New SFTP plugin available now

[yyang]

Using the plugin with TC 9.50 Beta 2, the caption of the properties window now shows chinease characters (i guess its chinease) instead of german characters.

They are Chinese characters, for sure, but meaningless, which often indicates some encoding error.

[ghisler(Author)]

Yes, this looks like an encoding error. I will ckeck it.

[kaestle227]

I tried setting-up the sftp plugin for total commander to access our new server. I am able to access the server. Unfortunately, I get the following error when downloading or uploading:

SCP download error: SCP_PROTOCOL(28)

I searched a bit, but nothing that really helped. Is this a problem with TC settings? Or is it related to our server and should I contact our system administrator?

[ghisler(Author)]

This means that your server doesn't have the SCP protocol enabled. Please open the connection settings (Alt+Enter on the connection name) and disable SCP.

[kaestle227]

This means that your server doesn't have the SCP protocol enabled. Please open the connection settings (Alt+Enter on the connection name) and disable SCP.

However, when using WinSCP, I am using SCP since SFTP does not work...

[ghisler(Author)]

Maybe WinSCP detects automatically that SCP doesn't work? What does its log show?

[DK]

I started to use the SFTP plugin recently. Overall, it works for me, but I have some questions:

Q1. The Wiki (https://www.ghisler.ch/wiki/index.php?title=Secure_FTP_plugin) sounds like `libcurl` needs to be installed? Is it really the case?

Q2. I have a server that uses Google 2FA that results in a 2FA verification code prompt on every SSH login (after, for example, SSH key negotiation). I could not set up SFTP plugin to work with this server at all. Is it supported? If not, can you do a feature request to support this?

Q3. It looks likes moves to/from SFTP are not supported: moves (F6) result in files copied. Can you do a feature request to support them?

Thanks in advance!

[ghisler(Author)]

Q1: Only if you use Windows XP or older. On newer Windows versions, the plugin uses a newer libssh dll based on Windows encryption functions.

Q2: The server must be configured to support "keyboard-interactive" login but not "password" login. Why? The plugin prefers password login, but only "keyboard-interactive" allows to ask for additional login data. So if your server is configured to support "password" login, then login will fail.

Q3: This is indeed not supported because it's risky - some servers may report a successful transfer even for partial file transfers.

[mag]

Do you plan to implement the OpenSSH certificate support?

https://man.openbsd.org/ssh

A variation on public key authentication is available in the form of certificate authentication: instead of a set of public/private keys, signed certificates are used. This has the advantage that a single trusted certification authority can be used in place of many public/private keys. See the CERTIFICATES section of ssh-******(1) for more information.

https://man.openbsd.org/ssh-******.1#CERTIFICATES

These are usually named such as "user_key-cert.pub"

See also https://www.openssh.com/specs.html - PROTOCOL.certkeys

EDIT: the k e y g e n word (without spaces) gets replaced with ****** so if using the 2nd link correct that yourself.

[ghisler(Author)]

I'm using libssh2, and I couldn't find any references to certificate authentication:
https://www.libssh2.org/

[mag]

Yes unfortunately it seems it isn't implemented in there.
Libssh does seem to implement it though: http://api.libssh.org/rfc/PROTOCOL.certkeys but probbly isn't an easy switch (between those 2 SSH libraries), correct?

[paraglider]

Cannot connect to Ionos sftp server at: ftps://home100188509.1and1-data.host

I see in the log window:

500 'AUTH: command unrecognized
QUIT

I can connect using filezilla client.

[ghisler(Author)]

FTPS and SFTP are not the same.

SFTP is for file transfer via secure shell (SSH).
FTPS is for file transfers via encrypted FTP.

Apparently the server has an FTP server without encryption support.
If you want to use SFTP, install the plugin, then create a connection in Alt+F1 - Drive "\" - Secure FTP.

[paraglider]

Thanks. That worked.

[Mantigora]

So nice that you still answer posts on this very old topic!
I use TC to connect to my Linux servers and there is 1 instance where I can not connect with TC while I can connect with e.g. PuTTY.
This when useing the root account and using the standard
Subsystem sftp /usr/lib/openssh/sftp-server

If I use PuTTY, I can connect with the root-accout.
I can also connect with TC if I use another account than root.

If I change to:
Subsystem sftp internal-sftp
I can connect as root with TC.

So the combination of TC with the standard openssh/sftp-server will not work with the root account.

ftp-log.txt shows for root:

Agent authentication succeeded!
Session startup (SFTP)
Error: Could not initialize SFTP session!
Timeout waiting for response from SFTP subsystem

While in all other cases it shows:
Agent authentication succeeded!
Session startup (SFTP)
CONNECT \xxx.xxx.xxx.xxx

Perhaps you can shed some light onto this behaviour? TIA.
I have been digging the net but so far I only found the suggestion to change to the internal-sftp without any clarification.
BTW, this behaviour has been like this for quite some time, a few years at least, before that time it used to work fine.
I still hope to get this figured out some time.