openssh bugs - Dec 2009 - [Bug 1687] New: scp/sftp is not working when using key based (authorized_keys2) authentication

https://bugzilla.mindrot.org/show_bug.cgi?id=1687

           Summary: scp/sftp is not working when using key based
                    (authorized_keys2) authentication
           Product: Portable OpenSSH
           Version: 5.1p1
          Platform: All
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: sftp
        AssignedTo: unassigned-bugs at mindrot.org
        ReportedBy: info at milde.cz


If you use key based authentication (without password), scp and sftp
tools doesn't work.

SFTP returns: Received message too long 1299542900

SCP returns: Must be connected to a terminal.

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1687

Daniel Milde <info at milde.cz> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |info at milde.cz

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1687

Darren Tucker <dtucker at zip.com.au> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |dtucker at zip.com.au

--- Comment #1 from Darren Tucker <dtucker at zip.com.au> 2009-12-20
10:55:13 EST ---
Nothing in OpenSSH generates that message you report for scp.  I
suspect what's happening is the remote host is sending something to
stdout, and my guess is that it's something like kinit trying to ask
for a password and failing.

Does ssh yourserver true generate any output?  If so, you need to fix
that on the server.

$ perl -e 'printf "%x\n", 1299542900'
4d757374 
$ perl -e 'printf "%c%c%c%c\n", 0x4d, 0x75, 0x73, 0x74'
Must

So the sftp one is probably the same message as the scp one.

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1687

--- Comment #2 from Daniel Milde <info at milde.cz> 2009-12-20 11:05:07
EST ---
On remote host runs OpenSSH 5.1p1 (Debian Lenny). SSHd configuration is
default except Port and AllowUsers directives. SSH login into remote
host works. SFTP/SCP connection doesn't work.

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1687

--- Comment #3 from Darren Tucker <dtucker at zip.com.au> 2009-12-20
14:12:07 EST ---
(In reply to comment #2)
> On remote host runs OpenSSH 5.1p1 (Debian Lenny). SSHd configuration is
> default except Port and AllowUsers directives. SSH login into remote
> host works. SFTP/SCP connection doesn't work.
You did not answer my question: does "ssh yourserver true" generate
any
output?  With or without public-key authentication?

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1687

--- Comment #4 from Daniel Milde <info at milde.cz> 2009-12-21 06:12:15
EST ---
Both methods returns "Must be connected to a terminal.". I guess
command true needs a terminal to be openned (ssh -t). 

But how is this connected to scp and sftp? Scp and sftp doesn't work
when key authentication is neabled. True doesn't work in both cases.

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1687

--- Comment #5 from Darren Tucker <dtucker at zip.com.au> 2009-12-21
08:19:03 EST ---
(In reply to comment #4)
> Both methods returns "Must be connected to a terminal.". I guess
> command true needs a terminal to be openned (ssh -t). 
No, it doesn't.  "true" returns no output at all, which proves
that
your problem is caused by something on the remote system polluting
stdout.  It's probably either something in the PAM stack, or something
in the shell startup.  Either way, it's not a problem with OpenSSH.
> But how is this connected to scp and sftp? Scp and sftp doesn't work
> when key authentication is neabled. True doesn't work in both cases.
Fix whatever caused ssh'ing to generate spurious output on stdout. 
When you've fixed that, as proven by "ssh yourserver true"
generating
no output, scp and sftp will start working.

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1687

--- Comment #6 from Daniel Milde <info at milde.cz> 2009-12-21 10:19:26
EST ---
I disabled PAM (UsePAM no) and bug still persists. Looks like Debian
bug so I will report it to Debian bugzilla.

Thank you very much for your help!

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1687

Darren Tucker <dtucker at zip.com.au> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |INVALID

--- Comment #7 from Darren Tucker <dtucker at zip.com.au> 2009-12-21
10:40:33 EST ---
Thanks, closing.

I would be taking a good long look at what you have in your .profile or
other shell startup files first before filing a bug against debian,
though.

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1687

--- Comment #8 from Daniel Milde <info at milde.cz> 2009-12-21 10:52:49
EST ---
I am spilling ashes on my head. You are totaly right. I forgot screen
invocation in my bashrc :(

Thank you

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1687

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |CLOSED

--- Comment #9 from Damien Miller <djm at mindrot.org> 2010-04-16 15:49:45
EST ---
Mass move of bugs RESOLVED->CLOSED following the release of
openssh-5.5p1

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.