RE: PC document / folder key location for SFTP/SSH to i5, PC isclient, i5 is server -- MIDRANGE-L

I just checked with the tech that installs these for us, and he said
that they run a single connect from a command prompt as administrator,
and it asks them to accept the host key. After that he says it just
works unless the key changes. He pointed me to a .bat file that has this
line in it.
c:\ftp\winscp /command "open sftp://scantest@x.x.x.x
-privatekey=c:\\ftp\\test.ppk" "exit"
They modify that and then run it. He also said if you have the GUI
version installed, you can connect through there and it will cache the
host key for you also. He hasn't tried that in a while. We don't put
this little script many places, and they have it down to unzip our
folder onto the box, and then run the first-time script that has the
above line, accept the host key, and then set up the automatic job as a
service.

Kevin Bucknum
Senior Programmer Analyst
MEDDATA/MEDTRON
Tel: 985-893-2550

-----Original Message-----

From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf
Of Steinmetz, Paul
Sent: Tuesday, May 9, 2017 11:06 AM
To: 'Midrange Systems Technical Discussion'
Subject: RE: PC document / folder key location for SFTP/SSH to i5, PC

isclient,

i5 is server

Kevin,

I used Puttygen to generate the keys, copied the pub key to the i5,

renaming

as "authorized_users" per the doc.

Connects fine with user / password -hostkey=* Connects fine with user

password -hostkey="<fingerprint>"

When trying to connect using the WINSCP example below (without a
password) I'm getting the following error.

open scp://test@xxxxxxxxxxx:2222/ -privatekey=mykey.ppk

Expected host key was not configured, use -hostkey switch Host key
fingerprint is "....."
Authentication failed.

What should command like syntax be for connecting using the private

key,

without the password?

Paul

-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf
Of Kevin Bucknum
Sent: Monday, May 08, 2017 3:58 PM
To: Midrange Systems Technical Discussion
Subject: RE: PC document / folder key location for SFTP/SSH to i5, PC

is client,

i5 is server

If you are using WINSCP I'm pretty sure it likes it's keys in PPK
(Putty) format, so you would use PuttyGEN to create your key. It can

go in

any folder you would like. It is either set up in the gui, or passed

in on the

command line.

Kevin Bucknum
Senior Programmer Analyst
MEDDATA/MEDTRON
Tel: 985-893-2550

-----Original Message-----

From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On

Behalf Of

Steinmetz, Paul
Sent: Monday, May 8, 2017 2:48 PM
To: 'Midrange Systems Technical Discussion'
Subject: PC document / folder key location for SFTP/SSH to i5, PC is

client,i5 is

server

Looking for the PC document / folder location for SFTP/SSH to i5, PC

is client,

i5 is server?
I've updated my FTP to SFTP, working using WINSCP.

I'd now like to update to using a hostkey, eliminate the password.

I've done many setups where the i5 is the SFTP/SSH client.
Few, if any, when the i5 is the server.

I have the below doc for the i5 side.
Configuring the System i SSHD Server to Use Public-Key

Authentication

http://www-01.ibm.com/support/docview.wss?uid=nas8N1012709

I'm missing the PC document.
1) What tool on the PC, WIN7, is used to generate the private/public

keys.

2) What is the PC folder key location?
3) Is there any other setup needed on the PC?

Thank You
_____
Paul Steinmetz
IBM i Systems Administrator

Pencor Services, Inc.
462 Delaware Ave
Palmerton Pa 18071

610-826-9117 work
610-826-9188 fax
610-349-0913 cell
610-377-6012 home

psteinmetz@xxxxxxxxxx
http://www.pencor.com/

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L)

mailing

list

To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please

take

a moment to review the archives at

http://archive.midrange.com/midrange-

l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our

affiliate

link: http://amzn.to/2dEadiD

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing

list

To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take
a moment to review the archives at

http://archive.midrange.com/midrange-

l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: http://amzn.to/2dEadiD
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing

list

To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take
a moment to review the archives at

http://archive.midrange.com/midrange-

l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: http://amzn.to/2dEadiD