RE: Setting up SFTP for the first time

Darryl,

The two links below should answer all your questions, both server side and client side.

Configuring the IBM i SSH, SFTP, and SCP Clients to Use Public-Key Authentication
https://www.ibm.com/support/pages/configuring-ibm-i-ssh-sftp-and-scp-clients-use-public-key-authentication

Configuring the IBM i SSHD Server to Use Public-Key Authentication
https://www.ibm.com/support/pages/configuring-ibm-i-sshd-server-use-public-key-authentication

Paul

-----Original Message-----
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of a4g atl
Sent: Friday, January 17, 2020 5:28 PM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxxxxxxxx>
Subject: Re: Setting up SFTP for the first time

@Patrik, we will be sending files to the remote system. We do this today with regular FTP. New hardware was implemented and it does not have FTP for security reasons.

I will get the crypto key files.The question is which folders do I copy them into?

It seems I need a user ID on the IBM i set up with a home folder for this purposes. I guess that means the job has to be run with this user ID then.
This could be an issue and require "rewriting" the FTP unctions.

Darryl.


On Fri, Jan 17, 2020 at 5:06 PM Patrik Schindler <poc@xxxxxxxxxx> wrote:

Hello Darryl,

Am 17.01.2020 um 22:54 schrieb a4g atl <a4ginatl2@xxxxxxxxx>:

I need to set up SFTP to a remote system. The documentation I have
is

not specific and does not identify the setup for transmission and
receiving. It appears the documentation I have is for receiving files
using SFTP but maybe that is needed irrespective.


To me, this leaves a lot of open questions and guesswork what you want
to achieve. Please be more specific, from a workflow-view, and less a
technical side.

My question is if we are transmitting files to remote systems, do I
need

to create the user ID and home folders on my system?

No. If your system is initiating the connection, it needs to
authenticate against the remote system with username and password, or
(preferred) cryptographic key-files. If the remote system needs to
contact your system, you obviously need a user and password, or
(preferred) authenticate with cryptographic key files instead of a password.

It is *not* a question of transfer direction but of connection initiation.

Will the remote system need to access the source system?

Depends on the workflow to establish. Please elaborate.

:wq! PoC

PGP-Key: DDD3 4ABF 6413 38DE - https://www.pocnet.net/poc-key.asc


--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx To
subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives at
https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: https://amazon.midrange.com

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related questions.

Help support midrange.com by shopping at amazon.com with our affiliate link: https://amazon.midrange.com