Re: SFTP Client on AS400 V5R4 Help

[Tim Brown <tim.bronski@xxxxxxxxx>]

The issue here has nothing to do with authentication method. The issue is that you have no compatible mac algorithms. The client doesn’t support the more up-to-date algorithms that the server proposes. Unless the server config can be changed, you’re toast.

Tim McCarthy

> On 25 Jun 2024, at 11:47, aidan2474--- via MIDRANGE-L <midrange-l@xxxxxxxxxxxxxxxxxx> wrote:
>
> Hi,
> My client needs their old outdated AS400 running V5R4 to create an SFTP connection to an internal SFTP server.
> I set it all up and exchange the Public/private keys, but get the "no matching mac found" error (see below for entire error).
> I am not an SFTP expert, but have been through a couple setups previously.
>
> Since I am not able to upgrade either SFTP install on the client or server, I thought maybe there is a way I can connect using user and password, since I have done that at other clients(Used user/password instead of Public/private key for authentication)?  
>  I am trying to connect using User and password in a batch script, but I am unable to get the connection to work, because I am getting the same exact error (below) as I got from Public/private Key Authentication.
> I think it might be because I have not been able to create the Known host files?Any advice or suggestions ?
>
> To save keystrokes, Please do not advise on upgrading either client or server as that is not possible. 
> Also, the SFTP server admin told me he is unable to change the config on his server side, as he does not have access, something about it is basically a SAAS. I am able to change the client config on the AS400, just don't know what or how to change anything.
> Any other help is greatly appreciated.
>
>
> Press ENTER to end terminal session.
> Connecting to sftp.AnyClient. com...
> OpenSSH_4. 7pl, OpenSSL 0.9. 7d 17 Mar 2004
> Reading configuration data/Q0penSys/QIBM/ProdData/SC1/OpenSSH/openssh-3.5p1//etc/ssh_config 
> Remote protocol version 2.0, remote software version AzureSSH_1.0.0
>
> no match: AzureSSH_1.0.0
> no matching macfound: client hmac-md5, hmac-shal, umac-64@openssh. com, hmac-rip emd160,hmac-ripemd160@openssh. com, hmac-sha1-96, hmac-md5-96server hmac-sha2-2 56,hmac-sha2-512, hmac-sha2-256-e tm@openssh. com, hmac-sha2-512-etm@openssh. com
> Connection closed
>
>
> Respectfully,Frank
>
> -- 
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: https://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at https://archive.midrange.com/midrange-l.
>
> Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related questions.