SFTP - associate specific private key with host

Need help with FileZilla Client? Something does not work as expected? In this forum you may find an answer.

Moderator: Project members

Locked
Message
Author
jman
504 Command not implemented
Posts: 6
Joined: 2010-10-22 12:01
First name: Carl
Last name: Pearson

SFTP - associate specific private key with host

#1 Post by jman » 2010-10-22 12:18

Howdy, when using private keys and SFTP, am unclear on how FZ figures out which key to use for a particular host.

This is on 3.3.4.1 for Mac

I understand adding in keys via the Connection/SFTP tab, and the first site which was set up works fine. In this case am using keys without passphrases.

However, according to the connection log each subsequent site defined in the Site Manager is using the first key that was loaded. That of course results in a denied connection (exitcode 127 is being reported).

As the SFTP section does allow one to import multiple private keys, it would seem there should be an entry in the Site Manager to define which key to use, especially as some of the hosts connect with the same user name.

Any pointers would be most appreciated.

Cheers!
--
Carl

User avatar
botg
Site Admin
Posts: 33056
Joined: 2004-02-23 20:49
First name: Tim
Last name: Kosse
Contact:

Re: SFTP - associate specific private key with host

#2 Post by botg » 2010-10-23 18:35

Unfortunately not currently possible.

jman
504 Command not implemented
Posts: 6
Joined: 2010-10-22 12:01
First name: Carl
Last name: Pearson

Re: SFTP - associate specific private key with host

#3 Post by jman » 2011-04-12 00:52

Now on 3.4.0, I actually can log into multiple clients, but am limited to a half-dozen or so. Problem seems to be the remote server bombing out from FZ trying the keys one at a time until it finds the one that works.

Sure, with root access to all the servers I touch, I could just reconfigure SSHD to allow more tries, but that's not practical. Using SSH_AUTH_SOCK doesn't help because that's just designed for storing passwords, so FZ still cycles through all the keys until it finds the one it likes (so that method doesn't really do anything for passwordless private keys), causing the server to again bomb out from multiple tries.

Hate to use a different app (Quack), FZ has been very good. Someone suggested Mozilla's plugin, but it doesn't appear to deal with passwordless keys. This really is a killer. It shouldn't be that hard for the app to allow explicit use of a particular key per connection.

But since it hasn't been fixed, there must be something else going on. Just curious, what's the complication?

jman
504 Command not implemented
Posts: 6
Joined: 2010-10-22 12:01
First name: Carl
Last name: Pearson

Re: SFTP - associate specific private key with host

#4 Post by jman » 2011-04-12 02:16

Of course, one *could* just add another key to the authorized keys file for each login, and just use one private key. That's fairly insecue, though...

User avatar
abbasuddin
500 Command not understood
Posts: 1
Joined: 2017-01-06 13:52
First name: Abbas
Last name: Uddin
Location: Dhaka, Bangladesh
Contact:

Re: SFTP - associate specific private key with host

#5 Post by abbasuddin » 2017-01-06 14:38

botg wrote:Unfortunately not currently possible.
Filezilla version 3.23 the latest version has a feature on site manager to load your private key-file.

It's the proper way to login without password for specified server.

Cheers!
Attachments
Site manager preview
Site manager preview
site-manager.JPG (84.32 KiB) Viewed 3007 times
:idea: Growing up everyday.
Coding for next...

User avatar
boco
Contributor
Posts: 25192
Joined: 2006-05-01 03:28
Location: Germany

Re: SFTP - associate specific private key with host

#6 Post by boco » 2017-01-06 19:27

I guess they will know already. The topic is nearly 6 years old.

Closed due to thread necromancing.
### BEGIN SIGNATURE BLOCK ###
No support requests per PM! You will NOT get any reply!!!
FTP connection problems? Do yourself a favor and read Network Configuration.
FileZilla connection test: https://filezilla-project.org/conntest.php
### END SIGNATURE BLOCK ###

Locked