15.1 Configuring FTP/SFTP

This section details about the configurations required for FTP/SFTP.

Adding FTP/SFTP Configuration for File Transfer

In OFSAA, certain modules require transfer of files from the web application server to the OFSAA server over SSH.

Follow these steps to ensure the OFSAA server recognizes the web application server during file transfers.
  1. Login to the web application server.
  2. Type sftp <user>@<OFSAA Server>
  3. Specify Yes when prompted for permission.

    Are you sure you want to continue connecting (Yes/No)?

  4. This will add an entry into the "known_hosts" file.
  5. A confirmation message is displayed:

    Permanently added <OFSAA Server> RSA) to the list of known hosts.

Setting Up SFTP Private Key

Log in to OFSAA Unix user using Putty tool, where you plan for installation and generate a pair of authentication keys using the ssh-keygen command. If required, set passphrase. Otherwise OFSAAI_SFTP_PASSPHRASE tag in the OFSAAI_InstallConfig.xml file should be set to NA.

To generate private key, enter the commands as shown:
ofsaapp@OFSASERVER:~> ssh-keygen -t rsa
Generating public/private rsa key pair.
Enter file in which to save the key (/home/ofsaapp/.ssh/id_rsa):
Created directory '/home/ofsaapp/.ssh'.
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in /home/ofsaapp/.ssh/id_rsa.
Your public key has been saved in /home/ofsaapp/.ssh/id_rsa.pub.
The key fingerprint is:
3e:4f:05:79:3a:9f:96:7c:3b:ad:e9:58:37:bc:37:e4
ofsaapp@OFSASERVER:~> cat /home/ofsaapp/.ssh/id_rsa.pub >> /home/ofsaapp/.ssh/authorized_keys
In case, you are generating SFTP Private key for Hive server, append the content of /home/ofsaapp/.ssh/id_rsa.pub to Hiveserver authorized_keys file located at $HOME_DIR_HIVE/.ssh folder. Ensure the following permissions exist for the given folders:
  • Permission of .ssh should be 700
  • Permission of .ssh/authorized_keys should be 640
  • Permission of .ssh/id_rsa should be 400
  • Permission of Unix user created should be 755