Yep I get it. Been there.
The last customer that I had that exact discussion with ended with: To the
network guy; "OK, you're not going to let IBM i download patches (updated
from PTFs to allow his mind to understand), fine, I give up".
To the Director/VP/CIO I say: "Since I cannot perform one of the duties I've
agree to, this gentleman will have to do it for me, otherwise the system
will never get more than a single PTF applied and that sets all kinds of
landmines you will eventually step on. By the way, how do all the Microsoft
updates get loaded since many of them are the same size?"
Usually that wins the day, but not always.
--
Jim Oberholtzer
Agile Technology Architects
-----Original Message-----
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of Rob
Berendt
Sent: Wednesday, May 26, 2021 9:44 AM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxxxxxxxx>
Subject: RE: IBM switching from ftp to secure ftp to download PTF's.
Our network guy only thinks he's explained it well enough when you accept
his decision. Convincing him otherwise is rarely successful. We're talking
White Buffalo rare. Attempts to go over his head and be successful means
you found one of those White Buffalos with wings.
Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1 Group Dekko Dept 1600 Mail
to: 7310 Innovation Blvd, Suite 104
Ft. Wayne, IN 46818
Ship to: 7310 Innovation Blvd, Dock 9C
Ft. Wayne, IN 46818
http://www.dekko.com
-----Original Message-----
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of
midrangel@xxxxxxxxxxxxxxxxx
Sent: Wednesday, May 26, 2021 10:28 AM
To: 'Midrange Systems Technical Discussion' <midrange-l@xxxxxxxxxxxxxxxxxx>
Subject: RE: IBM switching from ftp to secure ftp to download PTF's.
CAUTION: This email originated from outside of the organization. Do not
click links or open attachments unless you recognize the sender and know the
content is safe.
I run into that all the time Rob. It's a timeout setting in the firewall
for downloads. Once I fight the Network guys enough to argue they should
put in an exception for one of the IBM i partitions, problems disappear.
--
Jim Oberholtzer
Agile Technology Architects
-----Original Message-----
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of Rob
Berendt
Sent: Wednesday, May 26, 2021 9:03 AM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxxxxxxxx>
Subject: RE: IBM switching from ftp to secure ftp to download PTF's.
I'm anxious to give this SFTP a try. I cannot get all the way through a ftp
session on any of my IBM i lpars anymore. Oh, it starts and downloads a
goodly portion of the number of .iso files but seems to abort a few GB in on
one of the later iso files. I suspect something with changes the network
guy is doing. Now I initiate the ftp from a PC server and when it's done
transfer that to each hosting lpar. Of course I'll have to beg and plead
with the network guy to open up the sftp ports and spend a few days trying
to explain to him why the client side uses random ports. He likes to
Catbert me on this and try to get me to get IBM to change all their code.
He had sniffed the comm for quite some time and locked down a bunch of stuff
that wasn't used. Of course that was during the time he was sniffing and
doesn't include things like quarterly PTF's.
Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1 Group Dekko Dept 1600 Mail
to: 7310 Innovation Blvd, Suite 104
Ft. Wayne, IN 46818
Ship to: 7310 Innovation Blvd, Dock 9C
Ft. Wayne, IN 46818
http://www.dekko.com
-----Original Message-----
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of
midrangel@xxxxxxxxxxxxxxxxx
Sent: Wednesday, May 26, 2021 9:48 AM
To: 'Midrange Systems Technical Discussion' <midrange-l@xxxxxxxxxxxxxxxxxx>
Subject: RE: IBM switching from ftp to secure ftp to download PTF's.
CAUTION: This email originated from outside of the organization. Do not
click links or open attachments unless you recognize the sender and know the
content is safe.
One of the many problems with Download Director (I not so affectionately
call it Download Disaster) is, it does not run directly on IBM i. While the
restart capability in it is reasonable, 90% of the trouble it causes is not
between IBM and the PC that's doing the initial downloading, it's between
that PC and the systems. (WinSCP helps with all of that immensely) It just
does not make sense to double download anything. Maybe IBM could come up
with a version of it for IBM i and ship it with MGTOOLS. That would
encourage more folks to get that tooling and keep it up to date.
As to why regular old FTP can't be used anymore is a mystery to me (Yea I
get sftp is more secure and all that, so please don't start the flame war)
since the PTFs and Groups don't contain anything that really needs to be
kept that tightly controlled. Oh well, just more work for the customer to
perform.
--
Jim Oberholtzer
Agile Technology Architects
-----Original Message-----
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of Mayer,
Michael via MIDRANGE-L
Sent: Wednesday, May 26, 2021 8:34 AM
To: midrange-l@xxxxxxxxxxxxxxxxxx
Cc: Mayer, Michael <MMayer@xxxxxxxxxxxxxx>
Subject: IBM switching from ftp to secure ftp to download PTF's.
Per IBM ... to clarify.
As stated in 'Secure FTP downloads for IBM i PTFs' and discussion with a PTF
subject matter expert who has been involved in the SFTP delivery project,
the change will not affect the download director method of PTF delivery,
only FTP downloads when selecting option 'Download virtual images using
FTP'.
Very Respectfully,
Michael Mayer
IBM I on Power System Admin.
IT Operations.
The Florida Bar
651 E. Jefferson St
Tallahassee, Florida 32399-2300
mmayer@xxxxxxxxxxxxxx
https://www.floridabar.org
Office: 850.561.5761
Cell: 518.641.8906
----------------------------------------------------------------------------
--------------------------
Today's Topics:
1. IBM switching from ftp to secure ftp to download PTF's. No
(Andrew Lopez (SXS US))
2. RE: IBM switching from ftp to secure ftp to download PTF's.
No longer supporting anonymous login. (Rob Berendt)
----------------------------------------------------------------------
message: 1
date: Wed, 26 May 2021 11:54:24 +0000
from: "Andrew Lopez (SXS US)" <Andrew.Lopez@xxxxxxxxxxxxxxxxxx>
subject: IBM switching from ftp to secure ftp to download PTF's. No
Curious. They mention using MGTOOLS to setup SSL, but they don't explicitly
mention what happens to the update option in MGTOOLS, which uses by default
an anonymous login.
_____________________________________________________________________
Spirax-Sarco Engineering Plc. This e-mail has been scanned for viruses by
Cisco Cloud Email Security.
---------------------------------------------------------------------
message: 2
date: Wed, 26 May 2021 11:58:19 +0000
from: Rob Berendt <rob@xxxxxxxxx>
subject: RE: IBM switching from ftp to secure ftp to download PTF's.
No longer supporting anonymous login.
If I set this up using the instructions at
https://www.ibm.com/support/pages/node/6442293
do I really need to create a special user profile? Can I just use my own?
Is there I problem with doing the recommended: chmod 755 /home/myuserid I
did do a little searching and see that: 755 means read and execute access
for everyone and also write access for the owner of the file. I guess I'm
ok with that as most of the stuff in my directory is transitory in nature
other than that set up by stuff like RSE, java, some ssl setup I did awhile
back and all. All that seems to be owned by me so I don't see that as
shooting myself in the foot.
I think I'm having a flashback to the setup for ssl and I remember that if I
don't have 755 on the directory the backend code for setting up secure
communications will fail.
Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1 Group Dekko Dept 1600 Mail
to: 7310 Innovation Blvd, Suite 104
Ft. Wayne, IN 46818
Ship to: 7310 Innovation Blvd, Dock 9C
Ft. Wayne, IN 46818
http://www.dekko.com
-----Original Message-----
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of Rob
Berendt
Sent: Wednesday, May 26, 2021 7:46 AM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxxxxxxxx>
Subject: IBM switching from ftp to secure ftp to download PTF's. No longer
supporting anonymous login.
Starting June 5!
Setup required!
Secure FTP downloads for IBM i PTFs
https://tinyurl.com/p3b22474
https://www.ibm.com/support/pages/node/1077897?myns=ibmi&mynp=OCSWG60&mynp=O
CSSC5L9&mynp=OCSSC52E&mynp=OCSSTS2D&mynp=OCSS9QQS&mync=E&cm_sp=ibmi-_-OCSWG6
0-OCSSC5L9-OCSSC52E-OCSSTS2D-OCSS9QQS-_-E
Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1 Group Dekko Dept 1600 Mail
to: 7310 Innovation Blvd, Suite 104
Ft. Wayne, IN 46818
Ship to: 7310 Innovation Blvd, Dock 9C
Ft. Wayne, IN 46818
http://www.dekko.com
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit:
https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives at
https://archive.midrange.com/midrange-l.
Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
questions.
Help support midrange.com by shopping at amazon.com with our affiliate link:
https://amazon.midrange.com
------------------------------
________________________________
Please note: Florida has very broad public records laws. Many written
communications to or from The Florida Bar regarding Bar business may be
considered public records, which must be made available to anyone upon
request. Your e-mail communications may therefore be subject to public
disclosure.
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit:
https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives at
https://archive.midrange.com/midrange-l.
Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
questions.
Help support midrange.com by shopping at amazon.com with our affiliate link:
https://amazon.midrange.com
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit:
https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at
https://archive.midrange.com/midrange-l.
Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
questions.
Help support midrange.com by shopping at amazon.com with our affiliate link:
https://amazon.midrange.com
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit:
https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at
https://archive.midrange.com/midrange-l.
Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
questions.
Help support midrange.com by shopping at amazon.com with our affiliate link:
https://amazon.midrange.com
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit:
https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at
https://archive.midrange.com/midrange-l.
Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
questions.
Help support midrange.com by shopping at amazon.com with our affiliate link:
https://amazon.midrange.com
midrange.com
