Can connect via SSH, but via SFTP

[Andrew Kaplan]

Hi there --

I have the HP Secure-Shell 4.20 application installed on an 11.00 system, and while I can connect via SSH, I cannot do the same via SFTP. I checked the sshd_config file, and the following line exists in the file:

Subsystem sftp /opt/ssh/libexec/sftp-server

Is there something else that needs to be configured or activated in order for SFTP to work? Thanks.

[Court Campbell]

do you see anything in your syslog that would help troubleshoot?

[Steven E. Protter]

Shalom,

The default configuration should do the trick.

You may wish to check another clean system to see if sshd_config has been changed.

syslog is also a good idea.

SEP

[Andrew Kaplan]

Hi there --

The only reference to SFTP is a line that reads as follows:

subsystem request for sftp

There aren't any followup messages to it.

We don't have any machines with a similar configuration, so I can't make a comparision to another.

[Court Campbell]

edit your sshd_config file and uncomment the line

#LogSftp no

and chge it to yes like so:

LogSftp yes

and uncomment change

#SftpLogLevel INFO


then stop and start sshd. then look at your syslog messages. hopefully something more useful shows up.

[Court Campbell]

Also, can anyone sftp, or is every user account having this issue? you might try creating another account and testing it.

[Andrew Kaplan]

I made the changes that were suggested, and after restarting ssh I attempted to use sftp again. The error messages I saw in the syslog file were as follows:

Apr 4 15:05:23 pocus1 sshd[9834]: Accepted password for kaplan from port 2410 ssh2
Apr 4 15:05:23 pocus1 sshd[9876]: subsystem request for sftp
Apr 4 15:06:05 pocus1 sshd[9894]: error: PAM: conversation function passed a null context
Apr 4 15:06:05 pocus1 sshd[9894]: error: PAM: Conversation failure for from

[Court Campbell]

try installing patch PHCO_34806.

[SGUX]

you could check /opt/ssh/newconfig/opt/ssh/etc/sshd_config and compare this with your active sshd_config.

[SGUX]

especially on the UsePAM and ChallengeResponseAuthentication remarks
i'm not sure but it is worth a try

[Andrew Kaplan]

Hi there --

I installed patch PHCO_84806 and also ran the diff command on the /opt/ssh/etc/sshd_config and the /opt/ssh/newconfig/opt/ssh/etc/sshd_config files, and there wre no apparent differences between the two.

The SFTP capability is still not working. Does anyone have any other ideas? Thanks.