Authenticating ExpanDrive using Private/Public key pairs
I recently tested and liked the Windows version of SFTPDrive, but I just started using a Mac (love it), and while I was able to use private/public keys to login into SSH locations, I do not see that feature on Expandrive (Mac), and if it is really missing, it is a deal-breaker for me because a number of the servers I have to work with do not provide password as an option and require using Keys to login.
Thanks for a quick response
Thanks for a quick response
3
people have this question
I have this question, too!
Tell me when someone answers.
The more people who ask this question, the more it gets noticed.
The more people who ask this question, the more it gets noticed.
The best answer from everyone
-
I got it to work finally.
Background info, I am running Leopard 10.5.3 with my SSH private key (no password) stored in ~/.ssh/
I need to run "ssh-add -K" and have my private key added to the keychain. Configure ExpanDrive with the field "username" filled in but having the field "password" left empty (yet, the checkbox "Save" is checked). ExpanDrive can then connect to my server properly.
For user running earlier version of OS X, you might need to google around "ssh-agent" as additional step might be involved.
Credits goes to this page,
http://www-uxsup.csx.cam.ac.uk/~aia21...
I’m happy
3 people say
this answers the question
-
Inappropriate?Works for me. Just don't fill in the password field and it "just worked" here
If it's not you might try connecting in terminal the first time, you might be getting prompted to accept and save the remote machine's key? (yes/no) -
Inappropriate?Gerk is correct. ExpanDrive supports SSH public key authentication. On OS X 10.5 it also supports password protected private keys through the OS X key-agent system. If your keys are in place, and you don't enter a password, it should just work. Is it not working for you?
1 person says
this answers the question
-
Inappropriate?I am having difficulty to connect through SSH public key also, with an error message of (no more authentication methods available', 14)
In the console log, I spot the following,
28/07/2008 12:31:02 PM ExpanDrive[4744] Unhandled error in Deferred:
Traceback (most recent call last):
File "/Users/jmancuso/work/magnetk/expandrive/build/ExpanDrive.app/Contents/ExpanDrive/twisted/internet/defer.py", line 317, in _runCallbacks
File "/Users/jmancuso/work/magnetk/expandrive/build/ExpanDrive.app/Contents/ExpanDrive/sftp/SFTPFS.py", line 205, in _ebConnecting
File "/Users/jmancuso/work/magnetk/expandrive/build/ExpanDrive.app/Contents/ExpanDrive/twisted/internet/defer.py", line 261, in errback
File "/Users/j
I’m sad
-
Inappropriate?Question for you guys having problems... by chance are you using MacPorts or fink and using sss-agent (i.e. the keys have a pass-phrase)?
I think I had a few issues getting my keys to work... OSX ssh-agent wasn't getting my pass-phrase... -
The cause of the failure to authenticate using keys as opposed to passwords was being caused by the fact that the key file was not secure (CHMOD was too liberal). without attempting login over CLI/SSH, it was not possible to see the error message. So after getting brave, I jumped onto SSH and set the correct SSH, ad it worked like a charm.
Soon after hat worked, I started testing fusion, and MacFusion (google contributed GUI) and that works even better than the paid solution. I no-longer equate OS X with just a nice GUI as it has real power in CLI -
The cause of the failure to authenticate using keys as opposed to passwords was being caused by the fact that the key file was not secure (CHMOD was too liberal). without attempting login over CLI/SSH, it was not possible to see the error message. So after getting brave, I jumped onto SSH and set the correct SSH, ad it worked like a charm.
Soon after hat worked, I started testing fusion, and MacFusion (google contributed GUI) and that works even better than the paid solution. I no-longer equate OS X with just a nice GUI as it has real power in CLI -
idonny - how is MacFusion + sshfs working better for you? -
Inappropriate?Nope, I am using the plain public/private key authentication without pass-phrase protection on the keys.
-
Inappropriate?ronnie - what version of ExpanDrive are you running?
-
Inappropriate?Jeff, I am using Version 1.2.9
-
Inappropriate?Ronnie - on Leopard? Have you tried using normal ssh with that key and having it added to the systemwide ssh key-agent?
-
Inappropriate?Jeff - Yes, I am on Leopard and I can ssh to the host properly in terminal. I am not sure about the systemwide ssh key-agent thing, can you kindly explain a bit more? Is it a feature in the Keychain Access?
-
Inappropriate?I got it to work finally.
Background info, I am running Leopard 10.5.3 with my SSH private key (no password) stored in ~/.ssh/
I need to run "ssh-add -K" and have my private key added to the keychain. Configure ExpanDrive with the field "username" filled in but having the field "password" left empty (yet, the checkbox "Save" is checked). ExpanDrive can then connect to my server properly.
For user running earlier version of OS X, you might need to google around "ssh-agent" as additional step might be involved.
Credits goes to this page,
http://www-uxsup.csx.cam.ac.uk/~aia21...
I’m happy
3 people say
this answers the question
-
Inappropriate?Ronnie -
Theoretically it should be working without the ssh-add -K step. What is the name of your private key file [care I ask]?
-Jeff -
Inappropriate?Jeff, filename for my private key file is "id_rsa". I could ssh properly in terminal without doing the ssh-add step but not sure the different in mechanism between ExpanDrive and the shell.
-
Inappropriate?Sorry that my follow-up is months late, but I realised that my private key has the wrong CHMOD and so it was not considered secure enough my Mac OS. I was able to set the correct chmod and expandrive has been running in the background like a charm (I even forgot that it was running).
Also, I have been running MacFusion on my Macs and it also mounts SSH locations as drives - spectaculaire!
I’m thankful
-
Great - thanks Donny
Loading Profile...




EMPLOYEE


EMPLOYEE