Details
-
Bug
-
Status: Closed (View Workflow)
-
Major
-
Resolution: Fixed
-
None
-
None
Description
Authentication Plugin Data Prefixing Protocol Behavior
When exchanging authentication plugin data, the server adds a protective prefix mechanism to prevent potential misinterpretation of certain byte sequences:
- The server adds an extra 0x01 byte prefix to any authentication data that begins with 0x00,0xff, 0xfe, or 0x01
- This safeguard prevents authentication data from being incorrectly interpreted as Error packets, Ok packet or Authentication Switch Request packets
Currently, the Java connector does not handle this protocol specification correctly. In practice, this limitation primarily affects GSSAPI authentication, as other supported authentication methods produce data that cannot begin with the 0x01 byte.