openssh bugs - Jul 2013 - [Bug 2133] New: scp failes between two ends using password authentication

https://bugzilla.mindrot.org/show_bug.cgi?id=2133

            Bug ID: 2133
           Summary: scp failes between two ends using password
                    authentication
           Product: Portable OpenSSH
           Version: 6.2p1
          Hardware: Other
                OS: Linux
            Status: NEW
          Severity: enhancement
          Priority: P5
         Component: scp
          Assignee: unassigned-bugs at mindrot.org
          Reporter: plautrba at redhat.com

If an user try to run scp with two remote ends using password
authentication, the second attempt fails:

$ scp -v -o PreferredAuthentications=password host-1:/tmp/a
host-2:/tmp/
Executing: /usr/bin/ssh -x -oClearAllForwardings=yes -n -v -o
PreferredAuthentications=password -- host-1 scp -v /tmp/a host-2:/tmp/
...
plautrba at host-1's password: 
debug1: Authentication succeeded (password).
Authenticated to host-1 ([127.0.0.1]:22).
...
Executing: program /usr/bin/ssh host host-2, user (unspecified),
command scp -v -t /tmp/
...
debug1: Next authentication method: password
debug1: read_passphrase: can't open /dev/tty: No such device or address
debug1: Authentications that can continue:
publickey,gssapi-keyex,gssapi-with-mic,password
Permission denied, please try again.


The problem is in scp.c: toremote() which always uses "-n" for
standard
remote to remote. Consequently, stdin is redirected to /dev/null and a
remote ssh can't ask for another password.

As a fix I'd propose to use the patch from RHEL:

--- a/scp.c
+++ b/scp.c
@@ -638,7 +638,10 @@ toremote(char *targ, int argc, char **argv)
                        addargs(&alist, "%s", ssh_program);
                        addargs(&alist, "-x");
                        addargs(&alist,
"-oClearAllForwardings=yes");
-                       addargs(&alist, "-n");
+                       if (isatty(fileno(stdin)))
+                               addargs(&alist, "-t");
+                       else
+                               addargs(&alist, "-n");

-- 
You are receiving this mail because:
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2133

--- Comment #1 from Petr Lautrbach <plautrba at redhat.com> ---
It's probably somehow related to reopened
https://bugzilla.mindrot.org/show_bug.cgi?id=1837

-- 
You are receiving this mail because:
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2133

Petr Lautrbach <plautrba at redhat.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
            Version|6.2p1                       |6.4p1

--- Comment #2 from Petr Lautrbach <plautrba at redhat.com> ---
ping

Do you have any opinion on  this?

-- 
You are receiving this mail because:
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2133

Tomas Mraz <t8m at centrum.cz> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |t8m at centrum.cz
            Summary|scp failes between two ends |scp fails between two ends
                   |using password              |using password
                   |authentication              |authentication

-- 
You are receiving this mail because:
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2133

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Resolution|---                         |FIXED
             Status|NEW                         |RESOLVED
                 CC|                            |djm at mindrot.org

--- Comment #3 from Damien Miller <djm at mindrot.org> ---
Specifying -t may make the channel running scp no longer 8 bit clean.

scp now supports the -3 option for remote to remote transfers. AFAIK it
solves this problem

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2133

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |CLOSED

--- Comment #4 from Damien Miller <djm at mindrot.org> ---
closing resolved bugs as of 8.6p1 release

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.