SFTP (using SSH2) -> SSH-2.0-OpenSSH_4.3

Message

TheAngryPenguin · #1 Post by **TheAngryPenguin** » 2006-05-15 04:35

I've recently discovered Endian Firewall and have come to discover that FileZilla cannot connect to it. Here's the debug log of a connection attempt:

Status: Connecting to my.endian.firewall:nnnn ...
Trace: FzSFtp.exe: FzSFtp started and initialized.
Trace: SftpControlSocket.cpp(2305): OnConnect(0) caller=0x003aeddc
Status: Connected with my.endian.firewall:nnnn, initializing SFTP connection...
Command: CONNECT root@my.endian.firewall:nnnn
Trace: SftpControlSocket.cpp(2596): OnReceive(0) caller=0x003aeddc
Trace: FzSFtp.exe: Ssh.c(788): Server version: SSH-2.0-OpenSSH_4.3
Trace: FzSFtp.exe: Ssh.c(788): We claim version: SSH-2.0-PuTTY_FZ_Local:_Apr_20_2006_21:08:09
Trace: FzSFtp.exe: Ssh.c(788): Using SSH protocol version 2
Trace: FzSFtp.exe: Ssh.c(5333): Doing Diffie-Hellman group exchange
Trace: SftpControlSocket.cpp(2596): OnReceive(0) caller=0x003aeddc
Trace: FzSFtp.exe: Ssh.c(5367): Doing Diffie-Hellman key exchange
Trace: SftpControlSocket.cpp(2596): OnReceive(0) caller=0x003aeddc
Trace: FzSFtp.exe: Ssh.c(5455): Host key fingerprint is:
Trace: FzSFtp.exe: Ssh.c(5456): ssh-rsa 2048 xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx
Trace: FzSFtp.exe: Ssh.c(788): Initialised AES-256 client->server encryption
Trace: FzSFtp.exe: Ssh.c(788): Initialised HMAC-SHA1 client->server MAC algorithm
Trace: FzSFtp.exe: Ssh.c(788): Initialised AES-256 server->client encryption
Trace: FzSFtp.exe: Ssh.c(788): Initialised HMAC-SHA1 server->client MAC algorithm
Trace: FzSFtp.exe: Ssh.c(6840): Keyboard-interactive authentication refused
Trace: FzSFtp.exe: Ssh.c(7064): Sent password
Trace: FzSFtp.exe: Ssh.c(6483): Access granted
Trace: FzSFtp.exe: Ssh.c(7161): Opened channel for session
Trace: FzSFtp.exe: Ssh.c(7409): Primary command failed; attempting fallback
Trace: FzSFtp.exe: Ssh.c(7416): Started a shell/command
Trace: FzSFtp.exe: Ssh.c(788): Server sent command exit status 127
Trace: FzSFtp.exe: Ssh.c(5909): All channels closed. Disconnecting
Trace: FzSFtp.exe: Ssh.c(2535): Server closed network connection
Response: Fatal: unable to initialise SFTP: could not connect
Trace: SftpControlSocket.cpp(2393): DoClose(0) caller=0x003aeddc
Trace: SftpControlSocket.cpp(2423): ResetOperation(4100) caller=0x003aeddc
Error: Unable to connect!

The SSHD log reports:

May 15 00:29:19 sshd[12324] subsystem request for sftp failed, subsystem not found
May 15 00:29:19 sshd[12324] subsystem request for sftp
May 15 00:29:19 sshd[12324] Accepted password for root from nnn.nnn.nnn.nnn port 3075 ssh2

Interestingly enough, WinSCP has no problems whatsoever connecting. Is this a problem with FileZilla or a problem with the SSH implementation on Endian?

#2 Post by **botg** » 2006-05-15 10:33

FileZilla uses PuTTY's sftp component to connect to sftp servers. And that requires the sftp subsystem on the server.
I don't know why WinSCP works, but my guess is WinSCP does not use sftp.

PRandal · #3 Post by **PRandal** » 2006-05-15 10:35

What operating system was on the box you were running filezilla on?

Does puTTY 0.58's secure ftp (psftp) work?

Does the latest puTTY nightly psftp work to that box?

Wondering if it is related the the problem I reported last week.

Cheers,

Phil

TheAngryPenguin · #4 Post by **TheAngryPenguin** » 2006-05-15 12:26

PRandal wrote:What operating system was on the box you were running filezilla on?

Microsoft Windows XP [Version 5.1.2600]

PRandal wrote:Does puTTY 0.58's secure ftp (psftp) work?

Nope:

psftp -P -v nnnnn root@host
Server version: SSH-2.0-OpenSSH_4.3
We claim version: SSH-2.0-PuTTY_Release_0.58
Using SSH protocol version 2
Doing Diffie-Hellman group exchange
Doing Diffie-Hellman key exchange
Host key fingerprint is:
ssh-rsa 2048 xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx
Initialised AES-256 client->server encryption
Initialised HMAC-SHA1 client->server MAC algorithm
Initialised AES-256 server->client encryption
Initialised HMAC-SHA1 server->client MAC algorithm
Using username "root".
Keyboard-interactive authentication refused
root@host's password:
Sent password
Access granted
Opened channel for session
Primary command failed; attempting fallback
Started a shell/command
Connected to host
bash: line 2: exec: sftp-server: not found
Server sent command exit status 127
All channels closed. Disconnecting
Server closed network connection
Fatal: unable to initialise SFTP: could not connect

Thanks for reminding me of pfstp, though. Obviously, its verbosity details my problem. My SSHD wasn't configured to allow SFTP. I ended up adding:

Code: Select all

Subsystem   sftp   /usr/libexec/openssh/sftp-server

...to my sshd_config and restarting the daemon; and all is well now!