webMethods

webMethods

Join this online group to communicate across IBM product users and experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  SFTP using RSA key authorzation

    Posted Thu February 02, 2012 09:21 AM

    Hi all,
    Our client request us to access their SFTP using rsa key base authorzation.
    Please advise following method can work this out :

    1, In webMethods call the setKeyAndChain and fill in the privKeyFile with the path of private key file.
    2, then, call the pub.client.ftp:login with filled serverhost, serverport, username & secure.auth = ‘SSL’

    If this method is wrong, could anybody give me some hints how to work this out ?
    Please kindly help. I am newbie of webMethods.
    Thanks


    #webMethods
    #Integration-Server-and-ESB
    #webmethods-Protocol-and-Transport


  • 2.  RE: SFTP using RSA key authorzation

    Posted Thu February 02, 2012 05:01 PM

    SFTP (SSH + FTP) is not supported by WM natively.

    You can search this site for some existing practices.

    Another option is to use jsch and write some java code around it. We are using it fine with rsa key auth.


    #webmethods-Protocol-and-Transport
    #Integration-Server-and-ESB
    #webMethods


  • 3.  RE: SFTP using RSA key authorzation

    Posted Thu February 02, 2012 07:57 PM

    Adding clarification, the “FTP” in “SFTP” is quite different from FTP. You cannot use the pub.client.ftp services for SFTP.

    You will need to get a libary or tool that supports SFTP. One option is GnuPG which you can call from IS via command-line execution. Another is using a Java library such as Trilead for which you would write wrapper services to do the things you want.

    For key/cert based authentication you’ll need to generate a public key to give to your partner so they can configure their system. Then you configure your side to use the key.

    Hope this is enough to get you started on your research.


    #Integration-Server-and-ESB
    #webMethods
    #webmethods-Protocol-and-Transport


  • 4.  RE: SFTP using RSA key authorzation

    Posted Tue February 14, 2012 06:19 PM

    I’ve used the openssh package for clients with keys before. It is a little convoluted with an external batch file for commands but works fine.


    #webmethods-Protocol-and-Transport
    #webMethods
    #Integration-Server-and-ESB


  • 5.  RE: SFTP using RSA key authorzation

    Posted Tue November 17, 2015 06:42 AM

    Hi all,

    meanhwile (beginning with 9.x) it is officially supported by SAG, but not for ports/listeners.

    Regarding this I have a question of my own:
    wM 9.5.1

    When using SFTP User Alias with Authentication Type Password all is working fine.
    But unfortunately one of our SFTP-Partner systems forces us meanwhile to use Authentication Type Public Key.

    While trying to configure this we found the IS Administration guide as well as the Training Material for “Knowledge Update - Administration” not really helpful as it is not described how to create the neccessary keys in the right way.

    Putty is not really helpful here as we have to generate the objects on Solaris to match our application user.

    Any ideas?

    Unfortunately this is quite urgent as this already affects our productive processing.

    Regards,
    Holger


    #webmethods-Protocol-and-Transport
    #webMethods
    #Integration-Server-and-ESB


  • 6.  RE: SFTP using RSA key authorzation

    Posted Tue November 17, 2015 01:45 PM

    We use Putty to generate the SSH2 RSA key pair. Although we use it on Window, the key should work on any platform.
    What’s exactly the issue when using it on Solaris?


    #webMethods
    #Integration-Server-and-ESB
    #webmethods-Protocol-and-Transport


  • 7.  RE: SFTP using RSA key authorzation

    Posted Wed November 18, 2015 07:37 AM

    Hi Tong,

    thanks for your reply.

    We solved this by using ssh-keygen.

    Regards,
    Holger


    #Integration-Server-and-ESB
    #webMethods
    #webmethods-Protocol-and-Transport