FTPS (FTP explicit SSLTLS)

Can anyone tell me how to get this working (outside host coming in though ASA 5505 running 8.4).
Thanks

Try by opening TCP - 21 , 21000 & 21010 and use PASV mode (unless you already have the list of TCP ports). Also, in 8.4 you need to allow ACL to 'real' ip than public ip. Check the below links.
https://supportforums.cisco.com/docs/DOC-12324
hth
MS

Similar Messages

Problem with cz.dhl.ftp.Ftp.class

In order to bypass a nasty HTTP upload problem at my cheap hoster, I want to use a java ftp upload control. I've stumbled upon http://jvftp.sourceforge.net/ (which is LGPL-equived) but can't get it up and running.
I know a fair bit about js & ajax, but nexttonothing about java..
Hope you can help a bit..
First, i'm confused about which version to use. There's a plain jvFtp.jar, and a jvFtp-AWT.jar and a jvftplib.jar. The documentation (http://jvftp.sourceforge.net/docs/api/) isnt clear on what to use when, and how, from a browser perspective.
The current error i'm stuck at is
exception: java.lang.ClassCastException: dz.dhl.ftp.Ftp
my applet code reads
<applet code='cz/dhl/ftp/Ftp.class' archive='<?=MB_CODE_URL?>lib/jvftp.jar' codebase='.' style='width:400px; height:250px;'> </applet>
If you need any more info i'm happy to provide it..

Oh, the only other thing i could find on google about this, is an apparently incomplete and slightly buggy howto;
http://www.velocityreviews.com/forums/showpost.php?p=570401&postcount=6

FTP over explicit TLS bug?

I have a FTP server that supports encrypted sessions. When I approach this server from the internal network, encryption works fine. However, when I approach the server from outside only non-encrypted sessions work. With the FileZilla FTP client I get the following error when I try an encrypted session:
"GnuTLS error -9: A TLS packet with unexpected length was received."
Now, when I use the router of my ISP (instead of the Airport Extreme), encrypted sessions from outside work fine.
So this makes me believe there is a bug in the Airport Extreme. This 4y old blog posting suggests that as well:
http://fetchsoftworks.com/fetch/news/ftp-with-tlsssl-ftps-and-the-new-airport-ex treme-base-station
but it also says it has been fixed in version 7.2.1. Perhaps the bug reappeared?

Granted, the same problem. Firmware 7.5.2, everything works except FTP.Tak alsotried firmware 7.5.1, the problem remained. And for some reason, I will not let meand just to FTP without encryption.
ps long thought AE rebuilt poor server times 4
I apologize for the mistake, I do not speak English, use translate.google

FTP-FTP scenario...problem with FCC

Hi,
Iam doing a FTP to FTP scenario.I have specified the following parameters-
source.fieldNames
source.fieldSeparator -> ;
source.endSeparator ->'nl'
ignoreRecordsetName
source.fieldContentFormatting->nothing
source.missingLastfields->add
Target.fieldFixedLengths
Target.fixedLengthTooShortHandling ->Cut
Target.fieldSeparator -> ;
Target.endSeparator ->'nl'
There are 2 fields in source file that has blank values,so the source file is like
In the target file, the fields upto those fields with blank values are coming...but fields from those blank values are missing.so the output file looks like this.
The fields with blank values has lengths 50,50.
I want all the fields in output file .Every thing is direct mapping.
Please suggest something that will do this.Its urgent.

HI,
From sender side if you get blank value then that particular node will not be generated on target side XML structure in mapping. and you have used Target.fixedLengthTooShortHandling ->Cut so the further fields are not considerd properly.
Can you plesae add mapWithDefault api while mapping. Double click on it and pass blank value. This will create the Blank node on target side.
Source --> mapWithDefault ( [] ) --> Target
i hope this will solve your problem
Thanks
Swarup

Where can I download free Java Libraries supporting FTPS(FTP+SSL)

as the title, thanks!

Ya, I have found some valuable information
but if anyone has encounted the same problem, his experience will be very favorable for me
Thanks

Adding SCP encryption to FTP in communication channel

Hello,
Is there an easy way to have files SCP (secure copy protocol) encrypted as they are output using FTP communication channel such that if the SCP were to fail for some reason, it would register as an adapter engine error and show up as system error in runtime workbench?
We are currently doing this by executing a script (that does the SCP on the output file) in the command execution feature of the communication channel after the file is created on the server. However if the SCP fails, the message is still marked as complete with no error as it is not possible to capture the failure in the script and communcate back to communication channel.
Is there some easy way that file adapter could be enhanced by adapter module development or by module processor development so as to include the SCP encryption step in the code? That way if the SCP fails, it would show up as an error in adapter engine during runtime?
Thanks
JB

Hi Sabita,
If you wish to use Port 22 only, then you can use FTPS option instead of SFTP.
FTPS is readily available with the standard FTP adapter, Please refer the below blog:
/people/rajasekhar.reddy14/blog/2010/04/13/how-to-configure-ftps-in-file-adapter
But to implement this the Third part should be capable of handling Explicit FTP (FTPS) protocol.
Please refer the below thread, this may help you:
what is the port for FTPS communication in File Adapter
-Supriya.

SAP XI support SFTP and FTPS?

Hi Gurus,
I would like to find out if SAP XI supports both SFTP and FTPS. If yes, how do I perform the configuration?
Thanks in advance.

Business Case:
In many implementations Business requirement is to "secure" the file/data transfer between XI and any third-party system. So there is a need of secured connection between XI/PI and any file based third-party legacy systems.
Following solutions are proposed to cater secure connection between XI/PI and any third party systems.
1) SFTP (Secure File Transfer Protocol)
"SSH File Transfer Protocol" or SFTP is a network protocol that provides file transfer and manipulation functionality over any reliable data stream. It is typically used with the SSH-2 protocol to provide secure file transfer. SFTP encrypts the session, preventing the casual detection of username, password or anything that is being transmitted. One key benefit to SFTP is its ability to handle multiple secure file transfers over a single encrypted pipe. By using a single encrypted pipe, there are fewer holes in the corporate firewall.
2) FTPS (FTP over SSL)
FTPS (FTP-SSL) is a real ftp that uses TSL/SSL to encrypt the control session and if required the data session. With FTPS, the control session is always encrypted, but the data session may not be always encrypted. FTPS is a file transport layer on top of SSL. SSL, or Secure Sockets Layer, is a method by which an encrypted u2018pipe' or tunnel is established between the FTP client and FTP server. Once the secure tunnel has been established (which is done using 128-bit encryption techniques), standard FTP is used to transfer data over the secure connection.
Feasibility of SFTP and FTPS in XI:
SFTP:
As per the latest SAP PI/XI support pack, it does not support SFTP via File Adapter.
So alternative approach to cater this requirement from XI is to make use of Unix Script at OS level to transfer the files from/to third-party systems.
Inbound Interface - i.e. third-party system ->XI->SAP:
File is transferred to a folder in SAP XI landscape from the third-party legacy system using UNIX Script with secured protocol. Once the file is ready in the XI landscape, File Adapter will poll this directory and file is picked up by NFS protocol.
Outbound Interface u2013 i.e. SAP->XI->third-party system:
XI is responsible for writing a file into a folder in the XI landscape. These files are transferred to the third-party system by executing UNIX scripts with secured protocol i.e. via sFTP.
Pre-Requisites:
Public key should be exchanged between external systems and the PI system.
UNIX shell script has to be developed and scheduled.
Advantages:
Highly Secured.
Ability to handle multiple secure file transfers over a single encrypted pipe .By using a single encrypted pipe, there are fewer holes in the corporate firewall.
Disadvantages:
Two-Step process i.e. XI>Temporary folder>External System and vice-versa
Files have to be temporarily stored in XI server.
Multiple failure points i.e. XI and Unix script execution
Maintenance of an external UNIX script.
Difficulty in monitoring the execution of the shell script as it cannot be monitored thru XI.
Need to generate keys and install it in the SFTP site as a pre-requisite i.e. SFTP clients must install keys on the server.
SFTP uses keys rather than certificates. This means that it can't take advantage of the "chains of trust" paradigm facilitated through Certificate Authorities.
Files from the XI server should be deleted/archived in a periodic manner to increase the disc space so that it will increase the performance.
Note: UNIX shell Script can be executed as a background job u2018or' can be triggered from SAP XI through OS command at File adapter level.
FTPS (File Transfer Protocol Using SSL/TLS):
This is a built-in feature of File adapter in XI. But SAP Java Cryptographic Toolkit must be deployed as a prerequisite. (Refer to note https://service.sap.com/sap/support/notes/821267 Question 28). By default following ports are used:
Implict FTPs 990 (Control) and 989 (Data)
Explicit FTPs 21 (Control) and 20 (Data)
Both use cases can be combined with active and passive mode.
Advantages:
Direct transfer of files to/from third-party systems. It is not required to store the files in the XI server temporarily.
Built-In feature from XI File adapter
No extra effort in development and maintenance of Unix Script.
Centralized Monitoring tool from XI
FTPS uses certificates and therefore can take advantage of "chains of trust" paradigm facilitated through Certificate Authorities. This paradigm makes it possible for two entities to establish a trust relationship without directly exchanging security information, which is important for some applications.
Disadvantages:
Requires opening multiple ports forenabling SSLin the firewall. So there are multiple holes in the corporate firewall.
Not every FTP server supports FTPS and many that do, require a configuration change to activate the FTPS protocol extension.
Cryptographic toolkit should be installed in XI system though it is not very complex or expensive.
Conclusion:
Though SFTP seems more secure as it works through one port, FTPS is easier to configure, monitor and maintain from XI point of view. However, the decision depends on many parameters like, cost/effort, flexibility in use, ease of maintenance, company security policy, failure possibilities etc.
regards
kummari

FTPS Files Using MS SSIS

Hi,
I need to transfer files using FTPS - FTP using Explicit or Implicit TLS Encryption. I wanted to check what is the best possible route using MS SSIS to transfer files. The SSIS job would first generate the data file which needs to be transferred to the FTPS
site.
I am currently using MS SSIS 2012
Any guidance, documentation , steps would be helpful.
Thanks,
EVA05

Hi,
Another third-party alternative is the commercial COZYROC
SFTP Task. It supports both the SSH and FTPS secure protocols and the user interface is very similar to the standard FTP Task.
SSIS Tasks Components Scripts Services | http://www.cozyroc.com/

Multiple FTP Connections in Leopard....

To make a long story short, I decided to buy a big bad FTP client after years of using FileZilla.
It posed so many problems and no matter what I was able to do, It would not establish multiple connections. There are ways to adjust your TCP, port numbers, and latency. But all of that is so far over my head.
Is there an easy way to configure an FTP client in Leopard?
Thank you,
Mark.
Message was edited by: MarkSKell

Well between 2 of my local machines, from Leopard(client) to Tiger(server) you do this
doug-penningtons-power-mac-g4:~ dougp$ ftp 192.168.0.4
Connected to 192.168.0.4.
220 doug-penningtons-ibook.local FTP server (tnftpd 20061217) ready.
Name (192.168.0.4:dougp): dpp
331 Password required for dpp.
Password:
230-
Welcome to Darwin!
230 User dpp logged in.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp> cd Documents
250 CWD command successful.
ftp> ls
229 Entering Extended Passive Mode (|||54048|)
200 EPRT command successful.
150 Opening ASCII mode data connection for '/bin/ls'.
total 3
-rw-r--r-- 1 dpp dpp 35382 Aug 16 2008 '72 Topps #33 Billy Martin.JPG
-rw------- 1 dpp dpp 15364 May 10 20:31 .DS_Store
-rw-r--r-- 1 dpp dpp 0 Mar 27 2005 .localized
drwxrwxrwx 4 dpp dpp 136 May 25 2008 All-in-One Data Folder
-rw-r--r-- 1 dpp dpp 253572 Jun 6 2008 Bef&aft:usr:sbin:periodic.png
-rw-r--r-- 1 dpp dpp 31234 May 28 2008 Calcurse.txt
drwxr-xr-x 13 dpp dpp 442 May 5 09:38 DOE 2008 & 2009 misc.
drwxr-xr-x 10 dpp dpp 340 Sep 26 2008 Fishing stuff
drwxr-xr-x 6 dpp dpp 204 Jun 17 2008 My clone stuff
-rw-r--r-- 1 dpp dpp 1803 Nov 20 09:54 Phone Book copy.rtf
-rw-r--r-- 1 dpp dpp 442531 Apr 21 09:41 Safari visual web hist.png
drwxr-xr-x 10 dpp dpp 340 Aug 3 2008 bluetooth info
-rw-r--r-- 1 dpp dpp 418519 Aug 30 2008 curl for firefox download.png
-rw-r--r-- 1 dpp dpp 992 Aug 31 2008 curl ftp list retrieval.txt
drwxr-xr-x 5 dpp dpp 170 Sep 7 2008 ftp commands
drwxr-xr-x 27 dpp dpp 918 Sep 14 2008 links browser manual-0.82-en
drwxr-xr-x 6 dpp dpp 204 Apr 27 2008 netboot data
-rw-r--r-- 1 dpp dpp 2370 Apr 19 19:33 tiger to leo ftp.txt
-rw-r--r-- 1 dpp dpp 1077 Aug 24 2008 wget for a zip file.txt
226 Transfer complete.
ftp> get Calcurse.txt
local: Calcurse.txt remote: Calcurse.txt
200 EPRT command successful.
150 Opening BINARY mode data connection for 'Calcurse.txt' (31234 bytes).
100% |******************************************************************************** ***************| 31234 92.06 KB/s 00:00 ETA
226 Transfer complete.
31234 bytes received in 00:00 (91.38 KB/s)
ftp> put Calcurse.txt
local: Calcurse.txt remote: Calcurse.txt
200 EPRT command successful.
150 Opening BINARY mode data connection for 'Calcurse.txt'.
100% |******************************************************************************** ***************| 31234 25.90 MB/s 00:00 ETA
226 Transfer complete.
31234 bytes sent in 00:00 (399.05 KB/s)
ftp> quit
221-
Data traffic for this session was 62468 bytes in 2 files.
Total traffic for this session was 64945 bytes in 3 transfers.
221 Thank you for using the FTP service on doug-penningtons-ibook.local.
doug-penningtons-power-mac-g4:~ dougp$
and for over the network:
doug-penningtons-power-mac-g4:~ dougp$ ftp ftp://rtfm.mit.edu/pub/usenet/news.answers/computer-security/anonymous-ftp-faq
Connected to PENGUIN-****.mit.edu.
220 (vsFTPd 1.2.2)
331 Please specify the password.
230 Login successful.
Remote system type is UNIX.
Using binary mode to transfer files.
200 Switching to Binary mode.
250 Directory successfully changed.
250 Directory successfully changed.
250-Nearly all of the files contained in this directory are copyrighted by
250-their respective authors or maintainers. Even files without explicit
250-copyright notices are copyrighted. Restrictions on copying or
250-redistributing the files vary widely among the files. In particular,
250-quite a number of them prohibit redistribution for any commercial
250-purposes without prior approval; other restrictions may also be made.
250-
250-Such approval must be obtained from the author of each file, not
250-from the maintainers of this archive. If you have any doubts about
250-whether you may copy or use a particular file for a particular
250-purpose, contact its author.
250-
250 Directory successfully changed.
250 Directory successfully changed.
local: anonymous-ftp-faq remote: anonymous-ftp-faq
229 Entering Extended Passive Mode (|||42004|)
150 Opening BINARY mode data connection for anonymous-ftp-faq (28433 bytes).
100% |******************************************************************************** ***************| 28433 63.42 KB/s 00:00 ETA
226 File send OK.
28433 bytes received in 00:00 (62.99 KB/s)
221 Goodbye.
Files will be delivered to your home directory.
Turn on in Leopard SysPref, File Sharing, options, check share files and folders using AFP &FTP and click done. Any other local macs do the same settings, or at least ftp access if not Leo. Also for security: http://www.macworld.com/article/132002/2008/02/mobilemac2503.html and
http://www.macresearch.org/restricted-sftp-mac-os-x-leopard but I guess chroot is possibly iffy
Ftp isn't the best choice. There are hosts that let you send BIG files, there is email, set up Postfix, etc. This long winded post might just give you an idea.

Folders not visible in FTP

I've setup a number of Share Folders on the NSS 324 and I have FTP (TLS Explicit) setup and working, but two of the folders don't show up after all folders are listed. One of them being the Public folder.
Any suggestions would be greatly appreciated.
Thanks.

User does have read/write for those folders. They're still not showing up. Currently only have the one user setup (admin user) and that's what I'm logged in with.
I tried disabling read/write, saving, enabling read/write and saving again. Still the same.
Any other possibilities?
Thanks,
Mark

Win8 clients can't write over FTPS to Win 2012 with FTP site hosted in IIS 8

I've made an interesting discovery that is mentioned in part on other posts in other forums. This involves IIS; however, I believe the issue rests with the Windows Server 2012 OS.
Here's the scenario.
Client:
Windows 8
almost any FTP client
Server:
Windows Server 2012
FTP site hosted in IIS 8
Problem:
The client connects to the FTP site via FTPS (regular FTP works). The connection is successful, and the client is able to list the directories and download content. However, the client cannot upload anything to the FTP site.
Error: 550 The supplied message is incomplete. The signature was not verified.
Any of the following modifications to the scenario will allow the client to upload content:
changing the client OS to Windows 7
changing the server OS to Windows 2008 or 2008 R2 (IIS7+)
changing the FTP client to CoreFTP (I've tried FileZilla, the Microsoft FTP client, SmartFTP, and WinSCP)
I found this post regarding FileZilla that states there is an SSL cipher ordering issue with Windows Server 2012 and IIS8 for FTP clients using explicit TLS:http://trac.filezilla-project.org/ticket/7910
Their "solution" points to an MSDN blog post here:
http://blogs.msdn.com/b/kaushal/archive/2011/10/03/taming-the-beast-browser-exploit-against-ssl-tls.aspx
This states that you need to reorder the SSL ciphers with TLS_RSA_WITH_RC4_128_SHA as the highest priority; however, there is a limitation to the text file where you order the ciphers, 1023 characters, which is less than the total number of characters for
all ciphers. This means you must know which ciphers will be needed and in which order as to not break anything else. That's not a viable workaround.
Does anyone know if there is a patch coming down to fix this, or are there any more viable workarounds? One would think a Windows 8 client should be able to connect via FTP with explicit TLS to an FTP hosted in IIS8 on Windows Server 2012 to upload
content.

Hi,
As the MSDN blog mentioned, that currently we can only workaround the issue with provided settings. As FTP settings are now included in IIS, it is still recommended to post to IIS forum to see if there
is any known suggestion regarding this.
http://forums.iis.net/
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forum a great place.

Cannot upload file through FTPS

Hello,
I am writing a FTPS Client (Explicit SSL) in java. For testing the same I am using the JScape FTP Server (Free Version). Altough have managed to login to the server, but cannot upload a file. Below is a brief description of the what's happeng in the code.
1. Created a Socket
controlSocket = new Socket(host, port);2. Issued AUTH TLS writer.write("AUTH TLS");3. Created controlSocket using SSLSocketFactory. Trusted all server SSL certificates.
sslSocketFactory = sslContext.getSocketFactory();
socket = sslSocketFactory.createSocket(socket, host, port, true);4. Issued the USER and PASS commands to login (Received success response)
5. Issued TYPE A (Received success response)
6. Issued PBSZ 0 and PROT P (Received success response)
7. Issued PASV (Received success response)
8. Retrieving the 'hostName' and the 'portNumber' from the reply for PASV
9. Created dataSocket
dataSocket = new Socket(hostName, portNumber);10. After the dataSocket creation, I am trying to retrieve the response from server when it is getting hanged.
I don't have a clue why this is happening. Could someone help me with this.
N.B. FileZilla Client however connects to the server and uploads data without any error.
Edited by: saturn_cemk on Nov 13, 2009 1:22 AM

I have also tried this... but it still hangs.
dataSocket = sslSocketFactory.createSocket(remoteHost, remotePort);remoteHost and remotePort are the ones derived from the response for PASV.
Do I need to do AUTH TLS again before creating the dataSocket ?? Am totally lost at this point.

Problem with downloading file from FTP server

Hello all
I have uploaded a file from an application i developed and i want to download this file from another application. The code is
public static void FTPcon() throws FtpException{
   String hostname = "my.ftp.server";
   String username = "myusername";
   String password = "mypass";
   Ftp ftp = new Ftp(hostname,username,password);
   ftp.setHostname(hostname);
        ftp.setUsername(username);
        ftp.setPassword(password);
        ftp.connect();
        ftp.setBinary();
        ftp.download("file.dat");
        ftp.disconnect();
}The error i receive is java.io.FileNotFoundException: public.dat (The system cannot find the file specified) but the file is on the server.
Thanks in advance for any help

Cotton thank you for your reply
Any other sugestions please?The server disagrees. So...
- the file does not existThe file exists.I checked it with an FTP client program.
- the file has a different nameThe file name is correct
- you are connected to the wrong serverI am connecting to the correct server
- you are in the wrong ftp directoryThe file is placed in the home directory
- the ftp library you are using is broken (less
likely)I am using the library from jscape.I dont think is broken because i can upload the file from the first application.
>
FTP isn't somehow broken in Java. I use it all the
time. The problem is something listed above. I would
check all of the first four if I were you because
that's most likely where the problem is.Message was edited by:
flightcaptain

How to send a file from FTP to external server

My requirement is to send a file from FTP to D3(External) server.
Now I am able to store the file in Appln server.
I want to send the file created by the program thru FTP to D3 server.
I know the username,Password,HostID,RFC destination details.
How to send the file from FTP to D3.
If u have any program,Plz send it...
I dont want the function modules name...I want the example code ....
Thanks in advance.

Hi Sumi,
You could do it so that you create a .bat or .cmd script to your server which does your ftp transfer.
To do this you must use sm69 to create a external operating system command which you can call from FM SXPG_COMMAND_EXECUTE. To SXPG_COMMAND_EXECUTE you the file you need to transfer as a parameter.
What happens is that your abap program passes the file to windows batch script (.bat .cmd) which will then do the transfer for you.
Here's a sample of ftp-script for windows:
echo open IP_ADDRESS_TO_YOUR_SERVER > c:zftp_transfer.ftp
echo USERNAME>> c:zftp_transfer.ftp
echo PASSWORD>> c:zftp_transfer.ftp
echo put YOUR_FILE>> c:zftp_transfer.ftp
echo quit>> c:zftp_transfer.ftp
ftp -s:c:zftp_transfer.ftp
also take a look here for more details:
http://support.microsoft.com/?kbid=96269
Ok, this might be a bit trivial but if your server is unix/aix etc.. Instead of using batch script you must do a shell script.
Regards,
Ville

Ftp get file without extension

Hi
I'm trying to use the sample code from http://blog.dbandbi.com/tag/ssis-script-task-check-if-file-exists-c/
public void Main()
string userName = Dts.Variables["User::userName"].Value.ToString();
string password = Dts.Variables["User::password"].Value.ToString();
string fileName = Dts.Variables["User::fileName"].Value.ToString();
string ftpURL = String.Format("ftp://ftp.dbandbi.com/public_ftp/incoming/{0}",fileName);
try
FtpWebRequest ftpRequest = (FtpWebRequest)WebRequest.Create(ftpURL);
ftpRequest.Method = WebRequestMethods.Ftp.DownloadFile;
ftpRequest.Credentials = new NetworkCredential(userName, password);
using (FtpWebResponse ftpResponse = (FtpWebResponse)ftpRequest.GetResponse())
Dts.Variables["User::isFileExists"].Value = true;
catch
Dts.Variables["User::isFileExists"].Value = false;
Dts.TaskResult = (int)ScriptResults.Success;
but I'm having problems because the files are in unix format and they don't have extension. I tried using filename*.* and filename* but I always get "file does not exist". What I'm trying to do is to know if the file created by
another process has been freed so I can download it.
thanks in advance
cognosoft

If no extension then check for the exact name. It must not matter. When you connect to the site using non SSIS facilities, do you see the file there? Wildcards do not work AFAIK.
Basically, you need a directory listing to determine what files exist. You can run a remote dir command and save its output to a file or variable to skim thru.
Arthur My Blog

FTPS (FTP explicit SSLTLS)

Similar Messages

Maybe you are looking for