Sample code for 30+ languages & platforms
Chilkat2-Python

SFTP Auth Failure Reason (AuthenticatePwPk)

See more SFTP Examples

This example demonstrates how to determine the failure reason for the case where both a password and private key are required for authentication. If authentication fails, was it because of an invalid private key, or an invalid password?

Chilkat Chilkat2-Python Downloads

Chilkat2-Python
import sys
import chilkat2

success = False

# This example assumes the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

# Load a private key to be used for SSH authentication.
key = chilkat2.SshKey()
key.Password = "key_password"

success = key.FromOpenSshPrivateKey(key.LoadText("qa_data/my_private_key_file"))
if (success == False):
    print(key.LastErrorText)
    sys.exit()

sftp = chilkat2.SFtp()

success = sftp.Connect("sftp.example.com",22)
if (success == False):
    print(sftp.LastErrorText)
    sys.exit()

# Authenticate using both a password and private key.
success = sftp.AuthenticatePwPk("myLogin","myPassword",key)
if (success == True):
    print("Authentication is successful!")
    sys.exit()

# If we get here, it means the authentication failed.
# Examine the last JSON data..

json = chilkat2.JsonObject()
sftp.GetLastJsonData(json)

json.EmitCompact = False

# This is the JSON if the key is correct, but the password is incorrect:

# {
#   "public_key_type": "rsa",
#   "partialAuthResult": "publickey success. continue to authenticate with password...",
#   "authResult": "failed",
#   "authFailReason": "Password is incorrect"
# }

# This is the JSON if the key is incorrect.  We won't know if the password is also incorrect until
# the key is made correct so that authentication proceeds to check the password.

# {
#   "public_key_type": "rsa",
#   "authResult": "failed",
#   "authFailReason": "Key is incorrect"
# }

# To get the authResult anbd authFailReason:
print("authResult: " + json.StringOf("authResult"))
print("authFailReason: " + json.StringOf("authFailReason"))