{"id":2355,"date":"2018-02-03T08:20:11","date_gmt":"2018-02-03T08:20:11","guid":{"rendered":"http:\/\/www.dpscomputing.com\/blog\/?p=2355"},"modified":"2021-03-01T21:51:52","modified_gmt":"2021-03-01T21:51:52","slug":"too-many-authentication-failures-filezilla","status":"publish","type":"post","link":"https:\/\/www.dpscomputing.com\/blog\/2018\/02\/03\/too-many-authentication-failures-filezilla\/","title":{"rendered":"Too Many Authentication Failures – Filezilla"},"content":{"rendered":"

T\"FileZilla<\/a>rust me, we’ve all been there.<\/p>\n

And yes, it is immensely frustrating.<\/p>\n

Picture the scene – you’ve been good and decided to use key based SSH for securely transferring files between your servers and local machines.\u00a0 You’ve disabled password access to shore up security even more.\u00a0 You’re used to using passwords – but keyfiles are no biggie.<\/p>\n

Until…<\/p>\n

“Too many authentication failures”<\/h2>\n

Panic can certainly start to set in, particularly as Filezilla continues to try and connect when it’s clearly not going to work no matter how many times it tries!\u00a0 You’re asking yourself why oh why it would attempt such a futile task.\u00a0 But really, the only question you want answering is why its not working properly.<\/p>\n

And usually, the solution is fairly simple.<\/p>\n

Keys saved in Pageant<\/h3>\n

Pageant, or the PuTTy authentication agent, is a handy key repository used by not only the PuTTy SSH\/Bash client but also other third party software – including Filezilla.<\/p>\n

You load up your first key, go to Filezilla and all is OK.\u00a0 For Now.\u00a0 Maybe.<\/p>\n

But you add a few more keys and bang, the sh*t has hit the fan.<\/p>\n

What’s Up?<\/h4>\n

Or more like, what’s down?\u00a0 And the answer to that question will be access to your server from your IP as you do your best imitation of a brute force attack.\u00a0 Don’t panic though, there’s a fairly reasonable way around it.<\/p>\n

Yes Pageant plays nicely with a few keys.\u00a0 But Filezilla will try each one in order and any reasonably configured server will only allow a few attempts before it decides you are trying to brute force your way.<\/p>\n

Fortunately, the answer is fairly simple…<\/p>\n

Unfortunately, it means not using Pageant for Filezilla.<\/p>\n

Filezilla Key Configuration<\/h2>\n

Although when you used Pageant and only had a couple of keys you didn’t have to do this and life seemed so much easier, for server \/ website admins with more than a few sites to manage, it’s more heartache than it’s worth.<\/p>\n

You’ve probably got a site configured currently that looks a bit like this:<\/p>\n

\"\"<\/p>\n

Head over to the Logon Type dropdown and you’ll notice a Keyfile option – give that a press:<\/p>\n

\"\"<\/p>\n

Your password input box will disappear to be replaced by a key file input box:<\/p>\n

\"\"<\/p>\n

Go ahead, click on ‘Browse…’ and select your key file.\u00a0 Job done.<\/p>\n

Next time you try to connect to your server, it’ll only try the appropriate key file preventing any pesky brute force look-a-like ‘attacks’ as you try to login.\u00a0 Enter your key password and boom, you’re in!<\/p>\n","protected":false},"excerpt":{"rendered":"

Trust me, we’ve all been there. And yes, it is immensely frustrating. Picture the scene – you’ve been good and decided to use key based SSH for securely transferring files between your servers and...<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","enabled":false},"version":2}},"categories":[55],"tags":[2067,2072,1251,2065,2062,2064,2071,2063,2069,2068,2066,2070],"class_list":["post-2355","post","type-post","status-publish","format-standard","hentry","category-articles","tag-authentication-failure","tag-could-not-connect-to-server","tag-filezilla","tag-filezilla-keys","tag-key-file","tag-putty","tag-server-sent-disconnect-message","tag-ssh","tag-ssh-auth-failure","tag-ssh-authentication-failure","tag-too-many-authentication-failures","tag-type-2-protocol-error"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_shortlink":"https:\/\/wp.me\/p3nsfA-BZ","jetpack_sharing_enabled":true,"jetpack_likes_enabled":true,"_links":{"self":[{"href":"https:\/\/www.dpscomputing.com\/blog\/wp-json\/wp\/v2\/posts\/2355","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.dpscomputing.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.dpscomputing.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.dpscomputing.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.dpscomputing.com\/blog\/wp-json\/wp\/v2\/comments?post=2355"}],"version-history":[{"count":2,"href":"https:\/\/www.dpscomputing.com\/blog\/wp-json\/wp\/v2\/posts\/2355\/revisions"}],"predecessor-version":[{"id":3082,"href":"https:\/\/www.dpscomputing.com\/blog\/wp-json\/wp\/v2\/posts\/2355\/revisions\/3082"}],"wp:attachment":[{"href":"https:\/\/www.dpscomputing.com\/blog\/wp-json\/wp\/v2\/media?parent=2355"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.dpscomputing.com\/blog\/wp-json\/wp\/v2\/categories?post=2355"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.dpscomputing.com\/blog\/wp-json\/wp\/v2\/tags?post=2355"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}