Mac Samba, Ftp and SFTP

Hello!
I have a question
I have a Lab (classroom) running Tiger 10.4.11, all machines has the same configurations and the same Users (an Admin User and "Limited User")they are configured to use ftp, but when the users connect via ftp they can get accesses a total local Volume.
and i need to know how can i restring the "Limited User" that only can get accesses their home?
Ok why ?
Because sometime they use "Transmit" and with transmit they can get accesses a total local Volume, of corse they don't has permission to delete or write on local volume, only in Home directory.
Is possible to restring the "Limited User" a their Home only?
Thanks!

BDAqua wrote:
Hi, not 100% certain, but possibly restricting with Sharepoints...
http://www.hornware.com/sharepoints/
thank for your answer!
But it´s not exactly that i want to do.
follow this link
http://www.sveinbjorn.org/macosxftpserverhowto
under the title "Configuring the FTP server" paragraph:
chroot
+Although this is adequately documented in the ftpd man page, it is worth discussing shortly: chroot-ing is a very important thing to do when providing a publicly accessible FTP server. If FTP users are chrooted, they will be unable to navigate the entire directory structure of the server. This is essential for security reasons.+

Similar Messages

Stetting up FTP and SFTP adapters for the same interface

Experts-
I have a situation in which client has a requirement to setup both FTP and SFTP adapters (from adapetive adapters) for the same interface. They want to have a copy of file locally and also want a file to be sent out securly using SFTP. In my interface which was previously developed they have used one business system and added FTP and SFTP to the same. If try to add new Receiver Agreement it will say that the object already exists as the Interface Mapping is same.
Please send me any suggestions which would resolve my problem

Hi Hari,
As you cannot create two Receiver agreement using only one receiver interface , please create a new receiver Interface, add that in interface determination step and then assing a different channel to new receiver agreement.
If your requirement is to store the file ,i would suggest write the file in your unix directory using NFS( /usr/sap...). then run a AFT job (if already set up in your landscape) to transfer file securly to target destination.Not sure if its feasible in your case otherwise you can use SFTP for the secure transfer.
Best Regards
Srinivas

FTPS and SFTP

hi, what is the difference between FTPS and SFTP and does XI support FTPS and SFTP. Please elaborate.
krishnan

Hi also have a look at this
if u want to view the difference between FTPS (that XI supports) and SFTP, please refer this link
http://www.enterprisedt.com/forums/viewtopic.php?p=136&sid=28d66491b43c6bf90448deea4936bc15
HTTPS / SFTP with XI
Hey have a look at the following also
http://en.wikipedia.org/wiki/FTPS
Thanks !!

FTPS and SFTP adapters

I am bit confused about all this B2B scenarios.
Our setup:
Existing
PI Server || firelwall || DMZ || Firewall -
> destination (abc company)
Proposed
PI Server || firelwall || DMZ Adapter Engine || Firewall -
> destination (abc company)
Flat file is in a folder - which has to be dropped to the destination. As we have port restriction in our firewall for PI for any ftp/ftps/sftp - we are planning to put Adapter engine in the DMZ.
Will this work?
Q1. To send a file on ftps - will we configure File sender adapter with certificates.
I am trying to install certificates on java stack it is looking for password for the private key but on ABAP stack it didn't ask for any key.
The abc company says it doesn't have any password. It could be a reason why https coud not drop files and now want to try ftps / sftp.
It is really frustrating to use PI for B2B. I will not recommend it again to any one. Thanks in advance.

Hi,
Flat file is in a folder - which has to be dropped to the destination. As we have port restriction in our firewall for PI for any ftp/ftps/sftp - we are planning to put Adapter engine in the DMZ.
Will this work?
Yes, this should work.
Q1. To send a file on ftps - will we configure File sender adapter with certificates.
Sender File Adapter? If you using J2SE AE, then from IE to AE, you will need receiver XI adapter. Check the Certificate Management in AE.
SFTP uses keys and not certificates. FTPS exchanges certificates.
It is really frustrating to use PI for B2B. I will not recommend it again to any one.
PI is a real robust tool for B2B integration. I guess, there are some flaws in the design, that's why you are feeling frustrated.
Hope this helps.
Regards,
Neetesh
Edited by: Neetesh Raj on Sep 16, 2009 8:46 AM

DW on Mac, CS3/CS5 using SFTP and/or FTP, need it secure!

Folks:
DW CS3 or CS5 running on an quad-Intel iMac, 10.6.4, connecting to a host that uses identical credentials for SFTP and FTP.
It's important to be assured that the connection is in fact secure.
If you set "connect using SFTP" will DW CS3 complain if the connection cannot be made securely? Will DW then default to ordinary, insecure FTP? If so, will DW inform you?   Is there an easy way of verifying the current connection mode, SFTP or FTP, within DW? (The FTP connection log does not say.) Is there an easy way of doing it in MacOS or with a simple utility? (Can be done, but not conveniently, with L'il Snitch.)
Is DW CS5 any different?
TIA,
hen3ry

Folks:
Problem solved.
It's clear that FTP and SFTP are fundamentally different protocols, but the DW protocol selection strongly implies similarity by offering SFTP as a minor option under the main selection of FTP.    I think it would be much clearer if SFTP were offered as a major option -- and then there would be an opportunity for offering SFTP options, too.
Here's a way of distinguishing which of these two is active: Connecting to the target site using FTP results in a succession of text entries in the optionally viewable FTP log -- no surprise.   I discovered that connecting to the same site with the same credentials and the addition of checking the "Use SFTP" option results in only line feeds --scrolling, but no visible text-- in the FTP log window. I guess that's a reasonable though a bit indirect way of informing users that the link is active and secure.   (What does one do to diagnose problems with SFTP for hosting services that don't support FTP? I don't know there are such services but it should be the great majority of them.) Works in DW CS3 but I didn't check CS5.
Another option, untested but fairly obvious: It's fairly easy these days to control host s/w (personal) firewalls -- even for low-tech users. Establish and verify a link to your server using SFTP, then disable FTP; the link should fail. And vice-versa. This meets my specification of "simple" and should be available with no extra expense and little trouble.
Brief Editorial: From the recent reading I've done on FTP versus SFTP, it is clear that the time to discontinue all support for FTP is long past.
hen3ry

Are "Back to My Mac" FTP and SSH services visible to "everyone"?

With the MobileMe "Back to my Mac" service, I can establish SSH terminal and SFTP connections from my Mac Mini at home to my Mac Pro at my work. The SSH (Remote Login) and SFTP (File Sharing) services are enabled under System Preferences --> Sharing.
Does this make the SFTP and SSH services on my Mac visible/accessible to anyone else? I like using "Back to my Mac" because it is simple and it uses key exchange for authentication when connecting. However, I'm concerned that by enabling the SFTP and SSH services under Sharing, I'm also opening these services up to anyone who can see them. Is this true, and if so, how can I maintain the security of my computers?
Thanks in advance,
jjw

OK, besides putting me to sleep, the BTMM description seems to indicate that it is your MobileMe password that is important when making BTMM connections through a home NAT router.
BTMM does open a port through the router, but if I understand correctly, it does not listen for ssh, or vnc, or afp protocols, but rather for the BTMM IPsec secure tunnel to be established, and then all the BTMM supported servers travel over the IPsec secure tunnel. NOTE: the paper was putting me to sleep, so I could have this wrong.
Kerberos is used for authentication of the IPsec tunnel.
What I'm thinking is that if your Mac stays behind a home NAT router, or corporate firewall (that allows BTMM to work), then the important password is your MobileMe password. If the Mac goes out in public, then all your Mac OS X user account (and guest) passwords need to be strong (where longer is better).
A GRC Shields-UP probe will not check all possible ports. If BTMM is running and all the standard ports are marked as stealth, then BTMM is using a non-standard port (as in one GRC does not check by default). That makes it more difficult for someone to find your NAT router and then your Mac. While this is NOT security, it does add some difficulty to the intruder's attempts at finding you.
AGAIN, I did not fully understand the BTMM paper, so "Your Mileage May Vary" with respect to my analysis acccuracy.

Mounting samba share starts avahi, ssh and sftp at client

The problem is at the client. When i mount a samba share (with # mount), avahi is started, which starts ssh and sftp. This is wrong on many levels.
Not sure how long this has been going on, someone else already asked this on stackexchange on 11.2.15, but didn't get any answers.
Journal output immediatly after mounting (hostname, ip etc. removed):
Mär 18 01:35:51 hostname dbus[434]: [system] Activating via systemd: service name='org.freedesktop.Avahi' unit='dbus-org.freedesktop.Avahi.service'
Mär 18 01:35:51 hostname systemd[1]: Cannot add dependency job for unit boot.automount, ignoring: Unit boot.automount is masked.
Mär 18 01:35:51 hostname systemd[1]: Listening on Avahi mDNS/DNS-SD Stack Activation Socket.
Mär 18 01:35:51 hostname systemd[1]: Starting Avahi mDNS/DNS-SD Stack Activation Socket.
Mär 18 01:35:51 hostname systemd[1]: Starting Avahi mDNS/DNS-SD Stack...
Mär 18 01:35:51 hostname avahi-daemon[2583]: Found user 'avahi' (UID 84) and group 'avahi' (GID 84).
Mär 18 01:35:51 hostname avahi-daemon[2583]: Successfully dropped root privileges.
Mär 18 01:35:51 hostname avahi-daemon[2583]: avahi-daemon 0.6.31 starting up.
Mär 18 01:35:51 hostname avahi-daemon[2583]: WARNING: No NSS support for mDNS detected, consider installing nss-mdns!
Mär 18 01:35:51 hostname dbus[434]: [system] Successfully activated service 'org.freedesktop.Avahi'
Mär 18 01:35:51 hostname systemd[1]: Started Avahi mDNS/DNS-SD Stack.
Mär 18 01:35:51 hostname avahi-daemon[2583]: Successfully called chroot().
Mär 18 01:35:51 hostname avahi-daemon[2583]: Successfully dropped remaining capabilities.
Mär 18 01:35:51 hostname avahi-daemon[2583]: Loading service file /services/sftp-ssh.service.
Mär 18 01:35:51 hostname avahi-daemon[2583]: Loading service file /services/ssh.service.
Mär 18 01:35:51 hostname avahi-daemon[2583]: Joining mDNS multicast group on interface enp1234.IPv4 with address myip.
Mär 18 01:35:51 hostname avahi-daemon[2583]: New relevant interface enp1234.IPv4 for mDNS.
Mär 18 01:35:51 hostname avahi-daemon[2583]: Network interface enumeration completed.
Mär 18 01:35:51 hostname avahi-daemon[2583]: Registering new address record for myip on enp1234.IPv4.
Mär 18 01:35:51 hostname avahi-daemon[2583]: Registering HINFO record with values 'X86_64'/'LINUX'.
Mär 18 01:35:52 hostname avahi-daemon[2583]: Server startup complete. Host name is hostname.local. Local service cookie is 123.
Mär 18 01:35:53 hostname avahi-daemon[2583]: Service "hostname" (/services/ssh.service) successfully established.
Mär 18 01:35:53 hostname avahi-daemon[2583]: Service "hostname" (/services/sftp-ssh.service) successfully established.

Thanks for your answer.
snakeroot wrote:Are you sure it is actually starting ssh and ssftp or is it just having avahi advertise them as existing?
I'm not sure if anything is started, the term "Service ssh successfully established" sounds like the ssh serrver is started to me, but it might just be strange wording. What does "advertise as existing" mean?
From the snippet you quoted, it looks like the latter. Unless you have alread started socket activation for ssh or sftp, whether via systemd *.socket or inetd, I'm not sure it would actually be started.
I didn't enable anything manually.
I think you can rm/mv the sftp-ssh.service and ssh.service files /etc/avahi/services/ and prevent those services from being advertised.
OK thanks for the hint. Nontheless i would rather stop avahi from starting than configuring it.
Begin rant...
I'm a bit annoyed that avahi is starting without my permission. Seems like systemd is getting a bit overzealous with starting services. Interestingly this was one of the big problems with upstart, and was supposed to be solved with systemd. I still like systemd.

What to use FTPS or SFTP and how?

Clent has send public key can be put it on FTPS (using it as Keystore)and use it and transfer of file take place or we have to go for SFTP i.e writing UNIX script and from PI application server we have to send.

Hey
You use FTPS(FTP with SSL encryption) when you need to transfer encrypted message.the channel via which you transfer the message can be a regular channel(like internet) but the message is encrypted by using various private.public key security algorithms.
You need to do FTPS and can follow the below article
https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/d024ca8e-e76e-2910-c183-8ea4ba681c51?overridelayout=true
SFTP(SSH with FTP) on the other hand needs a dedicated transfer channel,you connect to SFTP servers by logging to channels which protect any intrusion.to implement SFTP you need to buy third party adapters like SeeBurger or develop your own modules.You also need to buy license for FTP SSH server like FTP VAN,AS2 etc
So the bottom line is,in FTPS the payload is encrypted but the channel can be secure or regular channel(like internet) but in SFTP the channel itself is secure and only people who have access to it can transfer files over it.
Hope that helps
Thanks
Aamir
Edited by: Aamir Suhail on Jun 27, 2009 8:00 PM

Mac OS X and Debian Linux LAN research.

Mac OS X and Debian Linux LAN research.
I am currently doing the Google shuffle and am posting this to try to make sure I don't miss something important.
I recently expunged Windoze from the PC on my LAN and installed Debian Etch (testing, kernal 2.6.12-1-686, Gnome desktop) GNU Linux (I feel so much cleaner now My eventual goal is to do ObjC/Cocoa type cross-platform software development using GNUstep.
Preparation though involves getting the now isolated Linux box back on my LAN. Two considerations are file sharing (of course) and capturing system images of the Linux system in my Mac restoration strategy. On the Linux box one of my backup techniques is Mondo for bootable DVD system images, and the other is g4l (ghost for linux) with which I can clone to a local HD and/or image the Linux system to another system via ftp (vsftp suggested by g4l).
There are two internal 80GB HDs on the Linux box, and two internal 250GB HDs plus several external 250GB HDs (used for alternating clones) on my PMac G5.
I'm thinking NFS or ? and strictly avoiding Samba/NetWare/anything windoze related.
Any pointers and opinions would be greatly appreciated
Thank You,
Lee C
"The early bird may get the worm but the second mouse gets the cheese." -- Willie Nelson
See the article Backup::Restore.
Dual 2.5 Power Mac G5 Mac OS X (10.4.3)

Gary -- unfortunately, I am back, with memories fading as fast as my suntan.
Some remarks on NFS
OS X, like other unix operating systems, can function as both an NFS server and NFS client. Canonical unix systems permit the system administrator to configure this by editing two ascii text files. The file /etc/fstab controls what remote disks (i.e., those served by another machine) will be mounted, and the file /etc/exports controls what files will be served via NFS to other computers, and can restrict access according to the system administrators needs. All of this is true of OS X as well, except that the information from these ascii text files must somehow be transfered into the netinfo database, a peculiarly OS X construct. Fortunately, this can be accomplished without too much pain.
Mounting remote filesystems with NFS
To mount a filesystem from a remote NFS server, you need to do the following:
1. Create a mountpoint of your choosing. You can do this anywhere, but I find making a directory a the root level to be the most convenient. For example, lets say we want to mount two filesystems that are being exported from another computer called Simpson with the domain name simpson.springfield.org. Well assume it has the OS X filesystem structure, but any unix filesystem will behave analogously. The first filesystem we will want to mount will be the remote /Users directory, and the second will be /Volumes/Homer, as the computer simpson.springfield.org has a second hard-drive creatively named Homer. Hence we will create two mountpoint directories as follows: sudo mkdir -p /nfs_mountpoint/Simpson /nfs_mountpoint/Homer
2. Next we need to create the file /etc/fstab with the following two lines in it: simpson.springfield.org:/Users /nfs_mountpoint/Simpson nfs -P, -b 0 0 simpson.springfield.org:/Volumes/Homer /nfs_mountpoint/Homer nfs -P, -b 0 0 The first field is the domain name (it is safest to give the whole thing), and the second, separated by a colon, is the filesystem that has been exported. The third field is the corresponding mount point you just made, the fourth tells the system that this is an nfs device that is being mounted, and the remaining arguments control access and mounting protocols. man fstab for details. The disk is read/write accessible by default, but the users numerical uid (eg: 503) must be the same on both the host an client machine. (Be aware that if joe on the server has uid 503 and sarah on the client has uid 503, sarah will have read-write access to joes files!)5
3. Now read the information into the netinfo database. It is a good idea not to screw this up.
sudo niload -m -v fstab . < /etc/fstab
4. You can now mount the remote filesystems with the commands
sudo mount /nfs_mountpoint/Simpson
sudo mount /nfs_mountpoint/Homer
or to mount all at once, issue
sudo mount -a
Next time you reboot, the automounter and the NFS Startup Item will handle the mounting for you. I'll mention a couple of tweaks you might want to make in a moment, but first lets look at how to export a filesystem.
Exporting your filesystems with NFS
The previous section assumed your computer was a client machine. Now let's assume it is a server. Any machine can be both, so well export our filesystem /Users to the machine called Simpson for this example.
To export a filesystem, you need to do the following:
1. Get a static IP address for each of your NFS server machines, and a corresponding qualified domain name such as simpson.springfield.org that won't change.
2. Create a file called /etc/exports and put the following line into it:
/Users -maproot=nobody simpson.springfield.org
3. Reboot, or run the following commands as root or with sudo:
rm -f /var/db/mountdtab
mountd nfsd -t -u -n 6
This is more or less equivalent to issuing exportfs -a on other unix systems.
You've been served, as they say on British TV and in the grand jury subpoena business.
NFS Manager automates NFS exports and mounts
Another way of handling this, as Gary Mentioned, is to get ahold of NFS Manager, donation-ware that provides a convenient interface for setting up both NFS mounts and NFS exports. If you can live with automounter, which is on by default, this will get you going without complications within minutes. The documentation is superbly written.

Apple Remote Desktop vs. FTP vs SFTP vs PC

Complex one this, and its driving me mad - can anyone advise
Background: two small networks in different locations with different ISPs. Both behind routers. All necessary ports opened. The primary objective was to have access between two macs to allow Remote Control and file sharing via FTP or, better still, SFTP (using Transmit). Everything was fine and the Macs could connect to each other everywhich way.
Then I was forced to do a complete reinstall on one of the macs
Current situation: Remote Desktop continues to work fine both ways. The (Intel) Mac with the reinstall will only connect via SFTP (FTP times out). The other Mac will not communicate with the Intel Mac at all with either FTP or SFTP. But the PC alongside it will connect using FTP through the same router
Any clues?

Just had some success establishing the SFTP connections in both directions.
Trying to SFTP into the Intel mac here reported a message:
Aug 13 16:03:08 BigMac Fetch 5.2.1 (5C263): IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Aug 13 16:03:08 BigMac Fetch 5.2.1 (5C263): Someone could be eavesdropping on you right now (man-in-the-middle attack)!
Aug 13 16:03:08 BigMac Fetch 5.2.1 (5C263): It is also possible that the RSA host key has just been changed.
Aug 13 16:03:08 BigMac Fetch 5.2.1 (5C263): The fingerprint for the RSA key sent by the remote host is
Aug 13 16:03:08 BigMac Fetch 5.2.1 (5C263): xxxxxx (number deleted)
Aug 13 16:03:08 BigMac Fetch 5.2.1 (5C263): Please contact your system administrator.
Aug 13 16:03:08 BigMac Fetch 5.2.1 (5C263): Add correct host key in /Users/PP/.ssh/known_hosts to get rid of this message.
Aug 13 16:03:08 BigMac Fetch 5.2.1 (5C263): Offending key in /Users/PP/.ssh/known_hosts:1
Aug 13 16:03:08 BigMac Fetch 5.2.1 (5C263): RSA host key for xx.xx.xx.xx has changed and you have requested strict checking.
Aug 13 16:03:08 BigMac Fetch 5.2.1 (5C263): Host key verification failed.
I guess the host number changed as a result of the earlier system reinstall
Anyhow, I made hidden files visible using Tinker Tool, found the known_hosts file in the Home/.ssh folder - then deleted its contents on both machines
When I went to log on using SFTP in Fetch, there was a brief "are you sure" king of warning then it connected. This worked in both directions
Still can't get the FTP working in either direction though.
Trying to connect From the Intel to the Mac I get:
Fetch 5.2.1 (5C263): Fetch could not get the file list because data connections were blocked by both a firewall at the server and by the Mac OS X firewall. (Ask the server administrator to allow passive mode data connections through their firewall, or turn off the Mac OS X firewall in the Sharing pane of System Preferences.)
From Mac to Intel I get:
Fetch 5.2.1 (5C263): Fetch could not get the file list because the connection was refused. (Contact the server administrator for more information.)
Logs show that a communication is taking place between the computers, but the ipfw.log shows a "12190 Deny TCP" message

Network browsing with Samba, Linux and Windows

I'm having trouble with OSX 10.4.8 and a SMB network. My
server is running Linux Debian, and exporting shares via Samba.
I have a couple of XP boxes on the network, and they can see all the shares in the workgroup, and can mount them.
However, from the OSX machines, when I click on 'connect to server' and then click 'browse' I get an empty box.
If I enter the server share manually, (smb://server/share)I can mount it as normal.
Also, if I go to the terminal, smbtree shows the entire tree correctly (the same as viewed from XP). Also smbclient -L server shows a list of
all shares, and nmblookup returns correct data.
I can ping all the machines, and they are all on the same subnet.
I have recently done the following:
on the Linux Samba server:
set OS level to 255
set domain master yes
set local master yes
set wins support yes
preferred master yes
From the Windows machine I can see the whole network, including the Mac. I can also mount the user's home dir which is shared on the Mac.
From the Mac, I see nothing when I click 'browse' from 'connect to server', but still I can connect if I manually type the path. Notably, I cannot the Mac listed in it's own browse window.
From the Mac terminal I can see the whole network using smbtree, including the Mac and it's share.
The Mac smb.conf file sets the os level to 8, and wins server to the IP address of the Linux Samba server.
smbclient -L localhost -U also works, showing the local machine's NETBIOS name, and the shared home directory.
If I run nmblookup -M WORKGROUP, the master is reported as 192.168.168.2, correctly.
However, nmblookup -T 192.168.168.2 does not work. I don't know if it should.
Any help / suggestion would be appreciated.
Stuart
Mac Pro Mac OS X (10.4.8)

There's going to be something about that OS Level setting, I think.
Check your Mac's setting again (yours is 8, I see.)
Make Debian's OS Level not quite so high?
Disable mac's OS Level completely? (comment using semicolon)
Something
http://www.faqs.org/docs/securing/chap29sec284.html
remembering to restart samba server at mac and/or Linux after any changes to SMB.conf?
I'll keep looking. I run a similar network (Linux, Win x 7, Mac x 1) and it "Just Works"

FTPS or SFTP for file scenario. Suggstions

Hi,
I have searched blog in sdn but do not get good blogs/links.
For File scenario which to use FTPS or SFTP.
How to do the configuration in XI and Visual admin.
Full points will be awarded.

Hi,
1) SFTP (Secure File Transfer Protocol)
"SSH File Transfer Protocol" or SFTP is a network protocol that provides file transfer and manipulation functionality over any reliable data stream. It is typically used with the SSH-2 protocol to provide secure file transfer. SFTP encrypts the session, preventing the casual detection of username, password or anything that is being transmitted. One key benefit to SFTP is its ability to handle multiple secure file transfers over a single encrypted pipe. By using a single encrypted pipe, there are fewer holes in the corporate firewall.
SFTP:
As per the latest SAP PI/XI support pack, it does not support SFTP via File Adapter.
So alternative approach to cater this requirement from XI is to make use of Unix Script at OS level to transfer the files from/to third-party systems.
Inbound Interface - i.e. third-party system ->XI->SAP:
File is transferred to a folder in SAP XI landscape from the third-party legacy system using UNIX Script with secured protocol. Once the file is ready in the XI landscape, File Adapter will poll this directory and file is picked up by NFS protocol.
Outbound Interface i.e. SAP->XI->third-party system:
XI is responsible for writing a file into a folder in the XI landscape. These files are transferred to the third-party system by executing UNIX scripts with secured protocol i.e. via sFTP.
Pre-Requisites:
Public key should be exchanged between external systems and the PI system.
UNIX shell script has to be developed and scheduled.
Advantages:
Highly Secured.
Ability to handle multiple secure file transfers over a single encrypted pipe .By using a single encrypted pipe, there are fewer holes in the corporate firewall.
Disadvantages:
Two-Step process i.e. XI>Temporary folder>External System and vice-versa
Files have to be temporarily stored in XI server.
Multiple failure points i.e. XI and Unix script execution
Maintenance of an external UNIX script.
Difficulty in monitoring the execution of the shell script as it cannot be monitored thru XI.
Need to generate keys and install it in the SFTP site as a pre-requisite i.e. SFTP clients must install keys on the server.
SFTP uses keys rather than certificates. This means that it can't take advantage of the "chains of trust" paradigm facilitated through Certificate Authorities.
Files from the XI server should be deleted/archived in a periodic manner to increase the disc space so that it will increase the performance.
Note: UNIX shell Script can be executed as a background job or' can be triggered from SAP XI through OS command at File adapter level.
Secure FTP (SSH) with the FTP Adapter
Secured File Transfer using SAP XI
Secure FTP in SAP XI
SFTP (FTP over SSH) in XI
/people/krishna.moorthyp/blog/2007/07/31/sftp-vs-ftps-in-sap-pi
encryption adapters or how to secure data
/people/krishna.moorthyp/blog/2007/07/31/sftp-vs-ftps-in-sap-pi
Regards,
Phani
Reward points if Helpful

GPG and SFTP in PeopleSoft

I'm preparing a report on how to securely send files and documents to external partners. I have settled on running GPG and SFTP key authentication through command calls to the Batch UNIX server. Does anyone have any experience in setting this up directly in the web interface? I ask because if I understand correctly, OpenSSL is included in the Encryption pages as wellas glue for PGP. Thanks for any info.

For non-interactive sftp you'll have to set up authentication keys. For doing that I think you need openssh and not just openssl.
You can possibly call your sftp scripts with system calls from inside an app engine.
OR
Open up PeopleBooks and go to
PeopleBooks > Enterprise PeopleTools 8.49 PeopleBook: PeopleSoft Integration Broker > Using Listening Connectors and Target Connectors
and then scroll down to 'Working With the FTP Target Connector'

Conversion from FTP to SFTP

Hi All,
I am using a FTP connection interface...there is a new requirement from one of the customer to have SFTP(SSH FTP)..But the current version of PI i use doesn’t support SFTP….i am looking for alternative approach for making FTP as SFTP.
can any one help me.

Hi Naresh,
Which version of PI are you using?
The new secure connectivity Add-on is available for free.
New ADD-ONs (B2B and SFTP-PGP) for SAP NetWeaver Process Orchestration: Released and Available
You can check OSS note 1695563 to see if your version supports the new SFTP adapter. Maybe if it does not, you can consider upgrading to the latest SP in order to support it.
Rgds
Eng Swee

Can I transfer my CS5 files from my Windows 7 computer to my Mac Yosemite computer and have them work with CS6 for Mac?

I am using Dreamweaver CS5 on a Windows 7 laptop. I would like to change to Dreamweaver CS6 on my Mac running Yosemite. Can I transfer my CS5 files from the Windows computer to the Mac and will CS6 be able to work those files on the Mac? I do not need nor want a subscription account. Just the stand-alone program for occasional tweeks to my web site. at www.longwayhome.com.
It is a realtively simple web site that requires only simple editing from time to time.
Ed Dover

Yes, your files in CS5 are just .html, .css, .php and .js files, there's nothing that makes them "CS5 versions" of those file types.
You can do it a couple different ways, but the easiest would be to copy the folder being used as the root directory (and all of it's contents) from one machine to the other, then on the new machine, simply set up a new site definition, using that newly copied folder as the local root.
If you want, you can export your site settings (FTP and whatnot) on the old machine...
Go to Site > Manage Site> click the site you want > Export
Copy the resulting .ste file along with the local root folder to the new machine
On the new machine go to Site > Manage Sites > import to bring in the .ste
Relink that new site to the newly copied root folder

Mac Samba, Ftp and SFTP

Similar Messages

Maybe you are looking for