wonderedge opened a new issue, #914: URL: https://github.com/apache/mina-sshd/issues/914
### Version 2.15.0 ### Bug description When connecting to an **OpenSSH server** using **sshd** version 2.15.0, setting a password with a **length of 20 or more** characters causes a password authentication failure. The SSH authentication process aborts prematurely during the userauth_passwd stage. On the server side, OpenSSH logs an invalid format packet error, indicating that the SSH payload generated by MINA SSHD during password authentication with longer passwords fails the server-side packet parsing validation. **Environment** * Apache MINA SSHD version: 2.15.0 * Server OpenSSH version: OpenSSH_8.8p1, OpenSSL 1.1.1m 14 Dec 2021 * Java Version: JDK21 ### Actual behavior Authentication fails immediately. The OpenSSH server log shows the following fatal error during pre-authentication: ``` sshd[435781]: fatal: userauth_passwd: parse packet: invalid format [preauth] ``` ### Expected behavior The client should successfully encode and transmit the password packet regardless of whether its length is equal to or greater than 20 characters, allowing successful authentication without triggering a packet parsing error on the server side. ### Relevant log output ```Shell ``` ### Other information _No response_ -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
