[Cyberduck-trac] [Cyberduck] #10714: SFTP client fails to authenticate where keyboard-interactive mechanism is not supported
Cyberduck
trac at cyberduck.io
Mon May 27 13:21:49 UTC 2019
#10714: SFTP client fails to authenticate where keyboard-interactive mechanism is
not supported
-----------------------+-------------------------
Reporter: Seayou | Owner:
Type: defect | Status: new
Priority: normal | Milestone:
Component: sftp | Version: 6.9.4
Severity: normal | Keywords:
Architecture: Intel | Platform: macOS 10.12
-----------------------+-------------------------
Server is ProFTPd where keyboard-interactive method is not allowed.
Authentication works fine from lftp, filezilla, etc, but from CyberDuck :)
Obviously happens both under OSX and Windows
Debug logs from server side (the part that matters here):
{{{
2019-05-27 12:54:14,815 [14] <ssh2:10>: auth requested for user 'test',
service 'ssh-connection', using method 'keyboard-interactive'
2019-05-27 12:54:14,816 [14] <ssh2:9>: offering authentication methods:
password
2019-05-27 12:54:14,817 [14] <ssh2:10>: auth method 'keyboard-interactive'
not enabled
2019-05-27 12:54:14,817 [14] <ssh2:19>: waiting for max of 600 secs while
polling socket 1 for writing using select(2)
2019-05-27 12:54:14,818 [14] <ssh2:3>: sent SSH_MSG_USER_AUTH_FAILURE (51)
packet (64 bytes)
2019-05-27 12:54:15,914 [14] <ssh2:9>: disconnecting (Application error)
[at auth.c:1053]
}}}
From client side:
{{{
May 27 14:48:32 MacBook-Pro Cyberduck[63051]: [Thread-38] DEBUG
net.schmizz.concurrent.Promise - Setting <<authenticated>> to `null`
May 27 14:48:32 MacBook-Pro Cyberduck[63051]: [Thread-38] DEBUG
net.schmizz.sshj.userauth.UserAuthImpl - Trying `keyboard-interactive`
auth...
May 27 14:48:32 MacBook-Pro Cyberduck[63051]: [Thread-38] DEBUG
net.schmizz.concurrent.Promise - Awaiting <<authenticated>>
May 27 14:48:33 MacBook-Pro Cyberduck[63051]: [reader] DEBUG
net.schmizz.concurrent.Promise - Setting <<authenticated>> to `false`
May 27 14:48:33 MacBook-Pro Cyberduck[63051]: [Thread-38] DEBUG
net.schmizz.sshj.userauth.UserAuthImpl - `keyboard-interactive` auth
failed
May 27 14:48:33 MacBook-Pro Cyberduck[63051]: [Thread-38] WARN
ch.cyberduck.core.sftp.SFTPSession - Login failed with credentials
Credentials{user='test', token='', identity=null} and authentication
method
ch.cyberduck.core.sftp.auth.SFTPChallengeResponseAuthentication at 5ccef2b0
May 27 14:48:33 MacBook-Pro Cyberduck[63051]: [Thread-38] DEBUG
ch.cyberduck.core.sftp.SFTPSession - Attempt authentication with
credentials Credentials{user='test', token='', identity=null} and
authentication method
ch.cyberduck.core.sftp.auth.SFTPPasswordAuthentication at 346c08a4
May 27 14:48:33 MacBook-Pro Cyberduck[63051]: [Thread-38] DEBUG
ch.cyberduck.core.sftp.auth.SFTPPasswordAuthentication - Login using
password authentication with credentials Credentials{user='test',
token='', identity=null}
May 27 14:48:33 MacBook-Pro Cyberduck[63051]: [Thread-38] DEBUG
net.schmizz.concurrent.Promise - Setting <<authenticated>> to `null`
May 27 14:48:33 MacBook-Pro Cyberduck[63051]: [Thread-38] DEBUG
net.schmizz.sshj.userauth.UserAuthImpl - Trying `password` auth...
May 27 14:48:33 MacBook-Pro Cyberduck[63051]: [Thread-38] DEBUG
net.schmizz.sshj.userauth.method.AuthPassword - Requesting password for
[AccountResource] test at 192.168.99.105
May 27 14:48:33 MacBook-Pro Cyberduck[63051]: [Thread-38] DEBUG
net.schmizz.concurrent.Promise - Awaiting <<authenticated>>
May 27 14:48:34 MacBook-Pro Cyberduck[63051]: [reader] INFO
net.schmizz.sshj.transport.TransportImpl - Received SSH_MSG_DISCONNECT
(reason=BY_APPLICATION, msg=Application error)
May 27 14:48:34 MacBook-Pro Cyberduck[63051]: [reader] ERROR
net.schmizz.sshj.transport.TransportImpl - Dying because - Application
error
net.schmizz.sshj.transport.TransportException: [BY_APPLICATION]
Application error
at
net.schmizz.sshj.transport.TransportImpl.gotDisconnect(TransportImpl.java:548)
at
net.schmizz.sshj.transport.TransportImpl.handle(TransportImpl.java:508)
at
net.schmizz.sshj.transport.Decoder.decodeMte(Decoder.java:159)
at
net.schmizz.sshj.transport.Decoder.decode(Decoder.java:79)
at
net.schmizz.sshj.transport.Decoder.received(Decoder.java:231)
at net.schmizz.sshj.transport.Reader.run(Reader.java:59)
}}}
It'd be nice to try password method first
--
Ticket URL: <https://trac.cyberduck.io/ticket/10714>
Cyberduck <https://cyberduck.io>
Libre FTP, SFTP, WebDAV, S3 & OpenStack Swift browser for Mac and Windows
More information about the Cyberduck-trac
mailing list