Re: SFTP and .openssh files

We use sftp from the AS/400.

To retrieve their public key you can do in QP2TERM : ssh -l loginname
server.

It will install their public key in file known_hosts in folder
/home/user/.ssh/

They should have installed your public key

then in QP2TERM: sftp -o Knownhostfiles: /home/user/.ssh/known_host -o
Identitykey:/home/user/.ssh/id_rsa loginname@server

Connection should be made.

Kind regards,

Carel Teijgeler


Op 7-11-2018 om 21:27 schreef Jeff Crosby:

All,

I started a couple of short threads over the past couple of months
regarding SFTP from our IBM i to a vendor of ours.

They have finally given me some of the pertinent information (like the
actual test and production sites). I have successfully sent a file to

the

test site via FileZilla. When I did it with FileZilla, a window popped up
with a checkbox for me to accept some kind of key. I should have saved
that window popup, but I did not. I have yet to receive the password for
the production site.

I ultimately want do it from the IBM i. Earlier, Brad pointed me to

this:

https://www.scottklement.com/presentations/Setting%20up%20and%20Scripting%20the%20OpenSSH,%20SFTP%20and%20SCP%20Utilities%20on%20IBM%20i.pdf

The SFTP section was very helpful in that I now have a full script set up
called via a CL with environment variables, etc, as Scott describes

there.

The issue is it does not connect to the test site and I get this:

Host key verification failed.
Connection closed
Press ENTER to end terminal session.

Being totally ignorant here, I relayed this info to the vendor who

replied

with:

"The prompt from FileZilla is to load the SSH key for the sFTP

connection,

which is required for port 22 (sFTP). The key resides on the *server*
(emphasis mine) and can be pulled by anyone attempting to connect once

the

IP of the server is added to our firewall. For your IBM product, it may

be

necessary to actually “load” the key. I have attached the key in case

that

is true. We also use IBM and we can either manually load the keys when
provided, or there is a way to pull off of a server during the sfTP
configuration. Filezilla just defaults to prompt for the key when you
indicate an sFTP connection (port 22)."

(I do not know if their IBM is an IBM i or a mainframe. It usually takes
2+ days for them to reply to an email.)

They attached 2 .openssh files, one for the test site and one for the
production site.

Excuse my utter absolute ignorance on this, but what do I do with those
files? I am at the place where "I don't know what I don't know" if you
know what I mean.

Thank you.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: https://amazon.midrange.com