ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum Index » WebSphere Message Broker (ACE) Support » FileOutputNode with SFTP

Post new topic  Reply to topic
 FileOutputNode with SFTP « View previous topic :: View next topic » 
Author Message
mvs
PostPosted: Tue Sep 04, 2012 1:47 pm    Post subject: FileOutputNode with SFTP Reply with quote

Voyager

Joined: 06 Jul 2007
Posts: 85

Hi
In WMB6.1, Send the files using fileoutput node thru SFTP protocol and public key from AIX server to Window SFTP server .


I am able to send files with SFTP protocol ( user id/password without public keys).
steps done
1. mqsisetdbparms SIT5 -n sftp::xxxx -u axxx -p xxx
2. on file output node in FTP tab
a. selected Remote Transfer
b. Transfer protocal SFTP
c. Server and Port xxxx and Security identity xxxx

Now target system wants public key authentication also.
Our Admin's created public keys and configured on target windows sftp server. The user id and password not changed


When i tried to send the file, I am getting BIP3381 error with "password authentication credentials invalid"


I am not sure whether i need to specify the public key file in broker?
Back to top
View user's profile Send private message
ceteareth
PostPosted: Tue Sep 04, 2012 8:12 pm    Post subject: Reply with quote

Acolyte

Joined: 12 Aug 2012
Posts: 51

Hope this helps > http://www.mqseries.net/phpBB2/viewtopic.php?t=61561&start=15&sid=be1d389def6093f4c0795e95d04ae2a4
Back to top
View user's profile Send private message
zpat
PostPosted: Wed Sep 05, 2012 7:09 am    Post subject: Reply with quote

Jedi Council

Joined: 19 May 2001
Posts: 5866
Location: UK

You add the brokers public key to the destination server's authorised key list.

In the broker setdbparms refer to the brokers private key file location with the -i operand.

I strongly recommend using a WMB configurable service definition to hold the SFTP server details.

Assuming you have created SSH keys already using ssh-keygen

Verify the key setup using a sftp command to the destination userid@server under the broker id before trying to make the flow work. There should be no password prompt.

Let me know if any more questions
Back to top
View user's profile Send private message
mvs
PostPosted: Thu Sep 06, 2012 7:25 am    Post subject: Reply with quote

Voyager

Joined: 06 Jul 2007
Posts: 85

Thanks for the info.

I am able to connect manually. The results are below

$ /var/db2/home/mqsisit5/ --> sftp aexxxx@usxxxxxxxxxdvl
EFT Server 6.2.18 Build 09.08.2010.3Authenticated with partial success.
aexxxx@usxxxxxxxxxdvl's password:
Connected to usxxxxxxxxxdvl.
sftp>


----------------

Steps i have done

mqsisetdbparms MQSISIT5 -n sftp::xxxxx -u aexxxxx -p xxxxxxx

mqsicreateconfigurableservice MQSISIT5 -c FtpServer -o SFTP_xxxxxx -n protocol,serverName,transferMode,securityIdentity -v SFTP, usxxxxxxxxxdvl,BINARY,xxxxx

specified the server and port is SFTP_xxxxxx and Security identity xxxx
is xxxxx
restarted the broker
Submit the message and getting the same error BIP3381 (password authentication credentials invalid)
--------------------


mqsisetdbparms MQSISIT5 -n sftp::xxxxx -u aexxxxx -i /var/db2/home/mqsisit5/.ssh/id_dsa_ssh2.pub

mqsicreateconfigurableservice MQSISIT5 -c FtpServer -o SFTP_xxxxxx -n protocol,serverName,transferMode,securityIdentity -v SFTP, usxxxxxxxxxdvl,BINARY,xxxxx



Still getting the same error
Back to top
View user's profile Send private message
zpat
PostPosted: Thu Sep 06, 2012 7:51 am    Post subject: Reply with quote

Jedi Council

Joined: 19 May 2001
Posts: 5866
Location: UK

Please read my post carefully

In the broker setdbparms refer to the brokers private key file location with the -i operand.

Quote:
mqsisetdbparms MQSISIT5 -n sftp::xxxxx -u aexxxxx -i /var/db2/home/mqsisit5/.ssh/id_dsa_ssh2.pub


Your example above looks like a public key reference to me. Remove the .pub and try again.
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic  Reply to topic Page 1 of 1

MQSeries.net Forum Index » WebSphere Message Broker (ACE) Support » FileOutputNode with SFTP
Jump to:  



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP
 
 


Theme by Dustin Baccetti
Powered by phpBB © 2001, 2002 phpBB Group

Copyright © MQSeries.net. All rights reserved.