Opened 12 years ago

Last modified 12 years ago

#3323 closed Bug report

Empty challenge text during interactive login under wxGTK

Reported by: hotdog003 Owned by: Tim Kosse
Priority: normal Component: Other
Keywords: Cc: hotdog003, Tim Kosse
Component version: Operating system type:
Operating system version:

Description

Problem: I'm using GRC's PPP for passwords. The idea is that you have a paper card with you with lists of passcodes. When you log in, the server asks you for your password and then asks you for a passcode on the card. This is accomplished through challenge-response (interactive keyboard-based) SSH authentication. Filezilla does not ask the challenge that the server asks.

How to reproduce: Install Filezilla 3.03 on Ubuntu Gutsy. Install ppp-pam and configure it for SSH (located at http://code.google.com/p/ppp-pam/) Open Filezilla, configure it to log in using SFTP, then choose the interactive login method. Connect to the server.

What happens: The interactive dialog pops up, but it is blank and it doesn't ask which passcode to enter. See this screenshot: http://i12.tinypic.com/7wffgqq.png FileZilla should be asking for "Passcode 3A [1]", but the challenge box is blank. However, if the correct passcode is entered, the server authenticates me.

Again, I'm using FileZilla 3.0.3 with Ubuntu Gutsy.

Attachments (1)

filezilla.log (1.1 KB) - added by hotdog003 12 years ago.
Filezilla log

Download all attachments as: .zip

Change History (6)

Changed 12 years ago by hotdog003

Attachment: filezilla.log added

Filezilla log

comment:1 Changed 12 years ago by Tim Kosse

ppp-pam doesn't compile on my systems (badly written code it appears), would it be possible to get a temporary guest account on your server to analyze this further?

comment:2 Changed 12 years ago by hotdog003

I'll see what I can do.

Hostname: krypton.dyndns.tv
Username: guest
Password: welcomehere

And here's your first punchcard:
tallyho [1]

A B C D E F G

1: 3@B# n6=C e=bY ?U%B HJku MLJ= XDDR
2: TAfE Gf?T f8NM Pr3P !phA oGbN XAUs
3: ?gvg fV69 cPkk :jXZ KBF7 MT5H erxB
4: J+g+ kSPa #65o !D8? ryE+ fwa? ?i6h
5: iMtw bPTT ra!A zZfh P=Bn k2q9 4zq@
6: k:Dh J+Pm MbGk G!9i MhVG a3Hz enf%
7: sVWE BZM= vhfb =CMj Kiwq Zgip f?sF
8: Yj87 4=ir ZgX2 sn?h mwE6 Gd2= DL?W
9: 3XVH 92aS on3X ukvB jy=7 +ym8 Uo5u

10: %+6D Wt#g #smc hjrx KaBD kdig y4iS

Good luck, and please don't trash my system.

comment:3 Changed 12 years ago by Tim Kosse

Confirmed

comment:4 Changed 12 years ago by Tim Kosse

Thanks for reporting. This issue has been fixed in the SVN
repository and will be available with the next version.

comment:5 Changed 12 years ago by hotdog003

Beautiful! Gee, thanks a ton. This helps me a *lot*. Back to FileZilla from WinSCP it is!

In the interest of security, i've removed that guest account. Go ahead and email me if you need it back. hotdog003@…

Note: See TracTickets for help on using tickets.