文档建议反馈控制台
首页
学习
活动
专区
圈层
工具
MCP广场
文章/答案/技术大牛
发布
社区首页 >问答首页 >如何使用PPK键通过Paramiko连接到SFTP服务器？

问如何使用PPK键通过Paramiko连接到SFTP服务器？
EN

Stack Overflow用户
提问于 2022-08-04 08:06:49
回答 1查看 227关注 0票数 0

我已经将PKK键转换成PEM格式(使用PuTTY)，并使用Filezilla对其进行了测试，这样我就可以使用PKK和PEM键访问SFTP服务器。但是，当我试图从python代码访问服务器时，总是会收到以下错误消息：

代码语言：javascript
复制
Secsh channel 0 open FAILED: The user has to be authenticated before open a new channel: Administratively prohibited
Traceback (most recent call last):
  File "main.py", line 30, in <module>
    connect_sftp()
  File "main.py", line 12, in connect_sftp
    sftp = ssh_client.open_sftp()
  File "/home/runner/Test/venv/lib/python3.8/site-packages/paramiko/client.py", line 558, in open_sftp
    return self._transport.open_sftp_client()
  File "/home/runner/Test/venv/lib/python3.8/site-packages/paramiko/transport.py", line 1142, in open_sftp_client
    return SFTPClient.from_transport(self)
  File "/home/runner/Test/venv/lib/python3.8/site-packages/paramiko/sftp_client.py", line 164, in from_transport
    chan = t.open_session(
  File "/home/runner/Test/venv/lib/python3.8/site-packages/paramiko/transport.py", line 920, in open_session
    return self.open_channel(
  File "/home/runner/Test/venv/lib/python3.8/site-packages/paramiko/transport.py", line 1062, in open_channel
    raise e
paramiko.ssh_exception.ChannelException: ChannelException(1, 'Administratively prohibited')

重要的是，我试图使用以下代码片段从https://replit.com访问服务器：

代码语言：javascript
复制
    ssh_client = paramiko.SSHClient()
    ssh_client.set_missing_host_key_policy(paramiko.AutoAddPolicy())
    ssh_client.connect(hostname = '0.0.0.0',
                       username = username,
                       password = ********,
                       key_filename = 'key.pem',
                       port = port)
    
    sftp = ssh_client.open_sftp()
    
    sftp.close()
    
    ssh_client.close()

我也尝试过，但结果是一样的：

代码语言：javascript
复制
mykey = paramiko.RSAKey.from_private_key_file('key.pem')
ssh_client.connect(... pkey=mykey ...)

key.pem文件具有以下格式：

代码语言：javascript
复制
-----BEGIN RSA PRIVATE KEY-----
...
tYkT6F/FrDWxktgWMcPvqAu/38X2C1LB3xr25ORRl1nlfGvI8pwqIxOrSQduAUuJ
jbQEPpIkAT1pwgolIwwB/FqbKtVLC7hfgFrXzwIBJQKCAQAbG2+vgKCSwhnZyJKk
...
-----END RSA PRIVATE KEY-----

我做错什么了，有什么想法吗？

编辑1:

Paramiko日志文件包含以下内容：

代码语言：javascript
复制
DEB [20220804-09:18:08.041] thr=1   paramiko.transport: starting thread (client mode): 0x1aeed0a0
DEB [20220804-09:18:08.041] thr=1   paramiko.transport: Local version/idstring: SSH-2.0-paramiko_2.11.0
DEB [20220804-09:18:08.179] thr=1   paramiko.transport: Remote version/idstring: SSH-2.0-CerberusFTPServer_7.0
INF [20220804-09:18:08.179] thr=1   paramiko.transport: Connected (version 2.0, client CerberusFTPServer_7.0)
DEB [20220804-09:18:08.316] thr=1   paramiko.transport: === Key exchange possibilities ===
DEB [20220804-09:18:08.316] thr=1   paramiko.transport: kex algos: ecdh-sha2-nistp256, ecdh-sha2-nistp384, ecdh-sha2-nistp521, diffie-hellman-group-exchange-sha1, diffie-hellman-group-exchange-sha256, diffie-hellman-group14-sha1, diffie-hellman-group1-sha1
DEB [20220804-09:18:08.316] thr=1   paramiko.transport: server key: ssh-rsa
DEB [20220804-09:18:08.317] thr=1   paramiko.transport: client encrypt: aes128-ctr, aes128-cbc, aes192-ctr, aes192-cbc, aes256-ctr, aes256-cbc, 3des-cbc
DEB [20220804-09:18:08.317] thr=1   paramiko.transport: server encrypt: aes128-ctr, aes128-cbc, aes192-ctr, aes192-cbc, aes256-ctr, aes256-cbc, 3des-cbc
DEB [20220804-09:18:08.317] thr=1   paramiko.transport: client mac: hmac-sha1, hmac-sha1-96, hmac-sha2-256, hmac-sha2-256-96, hmac-sha2-512, hmac-sha2-512-96, hmac-ripemd160, hmac-ripemd160@openssh.com, hmac-md5
DEB [20220804-09:18:08.317] thr=1   paramiko.transport: server mac: hmac-sha1, hmac-sha1-96, hmac-sha2-256, hmac-sha2-256-96, hmac-sha2-512, hmac-sha2-512-96, hmac-ripemd160, hmac-ripemd160@openssh.com, hmac-md5
DEB [20220804-09:18:08.317] thr=1   paramiko.transport: client compress: none
DEB [20220804-09:18:08.317] thr=1   paramiko.transport: server compress: none
DEB [20220804-09:18:08.317] thr=1   paramiko.transport: client lang: en-US
DEB [20220804-09:18:08.317] thr=1   paramiko.transport: server lang: en-US
DEB [20220804-09:18:08.317] thr=1   paramiko.transport: kex follows: False
DEB [20220804-09:18:08.317] thr=1   paramiko.transport: === Key exchange agreements ===
DEB [20220804-09:18:08.317] thr=1   paramiko.transport: Kex: ecdh-sha2-nistp256
DEB [20220804-09:18:08.317] thr=1   paramiko.transport: HostKey: ssh-rsa
DEB [20220804-09:18:08.318] thr=1   paramiko.transport: Cipher: aes128-ctr
DEB [20220804-09:18:08.318] thr=1   paramiko.transport: MAC: hmac-sha2-256
DEB [20220804-09:18:08.318] thr=1   paramiko.transport: Compression: none
DEB [20220804-09:18:08.318] thr=1   paramiko.transport: === End of kex handshake ===
DEB [20220804-09:18:08.582] thr=1   paramiko.transport: kex engine KexNistp256 specified hash_algo <built-in function openssl_sha256>
DEB [20220804-09:18:08.717] thr=1   paramiko.transport: Switch to new keys ...
DEB [20220804-09:18:08.718] thr=2   paramiko.transport: Adding ssh-rsa host key for [*.*.*.*]:****: b'***********************'
DEB [20220804-09:18:08.718] thr=2   paramiko.transport: Trying SSH key b'***********************'
DEB [20220804-09:18:08.857] thr=1   paramiko.transport: userauth is OK
DEB [20220804-09:18:08.858] thr=1   paramiko.transport: Finalizing pubkey algorithm for key of type 'ssh-rsa'
DEB [20220804-09:18:08.858] thr=1   paramiko.transport: Our pubkey algorithm list: ['rsa-sha2-512', 'rsa-sha2-256', 'ssh-rsa']
DEB [20220804-09:18:08.858] thr=1   paramiko.transport: Server did not send a server-sig-algs list; defaulting to our first preferred algo ('rsa-sha2-512')
DEB [20220804-09:18:08.858] thr=1   paramiko.transport: NOTE: you may use the 'disabled_algorithms' SSHClient/Transport init kwarg to disable that or other algorithms if your server does not support them!
INF [20220804-09:18:08.995] thr=1   paramiko.transport: Auth banner: b'************************************\r\n'
INF [20220804-09:18:09.178] thr=1   paramiko.transport: Authentication (publickey) failed.
DEB [20220804-09:18:09.318] thr=1   paramiko.transport: userauth is OK
INF [20220804-09:18:09.455] thr=1   paramiko.transport: Auth banner: b'************************************\r\n'
INF [20220804-09:18:09.600] thr=1   paramiko.transport: Authentication continues...
DEB [20220804-09:18:09.601] thr=1   paramiko.transport: Methods: ['publickey']
DEB [20220804-09:18:09.601] thr=2   paramiko.transport: [chan 0] Max packet in: 32768 bytes
ERR [20220804-09:18:09.749] thr=1   paramiko.transport: Secsh channel 0 open FAILED: The user has to be authenticated before open a new channel: Administratively prohibited
DEB [20220804-09:23:11.407] thr=1   paramiko.transport: EOF in transport thread
python
sftp
paramiko
EN

回答 1

Stack Overflow用户

回答已采纳

发布于 2022-08-04 11:31:13

基于发布的日志和this question，我最终通过禁用rsa-sha2-512和rsa-sha2-256算法来强制ssh-rsa算法来解决错误。

代码语言：javascript
复制
ssh_client.connect(
        disabled_algorithms={'pubkeys': ['rsa-sha2-512', 'rsa-sha2-256']}, ...)
票数 0
EN
页面原文内容由Stack Overflow提供。腾讯云小微IT领域专用引擎提供翻译支持
原文链接：

https://stackoverflow.com/questions/73232416

复制
相关文章

相似问题

领券

腾讯云开发者

扫码关注腾讯云开发者

扫码关注腾讯云开发者

领取腾讯云代金券

热门产品

热门推荐

更多推荐

Copyright © 2013 - 2026 Tencent Cloud. All Rights Reserved. 腾讯云 版权所有 

深圳市腾讯计算机系统有限公司 ICP备案/许可证号：粤B2-20090059 粤公网安备44030502008569号

腾讯云计算（北京）有限责任公司 京ICP证150476号 |  京ICP备11018762号

问题归档专栏文章快讯文章归档关键词归档开发者手册归档开发者手册 Section 归档