SFTP and passive mode

Hi All,
I have developed, SFTP for our project, I could not find if there is PASSIVE mode in SFTP, as in FTP. Can any one help me on this issue, if there is Passive mode then how to make it, if not why it does not have
Thanks,
Sreejesh
Edited by: sreejesh.pulukool on Aug 28, 2008 10:54 AM

Hi Mona:
If your FTP client works, then there has to be some miniscule detail that's different between that setup and what you're inputting into your DW Manage sites. Maybe you should print out your successful FTP setup details, and compare to what's in your DW...
If this helps, this info came from GoDaddy's help section:
From the Site menu, select Manage Sites.
In the Manage Sites box, Click New, then choose Site.
In the Site Definition box, enter the name and URL of your website and clickNext.
If a certain type of server technology is necessary for the site to function, selectyes. Otherwise, select no and click Next.
For working with files during development, select Edit local copies on my machine...(recommended). It is very important that they select this option.
Enter connection information as follows:
How do you connect to your remote server?
FTP
What is the hostname or FTP address of your web server?
ftp.domainname.com
What folder on the server do you want to store your files in?
/ or blank
Enter your FTP login and FTP Password
Click Next.
For checking in and out files, select No, do not enable..
Review the summary to be sure all information is accurate, then click Done.
I have a dozen sites hosted at GD, and in most cases (where I had trouble), it was operator error. Good luck!
Regards, Ned

Similar Messages

IDSM-2, inline and Passive mode in same Module?

Hi,i have a question that it can be strange.in our network we have implemented idsm-2 module in our 6513 Switch in inline mode.without any discution about network design suppose that our network is going beyond IDSM-2 Throughput and then we want to use IDSM-2 for some traffic in Passive mode insted of inline to reduce drop probability in inline mode.i mean before this state we were using idsm-2 data port 1(in vlan pair mode),now can we use data port 2 for this purpus(capturing some traffic on data port 2 for passive operation)? in other word idsm-2 can operate in this way?

i found my answer in idsm-2 document "You can mix sensing modes on IDSM-2. For example, you can configure one data port for promiscuous mode and the other data port for inline VLAN pair mode. But because IDSM-2 only has two data ports and inline mode requires the use of both data ports as a pair, you cannot mix inline mode with either of the other two modes." but something else,for doing such thing suppos that i have sig 2004 configured for inline traffic to deny attacker inline then this action doesnt make any sense for some data in passive mode and suppos that for that kind of traffic which idsm-2 is operating in passive mode i want to just send an alert. so can i use deferent VS for doing this? thanks.

SAP XI support SFTP and FTPS?

Hi Gurus,
I would like to find out if SAP XI supports both SFTP and FTPS. If yes, how do I perform the configuration?
Thanks in advance.

Business Case:
In many implementations Business requirement is to "secure" the file/data transfer between XI and any third-party system. So there is a need of secured connection between XI/PI and any file based third-party legacy systems.
Following solutions are proposed to cater secure connection between XI/PI and any third party systems.
1) SFTP (Secure File Transfer Protocol)
"SSH File Transfer Protocol" or SFTP is a network protocol that provides file transfer and manipulation functionality over any reliable data stream. It is typically used with the SSH-2 protocol to provide secure file transfer. SFTP encrypts the session, preventing the casual detection of username, password or anything that is being transmitted. One key benefit to SFTP is its ability to handle multiple secure file transfers over a single encrypted pipe. By using a single encrypted pipe, there are fewer holes in the corporate firewall.
2) FTPS (FTP over SSL)
FTPS (FTP-SSL) is a real ftp that uses TSL/SSL to encrypt the control session and if required the data session. With FTPS, the control session is always encrypted, but the data session may not be always encrypted. FTPS is a file transport layer on top of SSL. SSL, or Secure Sockets Layer, is a method by which an encrypted u2018pipe' or tunnel is established between the FTP client and FTP server. Once the secure tunnel has been established (which is done using 128-bit encryption techniques), standard FTP is used to transfer data over the secure connection.
Feasibility of SFTP and FTPS in XI:
SFTP:
As per the latest SAP PI/XI support pack, it does not support SFTP via File Adapter.
So alternative approach to cater this requirement from XI is to make use of Unix Script at OS level to transfer the files from/to third-party systems.
Inbound Interface - i.e. third-party system ->XI->SAP:
File is transferred to a folder in SAP XI landscape from the third-party legacy system using UNIX Script with secured protocol. Once the file is ready in the XI landscape, File Adapter will poll this directory and file is picked up by NFS protocol.
Outbound Interface u2013 i.e. SAP->XI->third-party system:
XI is responsible for writing a file into a folder in the XI landscape. These files are transferred to the third-party system by executing UNIX scripts with secured protocol i.e. via sFTP.
Pre-Requisites:
Public key should be exchanged between external systems and the PI system.
UNIX shell script has to be developed and scheduled.
Advantages:
Highly Secured.
Ability to handle multiple secure file transfers over a single encrypted pipe .By using a single encrypted pipe, there are fewer holes in the corporate firewall.
Disadvantages:
Two-Step process i.e. XI>Temporary folder>External System and vice-versa
Files have to be temporarily stored in XI server.
Multiple failure points i.e. XI and Unix script execution
Maintenance of an external UNIX script.
Difficulty in monitoring the execution of the shell script as it cannot be monitored thru XI.
Need to generate keys and install it in the SFTP site as a pre-requisite i.e. SFTP clients must install keys on the server.
SFTP uses keys rather than certificates. This means that it can't take advantage of the "chains of trust" paradigm facilitated through Certificate Authorities.
Files from the XI server should be deleted/archived in a periodic manner to increase the disc space so that it will increase the performance.
Note: UNIX shell Script can be executed as a background job u2018or' can be triggered from SAP XI through OS command at File adapter level.
FTPS (File Transfer Protocol Using SSL/TLS):
This is a built-in feature of File adapter in XI. But SAP Java Cryptographic Toolkit must be deployed as a prerequisite. (Refer to note https://service.sap.com/sap/support/notes/821267 Question 28). By default following ports are used:
Implict FTPs 990 (Control) and 989 (Data)
Explicit FTPs 21 (Control) and 20 (Data)
Both use cases can be combined with active and passive mode.
Advantages:
Direct transfer of files to/from third-party systems. It is not required to store the files in the XI server temporarily.
Built-In feature from XI File adapter
No extra effort in development and maintenance of Unix Script.
Centralized Monitoring tool from XI
FTPS uses certificates and therefore can take advantage of "chains of trust" paradigm facilitated through Certificate Authorities. This paradigm makes it possible for two entities to establish a trust relationship without directly exchanging security information, which is important for some applications.
Disadvantages:
Requires opening multiple ports forenabling SSLin the firewall. So there are multiple holes in the corporate firewall.
Not every FTP server supports FTPS and many that do, require a configuration change to activate the FTPS protocol extension.
Cryptographic toolkit should be installed in XI system though it is not very complex or expensive.
Conclusion:
Though SFTP seems more secure as it works through one port, FTPS is easier to configure, monitor and maintain from XI point of view. However, the decision depends on many parameters like, cost/effort, flexibility in use, ease of maintenance, company security policy, failure possibilities etc.
regards
kummari

Proftpd and filezilla not usable on Solaris 11 in passive mode

Having problems with proftpd on Solaris 11 and wondering if anyone else has noticed this?
The clients are Windows & filezilla!
I have not changed any settings and just started svc:/network/ftp:default and I have noticed I am getting a lot of timeouts on file transfers. Getting this a lot on NFS (ZFS with ACLs) file systems and even on local file systems (less often, but fails when transfer many files).
What makes it worst is that the file starts to be written to disk but with size 0 and after the timeout filezilla starts again and a popup appears saying file exists??
I am getting over it by switching off "passive mode" in /etc/proftpd.conf and then it works fine!
# Disable Extended Passive mode
<Limit EPSV PASV>
DenyAll
</Limit>
And before any ones asks no firewalls on network or client!
Any pointers?
Andrew

Strange think is that I just tried a Solaris 11.1 system and it works with out any problem.
So something has been fixed in Solaris 11.1.
It is the same version of proftpd so I guess something has changed else where to help with my problem.
Anyway, will do some more testing before upgrading my FTP server, but it looks like good news.
Andrew

Problem with passive mode FTP server and NAT

Hi,
I have a problem with Passive mode FTP and NAT.
I am trying to run both an FTP server and sharing the Internet connection via NAT. I have by the way specified the passive ports to use in ftpaccess (65000-65534). Everything works fine until someone tries to connect via Passive mode. I have tracked the problem down to the firewall and the rule that handles NAT.
Firewall rule config without NAT:
00001 allow udp from any 626 to any dst-port 626
01000 allow ip from any to any via lo0
12300 allow ip from any to any
65535 allow ip from any to any
Firewall rule config with NAT
00001 allow udp from any 626 to any dst-port 626
00010 divert 8668 ip from any to any via en1
01000 allow ip from any to any via lo0
12300 allow ip from any to any
65535 allow ip from any to any
So, passive ports do not work when NAT is on. If I turn it off, Passive ftp works like a charm.
But how do I solve my problem? I have in my quest for the answer stumbled upon "-punch_fw" but do not know how to use it or if it even helps me at all?
Best regards,
Peter
B&W G3 Mac OS X (10.4.5)

Media/Lacrosse-1-tiny.3gp
I can't find the file on your server.
They may also need to edit the .htaccess file to allow the .3gp file extension be used. Call them.

Read file from FTP server (passive mode)

HI,
I want to read a file from a ftp server. I can do it by OpenStream() and read the file contents as a stream. But the ftp account is set as "PASSIVE Mode", so how to set it to passive mode and access the file ? Any thoughts?
Thanks,
thb.

Hi,
Thanks for your speedy response. How to set the PASV parameter, with the InputStream reader. Currently I am reading a file that is active thru. flg. steps.
InputStream is = new URL("url").openStream();
BufferedReader in = new BufferedReader(new InputStreamReader(is));
Then, I am writing the stream contents to a file. So how to set up the PASV parameter?
Thanks.

Oracle 10g Database Installation In Active-Passive Mode.

Good Afternoon !!!!
We are installing Oracle 10g in Active-Passive Mode on HP UX-11.3 , with ASM. Can someone help me with step wise installation procedure for the same.
Many Thank's
Rajeev.

Check on the release notes for your platform
This is for x86-64 Linux.. read it all, then you'll find the "6 Documentation Corrections and Additions" section you'll find the RPMs that you need
http://download.oracle.com/docs/cd/B19306_01/relnotes.102/b15666/toc.htm
then go to the official doc installation of 10gR2 on x86-64 Linux
http://download.oracle.com/docs/cd/B19306_01/install.102/b15667/toc.htm
Yum is a package management tool. This is what you'll be using to install the RPMs. But first you'll have to setup the Yum repository, usually what I do is stage the DVD media on the server then make it as a repository. If ever there's a specific (higher) version that I need then I just pull it on the RedHat Network.
There are a lot of HOWTOs about Yum. You may read on this link http://docs.fedoraproject.org/yum/en/
- Karl Arao
http://karlarao.wordpress.com/

WLC RADIUS Server Failover - Passive mode timer

In 7.2 WLC code, it appears it is now possible to specify which RADIUS servers are used as the preferred server for authentication (
Security > AAA > RADIUS > Fallback to open the RADIUS > Fallback Parameters ).
There are 3 mode for this: off, passive & active.
In the passive mode, the operation is described in the config guide as :
Passive
—Causes the controller to revert to a server with a lower priority from the available backup servers without using extraneous probe messages. The controller ignores all inactive servers for a time period and retries later when a RADIUS message needs to be sent.
Does anyone know how long this 'time period' is? If it is only a few seconds, then it could be that user authentications are being used to test against a failed RADIUS server frequently & will experience annoying time-out delays, causing support calls etc.
Anyone know what it is, or if its configurable? I don't see anything in the docs...
Nigel.

Here you go.
RADIUS Server Fallback Feature on WLC.
http://www.cisco.com/en/US/products/ps6366/products_configuration_example09186a008098987e.shtml#passive

Passive Mode

Most sites require passive mode. I does iweb handle this requirement?
jmf

I know from all the other connection programs I have that I need to choose passive mode to make a connection to my site, and I'm thinking that this is why I web will not connect.
Perhaps someone will come along who knows for sure that his account needs passive and iWeb does work. There's someone in this thread who thinks passive may be the problem:
http://forums.macrumors.com/showthread.php?t=641943

The remote server returned an error: 227 Entering Passive Mode (201,199,193,165,154,52).

Hi I have a problem
The remote server returned an error: 227 Entering Passive Mode (201,199,193,165,154,52).
I dont knoe how to solve it

Hi,
Please see the following links and try the methods to check if they are helpful:
http://geekswithblogs.net/hmloo/archive/2012/10/16/the-remote-server-returned-an-error-227-entering-passive-mode.aspx
http://social.msdn.microsoft.com/Forums/en-US/0128e595-c8e2-4f5e-9426-fd93eb510cab/the-remote-server-returned-an-error-227-entering-passive-mode-67228534212130?forum=netfxnetcom
Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.
Then, it is not a Microsoft Office issue, you'd better post your question to MSDN forum:
http://social.msdn.microsoft.com/Forums/en-US/home?forum=netfxnetcom
Regards,
George Zhao
TechNet Community Support

DW on Mac, CS3/CS5 using SFTP and/or FTP, need it secure!

Folks:
DW CS3 or CS5 running on an quad-Intel iMac, 10.6.4, connecting to a host that uses identical credentials for SFTP and FTP.
It's important to be assured that the connection is in fact secure.
If you set "connect using SFTP" will DW CS3 complain if the connection cannot be made securely? Will DW then default to ordinary, insecure FTP? If so, will DW inform you?   Is there an easy way of verifying the current connection mode, SFTP or FTP, within DW? (The FTP connection log does not say.) Is there an easy way of doing it in MacOS or with a simple utility? (Can be done, but not conveniently, with L'il Snitch.)
Is DW CS5 any different?
TIA,
hen3ry

Folks:
Problem solved.
It's clear that FTP and SFTP are fundamentally different protocols, but the DW protocol selection strongly implies similarity by offering SFTP as a minor option under the main selection of FTP.    I think it would be much clearer if SFTP were offered as a major option -- and then there would be an opportunity for offering SFTP options, too.
Here's a way of distinguishing which of these two is active: Connecting to the target site using FTP results in a succession of text entries in the optionally viewable FTP log -- no surprise.   I discovered that connecting to the same site with the same credentials and the addition of checking the "Use SFTP" option results in only line feeds --scrolling, but no visible text-- in the FTP log window. I guess that's a reasonable though a bit indirect way of informing users that the link is active and secure.   (What does one do to diagnose problems with SFTP for hosting services that don't support FTP? I don't know there are such services but it should be the great majority of them.) Works in DW CS3 but I didn't check CS5.
Another option, untested but fairly obvious: It's fairly easy these days to control host s/w (personal) firewalls -- even for low-tech users. Establish and verify a link to your server using SFTP, then disable FTP; the link should fail. And vice-versa. This meets my specification of "simple" and should be available with no extra expense and little trouble.
Brief Editorial: From the recent reading I've done on FTP versus SFTP, it is clear that the time to discontinue all support for FTP is long past.
hen3ry

IDSM-2 and inline mode

Hello
I have a question about IDSM-2 (in catalyst 6500) and ips 6.0.3 and inline mode. I wanted to create vlan groups, so i could have inline ips with many virtual sensors for subinterfaces (vlans range).
I tied to:
set trunk 5/7 1-4095 (on swith)
set trunk 5/8 1-4095 (on swith)
and in IDSM-2 in CLI:
i created inline interface (using 5/7 and 5/8 ports), but after that i could not create in physical interface vlan groups. Why ?
How can i make my IDSM-2 card working inline with many virtual sensors (policies) per different vlans ?

i found my answer in idsm-2 document "You can mix sensing modes on IDSM-2. For example, you can configure one data port for promiscuous mode and the other data port for inline VLAN pair mode. But because IDSM-2 only has two data ports and inline mode requires the use of both data ports as a pair, you cannot mix inline mode with either of the other two modes." but something else,for doing such thing suppos that i have sig 2004 configured for inline traffic to deny attacker inline then this action doesnt make any sense for some data in passive mode and suppos that for that kind of traffic which idsm-2 is operating in passive mode i want to just send an alert. so can i use deferent VS for doing this? thanks.

Error while disabling passive mode while connecting

Hi,
I am trying to connect to FTP server, however when I DO NOT
check the "Disable passive mode" check box, I am able to connect,
but then I am not able to view the files that are directly in the
directory. for .eg. if within "MyDir" directory there are "MyDir1",
"MyDir2" directories and "MyFile1" and "MyFile2" files, then I will
not see "MyFile1" and "MyFile2". However when I try to connect by
checkinig the option of "Disable passive mode" then I get the error
"Access violation at address 004ED037 in module 'homesite45.exe'.
Read of address 00000014."
I am not able to resolve this issue. Pls give some inputs if
nebody knows abt it.

Hi,
I am trying to connect to FTP server, however when I DO NOT
check the "Disable passive mode" check box, I am able to connect,
but then I am not able to view the files that are directly in the
directory. for .eg. if within "MyDir" directory there are "MyDir1",
"MyDir2" directories and "MyFile1" and "MyFile2" files, then I will
not see "MyFile1" and "MyFile2". However when I try to connect by
checkinig the option of "Disable passive mode" then I get the error
"Access violation at address 004ED037 in module 'homesite45.exe'.
Read of address 00000014."
I am not able to resolve this issue. Pls give some inputs if
nebody knows abt it.

Can't connect to ftp servers with Passive Mode

Hello,
I can't connect to ftp servers with Passive Mode.
I have Linksys WRT54GL.
Msg i have:
[R] 200 PORT Command successful.
[R] LIST -al
[R] 150 Opening ASCII mode data connection for /bin/ls.
[R] 426 Data connection closed, transfer aborted.
[R] List Error
and:
[R] 200 Type set to A.
[R] MODE Z
[R] 200 MODE Z ok.
[R] PASV
[R] 227 Entering Passive Mode (*,*,114,11,8,147)
[R] Opening data connection IP: *.*.114.11 PORT: 2195
[R] Data Socket Error: Connection timed out
[R] List Error
Thanks for the help !

Maybe you need to do Port Forwarding on your router...Check for the Port Numbers for your FTP Server...

FTP Client can not make a Data connection in Extened Passive Mode

When i send the command "EPSV" to the FTP server , it reply with the message :
229 Entering Extened Passive Mode (|||60238|)
It seems the Server accept Extended Passive Mode.
But then i send the LIST command to the server , after a few seconds i got an exception :
java.Net.ConnectException : Connection timed out : connect
In my Java Program, after sending the "EPSV" command to the server and receiving the port number, my program then initiate a data connection by calling : Socket dataConnection = new Socket(serverHost,serverPort) , serverHost is the host of the FTP server, and serverPort is the port that the server send me.
I think the problem here is that the initiate of data connection is failed. But i dont know why.
Can anyone explain for me ? I really appreciate.

You may be a newbie, but at least your questions are intelligent.
Abstracting the network part - yes, this can be done, but you should keep in mind that the VI will still be running on the remote target, so you should not use this to plug directly into your RT code. In these cases, a communication module is very good because it decouples the undeterministic comm from the RT code. You can do this either using a protocol, as you mentioned, or by calling the VIs running on the cFP. For example, a VI could be used as a repository by having an uninitialized shift register which maintains its value between runs (this is known as a LV2-style global) - the cFP app will write values into it and the PC app will read values from it.
To do this, you open a reference to the application running on the cFP and then you call VIs dynamically by name. By using the Call by Reference Node you can call the VI and use its connectory pane. All the primitives you need are in the Application Control palette and you should be able to find some examples in the example finder (Help>>Find Examples) by searching for "dynamic" and other similar terms. Attached is a simpified example.
To transfer data in a real-time target, I believe your best bet would be RT FIFOs.
To learn more about LabVIEW, I suggest you try searching this site and google for LabVIEW tutorials. Here, here, here, here, here and here are a few you can start with and here are some tutorial videos. You can also contact your local NI office and join one of their courses.
In addition, I suggest you read the LabVIEW style guide and the LabVIEW user manual (Help>>Search the LabVIEW Bookshelf).
You should also follow the online communities (this one, the LAVA forums, Info LabVIEW).
Try to take over the world!
Attachments:
Comm Demo.llb ‏63 KB

SFTP and passive mode

Similar Messages

Maybe you are looking for