Managed File Transfer

 View Only
  • 1.  SFTP Setup

    Posted Sat May 02, 2020 12:37 PM
    Hello,

    I am trying to pull the files from external firm using SFTP(Sterling B2B Integrater) for this I created SFTP Client Adapter and Business Process  and created a key from User Identity key in Sterling Integrater and shared the public key to trading partner and I got the public key from tradeing partner and I checked that public key in Known Host Key and updated this key ID in Business Process configuration and executed but it throws an error "The host key was not accepted [Unknown cause]:SSH_DISCONNECT_BY_APPLICATION:SFTP session channel closed by server."
    Can someone please let me know what I did with key exchanges is the correct way, if not please provide some steps. Thanks.


    ------------------------------
    SANTOSH BABBURU
    ------------------------------

    #filetransfer
    #DataExchange


  • 2.  RE: SFTP Setup

    Posted Sat May 02, 2020 01:05 PM
    Hi,

    You may want to use the SSHKeyGrabberProcess to retrieve the latest key from remote SFTP server and update SFTP begin session with the new key and try. It might fix your issue just in case your current KnownHostKey is not matching with the actual Host Key at the server.

    The below links explain the steps to grab the SSH key.

    How to use the "Obtain key from a Remote Host" option with a perimeter server:
    https://www.ibm.com/support/pages/node/222451

    SFTP Client Adapter > Obtain an SSH Known Host Key Automatically and Check It In:
    https://www.ibm.com/support/knowledgecenter/SS3JSW_5.2.0/com.ibm.help.sftp.doc/SI_To_Obt_Hst_Key_Auto.html

    Also, make sure you are not using both SSH Remote profile and then overriding the key in the BP configuration.

    Regards,
    Indu

    ------------------------------
    INDUBHARATHI Routhu Lead Consultant
    ------------------------------



  • 3.  RE: SFTP Setup

    Posted Mon May 04, 2020 09:58 AM
    Thank you for information, I tried to retreive remote key from remote server from Sterling Integrater but I got the below error, is it a firewall issue or any other related issues please advise. Thanks.

    Connection attempt to server Timed-out! Please check the Host, Port and Connection-Parameters and try again

    TradingPartner---->SSH----->KnownHost Key-----> retreive from remote host

    ------------------------------
    SANTOSH BABBURU
    ------------------------------



  • 4.  RE: SFTP Setup

    Posted Mon May 04, 2020 10:26 AM
    Edited by System Wed March 22, 2023 11:46 AM
    Yes, it does seem to be a firewall issue.
    Can you confirm the below two points?

    Do you have a remote perimeter server (PS) installed in your DMZ zone? Or the outbound connections go directly from SFG without PS.
    If no PS, then check if telnet to remote server is working from your SFG server.
    If you have a PS, then check if telnet is working from where you have PS installed.

                 telnet <remote_sftp_server> <sftp_port>

    Regards,
    Indu


    ------------------------------
    INDUBHARATHI Routhu Lead Consultant
    ------------------------------



  • 5.  RE: SFTP Setup

    Posted Mon May 04, 2020 02:17 PM
    instead telnet, can I request a public key from the trading partner and checkin the public key in  sterling integrater KnownHostKey
    with curl we are getting unknown error, could not resolve host

    ------------------------------
    SANTOSH BABBURU
    ------------------------------



  • 6.  RE: SFTP Setup

    Posted Tue May 05, 2020 12:05 AM

    Hi,

    Yes, go ahead and request for public key again and test.
    Inform your partner about your test results and provide the timestamp when you have done the test.
    They will be able to check and confirm if they can see any traffic from your server at their end, and if required rules present at their FW, and/or the public key presented is correct. 

    Regards,
    Indu



    ------------------------------
    INDUBHARATHI Routhu Lead Consultant
    ------------------------------



  • 7.  RE: SFTP Setup

    Posted Mon May 04, 2020 01:31 PM
    We are seeing below error when retreiving the key from remote server (trading partner-->ssh-->knownHostKey), can someone please advise. Thannks.

    Connection attempt to server Timed-out! Please check the Host, Port and Connection-Parameters and try again




    ------------------------------
    SANTOSH BABBURU
    ------------------------------



  • 8.  RE: SFTP Setup

    Posted Tue May 05, 2020 02:27 AM
    If SBI is blocked from connecting to the remote host to retrieve the host key (ex. firewall, whitelist, etc.), then receiving the key from the partner isn't going to resolve the issue when attempting to connect via your SFTP BP.  Ensure that you have connectivity to the partner from your perimeter server or from the application (if no PS as Indubharathi suggested earlier in this thread, and then proceed.

    ------------------------------
    Michael Geier
    IT Engineer 3
    Enterprise Holdings, Inc
    St. Louis MO
    ------------------------------



  • 9.  RE: SFTP Setup

    Posted Wed May 06, 2020 02:18 AM
    Hi, 

    May I know your SI/SFG is running on what OS Platform? And any perimeter server is being used? 

    If you are using Linux, you can simply use SFTP client (native)  or you may install some free SFTP Windows client to test the connectivity first. 

    You can follow the advice that any traffic is being blocked with firewall (both OS level and network level). 

    I have experience that the  SSHKeyGrabberProcess could not work for certain SSH key format and require your partner to send you the public key directly. 

    Anyway, make sure your connection is fine first. 

    Regards,
    Jack

    ------------------------------
    Wai Man Wong
    ------------------------------