× The internal search function is temporarily non-functional. The current search engine is no longer viable and we are researching alternatives.
As a stop gap measure, we are using Google's custom search engine service.
If you know of an easy to use, open source, search engine ... please contact support@midrange.com.


  1.  Home
  2. MIDRANGE-L
  3. May 2017

RE: PC document / folder key location for SFTP/SSH to i5, PCisclient, i5 is server

If you are running it via STRTCPSVR *SSHD, then end it. ENDTCPSVR *SSHD.
Start a terminal with CALL QP2TERM. Then put /usr/sbin/sshd -d and it
should start and begin logging to your screen. I just tried to set it up
on my home directory, but I have bad permissions that I can't fix right
now. I'll be able to get on our development box tomorrow and get it set
up so that I can try it.




Kevin Bucknum
Senior Programmer Analyst
MEDDATA/MEDTRON
Tel: 985-893-2550

-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf
Of Steinmetz, Paul
Sent: Tuesday, May 9, 2017 4:02 PM
To: 'Midrange Systems Technical Discussion'
Subject: RE: PC document / folder key location for SFTP/SSH to
i5,PCisclient,
i5 is server

I did have passphrase, added to command line, no change.
Still expecting -hostkey switch.

Where on the i5 is there a SSH log, which may help the
troubleshooting?

Paul

-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf
Of Kevin Bucknum
Sent: Tuesday, May 09, 2017 3:50 PM
To: Midrange Systems Technical Discussion
Subject: RE: PC document / folder key location for SFTP/SSH to i5,
PCisclient,
i5 is server

I think I may have miss read the first issue you had. When you created
the
key did you put a passphrase on it? If so you have to put that on the
command line also. If you didn't put a passphrase, try adding
-hostkey=*




Kevin Bucknum
Senior Programmer Analyst
MEDDATA/MEDTRON
Tel: 985-893-2550

-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On
Behalf Of
Steinmetz, Paul
Sent: Tuesday, May 9, 2017 2:21 PM
To: 'Midrange Systems Technical Discussion'
Subject: RE: PC document / folder key location for SFTP/SSH to i5,
PCisclient,
i5 is server

Kevin,

I used the WINSCP GUI, accepted, and connected.
Still getting the same error when calling the command.

open scp://test@xxxxxxxxxxx:2222/ -privatekey=mykey.ppk

Expected host key was not configured, use -hostkey switch Host key
fingerprint is "....."
Authentication failed.

If I add the -hostkey switch, then it is prompting for a password,
if
one is not
included on the command?

Paul

-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On
Behalf Of
Kevin Bucknum
Sent: Tuesday, May 09, 2017 1:17 PM
To: Midrange Systems Technical Discussion
Subject: RE: PC document / folder key location for SFTP/SSH to i5,
PC
isclient,
i5 is server

I just checked with the tech that installs these for us, and he said
that they
run a single connect from a command prompt as administrator, and it
asks
them to accept the host key. After that he says it just works unless
the key
changes. He pointed me to a .bat file that has this line in it.
c:\ftp\winscp /command "open sftp://scantest@x.x.x.x -
privatekey=c:\\ftp\\test.ppk" "exit"
They modify that and then run it. He also said if you have the GUI
version
installed, you can connect through there and it will cache the host
key for you
also. He hasn't tried that in a while. We don't put this little
script
many places,
and they have it down to unzip our folder onto the box, and then run
the
first-time script that has the above line, accept the host key, and
then set up
the automatic job as a service.




Kevin Bucknum
Senior Programmer Analyst
MEDDATA/MEDTRON
Tel: 985-893-2550

-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On
Behalf Of
Steinmetz, Paul
Sent: Tuesday, May 9, 2017 11:06 AM
To: 'Midrange Systems Technical Discussion'
Subject: RE: PC document / folder key location for SFTP/SSH to i5,
PC
isclient,
i5 is server

Kevin,

I used Puttygen to generate the keys, copied the pub key to the
i5,
renaming
as "authorized_users" per the doc.

Connects fine with user / password -hostkey=* Connects fine with
user
/
password -hostkey="<fingerprint>"

When trying to connect using the WINSCP example below (without a
password) I'm getting the following error.

open scp://test@xxxxxxxxxxx:2222/ -privatekey=mykey.ppk

Expected host key was not configured, use -hostkey switch Host key
fingerprint is "....."
Authentication failed.

What should command like syntax be for connecting using the
private
key,
without the password?

Paul


-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On
Behalf Of
Kevin Bucknum
Sent: Monday, May 08, 2017 3:58 PM
To: Midrange Systems Technical Discussion
Subject: RE: PC document / folder key location for SFTP/SSH to i5,
PC
is client,
i5 is server

If you are using WINSCP I'm pretty sure it likes it's keys in PPK
(Putty) format, so you would use PuttyGEN to create your key. It
can
go in
any folder you would like. It is either set up in the gui, or
passed
in on the
command line.




Kevin Bucknum
Senior Programmer Analyst
MEDDATA/MEDTRON
Tel: 985-893-2550

-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On
Behalf Of
Steinmetz, Paul
Sent: Monday, May 8, 2017 2:48 PM
To: 'Midrange Systems Technical Discussion'
Subject: PC document / folder key location for SFTP/SSH to i5,
PC
is
client,i5 is
server

Looking for the PC document / folder location for SFTP/SSH to
i5,
PC
is client,
i5 is server?
I've updated my FTP to SFTP, working using WINSCP.

I'd now like to update to using a hostkey, eliminate the
password.

I've done many setups where the i5 is the SFTP/SSH client.
Few, if any, when the i5 is the server.

I have the below doc for the i5 side.
Configuring the System i SSHD Server to Use Public-Key
Authentication
http://www-01.ibm.com/support/docview.wss?uid=nas8N1012709

I'm missing the PC document.
1) What tool on the PC, WIN7, is used to generate the
private/public
keys.
2) What is the PC folder key location?
3) Is there any other setup needed on the PC?

Thank You
_____
Paul Steinmetz
IBM i Systems Administrator

Pencor Services, Inc.
462 Delaware Ave
Palmerton Pa 18071

610-826-9117 work
610-826-9188 fax
610-349-0913 cell
610-377-6012 home

psteinmetz@xxxxxxxxxx
http://www.pencor.com/

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L)
mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please
take
a moment to review the archives at
http://archive.midrange.com/midrange-
l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our
affiliate
link: http://amzn.to/2dEadiD
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L)
mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please
take
a moment to review the archives at
http://archive.midrange.com/midrange-
l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our
affiliate
link: http://amzn.to/2dEadiD
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L)
mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please
take
a moment to review the archives at
http://archive.midrange.com/midrange-
l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our
affiliate
link: http://amzn.to/2dEadiD
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L)
mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please
take
a moment to review the archives at
http://archive.midrange.com/midrange-
l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our
affiliate
link: http://amzn.to/2dEadiD
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L)
mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please
take
a moment to review the archives at
http://archive.midrange.com/midrange-
l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our
affiliate
link: http://amzn.to/2dEadiD
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take
a moment to review the archives at
http://archive.midrange.com/midrange-
l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: http://amzn.to/2dEadiD
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take
a moment to review the archives at
http://archive.midrange.com/midrange-
l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: http://amzn.to/2dEadiD

As an Amazon Associate we earn from qualifying purchases.

This thread ...
Follow-Ups:
Replies:
Follow On AppleNews
Return to Archive home page | Return to MIDRANGE.COM home page

This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].

Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.