Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Too many authentication failures with many keys available in ssh-agent #11615

Closed
cyberduck opened this issue Mar 18, 2021 · 6 comments
Closed

Too many authentication failures with many keys available in ssh-agent #11615

cyberduck opened this issue Mar 18, 2021 · 6 comments

Comments

@cyberduck
Copy link
Collaborator

@cyberduck cyberduck commented Mar 18, 2021

f21dfa2 created the issue

Dear Cyberduck team,
with v7.8.3 I get "too many authentication failures" for a login. v7.7.2 works fine, as does the ssh login via terminal.
The login is configured in the ssh config file and uses a ssh key based login via ssh-agent.
In the ssh config I have to set 'IdentitiesOnly yes', otherwise the server usually rejects a login as there are many keys in my ssh agent.
Is it possible Cyberduck tries all the keys from the ssh-agent which then leads to the "too many authentication failures" at some point?

many TIA

@cyberduck
Copy link
Collaborator Author

@cyberduck cyberduck commented Mar 24, 2021

@dkocher commented

I can confirm this is probably the cause as we try agent based authentication first.

@cyberduck
Copy link
Collaborator Author

@cyberduck cyberduck commented Mar 24, 2021

@dkocher commented

IdentitiesOnly
Specifies that ssh(1) should only use the authentication identity files configured in the ssh_config files, even if ssh-agent(1) offers more identities. The argument to this keyword must be yes or no. This option is intended for situations where ssh-agent offers many different identities. The default is no.

@cyberduck
Copy link
Collaborator Author

@cyberduck cyberduck commented Mar 24, 2021

@dkocher commented

Relates to #9964.

@cyberduck
Copy link
Collaborator Author

@cyberduck cyberduck commented Mar 24, 2021

@dkocher commented

We will see if we can add support for the IdentitiesOnly directive from the OpenSSH configuration.

@cyberduck
Copy link
Collaborator Author

@cyberduck cyberduck commented May 4, 2021

@dkocher commented

Could you please share your OpenSSH configuration for reference.

@cyberduck
Copy link
Collaborator Author

@cyberduck cyberduck commented May 5, 2021

@dkocher commented

In 6120054.

@cyberduck cyberduck closed this May 5, 2021
@iterate-ch iterate-ch locked as resolved and limited conversation to collaborators Nov 27, 2021
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Linked pull requests

Successfully merging a pull request may close this issue.

None yet
2 participants