Re: Secure FTP Using SSH

[Wayne McAlpine <wayne.mcalpine@xxxxxxxxxxxxxxxxx>]

I've just ordered the 5733-SC1 licensed program (it's a no-charge 
option, btw) in order to be able to run sftp.

However, what I'd really prefer to do is run ftps (SSL version) with the 
clear command channel option.  This is supported as a subcommand of the 
FTP command in V5R4, but not on our V5R3 box.  I would consider this to 
be a native application.

Does anyone know of a workaround to be able to run CCC at V5R3?



Jones, John (US) wrote:
> I almost agree with this.  I consider QSHELL to be native just like I
> consider the IFS to be native.  However, I consider apps that run in
> PASE to not be native.  QSHELL essentially enables UNIX apps to be
> ported to i5/OS with the side bonus of giving us handy utilities.  PASE
> allows UNIX/AIX apps to run on i5/OS without porting (theoretically,
> anyway).  Somewhat of a subtle difference but PASE doesn't particularly
> encourage ISVs to support the iSeries while QSHELL does.
>
> John A. Jones, CISSP
> Americas Information Security Officer
> Jones Lang LaSalle, Inc.
> V: +1-630-455-2787 F: +1-312-601-1782
> john.jones@xxxxxxxxxx
>
> -----Original Message-----
> From: midrange-l-bounces@xxxxxxxxxxxx
> [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Mike Cunningham
> Sent: Thursday, September 28, 2006 3:59 PM
> To: midrange-l@xxxxxxxxxxxx; wayne.mcalpine@xxxxxxxxxxxxxxxxx
> Subject: Re: Secure FTP Using SSH
>
> yes, I consider anything running on the iSeries processor to be "native"
> no matter what the environment is as oppossed to something running on a
> PC which I consider non-native. 
>
> > > > wayne.mcalpine@xxxxxxxxxxxxxxxxx 9/28/2006 4:35:37 PM >>>
> When you say "native sftp client" what exactly are you referring to? 
> The qshell component of OS400 plus the 5733SC1 licensed program?  In my
>
> mind, that's not a native solution since it runs in a unix shell. 
> There
> isn't any other way to run an sftp client, is there?
>
> Shalom Carmel wrote:
> > I use the native sftp client on iSeries.
> > sftp requires either a user/password pair, or key exchange.
> > If you are looking to automate unattended file transfers then you
> must 
> > use keys.
> > BTW, this is true only for the openssh client, like the one we have
> in 
> > PASE.
> > Putty (for windows) lets you script file transfers without
> passwords.
> > Shalom Carmel
> > ----------------
> > www.hackingiseries.com
> >
> > > I have been looking for a native sftp client for iSeries for some
> time
> > > and saw this a redbook a few months ago but it goes far beyond what
> we
> > > need to do and really does not speak to the simple sftp without
> using
> > > keys. Our sftp need still uses a userid/password for authentication
> just
> > > like ftp and ftps but runs the sftp protocol which the FTP command
> will
> > > not do. Has anyone used this native sftp client in this type of 
> > > environment?
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
> list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe,
> unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a
> moment to review the archives at http://archive.midrange.com/midrange-l.