Re: Batch FTP advice

[Neil Palmer <NPalmer@xxxxxxxxxxx>]

Kahn, David wrote:
> 
> We have some jobs that we run in batch to create files and then upload
> them to various remote PC directories by FTP. The FTP command script is
> stored in a source file and we issue an OVRDBF FILE(INPUT)
> TOFILE(xxxxx/yyyyy) MBR(zzzzzz) followed by STRTCPFTP RMTSYS(rrrrrr).
> 
> As far as it goes, this works fine. Unfortunately the script source file
> member contains the ID and password needed to log on to the remote
> system. I hate the idea of storing passwords in clear. I suppose I could
> devise some scheme to encrypt/decrypt the source file member and
> restrict access to the encryption key to the profile running the job.
> Does anyone have a better suggestion or an alternative method that would
> be more secure?

Well, you could use the SNDTCPF/RCVTCPF commands from News/400 (August
1995, code available on their website to download) that handles batch
FTP.  You need to specify a password on the command, but at least you
could compile that into a CL program and then the only file with the
password would be the CL source file that could be secured.  (The
SNDTCPF/RCVTCPF commands don't log the password to the joblog).

PS - In the SNDTCPFC CL program there's a bug at line 200.  Should be:
   IF  ( &maptbl *EQ '*NONE'  *OR  &maptbl *EQ '*DFT' )  DO  
Likewise, line 231 in RCVTCPFC should be:
    IF  ( &maptbl *EQ '*NONE'  *OR  &maptbl *EQ '*DFT' )  DO 



-- 
... Neil Palmer                                      AS/400~~~~~      
... NxTrend Technology -Canada       ____________          ___  ~     
... Markham,  Ontario,  Canada       |OOOOOOOOOO| ________  o|__||=   
... Phone: (905) 731-9000 x238       |__________|_|______|_|______)   
... url:http://www.NxTrend.com        oo      oo   oo  oo   OOOo=o\   
... mailto:NPalmer@NxTrend.com     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
* This is the Midrange System Mailing List!  To submit a new message,   *
* send your mail to "MIDRANGE-L@midrange.com".  To unsubscribe from     *
* this list send email to MAJORDOMO@midrange.com and specify            *
* 'unsubscribe MIDRANGE-L' in the body of your message.  Questions      *
* should be directed to the list owner / operator: david@midrange.com   *
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *