From a command line: (the -T must be a capitol T)
QSH
SSH -T userid@xxxxxxxxxxxxx
The authenticity of host 'host.name.com (123.456.789.123)' can't be established.
RSA key fingerprint is SHA256:hole bunch of random characters.
Are you sure you want to continue connecting (yes/no)?
yes
Warning: Permanently added host.name.com,123.456.789.123' (RSA) to the list of known hosts.
Chris Bipes
Director of Information Services
CrossCheck, Inc.
-----Original Message-----
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxx> On Behalf Of Jeff Crosby
Sent: Wednesday, November 7, 2018 12:27 PM
To: midrange-l@xxxxxxxxxxxx
Subject: SFTP and .openssh files
All,
I started a couple of short threads over the past couple of months
regarding SFTP from our IBM i to a vendor of ours.
They have finally given me some of the pertinent information (like the
actual test and production sites). I have successfully sent a file to the
test site via FileZilla. When I did it with FileZilla, a window popped up
with a checkbox for me to accept some kind of key. I should have saved
that window popup, but I did not. I have yet to receive the password for
the production site.
I ultimately want do it from the IBM i. Earlier, Brad pointed me to this:
https://www.scottklement.com/presentations/Setting%20up%20and%20Scripting%20the%20OpenSSH,%20SFTP%20and%20SCP%20Utilities%20on%20IBM%20i.pdf
The SFTP section was very helpful in that I now have a full script set up
called via a CL with environment variables, etc, as Scott describes there.
The issue is it does not connect to the test site and I get this:
Host key verification failed.
Connection closed
Press ENTER to end terminal session.
Being totally ignorant here, I relayed this info to the vendor who replied
with:
"The prompt from FileZilla is to load the SSH key for the sFTP connection,
which is required for port 22 (sFTP). The key resides on the *server*
(emphasis mine) and can be pulled by anyone attempting to connect once the
IP of the server is added to our firewall. For your IBM product, it may be
necessary to actually “load” the key. I have attached the key in case that
is true. We also use IBM and we can either manually load the keys when
provided, or there is a way to pull off of a server during the sfTP
configuration. Filezilla just defaults to prompt for the key when you
indicate an sFTP connection (port 22)."
(I do not know if their IBM is an IBM i or a mainframe. It usually takes
2+ days for them to reply to an email.)
They attached 2 .openssh files, one for the test site and one for the
production site.
Excuse my utter absolute ignorance on this, but what do I do with those
files? I am at the place where "I don't know what I don't know" if you
know what I mean.
Thank you.
midrange.com
