Re: SFTP

[Scott Klement <midrange-l@xxxxxxxxxxxxxxxx>]

Hi Chris,

Responses in-line.

> has anyone used the qp2term SFTP client to connect to a SFTP server via
> user ID and Password? 

Yes.

> I have a bank I need to connect to but I keep getting an error about
> keyboard interactive - Access Denied without ever being prompt for
> the password.

That could mean that the bank has denied password authentication.  They 
may have their server set to ONLY allow digital key authentication.

Another possibility...
Are you using a 5250 terminal emulator?  If so, that's the problem. 
SFTP is very picky about the terminal you're coming from, because it 
does not allow password authentication unless it's completely sure that 
you're coming from an interactive terminal.

Trouble is, SFTP is a Unix program.  It doesn't consider a 5250 terminal 
to be an interactive terminal!!

There are ways to use an xterm-compatible (Unix style) terminal emulator 
instead of 5250...  If the problem is that SFTP doesn't trust yout 5250, 
that will solve it.  (Also, if that's the problem, an Expect script 
might solve it.)

Here are some links to articles I've written about using OpenSSH on i -- 
not sure if they apply to your exact error -- but it couldn't hurt.

http://systeminetwork.com/article/ssh-scp-and-sftp-tools-openssh
http://systeminetwork.com/article/openssh-swiss-army-knife-secure-networking
http://systeminetwork.com/article/error-handling-sftp-scripts
http://systeminetwork.com/article/download-site-expect-tool

Here's a recent discussion on passing variables to SFTP scripts that 
involved scripts using password authentication:
http://forums.systeminetwork.com/isnetforums/showthread.php?t=52905

> I can connect to this same server using SSH user@server and get the
> password prompt. but SFTP user@server does generates the error.  I am
> at V5R3.  I think the error is generated by the remote server but I
> do not know how to tell.  There is nothing in the job log.  Where
> would I find the qp2term session log?

I'm not sure what a "qp2term session log" would be.   I would suggest 
specifying the -vvv option to SFTP to have it generate more detailed 
information:

   sftp -vvv user@host

But, in my experience, the extra information isn't really that helpful. 
 Still, maybe it'll yield something, who knows?