Re: sftp connection closing immediatly after opening.

On 8 Aug 2006 14:54:55 -0700, Big Daddy Cool staggered into the Black
Sun and said:
I am having an issue

What is up with people calling problems "issues"? Bloody
management-speak. <George_Carlin> *** euphemisms. </George_Carlin>

I want to start using sftp instead of ftp. I have the keys exchanged
and can sftp to the Linux box if no user name is supplied. If I supply
a username e.g. sftp fin_epd@xxxxxxxxxx the connection immediatly
closes.

[root@aixtst]/etc> sftp -v fin_epd@xxxxxxxxxx
Connecting to server.com...
debug1: Connecting to server.com [XXX.XXX.XXX.XXX] port 22.
[snip, everything's pretty much OK]
debug1: Next authentication method: publickey
debug1: Offering public key: /.ssh/id_rsa
debug1: Authentications that can continue:
publickey,password,keyboard-interactive
debug1: Trying private key: /.ssh/id_dsa

This seems odd to me. sftp -v here gives me this:

debug1: Next authentication method: publickey
debug1: Trying private key: /home/mhgraham/.ssh/id_rsa
debug1: Offering public key: /home/mhgraham/.ssh/id_dsa
debug1: Server accepts key: pkalg ssh-dss blen 433

....so I'm wondering if the keys are OK in ~fin_epd/.ssh . Or is
~fin_epd / ? The user probably needs a valid ~ on the AIX box if you
want to use public-key things. Public-key authentication makes things
so much easier/faster that you usually want to use it.

fin_epd@xxxxxxxxxx's password:
debug1: Authentication succeeded (password).
debug1: channel 0: new [client-session]
debug1: Entering interactive session.
debug1: Sending subsystem: sftp
debug1: client_input_channel_req: channel 0 rtype exit-status reply 0
debug1: channel 0: free: client-session, nchannels 1
debug1: fd 0 clearing O_NONBLOCK
debug1: Transferred: stdin 0, stdout 0, stderr 0 bytes in 0.0 seconds

Does the user's .bashrc on the remote system generate any output at all?
That can cause really stupid things to happen with scp and sftp. It's
usually a very good idea to put something like

if [[ $- != *i* ]] ; then
# Shell is non-interactive. Be done now!
return
fi

....right at the top of ~/.bashrc . Beyond that, I dunno.

--
Matt G|There is no Darkness in Eternity/But only Light too dim for us to see
Brainbench MVP for Linux Admin / mail: TRAP + SPAN don't belong
http://www.brainbench.com / "He is a rhythmic movement of the
-----------------------------/ penguins, is Tux." --MegaHAL
.