Topic "what is "session password" and where to get it?"

Author Message
ARMAN

Guest


Hi.

I have problems with updating my page cause I cannot get through "session pasword" wich I never needed before Crying or Very sad

Anyone have experiences and can help me out? Very Happy
Advertisements
Guest




Anyone????

Maybe there is possibility to eliminate that "session password" in WinSCP3?

When I use first version of WinSCP it just gives me error "Public key not received", what does that mean?
martin
[View user's profile]
Site Admin
Joined: 2002-12-10
Posts: 24530
Location: Prague, Czechia
Session password is simply your account password. You should have one or private key.
_________________
Martin Prikryl
Guest




If it is my password, than server owner have changed password so I could not get there, right?
After entering my password in "session password" window I get:
-------------
Access denied

Server sent disconnect message
type 2 (SSH_DISCONNECT_PROTOCOL_ERROR):
"Too many authentication failures for arman"
-------------

Do you live in Prague? I think I know you... Confused
stephen
[View user's profile]

Joined: 2003-08-01
Posts: 1
Hello, I also have a question about session passwords.

Some users are getting a enter session password dialog box when logging in. this is after the login details have been supplied already in the initial window. we use passwords only not keys.

what is this session passsword? it is NOT the server account password!! this has been tested as the SAME password supplied to the initial scp window can be used to login to the system under telnet. Also from some users they can log into the server using a account ans password combination and everything is fine. on a different users PC using the SAME usernmae and password they get "enter session password" dialog box. This must be some SCP thing stored locally oin the machine - perhaps to save session details ? i.e. server name user name etc, to save having to type these in again.

the question is why is this appearing when not selected. and how do you get rid of it? clear it out? i have tried the clear session info in the sessions area on the dialog but this didn't fix it. Alos uninstalling the winscp softwrae and re-installing didn't fix it. it must leave files behind when deleted. (there is no uninstall option on the program menu.)

any help much appreciated , just dont come back and say you have the password wrong and it must be re-entered, or that it is the same as the server account password - IT IS NOT! it is a winscp thing , but the documentation doesn't provide any help on this.

Regards,
Stephen
ARMAN

Guest


[quote="prikryl] Well, to be sure, just try another SSH client, like Putty.
A kdo jsi? Smile[/quote]

Dřive jsme il ve Stodůlkach a mam pocit e jsem tě viděl vickrat(usuzuji podle fotky), ale osobně se nezname Smile

Putty mi pie e password je neplatnej, take se musim asi sejit s majitelem servru.

Dik.
martin
[View user's profile]
Site Admin
Joined: 2002-12-10
Posts: 24530
Location: Prague, Czechia
stephen wrote:
Hello, I also have a question about session passwords.

Some users are getting a enter session password dialog box when logging in. this is after the login details have been supplied already in the initial window. we use passwords only not keys.

what is this session passsword? it is NOT the server account password!! this has been tested as the SAME password supplied to the initial scp window can be used to login to the system under telnet. Also from some users they can log into the server using a account ans password combination and everything is fine. on a different users PC using the SAME usernmae and password they get "enter session password" dialog box. This must be some SCP thing stored locally oin the machine - perhaps to save session details ? i.e. server name user name etc, to save having to type these in again.

the question is why is this appearing when not selected. and how do you get rid of it? clear it out? i have tried the clear session info in the sessions area on the dialog but this didn't fix it. Alos uninstalling the winscp softwrae and re-installing didn't fix it. it must leave files behind when deleted. (there is no uninstall option on the program menu.)

any help much appreciated , just dont come back and say you have the password wrong and it must be re-entered, or that it is the same as the server account password - IT IS NOT! it is a winscp thing , but the documentation doesn't provide any help on this.

Regards,
Stephen

First of all, try to login with Putty terminal and tell me what was result like. Also post a log file of session that showed "session passsword" prompt.
_________________
Martin Prikryl
Guest




I have the same issue trying to connect to a Red Hat 8 box. PuTTY connects without any issues at all. WinSCP prompts for session password, and after entering it returns the following error:
Authentication log (see session log for details):
Using username "johnny".
Access denied
Access denied

Server sent disconnect message
type 2 (SSH_DISCONNECT_PROTOCOL_ERROR):
"Too many authentication failures for johnny"

And the log on the server shows the following:

Aug 6 11:27:29 gandalf sshd(pam_unix)[1505]: check pass; user unknown
Aug 6 11:27:29 gandalf sshd(pam_unix)[1505]: authentication failure; logname= u
id=0 euid=0 tty=NODEVssh ruser= rhost=192.168.x.x
Aug 6 11:27:31 gandalf sshd(pam_unix)[1505]: check pass; user unknown
Aug 6 11:27:37 gandalf sshd(pam_unix)[1505]: check pass; user unknown
Aug 6 11:27:40 gandalf sshd(pam_unix)[1505]: 2 more authentication failures; lo
gname= uid=0 euid=0 tty=NODEVssh ruser= rhost=192.168.x.x
ARMeck

Guest


ARMAN wrote:
Hi.

I have problems with updating my page cause I cannot get through "session pasword" wich I never needed before Crying or Very sad

Anyone have experiences and can help me out? Very Happy


I am having the exact same issue. I am eagerly awaiting the solution.

My server password does not work as a "session Password".

My info:

. --------------------------------------------------------------------------
. WinSCP Version 3.1.0 (Build 165)
. Login time: Monday, August 11, 2003 9:35:58 AM
. --------------------------------------------------------------------------
. Session name: meckz@ftp.meckz.net
. Host name: ftp.meckz.net (Port: 22)
. User name: meckz (Password: Yes, Key file: No)
. Transfer Protocol: SCP
. SSH protocol version: 2; Compression: No
. Agent forwarding: No; TIS/CryptoCard: No; KI: Yes
. Ciphers: aes,blowfish,3des,WARN,des; Ssh2DES: No
. Ping interval: 0 sec (0 = off); Timeout: 15 sec
. SSH Bugs: A,A,A,A,A,A,A,
. Proxy: none
. Return code variable: Autodetect; Lookup user groups: Yes
. Shell: default, EOL: 0
. Local directory: default, Remote directory: home, Update: No, Cache: Yes
. Clear aliases: Yes, Unset nat.vars: Yes, Resolve symlinks: Yes
. Alias LS: No, Ign LS warn: Yes, Scp1 Comp: No
. --------------------------------------------------------------------------
. Looking up host "ftp.meckz.net"
. Connecting to 64.35.113.47 port 22
. Server version: SSH-2.0-OpenSSH-2.1
. We claim version: SSH-2.0-PuTTY-Local: Jul 14 2003 13:14:02
. Using SSH protocol version 2
. Doing Diffie-Hellman key exchange
. Host key fingerprint is:
. ssh-dss 1024 75:88:19:38:60:ad:3c:87:71:8e:50:9a:0c:97:60:94
. Initialised Blowfish client->server encryption
. Initialised Blowfish server->client encryption
! Using username "meckz".
. Sent password
! Access denied
. Access denied
. Sent password
! Access denied
. Access denied
. Sent password
. Received disconnect message (SSH_DISCONNECT_PROTOCOL_ERROR)
. Disconnection message text: too many failed userauth_requests
. Server sent disconnect message
. type 2 (SSH_DISCONNECT_PROTOCOL_ERROR):
. "too many failed userauth_requests"
* (ESshFatal) Authentication failed.
* Authentication log (see session log for details):
* Using username "meckz".
* Access denied
* Access denied
*
* Server sent disconnect message
* type 2 (SSH_DISCONNECT_PROTOCOL_ERROR):
* "too many failed userauth_requests"
*
martin
[View user's profile]
Site Admin
Joined: 2002-12-10
Posts: 24530
Location: Prague, Czechia
Anonymous wrote:
I have the same issue trying to connect to a Red Hat 8 box. PuTTY connects without any issues at all. WinSCP prompts for session password, and after entering it returns the following error:
Authentication log (see session log for details):
Using username "johnny".
Access denied
Access denied
...

Are other users of the server having same problem?
_________________
Martin Prikryl
armeck

Guest


prikryl wrote:
Anonymous wrote:
I have the same issue trying to connect to a Red Hat 8 box. PuTTY connects without any issues at all. WinSCP prompts for session password, and after entering it returns the following error:
Authentication log (see session log for details):
Using username "johnny".
Access denied
Access denied
...

Are other users of the server having same problem?


Not exactly sure which distro my host is using, but it is a Linux box... http://www.name2host.com
Guest




prikryl wrote:
Anonymous wrote:
I have the same issue trying to connect to a Red Hat 8 box. PuTTY connects without any issues at all. WinSCP prompts for session password, and after entering it returns the following error:
Authentication log (see session log for details):
Using username "johnny".
Access denied
Access denied
...

Are other users of the server having same problem?


Yes connecting to a Redhat 7.2 box.

Andy
martin
[View user's profile]
Site Admin
Joined: 2002-12-10
Posts: 24530
Location: Prague, Czechia
Anonymous wrote:
Yes connecting to a Redhat 7.2 box.

Is it possible that you create a test account for me on the server?
_________________
Martin Prikryl
Guest




prikryl wrote:
Andy wrote:
Yes connecting to a Redhat 7.2 box.

Is it possible that you create a test account for me on the server?

Email me andy [dot] clyde [at] oxfordmusic [dot] nospam [dot] net and we can sort something out.

Andy
[email address munged]
Progressd

Guest


I'm having the same problem with a Redhat 9.0 box. I'd be happy to set up an account for you to test this with if you haven't had a chance to see it heppen yet.

Thanks,
Darrell
dduane@duane.com
Host of http://www.winscp.org
martin
[View user's profile]
Site Admin
Joined: 2002-12-10
Posts: 24530
Location: Prague, Czechia
Progressd wrote:
I'm having the same problem with a Redhat 9.0 box. I'd be happy to set up an account for you to test this with if you haven't had a chance to see it heppen yet.

I would be great to have a account to test this. Please email me the username, hostname and password.
_________________
Martin Prikryl
KaiS

Guest


prikryl wrote:

I would be great to have a account to test this. Please email me the username, hostname and password.

I seem to have forgotten my login, so posting as guest Sad
Martin, this has to be a WinSCP problem, not a server-side one. I just upgraded from 2.2.0 to the latest available and got immediately plagued by this. The 2.2.0 binary still works fine. Whereever I login with a key (originally created by Putty) WinSCP says "cannot load private key" and asks for the session password. The password works just fine then. I had one account where it logged me in without a problem and I thought it might provide a clue. But when I looked I found that this one was accidentally using a password and no key file. I tried with a wide range of Suse 8.0/8.1 machines, all display the same problem.
(BTW: the performance of this board hosted by SF is extremely bad, do other notice this as well?)[/b]
martin
[View user's profile]
Site Admin
Joined: 2002-12-10
Posts: 24530
Location: Prague, Czechia
KaiS wrote:
Martin, this has to be a WinSCP problem, not a server-side one. I just upgraded from 2.2.0 to the latest available and got immediately plagued by this. The 2.2.0 binary still works fine. Whereever I login with a key (originally created by Putty) WinSCP says "cannot load private key" and asks for the session password.

I've already noted this too. I'll try to solve it.
_________________
Martin Prikryl
guest

Guest


Well, I figured, the reason may lie in the new Putty libs you use. So I downloaded the latest snapshot from them and tried it. Et voila, it's there. I suggest you go back to the 0.53b libs or talk to the Putty folks (I just sent them an email explaining the problem).
BTW: why do I get a pre-filled username of "TlbgOxaWFypNwqT9zoNR8w==" ??? Looks like part of a session string gone wild.

KaiS
martin
[View user's profile]
Site Admin
Joined: 2002-12-10
Posts: 24530
Location: Prague, Czechia
TlbgOxaWFypNwqT9zoNR8w== wrote:
Well, I figured, the reason may lie in the new Putty libs you use. So I downloaded the latest snapshot from them and tried it. Et voila, it's there.

I've tried Putty too and it works for me. But you're right, the bug is there. But I've just fixed it in their code. So I do not have to go back to 0.53b. Please, wait for next release.

Quote:
BTW: why do I get a pre-filled username of "TlbgOxaWFypNwqT9zoNR8w==" ??? Looks like part of a session string gone wild.

Some bug, I guess Smile I do not have time to fix it.
_________________
Martin Prikryl
Rob

Guest


Did this issue ever get resolved? I'm having the same problem having downloaded the latest version of your software yesterday...
martin
[View user's profile]
Site Admin
Joined: 2002-12-10
Posts: 24530
Location: Prague, Czechia
Rob wrote:
Did this issue ever get resolved? I'm having the same problem having downloaded the latest version of your software yesterday...

You may note from my previous post that this was resolved already. You want my support you should provide more detailed description of the problem.
_________________
Martin Prikryl
dduane
[View user's profile]

Joined: 2003-04-18
Posts: 2
Location: Washington, DC, USA
Indeed, I'm also having the same problem, with version 3.30. This is on a Windows XP machine connecting to an OpenBSD server. It seems that the problem was resolved on the other clients when I upgraded to 3.30, However, I have a new client that just got 3.30 and this issue is happenening.

Note that this happens with the download of the application. I don't know if it happens when the install package is used.

Let me know if you'd like me to try anything else.

Thanks,
Darrell
martin
[View user's profile]
Site Admin
Joined: 2002-12-10
Posts: 24530
Location: Prague, Czechia
dduane wrote:
Indeed, I'm also having the same problem, with version 3.30. This is on a Windows XP machine connecting to an OpenBSD server. It seems that the problem was resolved on the other clients when I upgraded to 3.30, However, I have a new client that just got 3.30 and this issue is happenening.

Note that this happens with the download of the application. I don't know if it happens when the install package is used.

Let me know if you'd like me to try anything else.

What I need to know is, what is your problem. This topic is already too long and it contains references to more than one problem. Please post a log file.
_________________
Martin Prikryl
Darrell Duane

Guest


Here is the log file. The problem is that the user types in the password, and then is asked for the session password, and still she can't get in.
Thanks,
Darrell

. --------------------------------------------------------------------------
. WinSCP Version 3.3.0 (Build 177)
. Login time: Monday, October 13, 2003 5:32:17 PM
. --------------------------------------------------------------------------
. Session name: housecare@secure.arhcpa.com
. Host name: secure.arhcpa.com (Port: 22)
. User name: housecare (Password: Yes, Key file: No)
. Transfer Protocol: SCP
. SSH protocol version: 2; Compression: No
. Agent forwarding: No; TIS/CryptoCard: No; KI: Yes
. Ciphers: aes,blowfish,3des,WARN,des; Ssh2DES: No
. Ping interval: 0 sec (0 = off); Timeout: 15 sec
. SSH Bugs: -,-,-,-,-,-,-,-,
. Proxy: none
. Return code variable: Autodetect; Lookup user groups: Yes
. Shell: default, EOL: 0
. Local directory: default, Remote directory: home, Update: No, Cache: Yes
. Clear aliases: Yes, Unset nat.vars: Yes, Resolve symlinks: Yes
. Alias LS: No, Ign LS warn: Yes, Scp1 Comp: No
. --------------------------------------------------------------------------
. Looking up host "secure.arhcpa.com"
. Connecting to 205.166.253.16 port 22
. Server version: SSH-1.99-OpenSSH_3.6
. We claim version: SSH-2.0-WinSCP-release-3.3.0.177
. Using SSH protocol version 2
. Doing Diffie-Hellman group exchange
. Doing Diffie-Hellman key exchange
. Host key fingerprint is:
. ssh-rsa 1024 c6:b2:4e:c0:66:ec:61:37:45:2e:45:bf:44:40:d4:fd
. Initialised AES-256 client->server encryption
. Initialised AES-256 server->client encryption
! Using username "housecare".
. Keyboard-interactive authentication refused
. Sent password
! Access denied
. Access denied
. Keyboard-interactive authentication refused
. Sent password
! Access denied
. Access denied
. Received disconnect message (SSH_DISCONNECT_PROTOCOL_ERROR)
. Disconnection message text: Too many authentication failures for housecare
. Server sent disconnect message
. type 2 (SSH_DISCONNECT_PROTOCOL_ERROR):
. "Too many authentication failures for housecare"
* (ESshFatal) Authentication failed.
* Authentication log (see session log for details):
* Using username "housecare".
* Access denied
* Access denied
*
* Server sent disconnect message
* type 2 (SSH_DISCONNECT_PROTOCOL_ERROR):
* "Too many authentication failures for housecare"
martin
[View user's profile]
Site Admin
Joined: 2002-12-10
Posts: 24530
Location: Prague, Czechia
Darrell Duane wrote:
Here is the log file. The problem is that the user types in the password, and then is asked for the session password, and still she can't get in.

This is different problem. Can the user login with other clients, PSFTP for instance? If possible please try it both with PSFTP version 0.53b and latest-development snapshot. Thanks in advance.
_________________
Martin Prikryl
Guest




I connect with winscp to many different servers. Only one of these servers has a recent openssh installed (SuSE reports version 3.4p1, release 215), and this is the only server that causes the problem mentioned above. The problem occurs in all versions of winscp I have (2.00 build 89) and (3.3.0 build 177), but again, the problem is probably in openssh.

You may contact me for a login to see for yourself.

Much regards,
Erik. erik+node12168.a2000.nl (replace + with @)
guest

Guest


Another thing. When I connect as root, no session password is requested.
Advertisements

You can post new topics in this forum






Search Site

What is WinSCP?

It is award-winning SFTP client, SCP client, FTPS client and FTP client integrated into one software program for file transfer to FTP server or secure SFTP server. [More]

And it's free!

Donate

About donations

$9   $19   $49   $99

About donations

Recommend

WinSCP Privacy Policy

WinSCP License