Tweet
Diane, I have never done this, however the configuration steps for secure FTP client are in the IBM FTP Manual Check out chapter Secure the FTP client with TLS/SSL. As for support from the FTPAPI, sorry I have no idea.
-
-
FTPAPI vs. SFTP / SSH client?
The AS400 does not support SSH. Unix, Windows, Linux do. See This IBM link. I'm in the middle of this type of project now. Will be using WS_FTP Pro on a PC and the RUNRMTCMD on the AS400, unless I come up with something else by the end of next month. Thanks -
FTPAPI vs. SFTP / SSH client?
David, You are right the AS400 does not support SSH. I should have been clear about that in my response. However my understanding is in V5R2 the AS400 introduced support for FTPS, which is File Transfer Protocol over SSL. This is an extension of FTP, unlike SFTP. FTPS uses SSL (Secure Socket Layer) to secure the command connection and optionally the data connection of an FTP session. Most commercial FTP and free servers have support for FTPS built in, you just have to turn it on. So I think it is a viable alternative that would achieve the overall requirement of securing the FTP connectivity.Comment
-
FTPAPI vs. SFTP / SSH client?
>...was given advice to use FTPAPI. I have it working, > but since this our network consultant has advised > that I should use SFTP, this being a secure connection > versus FTP which is "very insecure". This may not be entirely helpful, but a VPN may be the better solution, depending on who the FTP partner is. For instance, if you are using FTP to go between branch offices, it is likely that other traffic like printed reports and such are also moving over the same link. If the fear is that someone in the middle might use a packet sniffer to reconstitute a file, then encrypting the entire link via VPN might be a good solution. Looking a bit more at the details, remember that security is always a tradeoff, pitting convenience, expense and strength against each other. Usually, you get to optimise for 2 of those variables. In this case, it might be easier for a hacker on your side of the connection to make a copy of the file than it is to try to insert a packet sniffer into the network somewhere. That's just an example, of course. What (or who) is the network consultant trying to secure against? Or is this a generic recommendation she gives to every client? Does your FTP partner even support ssh? Give Scott an email; he might have a secured version in the works, or someone else on the FTP list might be working on it. A quick Google of secure FTP turned this Java client up: http://security.sdsc.edu/software/secureftp/ --buckComment
-
FTPAPI vs. SFTP / SSH client?
Thanks to everyone with your input. I will check out the suggestions offered here, at least I understand to forget trying to get the SSH Client running on the iSeries - doesn't look like that will happen. Note: David Christie - you may want to look into the FTPAPI. Tried it with the RPG program, my intent was to put this on the job scheduler and let it "put/get" as needed. Seemed to work great for the job I needed.....until the question of security with FTP..... DianeComment
-
FTPAPI vs. SFTP / SSH client?
Diane, I began using secure FTP on the AS/400 about 2 months ago... it works great and I would be glad to lend you any assistance. I am using FTP using SSL and a public certficate authority (CA). I use this to securely download orders from our internet site (which contains our customers credit card information). The server that I am connecting to is Unix based. I would not recommend a VPN connection - we use this for constant connections to our 400 using 5250 emulation, but it can be a bit complicated to setup. I used the IBM On-Line manual for v5r2 (SSL was a new with this release). Just search for "FTP Client" and "SSL". You also need to select a CA and enable it through the web interface to the 400. Please e-mail me directly if I can help you... this was very easy to implement.Comment
-
FTPAPI vs. SFTP / SSH client?
Will this work for a remote vendor that is requiring us to use SFTP> Thanks!Comment
-
FTPAPI vs. SFTP / SSH client?
I need some clarification. Recently I needed help with retrieving/sending files from our Linux server to an iSeries and was given advice to use FTPAPI. I have it working, but since this our network consultant has advised that I should use SFTP, this being a secure connection versus FTP which is "very insecure". So the question is, does the iSeries have an SSH client and with this could I use SFTP(??). I'm really in the dark with an SSH client on the iSeries, I'm looking for something that will help me understand how to SFTP with the iSeries. Our iSeries is at V5R2. Any help will be greatly appreciated! DianeComment
-
FTPAPI vs. SFTP / SSH client?
If you're willing to install V5R3 or higher you could use the new SSH client on the iSeries. (It can also be an SSH server too.) I've used it to communicate with our HMC and it works great. You're required to also install the free PASE environment (option 33), which means it can only be used it in one of the iSeries Unix shells. It uses the OpenSSH standard and as I recall the utilities package it comes in is free for the asking. It's called "5733-SC1: IBM Portable Utilities for i5/OS". The SSH portion of the utilities comes with SSH, SFTP, SCP (Secure Copy-file Program), SSH-KEYGEN, SSH-AGENT, and SSHD (for incoming SSH sessions). See this link for more info: http://www-03.ibm.com/servers/enable...s/openssh.htmlComment
-
You may also want to check out GoAnywhere Director from Linoma Software at www.GoAnywhereMFT.com . It supports all the secure FTP protocols of SCP, SFTP and FTPS. There are a lot of advanced features in GoAnywhere Director including key management, auto-resume, audit logging for compliance reporting, etc. All transfers and encryption processes in GoAnywhere Director can be run either through the GoAnywhere scheduler or from your CL and RPG programs. A free trial is available on Linoma's web site.Comment
Comment