Re: secure ftp on the mainframe

2008-08-04 Thread Ulrich Boche
Rafael Fernandez L. wrote: Nobody mentioned ftp with GSSAPI (kerberos) ? Ignacio Landín Villegas Probably because there is rarely anyone using it. Furthermore, it was all but unusable for a long time: although the Kerberos ticket provided the cross-reference with the RACF userid, support

Re: secure ftp on the mainframe

2008-07-31 Thread Rafael Fernandez L.
Nobody mentioned ftp with GSSAPI (kerberos) ? Ignacio Landín Villegas -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Hal Merritt Sent: Tuesday, July 29, 2008 10:39 PM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: secure ftp on the mainframe Oh

Re: secure ftp on the mainframe

2008-07-29 Thread Hal Merritt
Do you have any links to SFTP sources? Google search results were confusing and ambiguous. -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Walt Farrell Sent: Thursday, July 24, 2008 11:04 AM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: secure ftp

Re: secure ftp on the mainframe

2008-07-29 Thread McKown, John
-Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Hal Merritt Sent: Tuesday, July 29, 2008 10:27 AM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: secure ftp on the mainframe Do you have any links to SFTP sources? Google search results were

Re: secure ftp on the mainframe

2008-07-29 Thread Dooley, Robert
@BAMA.UA.EDU Subject: Re: secure ftp on the mainframe Do you have any links to SFTP sources? Google search results were confusing and ambiguous. -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Walt Farrell Sent: Thursday, July 24, 2008 11:04 AM

Re: secure ftp on the mainframe

2008-07-29 Thread Kirk Wolf
sftp usually refers to the file transfer protocol that works as an ssh subsystem (although some use the term to refer to FTP/TLS). In the OpenSSH implementation, sftp and sftp-server are separate binaries that are shipped as part of OpenSSH. The sources for sftp and sftp-server are available

Re: secure ftp on the mainframe

2008-07-29 Thread Hal Merritt
: Tuesday, July 29, 2008 10:34 AM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: secure ftp on the mainframe http://www-03.ibm.com/servers/eserver/zseries/zos/unix/pdf/docs/fotza105 .pdf ..snip NOTICE: This electronic mail message and any files transmitted with it are intended exclusively

Re: secure ftp on the mainframe

2008-07-29 Thread Walt Farrell
On Tue, 29 Jul 2008 11:22:16 -0500, Hal Merritt [EMAIL PROTECTED] wrote: I was referring to the sftp that Walt mentioned. My take was that it was neither TLS nor SSH. SFTP is not FTP at all. It is a secure, FTP-like communication protocol. Perhaps you didn't see the next sentence of that

Re: secure ftp on the mainframe

2008-07-29 Thread Kirk Wolf
Its all a little confusing... SSH is a tool/protocol for providing a secure connection over IP networks. Once you have a connection, you can have multiple channels routed over it. Channels could be interactive terminal sessions (to replace telnet), port-forwarding channels, command redirection

Re: secure ftp on the mainframe

2008-07-29 Thread Hal Merritt
things, like telnet, web service, etc, right? My head hurts :-) -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Walt Farrell Sent: Tuesday, July 29, 2008 2:13 PM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: secure ftp on the mainframe On Tue, 29

secure ftp on the mainframe

2008-07-25 Thread Kurt Eastwood
Thank you to everyone who responded to my post about 'secure ftp on the mainframe'. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search

secure ftp on the mainframe

2008-07-24 Thread Kurt Eastwood
Hello,   First off let me say I am not an FTP expert.   We currently use FTP on the mainframe to send files to various sites. We also use SFTP on the UNIX boxes to send files to various sites. I am looking for any information or help on using SFTP, which I understand to be 'secure ftp

Re: secure ftp on the mainframe

2008-07-24 Thread R.S.
to be 'secure ftp' on the mainframe to send files with sensitive information in them. Is SFTP really a 'secure ftp'? There are several flavours of secure ftp. It can be FTP over SSL/TLS, it's sometimes called FTPS - this is what you surely have. It can be sftp - AFAIK ftp over SSH. It is available

Re: secure ftp on the mainframe

2008-07-24 Thread Wissink, Brad [ITSYS]
State University 515-294-3088 -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Kurt Eastwood Sent: Thursday, July 24, 2008 10:01 AM To: IBM-MAIN@BAMA.UA.EDU Subject: secure ftp on the mainframe Hello,   First off let me say I am not an FTP

Re: secure ftp on the mainframe

2008-07-24 Thread Chase, John
am looking for any information or help on using SFTP, which I understand to be 'secure ftp' on the mainframe to send files with sensitive information in them.   Is SFTP really a 'secure ftp'? Yes, if you accept encrypted transfers as secure. Can SFTP be used on the mainframe and if so can

Re: secure ftp on the mainframe

2008-07-24 Thread Hal Merritt
10:01 AM To: IBM-MAIN@BAMA.UA.EDU Subject: secure ftp on the mainframe Hello,   First off let me say I am not an FTP expert.   We currently use FTP on the mainframe to send files to various sites. We also use SFTP on the UNIX boxes to send files to various sites. I am looking for any information

Re: secure ftp on the mainframe

2008-07-24 Thread McKown, John
-Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Hal Merritt Sent: Thursday, July 24, 2008 10:47 AM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: secure ftp on the mainframe [snip] SSH is very popular in tinkertoyland, but is currently

Re: secure ftp on the mainframe

2008-07-24 Thread Itschak Mugzach
[mailto:[EMAIL PROTECTED] On Behalf Of McKown, John Sent: Thursday, July 24, 2008 5:49 PM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: secure ftp on the mainframe -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Hal Merritt Sent: Thursday, July 24, 2008

Re: secure ftp on the mainframe

2008-07-24 Thread Walt Farrell
On Thu, 24 Jul 2008 17:05:40 +0200, R.S. [EMAIL PROTECTED] wrote: It can be sftp - AFAIK ftp over SSH. It is available on z/OS as free and unsupported tool. AFAIK it supports HFS files only (I mean anu Unix file, regardless of filesystem type: ZFS, HFS,e tc.) I vaguely remain some other type of

Re: secure ftp on the mainframe

2008-07-24 Thread Walt Farrell
On Thu, 24 Jul 2008 08:00:55 -0700, Kurt Eastwood [EMAIL PROTECTED] wrote: Is SFTP really a 'secure ftp'? SFTP is not FTP at all. It is a secure, FTP-like communication protocol. (SFTP here, is a function provided by the ssh protocols.) I'm not sure anyone has really stated that in this

Re: Secure FTP on the Mainframe

2005-05-31 Thread Mark Vitale
I believe the software looks for the key database password in the stash file. When I ran into this recently, I was using gskkyman to manage my key file, and there's an option in gskkyman 10 - Store database password to create the stash file. Once I did that, the TLS handshake moved on to the

Re: Secure FTP on the Mainframe

2005-05-31 Thread Hal Merritt
Of Richard Pinion Sent: Thursday, May 26, 2005 11:42 AM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: Secure FTP on the Mainframe Nothing wrong with using RACF for the CERT stuff but you can generate CERTS from OMVS using gskkyman. Maybe it is better to learn to crawl first rather than trying to run

Re: Secure FTP on the Mainframe

2005-05-30 Thread Ulrich Boche
Howard Rifkind wrote: Ulrich, Can sFTP and FTP reside within the same z/OS partition and be used at the same time? For instance, one person is FPT'ing a secure document using sFTP and another is using just plain old FTP for something else You could use three different kinds of file

Re: Secure FTP on the Mainframe

2005-05-29 Thread Craig Kittendorf
the key database password be supplied? Thanks, Craig -Original Message- Subject: Re: Secure FTP on the Mainframe We would like to install Secure FTP in our maiframes TCP/IP configuration and I have no idea how to do this. Would some one be kind enough to point me in the right

Re: Secure FTP on the Mainframe

2005-05-27 Thread Steve Bireley
Howard Rifkind wrote. Howard Rifkind [EMAIL PROTECTED] wrote:We would like to install Secure FTP in our maiframes TCP/IP configuration and I have no idea how to do this. Would some one be kind enough to point me in the right direction where to start and what manuals to check out, and what to be

Re: Secure FTP on the Mainframe

2005-05-27 Thread Howard Rifkind
Ulrich, Can sFTP and FTP reside within the same z/OS partition and be used at the same time? For instance, one person is FPT'ing a secure document using sFTP and another is using just plain old FTP for something else Ulrich Boche [EMAIL PROTECTED] wrote: Howard Rifkind wrote: We would

Re: Secure FTP on the Mainframe

2005-05-26 Thread Richard Pinion
Would you be interested in using FTP with SSL/TLS support? If so, it is already installed. You need some parms and commands which I or other users of ibm-main can provide. [EMAIL PROTECTED] 05/26/05 10:21AM We would like to install Secure FTP in our maiframes TCP/IP configuration and I

Secure FTP on the Mainframe

2005-05-26 Thread Howard Rifkind
We would like to install Secure FTP in our maiframes TCP/IP configuration and I have no idea how to do this. Would some one be kind enough to point me in the right direction where to start and what manuals to check out, and what to be aware of. I'm not really prime time with TCP/IP. Thanks.

Re: Secure FTP on the Mainframe

2005-05-26 Thread Hal Merritt
The manuals are confusing as they seem to be focused on Websphere and assume that is what you want to do. So far, I have achieved a secure transfer, or at least so say the messages. I created the CA cert on one system, then exported/imported it to another. Both systems are z/os 1.4 but do not

Re: Secure FTP on the Mainframe

2005-05-26 Thread Hal Merritt
And here is the cross posing from the RACF list as promised: QUOTE: This is a foil that I presented in SHARE and Vanguard. People think this helps them to clear things out. Would it help you? Given: ? CA1 is the CA cert which signed the server cert S ? CA2 is the CA cert which

Re: Secure FTP on the Mainframe

2005-05-26 Thread Dave Gibney
I've just recently done both secure FTP and TN3270 in z/OS 1.4 I used the redbook volume 7. I found gskkyman just as confusing as RACF, so I used RACF :) I also need to thank Sam for pointing out Filezilla, which is a good FTP client and supports TLS One recomendation I would make is

Re: Secure FTP on the Mainframe

2005-05-26 Thread Richard Pinion
I can't remember what I had to do to activate gskkyman. Oh yes, I had to add GSK.SGSKLOAD to PROG00 for APF and LNKLIST. Run gskkyman from TSO/OMVS. Once I had done the z/OS setup as below I had to work with the network guys to punch a hole thru our firewall to allow FTP SSL. Here are the

Re: Secure FTP on the Mainframe

2005-05-26 Thread Ulrich Boche
[EMAIL PROTECTED] wrote: There must be something in the air or water, or maybe you have a spy here. I was just asked the same thing. I tried to get a 3270 emulator to support SSL/TLS but was told by our manager that SSL had nothing to do with encryption so forget it. Anyway, I'm in the process

Re: Secure FTP on the Mainframe

2005-05-26 Thread Ulrich Boche
Howard Rifkind wrote: We would like to install Secure FTP in our maiframes TCP/IP configuration and I have no idea how to do this. Would some one be kind enough to point me in the right direction where to start and what manuals to check out, and what to be aware of. I'm not really prime

Re: Secure FTP on the Mainframe

2005-05-26 Thread Vik
I think this would really help you to get going with what you want -- http://publibz.boulder.ibm.com/cgi-bin/bookmgr_OS390/BOOKS/F1A1B340/2.3.10?SHELF=F1A1BK50DT=20040609153838 Please have a look into the following REDBOOK (lists the key ring set up): SG24-6840-00 Communications Server for