Re: sFTP from/to z/OS best practices
snip We need to set up some type of area that our users (user's) can each place their files but that can't be accessed by the other outside users. unsnip You may want to look at access ACLs in the OMVS directory. Also the [EMAIL PROTECTED] list may be more informative. Jack Kelly 202-502-2390 (Office) -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
sFTP from/to z/OS best practices
Hi Everyone, I'm looking for some advice on how best to set up users. We are using the SSH version (under INETD). Right now we have successfully set up JCL to copy files from z/OS to an OMVS directory and then using sftp, PUT it to another server. We have also successfully set up JCL to use sftp to GET a file from another server and then copy it to z/OS. We set up a large directory under a separate HFS file to hold the files. So as long as we drive the train there's no problem. Now comes the decisions, we have a user (outside our agency) that also has outside users that will want to send their files via logon and sFTP to OMVS. (vs. our user logging on their system to GET the file) We need to set up some type of area that our users (user's) can each place their files but that can't be accessed by the other outside users. As a test we tried to create a file that has permissions where only the creating user can see the file. The real problem comes in here, when our user tries to get the file out of OMVS, they can't because they don't have permission. We thought of giving her access to each file via a group, but if OMVS is like LINUX, there is a limit as to how many groups you can be attached to (26 on LINUX). Since our user may have more than that, we're not sure how to handle this. Does anyone have any suggestions or way around this? (we are not strong in OMVS) Thanks in advance for you help! Mary :-) -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: sFTP from/to z/OS
You might want to use FTPS as the shorthand name for FTP/TLS or FTP/SSL. SFTP often refers to SSH file transfer protocol. (And FTP over SSH is yet a third choice, as mentioned.) At least, that seems to be what Wikipedia thinks in terms of keeping the naming straight, so it must be true, right? :-) For the record, OpenSSH (with sftp) was made available all the way back at least to z/OS 1.4, but the current version requires z/OS 1.7 or higher. There are several other ways to transfer files of course. And this occasion may be the time to consider whether all the file transfer you have are appropriate. FTP (in any flavor) can have a lot of architectural disadvantages, particularly for interactions between on-line applications. But I've said more on that previously, so I'll stop here. - - - - - Timothy Sipples IBM Consulting Enterprise Software Architect Specializing in Software Architectures Related to System z Based in Tokyo, Serving IBM Japan and IBM Asia-Pacific E-Mail: [EMAIL PROTECTED] -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: sFTP from/to z/OS
Yukus, Mary J CIV USMEPCOM wrote: Hi Everyone, We have the need to start using sFTP on z/OS (via OMVS?) with a very short deadline (it always seems to work that way :-) ). We have had FTP working for years. Can anyone give me some direction/advice/good books on how to get s/FTP working? I'm not the one that configured the FTP, just inherited it. Thanks, Mary :-) Client or server? Did you install the ported tools package that gives you both pieces? -- Mark Jacobs Time Customer Service Tampa, FL Must be a yearning deep in human heart to stop other people from doing as they please. Rules, laws - always for other fellow. A murky part of us, something we had before we came down out of trees, and failed to shuck when we stood up. Because not one of those people said: Please pass this so that I won't be able to so something I know I should stop. Nyet, tovarishchee, was always something they hated to see neighbors doing. Stop them for their own good. Robert A. Heinlein - The Moon Is a Harsh Mistress(1966) -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
sFTP from/to z/OS
Hi Everyone, We have the need to start using sFTP on z/OS (via OMVS?) with a very short deadline (it always seems to work that way :-) ). We have had FTP working for years. Can anyone give me some direction/advice/good books on how to get s/FTP working? I'm not the one that configured the FTP, just inherited it. Thanks, Mary :-) -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: sFTP from/to z/OS
snip start using sFTP on z/OS snip The Ported Tools User Guide (SA22-7985) does a great job of getting you started. Even I got it to work. Also look at the archives, there was lots of discussions about this fairly recently. Jack Kelly 202-502-2390 (Office) -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: sFTP from/to z/OS
Hi Mary, and welcome to the gottahaveitnow club :-) You have two main paths to take: SSH (secure shell) or TLS (transport layer security). TLS is a superset/replacement of SSL (secure sockets). Each has advantages/disadvantages. SSH is very popular with the *nix, tinkertoy, and audit crowds, but a huge PITA for the Big Iron. SSH, for example, can only send/receive HFS/zFS files. That means you have to copy to/from your ZFS/HFS file system to real world. And ZFS/HFS files systems tend to be LPAR specific (not shared). Worse, SSH sessions use ZFS/HFS files, which tends to constrain to a single LPAR. SSH does not come with z/os, but is 'openware' downloadable from IBM. TLS proper is nearly trivial to set up and use, but certificate administration is a large can of nasty worms with bad attitudes and hard to treat diseases :-) Worse, TLS is free on z/os, but often requires expensive software on the remote hosts. I personally like TLS because the same base mechanisms apply to all of web stuff, FTP, and telnet (TN3270). More, certificated based strategies appear to be a 'best practice'. But I like the minimal administration of SSH. We are driven by customer requests/demands, so we use both. HTH -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Yukus, Mary J CIV USMEPCOM Sent: Wednesday, June 18, 2008 8:37 AM To: IBM-MAIN@BAMA.UA.EDU Subject: sFTP from/to z/OS Hi Everyone, We have the need to start using sFTP on z/OS (via OMVS?) with a very short deadline (it always seems to work that way :-) ). We have had FTP working for years. Can anyone give me some direction/advice/good books on how to get s/FTP working? I'm not the one that configured the FTP, just inherited it. Thanks, Mary :-) -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html NOTICE: This electronic mail message and any files transmitted with it are intended exclusively for the individual or entity to which it is addressed. The message, together with any attachment, may contain confidential and/or privileged information. Any unauthorized review, use, printing, saving, copying, disclosure or distribution is strictly prohibited. If you have received this message in error, please immediately advise the sender by reply email and delete all copies. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: sFTP from/to z/OS
I forgot one item. I have had reports of some sort of 'SFTP' product that had nothing to do with enciphering. I seems that the proponent may have been mislead into thinking that a propriety protocol would suffice. Since this is still a brand new technology to most, be careful when you hear 'experts' espousing buzzwords. -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Yukus, Mary J CIV USMEPCOM Sent: Wednesday, June 18, 2008 8:37 AM To: IBM-MAIN@BAMA.UA.EDU Subject: sFTP from/to z/OS Hi Everyone, We have the need to start using sFTP on z/OS (via OMVS?) with a very short deadline (it always seems to work that way :-) ). We have had FTP working for years. Can anyone give me some direction/advice/good books on how to get s/FTP working? I'm not the one that configured the FTP, just inherited it. Thanks, Mary :-) -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html NOTICE: This electronic mail message and any files transmitted with it are intended exclusively for the individual or entity to which it is addressed. The message, together with any attachment, may contain confidential and/or privileged information. Any unauthorized review, use, printing, saving, copying, disclosure or distribution is strictly prohibited. If you have received this message in error, please immediately advise the sender by reply email and delete all copies. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: sFTP from/to z/OS
Hal, IBM's Ported Tools for z/OS (OpenSSH) is fully supported by the IBM support center. There was an old (unsupported) tools and toys version, which is no longer available. I'm not sure what you mean by openware. IBM's port of OpenSSH, as you point out, does not include support for MVS datasets or PKI certificates. A commercial (non-free) product from SSH Communications is available for z/OS that does support both of these features. (PKI certificate support, however is not part of the ssh RFC, and as such is not supported by most implementations). Also, it is easy to confuse ssh with sftp, since they are both included in OpenSSH. sftp is a program that uses ssh connections to do file transfer. We offer a free product - Co:Z which uses ssh connections to do file transfer and cooperative processing between z/OS and distributed systems. It *does* support MVS datasets. FTP with TLS has its own set of problems - mostly related to headaches for firewalls and NAT routers, since FTP uses multiple socket connections. SSH is much cleaner in this respect, which is one reason why it is so popular. It is also possible to use SSH connections as secure tunnels for FTP transfers, but this requires that the SSH implementation supports SOCKS proxies. IBM's current port of OpenSSH doesn't do this, but SSH Communication's version does. I agree with your overall sentiment that IBM's z/OS OpenSSH port needs improvement. IBM has several requirements open - everyone who feels similarly should file interest in these through the support center and (continue to) lobby at SHARE. Regards, Kirk Wolf Dovetailed Technologies http://dovetail.com On Wed, Jun 18, 2008 at 9:36 AM, Hal Merritt [EMAIL PROTECTED] wrote: Hi Mary, and welcome to the gottahaveitnow club :-) You have two main paths to take: SSH (secure shell) or TLS (transport layer security). TLS is a superset/replacement of SSL (secure sockets). Each has advantages/disadvantages. SSH is very popular with the *nix, tinkertoy, and audit crowds, but a huge PITA for the Big Iron. SSH, for example, can only send/receive HFS/zFS files. That means you have to copy to/from your ZFS/HFS file system to real world. And ZFS/HFS files systems tend to be LPAR specific (not shared). Worse, SSH sessions use ZFS/HFS files, which tends to constrain to a single LPAR. SSH does not come with z/os, but is 'openware' downloadable from IBM. TLS proper is nearly trivial to set up and use, but certificate administration is a large can of nasty worms with bad attitudes and hard to treat diseases :-) Worse, TLS is free on z/os, but often requires expensive software on the remote hosts. I personally like TLS because the same base mechanisms apply to all of web stuff, FTP, and telnet (TN3270). More, certificated based strategies appear to be a 'best practice'. But I like the minimal administration of SSH. We are driven by customer requests/demands, so we use both. HTH -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Yukus, Mary J CIV USMEPCOM Sent: Wednesday, June 18, 2008 8:37 AM To: IBM-MAIN@BAMA.UA.EDU Subject: sFTP from/to z/OS Hi Everyone, We have the need to start using sFTP on z/OS (via OMVS?) with a very short deadline (it always seems to work that way :-) ). We have had FTP working for years. Can anyone give me some direction/advice/good books on how to get s/FTP working? I'm not the one that configured the FTP, just inherited it. Thanks, Mary :-) -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html NOTICE: This electronic mail message and any files transmitted with it are intended exclusively for the individual or entity to which it is addressed. The message, together with any attachment, may contain confidential and/or privileged information. Any unauthorized review, use, printing, saving, copying, disclosure or distribution is strictly prohibited. If you have received this message in error, please immediately advise the sender by reply email and delete all copies. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: sFTP from/to z/OS
I believe we will need both client and server. I'm still trying to determine that. No I haven't done anything yet. Would the ported tools come with z/OS? If not, where would I get them from? We need to install it on z/OS 1.4. We plan to install it first on our z/OS 1.7 test system, then once we have it working do the same on 1.4. -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Mark Jacobs Sent: Wednesday, June 18, 2008 9:08 AM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: sFTP from/to z/OS Yukus, Mary J CIV USMEPCOM wrote: Hi Everyone, We have the need to start using sFTP on z/OS (via OMVS?) with a very short deadline (it always seems to work that way :-) ). We have had FTP working for years. Can anyone give me some direction/advice/good books on how to get s/FTP working? I'm not the one that configured the FTP, just inherited it. Thanks, Mary :-) Client or server? Did you install the ported tools package that gives you both pieces? -- Mark Jacobs Time Customer Service Tampa, FL Must be a yearning deep in human heart to stop other people from doing as they please. Rules, laws - always for other fellow. A murky part of us, something we had before we came down out of trees, and failed to shuck when we stood up. Because not one of those people said: Please pass this so that I won't be able to so something I know I should stop. Nyet, tovarishchee, was always something they hated to see neighbors doing. Stop them for their own good. Robert A. Heinlein - The Moon Is a Harsh Mistress(1966) -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: sFTP from/to z/OS
snip We need to install it on z/OS 1.4 snip remember that you won't be able to use the crypto with 1.4, if that's a concern. www.ibm.com/servers/eserver/zseries/zos/unix/port_tools.htm should get you there. Jack Kelly 202-502-2390 (Office) -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: sFTP from/to z/OS
I tried to get to the link below and get a 404. Can you get there? Thanks, Mary -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Jack Kelly Sent: Wednesday, June 18, 2008 11:59 AM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: sFTP from/to z/OS snip We need to install it on z/OS 1.4 snip remember that you won't be able to use the crypto with 1.4, if that's a concern. www.ibm.com/servers/eserver/zseries/zos/unix/port_tools.htm should get you there. Jack Kelly 202-502-2390 (Office) -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: sFTP from/to z/OS
Yukus, Mary J CIV USMEPCOM wrote: I tried to get to the link below and get a 404. Can you get there? Thanks, Mary try http://www-03.ibm.com/servers/eserver/zseries/zos/unix/bpxa1toy.html -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Jack Kelly Sent: Wednesday, June 18, 2008 11:59 AM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: sFTP from/to z/OS snip We need to install it on z/OS 1.4 snip remember that you won't be able to use the crypto with 1.4, if that's a concern. www.ibm.com/servers/eserver/zseries/zos/unix/port_tools.htm should get you there. Jack Kelly 202-502-2390 (Office) Kind regards, -Steve Comstock The Trainer's Friend, Inc. 303-393-8716 http://www.trainersfriend.com z/OS Application development made easier * Our classes include + How things work + Programming examples with realistic applications + Starter / skeleton code + Complete working programs + Useful utilities and subroutines + Tips and techniques == Check out the Trainer's Friend Store to purchase z/OS == == application developer toolkits. Sample code in four== == programming languages, JCL to Assemble or compile, == == bind and test. == == http://www.trainersfriend.com/TTFStore/index.html== -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: sFTP from/to z/OS
http://www-304.ibm.com/jct03004c/servers/eserver/zseries/zos/unix/suptlk /index.html Watch the wrap!! -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Yukus, Mary J CIV USMEPCOM Sent: Wednesday, June 18, 2008 12:08 PM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: sFTP from/to z/OS I tried to get to the link below and get a 404. Can you get there? Thanks, Mary -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Jack Kelly Sent: Wednesday, June 18, 2008 11:59 AM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: sFTP from/to z/OS snip We need to install it on z/OS 1.4 snip remember that you won't be able to use the crypto with 1.4, if that's a concern. www.ibm.com/servers/eserver/zseries/zos/unix/port_tools.htm should get you there. Jack Kelly 202-502-2390 (Office) -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html NOTICE: This electronic mail message and any files transmitted with it are intended exclusively for the individual or entity to which it is addressed. The message, together with any attachment, may contain confidential and/or privileged information. Any unauthorized review, use, printing, saving, copying, disclosure or distribution is strictly prohibited. If you have received this message in error, please immediately advise the sender by reply email and delete all copies. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: sFTP from/to z/OS
OpenSSH is no longer available there. quote The free unsupported version of OpenSSH previously offered here is no longer available and has been replaced with a supported version. It is available as the program product IBM Ported Tools for z/OS /quote Instead: http://www-03.ibm.com/servers/eserver/zseries/zos/unix/openssh/index.htm l or http://preview.tinyurl.com/5p4yx9 However: quote To order IBM Ported Tools for z/OS, most customers can go to IBM ShopzSeries Web site. For all other customers, please contact your local IBM representative. /quote -- John McKown Senior Systems Programmer HealthMarkets Keeping the Promise of Affordable Coverage Administrative Services Group Information Technology The information contained in this e-mail message may be privileged and/or confidential. It is for intended addressee(s) only. If you are not the intended recipient, you are hereby notified that any disclosure, reproduction, distribution or other use of this communication is strictly prohibited and could, in certain circumstances, be a criminal offense. If you have received this e-mail in error, please notify the sender by reply and delete this message without copying or disclosing it. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: sFTP from/to z/OS
-Original Message- From: IBM Mainframe Discussion List On Behalf Of Yukus, Mary J CIV USMEPCOM I believe we will need both client and server. I'm still trying to determine that. No I haven't done anything yet. Would the ported tools come with z/OS? Not to my knowledge, unless you already had it installed on an earlier release and you order a ServerPac or equivalent. If not, where would I get them from? ShopzSeries or your IBM Customer Rep (as of relatively recently, it's available only as a no-charge optional product). We need to install it on z/OS 1.4. Its program directory says For z/OS V1.7 and z/OS.e V1.7 or higher on the cover page. We plan to install it first on our z/OS 1.7 test system, then once we have it working do the same on 1.4. Plan may have to change. -jc- -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: sFTP from/to z/OS
Okay, thanks, gotit. -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Hal Merritt Sent: Wednesday, June 18, 2008 12:13 PM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: sFTP from/to z/OS http://www-304.ibm.com/jct03004c/servers/eserver/zseries/zos/unix/suptlk /index.html Watch the wrap!! -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Yukus, Mary J CIV USMEPCOM Sent: Wednesday, June 18, 2008 12:08 PM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: sFTP from/to z/OS I tried to get to the link below and get a 404. Can you get there? Thanks, Mary -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Jack Kelly Sent: Wednesday, June 18, 2008 11:59 AM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: sFTP from/to z/OS snip We need to install it on z/OS 1.4 snip remember that you won't be able to use the crypto with 1.4, if that's a concern. www.ibm.com/servers/eserver/zseries/zos/unix/port_tools.htm should get you there. Jack Kelly 202-502-2390 (Office) -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html NOTICE: This electronic mail message and any files transmitted with it are intended exclusively for the individual or entity to which it is addressed. The message, together with any attachment, may contain confidential and/or privileged information. Any unauthorized review, use, printing, saving, copying, disclosure or distribution is strictly prohibited. If you have received this message in error, please immediately advise the sender by reply email and delete all copies. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: sFTP from/to z/OS
One more question, if we receive a file, does it need to be in a specific format? Does it have to be from another mainframe hfs/zfs file or can we receive it via sftp (for example from an outside source) in any format and pass it on (sftp) to an AIX server? -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Yukus, Mary J CIV USMEPCOM Sent: Wednesday, June 18, 2008 12:29 PM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: sFTP from/to z/OS Okay, thanks, gotit. -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Hal Merritt Sent: Wednesday, June 18, 2008 12:13 PM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: sFTP from/to z/OS http://www-304.ibm.com/jct03004c/servers/eserver/zseries/zos/unix/suptlk /index.html Watch the wrap!! -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Yukus, Mary J CIV USMEPCOM Sent: Wednesday, June 18, 2008 12:08 PM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: sFTP from/to z/OS I tried to get to the link below and get a 404. Can you get there? Thanks, Mary -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Jack Kelly Sent: Wednesday, June 18, 2008 11:59 AM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: sFTP from/to z/OS snip We need to install it on z/OS 1.4 snip remember that you won't be able to use the crypto with 1.4, if that's a concern. www.ibm.com/servers/eserver/zseries/zos/unix/port_tools.htm should get you there. Jack Kelly 202-502-2390 (Office) -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html NOTICE: This electronic mail message and any files transmitted with it are intended exclusively for the individual or entity to which it is addressed. The message, together with any attachment, may contain confidential and/or privileged information. Any unauthorized review, use, printing, saving, copying, disclosure or distribution is strictly prohibited. If you have received this message in error, please immediately advise the sender by reply email and delete all copies. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: sFTP from/to z/OS
-Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Yukus, Mary J CIV USMEPCOM Sent: Wednesday, June 18, 2008 12:44 PM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: sFTP from/to z/OS One more question, if we receive a file, does it need to be in a specific format? Does it have to be from another mainframe hfs/zfs file or can we receive it via sftp (for example from an outside source) in any format and pass it on (sftp) to an AIX server? Huh? sftp only transfers UNIX files. UNIX files, in reality, are simply a byte stream (like a PL/I STREAM file). The file itself has no format. Also, IIRC, sftp does BINARY transfers by default. That means that if you need to use it under z/OS, then you'd need to convert it from ASCII to EBCDIC and worry about the line-endings (UNIX vs Windows) yourself. However, if you just want to pass thru from one ASCII server to another ASCII server (like Linux to/from AIX), then you can indeed just pass it through without worrying about the contents of the data. -- John McKown Senior Systems Programmer HealthMarkets Keeping the Promise of Affordable Coverage Administrative Services Group Information Technology The information contained in this e-mail message may be privileged and/or confidential. It is for intended addressee(s) only. If you are not the intended recipient, you are hereby notified that any disclosure, reproduction, distribution or other use of this communication is strictly prohibited and could, in certain circumstances, be a criminal offense. If you have received this e-mail in error, please notify the sender by reply and delete this message without copying or disclosing it. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: sFTP from/to z/OS
Doesn't PASV get around the firewall issues? It seems to be the default most places now. Len Rugen In theory, there is no difference between theory and practice. But in practice, there is. - Yogi Berra FTP with TLS has its own set of problems - mostly related to headaches for firewalls and NAT routers, since FTP uses multiple socket connections. SSH is much cleaner in this respect, which is one reason why it is so popular. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: sFTP from/to z/OS
Firewalls typically snoop FTP control connection commands so that they can open ports for PASV. TLS complicates this since the data is encrypted. Google ftp fls firewall for more information on the challenges. Kirk Wolf Dovetailed Technologies On Wed, Jun 18, 2008 at 12:54 PM, Rugen, Len [EMAIL PROTECTED] wrote: Doesn't PASV get around the firewall issues? It seems to be the default most places now. Len Rugen In theory, there is no difference between theory and practice. But in practice, there is. - Yogi Berra FTP with TLS has its own set of problems - mostly related to headaches for firewalls and NAT routers, since FTP uses multiple socket connections. SSH is much cleaner in this respect, which is one reason why it is so popular. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
