#940272 lftp: command "open" does not initiate the connection: unusable with some sshd servers

Package:
lftp
Source:
lftp
Description:
Sophisticated command-line FTP/HTTP/BitTorrent client programs
Submitter:
Vincent Lefevre
Date:
2024-07-27 04:42:02 UTC
Severity:
normal
Tags:
#940272#5
Date:
2019-09-15 00:44:20 UTC
From:
To:
The "open" command does not initiate the connection, and it appears
impossible to do that. This makes lftp unusable with SimpleSSHD under
Android when a key hasn't been defined yet, for instance. There is
no such issue with sftp.

The problem is the following: when SimpleSSHD has just been installed,
there isn't a key yet. Thus, when one connects by sftp, SimpleSSHD
outputs a random, temporary password for security. The password is
provided only once one has initiated the connection (since it will
change at each connection). The problem with lftp is that when it
asks the password, it hasn't initiated the connection, so that one
does not know the password.

Note: If one gives a dummy password, lftp tries to connect, and
SimpleSSHD outputs the password that should have been used. But
after the login failure, lftp closes the connection, so that at
the next connection the password will change. Thus this does not
solve the problem.

Note: This method with the random, temporary password must be used
in order to upload the key in authorized_keys.

#940272#10
Date:
2024-07-27 04:24:32 UTC
From:
To:
forwarded 940272 https://github.com/lavv17/lftp/issues/730
tags 940272 + upstream
thanks

Hello Vincent,

Am Sonntag, dem 15.09.2019 um 02:44 +0200 schrieb Vincent Lefevre:
...

Thank you for the report.
I reported it upstream because it is not something I can fix with
options or packaging.