Re: Co:z SFTP and Public/Private Key Authentication

2013-05-16 Thread Shmuel Metz (Seymour J.)
In 6663125346384738.wa.paulgboulderaim@listserv.ua.edu, on 05/13/2013 at 06:26 PM, Paul Gilmartin paulgboul...@aim.com said: What!? Have you no respect for the many decades of rich tradition behind the 3270? I don't read his message as a complaint about the 3270, but rather about the

Re: Co:z SFTP and Public/Private Key Authentication

2013-05-14 Thread Kirk Wolf
On Mon, May 13, 2013 at 6:26 PM, Paul Gilmartin paulgboul...@aim.comwrote: On Mon, 13 May 2013 15:15:06 -0500, Kirk Wolf wrote: What!? Have you no respect for the many decades of rich tradition behind the 3270? And scant appreciation for ISPF and OEDIT and OBROWSE? What do your peers

Re: Co:z SFTP and Public/Private Key Authentication

2013-05-13 Thread Steve Goetze
Roger, The FOTS1373 message is being emitted from Ported Tools OpenSSH. Are you able to connect a basic SSH session to the target system with that z/OS user? Because the Ported Tools SSH client can't be run under OMVS, The best way to test this is to use a generic ssh client to connect to z/OS

Re: Co:z SFTP and Public/Private Key Authentication

2013-05-13 Thread Kirk Wolf
BTW: Co:Z SFTP uses IBM Ported Tools OpenSSH for the underlying ssh layer - that is where authentication occurs. You might want to take a look at the slides/recordings of the following webinars on our site: IBM Ported Tools for z/OS: OpenSSH - Key Authentication (Part 1) IBM Ported Tools for

Re: Co:z SFTP and Public/Private Key Authentication

2013-05-13 Thread Donald J.
Activate debug on both ends of connection. Here is my jcl to do that on the client side: //STEPNAME EXEC PGM=COZBATCH,REGION=0M, // PARM='ru=userid8 rh=host1.xyz.com' //STEPLIB DD DISP=SHR,DSN=UTIL.TCP.COZ.LOADLIB //STDOUT DD SYSOUT=* //STDERR

Re: Co:z SFTP and Public/Private Key Authentication

2013-05-13 Thread Kirk Wolf
Agreed - it would be nice if TSO OMVS had a solution for masking passwords, but it doesn't. In the mean time, it is silly to completely disable the ssh client under TSO OMVS - it would suffice to simply disable password-interactive mode under the Ported Tools ssh client if a tty that doesn't

Re: Co:z SFTP and Public/Private Key Authentication

2013-05-13 Thread Paul Gilmartin
On Mon, 13 May 2013 15:15:06 -0500, Kirk Wolf wrote: Agreed - it would be nice if TSO OMVS had a solution for masking passwords, but it doesn't. Long ago, before SSL was available, I went to PMR with this. I even used the magic word, security. I reported it as a problem with stty -echo, and

Re: Co:z SFTP and Public/Private Key Authentication

2013-05-13 Thread Roger Lowe
Steve, Thank you for the info - the problem was related to permission settings on the users directory... Thanks, Roger -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to

Co:z SFTP and Public/Private Key Authentication

2013-05-12 Thread Roger Lowe
Hi Listers, We are trying to use Co: z SFTP in batch with Public/Private key authentication and not having much success. JCL that we are using: //SFTPCAT EXEC PROC=SFTPPROC //SFTPIN DD * user=xyz