Re: SFTP and .openssh files

We use sftp from the AS/400.

To retrieve their public key you can do in QP2TERM : ssh -l loginname server.

It will install their public key in file known_hosts in folder /home/user/.ssh/

They should have installed your public key

then in QP2TERM: sftp -o Knownhostfiles: /home/user/.ssh/known_host -o Identitykey:/home/user/.ssh/id_rsa loginname@server

Connection should be made.

Kind regards,

Carel Teijgeler


Op 7-11-2018 om 21:27 schreef Jeff Crosby:

All,

I started a couple of short threads over the past couple of months
regarding SFTP from our IBM i to a vendor of ours.

They have finally given me some of the pertinent information (like the
actual test and production sites). I have successfully sent a file to the
test site via FileZilla. When I did it with FileZilla, a window popped up
with a checkbox for me to accept some kind of key. I should have saved
that window popup, but I did not. I have yet to receive the password for
the production site.

I ultimately want do it from the IBM i. Earlier, Brad pointed me to this:

https://www.scottklement.com/presentations/Setting%20up%20and%20Scripting%20the%20OpenSSH,%20SFTP%20and%20SCP%20Utilities%20on%20IBM%20i.pdf
The SFTP section was very helpful in that I now have a full script set up
called via a CL with environment variables, etc, as Scott describes there.
The issue is it does not connect to the test site and I get this:

Host key verification failed.
Connection closed
Press ENTER to end terminal session.

Being totally ignorant here, I relayed this info to the vendor who replied
with:

"The prompt from FileZilla is to load the SSH key for the sFTP connection,
which is required for port 22 (sFTP). The key resides on the *server*
(emphasis mine) and can be pulled by anyone attempting to connect once the
IP of the server is added to our firewall. For your IBM product, it may be
necessary to actually “load” the key. I have attached the key in case that
is true. We also use IBM and we can either manually load the keys when
provided, or there is a way to pull off of a server during the sfTP
configuration. Filezilla just defaults to prompt for the key when you
indicate an sFTP connection (port 22)."

(I do not know if their IBM is an IBM i or a mainframe. It usually takes
2+ days for them to reply to an email.)

They attached 2 .openssh files, one for the test site and one for the
production site.

Excuse my utter absolute ignorance on this, but what do I do with those
files? I am at the place where "I don't know what I don't know" if you
know what I mean.

Thank you.