Issue SFTP and FTP not working

[Christopher Cookson]

Plesk Onyx Version 17.0.17 Update #12
‪CentOS Linux 7.3.1611 (Core)‬

x64 (virtualised)

Plesk was migrated from another VPS running Centos 5.11, Plesk 12.5 running the Plesk Migration Manager.

I can log in successfully via SSH and SFTP as root using an SSH key file.

I can't log in via SSH with an SSH key file as a web hosting user.

I can't log in via FTP or SFTP as a web hosting user.

My FTP client gives the following log:

Status: Resolving address of xxx
Status: Connecting to xxx:21...
Status: Connection established, waiting for welcome message...
Status: Initializing TLS...
Status: Verifying certificate...
Status: TLS connection established.
Command: USER xxx
Response: 331 Password required for webadmin
Command: PASS ********************
Error: Connection timed out after 20 seconds of inactivity
Error: Could not connect to server

On the server:

sshd[3206]: error: Received disconnect from (remote IP) 14: No supported authentication methods available [preauth]

/var/log/secure gives the following for an attempted SFTP login for same user:

sshd[3437]: Accepted publickey for webadmin from (remote IP) port 58379 ssh2: RSA (key)
sshd[3439]: error: Received disconnect from (remote IP): 14: No supported authentication methods available [preauth]


(I've removed identifying information from the logs)

Web hosting configuration is set to use a chrooted environment via the control panel.

 

[IgorG]

Check that PasswordAuthentication is allowed and review all others parameters with:

# grep -v ^# /etc/ssh/sshd_config | grep -v ^$

 

[Christopher Cookson]

I'd prefer to use SSH public/private keys to password authentication, but I've enabled PasswordAuthentication

Unfortunately, non-root connections still fail.

Here's output of grep:

HostKey /etc/ssh/ssh_host_rsa_key
HostKey /etc/ssh/ssh_host_ecdsa_key
HostKey /etc/ssh/ssh_host_ed25519_key
SyslogFacility AUTHPRIV
PermitRootLogin yes
AuthorizedKeysFile .ssh/authorized_keys
PasswordAuthentication yes
ChallengeResponseAuthentication no
GSSAPIAuthentication yes
GSSAPICleanupCredentials no
UsePAM yes
X11Forwarding yes
UsePrivilegeSeparation sandbox # Default for new installations.
AcceptEnv LANG LC_CTYPE LC_NUMERIC LC_TIME LC_COLLATE LC_MONETARY LC_MESSAGES
AcceptEnv LC_PAPER LC_NAME LC_ADDRESS LC_TELEPHONE LC_MEASUREMENT
AcceptEnv LC_IDENTIFICATION LC_ALL LANGUAGE
AcceptEnv XMODIFIERS
Subsystem sftp /usr/libexec/openssh/sftp-server

Here's the output of /var/log/secure with PasswordAuthentication enabled.

sshd[28684]: Accepted password for (user) from (ip) port 58419 ssh2
sshd[28684]: pam_systemd(sshd:session): Failed to create session: Connection timed out
sshd[28684]: pam_unix(sshd:session): session opened for user (user) by (uid=0)
sshd[28684]: pam_unix(sshd:session): session closed for user (user)

 

[Christopher Cookson]

I've managed to get SFTP working by changing the shell bin /bin/bash (Plesk gives me a warning that I'm over-riding the system security policy)
FTP still does not work and times out on 'retrieving directory listing'
SFTP configured to use /bin/bash (chrooted) does not work.

 

[Julian Johannsen]

Debian 8.7 64bit Plesk Onyx (up2date)

We have the same problem. SFTP don't work. It's the same result of bin/bash or bin/bash (chrooted). Under Plesk 12.5 we hadn't so much problems and bugs. Since 2 or 3 weeks SSH don't work if the plesk firewall is enabled. Do all updates have to be done manually that all works?! Onyx it is really terrible. whats going on?

 

[Bitpalast]

Since 2 or 3 weeks SSH don't work if the plesk firewall is enabled.

Please refer to https://talk.plesk.com/threads/ftp-explicit-not-working.341272/#post-817128 for the solution of Firewall blocking FTP.

Edit: Didn't read correctly. You are saying SSH is blocked by firewall, not FTP. Sorry for misunderstanding.