I am trying to follow the instructions here for OSX
I can successfully ssh
to the target server with no username/password (OSX picks up my certificates from the ~/.ssh
directory), but I have no idea how to get Filezilla to do the same.
Recently, there was a report from Finjan that administrator credentials for over 9,000 FTP servers were for sale.Then, F-Secure noted an increase in FTP-based attacks.Many companies and organization still use FTP extensively. If you're running an FTP server and you think you're admin credentials might be one of those 9,000, you should consider implementing two-factor authentication for SSH. Example logs from SFTPPlus. The following are snippets when logging in for the first time from a GUI client to an SFTPPlus 3.30.0 SFTP server. A new connection has been made to the service sftp-1.Knowing the service name is useful in case there are multiple other SFTP services running. Hi, I use outlook.com (still not migrated to Exchange btw.) and outlook for mac on my desktop. Two factor authentication is enabled and I read somewhere one a Microsoft blog, that the newer versions of outlook now support 2 factor authentication.
I have tried just running ssh-agent
which doesn't do much.
7 Answers
You can now use FileZilla -> Preferences -> Connection -> SFTP
which will allow you to import your private key.
Mac Os Sftp Client
Recent versions of OSX have the ssh-agent built-in and there is no need to start it separately.
In my case I simply had to change the logon type to 'interactive' in the sites settings in FileZilla and choose SFTP as the protocol.
FileZilla apparently talks with the ssh-agent and handles the authentication. This is better than importing the key to FileZilla, since this way you can keep the file password protected.
You don't need .ppk
or .pem
keys.
- Add your private key to the SSH agent. In Mac, this is
ssh-add ~/.ssh/[your private key]
- if you haven't created SSH keys then run this command firstssh-keygen -t rsa -f ~/.ssh/[give a name for your keys] -C '[your email]'
- 1) Open FileZilla 2) Type host:
sftp://[host ip address you want to connect to]
3) Type username:[your username]
4) Leave password and port fields empty 5) Click Quickconnect
FileZilla will be able to use the keys you've loaded in the SSH agent automatically.
Both instructions on this page tell 3/4 of the story:
Yar is correct: you only have to go to the SFTP settings page to enter your SSH key (which I had to format as a putty key with a .ppk extension - FileZilla will format a normal ssh private key for you if you let it).
ddd is correct that you have to put your login into 'Normal' mode (but you still also need the key entered on the SFTP settings).
But there is one more thing you have to have in your settings - you must allow FileZilla to save passwords. This is in the Preferences -> Interface: If you check the box that says 'Do Not Save Passwords' you will not be permitted to use Normal mode, and then your ssh won't be utilized - you will be prompted for a password.
So, do all three steps:
- Import SSH Key on the SFTP settings page.
- Do not check the box that says 'Do Not Save Passwords' (i.e., allow saving passwords)
- Use Normal mode in the General tab of the server profile settings.
Good luck!
None of these solutions worked for me on MacOS (Sierra, High Sierra, or Mojave). Adding your own key to FileZilla Settings still prompts for a password after reboot.
Add the following to ~/.ssh/config
:
Then do this in the terminal:
Then create this file:
~/Library/LaunchAgents/local.computername.AddSSHKeysAtLogin.plist
Put this in it:
Mac Sftp Client
Labellocal.mycomputername.AddSSHKeysAtLoginProgramArguments/usr/bin/ssh-add-AStandardOutPath/dev/nullStandardErrorPath/dev/nullRunAtLoad
Reboot and you should be able to use FileZilla without being prompted for a password. It Works!
I got the last part here: https://blog.elao.com/en/tech/ssh-agent-does-not-automatically-load-passphrases-on-the-osx-sierra-keychain/
For Mac Filezilla:
Top Menu: Filezilla -> Settings -> Connection/FTP/SFTP
Click Add keyfile
to import the ppk file (there are a lot of pem to ppk converter if you only have pem private key)
You have to put your server first in the server manager. Provide the IP/domain and username, and ensure the login type is set to 'normal' then press login.
Download Sftp Client
If you have a working SSH connection to this IP everything will be fine!
Gaff