FTPS and SFTP

hi, what is the difference between FTPS and SFTP and does XI support FTPS and SFTP. Please elaborate.
krishnan

Hi also have a look at this
if u want to view the difference between FTPS (that XI supports) and SFTP, please refer this link
http://www.enterprisedt.com/forums/viewtopic.php?p=136&sid=28d66491b43c6bf90448deea4936bc15
HTTPS / SFTP with XI
Hey have a look at the following also
http://en.wikipedia.org/wiki/FTPS
Thanks !!

Similar Messages

Stetting up FTP and SFTP adapters for the same interface

Experts-
I have a situation in which client has a requirement to setup both FTP and SFTP adapters (from adapetive adapters) for the same interface. They want to have a copy of file locally and also want a file to be sent out securly using SFTP. In my interface which was previously developed they have used one business system and added FTP and SFTP to the same. If try to add new Receiver Agreement it will say that the object already exists as the Interface Mapping is same.
Please send me any suggestions which would resolve my problem

Hi Hari,
As you cannot create two Receiver agreement using only one receiver interface , please create a new receiver Interface, add that in interface determination step and then assing a different channel to new receiver agreement.
If your requirement is to store the file ,i would suggest write the file in your unix directory using NFS( /usr/sap...). then run a AFT job (if already set up in your landscape) to transfer file securly to target destination.Not sure if its feasible in your case otherwise you can use SFTP for the secure transfer.
Best Regards
Srinivas

FTPS and SFTP adapters

I am bit confused about all this B2B scenarios.
Our setup:
Existing
PI Server || firelwall || DMZ || Firewall -
> destination (abc company)
Proposed
PI Server || firelwall || DMZ Adapter Engine || Firewall -
> destination (abc company)
Flat file is in a folder - which has to be dropped to the destination. As we have port restriction in our firewall for PI for any ftp/ftps/sftp - we are planning to put Adapter engine in the DMZ.
Will this work?
Q1. To send a file on ftps - will we configure File sender adapter with certificates.
I am trying to install certificates on java stack it is looking for password for the private key but on ABAP stack it didn't ask for any key.
The abc company says it doesn't have any password. It could be a reason why https coud not drop files and now want to try ftps / sftp.
It is really frustrating to use PI for B2B. I will not recommend it again to any one. Thanks in advance.

Hi,
Flat file is in a folder - which has to be dropped to the destination. As we have port restriction in our firewall for PI for any ftp/ftps/sftp - we are planning to put Adapter engine in the DMZ.
Will this work?
Yes, this should work.
Q1. To send a file on ftps - will we configure File sender adapter with certificates.
Sender File Adapter? If you using J2SE AE, then from IE to AE, you will need receiver XI adapter. Check the Certificate Management in AE.
SFTP uses keys and not certificates. FTPS exchanges certificates.
It is really frustrating to use PI for B2B. I will not recommend it again to any one.
PI is a real robust tool for B2B integration. I guess, there are some flaws in the design, that's why you are feeling frustrated.
Hope this helps.
Regards,
Neetesh
Edited by: Neetesh Raj on Sep 16, 2009 8:46 AM

Mac Samba, Ftp and SFTP

Hello!
I have a question
I have a Lab (classroom) running Tiger 10.4.11, all machines has the same configurations and the same Users (an Admin User and "Limited User")they are configured to use ftp, but when the users connect via ftp they can get accesses a total local Volume.
and i need to know how can i restring the "Limited User" that only can get accesses their home?
Ok why ?
Because sometime they use "Transmit" and with transmit they can get accesses a total local Volume, of corse they don't has permission to delete or write on local volume, only in Home directory.
Is possible to restring the "Limited User" a their Home only?
Thanks!

BDAqua wrote:
Hi, not 100% certain, but possibly restricting with Sharepoints...
http://www.hornware.com/sharepoints/
thank for your answer!
But it´s not exactly that i want to do.
follow this link
http://www.sveinbjorn.org/macosxftpserverhowto
under the title "Configuring the FTP server" paragraph:
chroot
+Although this is adequately documented in the ftpd man page, it is worth discussing shortly: chroot-ing is a very important thing to do when providing a publicly accessible FTP server. If FTP users are chrooted, they will be unable to navigate the entire directory structure of the server. This is essential for security reasons.+

What to use FTPS or SFTP and how?

Clent has send public key can be put it on FTPS (using it as Keystore)and use it and transfer of file take place or we have to go for SFTP i.e writing UNIX script and from PI application server we have to send.

Hey
You use FTPS(FTP with SSL encryption) when you need to transfer encrypted message.the channel via which you transfer the message can be a regular channel(like internet) but the message is encrypted by using various private.public key security algorithms.
You need to do FTPS and can follow the below article
https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/d024ca8e-e76e-2910-c183-8ea4ba681c51?overridelayout=true
SFTP(SSH with FTP) on the other hand needs a dedicated transfer channel,you connect to SFTP servers by logging to channels which protect any intrusion.to implement SFTP you need to buy third party adapters like SeeBurger or develop your own modules.You also need to buy license for FTP SSH server like FTP VAN,AS2 etc
So the bottom line is,in FTPS the payload is encrypted but the channel can be secure or regular channel(like internet) but in SFTP the channel itself is secure and only people who have access to it can transfer files over it.
Hope that helps
Thanks
Aamir
Edited by: Aamir Suhail on Jun 27, 2009 8:00 PM

FTPS or SFTP for file scenario. Suggstions

Hi,
I have searched blog in sdn but do not get good blogs/links.
For File scenario which to use FTPS or SFTP.
How to do the configuration in XI and Visual admin.
Full points will be awarded.

Hi,
1) SFTP (Secure File Transfer Protocol)
"SSH File Transfer Protocol" or SFTP is a network protocol that provides file transfer and manipulation functionality over any reliable data stream. It is typically used with the SSH-2 protocol to provide secure file transfer. SFTP encrypts the session, preventing the casual detection of username, password or anything that is being transmitted. One key benefit to SFTP is its ability to handle multiple secure file transfers over a single encrypted pipe. By using a single encrypted pipe, there are fewer holes in the corporate firewall.
SFTP:
As per the latest SAP PI/XI support pack, it does not support SFTP via File Adapter.
So alternative approach to cater this requirement from XI is to make use of Unix Script at OS level to transfer the files from/to third-party systems.
Inbound Interface - i.e. third-party system ->XI->SAP:
File is transferred to a folder in SAP XI landscape from the third-party legacy system using UNIX Script with secured protocol. Once the file is ready in the XI landscape, File Adapter will poll this directory and file is picked up by NFS protocol.
Outbound Interface i.e. SAP->XI->third-party system:
XI is responsible for writing a file into a folder in the XI landscape. These files are transferred to the third-party system by executing UNIX scripts with secured protocol i.e. via sFTP.
Pre-Requisites:
Public key should be exchanged between external systems and the PI system.
UNIX shell script has to be developed and scheduled.
Advantages:
Highly Secured.
Ability to handle multiple secure file transfers over a single encrypted pipe .By using a single encrypted pipe, there are fewer holes in the corporate firewall.
Disadvantages:
Two-Step process i.e. XI>Temporary folder>External System and vice-versa
Files have to be temporarily stored in XI server.
Multiple failure points i.e. XI and Unix script execution
Maintenance of an external UNIX script.
Difficulty in monitoring the execution of the shell script as it cannot be monitored thru XI.
Need to generate keys and install it in the SFTP site as a pre-requisite i.e. SFTP clients must install keys on the server.
SFTP uses keys rather than certificates. This means that it can't take advantage of the "chains of trust" paradigm facilitated through Certificate Authorities.
Files from the XI server should be deleted/archived in a periodic manner to increase the disc space so that it will increase the performance.
Note: UNIX shell Script can be executed as a background job or' can be triggered from SAP XI through OS command at File adapter level.
Secure FTP (SSH) with the FTP Adapter
Secured File Transfer using SAP XI
Secure FTP in SAP XI
SFTP (FTP over SSH) in XI
/people/krishna.moorthyp/blog/2007/07/31/sftp-vs-ftps-in-sap-pi
encryption adapters or how to secure data
/people/krishna.moorthyp/blog/2007/07/31/sftp-vs-ftps-in-sap-pi
Regards,
Phani
Reward points if Helpful

GPG and SFTP in PeopleSoft

I'm preparing a report on how to securely send files and documents to external partners. I have settled on running GPG and SFTP key authentication through command calls to the Batch UNIX server. Does anyone have any experience in setting this up directly in the web interface? I ask because if I understand correctly, OpenSSL is included in the Encryption pages as wellas glue for PGP. Thanks for any info.

For non-interactive sftp you'll have to set up authentication keys. For doing that I think you need openssh and not just openssl.
You can possibly call your sftp scripts with system calls from inside an app engine.
OR
Open up PeopleBooks and go to
PeopleBooks > Enterprise PeopleTools 8.49 PeopleBook: PeopleSoft Integration Broker > Using Listening Connectors and Target Connectors
and then scroll down to 'Working With the FTP Target Connector'

Conversion from FTP to SFTP

Hi All,
I am using a FTP connection interface...there is a new requirement from one of the customer to have SFTP(SSH FTP)..But the current version of PI i use doesn’t support SFTP….i am looking for alternative approach for making FTP as SFTP.
can any one help me.

Hi Naresh,
Which version of PI are you using?
The new secure connectivity Add-on is available for free.
New ADD-ONs (B2B and SFTP-PGP) for SAP NetWeaver Process Orchestration: Released and Available
You can check OSS note 1695563 to see if your version supports the new SFTP adapter. Maybe if it does not, you can consider upgrading to the latest SP in order to support it.
Rgds
Eng Swee

Dreamweaver CS5.5 and SFTP

Greetings
I am trying to connect to my FTP Server with Dreamweaver using SFTP (port 22). I can connect using FTP (port 21). I can also connect using the same credentials, with SFTP using CuteFTP client.
Any suggestions?

Jive
Sorry, no I am not able to connect to the FTP server. The credentials are
correct. I can connect using a ftp client and Coldfusion Builder but, I
cannot connect through Dreamweaver or Contribute.
I hope that helps.
Sincerely
Ray Bakker
Web Developer | Corporate Information & Technology | City of Thunder Bay
T: 807.625.3024 | F: 807.623.3999 | E: [email protected]
http://www.thunderbay.ca
From:   SnakEyez02 <[email protected]>
To:     Ray Bakker <[email protected]>
Date:   02/11/2011 12:08 PM
Subject:        Dreamweaver CS5.5 and SFTP
Re: Dreamweaver CS5.5 and SFTP
created by SnakEyez02 in Dreamweaver - View the full discussion
So based on this last post you are able to connect but you are not able to
transfer files. And based on the error I will assume uploading new files
is ok, it's just the overwriting that is causing an issue or uploading,
even new files, to a specific folder is causing an issue. Can you verify
that the ownership settings are correct on your account (you may need to
contact your host to fix if this is the issue)?
Replies to this message go to everyone subscribed to this thread, not
directly to the person who posted the message. To post a reply, either
reply to this email or visit the message page: [
http://forums.adobe.com/message/4003679#4003679]
To unsubscribe from this thread, please visit the message page at [
http://forums.adobe.com/message/4003679#4003679]. In the Actions box on
the right, click the Stop Email Notifications link.
Start a new discussion in Dreamweaver by email or at Adobe Forums
For more information about maintaining your forum email notifications
please go to http://forums.adobe.com/message/2936746#2936746.
The information transmitted by electronic communication is intended
only for
the person or entity to which it is addressed and may contain
confidential
and/or privileged material. The sender does not waive any related
rights or
obligations. Any review, re-transmission, dissemination or other
use of, or
taking of any action in reliance upon this information, by persons
or entities
other than the intended recipient, is prohibited. If you received
this in
error, please contact the sender and delete the material from any
computer

FTP (using SFTP) Reponse in Java

How can i get some response from the server saying that file uploaded successfully?
     public void doUpload() throws IOException {
          SshParameters params = new SshParameters(ftpHostname, ftpUsername,
                    ftpPassword);
          Sftp ftp = new Sftp(params);
          ftp.addSftpListener(new ConnectToUpload());
          ftp.connect();
          String listing = ftp.getDirListingAsString();
          System.out.println(listing);
          ftp.setLocalDir(new File("C:/tmp"));
          System.out.println(ftp.getLocalDir());
          ftp.setDir("//dropzone/inbound/moneymarket/mmconfirmations/dev");
          ftp.setAscii();
          ftp.setBinary();
          ftp.upload("TestUpload.txt");
          ftp.disconnect();
          System.out.println("Connection is FTP Site : " + ftpHostname
                    + " has now disconnected");
     }

Hi I added the following to my code
          InputStream fis = null;
          byte buf[] = new byte[8192];
          System.out.print(buf);
and get a [B@186db541199 reply
I am not sure what does this mean or does is mean anything

Dreamweaver to CFB (FTP and other gripes)

I 'get' the potential benefits of moving to CFB from Dreamweaver. I have watched all the videos and read the manual and I love the integration with Flex.
BUT
It appears very little thought has been put into the FTP and synchronisation tools..
Ideally:
I would like to set the destination FTP address for each project (at the moment although it asks me from the subdirectory, it shows me the top level root and I have to drill down each time for the destination where I want to upload)
I don't want to see nor have editing capabilities on my remote files by default.
Accidents happen and I'd rather they happened locally.
Accidentally deleting a directory remotely could be disastrous.
When the FTP client is busy, the rest of the IDE goes to sleep. Dreamweaver sorted this out two versions ago.
There appears no way to stop the interaction with the remote server.
So until all these (pretty fundamental) issues get sorted. I ill probably use FB to play with CF9 and jump back to Dreamweaver to use their robust FTP tools. (which just leaves me with the version control issues now that I have to put my FB source files into the wwwroot of my local server). Again a real pain !
Has anyone else found these problems - or worked out how to get around them ?
R8_UK

R8_UK, I hear your concerns, and they're rather common. I hope I can address
(and resolve) some of them here for you.
First, I use the FTP feature all the time and it never makes the IDE
"sleep". You may want to turn on the progress view (window>show
view>other>general>progress). It will tell you what's happening as FTP
processes are running. It will also tell you other processes going on in the
editor. You may be surprised to find something else causing the "sleeps" you
sense.
As for you saying that "it shows me the top level root and I have to drill
down each time for the destination where I want to upload", again I don't
have that problem. Are sure you didn't just make a mistake in setting up the
FTP connection? Admittedly, changing them is tough. You have to go to the
File view, and there you'll see what FTP (or FTPS or SFTP) connections
you've made.
Or do you mean that you ARE using the File view, and it's when you open that
that it makes you drill down? Well, you don't need to do that. You can
instead connect your project to an FTP connection (either in the project
properties and its synchronization section, or by just right-clicking
anywhere in the project and choose Synchronize>Create New Synchronize
Connection).
If you do that, then it also solves a common complaint I hear from some,
that it's complicated to do an FTP upload in CFBuilder. Well, I just right
click on the file (or on the editor workspace to upload the file I'm working
on, such as after changing and testing it locally), then choose
Synchronize>Upload. Bang, done.
There is also a more evolved "synchronize" feature that lets you do more
(including comparing the contents of a file locally to remote, which comes
in really handy). There's an even still more evolved interface in
Window>Show View>Other>HTML Standard Views>Sync Explorer. The latter two
come closer to the kind of two-paned interface for managing local/remote
files that some expected in DW.
Of course, different people have different desires for FTP access. You have
said you do NOT want to edit the file directly on the remote server. I hope
what I share above helps you. But those who DO like editing on the remote
server (indeed, at their peril) will groan that they wish they didn't have
to do even that simple manual effort to upload: they wish that on save it
would upload. I don't know if we can ever expect that from within a local
project in Eclipse. It just goes against the grain of better development
practices, and it's one area where perhaps it's a good thing if the IDE
pushes one to reconsider that.
Until then, though, they can indeed use the File view, which does provide
direct access to a remote server and its files. With that, you do open the
remote file in the IDE and when you save it, it's pushed immediately to the
server.
Hope some of this helps you (and others) with your consternation with CFB
and FTP. Come on in, the water's fine. (But I'll grant that's a relative
statement. If you're still not sold, keep pointing out your concerns.)
/charlie

Apple Remote Desktop vs. FTP vs SFTP vs PC

Complex one this, and its driving me mad - can anyone advise
Background: two small networks in different locations with different ISPs. Both behind routers. All necessary ports opened. The primary objective was to have access between two macs to allow Remote Control and file sharing via FTP or, better still, SFTP (using Transmit). Everything was fine and the Macs could connect to each other everywhich way.
Then I was forced to do a complete reinstall on one of the macs
Current situation: Remote Desktop continues to work fine both ways. The (Intel) Mac with the reinstall will only connect via SFTP (FTP times out). The other Mac will not communicate with the Intel Mac at all with either FTP or SFTP. But the PC alongside it will connect using FTP through the same router
Any clues?

Just had some success establishing the SFTP connections in both directions.
Trying to SFTP into the Intel mac here reported a message:
Aug 13 16:03:08 BigMac Fetch 5.2.1 (5C263): IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Aug 13 16:03:08 BigMac Fetch 5.2.1 (5C263): Someone could be eavesdropping on you right now (man-in-the-middle attack)!
Aug 13 16:03:08 BigMac Fetch 5.2.1 (5C263): It is also possible that the RSA host key has just been changed.
Aug 13 16:03:08 BigMac Fetch 5.2.1 (5C263): The fingerprint for the RSA key sent by the remote host is
Aug 13 16:03:08 BigMac Fetch 5.2.1 (5C263): xxxxxx (number deleted)
Aug 13 16:03:08 BigMac Fetch 5.2.1 (5C263): Please contact your system administrator.
Aug 13 16:03:08 BigMac Fetch 5.2.1 (5C263): Add correct host key in /Users/PP/.ssh/known_hosts to get rid of this message.
Aug 13 16:03:08 BigMac Fetch 5.2.1 (5C263): Offending key in /Users/PP/.ssh/known_hosts:1
Aug 13 16:03:08 BigMac Fetch 5.2.1 (5C263): RSA host key for xx.xx.xx.xx has changed and you have requested strict checking.
Aug 13 16:03:08 BigMac Fetch 5.2.1 (5C263): Host key verification failed.
I guess the host number changed as a result of the earlier system reinstall
Anyhow, I made hidden files visible using Tinker Tool, found the known_hosts file in the Home/.ssh folder - then deleted its contents on both machines
When I went to log on using SFTP in Fetch, there was a brief "are you sure" king of warning then it connected. This worked in both directions
Still can't get the FTP working in either direction though.
Trying to connect From the Intel to the Mac I get:
Fetch 5.2.1 (5C263): Fetch could not get the file list because data connections were blocked by both a firewall at the server and by the Mac OS X firewall. (Ask the server administrator to allow passive mode data connections through their firewall, or turn off the Mac OS X firewall in the Sharing pane of System Preferences.)
From Mac to Intel I get:
Fetch 5.2.1 (5C263): Fetch could not get the file list because the connection was refused. (Contact the server administrator for more information.)
Logs show that a communication is taking place between the computers, but the ipfw.log shows a "12190 Deny TCP" message

Ftp to sftp conversion

Hi,
I am using one shell script for file transfer wich is currently using ftp.
Now I have a requirment to use sftp instead of ftp.
Below is the script which is being used for file transfer.....
============================
set -x
#!/bin/sh
# Command line parameters are
# 1- File name
# 2- Host
# 3- User ID
# 4- Password
# 5-Virtual Folder
# 6-Retry Interval
# 7- No of Retries
# 8- FTP result Directory
# 9- MAIL TO ADDRESS
#10- Ascii File Directory
#echo $@ > /tmp/myparams.lst
FILE=$5
HOST=$6
USER=$7
PASSWD=$8
VIRTUAL_FOLDER=$9
RETRY_INTERVAL=10
NUM_RETRIES=3
FTP_RESULT_DIR=/data/tmp
MAIL_TO_ADDR=[email protected]
FILE_DIR=/data/tmp
BASE=" "
I=0
RESULT_DIR="${FTP_RESULT_DIR}"
LOG_DIR="${FTP_RESULT_DIR}/MY_DATA_FILE_SSS.log"
rm MY_DATA_FILE_SSS.log
function connect
ftp -nv $HOST > $LOG_DIR <<END_SCRIPT
quote USER $USER
quote PASS $PASSWD
lcd $FILE_DIR
if [ $FILE="MY_DATA_FILE" ] then
quote site recfm=fb
quote site lrecl=111
pwd
put $FILE 'MY_DATA_FILE_SSS'
fi
quit
END_SCRIPT
while [ $I -lt $NUM_RETRIES ]
do
connect
if grep "Transfer complete" $LOG_DIR
then
echo "Success"
exit 0
elif [ $I -lt $NUM_RETRIES ]
then
# echo "Error1"
((I=I+1))
sleep $RETRY_INTERVAL
else
echo "error"
exit 0
fi
done
SUBJECT="FTP to ${HOST} Done"
mailx -s "${SUBJECT}" $MAIL_TO_ADDR < $LOG_DIR
======================================
Can anybody help me to replace the ftp with sftp in this script?
Thanks in Advance,
Roopak

It is not that difficult. The main difference is that sftp uses a different means of authentication. Thus the username and password (and ftp quote ) commands are not relevant.
As for the sftp list of commands - very similar to ftp. I suggest that you try this conversion yourself. Will be a valuable exercise that will increase your knowledge.
The list of commands:
sftp> help
Available commands:
cd path                       Change remote directory to 'path'
lcd path                      Change local directory to 'path'
chgrp grp path                Change group of file 'path' to 'grp'
chmod mode path               Change permissions of file 'path' to 'mode'
chown own path                Change owner of file 'path' to 'own'
df [path]                     Display statistics for current directory or
                              filesystem containing 'path'
help                          Display this help text
get remote-path [local-path] Download file
lls [ls-options [path]]       Display local directory listing
ln oldpath newpath            Symlink remote file
lmkdir path                   Create local directory
lpwd                          Print local working directory
ls [path]                     Display remote directory listing
lumask umask                  Set local umask to 'umask'
mkdir path                    Create remote directory
progress                      Toggle display of progress meter
put local-path [remote-path] Upload file
pwd                           Display remote working directory
exit                          Quit sftp
quit                          Quit sftp
rename oldpath newpath        Rename remote file
rmdir path                    Remove remote directory
rm path                       Delete remote file
symlink oldpath newpath       Symlink remote file
version                       Show SFTP version
!command                      Execute 'command' in local shell
!                             Escape to local shell
?                             Synonym for help

JDev 11.1.1.4.0 Support for SSH and SFTP

Using JDeveloper 11.1.1.4.0
I've tried researching Oracle docs, but find nothing on Secure FTP (SFTP). Does Oracle ADF have built-in SSH and SFTP Java libraries? If not, has anyone had success with the Java libraries from SourceForge or is there something better out there?
Thanks,
Troy

There is no build in ftp or ssh library in jdev. I used http://commons.apache.org/net/ in one of my project.
Timo

Ftp and http access over XDB repository is not allowed...

When I try to execute the following command on a reasonably fresh Oracle 11 installation:
insert into "XMLTEST" ( "name", "xmlfof" ) values ( 'small', DBMS_XDB.GETCONTENTXMLTYPE('/public/small.xml') );
-- The schema is correctly registered, the file "small.xml" is in the /public repository folder, the user has every conceivable role and priviledge
-- http access works fine from a remote location, tried to execute the command on the server and from remote system...
I get the following error message:
ORA-31020: Der Vorgang ist nicht zulässig, Ursache: For security reasons, ftp and http access over XDB repository is not allowed on server side ORA-06512: in "XDB.DBMS_XDB", Zeile 1915
Searching for an answer on the forum didn't produce any concreate explanation... Does anyone have any idea how to solve this problem?

As it turns out, the XML file contained a reference to a DTD at an external web-site, which caused the problem - it was identical to that described here:
Re: ORA-31020 when using XML with external DTD or entities
After removing the reference, everything works perfectly...

FTPS and SFTP

Similar Messages

Maybe you are looking for