<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US"><div>On Thu, 2017-04-20 at 17:46 +0000, Lightner, Jeffrey wrote:</div><blockquote type="cite">
<div class="WordSection1">
<p class="MsoNormal">Note I am NOT asking generic “is there a limit to password size” nor am I asking how to configure the remote sftp server (because I can’t).<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I AM asking specifically if the sftp COMMAND (not the daemon) that runs on some flavors of Linux has a size limit to what it will pass to the remote side or possibly won’t pass the “-“ character for some reason?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Also please don’t tell me RHEL5 is end of support as I already know that. My question is about RHEL6 so I am only noting I also see the issue on RHEL5 but not RHEL7.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Background to the question:<o:p></o:p></p>
<p class="MsoNormal">We are attempting to do sftp login to a remote site from our local RHEL servers. We are connecting successfully but on entering password (either by typing it or doing a cut and paste) the password is being rejected.
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">This is only occurring when we do sftp from RHEL6 (and RHEL5) but on testing from a RHEL7 server it is working. This suggest the sftp command itself (not the demon) on RHEL6 (and RHEL5) is doing something different than it does on RHEL7.
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">The password being sent is 30+ character and contains "-" characters. Hence I’m asking is there any length limit or special character limit sftp command on RHEL6 (and RHEL5) has that RHEL7 doesn't?
</p></div></blockquote><div><br></div><div>SFTP may not like '!' characters prior to RHEL7. I've run into issues with terminal being in a funky codepage mode and 'export LC=C' fixed many things (fuzzy memory of weird setup in RHEL6 that was fixed in RHEL7). I've not seen anything that suggests the sftp command has a password limit below the line limit for the shell.</div><blockquote type="cite"><div class="WordSection1"><p class="MsoNormal"><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">On looking for such a limit the only thing I found even remotely like this was bug fix for Cisco where someone ran into a limit of 15/16 characters for password (but even that may have been the daemon on the server [switch] rather than
the command initiating the connection) but it has scant details.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I’ve opened a case with RedHat and am waiting to hear back but figured I’d see if anyone in the community has run into it.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Please don’t make suggestions regarding changing the password length or other settings on the remote side as I have no direct access to make such changes and don’t feel they’d be willing to make any as they deem this setup secure.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<p style="font-size:10pt; line-height:10pt; font-family: 'Arial','times roman',serif;">
CONFIDENTIALITY NOTICE: This e-mail may contain privileged or confidential information and is for the sole use of the intended recipient(s). If you are not the intended recipient, any disclosure, copying, distribution, or use of the contents of this information
is prohibited and may be unlawful. If you have received this electronic transmission in error, please reply immediately to the sender that you have received the message in error, and delete it. Thank you
</p>
<span style="padding-top:10px; font-weight:color:#CC0000; font-size:10pt; font-family: 'Arial',Arial,sans-serif; ">
<p></p>
</span><br>
<br>
<div></div>
<pre>_______________________________________________
Ale mailing list
<a href="mailto:Ale@ale.org">Ale@ale.org</a>
<a href="http://mail.ale.org/mailman/listinfo/ale">http://mail.ale.org/mailman/listinfo/ale</a>
See JOBS, ANNOUNCE and SCHOOLS lists at
<a href="http://mail.ale.org/mailman/listinfo">http://mail.ale.org/mailman/listinfo</a>
</pre></blockquote><div><span><pre><pre>-- <br></pre>James P. Kinney III
Every time you stop a school, you will have to build a jail. What you
gain at one end you lose at the other. It's like feeding a dog on his
own tail. It won't fatten the dog.
- Speech 11/23/1900 Mark Twain
http://heretothereideas.blogspot.com/
</pre></span></div></body></html>