IBM Support

portal sftp backup fails with Permission denied (publickey,gssapi-keyex,gssapi-with-mic)

Troubleshooting


Problem

The portal backup using sftp fails. 

Diagnosing The Problem

The following error stack is seen in the admin container of the portal www pod. For example: In port-lx-abc-www-0_admin.log :
  [   syslogd stdout]  1897 id date:49: backup_site: Command Started: /opt/ibm/bin/backup_site -ib
  [   syslogd stdout]  1897 id date:49: backup_site: Currently installed sites (pre-backup):
  [   syslogd stdout]  1897 id date:49: backup_site: id.id => portal-www.a.b.c.d/catalog1/sandbox (INSTALLED)
  [   syslogd stdout]  1897 id date:49: backup_site: id.id => portal-www.a.b.c.d/catalog2/sandbox (INSTALLED)
  [   syslogd stdout]  1897 id date:50: backup_site: Testing authentiation to destination /opt/dir/backups/portal/ on a.b.c.d:22 sftp
  [   syslogd stdout]  1897 id date:50: backup_site: ERROR: Could not authenticate with backup server
  [   syslogd stdout]  1897 id date:50: backup_site: Uploading /tmp/apic_portal_connection_test to a.b.c.d:22:/opt/dir/backups/portal//connection_test sftp
  [   syslogd stdout]  1897 id date:50: backup_site: Authorizing sftp using usernmame/password
  [   syslogd stdout]  1897 id date:50: backup_site: user@a.b.c.d: Permission denied (publickey,gssapi-keyex,gssapi-with-mic).
  Connection closed.   1897 id date:50: backup_site:
  [   syslogd stdout]  1897 id date:50: backup_site: Connection closed
  [   syslogd stdout]  1897 id date:50: backup_site: UPLOAD ERROR RC: 255
  [   syslogd stdout]  1897 id date:50: backup_site: UPLOAD ERROR RESULT:
  [   syslogd stdout]  1897 id date:50: backup_site: Cannot backup all sites as cannot authenticate with the backup server.
  [   syslogd stdout]  1897 id date:50: backup_site: Command Finished: /opt/ibm/bin/backup_site -ib with RC 16

Resolving The Problem

The error message indicates that the SFTP server is rejecting the connection attempt, and the reason given is "Permission denied (publickey,gssapi-keyex,gssapi-with-mic)." This suggests that the server is configured to only accept connections using public key authentication or GSSAPI methods.

If you are trying to connect using a username and password, you may need to check the server's configuration and adjust the authentication methods allowed.
Here are some steps you can take.
Please login to that sftp server and open this file /etc/ssh/sshd_config then make sure PasswordAuthentication is set to yes then save and restart the server.

Document Location

Worldwide

[{"Type":"MASTER","Line of Business":{"code":"LOB45","label":"Automation"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSMNED","label":"IBM API Connect"},"ARM Category":[{"code":"a8m3p0000008uLmAAI","label":"API Connect-\u003EDeveloper Portal (MM)-\u003EBackup\/Restore"}],"ARM Case Number":"TS015151036","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"10.0.5"}]

Document Information

Modified date:
12 January 2024

UID

ibm17107335