Bpel supports sftp over openssl? (v. 10134)

Hiii
I am using soa suite 10134 MLR#7 on Linux.
I read the docs @ http://download.oracle.com/docs/cd/B14099_19/integrate.1012/b25307/adptr_file.htm#CIAEIIFD about FTP adapter, but they are not very clear about what the FTP adapter can do.
I have requirement where I will need to connect external sFTP server that supports openssl. Does BPEL support that ? The docs are saying that install openssl on you solaris server, bt not writing if FTP adapter will act as a client using openssl.
Can you please help?
Edited by: usrPLCM- on Jul 15, 2009 10:34 PM

Exactly bpel supports FTP Adapter. Try the sample process number 129. FTPAdapter under SOA/bpel/samples/tutorials.
Also do refer this link:
http://docs.huihoo.com/oracle/docs/B14099_19/integrate.1012/b25307/intro.htm
Regards
Rajesh

Similar Messages

Does Interconnect FTP Adapter support SFTP/SSH?

Does Interconnect FTP Adapter support SFTP/SSH?
Thanks!
-mb

No it doesn't!
Actually, FTP adapter in BPEL support secure FTP (FTPS, FTP over SSL), but only on Solaris platform if believe documentation.
You can try to connect BPEL FTP adapter to InterConnect using new JCA adapter (in IC 10.1.2.0.2), but I'm not sure wether BPEL FTP adapter is JCA-compatable or not (since it is not in Oracle AS adapters package but inside BPEL)...

SAP XI support SFTP and FTPS?

Hi Gurus,
I would like to find out if SAP XI supports both SFTP and FTPS. If yes, how do I perform the configuration?
Thanks in advance.

Business Case:
In many implementations Business requirement is to "secure" the file/data transfer between XI and any third-party system. So there is a need of secured connection between XI/PI and any file based third-party legacy systems.
Following solutions are proposed to cater secure connection between XI/PI and any third party systems.
1) SFTP (Secure File Transfer Protocol)
"SSH File Transfer Protocol" or SFTP is a network protocol that provides file transfer and manipulation functionality over any reliable data stream. It is typically used with the SSH-2 protocol to provide secure file transfer. SFTP encrypts the session, preventing the casual detection of username, password or anything that is being transmitted. One key benefit to SFTP is its ability to handle multiple secure file transfers over a single encrypted pipe. By using a single encrypted pipe, there are fewer holes in the corporate firewall.
2) FTPS (FTP over SSL)
FTPS (FTP-SSL) is a real ftp that uses TSL/SSL to encrypt the control session and if required the data session. With FTPS, the control session is always encrypted, but the data session may not be always encrypted. FTPS is a file transport layer on top of SSL. SSL, or Secure Sockets Layer, is a method by which an encrypted u2018pipe' or tunnel is established between the FTP client and FTP server. Once the secure tunnel has been established (which is done using 128-bit encryption techniques), standard FTP is used to transfer data over the secure connection.
Feasibility of SFTP and FTPS in XI:
SFTP:
As per the latest SAP PI/XI support pack, it does not support SFTP via File Adapter.
So alternative approach to cater this requirement from XI is to make use of Unix Script at OS level to transfer the files from/to third-party systems.
Inbound Interface - i.e. third-party system ->XI->SAP:
File is transferred to a folder in SAP XI landscape from the third-party legacy system using UNIX Script with secured protocol. Once the file is ready in the XI landscape, File Adapter will poll this directory and file is picked up by NFS protocol.
Outbound Interface u2013 i.e. SAP->XI->third-party system:
XI is responsible for writing a file into a folder in the XI landscape. These files are transferred to the third-party system by executing UNIX scripts with secured protocol i.e. via sFTP.
Pre-Requisites:
Public key should be exchanged between external systems and the PI system.
UNIX shell script has to be developed and scheduled.
Advantages:
Highly Secured.
Ability to handle multiple secure file transfers over a single encrypted pipe .By using a single encrypted pipe, there are fewer holes in the corporate firewall.
Disadvantages:
Two-Step process i.e. XI>Temporary folder>External System and vice-versa
Files have to be temporarily stored in XI server.
Multiple failure points i.e. XI and Unix script execution
Maintenance of an external UNIX script.
Difficulty in monitoring the execution of the shell script as it cannot be monitored thru XI.
Need to generate keys and install it in the SFTP site as a pre-requisite i.e. SFTP clients must install keys on the server.
SFTP uses keys rather than certificates. This means that it can't take advantage of the "chains of trust" paradigm facilitated through Certificate Authorities.
Files from the XI server should be deleted/archived in a periodic manner to increase the disc space so that it will increase the performance.
Note: UNIX shell Script can be executed as a background job u2018or' can be triggered from SAP XI through OS command at File adapter level.
FTPS (File Transfer Protocol Using SSL/TLS):
This is a built-in feature of File adapter in XI. But SAP Java Cryptographic Toolkit must be deployed as a prerequisite. (Refer to note https://service.sap.com/sap/support/notes/821267 Question 28). By default following ports are used:
Implict FTPs 990 (Control) and 989 (Data)
Explicit FTPs 21 (Control) and 20 (Data)
Both use cases can be combined with active and passive mode.
Advantages:
Direct transfer of files to/from third-party systems. It is not required to store the files in the XI server temporarily.
Built-In feature from XI File adapter
No extra effort in development and maintenance of Unix Script.
Centralized Monitoring tool from XI
FTPS uses certificates and therefore can take advantage of "chains of trust" paradigm facilitated through Certificate Authorities. This paradigm makes it possible for two entities to establish a trust relationship without directly exchanging security information, which is important for some applications.
Disadvantages:
Requires opening multiple ports forenabling SSLin the firewall. So there are multiple holes in the corporate firewall.
Not every FTP server supports FTPS and many that do, require a configuration change to activate the FTPS protocol extension.
Cryptographic toolkit should be installed in XI system though it is not very complex or expensive.
Conclusion:
Though SFTP seems more secure as it works through one port, FTPS is easier to configure, monitor and maintain from XI point of view. However, the decision depends on many parameters like, cost/effort, flexibility in use, ease of maintenance, company security policy, failure possibilities etc.
regards
kummari

Does BPEL support circular flow?

I'm trying to use BPEL as the process flow engine in a project. Since some tasks can be routed all over back to previous steps based on the criteria, I'm wondering if BPEL supports that?
If "while" is the only choice for me to do so, the flow will be quite cumbersome to design.
Thanks.

Yes it does, here is a post that may be useful
Binding Fault invoking an axis2 webService from BPEL
also there is an example in the samples directory for http binding
SOA_HOME/bpel/samples/tutorial/
cheers
James

SFTP over SSH

Is there a good Sun Guide onine that explains how to setup my Unix Solairs 10 system so I can SFTP using SSH from my Windows Clients to my Solairs Servers? Basically I can not use FTP so I understand their is a more secure what to transfer files so I'm assuming SFTP over SSH is the correct description.

Well, sftp is ran from within sshd, basically it runs an sftp command over an established ssh session, so i don't think you can prevent a user who can use sftp from using ssh.
I would think its enabled by default, if its not you can enable it by editing /etc/ssh/sshd_config
see 'man sftp-server', 'man sshd_config' as well as 'man sshd' for more details.
If your only goal is to have secure FTP-alike access to the system, you could look into FTPS, which is a more secure FTP which is separate from SSH.
AFAIK ftps is not supported by default in Solaris 10, but you can always download ProFTPD, which i used the last time i did something like this (which was a while ago). I recall ProFTPD being very reliable and easy to setup, and can definitely be setup in a way so it only allows the users to FTP securely into your system..
.7/M.

I have been a customer with Verizon, since 1996. Recently, my husband has been added onto my account. We have both been experience drop calls. My husband contact Tech support for over 2 weeks. We were pretty upset to be paying a lot of money for a service

I have been a customer with Verizon, since 1996. Recently, my husband has been added onto my account. We have both been experience drop calls. My husband contact Tech support for over 2 weeks. We were pretty upset to be paying a lot of money for a service that didn't work. Verizon advised us that would upgrade both of our phones (to see if that solved the problem). Ok...this is where Verizon has forgotten customer service rules. He order 2 phone...one for himself, one for me. 1st the wrong address on the package..Fedex couldn't deliver...2nd...missing condo number Fedex couldn't deliver again...(2nd call to Verizon)...3rd package was finally deliver with 1 phone...missing my phone. Contacted verizon rep...reorder my phone again..but sorry we cannot give the same price as quoted on 21April...even though...its our mistake...Ok...Ok..what a surprise..but we can do this...after 65 minutes...found a price that was a little bit more...fine...just order the phone....I reordered phone on 28April...on the April 29...no email..so I can Verizon for the 4times in a few days..sorry your order was delay due to our Fraud dept. OK...talked to fraud dept...ok..account is good..will release phone and ship. OK...Next day, no email with deliver confimation. Contact Verizon 5 times now...sorry..your order was cancelled...YES...cancelled again...2nd time now...but we can reorder...OK...sorry but we cannot honor that price that was quoted..really...agent messed up...again...but we can do this for you....I don't understand...your mistake...ALL the times...
Strange ...how my order gets cancelled twice by Verizon's mistake....yet you cannot honor prices that your agents quoted!!!
I didn't reorder the phone....I cannot in good faith same with a company that does not stand behind their own mistakes...and worse...they make the poor customer pay for it...
I will not be renewing my contact...its time to Cricket Wirless...which my sister-in-law loves for half the cost....

I hope that you aren't complaining about dropped calls INSIDE your condo because no amount of switching or upgrading devices will solve that.
VZW will not guarantee service inside of any structure. There are just too many factors. If the problem is inside then you might want to look at one of the following:
1.) Network Extender (may cause issues for others in a condo or apartment style setting)
2.) A Google Voice Number (Free with a Gmail email address), downloading Google Hangouts Dialer and forwarding your calls to the GVN so that you can make and receive calls over Wi-Fi.

Why doesn't the MBPr support 2560x1440 over HDMI with OSX when Windows7 (bootcamp) supports it just fine?

I purchased a 2013 MBPr 15" (the first Mac I've ever owned btw) and so far have enjoyed the experience. I purchased a large 27" high resolution 2560x1440 non-Apple display which I planned on using HDMI output for, since HDMI has no problem supporting this resolution. After receiving this display yesterday I came to the sad realization that OSX does not support 2560x1440 over HDMI. However, under further investigation I found that Windows7 in Bootcamp on the same machine will beautifully display the full 2560x1440 over HDMI.
This means that OSX is the problem, and not the MBPr since Windows7 displayed the full resolution with no issue. If the hardware can support it, why would Apple disable it in the software? Is this just their way of forcing people to use DisplayPort? Or is there hope for them fixing this in future versions?

OK. No reason to be playing games here. Just surprised that this issue hasn't been brought up here on the community boards as well. Here's the simple solution
Steve
========================================
Re: Why can't my Belkin Thunderbolt Express Dock operate my desktop speakers?
Options
07-17-2014 07:09 PM
After reaching a Level III technician in Belkin customer support today and having spent approximately 4-5 person hours on this issue, we figured out that the Sound/Output preferences in the Apple System Preferences should not be set to "Internal Speakers" but rather set to "USB PnP Sound Device".
Worked like a charm. Simple, elegant solution to a real problem, one likely to be encountered by 90% of the people who buy a Belkin Thunderbid Express Dock off the shelves of any Apple Store to use with a current generation Apple laptop or desktop computer.
But the Level III Belkin technician admmtted that this critical little piece of simple, straightforward information should have been readily available to their Level 1 techies who began helping me 5 person hours ago. Would even have saved Balkin loads of customer service support time.
And so the saga ends
Belkin owes me for helping them learn this precious lesson.
Steve

Why sever-side state saving doesn't support fail over?

Hi all,
In my previous thread "ADF server-side state saving method" Frank said that it doesn't support fail over.
Re: ADF server-side state saving method
My customer is wondering the reason.
If anyone has a clear statement about it, could you share it?
Any help will be much appreciated.
Atsushi

Timo,
As I wrote in my previous thread, my customer adopted multi-windows application design because they didn't know it caused viewExpiredException frequently.
Now I'm looking for the best setting for avoiding the exception and need ADF guru's help.
Frank said that ADF is on Sun's RI. And it seems that the state-saving parameters of Mojarra are working correctly in my environment. However any ADF docs don't mention the behavior of server-side state saving clearly. When I set state-saving method "server", view states are managed per logical view (≒ window). And it seems better for multi-window application than using client-token based state management from the perspective of preventing viewExpiredException.
Because fail over is not their requirement, if we could make sure that server-side state saving doesn't have other side-effects they might adopt it.
So I'd like to know in more detail about the behavior.
Thanks,
Atsushi

Will AT&T support FaceTime over cellular?

Will AT&T support FaceTime over cellular with the new iPhone 5?

I am glad to see that this is getting noticed. I went thru this today
AT&T wants to charge for it. Also caution: If you are "grandfathered" into an unlimited data plan and switch to a new "termed" data plan just to get face time available without wifi your unlimited data plan is no longer valid. Also note that AT&T no longer offers an unlimited data plan at this time so you cannot get it back
I downloaded IOS6 and turned my wifi off and tried facetime. It advised that I need to contact AT&T to make sure I had the applicable data plan.
I had an interesting conversation with AT&T today. They told me that I had to sign up for a new plan.
They fully admit that Facetime is interent based and goes over the internet when connected to wifi. I responded that when wifi is turned off, it goes thru the internet on the phone which is data. Since I have unlimited data they are now restricting my unlimited data. They won't deny that. They only state that AT&T offers a new plan which allows you to use facetime without wifi. I believe it was called "mobile sharing"
I escalated to three different supervisors until there wasn't a higher one present. They commited to have someone call me back tomorrow. I asked that take this as a formal complaint. I also advised that I would be contacting the BBB as they have stepped over the bounds of ethichal behavior.

Is there any apps for iphone to support rpc over http or any software yet

Hi,
Am wondering if there is any kind of app or software that supports rpc over http in exchange 2003 enviroment for iphone?? I am looking for solution for my company employees so that they can get emails securly to their hand held devices. I found one called "good" but havent used yet and dont know if there is any configuration fro rpc over http. Any suggestion would be greatly appreciated.
Many thanks,

The number of apps currently available in the App Store compatible with both iOS 4.2.1 and the iPhone 3G hardware (a major limitation) is dwindling rapidly. If you don't already have a supply of apps, your choices are getting fewer and fewer. TIme to consider upgrading the phone.

Oracle BPEL support for Multiple Transport Protocols

Hi All,
Does BPEL support all protocols ?
JMS/ FTP/FTPS/Http/Https/TCP-IP
?

As mentioned before, the BPEL language itself is a programming language. Via BPEL partner links it is able to connect to other systems. In Oracle SOA Suite, we support by default adapaters (and this protocols):
JMS/FTP/FTPS/Database/AQ/MQ-Series/WebServcis.
Third party companies such as Iway, delivers other adapters to connect to other systems and/or protocols.

Does BPEL support wsHttpBinding?

Hi,
I'm trying to invoke a WCF service using wsHttpBinding without success. Does BPEL support wsHttpBinding? If so, what the process to getting this to work. Any help is greatly appreciated.

Yes it does, here is a post that may be useful
Binding Fault invoking an axis2 webService from BPEL
also there is an example in the samples directory for http binding
SOA_HOME/bpel/samples/tutorial/
cheers
James

Do we support RADIUS over IPv6 in ACS 5.5?

Hi,
Could you please let me know if we support RADIUS over IPv6?

It is hard to see the information in your screen shot but ACS 5.4 and later support IPv6 for network devices:
http://www.cisco.com/c/en/us/td/docs/net_mgmt/cisco_secure_access_control_system/5-4/user/guide/acsuserguide/net_resources.html
Also, if you type an invalid IP address in ACS you would get the following error:
A valid IPv4 address consists of four numbers (0-255) separated by periods, e.g. 123.0.255.3
A valid IPv6 address is n:n:n:n:n:n:n:n where the 'n's are either digits (0-9) or letters (A-F)
I hope this is what you were looking for!
Thank you for rating helpful posts!

Can ipad2 NOW support facetime over 3G?

Can ipad2 NOW support facetime over 3G?
i have heard that the new ios update 4.3.3 can turn the 3G to a wifi for others to use as well.
can it then connect to its own wifi and use face time?
thank you for your help
sameer

No
You heard wrong.

Can I interact with SAP Tech Support Team over phone?

Hi,
I and my architect in my company willing to interact with SAP Tech Support Team over phone (i.e. Like to setup a Call with them). we have bought a license with us for Crystal Report 2008. My architect has few queries to be clarified and willing to interact with them.
Is this possible? If so can you please provide the contact number for the same.
Thanks & Regards,
Mani G.S.

Hi Mani,
If you don't have a support contract to create a case in [Service Market Place|http://service.sap.com/support] then you can purchase a single case from this [link|http://store.businessobjects.com/store/bobjects/Content/pbPage.CSC_map_countyselector/pgm.67024400?resid=Tj14uQoHArEAAEctJGsAAAAI&rests=1312651449029]
Don
PS - it's a holiday in North America today so if you do call it may take a day to get back to you.

Bpel supports sftp over openssl? (v. 10134)

Similar Messages

Maybe you are looking for