Filezilla Client SFTP broken

[J.Polster]

With versions newer then 3.47.1 i.e. 3.48 or 3.48.1-rc1 I cannot connect anymore to my cloud server using SFTP. Here is an extract from the logfile:

Version 3.48 with Error

---

2020-05-14 15:29:14 19688 1 Status: Verbinde mit SERVER.XX...
2020-05-14 15:29:14 19688 1 Antwort: fzSftp started, protocol_version=9
2020-05-14 15:29:14 19688 1 Befehl: open "USER@…" 22
2020-05-14 15:29:14 19688 1 Status: Using username "USER".
2020-05-14 15:29:14 19688 1 Befehl: Pass:
2020-05-14 15:29:14 19688 1 Status: Access denied
2020-05-14 15:29:14 19688 1 Fehler: FATAL ERROR: No supported authentication methods available (server sent: publickey)
2020-05-14 15:29:14 19688 1 Fehler: Herstellen der Verbindung zum Server fehlgeschlagen

Version 3.47.1 working

---

2020-05-14 15:25:27 9536 1 Status: Verbinde mit SERVER.XX...
2020-05-14 15:25:28 9536 1 Antwort: fzSftp started, protocol_version=9
2020-05-14 15:25:28 9536 1 Befehl: open "USER@…" 22
2020-05-14 15:25:28 9536 1 Befehl: Pass:
2020-05-14 15:25:28 9536 1 Status: Connected to SERVER.XX

So working with the older version works. So does switching to FTPS.

Thank you for your support and for providing FileZilla.

J.Polster

[tzorattoa]

Hello, we encounter the exact same issue, here are the logs from the sftp server (proftpd in this case) :

2020-07-16 08:00:19,130 mod_sftp/1.0.0[28996]: sent server version 'SSH-2.0-SFTP SERVER'
2020-07-16 08:00:19,130 mod_sftp/1.0.0[28996]: received client version 'SSH-2.0-FileZilla_3.49.1'
2020-07-16 08:00:19,130 mod_sftp/1.0.0[28996]: handling connection from SSH2 client 'FileZilla_3.49.1'
2020-07-16 08:00:19,150 mod_sftp/1.0.0[28996]: + Session key exchange: diffie-hellman-group-exchange-sha256
2020-07-16 08:00:19,151 mod_sftp/1.0.0[28996]: + Session server hostkey: ssh-rsa
2020-07-16 08:00:19,151 mod_sftp/1.0.0[28996]: + Session client-to-server encryption: aes256-ctr
2020-07-16 08:00:19,151 mod_sftp/1.0.0[28996]: + Session server-to-client encryption: aes256-ctr
2020-07-16 08:00:19,151 mod_sftp/1.0.0[28996]: + Session client-to-server MAC: hmac-sha2-256
2020-07-16 08:00:19,151 mod_sftp/1.0.0[28996]: + Session server-to-client MAC: hmac-sha2-256
2020-07-16 08:00:19,151 mod_sftp/1.0.0[28996]: + Session client-to-server compression: none
2020-07-16 08:00:19,151 mod_sftp/1.0.0[28996]: + Session server-to-client compression: none
2020-07-16 08:00:20,677 mod_sftp/1.0.0[28996]: sending acceptable userauth methods: password
2020-07-16 08:00:20,695 mod_sftp/1.0.0[28996]: client sent SSH_MSG_IGNORE message (99 bytes)
2020-07-16 08:00:20,696 mod_sftp/1.0.0[28996]: cipher algorithm 'USERAUTH_REQUEST someuser' or MAC algorithm 'none' unacceptable for password authentication, denying password authentication request
2020-07-16 08:00:20,696 mod_sftp/1.0.0[28996]: no more auth methods available, disconnecting
2020-07-16 08:00:20,696 mod_sftp/1.0.0[28996]: disconnecting XX.XX.XX.XX (No other authentication mechanisms available)

It works fine with OpenSSH server, not with proftpd, starting with Filezilla 3.48.0 (3.47 works fine).

Please let us know if something has to be fixed on proftpd side or on Filezilla

thanks

[Tim Kosse]

This is not a blocker, it does not affect all users of FileZilla.

[tzorattoa]

Well, I've read carefully the guidelines here https://filezilla-project.org/support.php?mode=bugreport and there ​https://trac.filezilla-project.org/wiki/TicketSubmissionGuide and they don't say anything about the priority rules. Only on ​https://trac.filezilla-project.org/wiki/NewTicketFormGuide I've finally found something about this. Consider leaving all the instructions you want us to follow on a single easy-to-find page.

Thanks for closing this ticket only because of that, that's really helpful

[tzorattoa]

new ticket for the same bug : ​https://trac.filezilla-project.org/ticket/12218#ticket