SFTP, SSH

Joe Peresich

unread,

Feb 7, 2006, 8:13:51 AM2/7/06

to

We just came up on z/os1.4, and have been asked to look into supporting
SSH, SFTP, Unix ported tools.

A couple of basic questions - Do SFTP file exchanges have access to
typical MVS datasets, or does it access only USS files? Does it
interoperate with typical MVS security systems like ACF2 & RACF, for
ids, access rights, etc.?

How well do the ported tools work - are they pretty reliable and stable?

Thanks very much for any observations & experiences you can share.

Joe

Joe Peresich
Northwest Regional Data Center
2048 East Paul Dirac Drive
Tallahassee, FL 32310
850-245-3527 Sun:205-3527
www.nwrdc.com

----------------------------------------------------------------------
For IBMTCP-L subscribe / signoff / archive access instructions,
send email to LIST...@VM.MARIST.EDU with the message: INFO IBMTCP-L

Bauer, Bobby (NIH/CIT) [C]

unread,

Feb 7, 2006, 8:25:50 AM2/7/06

to

The SSH for z/OS 1.4 from IBM has proven to be very stable but it only
access USS datasets. We use OCOPY to move data between traditional MVS
datasets and USS.

Bobby Bauer
Center for Information Technology
National Institutes of Health
Bethesda, MD 20892-5628
301-594-7474
Contractor

Hans Erik

unread,

Feb 7, 2006, 8:33:25 AM2/7/06

to

Hi Joe,

have you planed a 3270 interface to the ssh connection,
or will it be the standard unix terminal types like vt100, ansi or xterm?

Sftp is a very nice option to ssl/tls based ftp. It has one single
connection,
compared with the two connections needed for standard ftp, and a well
documented simplified command set. The "normal" reply to a
read/list directory command is "unix formatted", like:
drwx------ 2 hen users 512 Mar 7 2005 .ssh
drwxr-xr-x 2 hen users 512 Mar 8 2005 tmp
drwxr-xr-x 3 hen users 512 Dec 1 04:20 .mc
drwxr-xr-x 5 hen users 512 Nov 4 2001 rh
drwxr-xr-x 18 hen users 1536 Feb 4 04:17 .
drwxr-xr-x 176 root admin 5120 Jan 5 18:11 ..
-rw-r--r-- 1 nihen users 32 Nov 11 12:47 sp.txt

Please let me know if you have planed a 3270 interface for the ssh
connection.

Regards,
Hans Erik

Nexus Integration - www.nexit.com

Kittendorf, Craig

unread,

Feb 7, 2006, 9:36:30 AM2/7/06

to

Joe,

The SSH ported tools do not support MVS datasets directly. You need to
copy them to HFS first.

We are on z/OS 1.4 and use the standard FTP with SSL/TLS to transfer
data to outside agencies.

Craig

-----Original Message-----
From: IBM TCP/IP List [mailto:IBMT...@VM.MARIST.EDU] On Behalf Of Joe
Peresich
Sent: Tuesday, February 07, 2006 8:14 AM
To: IBMT...@VM.MARIST.EDU

Joe Peresich

unread,

Feb 7, 2006, 11:29:32 AM2/7/06

to

Ok, thanks to all.

How about key management - would we use GSKKYMAN to maintain key
databases?

Joe Peresich
Northwest Regional Data Center
2048 East Paul Dirac Drive
Tallahassee, FL 32310
850-245-3527 Sun:205-3527
www.nwrdc.com

-----Original Message-----

From: IBM TCP/IP List [mailto:IBMT...@VM.MARIST.EDU] On Behalf Of

Bauer, Bobby (NIH/CIT) [C]
Sent: Tuesday, February 07, 2006 8:26 AM
To: IBMT...@VM.MARIST.EDU
Subject: Re: SFTP, SSH

The SSH for z/OS 1.4 from IBM has proven to be very stable but it only
access USS datasets. We use OCOPY to move data between traditional MVS
datasets and USS.

Bobby Bauer
Center for Information Technology
National Institutes of Health
Bethesda, MD 20892-5628
301-594-7474
Contractor

-----Original Message-----
From: Joe Peresich [mailto:joe_pe...@nwrdc.com]

Kittendorf, Craig

unread,

Feb 7, 2006, 11:45:21 AM2/7/06

to

We have CA-Top Secret which has certificate management, but so far I've
just used the gskkyman utility.

Craig