New plugin available: SFTP

[ghisler(Author)]

/mnt/sdcard is probably a link, not a real folder, so it appears as a file if the sftp server doesn't handle it correctly. Try using the directory history in Total Commander to return to /mnt/sdcard.

[charly_35]

Yes this is the pb. In fact, the sdcard is now mounted on /storage and not on /mnt
That was my mistake.
Thanks.
Charly_35

[Andy8]

I am not able to connect with user name and password:
always get the message:
sftp exhausted available authentication...

how to solve this?

ftp connection works well!

[Hacker]

Andy8,
Can you connect with other SFTP clients? If yes, please post a log of the connection.

Roman

[Andy8]

yes I can connect with Linux Mint 17:
Open Thunar Location Bar and type: sftp://192.168.1.xxx:22/

Then a window opens and asks for user and password,
and then it is ok...
I don't have log data of the connection available.

If I use the same data with Android TC, with the same user,
(or at least In try to use the same username...)
the window also opens and asks for the password,
but then with no success, and the message:
sftp exhausted available authentication...

The password is simple ascii with no special characters.

[ghisler(Author)]

The message:

sftp exhausted available authentication...

means that the server was configured to use login methods not supported by the SFTP plugin. There are multiple login types:
1. Password: The client sends user name and password in clear text (but the connection itself is of course encrypted)
2. Keyboard interactive: The server asks for user name and password separately, and the client provides them when asked
3. GSSapi: This is some kind of challenge-response method where client and server exchange encrypted messages to authenticate
4. Kerberos: Similar to GSSapi
5. Public key: The user provides a client certificate to log in. This is configured in the plugin via "User certificate (PEM file)".

The sshj library used by TC supports methods 1,2 and 5.

If you have access to the server, look at the file /etc/sshd/sshd_config to find out which methods are enabled. To log in with user name and password, at least one of the following methods needs to be enabled with one of these lines:
ChallengeResponseAuthentication yes
or
PasswordAuthentication yes

If you don't have access to the server, you can install Total Commander for Windows and my SFTP plugin. Then enable FTP logging, and try to log in. The following line will appear in the log:

Supported authentication methods: publickey,password,keyboard-interactive

These 3 are supported by TC for Windows and TC for Android. If none of the 3 is showing up here, you will not be able to log in.

[Andy8]

many thanks for answering and for your patience!

I am using method 2 with TC and with Linux.
But sorry to say, I did not notice:
the "new connection" is asking for username and pw
but this is hidden under the keyboard...

now with complete input: IT IS WORKING FTP and SFTP !!

I have one more question: will open a new tobic

[ghisler(Author)]

2Andy8
That's odd, the input dialog should always appear above the keyboard! What device are you using? Screen resolution?

[Andy8]

I use an Nexus 7, and the screen resolution is not
the problem.
IMHO this is system immanent: because the keyboard
always pops up if an input is required.
I was just not careful enough to check it out...
Anyway, thank you for your help!

[ulicky]

I am not able to connect with user name and password AND certificate:
always get the message:
sftp exhausted available authentication...

My SFTP needs valid user certificate AND username/password auth.
I see when cert is in use, this plugin is not using password as password for user, but as password for certificate. Can this be altered to way to support username, password + certificate and its password? Ideally include certificate not as point to file, but paste to some textbox? Thanks

[ghisler(Author)]

Sorry, this isn't supported. If you enter a password, it will be used to decrypt the user certificate.

[obmana]

About the large version: If your client certificate file (*.pem) doesn't contain the public key, you need to put the public key (*.key) in the same directory and give it the same name as the .pem file.

Through desktop TC, I successfully connect to a linux server, which grants access to my pub key. So I use the following keys on my desktop TC:

id_rsa
id_rsa.pub

IIUC, .pem is just an OpenSSH private key with pem extension. So I copied id_rsa to id_rsa.pem and id_rsa.pub to id_rsa.key, and uploaded to my tablet. However I cannot make connection by using id_rsa.pem on my tablet as it times out.

What am I doing wrong?

[ghisler(Author)]

Please create a log file of the login process:

1. Switch to the internal SD card by going to the home folder, and then going to "SD-Card"
2. Create a new folder named
.TotalCommander
including the dot at the beginning (if it doesn't exist yet)
3. You may need to enable the display of hidden files in the TC configuration if you cannot see that folder.
4. Go inside this folder .TotalCommander
5. Create a new file named log.txt by holding down a finger on the first line (..)
6. Close Total Commander via "X" button and restart it

Please replace any sensitive names by other things before posting, but please do not delete any lines.

[obmana]

There in not much info:

Code: Select all

2016-06-27 17:09:33 SFTP:refresh list
2016-06-27 17:09:38 SFTP:Connecting...
2016-06-27 17:10:41 SFTP:ConnectException: failed to connect to /192.168.100.3 (port 22): connect failed: ETIMEDOUT (Connection timed out)

Previously, when server was not restricted to allowed keys, but just with password I was connecting successfully.

[ghisler(Author)]

This means that your device couldn't reach the IP address given. It didn't even come to the point where it could send login information like client certificate. Maybe it's blocked by a firewall, or in wrong subnet?

Can you ping the IP address from Android?