Authentication failed. :: Support Forum

walkerk
Joined:: 2015-06-26
Posts:: 3

Authentication failed.

2015-06-26 22:21

Having trouble with signing on to sftp site. getting an Authentication failed
my password is structured pwd$$ does having $$ in the password be source of the problem?

# Automatically abort script on errors
option batch abort
# Disable overwrite confirmations that conflict with the previous
option confirm off
# Connect
open sftp://username:password$$@website.com/ -hostkey="ssh-rsa 1024 xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx"
# Change remote directory
cd /compliance
# Force binary mode transfer
option transfer binary
# Download file to the local directory C:\ChatTest
get x_20*.xml C:\ChatTest
# Disconnect
close

getting the following error

C:\Program Files (x86)\WinSCP>winscp.com /script=c:\IceChat_script.txt
batch           abort
reconnecttime   120
confirm         off
Searching for host...
Connecting to host...
Authenticating...
Using username "svc-mt-y".
Authenticating with pre-entered password.
Access denied.
Connection has been unexpectedly closed. Server sent command exit status 0.
Authentication log (see session log for details):
Using username "svc-mft-yjxcelenergy".
Access denied.

Authentication failed.

Reply with quote

martin◆ Site Admin
Joined:: 2002-12-10
Posts:: 41,506
Location:: Prague, Czechia

Re: Authentication failed.

2015-07-03

The $$ should not be a problem. Can you connect with GUI?

Reply with quote

walkerk

Re: Authentication failed.

2015-07-16 23:15

i can connect using the full gui application

Reply with quote

martin◆ Site Admin

Re: Authentication failed.

2015-07-19

Enable password logging and compare the password in GUI and scripting session.
https://winscp.net/eng/docs/ui_pref_logging

Reply with quote

walkerk
Joined:: 2015-06-26
Posts:: 3

2015-07-21 22:48

I logged the steps from the GUI screen and i notice the following
what is the syntex for handing Private key and "SSH key passphrase"

Reading private key file "C:\WinSCP\ICE Notes\ICEPrieKey.ppk"
! 2015-07-21 15:37:51.690 Using username "svc-mft-yjxcelenergy".
. 2015-07-21 15:37:52.818 Offered public key
. 2015-07-21 15:37:52.833 Offer of public key accepted
! 2015-07-21 15:37:52.833 Authenticating with public key "rsa-key-2015XXXX"
. 2015-07-21 15:37:52.880 Prompt (passphrase, "SSH key passphrase", <no instructions>, "Passphrase for key "rsa-key-2015XXXX": ")
. 2015-07-21 15:37:56.338 Sent public key signature
. 2015-07-21 15:37:56.369 Access granted
. 2015-07-21 15:37:56.369 Opening session as main channel
. 2015-07-21 15:37:56.385 Opened main channel
. 2015-07-21 15:37:56.478 Started a shell/command

Reply with quote

martin◆ Site Admin
Joined:: 2002-12-10
Posts:: 41,506
Location:: Prague, Czechia

2015-07-23

So are you authentication with password or private key (encrypted with a passphrase)?

If with private key encrypted with a passphrase, use -passphrase= switch:
https://winscp.net/eng/docs/scriptcommand_open

Reply with quote

Mey Guest

Password Authentication fails in WinSCP Commandline

2016-07-27 13:51

Hi, I am in a similar situation mentioned in the thread below. While authenticating using command line option, it fails Authentication. Same password is fine using interactive Logon using WinSCP (I did a paste of the same password) as well as it is fine in GUI.

But when we include the script in command line option then the authentication fails. When Log was enabled, it was noticed that the character + in the password was replaced with a space. I tried placing the character as %43 with its ASCII code but that failed too.

Any idea how to succeed through the authentication process?

Any help is much appreciated.

Reply with quote

martin◆ Site Admin
Joined:: 2002-12-10
Posts:: 41,506
Location:: Prague, Czechia

Re: Password Authentication fails in WinSCP Commandline

2016-07-27

Mey wrote:

Hi, I am in a similar situation mentioned in the thread below. While authenticating using command line option, it fails Authentication. Same password is fine using interactive Logon using WinSCP (I did a paste of the same password) as well as it is fine in GUI.
...

Please read https://winscp.net/eng/docs/faq_script_vs_gui

Reply with quote

Guest

Re: Password Authentication fails in WinSCP Commandline

2016-07-28 06:44

martin wrote:

Please read https://winscp.net/eng/docs/faq_script_vs_gui

Hi Martin,

That has worked wonderfully well. I noticed that the special characters are mentioned with the Hex equivalent where as I have been trying with decimal ones. The automatic generation of script is a very handy feature of the application. Thanks to the developers and Thank you very much for the support.

Reply with quote

umair.tariq Guest

Private Key (.ppk) Error using .net Assembly

2016-09-17 11:29

Hi,

I'm facing below error while using WinSCP assembly in my c# code

Connection has been unexpectedly closed. Server sent command exit status 0.
Authentication log (see session log for details):
Unable to use key file "PuTTY-User-Key-File-2: ssh-rsa
Encryption: aes256-cbc
Comment: rsa-key-20160909
Public-Lines: 6
AAAAB3NzaC1yc2EAAAABJQAAAQEA3vMOJJOGCZP+HrFLiWpuLG" (unable to open file)
Using username "m79971".

Authentication failed.

Attaching my code snippet.

Your quick response on this will be highly appreciated. Thanks in advance.

CodeSnippetWinSCP.PNG (11.75 KB)

Description: Code Snippet...

Reply with quote

martin◆ Site Admin

Re: Authentication failed.

2016-09-19

The $$ should not be a problem.

Can you login in WinSCP GUI or using any other SFTP/SSH client?

Reply with quote

umair.tariq Guest

Re: Authentication failed.

2016-09-19 13:07

Yes I'm able to login successfully from GUI.

Reply with quote

martin◆ Site Admin
Joined:: 2002-12-10
Posts:: 41,506
Location:: Prague, Czechia

Re: Authentication failed.

2016-09-22

umair.tariq wrote:

Yes I'm able to login successfully from GUI.

So enable password logging and check both GUI and script log for an actual password being used.
GUI: https://winscp.net/eng/docs/ui_pref_logging
Script: Use /loglevel=*

Reply with quote

somebadhat Guest

Access denied. Authentication failed.

2017-06-07 16:34

SOLVED MY SPECIAL CHARACTER PROBLEM BY TURNING OFF setlocal ENABLEDELAYEDEXPANSION IN THE BATCH FILE. I HAVE ! IN THE PASSWORD.

Reply with quote

somebadhat Guest

Access denied. Authentication failed.

2017-06-07 16:36

THANKS MARTIN.

Reply with quote

john pena Guest

Authentication failed.

2017-07-13 00:44

Hi
I am unable to log in using the script. However using same username and password I can successfully log in. Thanks for the help.

C:ftp_work>winscp.com /script=my_script.txt /log=my_log.log
Searching for host...
Connecting to host...
Authenticating...
Using username "userxxx".
Authenticating with pre-entered password.
Using keyboard-interactive authentication.

xxxx Session Broker 9.1.2.1

...
....
...

Connection has been unexpectedly closed. Server sent command exit status 0.
Authentication log (see session log for details):
Using username "userxxx".

Authentication failed.

C:ftp_work>

my_script.txt:

open sftp://userxxx:secret@xx.xx.xxx.xx:8024/ -rawsettings ProxyMethod=1 ProxyHost=localhost ProxyPort=2015 
cd /dir1/dir2
get file1
bye

my_log.log:

....
. 2017-07-12 18:05:59.293 Initialised AES-256 SDCTR client->server encryption
. 2017-07-12 18:05:59.293 Initialised HMAC-SHA1 client->server MAC algorithm
. 2017-07-12 18:05:59.293 Initialised AES-256 SDCTR server->client encryption
. 2017-07-12 18:05:59.293 Initialised HMAC-SHA1 server->client MAC algorithm
! 2017-07-12 18:05:59.293 Using username "userxxx".
. 2017-07-12 18:05:59.308 Server offered these authentication methods: password,keyboard-interactive
. 2017-07-12 18:05:59.308 Attempting keyboard-interactive authentication
. 2017-07-12 18:05:59.308 Prompt (keyboard interactive, "SSH server authentication", "Using keyboard-interactive authentication.", "Password: ")
. 2017-07-12 18:05:59.308 Using stored password.
. 2017-07-12 18:06:01.732 Prompt (keyboard interactive, "SSH server authentication", "Using keyboard-interactive authentication.
. 2017-07-12 18:06:01.732 
 
. 2017-07-12 18:06:01.732 
 
. 2017-07-12 18:06:01.732 xxxx Session Broker 9.1.2.1
 
. 2017-07-12 18:06:01.732 
 
. 2017-07-12 18:06:01.732 This system is private and may only be accessed if authorized.
 
. 2017-07-12 18:06:01.732 ", <no prompt>)
. 2017-07-12 18:06:02.237 Prompt (keyboard interactive, "SSH server authentication", "Using keyboard-interactive authentication.", "networkId: ")
. 2017-07-12 18:06:02.237 Disconnected: Unable to authenticate

Reply with quote

martin◆ Site Admin
Joined:: 2002-12-10
Posts:: 41,506
Location:: Prague, Czechia

Re: Authentication failed.

2017-07-14

john pena wrote:

Hi
I am unable to log in using the script. However using same username and password I can successfully log in. Thanks for the help.

Please start a new thread and attach full session log files both from script and GUI (using the latest version of WinSCP).

Reply with quote

fernao
Joined:: 2021-01-19
Posts:: 5

Authentication Failed

2021-01-19 13:29

Hey guys,

I'm facing an "Authentication Failed" while trying to execute an automatically generated session script. Few things I've tried:
- to use a batch script automatically generated by GUI
- to encode other things besides just the password like hostkey, privatekey...
- to set AuthGSSAPI=0
- to use a user that doesn't require password
- check the packets with Wireshark (not an expert on this but I tend to believe the encryption method was agreed since I see SSHv2 packets being exchanged and then just 2 or TCP)
- I also tried UTF-8 and UTF with BOM
- I enabled /loglevel=1 and confirmed the fingerprint is interpreted as it is in the script
- been using the same connection via GUI successfully since long time

This is the last portion of the log:

20:02:23.884 --------------------------------------------------------------------------
20:02:23.884 Opening tunnel.
20:02:23.884 Autoselected tunnel local port number 50002
20:02:23.884 [Tunnel] Looking up host "11.140.129.111" for SSH connection
20:02:23.884 [Tunnel] Connecting to 11.140.129.111 port 22
20:02:23.968 [Tunnel] We claim version: SSH-2.0-WinSCP_release_5.15.9
20:02:24.052 [Tunnel] Server version: SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3
20:02:24.052 [Tunnel] Using SSH protocol version 2
20:02:24.147 [Tunnel] Doing ECDH key exchange with curve Curve25519 and hash SHA-256
20:02:24.554 [Tunnel] Server also has ecdsa-sha2-nistp256/ssh-rsa host keys, but we don't know any of them
20:02:24.554 [Tunnel] Host key fingerprint is:
20:02:24.554 [Tunnel] ssh-ed25519 256 22:5e:c3:18:21:fd:7c:e5:1e:89:74:a2:b2:a6:b7:b3 6111a8u7eQSwYxfhhcNDE
20:02:24.555 [Tunnel] Closing connection.
20:02:24.555 [Tunnel] Sending special code: 12

The issue may be around the fingerprint but again I'm not an expert, I'm just googling. Any hint on this please?

Reply with quote

martin◆ Site Admin
Joined:: 2002-12-10
Posts:: 41,506
Location:: Prague, Czechia

Re: Authentication Failed

2021-01-22

fernao wrote:

- been using the same connection via GUI successfully since long time

Please attach complete logs from the GUI and the script.

Reply with quote

fernao
Joined:: 2021-01-19
Posts:: 5

Re: Authentication Failed

2021-02-26 12:04

Hi Martin,

sorry for my late reply. I though I would receive email notification upon replies. Here's what you requested.

@echo off
 
"C:\Program Files (mine)\WinSCP\WinSCP.com" ^
  /log="C:\temp\WinSCP.log" /ini=nul ^
  /command ^
    "open scp://xpto:temppass@16.142.123.226/ -hostkey=""ssh-ed25519 255 6111asdeQSwYxfhhcNsad3XVmgScclL2Smgf85ucQ="" -privatekey=""C:\temp\id_rsa.ppk"" -rawsettings AuthGSSAPI=0 Tunnel=1 TunnelHostName=""16.142.123.226"" TunnelUserName=""xpto"" TunnelPublicKeyFile=""C:%%5Ctemp%%5Cid_rsa.ppk"" TunnelPasswordPlain=""temppass""" ^
    "put C:\temp\x.log x.log" ^
    "exit"
 
set WINSCP_RESULT=%ERRORLEVEL%
if %WINSCP_RESULT% equ 0 (
  echo Success
) else (
  echo Error
)
 
exit /b %WINSCP_RESULT%

. 2021-02-26 18:48:37.082 --------------------------------------------------------------------------
. 2021-02-26 18:48:37.083 WinSCP Version 5.17.10 (Build 11087) (OS 10.0.14393 - Windows 10 Enterprise 2016 LTSB)
. 2021-02-26 18:48:37.083 Configuration: nul
. 2021-02-26 18:48:37.083 Log level: Normal
. 2021-02-26 18:48:37.083 Local account: IANAP\mylanuser
. 2021-02-26 18:48:37.083 Working directory: C:\temp
. 2021-02-26 18:48:37.083 Process ID: 9524
. 2021-02-26 18:48:37.084 Command-line: "C:\Program Files (mine)\WinSCP\WinSCP.exe" /console=5.17.10 /consoleinstance=_23684_832 "/log=C:\temp\WinSCP.log" "/ini=nul" "/command" "open scp://xpto:***@16.142.123.226/ -hostkey=""ssh-ed25519 255 6111asdeQSwYxfhhcNsad3XVmgScclL2Smgf85ucQ="" -privatekey=""C:\temp\Jirnexu\id_rsa.ppk"" -rawsettings AuthGSSAPI=0 Tunnel=1 TunnelHostName=""16.142.123.226"" TunnelUserName=""xpto"" TunnelPublicKeyFile=""C:%5Ctemp%5Cid_rsa.ppk"" TunnelPasswordPlain=***" "put C:\temp\x.log x.log" "exit"
. 2021-02-26 18:48:37.084 Time zone: Current: GMT+8 (Malay Peninsula Standard Time), No DST
. 2021-02-26 18:48:37.084 Login time: Friday, February 26, 2021 6:48:37 PM
. 2021-02-26 18:48:37.084 --------------------------------------------------------------------------
. 2021-02-26 18:48:37.084 Script: Retrospectively logging previous script records:
> 2021-02-26 18:48:37.084 Script: open scp://xpto:***@16.142.123.226/ -hostkey="ssh-ed25519 255 6111asdeQSwYxfhhcNsad3XVmgScclL2Smgf85ucQ=" -privatekey="C:\temp\Jirnexu\id_rsa.ppk" -rawsettings AuthGSSAPI=0 Tunnel=1 TunnelHostName="16.142.123.226" TunnelUserName="xpto" TunnelPublicKeyFile="C:%5Ctemp%5Cid_rsa.ppk" TunnelPasswordPlain=***
. 2021-02-26 18:48:37.084 --------------------------------------------------------------------------
. 2021-02-26 18:48:37.084 Session name: xpto@16.142.123.226 (Ad-Hoc site)
. 2021-02-26 18:48:37.084 Host name: 16.142.123.226 (Port: 22)
. 2021-02-26 18:48:37.084 User name: xpto (Password: Yes, Key file: Yes, Passphrase: No)
. 2021-02-26 18:48:37.084 Tunnel: Yes
. 2021-02-26 18:48:37.084 Tunnel: Host name: 16.142.123.226 (Port: 22)
. 2021-02-26 18:48:37.084 Tunnel: User name: xpto (Password: Yes, Key file: Yes)
. 2021-02-26 18:48:37.084 Tunnel: Local port number: 0
. 2021-02-26 18:48:37.084 Transfer Protocol: SCP
. 2021-02-26 18:48:37.084 Ping type: Off, Ping interval: 30 sec; Timeout: 15 sec
. 2021-02-26 18:48:37.084 Disable Nagle: No
. 2021-02-26 18:48:37.084 Proxy: None
. 2021-02-26 18:48:37.084 Send buffer: 262144
. 2021-02-26 18:48:37.085 SSH protocol version: 2; Compression: No
. 2021-02-26 18:48:37.085 Bypass authentication: No
. 2021-02-26 18:48:37.085 Try agent: Yes; Agent forwarding: No; TIS/CryptoCard: No; KI: Yes; GSSAPI: No
. 2021-02-26 18:48:37.085 Ciphers: aes,chacha20,blowfish,3des,WARN,arcfour,des; Ssh2DES: No
. 2021-02-26 18:48:37.085 KEX: ecdh,dh-gex-sha1,dh-group14-sha1,rsa,WARN,dh-group1-sha1
. 2021-02-26 18:48:37.085 SSH Bugs: Auto,Auto,Auto,Auto,Auto,Auto,Auto,Auto,Auto,Auto,Auto,Auto,Auto
. 2021-02-26 18:48:37.085 Simple channel: Yes
. 2021-02-26 18:48:37.085 Return code variable: Autodetect; Lookup user groups: Auto
. 2021-02-26 18:48:37.085 Shell: default
. 2021-02-26 18:48:37.085 EOL: LF, UTF: Auto
. 2021-02-26 18:48:37.085 Clear aliases: Yes, Unset nat.vars: Yes, Resolve symlinks: Yes; Follow directory symlinks: No
. 2021-02-26 18:48:37.085 LS: ls -la, Ign LS warn: Yes, Scp1 Comp: No; Exit code 1 is error: No
. 2021-02-26 18:48:37.085 Local directory: default, Remote directory: home, Update: Yes, Cache: Yes
. 2021-02-26 18:48:37.085 Cache directory changes: Yes, Permanent: Yes
. 2021-02-26 18:48:37.085 Recycle bin: Delete to: No, Overwritten to: No, Bin path: 
. 2021-02-26 18:48:37.085 DST mode: Unix;Timezone offset: 0h 0m
. 2021-02-26 18:48:37.085 --------------------------------------------------------------------------
. 2021-02-26 18:48:37.085 Opening tunnel.
. 2021-02-26 18:48:37.088 Autoselected tunnel local port number 50001
. 2021-02-26 18:48:37.089 [Tunnel] Looking up host "16.142.123.226" for SSH connection
. 2021-02-26 18:48:37.089 [Tunnel] Connecting to 16.142.123.226 port 22
. 2021-02-26 18:48:37.195 [Tunnel] We claim version: SSH-2.0-WinSCP_release_5.17.10
. 2021-02-26 18:48:37.287 [Tunnel] Remote version: SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3
. 2021-02-26 18:48:37.287 [Tunnel] Using SSH protocol version 2
. 2021-02-26 18:48:37.386 [Tunnel] Doing ECDH key exchange with curve Curve25519 and hash SHA-256
. 2021-02-26 18:48:37.555 [Tunnel] Server also has ecdsa-sha2-nistp256/ssh-rsa host keys, but we don't know any of them
. 2021-02-26 18:48:37.555 [Tunnel] Host key fingerprint is:
. 2021-02-26 18:48:37.555 [Tunnel] ssh-ed25519 255 5d:22:c3:fd:21:18:7c:e5:1e:89:74:a2:b2:a6:b7:b3 6111asdeQSwYxfhhcNsad3XVmgScclL2Smgf85ucQ=
. 2021-02-26 18:48:37.556 [Tunnel] Closing connection.

Reply with quote

martin◆ Site Admin

Re: Authentication Failed

2021-02-26

I have asked for "complete logs from the GUI and the script".

Reply with quote

fernao
Joined:: 2021-01-19
Posts:: 5

Re: Authentication Failed

2021-03-02 12:29

Hi Martin,
Please find the files attached
Thanks.

WinSCPscript.log (14.6 KB, Private file)

WinSCPgui.log (200.02 KB, Private file)

Reply with quote

martin◆ Site Admin
Joined:: 2002-12-10
Posts:: 41,506
Location:: Prague, Czechia

Re: Authentication Failed

2021-03-05

There seems to be a bug that prevents tunnel errors from being logged.
I've fixed that:
https://winscp.net/tracker/1956
I'm sending you an email with a development version of WinSCP to the address you have used to register on this forum.
Though most likely the problem you are facing is that your script is missing tunnel session host key:
https://winscp.net/eng/docs/rawsettings#tunnelhostkey

Reply with quote

fernao
Joined:: 2021-01-19
Posts:: 5

Re: Authentication Failed

2021-03-06 09:19

Thanks Martin.

I see this error:

(ESshFatal) **Expected host key was not configured, use -hostkey switch.**

But I do have the host key switch since this is a script automatically generated by the GUI.

When I tried to change from -hostkey=""ss..."" to -hostkey="ss..." only I got the following error:

(Exception) **Host key does not match configured key fingerprint "ssh-ed25519"!**

Does this help?

Reply with quote

fernao
Joined:: 2021-01-19
Posts:: 5

Re: Authentication Failed

2021-03-08 05:36

Hi Martin,
Thanks for resolving the logging issue.
I realized a glitch in the configuration of my connection in GUI: it had tunnel option selected but, in reality, that's not necessary. So I unselected it. Then I regenerated the script via the script builder in GUI. I then executed and the script executed successfully. So, issue resolved.

But, I'm just wondering (not important, though) why that tunnel option was problematic:
- via script and
- via a duplicated GUI connection but a cloned host
and it wasn't problematic neither necessary in the original GUI connection.

Anyway, as far as it concerns my script this issue is now resolved.

Reply with quote