How to handle SFTP (ftp over SSH)

Hi there,
I know XI only supports FTP (and FTPS(SSL)) when trying to exchange files with other systems.
Right now, i have to interconnect a legacy with XI. This external server uses SFTP (FTP over SSH) as an standard of file transfering process.
Could you please tell me if there is a possibility to integrate them?
Best regards,
David

You'll need either to:
- develop the connection in a java proxy,
- develop your own adapter,
- buy an adapter for SFTP from a 3rd party,
- if you have UNIX as OS, use OS commands (through shell script in a file adapter for example) to start SSH/SFTP connection.
Regards,
Henrique.

Similar Messages

Java Caps 5.1.3. and SFTP (FTP over SSH)

Hi,
I'm trying to use the BatchSFTP option from the batch eway to setup FTP over SSH. I'm having trouble in setting up the keyfile. I've generated a trusted_hosts file using openSSH via CYGWIN (I'm running on W2003 server). The error I get is: Batch SFTP eWay connection failed, method=[connect()], message=[Exception when connect(), e=java.io.IOException: Invalid SSH1 public key format].
Has anyone experience with FTP over SSH and can help me out on this.
Thank you very much,
Cor Zijlstra
[email protected]

You need to convert the server public key for the server that you are connecting with to the IETF SECSH format. If you have access to do that, you can run the command ssh-keygen -f myServerPublickey.pub -e > myIETFServerPublicKey.pub. Otherwise, your UNIX server admin will need to run that. Put the ITEF key in your .ssh directory and have CAPS reference that IETF format and you should be set. Make sure the connectivity map/env explorer is set to public key authentication.
I think there is a bug in CAPS with how it is handling the SSH formated key. I have been unable to prove it to support. Furthermore, more pressing issues have taken up my time (aka, other projects).
John

Issue with permissions when using SFTP (FTP over SSH)

I have an issue when i use SFTP, for some reason users are able to browse the system's root directory and other user's directories. Also some users don't have access to the FTPRoot alias and some do. If i connect using FTP everything is fine. Can someone shed some light on this issue.
Thanks,
Toros

There is absolutely no correlation between FTP and SFTP.
SFTP is actually a file transfer run over SSH and therefore subject to the normal account/shell restrictions, just as if the user logged in via SSH.
What you're confusing it with (easily done) is FTPS, which is SSL-encrypted FTP. This uses SSL/TLS to secure a FTP connection and is subject to the account restrictions defined in the FTP server, independent of the user's shell access.
So, in other words, SFTP uses a SSH session to transfer files. FTPS uses SSL to secure a FTP session.
There's no trivial way to prevent a SFTP user from walking through the directory tree since there's no difference between their SFTP session and an SSH session.

How to Handle the Carry Over leaves in Absences

Hi Friends,
I have one Requirement from my client.
let me explain you the scenario.
say Person X is having 20 annual vacation leaves per year, if he applies say 10 leaves this year and remaining 10 leaves should get carry forward to next year and next year he should be eligible for total 30days of annual vacation leave.
let me tell u that there is no balance has been attached to that leave element and no Accruals Setup has been done in the system.
Is it possible to handle it technically for carryover leaves. if yes plz explain in me .
thanks in advance

Yes, standard Oracle HRMS supports this out-of-the-box.
You define a Paid-Time Off (PTO) Accrual Plan, which defines all the business rules around entitlement and carryover and then you attach this accrual plan to employees.
Once all the business rules are defined you run a PTO Carry Over process that transfers outstanding balances (in this example 10 days) from the previous vacation year to the next.

Java Secure channel for FTP over SSH

Does the Jsch provided by JCRAFT support authentication and authorisation via public key certificates? If yes then is there website which gives me some info on this?
I checked out the site http://www.jcraft.com/jsch/index.html but this does not provide much info on the certificates.
If anyone knows some information regarding this, kindly reply ASAP
Thanks

One of the examples provided with the ditribution actually generates those keys. I will admit, the documentation for JSch is very thin, but they provide examples for everything with the distribution. If you wish to use a key generated by another program, make sure that the key provided is in OpenSSH format (Putty and Secure SSH formats don't work).

How to handle multiple connection with ssh using JSCH Client?

Hi,
Can anybody help me regarding the topic said above?
Thanks in advance.

Use this forum to discuss general topics related to the Java programming language.
I don't even know what JSCH is, let alone would kno whow to provide product support for it.

Is there any API's for providing FTP using ssh port.

Currently we are having a requirement to FTP files only using ssh port(Secure FTP). Can anyone please suggest me an API which provides the FTP'ing operation using SSH port.

I am currently using a Sinetfactory thirdparty package from JScape for the Secure FTP functionality(FTP over SSH). But Sinetfactory package tranfer rate is much slower than the manual sftp(command-line run in linux server for manual ftp using ssh).
Since it is very slower than ordinary sftp(ftp over ssh), I thought of using other thirdparty FTP package which supports FTP using ssh port. Can anyone please suggest me a thirdparty package which will has the sftp functionality and with better transfer rate.

FTP over SSL connectivity in File Adapter

Hi All,
I request your suggestion on my problem. I have a scenario idoc to file where I am connecting to my vendor server throught SFTP (Ftp over SSL). In this my vendor specifically told that to obtain secure FTP connectivity to their server they require a pre-approved Secure FTP client be used to access the service.
So as per this requirement first our XI server need to coneect to the pre-approved client and the connectivity will happen to the vender server. He list the pre-approved client as below
*Cleo Lexicom 2.1
*TrailBlazer ZMOD FTP Client V3R1 PTF Level PFT3100034
*QualEDI for Windows, 32-bit version
*Ascential DataStage TX, Release 7.5
*Future 3 - Advanced Communication Module Plus (ACM Plus)
*eBridge FTPS Communicator for GXS version 5.3
*Ipswitch Inc's WS_FTP Professional version 8.02.
·Robo-FTP version 3.2
Please let me know will this be possible from our file adapter. Currently as per this requirement we open up the port of XI server for SFTP connecvity but through this we can have host to host connection over SFTP and not sure whether we can connect to client software and from their to vendor sever.
Kindly needful your suggestion/solution on this.
Regards,
Dhill

Hi,
Thank you, Yes I have used FTPS only please find the below details given in the communication channel.
<b>FTP Connection Parameters</b>
Server: ServerName
Port : 6366 (specified by vendor)
Data connection : Passive
Timeout(secs) : 65
Connection Security: FTPS (FTP Using SSL/TLS) for Control and Data Connection
Command Order: AUTH TLS, USER, PASS, PBSZ, PROT
Keystore: service_ssl
X-509 Certificate and Private Key: ssl-credentials
User Name : Vendor user name
Password: Vendor given password
Connect Mode: Permanantly
Transfer Mode: Text
Maximum Concurrency: 1
and also as per he list given by vendeor we can use *Ipswitch Inc's WS_FTP Professional version 8.02.
<b>Note:</b> We have Deploying the SAP Java Cryptographic Toolkit and also CA certificate used to sign the server certificate added to the TrustedCAs keystore view.
So If possible i request you to kindly provide the details how we need to specify the client software between our XI server and Vender server as you mentioned in your solution.
Please let me know your mail id, i will forward the screenshot of my communication channel.
Kindly appreciate your help on this.
Regards,
Dhill.

Using FTPAdapter over SSH

Dear all
I would like to use the FTPAdapter to send a file across to another server over FTPS (FTP over SSH).
I would be grateful is you could give me a hint or provide me with documentation.
Thanks in advance

Hi,
please search this forum:
Does BPEL FTP Adapter support secure FTP with SFTP utilizing SSH2 protocol?
or
the SOA Suite forum:
Help with ESB - FTP Inbound Adaptor - using SFTP

ADT hangs over ssh

I am putting the finishing touches on our build system and have run into a show stopper bug in ADT. It seems that ADT will not function propertly over ssh. When I issue my ADT package command remotely on my Mac OS X machine via ssh, ADT simply hangs forever.
The following are the errors I see on the Mac System Log:
com.apple.SecurityServer: Session 24524 created
naip: kCGErrorFailure: Set a breakpoint @ CGErrorBreakpoint() to catch errors as they are logged.
naip: _RegisterApplication(), FAILED TO establish the default connection to the WindowServer, _CGSDefaultConnection() is NULL.
And then nothing happens. Forever.
Looking on the remote system, I see that the ADT process has created 2 files and a directory in the output directory:
drwxr-xr-x 2 build staff 68 Jun 8 13:10 adt3612439737122910737.tmp
-rw-r--r-- 1 build staff 11553 Jun 8 13:10 air6133709946041732094.tmp
-rw-r--r-- 1 build staff 11553 Jun 8 13:10 air8135951800351503639.tmp
However, nothing else happens. The directory adt3612439737122910737.tmp is empty.
The ADT package command I am running is:
adt -package -storetype pkcs12 -keystore ../build/input/air/cert.p12 -storepass mypassword -tsa none -target bundle ../build/output/tmp/StoicAssetCompiler.mac.app ../build/output/tmp/EngineCompiler-app.xml -C ../build/output/app app.engine.compiler.swf
The command works perfectly when I execute it from a terminal session as the build user. However, any ssh session causes the adt program to hang forever.
Short version: How do I invoke ADT over ssh on Mac OS X?

Additional point of information:
There are 2 users involved here:
john
build
john is logged into a desktop session. john can run ADT from a terminal, or even from a terminal ssh-d back to localhost as john.
build can run ADT from a terminal su'd to build. build cannot run ADT in any ssh session, including one ssh'd from the su'd terminal that works otherwise.

SFTP over SSH

Is there a good Sun Guide onine that explains how to setup my Unix Solairs 10 system so I can SFTP using SSH from my Windows Clients to my Solairs Servers? Basically I can not use FTP so I understand their is a more secure what to transfer files so I'm assuming SFTP over SSH is the correct description.

Well, sftp is ran from within sshd, basically it runs an sftp command over an established ssh session, so i don't think you can prevent a user who can use sftp from using ssh.
I would think its enabled by default, if its not you can enable it by editing /etc/ssh/sshd_config
see 'man sftp-server', 'man sshd_config' as well as 'man sshd' for more details.
If your only goal is to have secure FTP-alike access to the system, you could look into FTPS, which is a more secure FTP which is separate from SSH.
AFAIK ftps is not supported by default in Solaris 10, but you can always download ProFTPD, which i used the last time i did something like this (which was a while ago). I recall ProFTPD being very reliable and easy to setup, and can definitely be setup in a way so it only allows the users to FTP securely into your system..
.7/M.

How to handle empty file using sftp adapter

Hi,
Please explain me how to handle empty files in sftp adapter.
Thanks,
Enivass

Hi Enivaas,
I don't have the seeburger sftp adapter at hand at the moment, but asfar as I remember, this does not specifically have an empty-file handling option like the standard ftp adapter.
So to stop emtyp files from being written, guess would need to handle this at the mapping level. For example, check for target creation criteria in the header node in mapping. If the creation criteria is not met, you can throw an error in mapping.
You may also incorporate this condition in your Receiver determination. In this case, if the condition is not satisfied, no receiver is determined in PI.
Regards

How to edit xml file particular value. and how to send xml file over ip address 192.168.2.10 using ftp

how to edit xml file particular value. and how to send xml file over ip address 192.168.2.10 device using ftp through Ethernet

Hello
For using FTP function in LabVIEW, I recommend you to check this document: FTP Basics
Also, take a look at FTP Browser.vi, which is available at the Example Finder.
To edit a XML file, try to use VIs in XML palette. Maybe Write to XML.vi helps you.
Post your current VI if possible.
Regards
Mondoni

How to handle FTP request in Servlet

Hi,
can anyone tell me how to handle FTP operations in Servlet? I mean to ask whether we can handle FTP request in Servlet.
Thanks
Subs

Your servlet should extend from GenericServlet and not HttpServlet to handle ftp requests.

How to configure SFTP Adapter in XI?

Hi All,
How to configure SFTP adapter in XI?, It would be great if anyone sends a step-by-step documentation on the same.
Thanks in advance

Hi,
About SFTP .
1) SFTP (Secure File Transfer Protocol)
"SSH File Transfer Protocol" or SFTP is a network protocol that provides file transfer and manipulation functionality over any reliable data stream. It is typically used with the SSH-2 protocol to provide secure file transfer. SFTP encrypts the session, preventing the casual detection of username, password or anything that is being transmitted. One key benefit to SFTP is its ability to handle multiple secure file transfers over a single encrypted pipe. By using a single encrypted pipe, there are fewer holes in the corporate firewall.
SFTP:
As per the latest SAP PI/XI support pack, it does not support SFTP via File Adapter.
So alternative approach to cater this requirement from XI is to make use of Unix Script at OS level to transfer the files from/to third-party systems.
Inbound Interface - i.e. third-party system ->XI->SAP:
File is transferred to a folder in SAP XI landscape from the third-party legacy system using UNIX Script with secured protocol. Once the file is ready in the XI landscape, File Adapter will poll this directory and file is picked up by NFS protocol.
Outbound Interface i.e. SAP->XI->third-party system:
XI is responsible for writing a file into a folder in the XI landscape. These files are transferred to the third-party system by executing UNIX scripts with secured protocol i.e. via sFTP.
Pre-Requisites:
Public key should be exchanged between external systems and the PI system.
UNIX shell script has to be developed and scheduled.
Advantages:
Highly Secured.
Ability to handle multiple secure file transfers over a single encrypted pipe .By using a single encrypted pipe, there are fewer holes in the corporate firewall.
Disadvantages:
Two-Step process i.e. XI>Temporary folder>External System and vice-versa
Files have to be temporarily stored in XI server.
Multiple failure points i.e. XI and Unix script execution
Maintenance of an external UNIX script.
Difficulty in monitoring the execution of the shell script as it cannot be monitored thru XI.
Need to generate keys and install it in the SFTP site as a pre-requisite i.e. SFTP clients must install keys on the server.
SFTP uses keys rather than certificates. This means that it can't take advantage of the "chains of trust" paradigm facilitated through Certificate Authorities.
Files from the XI server should be deleted/archived in a periodic manner to increase the disc space so that it will increase the performance.
Note: UNIX shell Script can be executed as a background job or' can be triggered from SAP XI through OS command at File adapter level.
Check the links.
Secure FTP (SSH) with the FTP Adapter
Secured File Transfer using SAP XI
Secure FTP in SAP XI
Regards,
Phani
Reward points if Helpful

How to handle SFTP (ftp over SSH)

Similar Messages

Maybe you are looking for