SFTP from Cloverleaf to Cloverleaf (Proof of concept)

[Bob Schmid]

client-cloverleaf  and server-cloverleaf  (two different boxes/ip’s)

generated pub / pri key on HCISITEDIR of client

copied pub key to server-cloverleaf in /home/hci/.ssh

verified permissions

configured thread ib_usr_sftp  -> fileset-ftp  FTP options SFTP

FTP Host Information : server-cloverleaf port 22

we start the ib_usr_sftp on the client-cloverleaf ..it goes to up :-/ and

grabs the file on the server-cloverleaf box ?….

that may sound great….but when we intentionally corrupt the key files on either box…..it continues to work? as though we’re using simple ftp  

hcilicstatus on client-cloverleaf:

Add-on Modules

New Feature: no

cl-aom-batch-process: no

cl-aom-caa-direct: no

cl-aom-caa-ws: no

cl-aom-ftps: yes

cl-aom-gmon: yes

cl-aom-ihb: no

cl-aom-master: no

cl-aom-msgwarehouse: no

cl-aom-odbc-mw: no

cl-aom-odbc-tcl: no

cl-aom-screen-scraper: no

cl-aom-sec-advanced: yes

cl-aom-sftp: yes

cl-aom-site-doc: yes

cl-aom-ssl: yes

cl-aom-webservices: yes

hcilicstatus on server-cloverleaf

Add-on Modules

New Feature: no

cl-aom-batch-process: no

cl-aom-caa-direct: no

cl-aom-caa-ws: no

cl-aom-ftps: yes

cl-aom-gmon: yes

cl-aom-ihb: no

cl-aom-master: no

cl-aom-msgwarehouse: no

cl-aom-odbc-mw: no

cl-aom-odbc-tcl: no

cl-aom-screen-scraper: no

cl-aom-sec-advanced: yes

cl-aom-sftp: yes

cl-aom-site-doc: yes

cl-aom-ssl: yes

cl-aom-webservices: yes

Topic

[Bob Schmid]

in the context of client and server :

are there parms in the above files under /etc/ssh should be changed

I have found no reference to having to change these files in clovertech nor in cloverleaf documentation

[David Barr]

I haven’t used the SFTP component of Cloverleaf, but it sounds like you’re confusing two separate SFTP systems. There’s one that’s built into the Cloverleaf GUI if you’re licensed for it, and there one that’s part of Linux (Openssh). If you’re trying to get the client and server components working in Cloverleaf, I think you need to ignore the Openssh configuration (files in /etc/ssh, $HOME/.ssh, etc.). These shouldn’t be part of your thread configuration. I think that the host keys and client keys are probably configured in the GUI. Again, I’m only describing how I think it works because I haven’t used Cloverleaf SFTP before.

[Bob Schmid]

THanks Dave

We followed the instructions in the cloverleaf documentation: SFTP

We will be reaching out to infor to try to find out the “error of our ways”

Bob

[Author]

Replies