SSl and FTP

Hi All,
I am using apache's commons net for my FTP client program. I have no problems with that. Now how can i also add the SSL into this program. I am completely new with JSSE.
Please provide me with pointers.
Thank you
Pradeep

http://forum.java.sun.com/thread.jspa?threadID=666870
see the fourth reply by harmmeijer. He has given a complete SSL enabled Http server and client. Also many links are given at the end of the page.

Similar Messages

Java Client FTP with ssl and fxp

Hy, I make java ftp client that supports ssl and fxp. I found for ssl something but nothing for fxp. Do you have any information for me regarding java and fxp?
Best regards

is this going over the internet, a private connection. a vpn over the internet? are there any logs that show any ftp error codes? if there is a firewall in play, does it show any logs on this connection?

SAP XI support SFTP and FTPS?

Hi Gurus,
I would like to find out if SAP XI supports both SFTP and FTPS. If yes, how do I perform the configuration?
Thanks in advance.

Business Case:
In many implementations Business requirement is to "secure" the file/data transfer between XI and any third-party system. So there is a need of secured connection between XI/PI and any file based third-party legacy systems.
Following solutions are proposed to cater secure connection between XI/PI and any third party systems.
1) SFTP (Secure File Transfer Protocol)
"SSH File Transfer Protocol" or SFTP is a network protocol that provides file transfer and manipulation functionality over any reliable data stream. It is typically used with the SSH-2 protocol to provide secure file transfer. SFTP encrypts the session, preventing the casual detection of username, password or anything that is being transmitted. One key benefit to SFTP is its ability to handle multiple secure file transfers over a single encrypted pipe. By using a single encrypted pipe, there are fewer holes in the corporate firewall.
2) FTPS (FTP over SSL)
FTPS (FTP-SSL) is a real ftp that uses TSL/SSL to encrypt the control session and if required the data session. With FTPS, the control session is always encrypted, but the data session may not be always encrypted. FTPS is a file transport layer on top of SSL. SSL, or Secure Sockets Layer, is a method by which an encrypted u2018pipe' or tunnel is established between the FTP client and FTP server. Once the secure tunnel has been established (which is done using 128-bit encryption techniques), standard FTP is used to transfer data over the secure connection.
Feasibility of SFTP and FTPS in XI:
SFTP:
As per the latest SAP PI/XI support pack, it does not support SFTP via File Adapter.
So alternative approach to cater this requirement from XI is to make use of Unix Script at OS level to transfer the files from/to third-party systems.
Inbound Interface - i.e. third-party system ->XI->SAP:
File is transferred to a folder in SAP XI landscape from the third-party legacy system using UNIX Script with secured protocol. Once the file is ready in the XI landscape, File Adapter will poll this directory and file is picked up by NFS protocol.
Outbound Interface u2013 i.e. SAP->XI->third-party system:
XI is responsible for writing a file into a folder in the XI landscape. These files are transferred to the third-party system by executing UNIX scripts with secured protocol i.e. via sFTP.
Pre-Requisites:
Public key should be exchanged between external systems and the PI system.
UNIX shell script has to be developed and scheduled.
Advantages:
Highly Secured.
Ability to handle multiple secure file transfers over a single encrypted pipe .By using a single encrypted pipe, there are fewer holes in the corporate firewall.
Disadvantages:
Two-Step process i.e. XI>Temporary folder>External System and vice-versa
Files have to be temporarily stored in XI server.
Multiple failure points i.e. XI and Unix script execution
Maintenance of an external UNIX script.
Difficulty in monitoring the execution of the shell script as it cannot be monitored thru XI.
Need to generate keys and install it in the SFTP site as a pre-requisite i.e. SFTP clients must install keys on the server.
SFTP uses keys rather than certificates. This means that it can't take advantage of the "chains of trust" paradigm facilitated through Certificate Authorities.
Files from the XI server should be deleted/archived in a periodic manner to increase the disc space so that it will increase the performance.
Note: UNIX shell Script can be executed as a background job u2018or' can be triggered from SAP XI through OS command at File adapter level.
FTPS (File Transfer Protocol Using SSL/TLS):
This is a built-in feature of File adapter in XI. But SAP Java Cryptographic Toolkit must be deployed as a prerequisite. (Refer to note https://service.sap.com/sap/support/notes/821267 Question 28). By default following ports are used:
Implict FTPs 990 (Control) and 989 (Data)
Explicit FTPs 21 (Control) and 20 (Data)
Both use cases can be combined with active and passive mode.
Advantages:
Direct transfer of files to/from third-party systems. It is not required to store the files in the XI server temporarily.
Built-In feature from XI File adapter
No extra effort in development and maintenance of Unix Script.
Centralized Monitoring tool from XI
FTPS uses certificates and therefore can take advantage of "chains of trust" paradigm facilitated through Certificate Authorities. This paradigm makes it possible for two entities to establish a trust relationship without directly exchanging security information, which is important for some applications.
Disadvantages:
Requires opening multiple ports forenabling SSLin the firewall. So there are multiple holes in the corporate firewall.
Not every FTP server supports FTPS and many that do, require a configuration change to activate the FTPS protocol extension.
Cryptographic toolkit should be installed in XI system though it is not very complex or expensive.
Conclusion:
Though SFTP seems more secure as it works through one port, FTPS is easier to configure, monitor and maintain from XI point of view. However, the decision depends on many parameters like, cost/effort, flexibility in use, ease of maintenance, company security policy, failure possibilities etc.
regards
kummari

Contribute 6.5 and FTP

Do any versions of Contribute support FTP over SSL (FTPES)
One of our customers cannot connect to our servers using Contribute CS3 because it doesn't support this. They can warrant the upgrade cost should this be supported.
Thanks
Alex
Edit: Sorry, yes, I have looked around the site and forums. I couldn't find much useful information, other than CS3 doesn't support it.

What's the difference between FTPS and FTP? Would that cause a problem w/ my server connection? I'm trying to connect to my website and it says, "the server is down."

Diference between SCP and FTPS

Hi, people,
Some know the diference between SCP and FTPS because I need to make a connection in one interface and I need to know the diference.
Thanks!!

Hi,
have a look at this page:
http://geekswithblogs.net/bvamsi/archive/2006/03/23/73147.aspx
and check sections:
FTPS (FTP-SSL)
and
SCP (Secure Copy)
Regards,
michal

Is SSL and multiple websites possible with Lion Server?

this is the obligatory apology from a nub here....
I have not been a sys admin since the days of NT 4.0.
I like to think that "hey, i might need a touch up here and there, but I think I can find my way around..." Wrong.
I have been searching, and reading and searching and reading, and trying everything I can think of.. and I CAN NOT figure out how to get mutliple websites working with Lion Server, using self signed certs 1 for each of my subdomains.
Has anyone, anywhere (thank you google for returning searches to me from 2004?!?! More puzzled confusion....) posted a step by step guide yet???
I have a mac mini, and I have two domain names that are resolving to my exterinal interface on my router just fine, and I have tried what I thought was
every different possible combination of voodoo, magic, 00000...MoreTestingNeeded.conf, and all the other tricks.
Is it possible to get ssl and multiple websites working with one IP address?
Thanks...

Thank you very much for your time and input. My birthday was fantastic! Thanks for asking.
I found out about SNI while researching an error I was getting in the log. I really never found any definitive "this is what you need to do", so I was going to get back to it later.
You probably know this, but Lion Server breaks out all of the virtual hosts into seperate documents in the "sites" directory. All I do is I launch the server.app, and in the web component, I enter the name of the website that I want to resolve to my server, and I give it the path to the docs. Thats it. There is no DNS configuration to speak of, on my part, and I don't believe that its necessary (?) to touch the httpd.conf file at this point yet either, even though I think I hear others saying you do. (I have no issues with getting into the file and making any changes, I just thought it was interesting.)
I am still trying to figure out how a user is supposed to add any other types of services LIKE ftp, etc. I know and use the server admin tools, but I have found that the app really does do its job in terms of creating all the dns records for resolving the sites you create. I sure hope its not just using the host file, is it? I never see any additional files in the DNS manager, for any of the subdomains. Where are they?
Here is the contents of what appears to be the first file read, that is for SSL enabled sites:
``````````````````````````````````````````````````````````````````
This is "0000_any_443.conf:"
`````````````````````````````````````````````````````````````````
## Default Virtual Host Configuration
NameVIrtualHost *:443
<VirtualHost *:443>
ServerAdmin [email protected]
DocumentRoot "/path/to/the/docs"
DirectoryIndex index.html index.php /wiki/ default.html
CustomLog "//log" cmbndvhst
ErrorLog "/"
<IfModule mod_ssl.c>
SSLEngine On
SSLCipherSuite "SOMEGARBAGEIDONTKNOWIFISHOULDSHAREORWHAT"
SSLProtocol -ALL +SSLv3 +TLSv1
SSLProxyEngine On
SSLCertificateFile "/sslcerts/certs/*.DOMAIN.COM.XXXXXXXXXXXXXXXXXXXXXXXXXXXX.cert.pem"
SSLCertificateKeyFile "/sslcerts/certs/*.DOMAIN.COM.XXXXXXXXXXXXXXXXXXXXXXXXXXX.key.pem"
SSLCertificateChainFile "/path/*.DOMAIN.COM.XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX.chain.pem"
SSLProxyProtocol -ALL +SSLv3 +TLSv1
</IfModule>
<Directory "/Path/To/The/Docs/XXXX/SDFSDD">
Options All +MultiViews -ExecCGI -Indexes
AllowOverride None
<IfModule mod_dav.c>
DAV Off
</IfModule>
</Directory>
Include /httpd_passwordreset_required.conf
</VirtualHost>
```````````````````````````````````````````````````````````````````````````````` `````````````
So.. my questions are:
Where in the .confs do I add what I need from your above items? Would it go each of the site docs that I need? I am really not sure what apple is doing here.
I have 4 domain names resolving to my server right now, and subdomains to each of the domains. So there are a total of about 10 "site" docs, not a big deal to change each, I just wonder if Lion overwrites these docs with each refresh or what? Also, If I try to add a third .com right now it breaks the whole site.
(Out of conversation, but I just remembered this. I just had to "quit" out of the server.app.) When installing the directory server, it hangs on "getting certificates". The spinning wheel (not the rainbow collered one, but the black one by the words "Getting Certificates") just sits there and spins. I finally just hit the red X and relaunch server.
Lastly, you meniton importing the key. I am using the key manager within the server app. I am not sure where and how I would make the cert and key you are referring to for the importing? I have tried to use the key manager in the OS, but I am not sure of the relationship between that key manager app, and the key manager within the server.app. I have tried to create certs in the keymanager in the OS side, but I do not know how to get them to show up for use in the keymanager in the server.app.
BTW: Thanks. Thanks for the help. I really appreciate it.

How do I bind to directory server with SSL and authentication?

I'm running Lion Server 10.7.3, Open Directory master. In Open Directory/Settings/LDAP, I've checked the box to Enable SSL and selected a (self-signed) certificate. In Policies/Binding, I've checked the box to Enable Authenticated Directory Binding.
Testing with a client computer on which Snow Leopard has been freshly installed and fully updated, I went to System Prefs/Accounts to bind to the new directory server. The good news is, the binding was successful, and when the client initiates an AFP connection with the server, it uses Kerberos, creating a ticket as expected. (Which doesn't work with Lion clients, alas, but that's a seperate matter.)
Here are the problems:
1) It looks like the binding did not use SSL. By which I mean that when I opened Directory Utility and examined the LDAPv3 entry, the SSL checkbox was not checked. (If I then check the box, everything looks fine until I restart the client, after which I have a red dot. So I'm guessing that checking the box does nothing until after restart, and that it breaks the binding.)
2) I was never prompted to authenticate for the directory binding.
So I get that literally I'm *enabling* SSL and Authenticated Directory Binding, but it seems like the defaults are to bind without SSL or authentication, and there's no obvious-to-me way to force the binding to use those things. How do I do that?
What I'd really like to do is *require* SSL and Authenticated Directory Binding. I want this because my belief (correct me if I'm wrong) is that if authentication is required to bind to the server, no one will be able to bind to my server without my permission, and that SSL offers a more secure connection to my server than not-SSL. How do I require these things, or do I not really want to?
Thank you.

You cannot connect to databases via Muse at the moment. Please refer: http://forums.adobe.com/message/5090145#5090145
Cheers,
Vikas

EDSPermissionError(-14120) problems with LDAP, SSL and Directory Utility

Hello everyone,
Apologies for the repost but I think I may have made a mistake by posting this originally in the Installation, Setup and Migration forum instead of the Open Directory forum. At least I think that may be why I didn't receive any responses.
Anyway, I've been trying to get my head around Open Directory and SSL as they are implemented in Mac OS X Server 10.5 Leopard, and have been having a few issues. I would like to set up a secure internal infrastructure based around a local Certificate Authority that signs certificates for other internal services like LDAP, email, websites, etc.
I only have one Mac OS X Server and it is kind of a small office so I have gone against best practice and simply made it a CA (through Keychain Utility). I then generated a self-signed SSL certificate through Server Admin, and used the "Generate CSR" option to create a Certificate Signing Request. This went fine, but I did have some problems signing it with the CA, because the server documentation suggested that once I signed it it would pop open a Mail message containing the ASCII version of the signed certificate - it did not, and it took me a loooong time to realize that I could simply export the copy of the signed certificate it put in my local Keychain on the server as a PEM file and paste this back into the "Add Signed or Renewed Certificate from Certificate Authority" dialog box in Server Admin. Hopefully this can be fixed in a forthcoming patch, but I thought I would mention it here in case anyone else is stuck on this issue.
Once I did this I was able to use this certificate in the web server on the same machine and sure enough I was able to connect to it with with clients who had installed the CA certificate in their system Keychains without getting any error messages - very cool.
However, I haven't had quite as much luck getting it going with LDAP/Open Directory. I installed the certificate there as well, but have run into a number of problems. At first I could not get clients (also running 10.5.2) to talk to the server at all over SSL, receiving an error in Directory Utility that the server did not support SSL. I eventually discovered that the problem seemed to lie in the fact that the OpenLDAP implementation on Leopard is not tied in with the system Keychain, necessitating some command-line voodoo to install a copy of the CA cert in a local directory and point /etc/openldap/ldap.conf at it, as documented here: http://www.afp548.com/article.php?story=20071203011158936
This allowed me to do an ldapsearch command over SSL, and seemingly turn SSL on on clients that were previously bound to the directory, and additionally allowed me to run Directory Utility on new clients and put in the server name with the SSL box checked and begin to go through the process of binding. Once this seemed to work, I turned off all plaintext LDAP communication and locked down the service by checking the "Enable authenticated directory binding," "Require authenticated binding," "Disable clear text passwords," and "Encrypt all packets" options in Server Admin. However, I am now running into a new problem, specifically that I cannot successfully bind a local account to a directory account over SSL.
Here's what happens:
1) I run Directory Utility, (or it auto-runs) and add a server, typing in the DNS name and clicking the SSL box.
2) I get asked to authenticate, and type in user credentials, including computer name (incidentally, should this be a FQDN or just a hostname?)
3) Provided I put admin credentials in here and not user-level credentials, I get taken to the "Do you want to set up Mail, VPN, etc.?" box that normally appears when you autodiscover or connect to an Open Directory server.
4) I click through, and am asked for a username and password on the server, as well as the password for my local account.
5) When I put this information in, I get a popup with the dreaded "eDSPermissionError(-14120)" and it fails.
Checking the logs in Server Admin reveals nothing special, and while I have seen a couple other threads on this error and various other binding problems:
http://discussions.apple.com/thread.jspa?messageID=5967023
http://discussions.apple.com/message.jspa?messageID=5982070
these have not solved the problem. In the Open Directory user name field I am putting the short username. I have tried putting [email protected] and the user's longname but this fails by saying the account does not exist. For some reason it does seem to work if I bind it to the initial admin account I created, but no other user accounts.
If I turn all the encryption stuff off I am able to join just fine, so I am suspecting that the error may lie in some other "under the hood" piece of software that doesn't get the CA trust settings from the Keychain or the ldap.conf file, but I'm stymied as to which piece of software this might be. Does anyone have any clues on what I might be able to do here?
Thanks,
Andrew

Hard to tell what is happening without looking at the application
source, knowing what OS & hardware you're using etc. You might want to
try running with different JVM versions to see if it's actually the VM
that is the problem. If you have a support contract with BEA you could
ask support to help you diagnose this.
Regards,
/Helena
Ayub Khan wrote:
I have an application running on Weblogic 8.1 ( with JRockit as the JVM). This
application in turns talks to an iPlanet Directory server via LDAP/SSL. The problem
seems to happen on loading the machine..the performance progressively gets worse
and after a couple of seconds, all the threads stop responding. I checked the
heap, cpu and the idle threads in the execute queue and there is nothing there
to trigger alarms...there are quite a few idle threads still and the heap and
the cpu utilization seem OK. On doing a thread dump, Is see that all the other
threads seem to be in a state where they are waiting for data from LDAP and it
is basically read only data that they are waiting on.
Does anyone know what it is going on and help point me in the right direction.
-Ayub

Web host, mail server and FTP.

Dear all:
I have some questions and will try to make my post a short one (although the questions aren't exactly simple). I have the need to set up my own web server, e-mail server and FTP server. It is my understanding (and I remember setting another computer I had 2 or 3 years ago this way) that OS X can be used for this without the need to have OS X server installed. I don't need (at least not for the for the immediate future) to have a server for my own local network. Basically all I need is a single computer where (1) I can host multiple web sites, (2) I can host my own e-mail that will correspond in number to the number of web sites (domain names) being hosted and (3) I can set-up as a FTP server so that my clients can log on and download files.
I have used VirtualHostX for virtual hosting as well as PureFTD Manager with good results in the past. I've also found both to be easy to use, with a good and intuitive GUI which is essential for someone with as little knowledge as I have of networking. My question now as to do with e-mail and how to set-up Mac OS X to work as an e-mail server.
Are there any applications you would suggest that would be simple to use, have a simple and intuitive user interface and also provide mailing list services along with e-mail services that you would recommend ? I've looked at a few but most of the ones I have found seem to require command line input and this is something I am not comfortable with. I need an application with a simple interface and allows things to be set-up in a straight forward manner (and preferably free instead of paid).
What would be your recommendations for this project ? Any recommendations, advice and suggestions you can offer will be very appreciated.
Thank you in advance,
Joseph

Perhaps you should give people more time to answer.
1. You do not need a DNS on your server, ask the ISP to set up the MX record as they set up the A record.
2. Not really enough information in your setup to say either way, but as it takes seconds to do and you have everything else needed - set it up anyway.
3. Domain name: mydomain.com, Host name depends what you call it. If you don't have a name why not mail.mydomain.com and make you mx record point to that name. Perhaps that is what your A record is already.

Http and ftp protocol extremely slow (pop working well though)

Hello. Starting today, on one of my macs, http and ftp protocol are extremely slow (page load 90 sec. instead of 2) (pop working well though). Provider finds nothing, on second mac all is fine (same cable, same settings … ). Cable connection, checked both sockets, changed cable, no change. Since pop3 protocol seems to work fine, this does look like a software problem to me. (Repaired permissions, no other tests or means. All used software up to date (OSX10.6.8 etc.))
I'd be thankful for any idea.

Not at all. Then I turned on NetBarrier, for testing and to avoid any damage (piece of software I don't employ in vain), and all slowed down again, but not quite as badly as before. Restarted, and now it seems back to normal with all extensions loaded. (I had done that before, obviously, and with no outcome, so it can't very well have been just that. But what?)
I'll watch and learn, and report back; unless you have any further suggestions for the moment. Either way, thankyou very much so far.

Business Connector problem with SSL and Web Services

Hi,
I have generated a Web Connector Service and tested this in our DEV and QA environment with http and no credentials.
All is fine.
I now switched to SSL and was provided with an https WSDL by our Web Server developers. The Web Connector service generates fine however as soon as I execute the service I get a NumberFormatException. Exact error is:
java.io.IOException:java.lang.NumberFormatException: null
The error occurs in pub.client:http
I traced through the working (in QA) and non-workinfg versions and checked the pipeline prior to the call and can see no different apart from the difference in protocol.
Does anyone have any idea what the cause is? I cannot determine what value is null.
Thanks
Brian

Hi,
I have generated a Web Connector Service and tested this in our DEV and QA environment with http and no credentials.
All is fine.
I now switched to SSL and was provided with an https WSDL by our Web Server developers. The Web Connector service generates fine however as soon as I execute the service I get a NumberFormatException. Exact error is:
java.io.IOException:java.lang.NumberFormatException: null
The error occurs in pub.client:http
I traced through the working (in QA) and non-workinfg versions and checked the pipeline prior to the call and can see no different apart from the difference in protocol.
Does anyone have any idea what the cause is? I cannot determine what value is null.
Thanks
Brian

FILE and FTP Adapter file size limit

Hi,
Oracle SOA Suite ESB related:
I see that there is a file size limit of 7MB for transferring using File and FTP adapter and that debatching can be used to overcome this issue. Also see that debatching can be done only for strucutred files.
1) What can be done to transfer unstructured files larger than 7MB from one server to the other using FTP adapter?
2) For structured files, could someone help me in debatching a file with the following structure.
000|SEC-US-MF|1234|POPOC|679
100|PO_226312|1234|7130667
200|PO_226312|1234|Line_id_1
300|Line_id_1|1234|Location_ID_1
400|Location_ID_1|1234|Dist_ID_1
100|PO_226355|1234|7136890
200|PO_226355|1234|Line_id_2
300|Line_id_2|1234|Location_ID_2
400|Location_ID_2|1234|Dist_ID_2
100|PO_226355|1234|7136890
200|PO_226355|1234|Line_id_N
300|Line_id_N|1234|Location_ID_N
400|Location_ID_N|1234|Dist_ID_N
999|SSS|1234|88|158
I would need a the complete data in a single file at the destination for each file in the source. If there are as many number of files as the number of batches at the destination, I would need the file output file structure be as follows:
000|SEC-US-MF|1234|POPOC|679
100|PO_226312|1234|7130667
200|PO_226312|1234|Line_id_1
300|Line_id_1|1234|Location_ID_1
400|Location_ID_1|1234|Dist_ID_1
999|SSS|1234|88|158
Thanks in advance,
RV
Edited by: user10236075 on May 25, 2009 4:12 PM
Edited by: user10236075 on May 25, 2009 4:14 PM

Ok Here are the steps
1. Create an inbound file adapter as you normally would. The schema is opaque, set the polling as required.
2. Create an outbound file adapter as you normally would, it doesn't really matter what xsd you use as you will modify the wsdl manually.
3. Create a xsd that will read your file. This would typically be the xsd you would use for the inbound adapter. I call this address-csv.xsd.
4. Create a xsd that is the desired output. This would typically be the xsd you would use for the outbound adapter. I have called this address-fixed-length.xsd. So I want to map csv to fixed length format.
5. Create the xslt that will map between the 2 xsd. Do this in JDev, select the BPEL project, right-click -> New -> General -> XSL Map
6. Edit the outbound file partner link wsdl, the the jca operations as the doc specifies, this is my example.
<jca:binding />
        <operation name="MoveWithXlate">
      <jca:operation
          InteractionSpec="oracle.tip.adapter.file.outbound.FileIoInteractionSpec"
          SourcePhysicalDirectory="foo1"
          SourceFileName="bar1"
          TargetPhysicalDirectory="C:\JDevOOW\jdev\FileIoOperationApps\MoveHugeFileWithXlate\out"
          TargetFileName="purchase_fixed.txt"
          SourceSchema="address-csv.xsd"
          SourceSchemaRoot ="Root-Element"
          SourceType="native"
          TargetSchema="address-fixedLength.xsd"
          TargetSchemaRoot ="Root-Element"
          TargetType="native"
          Xsl="addr1Toaddr2.xsl"
          Type="MOVE">
      </jca:operation> 7. Edit the outbound header to look as follows
    <types>
        <schema attributeFormDefault="qualified" elementFormDefault="qualified"
                targetNamespace="http://xmlns.oracle.com/pcbpel/adapter/file/"
                xmlns="http://www.w3.org/2001/XMLSchema"
                xmlns:FILEAPP="http://xmlns.oracle.com/pcbpel/adapter/file/">
            <element name="OutboundFileHeaderType">
                <complexType>
                    <sequence>
                        <element name="fileName" type="string"/>
                        <element name="sourceDirectory" type="string"/>
                        <element name="sourceFileName" type="string"/>
                        <element name="targetDirectory" type="string"/>
                        <element name="targetFileName" type="string"/>
                    </sequence>
                </complexType>
            </element>
        </schema>
    </types>   8. the last trick is to have an assign between the inbound header to the outbound header partner link that copies the headers. You only need to copy the sourceDirectory and SourceGileName
    <assign name="Assign_Headers">
      <copy>
        <from variable="inboundHeader" part="inboundHeader"
              query="/ns2:InboundFileHeaderType/ns2:fileName"/>
        <to variable="outboundHeader" part="outboundHeader"
            query="/ns2:OutboundFileHeaderType/ns2:sourceFileName"/>
      </copy>
      <copy>
        <from variable="inboundHeader" part="inboundHeader"
              query="/ns2:InboundFileHeaderType/ns2:directory"/>
        <to variable="outboundHeader" part="outboundHeader"
            query="/ns2:OutboundFileHeaderType/ns2:sourceDirectory"/>
      </copy>
    </assign>you should be good to go. If you just want pass through then you don't need the native format set to opaque, with no XSLT
cheers
James

JDBC and FTP sender channels stop polling

Hi,
We have a great volume of sender JDBC and FTP sender channels.
For this reason there is nothing unusual to have temporary error connections.
Several months ago, with an XI 3.0 system, sender channels recover its functionality automatically when temporary error connection is solved.
But now, he have migrate to a PI 7.1 sytem, and in the same scenario and configuration, sender channel stop polling after a temporary error . In cc monitor this channels remains in green status and there were no signs of stopped interfaces.
Timeouts are correctly defined and there is no difference between channel configuration in our Xi and PI system.
How to solve this problem?
Thanks, in advance.
Carme.

Thanks for your fast response, Stefan.
After writing this post, i ask the same question to our basis team and we are in the latest sp.
¿do you know if there is any note or can you provide me some additional information?
I'm not able to find any note about this issue...
Regards,
Carme.

How to generate .pdx file using File Adapter and FTP Adapter

Hi,
is it possible to genearate .pdx file using oracle ESB Adapters(File Adapter and FTP adapter).
Can you anyone guide me.
Thanks,
Raj.

hi,
regarding report, there is a dedicated report forum. you should post there.
but answer for your question is form is nothing to do with the pdf generation. you can call the report from the as usual.
In the report you should set the properties like
destype to 'file'
desname to 'path with file name'
desformat to 'pdf'

VRF and FTP Server

I have a weird problem with VRF and FTP Server. I have a lab setup whereby two VRFs Client1 and Client2 are created. Both the VRFs are in the same subnet. I have configured FTP-Server and TFTP-Server on this router. TFTP-Server works perfectly fine from both the networks. But for FTP-Server, I can login in to the FTP Server and authenticate positively. But when I try to do listing of directory, it gives a error "can't bind data".
The web access to this router also works perfectly fine.
Any idea why FTP fails.
Before configuring vrf, the FTP server did work fine.
Any idea why. here's the config :
interface FastEthernet0/0.371
description Client1
encapsulation dot1Q 371
ip vrf forwarding client1
ip address 10.0.1.1 255.255.255.0
interface FastEthernet0/0.372
description Client2
encapsulation dot1Q 372
ip vrf forwarding client2
ip address 10.0.1.1 255.255.255.0

Ohhhhhhhh!!!
I'm even more convinced its a passive/active problem with the ftp control channel. Did you try the gentleman's suggestion of passive ftp?? What's happening is that from a client on one vrf, you're attempting to terminate the ftp session in a router whom is in the second vrf. The ftp data session isn't vrf-aware from the sound of it, hence my question about what device models and IOS you're using.
But I agree, it's getting complicated enough that sounds like TAC-time. My bet is something isn't vrf-aware to the point that the data is lost. For instance, to ping from one device to another from _within_ a vrf router instance, you have to use the keyword "vrf" like "ping vrf VRF_Name src dest".
In your situation, your source is on one vrf while the destination is _within_ the second vrf, not just simply the IP packet being routed from vrf1-client (like a Windows PC) to vrf2-server (like a Unix ftp server).
I'd be interested in hearing their solution.
-Jeff

SSl and FTP

Similar Messages

Maybe you are looking for