Keyboard-interactive authentication on the SFTP server In PI

[vishnu_pallamreddy]

Hi All,

I have an issue related to SFTP adapter, I.e, unsupported operation exception.

For that Mu friends ragu and praveen suggested a  SAP NOTE 1945020.

in that note I have found resolution like below:

Resolution

Switch off the Keyboard-interactive authentication on the SFTP server.

How to Switch off the Keyboard-interactive authentication on the SFTP server.?

Please help me the to resolve the issue.

Thanks In Advance,

Vishnu Pallamreddy.

[former_member182412 · Accepted solution]

Hi Vishnu,

Dont create duplicate threads for same issue, you already opened the below thread for similar issue.

Switch off the Keyboard-interactive authentication must be done in SFTP server, not in PI server.

So better to update the SFTP adapter as per below SAP Note.

2073667 - "UnsupportedOperationException" on SFTP receiver channel

Confirm your current SFTP adapter version by opening below URL.

http://<pihost>:<piport>/nwa/sysinfo

Regards,

Praveen.

[vishnu_pallamreddy · Accepted solution]

Hi Praveen,

Now I don't have access to NWA,

I will check and let you know...

In ESR and IB(CC) it is showing like SFTP ADAPTER 1.0. Please find the screen shot.

if it is same as above screen shot, what are the necessary steps?

I think my PI box is SP04.

[former_member182412 · Accepted solution]

Hi Vishnu,

By looking at your screen shot your SFTP adapter is less than SP03 patch level 06.

According to the note the fix is available from SP03 patch level 6, so you can download the latest SFTP adapter from service market place and deploy in PI server.

http://service.sap.com/swdc > Support Package and Patches > Browse our Download Catalog > SAP NetWeaver and complementary products > PI SFTP PGP ADDON > PI SFTP PGP ADDON 1.0-->Comprised Software Component Versions->SFTP ADAPTER 1.0-># OS independent

Download SP04 from the list.

Check below document for more details.

Regards,

Praveen.

[vishnu_pallamreddy · Accepted solution]

Hi Praveen,

If I deploy the same in PI, Is there any impact on present SFTP channels?

[former_member182412 · Accepted solution]

Hi Vishnu,

There will be no impact on current communication channels. It is just latest service pack with all the fixes like which you are facing currently.

Regards,

Praveen.

[vishnu_pallamreddy · Accepted solution]

Thank You Praveen,

Going forward I won't create duplicate threads.

[vishnu_pallamreddy · Accepted solution]

Hi Praveen,

Please see the screen shot of SFTP adapter version:

[former_member182412 · Accepted solution]

Hi Vishnu,

Yes your SFTP adapter service pack is SP03 and patch level 3, the fix for this error is from patch level 6, so you update the SFTP adapter in order to fix this error.

I also faced same problem when i was on SP03, i updated to SP04 then my interfaces are running without this error.

Regards,

Praveen.

[former_member186851 · Accepted solution]

Hello Vishnu,

Did you disable that option at the server level?

And more check point,Make sure the certificates are valid.

[vishnu_pallamreddy · Accepted solution]

Hi Praveen,

I am working with basis team to deploy the same.

once it is completed I will let you know the status.

[vishnu_pallamreddy · Accepted solution]

Hi Raghu,

How can we disable that option in SFTP Server?

if you have any document for that, please share with me.

Certificates are valid.

[vishnu_pallamreddy · Accepted solution]

Hi Praveen/Raghu,

Could you please gave confirmation on below:

I have saved SAP PI SFTP public keys in SF SFTP Server as below:

I have login to SF SFTP server through Win SCP and created a folder with name " .ssh " in that i have created one file named as " Authorized_Keys " and in that I have saved SAP PI SFTP public key in a single line.

Is it correct way or not for Key Based Authentication in PI CC?

[former_member186851 · Accepted solution]

Hello Vishnu,

SFTP team should be knowing it,Refer the below links ,Might be helpful

https://groups.google.com/forum/#!topic/comp.security.ssh/3Zf2ZEyuj54

RFC 4252 - The Secure Shell (SSH) Authentication Protocol

[former_member182412 · Accepted solution]

Hi Vishnu,

The steps you have done are right, Check 4.2 section in below document.

Regards,

Praveen.

[vishnu_pallamreddy · Accepted solution]

Hi Praveen,

Thanks for the confirmation.

I have followed the same process.

[vishnu_pallamreddy · Accepted solution]

Hi Praveen,

i have suggested the note to my Client, which you have suggested.

please find the below reply:

Hi Vishnu,

We are using SFTP adapter in several scenarios and it may cause huge risk if we upgrade it. We need to test all those interfaces.

Do you have any other option?

Is there any alternate option?

[former_member186851 · Accepted solution]

Hello Vishnu,

I guess from PI its not possible to handle this without keyboard interactive option.

You can suggest them to disable this option and go with certificate/key based authentication which is more safe.

[vishnu_pallamreddy · Accepted solution]

Hi Raghu,

now we are using key based authentication only in PI channels.

So we need to stop Key board interactive authentication in SFTP server right?

[former_member186851 · Accepted solution]

yes Vishnu, Correct. You can refer the note which I shared.

[vishnu_pallamreddy · Accepted solution]

Hi Raghu,

This SAP NOTE 1945020 one?

in this note they have mentioned like switch off keyboard authentication.

But How?

SFTP team only can do it right?

[former_member186851 · Accepted solution]

yes Vishnu,

SFTP team will do at the SFRP server level.

[former_member186851]

This message was moderated.

[former_member182412]

Hi Raghu,

I already mentioned the point, you must not give duplicate answers.

Regards,

Praveen.

[former_member186851]

ya,,Correct Praveen,Thanks

little bit confused with mutliple threads and didn't read your first reply.