SFTP error

[mladd]

Hey all! I am getting a strange error when trying to use SFTP. Basically in both the FTP Trace and the Map Log the error I see is:
>530 Please login with USER and PASS. (F)

Below is the target error:
<TargetReport card="1" adapter="FTP" bytes="6707" adapterreturn="-530">
<Message>Please login with USER and PASS.</Message>
<Settings>-TV -A -URL ftps://ftptest:ftptest@nrcsun01/FTP_Out.txt ;type=A</Settings>
</TargetReport>

Also, below is the full FTP Trace. IF anyone has any ideas how to resovle this, it would be appreciated. It almost appears that the user is not accepted, but I have verified with our admin that the ports are open for this user.

Thanks,
Mike

FTP Adapter, Version 8.0(105)
Copyright © 2004, Ascential Software Corporation. All rights reserved
Built for WIN32 - INTEL on Jan 31 2006 at 17:49:13.
Windows NT CRT DLL is
© Microsoft Corporation. All rights reserved..
Using C:\WINDOWS\system32\msvcrt.dll (Version 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158)) for Visual C++ runtime.
Retry Count is 0. Retry Interval is 0. OnFailure is Rollback.
Fetch Unit is 0. Card Mode is Integral.
Will process 6707 bytes of data.
Run Started at 15:35:41.216 on 05/01/06.
Options used: audit,trace,verbose,name,url
URL ftps://ftptest:*****@nrcsun01/FTP_Out.txt will be used.
[WSAStart: Entering]
[WSAStart: bWSStarted = 0, nWSClients = 0]
[WSAStart: Attempting WinSock initialization.]
[WSAStart: WinSock initialized successfully.]
Windows Sockets Version 1.1 will be used.
Windows Sockets Version 2.2 is supported.
Windows Socket Description is 'WinSock 2.0'.
Windows Socket System Status is 'Running'.
Windows Socket supports up to 32767 socket(s).
Windows Socket supports UDP datagram of up to 65467 bytes.
Windows Socket has no additional vendor-specific information.
[WSAStart: SSL library load succeeded.]
Sockets Client ID 1 enabled.
[WSAStart: Exiting (rc = 1)]
URL user: 'ftptest'.
URL pass: '*******'.
URL host: 'nrcsun01'.
URL port: '21'.
URL path: 'FTP_Out.txt'.
URL type: 'I'.
Using explicitftps: protocol.
Server host is 'nrcsun01'.
Hostname: 'nrcsun01.newroadssouth.com'.
Address #1: 172.27.243.10.
Using port '21' for the connection.
Connecting to 'nrcsun01'.
Checking user port 21.
Service: 'ftp'.
Port: 21.
Protocol: 'tcp'.
Socket Opened.
Connected.
>220 nrcsun01 FTP server ready. (S)
<AUTH TLS-P

>530 Please login with USER and PASS. (F)
<AUTH SSL

>530 Please login with USER and PASS. (F)
[WSATerm: Entering]
[WSATerm: bWSStarted = 1, nWSClients = 1]
Sockets Client ID 1 disabled.
[WSATerm: nWSClients remaining = 0]
[WSATerm: Attempting WinSock shutdown.]
[WSATerm: Exiting]
Run Terminated at 15:35:41.544 on 05/01/06.

 

[mladd]

Just to make sure, I downloaded an SFTP client to my winXP box and I can connect using the same credentials without a problem.

BTW, I'm on 8.0.1 of Datastage TX.

Thx
-Mike

 

[janhes]

I think you need the Security Option to use SFTP.

 

[mladd]

I've already installed the security pack. Unless there is something special that I need to do with it? I have not found any documentation installed with it.

-Mike

 

[BocaBurger]

There is a difference between FTPS and SFTP. I think DS TX uses FTPS.



BocaBurger
<===========================||////////////////|0
The pen is mightier than the sword, but the sword hurts more!

 

[mladd]

Hmmm. Interesting.

So does that mean I can't connect to an SFTP server using DataStage TX? Is there any documentation on the Security Pack?

 

[janhes]

I use Putty for SFTP and run it as a batch process (Windows 2000). Seems to be ok but the error reporting is poor.

 

[mladd]

Seriously? So we can't use FTPS or SFTP as a source or target, even though the reason we purchased the Security Option was specifically for this reason?

Crazy


-Mike

 

[janhes]

Not sure about that. We don't have the security option thus the batch process.

 

[mladd]

Gotcha.

Problem is that there is no documentation with the Security Option, and all the FTP docs have are a couple of SSL commands that can be used. But there is no information on if I can use a self-signed cert (since I won't be paying 400 bucks for a CA cert) or how to go about using the adapter for either sftp or ftps.

Thanks,
Mike

 

[BocaBurger]

Google for the differences between SFTP and FTPS. FTPS is a standard, SFTP is not yet.



BocaBurger
<===========================||////////////////|0
The pen is mightier than the sword, but the sword hurts more!

 

[mladd]

I fully understand the differences.

SFTP is a new protocol which has not yet been finalized, much like many other standards for eXML, XHTML, the first year or so that 802.11g was on the market. Very similar to FTP, but a completely new protocol using ssh to provide the connection and transmission.

FTPS is simply an SSL secure connection which allows use of the already approved, yet very unsecure, FTP protocol.

My questions I guess, should be HOW do you use Secure FTP with Mercator? I have an SSL certificate, but I don't think that we need to be IIS admins before trying to transmit a file via a secure FTP connection.

-Mike

 

[BocaBurger]

FTPS works, but there are numerous veriations on what the server wants, so figuring the commmand line out can be a pain. EWasiest way is to use a batch / shell script to run FTP via an FTP script: FTP /s scriptname. The script would have a copy of a manual FTP session and the last part of the script would be a FTP get or PUT with the required file name(s).



BocaBurger
<===========================||////////////////|0
The pen is mightier than the sword, but the sword hurts more!

 

[mladd]

BocaBurger,
Thanks. But that is exactly what I am trying to replace. We have well over 200 files transmitted via SFTP now using shell scripts that get executed via cron.
With more and more clients coming on board, with more and more files and reports, I was hoping we could eliminate having to write even more scripts to move these files.
I'll keep plugging away, I guess. I think I am getting closer, but still not quite there yet. I am now getting some SSL errors, whcih tells me it is recognizing the certs, but I may just have them mixed up, or exported incorrectly. I am trying a few things today.

Thanks again Jeff.

-Mike

 

[BocaBurger]

Who is Jeff?



BocaBurger
<===========================||////////////////|0
The pen is mightier than the sword, but the sword hurts more!

 

[mladd]

Sorry. Let's just call it a typo.

-Mike Ladd