Re: [FTP2] Is it possible to define the authentication method for an sftp endpoint?

[Claus Ibsen <cl...@gmail.com>]

On Mon, Dec 17, 2012 at 12:43 PM, Aida <ai...@gmail.com> wrote:
> Hi,
>
> I wanted to ask if it is possible to specify the authentication method for a
> SFTP endpoint (I have seen in the doc that I can specify the cipher but not
> the auth method). I´m trying to connect to a FTP using SFTP but camel tries
> it using gssapi-with-mic as authentication method (when I need to use
> keyboard-interactive).
>

Hi

I suggest to dig a bit in the API of jsch and find out which API to
use for setting that auth method you need.
Maybe check the camel-ftp code and see what needs to be added etc to do it.

And we love contributions, so you are welcome to work on a patch
http://camel.apache.org/contributing.html


> I have no connectivity problems since I can connect with FileZilla without
> errors. Looking the trace I see that the component tries to connect many
> times with the "gssapi-with-mic" authentication method but at the end it
> fails.
>
> Here is a piece of my trace:
>
> ....
> 2012-12-17 11:27:07,286 INFO
> [org.apache.camel.component.file.remote.SftpOperations] (Camel
> (processesCamelContext) thread #5 - JmsConsumer[JOBS_QUEUE_IN]) JSCH ->
> SSH_MSG_NEWKEYS sent
> 2012-12-17 11:27:07,313 INFO
> [org.apache.camel.component.file.remote.SftpOperations] (Camel
> (processesCamelContext) thread #5 - JmsConsumer[JOBS_QUEUE_IN]) JSCH ->
> SSH_MSG_NEWKEYS received
> 2012-12-17 11:27:07,315 INFO
> [org.apache.camel.component.file.remote.SftpOperations] (Camel
> (processesCamelContext) thread #5 - JmsConsumer[JOBS_QUEUE_IN]) JSCH ->
> SSH_MSG_SERVICE_REQUEST sent
> 2012-12-17 11:27:07,350 INFO
> [org.apache.camel.component.file.remote.SftpOperations] (Camel
> (processesCamelContext) thread #5 - JmsConsumer[JOBS_QUEUE_IN]) JSCH ->
> SSH_MSG_SERVICE_ACCEPT received
> 2012-12-17 11:27:07,607 INFO
> [org.apache.camel.component.file.remote.SftpOperations] (Camel
> (processesCamelContext) thread #5 - JmsConsumer[JOBS_QUEUE_IN]) JSCH ->
> Authentications that can continue:
> gssapi-with-mic,publickey,keyboard-interactive,password
> 2012-12-17 11:27:07,609 INFO
> [org.apache.camel.component.file.remote.SftpOperations] (Camel
> (processesCamelContext) thread #5 - JmsConsumer[JOBS_QUEUE_IN]) JSCH -> Next
> authentication method: gssapi-with-mic
> 2012-12-17 11:27:07,641 INFO
> [org.apache.camel.component.file.remote.SftpOperations] (Camel
> (processesCamelContext) thread #5 - JmsConsumer[JOBS_QUEUE_IN]) JSCH ->
> Disconnecting from XXX.XX.XXX.XX port 22
> 2012-12-17 11:27:08,642 INFO
> [org.apache.camel.component.file.remote.SftpOperations] (Camel
> (processesCamelContext) thread #5 - JmsConsumer[JOBS_QUEUE_IN]) JSCH ->
> Connecting to XXX.XX.XXX.XX port 22
> 2012-12-17 11:27:08,681 INFO
> [org.apache.camel.component.file.remote.SftpOperations] (Camel
> (processesCamelContext) thread #5 - JmsConsumer[JOBS_QUEUE_IN]) JSCH ->
> Connection established
> 2012-12-17 11:27:08,716 INFO
> [org.apache.camel.component.file.remote.SftpOperations] (Camel
> (processesCamelContext) thread #5 - JmsConsumer[JOBS_QUEUE_IN]) JSCH ->
> Remote version string: SSH-2.0-Internet Server SSHD
> 2012-12-17 11:27:08,718 INFO
> [org.apache.camel.component.file.remote.SftpOperations] (Camel
> (processesCamelContext) thread #5 - JmsConsumer[JOBS_QUEUE_IN]) JSCH ->
> Local version string: SSH-2.0-JSCH-0.1.48
> 2012-12-17 11:27:08,719 INFO
> [org.apache.camel.component.file.remote.SftpOperations] (Camel
> (processesCamelContext) thread #5 - JmsConsumer[JOBS_QUEUE_IN]) JSCH ->
> CheckCiphers:
> aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-ctr,arcfour,arcfour128,arcfour256
> 2012-12-17 11:27:08,727 INFO
> [org.apache.camel.component.file.remote.SftpOperations] (Camel
> (processesCamelContext) thread #5 - JmsConsumer[JOBS_QUEUE_IN]) JSCH ->
> aes256-ctr is not available.
> 2012-12-17 11:27:08,729 INFO
> [org.apache.camel.component.file.remote.SftpOperations] (Camel
> (processesCamelContext) thread #5 - JmsConsumer[JOBS_QUEUE_IN]) JSCH ->
> aes192-ctr is not available.
> 2012-12-17 11:27:08,731 INFO
> [org.apache.camel.component.file.remote.SftpOperations] (Camel
> (processesCamelContext) thread #5 - JmsConsumer[JOBS_QUEUE_IN]) JSCH ->
> aes256-cbc is not available.
> 2012-12-17 11:27:08,732 INFO
> [org.apache.camel.component.file.remote.SftpOperations] (Camel
> (processesCamelContext) thread #5 - JmsConsumer[JOBS_QUEUE_IN]) JSCH ->
> aes192-cbc is not available.
> 2012-12-17 11:27:08,734 INFO
> [org.apache.camel.component.file.remote.SftpOperations] (Camel
> (processesCamelContext) thread #5 - JmsConsumer[JOBS_QUEUE_IN]) JSCH ->
> arcfour256 is not available.
> 2012-12-17 11:27:08,736 INFO
> [org.apache.camel.component.file.remote.SftpOperations] (Camel
> (processesCamelContext) thread #5 - JmsConsumer[JOBS_QUEUE_IN]) JSCH ->
> CheckKexes: diffie-hellman-group14-sha1
> 2012-12-17 11:27:08,738 INFO
> [org.apache.camel.component.file.remote.SftpOperations] (Camel
> (processesCamelContext) thread #5 - JmsConsumer[JOBS_QUEUE_IN]) JSCH ->
> diffie-hellman-group14-sha1 is not available.
> 2012-12-17 11:27:08,740 INFO
> [org.apache.camel.component.file.remote.SftpOperations] (Camel
> (processesCamelContext) thread #5 - JmsConsumer[JOBS_QUEUE_IN]) JSCH ->
> SSH_MSG_KEXINIT sent
> 2012-12-17 11:27:08,782 INFO
> [org.apache.camel.component.file.remote.SftpOperations] (Camel
> (processesCamelContext) thread #5 - JmsConsumer[JOBS_QUEUE_IN]) JSCH ->
> SSH_MSG_KEXINIT received
> 2012-12-17 11:27:08,784 INFO
> [org.apache.camel.component.file.remote.SftpOperations] (Camel
> (processesCamelContext) thread #5 - JmsConsumer[JOBS_QUEUE_IN]) JSCH -> kex:
> server:
> diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1
> 2012-12-17 11:27:08,786 INFO
> [org.apache.camel.component.file.remote.SftpOperations] (Camel
> (processesCamelContext) thread #5 - JmsConsumer[JOBS_QUEUE_IN]) JSCH -> kex:
> server: ssh-dss
> 2012-12-17 11:27:08,788 INFO
> [org.apache.camel.component.file.remote.SftpOperations] (Camel
> (processesCamelContext) thread #5 - JmsConsumer[JOBS_QUEUE_IN]) JSCH -> kex:
> server:
> aes128-cbc,3des-ctr,aes128-ctr,aes192-ctr,aes256-ctr,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,arcfour,arcfour128,arcfour256
> 2012-12-17 11:27:08,789 INFO
> [org.apache.camel.component.file.remote.SftpOperations] (Camel
> (processesCamelContext) thread #5 - JmsConsumer[JOBS_QUEUE_IN]) JSCH -> kex:
> server:
> aes128-cbc,3des-ctr,aes128-ctr,aes192-ctr,aes256-ctr,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,arcfour,arcfour128,arcfour256
> 2012-12-17 11:27:08,791 INFO
> [org.apache.camel.component.file.remote.SftpOperations] (Camel
> (processesCamelContext) thread #5 - JmsConsumer[JOBS_QUEUE_IN]) JSCH -> kex:
> server:
> hmac-sha1,hmac-md5,hmac-md5-96,hmac-sha1-96,hmac-sha256,hmac-sha256@ssh.com
> 2012-12-17 11:27:08,793 INFO
> [org.apache.camel.component.file.remote.SftpOperations] (Camel
> (processesCamelContext) thread #5 - JmsConsumer[JOBS_QUEUE_IN]) JSCH -> kex:
> server:
> hmac-sha1,hmac-md5,hmac-md5-96,hmac-sha1-96,hmac-sha256,hmac-sha256@ssh.com
> 2012-12-17 11:27:08,794 INFO
> [org.apache.camel.component.file.remote.SftpOperations] (Camel
> (processesCamelContext) thread #5 - JmsConsumer[JOBS_QUEUE_IN]) JSCH -> kex:
> server: none,zlib
> 2012-12-17 11:27:08,796 INFO
> [org.apache.camel.component.file.remote.SftpOperations] (Camel
> (processesCamelContext) thread #5 - JmsConsumer[JOBS_QUEUE_IN]) JSCH -> kex:
> server: none,zlib
> 2012-12-17 11:27:08,797 INFO
> [org.apache.camel.component.file.remote.SftpOperations] (Camel
> (processesCamelContext) thread #5 - JmsConsumer[JOBS_QUEUE_IN]) JSCH -> kex:
> server:
> 2012-12-17 11:27:08,799 INFO
> [org.apache.camel.component.file.remote.SftpOperations] (Camel
> (processesCamelContext) thread #5 - JmsConsumer[JOBS_QUEUE_IN]) JSCH -> kex:
> server:
> 2012-12-17 11:27:08,800 INFO
> [org.apache.camel.component.file.remote.SftpOperations] (Camel
> (processesCamelContext) thread #5 - JmsConsumer[JOBS_QUEUE_IN]) JSCH -> kex:
> client: diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1
> 2012-12-17 11:27:08,802 INFO
> [org.apache.camel.component.file.remote.SftpOperations] (Camel
> (processesCamelContext) thread #5 - JmsConsumer[JOBS_QUEUE_IN]) JSCH -> kex:
> client: ssh-rsa,ssh-dss
> 2012-12-17 11:27:08,804 INFO
> [org.apache.camel.component.file.remote.SftpOperations] (Camel
> (processesCamelContext) thread #5 - JmsConsumer[JOBS_QUEUE_IN]) JSCH -> kex:
> client: aes128-ctr,aes128-cbc,3des-ctr,3des-cbc,blowfish-cbc
> 2012-12-17 11:27:08,805 INFO
> [org.apache.camel.component.file.remote.SftpOperations] (Camel
> (processesCamelContext) thread #5 - JmsConsumer[JOBS_QUEUE_IN]) JSCH -> kex:
> client: aes128-ctr,aes128-cbc,3des-ctr,3des-cbc,blowfish-cbc
> 2012-12-17 11:27:08,807 INFO
> [org.apache.camel.component.file.remote.SftpOperations] (Camel
> (processesCamelContext) thread #5 - JmsConsumer[JOBS_QUEUE_IN]) JSCH -> kex:
> client: hmac-md5,hmac-sha1,hmac-sha1-96,hmac-md5-96
> 2012-12-17 11:27:08,808 INFO
> [org.apache.camel.component.file.remote.SftpOperations] (Camel
> (processesCamelContext) thread #5 - JmsConsumer[JOBS_QUEUE_IN]) JSCH -> kex:
> client: hmac-md5,hmac-sha1,hmac-sha1-96,hmac-md5-96
> 2012-12-17 11:27:08,810 INFO
> [org.apache.camel.component.file.remote.SftpOperations] (Camel
> (processesCamelContext) thread #5 - JmsConsumer[JOBS_QUEUE_IN]) JSCH -> kex:
> client: none
> 2012-12-17 11:27:08,811 INFO
> [org.apache.camel.component.file.remote.SftpOperations] (Camel
> (processesCamelContext) thread #5 - JmsConsumer[JOBS_QUEUE_IN]) JSCH -> kex:
> client: none
> 2012-12-17 11:27:08,813 INFO
> [org.apache.camel.component.file.remote.SftpOperations] (Camel
> (processesCamelContext) thread #5 - JmsConsumer[JOBS_QUEUE_IN]) JSCH -> kex:
> client:
> 2012-12-17 11:27:08,814 INFO
> [org.apache.camel.component.file.remote.SftpOperations] (Camel
> (processesCamelContext) thread #5 - JmsConsumer[JOBS_QUEUE_IN]) JSCH -> kex:
> client:
> 2012-12-17 11:27:08,816 INFO
> [org.apache.camel.component.file.remote.SftpOperations] (Camel
> (processesCamelContext) thread #5 - JmsConsumer[JOBS_QUEUE_IN]) JSCH -> kex:
> server->client aes128-ctr hmac-md5 none
> 2012-12-17 11:27:08,817 INFO
> [org.apache.camel.component.file.remote.SftpOperations] (Camel
> (processesCamelContext) thread #5 - JmsConsumer[JOBS_QUEUE_IN]) JSCH -> kex:
> client->server aes128-ctr hmac-md5 none
> 2012-12-17 11:27:08,824 INFO
> [org.apache.camel.component.file.remote.SftpOperations] (Camel
> (processesCamelContext) thread #5 - JmsConsumer[JOBS_QUEUE_IN]) JSCH ->
> SSH_MSG_KEXDH_INIT sent
> 2012-12-17 11:27:08,825 INFO
> [org.apache.camel.component.file.remote.SftpOperations] (Camel
> (processesCamelContext) thread #5 - JmsConsumer[JOBS_QUEUE_IN]) JSCH ->
> expecting SSH_MSG_KEXDH_REPLY
> 2012-12-17 11:27:08,872 INFO
> [org.apache.camel.component.file.remote.SftpOperations] (Camel
> (processesCamelContext) thread #5 - JmsConsumer[JOBS_QUEUE_IN]) JSCH ->
> ssh_dss_verify: signature true
> 2012-12-17 11:27:08,874 WARNING
> [org.apache.camel.component.file.remote.SftpOperations] (Camel
> (processesCamelContext) thread #5 - JmsConsumer[JOBS_QUEUE_IN]) JSCH ->
> Permanently added 'XXX.XX.XXX.XX' (DSA) to the list of known hosts.
> 2012-12-17 11:27:08,876 INFO
> [org.apache.camel.component.file.remote.SftpOperations] (Camel
> (processesCamelContext) thread #5 - JmsConsumer[JOBS_QUEUE_IN]) JSCH ->
> SSH_MSG_NEWKEYS sent
> 2012-12-17 11:27:08,904 INFO
> [org.apache.camel.component.file.remote.SftpOperations] (Camel
> (processesCamelContext) thread #5 - JmsConsumer[JOBS_QUEUE_IN]) JSCH ->
> SSH_MSG_NEWKEYS received
> 2012-12-17 11:27:08,907 INFO
> [org.apache.camel.component.file.remote.SftpOperations] (Camel
> (processesCamelContext) thread #5 - JmsConsumer[JOBS_QUEUE_IN]) JSCH ->
> SSH_MSG_SERVICE_REQUEST sent
> 2012-12-17 11:27:08,947 INFO
> [org.apache.camel.component.file.remote.SftpOperations] (Camel
> (processesCamelContext) thread #5 - JmsConsumer[JOBS_QUEUE_IN]) JSCH ->
> SSH_MSG_SERVICE_ACCEPT received
> 2012-12-17 11:27:09,214 INFO
> [org.apache.camel.component.file.remote.SftpOperations] (Camel
> (processesCamelContext) thread #5 - JmsConsumer[JOBS_QUEUE_IN]) JSCH ->
> Authentications that can continue:
> gssapi-with-mic,publickey,keyboard-interactive,password
> 2012-12-17 11:27:09,216 INFO
> [org.apache.camel.component.file.remote.SftpOperations] (Camel
> (processesCamelContext) thread #5 - JmsConsumer[JOBS_QUEUE_IN]) JSCH -> Next
> authentication method: gssapi-with-mic
> 2012-12-17 11:27:09,253 INFO
> [org.apache.camel.component.file.remote.SftpOperations] (Camel
> (processesCamelContext) thread #5 - JmsConsumer[JOBS_QUEUE_IN]) JSCH ->
> Disconnecting from XXX.XX.XXX.XX port 22
> 2012-12-17 11:27:09,256 WARNING
> [org.apache.camel.component.file.remote.RemoteFileProducer] (Camel
> (processesCamelContext) thread #5 - JmsConsumer[JOBS_QUEUE_IN]) Writing file
> failed with: Cannot connect to sftp://user@XXX.XX.XXX.XX:22
>
> --------------------
> Thanks in advance,
>
>    Aida.
>
>
>
> --
> View this message in context: http://camel.465427.n5.nabble.com/FTP2-Is-it-possible-to-define-the-authentication-method-for-an-sftp-endpoint-tp5724231.html
> Sent from the Camel - Users mailing list archive at Nabble.com.



-- 
Claus Ibsen
-----------------
Red Hat, Inc.
FuseSource is now part of Red Hat
Email: cibsen@redhat.com
Web: http://fusesource.com
Twitter: davsclaus
Blog: http://davsclaus.com
Author of Camel in Action: http://www.manning.com/ibsen