Fetch Softworks

Using FTP with GoDaddy web Hosting (48 posts)

• Started 8 years ago by Madison
• Latest reply 5 years ago from studioactiv8

• JP Member

  Hey Jim -no do not have "Ask before accepting unknown host keys" checked. Error is "SFTP connection to "press today.info" could not be opened because the SFTP server rejected your authentication information."

  Posted 5 years ago #

• Russell Member

  Thanks Jim,

  Just sent it. Appreciate you taking a look at this on the weekend.

  Cheers,

  Russell

  Posted 5 years ago #

• JP Member

  Just tried again - took 6 attempts, but then it went through. Happened to be on one where I had entered port 22.

  Posted 5 years ago #

• Jim Matthews Administrator

  Russell: Thanks, I'll take a look.

  JP: I'd be happy to look at your transcript too, you can submit it at http://fetchsoftworks.com/fetch/feedback .

  Jim Matthews
  Fetch Softworks

  Posted 5 years ago #

• Tom Bell Member

  The Following Fixed my issue with FTP and godaddy

  Open Terminal

  Type the following while replacing yourwebsite.com with your web site url:
  ssh-keygen -R yourwebsite.com

  Posted 5 years ago #

• Jim Matthews Administrator

  Hi tom,

  Thanks for that suggestion -- I didn't know about that option for removing a line from known_hosts.

  Thanks,

  Jim Matthews
  Fetch Softworks

  Posted 5 years ago #

• JP Member

  Jim - thanks for latest upgrade. Completely fixed this issue!

  Posted 5 years ago #

• Jill Member

  Hi guys,

  Having the same problem. GoDaddy-managed WP site, credentials work with FileZilla but not Fetch. Get an error saying "the SFTP server rejected your authentication information."

  I've read through the thread but the Terminal fix only helped once. It seems that making multiple attempts to log in specifying port 22 does eventually work, but I'd really like to find something more permanent than throwing a dozen darts at a board and hoping one will stick. "Ask before accepting unknown host keys" is unchecked in Security settings.

  Was there a solution that was working more universally?

  Fetch Transcript says:
  Connecting to jwro2973870936@jwrobinsoninc.com port 22 (1/9/18, 4:22 PM)
  SSH2_FXP_INIT 3
  Unknown server response: @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@

  @ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @

  @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@

  IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!

  Someone could be eavesdropping on you right now (man-in-the-middle attack)!

  It is also possible that a host key has just been changed.

  The fingerprint for the ECDSA key sent by the remote host is
  SHA256:wK4HBNQuJW8EBpeivkG6SOgulMmFpKIzGl0jFvl/tPM.

  Please contact your system administrator.

  Add correct host key in /Users/Jill/.ssh/known_hosts to get rid of this message.

  Offending ECDSA key in /Users/Jill/.ssh/known_hosts:4

  ECDSA host key for jwrobinsoninc.com has changed and you have requested strict checking.

  Host key verification failed.

  SFTP connection to “jwrobinsoninc.com” could not be opened because the SFTP server rejected your authentication information. (Contact the server administrator to verify that you have the correct hostname, username, password, and authentication method.)

  Posted 5 years ago #

• Jim Matthews Administrator

  Hi,

  From what I can tell GoDaddy is routinely changing their SFTP server host keys, which makes it look like there’s an attacker posing as the server. FileZilla ignores the security issue, but that strikes me as an irresponsible approach.

  You can remove the offending host key from known_hosts by following these steps:

  1) Choose Utilities from the Go menu in the Finder
  2) Open Terminal
  3) Enter the following command and type Return:

  sed -i -e "4d" ~/.ssh/known_hosts

  Let me know if that doesn't fix the problem, at least temporarily.

  Thanks,

  Jim Matthews
  Fetch Softworks

  Posted 5 years ago #

• Jill Member

  Yeah, I used that fix, and it worked for precisely one login. Not much more helpful than just trying to log in half a dozen times til it's finally accepted...

  Posted 5 years ago #

• Jim Matthews Administrator

  Hi Jill,

  Thanks for that information. Could you try this command in Terminal and let me know if it helps?

  echo -e "\nHost jwrobinsoninc.com\nStrictHostKeyChecking no\nUserKnownHostsFile /dev/null\n" >> ~/.ssh/config

  Thanks,

  Jim Matthews
  Fetch Softworks

  Posted 5 years ago #

• Jill Member

  That one does seem to work, thanks! I'll let you know if that changes.

  Posted 5 years ago #

• studioactiv8 Member

  "Warning Potential security breach"
  The servers host key does not match the key that has been cached.
  Trust new key and carry on connecting.. update cached key for this host.

  This is the 'host key mismatch' window that pops up on 'Filezilla' that lets us
  override this weird situation with GoDaddy. I am just posting this to confirm
  this problem is epidemic.. is there some way to fix this?.. it makes working
  a drag. I am constantly using ftp.. on GoDaddy Wordpress accounts..If I do
  get logged on.. I can't create clone windows to drag and drop with..etc.

  Thanks for any help the 'terminal' solution didn't work.. goDaddy must be changing their
  host keys every few minutes/seconds.. I know it isn't fetch itself but there are a ton of GoDaddy users.
  Is there something we can talk to goDaddy about globally?

  thanks, studioactiv8

  Edited 5 years ago #

• Jim Matthews Administrator

  Hi studioactiv8,

  Have you tried this command (substituting your server name for HOSTNAME):

  echo -e "\nHost HOSTNAME\nStrictHostKeyChecking no\nUserKnownHostsFile /dev/null\n" >> ~/.ssh/config

  I do suggest contacting GoDaddy to ask them to not change host keys.

  Thanks,

  Jim Matthews
  Fetch Softworks

  Posted 5 years ago #

• Suzy Member

  Hi Jim,

  Thanks for the command in Terminal. It worked!

  cheers!

  Suzy

  Posted 5 years ago #

• studioactiv8 Member

  Thanks Jim. .. is there anyway to set the preferences of Fetch 'not to care' if the hosting key changes? Or maybe there is an OS X global adjustment? Since one site can be overwritten through the terminal.. I called GoDaddy .. and it was difficult for the support team to understand what I was concerned about ;) ha ha

  Edited 5 years ago #

• Jim Matthews Administrator

  Hi studioactiv8,

  The command (substituting your server name for HOSTNAME) sets the configuration to not care if the host key for that server changes:

  echo -e "\nHost HOSTNAME\nStrictHostKeyChecking no\nUserKnownHostsFile /dev/null\n" >> ~/.ssh/config

  Thanks,

  Jim Matthews
  Fetch Softworks

  Posted 5 years ago #

• studioactiv8 Member

  Ok.. I see.. I pre-created the <script> with the server 'url' and then I pasted it in and pressed 'return' and got the sftp to connect so it seems to work consistently. Will just have to include this step in setting up new accounts.. thanks! ;) John

  Posted 5 years ago #