File has to pass through FTPS connection.. Connection parameters?

[Former Member]

Hi,

I want to transfer the file through FTPS connection. Partner side provided the following details as connection parameters.

- IP : 129.32.169.140

- POrt: 990

User name

Password

PASV mode

SSL Direct, OpenSSL,SSL Listing, SSL Transfers.

Kindly let me know what are all the parameters I need to pass in Receiver file adapter.

FTP Connection Parameters:

Server

Port

Data connection: Passive

Connection Security: FTPS for control connection or FTPS for control and Data connection.???

Command Order : ?????

Please let me know what are the security and command order parameters I need to use in Receiver file adapter.

They didn't provide any certificates.

Thanks

Deepthi.

[Former Member]

According to the below blog..

http://www.sdn.sap.com/irj/scn/weblogs;jsessionid=(J2EE3417400)ID0143148350DB01378568327765914760End...

Someone quoted that implicit ports are not supported.

Implict FTPs 990 (Control) and 989 (Data)

Explicit FTPs 21 (Control) and 20 (Data).

My port is 990. Is XI wont support these ports?

[Former Member]

Hi,

The below are the default ports used in case of FTPS.

Implict FTPs 990 (Control) and 989 (Data)
Explicit FTPs 21 (Control) and 20 (Data).

My port is 990. Is XI wont support these ports?

So your 990 port should work fine...But as prerequiste mentioned in the blog you had given is about SAP Java Cryptographic Toolkit.

can you chek if this is deployed successfully on XI system.

Thanks

Swarup

[Former Member]

Hi Swarup,

>> as prerequiste mentioned in the blog you had given is about SAP Java Cryptographic Toolkit.

>> can you chek if this is deployed successfully on XI system.

Yes. Basis deployed it in the installation stage itself and they confirmed.

I tried to test the connection with Filezilla and only Implicit FTPS is connecting but failing with the below error message.

Status: Connection established, initializing TLS...

Status: Verifying certificate...

Status: TLS/SSL connection established, waiting for welcome message...

Response: 220 Titan FTP Server (Secure) 2.20.140 Ready.

Command: USER XI

Response: 331 User name okay, need password.

Command: PASS ********

Response: 230-Welcome XI from 203.18.187.50. You are now logged in to the server.

Response: 230 User logged in, proceed.

Command: PBSZ 0

Response: 200 Command OK. PBSZ=0

Command: PROT P

Response: 200 Encrypting Data Channel.

Status: Connected

Status: Retrieving directory listing...

Command: PWD

Response: 257 "/" is current directory.

Command: TYPE I

Response: 200 Type set to I.

Command: PASV

Response: 227 Entering Passive Mode (129,33,170,157,39,18).

Command: MLSD

Response: 150 File status okay; about to open data connection.

Status: Server did not properly shut down TLS connection

Error: Could not read from transfer socket: ECONNABORTED - Connection aborted

Response: 226 Closing data connection. Transferred 297 bytes.

Error: Failed to retrieve directory listing

From the above log, we found that connection is establing from Filezilla but failing with error "Could not read from transfer socket: ECONNABORTED - Connection aborted".

From the above log, I think I need to use command order as "AUTH TLS,USER,PASS,PBSZ,PROT" in file adapter?

Pls let me know any suggestions.. meanwhile I wil update.

Thanks

Deepthi.

[Former Member]

Hi deepthi,

Check the messaging system for more logs of your adapter..

As you said its showing connected and after that not showing anything...

and commands you dont need to provide any extra commands..by default its available in adapter which can be used based on selection type(data or data and control..)

go to http://host:port/MessagingSystem/monitor/monitor.jsp

HTH

Rajesh

[Former Member]

Hi Rajesh,

The message is not even failing.. It is in the status of "Delivering". The below are the logs from adapter and Messaging system.

File Adapter Log:

Success Message successfully received by messaging system. Profile: XI URL: http://xi-dev.intranet.XI.com.au:50200/MessagingSystem/receive/AFW/XI Credential (User): PIISUSER

Success Using connection File_http://sap.com/xi/XI/System. Trying to put the message into the receive queue.

Success Message successfully put into the queue.

Success The message was successfully retrieved from the receive queue.

messaging system log:

Message ID 44b756da-d9bd-42e2-3136-e34d75adfe03

Message Type Asynchronously Received Message (RECEIVE)

From Service Name: BS_1

To Service Name: BS2

Action Namespace http://XI.com/SAP_PI/ControlData Name: BYPASS

Connection Name File_http://sap.com/xi/XI/System

Status Delivering

Error Category

Error Code

Profile XI

Transport HTTP

Delivery Semantics Exactly Once

Times Failed 0

Number of Retries 3

Sent / Received 09/09/2009 11:22:52

Transmitted / Delivered 09/09/2009 11:22:53

Next Delivery 09/09/2009 11:22:53

Persist Until 10/09/2009 11:22:52

Valid Until 01/01/1970 10:00:00

Retry Interval 5 Minutes

Address http://xi-dev.intranet.XI.com.au:50200/MessagingSystem/receive/AFW/XI

Transport Headers authorization=Basic UElJU1VTRVI6dDFhbTRyaWE= Content-Length=3010 accept-encoding=gzip sap-xi-messageid=44B756DAD9BD42E23136E34D75ADFE03 content-length=3024 host=xi-dev.intranet.XI.com.au:50200 user-agent=SAP Web Application Server (1.0;700) content-type=multipart/related;boundary=SAP_4AA4E14330050131E10080000A722149_END;type="text/xml";start="" HTTP=POST soapaction="http://sap.com/xi/XI/Message/30"

Principal Propagation

[Former Member]

Hi,

Along with above mentioned SAP help,

Refer to SAP note : 821267 --> Question 28

Also have look into the discussion for the CC parameters

Thanks

Swarup

[Former Member]

Hi Swarup and Sravesh,

Thank you for the reply.

>> The CA certificate that is used to sign the server certificate must be added to trusted CA Key store view.

My receiver side ppl doesn't provide any certificates to install in our server.

My network team checked the connection from "Core FTP Lite (free-ware to conduct this data transfer)" software and they are able to connect to the server and able to transfer the files.

Looks like there is no need to install any partner certificate in our server? because XI is a SSL-permitting FTP client.?

In the adapter log, it is just showing as

Connecting to server "120.30.0569" ..

and it is not doing anything after that.

Any idea what might be the issue?

Thanks

Deepthi.

[Former Member]

Hi Deepthi,

Use the link given below. This would be helpful get details of file adapter parameters.

http://help.sap.com/saphelp_nw70/helpdata/EN/84/e8763c997fda50e10000000a11405a/frameset.htm

Regards,

Sarvesh Desai