Aspera

Aspera

Join this online group to communicate across IBM product users and experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  Aspera Faspex Authentication Failed

    Posted Fri October 07, 2022 08:52 AM
    Hi All,
         I have installed Aspera Faspex 4.4 and Aspera Enterprise Server. Enterprise Server works fine. But Faspex server show an error  (authentication failed) when I submitted the package to send. Anyone knows why? SSHD debug logs:
    debug1: kex: host key algorithm: (no match) [preauth]
    Unable to negotiate with xxx.xxx.xxx.xxx port 13493: no matching host key type found
    Thx
    Benny

    ------------------------------
    Benny Huang
    ------------------------------


  • 2.  RE: Aspera Faspex Authentication Failed

    Posted Mon October 10, 2022 11:43 AM
    Hello,

    From what you have written, it looks like a configuration in SSHD might be part of the issue.

    Can you let us know what OS you are using for the Aspera Transfer Server as well as the version of your Transfer Server? And also the same from the Aspera Connect Client?

    The host keys that are supported by Aspera based transfers are the following
    HOSTKEY: ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-rsa,ssh-dss

    Based on the logging that you submitted, please check that your sshd_config is allowing one of the host keys specified.

    Also please let us know if you have configured the SSH Fingerprint in your Transfer Server.

    Thanks,

    Ben Forsyth

    ------------------------------
    BEN FORSYTH
    ------------------------------



  • 3.  RE: Aspera Faspex Authentication Failed

    Posted Mon October 10, 2022 08:22 PM
      |   view attached
    Thanks for the reply, Ben.
                 Our HSTs version is also 4.4, which install on Windows Server 2016 Std. The browser aspera connect version is 3.9.8.
                 Attached SSHD_Config, already follow the installation guideline to config OpenSSH. 
                 where to config the SSH fingerprint? how to make Faspex communicate w/ transfer server? thx


    ------------------------------
    Benny Huang
    ------------------------------

    Attachment(s)

    txt
    SSHD_Config.txt   2 KB 1 version
    Original Message


  • 4.  RE: Aspera Faspex Authentication Failed

    Posted Mon October 10, 2022 11:36 PM
    Please update your Aspera Connect to the latest 4.4 update and your SSH issues should be resolved.

    If you can't update Aspera Connect, then you can try commenting out the KeyExchange configuration line in the sshd_config and restarting the ssh service.

    The older version of Connect based ascp needs to use sha1 based key exchange.



    Original Message


  • 5.  RE: Aspera Faspex Authentication Failed

    Posted Tue October 11, 2022 10:39 AM
    Hi Ben,
           I only can download the latest Aspera connect version 4.2.3. it still shows authentication failed when using faspex. 
    sshd log:
    userauth-request for user faspex service ssh-connection method publickey [preauth]
    key type ssh-rsa not in PubkeyAcceptedAlgorithms
    disconnect from xxx.xxx.xxx.xxx port 40804:11: SSH authentication failed

    ------------------------------
    Benny Huang
    ------------------------------

    Original Message


  • 6.  RE: Aspera Faspex Authentication Failed

    Posted Tue October 11, 2022 12:22 PM

    Hi Benny,

     

    Please remove the comments from these two lines that are commented in your sshd_config and then restart the OpenSSH Service and that should help resolve the latest error you send

     

    PubkeyAcceptedAlgorithms +ssh-rsa

    PubkeyAcceptedKeyTypes +ssh-rsa

     

     

     

     

     




    Original Message