What is "session password" and where to get it? :: Support Forum

ARMAN Guest

What is "session password" and where to get it?

2003-07-29 15:28

Hi.

I have problems with updating my page cause I cannot get through "session pasword" which I never needed before.

Anyone have experiences and can help me out? :D

Reply with quote

Guest

Re: what is "session password" and where to get it?

2003-07-31 09:13

Anyone????

Maybe there is possibility to eliminate that "session password" in WinSCP3?

When I use first version of WinSCP it just gives me error "Public key not received", what does that mean?

Reply with quote

martin◆ Site Admin
Joined:: 2002-12-10
Posts:: 41,441
Location:: Prague, Czechia

Re: what is "session password" and where to get it?

2003-07-31

Session password is simply your account password. You should have one or private key.

Reply with quote

Guest

Re: what is "session password" and where to get it?

2003-07-31 18:11

If it is my password, than server owner have changed password so I could not get there, right?
After entering my password in "session password" window I get:

Access denied

Server sent disconnect message
type 2 (SSH_DISCONNECT_PROTOCOL_ERROR):
"Too many authentication failures for arman"

Do you live in Prague? I think I know you... :?

Reply with quote

stephen
Joined:: 2003-08-01
Posts:: 1

2003-08-01 10:59

Hello, I also have a question about session passwords.

Some users are getting a enter session password dialog box when logging in. this is after the login details have been supplied already in the initial window. we use passwords only not keys.

what is this session passsword? it is NOT the server account password!! this has been tested as the SAME password supplied to the initial scp window can be used to login to the system under telnet. Also from some users they can log into the server using a account ans password combination and everything is fine. on a different users PC using the SAME usernmae and password they get "enter session password" dialog box. This must be some SCP thing stored locally oin the machine - perhaps to save session details ? i.e. server name user name etc, to save having to type these in again.

the question is why is this appearing when not selected. and how do you get rid of it? clear it out? i have tried the clear session info in the sessions area on the dialog but this didn't fix it. Alos uninstalling the winscp softwrae and re-installing didn't fix it. it must leave files behind when deleted. (there is no uninstall option on the program menu.)

any help much appreciated , just dont come back and say you have the password wrong and it must be re-entered, or that it is the same as the server account password - IT IS NOT! it is a winscp thing , but the documentation doesn't provide any help on this.

Regards,
Stephen

Reply with quote

ARMAN Guest

Re: what is "session password" and where to get it?

2003-08-01 14:44

Dřive jsme žil ve Stodůlkach a mam pocit že jsem tě viděl vickrat(usuzuji podle fotky), ale osobně se nezname :)

Putty mi piše že password je neplatnej, takže se musim asi sejit s majitelem servru.

Dik.

Reply with quote

martin◆ Site Admin
Joined:: 2002-12-10
Posts:: 41,441
Location:: Prague, Czechia

2003-08-03

stephen wrote:

Hello, I also have a question about session passwords.
...

First of all, try to login with Putty terminal and tell me what was result like. Also post a log file of session that showed "session password" prompt.

Reply with quote

Guest

2003-08-06 16:36

I have the same issue trying to connect to a Red Hat 8 box. PuTTY connects without any issues at all. WinSCP prompts for session password, and after entering it returns the following error:

Authentication log (see session log for details):
Using username "johnny".
Access denied
Access denied

Server sent disconnect message
type 2 (SSH_DISCONNECT_PROTOCOL_ERROR):
"Too many authentication failures for johnny"

And the log on the server shows the following:

Aug  6 11:27:29 gandalf sshd(pam_unix)[1505]: check pass; user unknown
Aug  6 11:27:29 gandalf sshd(pam_unix)[1505]: authentication failure; logname= u
id=0 euid=0 tty=NODEVssh ruser= rhost=192.168.x.x
Aug  6 11:27:31 gandalf sshd(pam_unix)[1505]: check pass; user unknown
Aug  6 11:27:37 gandalf sshd(pam_unix)[1505]: check pass; user unknown
Aug  6 11:27:40 gandalf sshd(pam_unix)[1505]: 2 more authentication failures; lo
gname= uid=0 euid=0 tty=NODEVssh ruser= rhost=192.168.x.x

Reply with quote

ARMeck Guest

Re: what is "session password" and where to get it?

2003-08-11 14:40

ARMAN wrote:

I have problems with updating my page cause I cannot get through "session password" wich I never needed before

I am having the exact same issue. I am eagerly awaiting the solution.

My server password does not work as a "session Password".

My info:

. --------------------------------------------------------------------------
. WinSCP Version 3.1.0 (Build 165)
. Login time: Monday, August 11, 2003 9:35:58 AM
. --------------------------------------------------------------------------
. Session name: meckz@ftp.meckz.net
. Host name: ftp.meckz.net (Port: 22)
. User name: meckz (Password: Yes, Key file: No)
. Transfer Protocol: SCP
. SSH protocol version: 2; Compression: No
. Agent forwarding: No; TIS/CryptoCard: No; KI: Yes
. Ciphers: aes,blowfish,3des,WARN,des; Ssh2DES: No
. Ping interval: 0 sec (0 = off); Timeout: 15 sec
. SSH Bugs: A,A,A,A,A,A,A,
. Proxy: none
. Return code variable: Autodetect; Lookup user groups: Yes
. Shell: default, EOL: 0
. Local directory: default, Remote directory: home, Update: No, Cache: Yes
. Clear aliases: Yes, Unset nat.vars: Yes, Resolve symlinks: Yes
. Alias LS: No, Ign LS warn: Yes, Scp1 Comp: No
. --------------------------------------------------------------------------
. Looking up host "ftp.meckz.net"
. Connecting to 64.35.113.47 port 22
. Server version: SSH-2.0-OpenSSH-2.1
. We claim version: SSH-2.0-PuTTY-Local: Jul 14 2003 13:14:02
. Using SSH protocol version 2
. Doing Diffie-Hellman key exchange
. Host key fingerprint is:
. ssh-dss 1024 75:88:19:38:60:ad:3c:87:71:8e:50:9a:0c:97:60:94
. Initialised Blowfish client->server encryption
. Initialised Blowfish server->client encryption
! Using username "meckz".
. Sent password
! Access denied
. Access denied
. Sent password
! Access denied
. Access denied
. Sent password
. Received disconnect message (SSH_DISCONNECT_PROTOCOL_ERROR)
. Disconnection message text: too many failed userauth_requests
. Server sent disconnect message
. type 2 (SSH_DISCONNECT_PROTOCOL_ERROR):
. "too many failed userauth_requests"
* (ESshFatal) Authentication failed.
* Authentication log (see session log for details):
* Using username "meckz".
* Access denied
* Access denied
* 
* Server sent disconnect message
* type 2 (SSH_DISCONNECT_PROTOCOL_ERROR):
* "too many failed userauth_requests"
*

Reply with quote

martin◆ Site Admin
Joined:: 2002-12-10
Posts:: 41,441
Location:: Prague, Czechia

2003-08-11

I have the same issue trying to connect to a Red Hat 8 box. PuTTY connects without any issues at all. WinSCP prompts for session password, and after entering it returns the following error:
...

Are other users of the server having same problem?

Reply with quote

armeck Guest

Maybe...

2003-08-12 04:24

Not exactly sure which distro my host is using, but it is a Linux box... <invalid hyperlink removed by admin>

Reply with quote

Guest

2003-08-13 13:37

Yes connecting to a Redhat 7.2 box.

Andy

Reply with quote

martin◆ Site Admin

2003-08-16

Anonymous wrote:

Yes connecting to a Redhat 7.2 box.

Is it possible that you create a test account for me on the server?

Reply with quote

Guest

2003-08-19 16:27

martin wrote:

Is it possible that you create a test account for me on the server?

Email me andy [dot] clyde [at] oxfordmusic [dot] nospam [dot] net and we can sort something out.

Andy

Reply with quote

Progressd Guest

same problem with need for session password

2003-08-27 01:05

I'm having the same problem with a Redhat 9.0 box. I'd be happy to set up an account for you to test this with if you haven't had a chance to see it heppen yet.

Thanks,
Darrell
dduane@duane.com
Host of <invalid hyperlink removed by admin>

Reply with quote

martin◆ Site Admin

Re: same problem with need for session password

2003-08-27

Progressd wrote:

I'm having the same problem with a Redhat 9.0 box. I'd be happy to set up an account for you to test this with if you haven't had a chance to see it heppen yet.

I would be great to have a account to test this. Please email me the username, hostname and password.

Reply with quote

KaiS Guest

Re: user private key cannot be loaded

2003-08-28 17:53

I seem to have forgotten my login, so posting as guest :-(
Martin, this has to be a WinSCP problem, not a server-side one. I just upgraded from 2.2.0 to the latest available and got immediately plagued by this. The 2.2.0 binary still works fine. Whereever I login with a key (originally created by Putty) WinSCP says "cannot load private key" and asks for the session password. The password works just fine then. I had one account where it logged me in without a problem and I thought it might provide a clue. But when I looked I found that this one was accidentally using a password and no key file. I tried with a wide range of Suse 8.0/8.1 machines, all display the same problem.
(BTW: the performance of this board hosted by SF is extremely bad, do other notice this as well?)

Reply with quote

martin◆ Site Admin
Joined:: 2002-12-10
Posts:: 41,441
Location:: Prague, Czechia

Re: user private key cannot be loaded

2003-08-29

KaiS wrote:

Martin, this has to be a WinSCP problem, not a server-side one. I just upgraded from 2.2.0 to the latest available and got immediately plagued by this. The 2.2.0 binary still works fine. Whereever I login with a key (originally created by Putty) WinSCP says "cannot load private key" and asks for the session password.

I've already noted this too. I'll try to solve it.

Reply with quote

guest Guest

Re: user private key cannot be loaded

2003-08-29 18:44

Well, I figured, the reason may lie in the new Putty libs you use. So I downloaded the latest snapshot from them and tried it. Et voila, it's there. I suggest you go back to the 0.53b libs or talk to the Putty folks (I just sent them an email explaining the problem).
BTW: why do I get a pre-filled username of TlbgOxaWFypNwqT9zoNR8w== ??? Looks like part of a session string gone wild.

KaiS

Reply with quote

martin◆ Site Admin
Joined:: 2002-12-10
Posts:: 41,441
Location:: Prague, Czechia

Re: user private key cannot be loaded

2003-08-30

Well, I figured, the reason may lie in the new Putty libs you use. So I downloaded the latest snapshot from them and tried it. Et voila, it's there.

I've tried Putty too and it works for me. But you're right, the bug is there. But I've just fixed it in their code. So I do not have to go back to 0.53b. Please, wait for next release.

BTW: why do I get a pre-filled username of TlbgOxaWFypNwqT9zoNR8w== ??? Looks like part of a session string gone wild.

Some bug, I guess :-) I do not have time to fix it.

Reply with quote

Rob Guest

Session password

2003-10-10 08:57

Did this issue ever get resolved? I'm having the same problem having downloaded the latest version of your software yesterday...

Reply with quote

martin◆ Site Admin

Re: Session password

2003-10-10

Rob wrote:

Did this issue ever get resolved? I'm having the same problem having downloaded the latest version of your software yesterday...

You may note from my previous post that this was resolved already. You want my support you should provide more detailed description of the problem.

Reply with quote

dduane
Joined:: 2003-04-18
Posts:: 2
Location:: Washington, DC, USA

Re: Session password

2003-10-10 15:32

Indeed, I'm also having the same problem, with version 3.30. This is on a Windows XP machine connecting to an OpenBSD server. It seems that the problem was resolved on the other clients when I upgraded to 3.30, However, I have a new client that just got 3.30 and this issue is happenening.

Note that this happens with the download of the application. I don't know if it happens when the install package is used.

Let me know if you'd like me to try anything else.

Thanks,
Darrell

Reply with quote E-mail

martin◆ Site Admin
Joined:: 2002-12-10
Posts:: 41,441
Location:: Prague, Czechia

Re: Session password

2003-10-11

dduane wrote:

Indeed, I'm also having the same problem, with version 3.30. This is on a Windows XP machine connecting to an OpenBSD server. It seems that the problem was resolved on the other clients when I upgraded to 3.30, However, I have a new client that just got 3.30 and this issue is happenening.

Note that this happens with the download of the application. I don't know if it happens when the install package is used.

Let me know if you'd like me to try anything else.

What I need to know is, what is your problem. This topic is already too long and it contains references to more than one problem. Please post a log file.

Reply with quote

Darrell Duane Guest

Re: Session password

2003-10-13 22:58

Here is the log file. The problem is that the user types in the password, and then is asked for the session password, and still she can't get in.
Thanks,
Darrell

. --------------------------------------------------------------------------
. WinSCP Version 3.3.0 (Build 177)
. Login time: Monday, October 13, 2003 5:32:17 PM
. --------------------------------------------------------------------------
. Session name: housecare@secure.arhcpa.com
. Host name: secure.arhcpa.com (Port: 22)
. User name: housecare (Password: Yes, Key file: No)
. Transfer Protocol: SCP
. SSH protocol version: 2; Compression: No
. Agent forwarding: No; TIS/CryptoCard: No; KI: Yes
. Ciphers: aes,blowfish,3des,WARN,des; Ssh2DES: No
. Ping interval: 0 sec (0 = off); Timeout: 15 sec
. SSH Bugs: -,-,-,-,-,-,-,-,
. Proxy: none
. Return code variable: Autodetect; Lookup user groups: Yes
. Shell: default, EOL: 0
. Local directory: default, Remote directory: home, Update: No, Cache: Yes
. Clear aliases: Yes, Unset nat.vars: Yes, Resolve symlinks: Yes
. Alias LS: No, Ign LS warn: Yes, Scp1 Comp: No
. --------------------------------------------------------------------------
. Looking up host "secure.arhcpa.com"
. Connecting to 205.166.253.16 port 22
. Server version: SSH-1.99-OpenSSH_3.6
. We claim version: SSH-2.0-WinSCP-release-3.3.0.177
. Using SSH protocol version 2
. Doing Diffie-Hellman group exchange
. Doing Diffie-Hellman key exchange
. Host key fingerprint is:
. ssh-rsa 1024 c6:b2:4e:c0:66:ec:61:37:45:2e:45:bf:44:40:d4:fd
. Initialised AES-256 client->server encryption
. Initialised AES-256 server->client encryption
! Using username "housecare".
. Keyboard-interactive authentication refused
. Sent password
! Access denied
. Access denied
. Keyboard-interactive authentication refused
. Sent password
! Access denied
. Access denied
. Received disconnect message (SSH_DISCONNECT_PROTOCOL_ERROR)
. Disconnection message text: Too many authentication failures for housecare
. Server sent disconnect message
. type 2 (SSH_DISCONNECT_PROTOCOL_ERROR):
. "Too many authentication failures for housecare"
* (ESshFatal) Authentication failed.
* Authentication log (see session log for details):
* Using username "housecare".
* Access denied
* Access denied
*
* Server sent disconnect message
* type 2 (SSH_DISCONNECT_PROTOCOL_ERROR):
* "Too many authentication failures for housecare"

Reply with quote

martin◆ Site Admin
Joined:: 2002-12-10
Posts:: 41,441
Location:: Prague, Czechia

Re: Session password

2003-10-14

Darrell Duane wrote:

Here is the log file. The problem is that the user types in the password, and then is asked for the session password, and still she can't get in.

This is different problem. Can the user login with other clients, PSFTP for instance? If possible please try it both with PSFTP version 0.53b and latest-development snapshot. Thanks in advance.

Reply with quote

Guest

Re: Session password

2003-10-15 14:35

I connect with winscp to many different servers. Only one of these servers has a recent openssh installed (SuSE reports version 3.4p1, release 215), and this is the only server that causes the problem mentioned above. The problem occurs in all versions of winscp I have (2.00 build 89) and (3.3.0 build 177), but again, the problem is probably in openssh.

You may contact me for a login to see for yourself.

Much regards,
Erik. erik+node12168.a2000.nl (replace + with @)

Reply with quote