Re: [Proftpd-user] Problem with mod_rewrite / backreferences.

The client I am using, FileZilla, says "Server refused public key signature, 
despite accepting key"

The following is from proftpd.log:

USER TESTuser (Login failed): authentication via 'ssh-rsa' public key failed

The following is from sftp.log

2021-08-09 19:00:42,312 mod_sftp/1.0.1[56886]: sent server version 
'SSH-2.0-mod_sftp'
2021-08-09 19:00:42,312 mod_sftp/1.0.1[56886]: received client version 
'SSH-2.0-FileZilla_3.54.1'
2021-08-09 19:00:42,312 mod_sftp/1.0.1[56886]: handling connection from SSH2 
client 'FileZilla_3.54.1'
2021-08-09 19:00:42,407 mod_sftp/1.0.1[56886]:  + Session key exchange: 
[email protected]
2021-08-09 19:00:42,407 mod_sftp/1.0.1[56886]:  + Session server hostkey: 
ecdsa-sha2-nistp256
2021-08-09 19:00:42,407 mod_sftp/1.0.1[56886]:  + Session client-to-server 
encryption: aes256-ctr
2021-08-09 19:00:42,407 mod_sftp/1.0.1[56886]:  + Session server-to-client 
encryption: aes256-ctr
2021-08-09 19:00:42,407 mod_sftp/1.0.1[56886]:  + Session client-to-server 
MAC: hmac-sha2-256
2021-08-09 19:00:42,407 mod_sftp/1.0.1[56886]:  + Session server-to-client 
MAC: hmac-sha2-256
2021-08-09 19:00:42,407 mod_sftp/1.0.1[56886]:  + Session client-to-server 
compression: none
2021-08-09 19:00:42,407 mod_sftp/1.0.1[56886]:  + Session server-to-client 
compression: none
2021-08-09 19:00:42,596 mod_sftp/1.0.1[56886]: sending acceptable userauth 
methods: publickey,password
2021-08-09 19:00:42,838 mod_sftp/1.0.1[56886]: public key SHA256 
fingerprint: ef:c3:14 <. . blah . .> 0a:59:3f
2021-08-09 19:00:42,840 mod_sftp/1.0.1[56886]: sending publickey OK
2021-08-09 19:00:42,980 mod_sftp/1.0.1[56886]: public key SHA256 
fingerprint: ef:c3:14 <. . blah . .> 0a:59:3f
2021-08-09 19:00:42,982 mod_sftp/1.0.1[56886]: sending userauth failure; 
remaining userauth methods: publickey,password
2021-08-09 19:00:43,059 mod_sftp/1.0.1[56886]: client sent SSH_MSG_IGNORE 
message (115 bytes)
2021-08-09 19:00:44,593 mod_sftp/1.0.1[56886]: password authentication for 
user 'TESTuser' failed: Incorrect password
2021-08-09 19:00:44,593 mod_sftp/1.0.1[56886]: sending userauth failure; 
remaining userauth methods: publickey,password
2021-08-09 19:00:44,676 mod_sftp/1.0.1[56886]: disconnecting client 
(received EOF)

If there is more info in other logs, please let me know which files you are 
interested in.
It's almost as if the public key authentication works, but the home 
directory doesn't exist due to the case not matching.  Also, the rewrite.log 
doesn't show the substitution, it shows an empty string being substituted 
for the $N variables.

Thank you!

BTW: "RewriteHome on" is set in the config.




-----Original Message----- 
From: TJ Saunders
Sent: Monday, August 9, 2021 8:51 PM
To: ProFTPD Users
Subject: Re: [Proftpd-user] Problem with mod_rewrite / backreferences.


> Say a user logs on as TESTuser, or testuser, or any combination of
> case.  They are able to log on if they use password authentication.
> However, they must have exact case match if they log on using a public
> key.

What is the exact error logged, for these failed SFTP publickey 
authentication attempts?  Is it because of the REWRITE_HOME rule, 
specifically?  I ask because my local attempt to reproduce this behavior, 
using SFTP and mod_rewrite on USER commands, for both password and publickey 
SFTP authentications, succeeds as expected.  So now I'm curious what your 
logs say is the actual cause of the authentication failure.

TJ


_______________________________________________
ProFTPD Users List   <[email protected]>
Unsubscribe problems?
http://www.proftpd.org/list-unsub.html 



_______________________________________________
ProFTPD Users List   <[email protected]>
Unsubscribe problems?
http://www.proftpd.org/list-unsub.html