Keys within Pageant not used while opening a SFTP connection

[Aaron]

Sorry, we haven't been able to tackle this one yet, but it's still an open entry we're looking into.

[Aaron]

Hello,

One of our developers dug into this a bit and didn't run into the issue like I did. As a quick test, if you update to the latest versions of PuttyGen, Pageant, and Putty, does this issue reproduce with a newly generated ppk keypair? If so, would it be possible to email us that key pair to [email protected] (Along with a link back to this forum thread for our reference)?

[Manolo]

Perhaps the problem is that your key is DSA ?

[TatayMo]

I don't know if this helps, but I noticed in the log that Beyond Compare 4 tries to do Keyboard interactive authorization first then does Public key agent authorization.

4/9/2020 8:17:15 PM Connecting to SomeServer
4/9/2020 8:17:16 PM Server key [DSS 1024 lots of hex stuff]
4/9/2020 8:17:16 PM Trying stored password for keyboard-interactive authentication
4/9/2020 8:17:17 PM Keyboard interactive authorization failed.
4/9/2020 8:17:18 PM Keyboard interactive authorization failed.
4/9/2020 8:17:18 PM Public key agent authorization successful.
4/9/2020 8:17:19 PM Server software: OpenSSH_6.0
4/9/2020 8:17:19 PM Compression: none
4/9/2020 8:17:19 PM Encryption: aes256-ctr
4/9/2020 8:17:19 PM MAC algorithm: hmac-sha2-512
4/9/2020 8:17:19 PM Connected to SomeServer port 22

[Aaron]

Hello,

Is that log using Putty's Pageant or a stored key within BC4? For within BC4, we've found a recent issue with OPENSSH Private Keys, and the key needs to be regenerated as RSA:
http://www.scootersoftware.com/suppo...vatekey_compat

Or the OpenSSH Key can be converted to PPK using PuttyGen.

[TatayMo]

Hello,

Is that log using Putty's Pageant or a stored key within BC4? For within BC4, we've found a recent issue with OPENSSH Private Keys, and the key needs to be regenerated as RSA:
http://www.scootersoftware.com/suppo...vatekey_compat

Or the OpenSSH Key can be converted to PPK using PuttyGen.

I'm using Pageant and it was a key created by using PuttyGen

[Chris]

TatayMo,

What Linux distribution is the server running (Ubuntu 14.04, Debian 8, etc)?

Is it using the default /etc/ssh/sshd_config for the Linux distribution, or is it customized? If it's customized, please post it here or email it to [email protected] with a link to this forum post.

[TatayMo]

Actually the server is on IBM AIX version 7.1. The sshd_config is below. I'm assuming it is a customized version. Please let me know if there is anything else you guys need to get to the bottom of this.

Protocol 2
LoginGraceTime 3m
PubkeyAuthentication yes
PasswordAuthentication no
ChallengeResponseAuthentication yes
UsePAM yes
X11Forwarding yes
X11DisplayOffset 10
X11UseLocalhost yes
Subsystem sftp /usr/sbin/sftp-server
DenyUsers XXXXXXXXXX
DenyUsers XXXXXXXXXX

[TatayMo]

I'm sure this issue is low on your priority list since there is a workaround, but is there any update for this? Anything else you guys need from the community to get to the bottom of it?

Thanks as always for your wonderful program.