topic Re: SFTP can not login in in Network and Storage Protocols

SFTP can not login in

unitech89e9 — Wed, 19 Nov 2014 10:12:07 GMT

I want to setup a sftp in windows enviroment,

so I create a volume in /vol/sftpvol

the sftp configuration is

FAS2040*> options sftp
sftp.auth_style              mixed
sftp.bypass_traverse_checking on
sftp.dir_override            /vol/sftpvol
sftp.dir_restriction         on
sftp.enable                  on
sftp.idle_timeout            900s       (value might be overwritten in takeover)
sftp.locking                 delete
sftp.log_enable              on
sftp.log_filesize            512k
sftp.log_nfiles              6
sftp.max_connections         15         (value might be overwritten in takeover)
sftp.max_connections_threshold 75%        (value might be overwritten in takeover)
sftp.override_client_permissions off

and the ftp configuration is

FAS2040*> options ftp
ftpd.3way.enable             off
ftpd.anonymous.enable        on
ftpd.anonymous.home_dir
ftpd.anonymous.name          anonymous
ftpd.auth_style              mixed
ftpd.bypass_traverse_checking on
ftpd.dir.override            /vol/sftpvol
ftpd.dir.restriction         on
ftpd.enable                  on
ftpd.explicit.allow_secure_data_conn on
ftpd.explicit.enable         off
ftpd.idle_timeout            900s       (value might be overwritten in takeover)
ftpd.implicit.enable         off
ftpd.ipv6.enable             off
ftpd.locking                 none
ftpd.log.enable              on
ftpd.log.filesize            512k
ftpd.log.nfiles              6
ftpd.max_connections         500        (value might be overwritten in takeover)
ftpd.max_connections_threshold 0%         (value might be overwritten in takeove                                             r)
ftpd.tcp_window_size         28960

and then the ssh that I configuration is

FAS2040*> secureadmin status
ssh2    - active
ssh1    - active
ssl     - active

but when I use the sftp client software to login with root account

it report me [Authentication failed]

and the filer's console show some messages

Wed Nov 19 09:48:51 GMT [FAS2040:openssh.invalid.channel.req:warning]: SSH client (SSH-2.0-WinSCP_release_5.5.6) from 192.168.0.60 sent unsupported channel request (10, simple@putty.projects.tartarus.org).
Wed Nov 19 09:48:51 GMT [FAS2040: sshd_1:error]: error: Disconnecting: SFTP connection creation failed
Wed Nov 19 09:48:51 GMT [FAS2040:sftp.connection.request.failed:error]: SFTP (SSH File Transfer Protocol) connection request from client system 192.168.0.60, user root failed, because the user is not permitted to do SFTP (SSH File Transfer Protocol) operations.

Why the root not permitte?

How to solve this problem?

Please help me!

Thanks very much!

Re: SFTP can not login in

georgevj — Thu, 20 Nov 2014 06:24:36 GMT

Have you checked the following KB articles?

https://kb.netapp.com/support/index?page=content&id=1012617

https://kb.netapp.com/support/index?page=content&id=1014125

Re: SFTP can not login in

unitech89e9 — Mon, 24 Nov 2014 00:34:21 GMT

Hi georgevj

Thanks for your help,

I can use the root login through sftp,

but I still can't login by the other account!

when I login by the [administrator] this builtin account in filer,

it will show me this error message

the error messange in console is

Mon Nov 24 00:20:11 GMT [fas2040:sftp.connection.request.failed:error]: SFTP (SSH File Transfer Protocol) connection request from client system 192.168.0.60, user administrator failed, because the user is not permitted to do SFTP (SSH File Transfer Protocol) operations.

when I use the account that I create to login,

it will message me that the password is wrong,

and the console will show

fas2020> Mon Nov 24 00:22:34 GMT [fas2020: sshd_1:info]: Failed password for 89e9 from 192.168.0.60 port 56663ssh2

Is any configration that I missing or setting error?

Thanks

Re: SFTP can not login in

thokelly — Fri, 04 Mar 2016 14:48:52 GMT

Hi,

and what is the solution with using CIFS???

Greetings,

Tom

Re: SFTP can not login in

georgevj — Mon, 07 Mar 2016 09:20:30 GMT

Please follow this KB word by word: https://kb.netapp.com/support/index?page=content&id=1012617

If you miss or mis-spel any of the words in /etc/password and /etc/group files, you will receive an error like "Mon Mar 7 04:06:42 GMT [sshd_0:info]: Failed password for sftpuser from 192.168.0.60 port 51543ssh2"

Make sure that the UID and GID specified in passwd and group files are valid. and the option "sftp.auth_style" is set to "unix"