Opened 7 months ago

Last modified 7 weeks ago

#11874 new Bug report

SFTP servers denying access because of so many keys being sent

Reported by: AG3 Owned by:
Priority: high Component: FileZilla Client
Keywords: SFTP, public key authentication, private key, key file, type 2 (protocol error), "too many authentication failures" Cc:
Component version: 3.41.1 Operating system type: OS X
Operating system version: 10.13.6 (17G5019)

Description

For an entire day I was talking to tech support of a hosting company and trying to figure out what's wrong with my connection. Turns out I have so many keys attempting to be used that the server was denying access with this error response:

Error: Server sent disconnect message
Error: type 2 (protocol error):
Error: "Too many authentication failures"
Error: Could not connect to server

If I removed my keys down to just 4 then I was able to connect. This is a huge pain and bug IMO since I should be able to specify on a per-site basis what key to use if needed like my IDE allows which doesn't run into a similar issue.

Possible solution options?

1) In the SFTP key page in settings allow me to click an "Edit Key" button or something that allows me to checkmark off what sites I want it used on.

2) On my site setting page on "Advanced" tab allow me to say "Specify key file" or allow me to specify key file on that screen for use on that site or select a dropdown from available files to use.

Crazy annoying that there isn't an option for this already in FZ.

Change History (2)

comment:1 Changed 4 months ago by rvdginste

I bumped into the same issue and it is very annoying. I have Putty's pageant running because it has my ssh private keys. I need to access an SFTP server using a username/password combination. Since there is no way to tell Filezilla to *not* use pageant, it keeps on running into the issue of "too many authentication failures". It is doing this even though I explicitly specify the password that should be used: why does it even try to use pageant if a password was given?

So, the only way I can use filezilla, is to shut down pageant, use filezilla, and start pageant up again and register all my keys.

comment:2 Changed 7 weeks ago by stingray21

I have the same issue on Linux with Filezilla 3.43.0

And apparently there are more people e.g. https://superuser.com/questions/1421528/filezilla-sftp-attempts-to-authorize-via-key-before-set-password

The hosting provider only offers SFTP with password. The only workaround for now is to move all my keys out of the .ssh folder and move them back when I connect to other accounts. Would be very happy if there is a better and more convenient solution.

Note: See TracTickets for help on using tickets.