User authentication types 1-4

[jcarroll]

I am troubleshooting a ticket with an authentication issue. What are the SSH User Authentication types? (1-4)

Right now we are seeing the SSH User authentication from one source is coming in as a type 4 and failing but another source is coming in as a type 1 and authenticating.

SSH User Authentication [type=4, user= name. service=ssh-connection]
User authentication attempt failed[user= name] [next_types=0x1] [error=4]
session::ssh_accept
SSH User Authentication [type=1, user= name, service=ssh-connection]


Is the client attempting with a different method?

[oibaf]

Please, redirect your questions about FileZilla Professional Enterprise Server to the correct customer forum: https://customerforum.filezilla-project ... um.php?f=4

[coxswain]

I am investigating a similar occurrence, i.e. FileZilla server log contains the following entries:

2023-06-30T00:28:36.107Z >> [SSH SFTP Session 1856825 <IP>] SSH User Authentication [type=4, user=USERNAME, service=ssh-connection]
2023-06-30T00:28:40.488Z >> [SSH SFTP Session 1856825 <IP>] SSH User Authentication [type=4, user=USERNAME, service=ssh-connection]
2023-06-30T00:28:40.488Z !! [SSH SFTP Session 1856825 <IP>] User authentication attempt failed [user=USERNAME] [next_types=0x3] [error=4]
2023-06-30T00:28:40.488Z >> [SSH SFTP Session 1856825 <IP>] SSH User Authentication [type=1, user=USERNAME, service=ssh-connection]
2023-06-30T00:28:40.551Z >> [SSH SFTP Session 1856825 <IP>] SSH User Authentication [type=1, user=USERNAME, service=ssh-connection]
2023-06-30T00:28:40.551Z == [SSH SFTP Session 1856825 <IP> USERNAME] User authenticated successfully [user=USERNAME]
2023-06-30T00:28:40.598Z >> [SSH SFTP Session 1856825 <IP> USERNAME] Opening directory '/DIR'
2023-06-30T00:28:40.848Z == [SSH SFTP Session 1856825 <IP> USERNAME] Closing connection [ code=106 ]
2023-06-30T00:28:40.848Z !! [SSH SFTP Server] Session 1856825 ended with error. Reason: ECONNABORTED - Connection aborted.

This behavior repeats for all users coming from the same <IP> address. A user authenticating from a different IP address authenticates immediately with type=1:

2023-06-30T00:28:55.784Z >> [SSH SFTP Session 1856830 <different IP>] SSH User Authentication [type=1, user=USERNAME2, service=ssh-connection]
2023-06-30T00:28:55.847Z >> [SSH SFTP Session 1856830 <different IP>] SSH User Authentication [type=1, user=USERNAME2, service=ssh-connection]
2023-06-30T00:28:55.847Z == [SSH SFTP Session 1856830 <different IP> USERNAME2] User authenticated successfully [user=USERNAME2]
2023-06-30T00:28:55.862Z >> [SSH SFTP Session 1856830 <different IP> USERNAME2] Opening directory '/DIR2'
2023-06-30T00:28:55.909Z == [SSH SFTP Session 1856830 <different IP> USERNAME2] Closing connection [ code=0 ]
2023-06-30T00:28:55.909Z == [SSH SFTP Server] Session 1856830 ended gracefully.

What is the meaning of 'type' in this context and does it have anything to do with the error causing the connection abort? Thanks.

[botg]

Please head to the dedicated customer support forums for assistance with FileZilla Pro Enterprise Server: https://customerforum.filezilla-project.org/

[boco]

@jcarrol: Your topic can't be moved, as you are in the completely wrong place. You need to head over to the official customer forums, as you are using FileZilla Pro Enterprise Server, which is not supported here (in the free forums).