Re: SCP/SFTP functionality

2008-05-02 Thread Alan Ackerman
On Wed, 30 Apr 2008 14:06:26 -0500, Stephen Frazier [EMAIL PROTECTED] us wrote: That will never get past an auditor who has read about but doesn't under stand REXEC. :) David Boyes wrote: Move his files to SFS, export the SFS directory via NFS to a Linux guest, and configure REXEC on the

Re: SCP/SFTP functionality

2008-05-01 Thread Richard Troth
Excellent summary of the situation by the Man from Endicott. [insert theme music from Man from U.N.C.L.E. here] I recommend a POSIX target for SSH into z/VM. From there, after one has signed on using a name that matches *your* VMID, one can issue CP, CMS, or Pipelines commands by proxy. Full

Re: SCP/SFTP functionality

2008-04-30 Thread David Boyes
I don't understand why the Unix/Linux world prefers SFTP to FTPS Implementation of SFTP doesn't require certificate management infrastructure and expensive certificates from external organizations. Ssh is also open source and freely distributed; few if any FTPS clients or servers are. The

Re: SCP/SFTP functionality

2008-04-30 Thread Alan Altmark
On Wednesday, 04/30/2008 at 01:20 EDT, David Boyes [EMAIL PROTECTED] wrote: I don't understand why the Unix/Linux world prefers SFTP to FTPS Implementation of SFTP doesn't require certificate management infrastructure and expensive certificates from external organizations. Ssh is also open

Re: SCP/SFTP functionality

2008-04-30 Thread David Boyes
Implementation of SFTP doesn't require certificate management infrastructure and expensive certificates from external organizations. Ssh is also open source and freely distributed; few if any FTPS clients or servers are. No certificate management? Feh. You are responsible to adhere to

Re: SCP/SFTP functionality

2008-04-30 Thread Stephen Frazier
That will never get past an auditor who has read about but doesn't understand REXEC. :) David Boyes wrote: Move his files to SFS, export the SFS directory via NFS to a Linux guest, and configure REXEC on the Linux guest via a private guest LAN that is not connected to external network to

Re: SCP/SFTP functionality

2008-04-29 Thread David Boyes
Why is an SSH daemon absolutely fundamental and prerequisite to a CMS SCP command to move a PDF from my A-disk to one of my linux servers for serving via Apache? It's not. I'm working on porting the PuTTY standalone utilities. They don't require a local SSH server.

Re: SCP/SFTP functionality

2008-04-29 Thread Thomas Kern
Excellent. That product, I might pay for out of my own pocket. /Tom Kern On Tue, 29 Apr 2008 10:46:36 -0400, David Boyes [EMAIL PROTECTED] w rote: Why is an SSH daemon absolutely fundamental and prerequisite to a CMS SCP command to move a PDF from my A-disk to one of my linux servers for

Re: SCP/SFTP functionality

2008-04-28 Thread Alan Ackerman
On Thu, 24 Apr 2008 00:08:36 -0400, Alan Altmark [EMAIL PROTECTED] wrote: There is an inherent architectural problem with an ssh *server* on VM: T he IP connection does not terminate in your virtual machine. When you logi n to a system with ssh, you are expected to have logged into your own

Re: SCP/SFTP functionality

2008-04-28 Thread Jack Woehr
Alan Ackerman wrote: In previous discussions here, there was a feeling that an ssh *client* in CMS was more important than having the ability to ssh *into* the system. CMS is not a multiuser system. SSH into CMS directly does not make sense, because an SSH server is a

Re: SCP/SFTP functionality

2008-04-28 Thread Alan Altmark
On Monday, 04/28/2008 at 05:05 EDT, McKown, John [EMAIL PROTECTED] wrote: Why? What is wrong with OpenSSH? Trick question. :-) There is nothing wrong with OpenSSH. But remember that in a VM system, we're talking about virtual machines, not processes. There is no hierarchy of virtual

Re: SCP/SFTP functionality

2008-04-28 Thread Thomas Kern
Now for the really stupid question. Why is an SSH daemon absolutely fundamental and prerequisite to a CMS SCP command to move a PDF from my A-disk to one of my linux servers for serving via Apache? /Tom Kern Alan Altmark wrote: On Monday, 04/28/2008 at 05:05 EDT, McKown, John [EMAIL

Re: SCP/SFTP functionality

2008-04-28 Thread Alan Altmark
On Monday, 04/28/2008 at 07:53 EDT, Thomas Kern [EMAIL PROTECTED] wrote: Why is an SSH daemon absolutely fundamental and prerequisite to a CMS SCP command to move a PDF from my A-disk to one of my linux servers for serving via Apache? It's not. As I said, the ssh client side (used by scp)

Re: SCP/SFTP functionality

2008-04-24 Thread Adam Thornton
On Apr 24, 2008, at 12:25 AM, Thomas Kern wrote: I thought SFTP was an ftp like command set inside the SSH protocol and that FTPS was the FTP protected by SSL. Our Network gurus keep referring too out SSL protected TN3270 as TELNETS and even insisted on us using port 992 for it since that

Re: SCP/SFTP functionality

2008-04-24 Thread Thomas Kern
I know. I have been in too many conversations where I say that z/VM can support FTPS and the other instantly say 'Good, we can use SFTP from our SSH sessions.' So I have to re-educate them and 2 months later the scene repeats with the same cast of characters. At times, I regret having worked

Re: SCP/SFTP functionality

2008-04-23 Thread Thomas Kern
No. No one has ported OpenSSH (not even the outbound commandline functions like scp/sftp) to z/VM-CMS. www.ssh.com does reference a product for z/OS, but a search of their website does not have a single document containing 'z/VM'. /Tom Kern Alan Ackerman wrote: Does z/VM support SCP/SFTP

Re: SCP/SFTP functionality

2008-04-23 Thread David Boyes
Does z/VM support SCP/SFTP functionality? No. That would require a working SSH. VM implements FTPS.

Re: SCP/SFTP functionality

2008-04-23 Thread Adam Thornton
On Apr 23, 2008, at 6:22 PM, Alan Ackerman wrote: Does z/VM support SCP/SFTP functionality? No. SFTP is the FTP command set (mostly) over an SSH channel. Sine Nomine has an FTP-to-SFTP broker, so you can FTP out from CMS, through a Linux guest (so there's no traffic on the wire

Re: SCP/SFTP functionality

2008-04-23 Thread Alan Altmark
On Wednesday, 04/23/2008 at 08:04 EDT, Thomas Kern [EMAIL PROTECTED] wrote: No. No one has ported OpenSSH (not even the outbound commandline functions like scp/sftp) to z/VM-CMS. www.ssh.com does reference a product for z/OS, but a search of their website does not have a single document

Re: SCP/SFTP functionality

2008-04-23 Thread Thomas Kern
I thought SFTP was an ftp like command set inside the SSH protocol and that FTPS was the FTP protected by SSL. Our Network gurus keep referring too out SSL protected TN3270 as TELNETS and even insisted on us using port 992 for it since that was set in some RFC. /Tom Kern Adam Thornton wrote: