Thank you Scott. I was running from Client Access, um iSeries Access,
terminal emulation. It is funny that SSH works with the interactive
logon but SFTP does not. I cannot go with the Public/Private key as the
bank gave me a user id and password, not a digital cert.
Thank you for all of the links. I have some reading and scripting to do
now.
Chris Bipes
Director of Information Services
CrossCheck, Inc.
-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Scott Klement
Sent: Wednesday, December 17, 2008 5:13 PM
To: Midrange Systems Technical Discussion
Subject: Re: SFTP
Hi Chris,
Responses in-line.
has anyone used the qp2term SFTP client to connect to a SFTP server
via user ID and Password?
Yes.
I have a bank I need to connect to but I keep getting an error about
keyboard interactive - Access Denied without ever being prompt for the
password.
That could mean that the bank has denied password authentication. They
may have their server set to ONLY allow digital key authentication.
Another possibility...
Are you using a 5250 terminal emulator? If so, that's the problem.
SFTP is very picky about the terminal you're coming from, because it
does not allow password authentication unless it's completely sure that
you're coming from an interactive terminal.
Trouble is, SFTP is a Unix program. It doesn't consider a 5250 terminal
to be an interactive terminal!!
There are ways to use an xterm-compatible (Unix style) terminal emulator
instead of 5250... If the problem is that SFTP doesn't trust yout 5250,
that will solve it. (Also, if that's the problem, an Expect script
might solve it.)
Here are some links to articles I've written about using OpenSSH on i --
not sure if they apply to your exact error -- but it couldn't hurt.
http://systeminetwork.com/article/ssh-scp-and-sftp-tools-openssh
http://systeminetwork.com/article/openssh-swiss-army-knife-secure-networ
king
http://systeminetwork.com/article/error-handling-sftp-scripts
http://systeminetwork.com/article/download-site-expect-tool
Here's a recent discussion on passing variables to SFTP scripts that
involved scripts using password authentication:
http://forums.systeminetwork.com/isnetforums/showthread.php?t=52905
I can connect to this same server using SSH user@server and get the
password prompt. but SFTP user@server does generates the error. I am
at V5R3. I think the error is generated by the remote server but I do
not know how to tell. There is nothing in the job log. Where would I
find the qp2term session log?
I'm not sure what a "qp2term session log" would be. I would suggest
specifying the -vvv option to SFTP to have it generate more detailed
information:
sftp -vvv user@host
But, in my experience, the extra information isn't really that helpful.
Still, maybe it'll yield something, who knows?
midrange.com
