Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Login failure with public key authentication #8371

Closed
cyberduck opened this issue Nov 26, 2014 · 13 comments
Closed

Login failure with public key authentication #8371

cyberduck opened this issue Nov 26, 2014 · 13 comments
Assignees
Labels
bug sftp SFTP Protocol Implementation worksforme
Milestone

Comments

@cyberduck
Copy link
Collaborator

9257f29 created the issue

Hi,
after an upgrade of Cyberduck to release 4.6 (15810) on Mac OS X Yosemite 10.10.1, Cyberduck stopped working with SFTP and public key authentication. I was using same profiles used with previous release of Cyberduck, same key and same servers, all saved on bookmarks. I've also tried to remove bookmarks and create them again without luck.

If I use login authentication via username/password, everything works.

@cyberduck
Copy link
Collaborator Author

9257f29 commented

If I look at server's log I see lines like this:

Nov 26 09:48:36 web01 sshd[8476]: Received disconnect from 172.16.6.4: 11:  [preauth]
Nov 26 09:49:09 web01 sshd[8489]: Received disconnect from 172.16.6.4: 11:  [preauth]

Server is a Linux Ubuntu 12.04 LTS machine.
Server SSL version is OpenSSH_5.9p1 Debian-5ubuntu1.4, OpenSSL 1.0.1 14 Mar 2012

@cyberduck
Copy link
Collaborator Author

@dkocher commented

What is the login failure message displayed?

@cyberduck
Copy link
Collaborator Author

9257f29 commented

Replying to [comment:3 dkocher]:

What is the login failure message displayed?

Nothing. It just connect and suddenly disconnect without showing file list.

@cyberduck
Copy link
Collaborator Author

@dkocher commented

Can you find any related output in the system.log (/Applications/Utilities/Console.app)?

@cyberduck
Copy link
Collaborator Author

9257f29 commented

Replying to [comment:6 dkocher]:

Can you find any related output in the system.log (/Applications/Utilities/Console.app)?

No, there's no output there (neither by enabling debug logging). But I've started Cyberduck directly from command line in terminal and captured all output into logfile.
I can send you the file via PM (it contains private keys exposed so I can't attach it).

@cyberduck
Copy link
Collaborator Author

@dkocher commented

Replying to [comment:7 lucaboss74]:

Replying to [comment:6 dkocher]:

Can you find any related output in the system.log (/Applications/Utilities/Console.app)?

No, there's no output there (neither by enabling debug logging). But I've started Cyberduck directly from command line in terminal and captured all output into logfile.
I can send you the file via PM (it contains private keys exposed so I can't attach it).

Please remove the keys logged and attach the remaining output or send the file to [feedback@cyberduck.io].

@cyberduck
Copy link
Collaborator Author

@dkocher commented

2014-11-27 19:26:28,099 [background-1] DEBUG ch.cyberduck.core.sftp.SFTPPublicKeyAuthentication - Login using public key authentication with credentials Credentials{user='root'}
2014-11-27 19:26:28,109 [background-1] DEBUG net.schmizz.concurrent.Promise - Setting <<service accept>> to `null`
2014-11-27 19:26:28,109 [background-1] DEBUG net.schmizz.sshj.transport.TransportImpl - Sending SSH_MSG_SERVICE_REQUEST for ssh-userauth
2014-11-27 19:26:28,109 [background-1] DEBUG net.schmizz.concurrent.Promise - Awaiting <<service accept>>
2014-11-27 19:26:28,111 [reader] DEBUG net.schmizz.concurrent.Promise - Setting <<service accept>> to `SOME`
2014-11-27 19:26:28,111 [background-1] DEBUG net.schmizz.sshj.transport.TransportImpl - Setting active service to ssh-userauth
2014-11-27 19:26:28,112 [background-1] DEBUG net.schmizz.concurrent.Promise - Setting <<authenticated>> to `null`
2014-11-27 19:26:28,112 [background-1] DEBUG net.schmizz.sshj.userauth.UserAuthImpl - Trying `publickey` auth...
2014-11-27 19:26:28,112 [background-1] DEBUG net.schmizz.sshj.userauth.method.AuthPublickey - Attempting authentication using PKCS8KeyFile{resource=[PrivateKeyReaderResource] java.io.InputStreamReader@305aee69}

@cyberduck
Copy link
Collaborator Author

9257f29 commented

Replying to [comment:9 dkocher]:

2014-11-27 19:26:28,099 [background-1] DEBUG ch.cyberduck.core.sftp.SFTPPublicKeyAuthentication - Login using public key authentication with credentials Credentials{user='root'}
2014-11-27 19:26:28,109 [background-1] DEBUG net.schmizz.concurrent.Promise - Setting <<service accept>> to `null`
2014-11-27 19:26:28,109 [background-1] DEBUG net.schmizz.sshj.transport.TransportImpl - Sending SSH_MSG_SERVICE_REQUEST for ssh-userauth
2014-11-27 19:26:28,109 [background-1] DEBUG net.schmizz.concurrent.Promise - Awaiting <<service accept>>
2014-11-27 19:26:28,111 [reader] DEBUG net.schmizz.concurrent.Promise - Setting <<service accept>> to `SOME`
2014-11-27 19:26:28,111 [background-1] DEBUG net.schmizz.sshj.transport.TransportImpl - Setting active service to ssh-userauth
2014-11-27 19:26:28,112 [background-1] DEBUG net.schmizz.concurrent.Promise - Setting <<authenticated>> to `null`
2014-11-27 19:26:28,112 [background-1] DEBUG net.schmizz.sshj.userauth.UserAuthImpl - Trying `publickey` auth...
2014-11-27 19:26:28,112 [background-1] DEBUG net.schmizz.sshj.userauth.method.AuthPublickey - Attempting authentication using PKCS8KeyFile{resource=[PrivateKeyReaderResource] java.io.InputStreamReader@305aee69}

Hi,
am I doing something wrong in account configuration ? I've seen you quoted part of log file, but with no comment attached.

Thank you,

Luca

@cyberduck
Copy link
Collaborator Author

@dkocher commented

Replying to [comment:10 lucaboss74]:

Hi,
am I doing something wrong in account configuration ? I've seen you quoted part of log file, but with no comment attached.

Thank you,

Luca

I have no educated guess what is going wrong here. Would it be possible to have a test account on the server with a key configured that shows the same login failure issue?

@cyberduck
Copy link
Collaborator Author

@dkocher commented

#8391 closed as duplicate.

@cyberduck
Copy link
Collaborator Author

@dkocher commented

#8380 closed as duplicate.

@cyberduck
Copy link
Collaborator Author

@dkocher commented

Tracking upstream issue 153.

@cyberduck
Copy link
Collaborator Author

@dkocher commented

Would it be possible for you to create a new key pair that does not work and attach it here.

@iterate-ch iterate-ch locked as resolved and limited conversation to collaborators Nov 26, 2021
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
bug sftp SFTP Protocol Implementation worksforme
Projects
None yet
Development

No branches or pull requests

2 participants