest




I would like to see password change request support added to WinSCP. A SSH server may send
SSH_MSG_USERAUTH_PASSWD_CHANGEREQ packet to the client if a password change is required. The client may then try a different authentication method or request a new password from the user and retry password authentication. After the password change, server signals whether the password change was successfull. Also, WinSCP should be able to view the kbd-int messages sent by the server during the password change.

On the GUI side, a separate password change dialog would probably be the best option. It could contain two text fields (fields named new password, new password again or similar) and OK button. WinSCP can test whether the fields are equal and then send the new password. After sending, WinSCP should show the kbd-int message from the server which explains why the password could not be changed (too weak password, ...) or a message about success.

More info about the SSH_MSG_USERAUTH_PASSWD_CHANGEREQ can be found from http://www.ietf.org/internet-drafts/draft-ietf-secsh-userauth-27.txt (pages 10 - 11).
martin
[View user's profile]
Site Admin
Joined: 2002-12-10
Posts: 24553
Location: Prague, Czechia
This is already of PuTTY's todo list (WinSCP uses SSH implementation from PuTTY project).
_________________
Martin Prikryl
Advertisements

You can post new topics in this forum






Search Site

What is WinSCP?

It is award-winning SFTP client, SCP client, FTPS client and FTP client integrated into one software program for file transfer to FTP server or secure SFTP server. [More]

And it's free!

Donate

About donations

$9   $19   $49   $99

About donations

Recommend

WinSCP Privacy Policy

WinSCP License