IBM i Version 7.2 Networking File Transfer Protocol IBM Note Before using this information and the product it supports, read the information in “Notices” on page 157. This document may contain references to Licensed Internal Code. Licensed Internal Code is Machine Code and is licensed to you under the terms of the IBM License Agreement for Machine Code. © Copyright International Business Machines Corporation 1998, 2013. US Government Users Restricted Rights – Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp. Contents FTP on IBM® i.........................................................................................................1 What's new for IBM i 7.2..............................................................................................................................1 PDF file for File Transfer Protocol................................................................................................................1 Scenarios: FTP..............................................................................................................................................1 Scenario: Transferring a file from a remote host...................................................................................2 Scenario: Securing FTP with SSL............................................................................................................3 Configuration details.........................................................................................................................4 Creating and operating a local CA on the MyCo system.............................................................4 IBM i FTP: Enabling SSL for MyCo's FTP server..........................................................................5 Exporting a copy of MyCo's local CA certificate to a file.............................................................6 Creating an *SYSTEM certificate store on TheirCo's system..................................................... 6 Importing MyCo's local CA certificate into TheirCo's *SYSTEM certificate store......................6 Specifying MyCo's local CA as a trusted CA for TheirCo's FTP client.........................................7 Configuring the FTP server on IBM i............................................................................................................ 7 Configuring FTP server in System i Navigator........................................................................................8 Configuring FTP servers for graphical FTP clients and Web tools........................................................ 8 File and directory entries in IBM i format.........................................................................................9 File and directory entries in UNIX-style format............................................................................... 9 Configuring anonymous FTP................................................................................................................ 11 Preparing for anonymous FTP........................................................................................................ 12 Writing exit programs for anonymous FTP.....................................................................................13 Creating an IBM i user profile: ANONYMOUS................................................................................ 14 Creating a public library or directory..............................................................................................14 Installing and registering exit programs........................................................................................ 14 Installing exit programs............................................................................................................ 15 Registering exit programs......................................................................................................... 15 Securing FTP on IBM i................................................................................................................................15 Preventing FTP server access on IBM i................................................................................................16 Preventing the FTP server from starting automatically on IBM i.................................................. 16 Preventing access to FTP ports on IBM i........................................................................................16 Controlling FTP access on IBM i.......................................................................................................... 17 Using SSL to secure the FTP server on IBM i.......................................................................................18 Creating a local CA on IBM i........................................................................................................... 19 Associating a certificate with the FTP server on IBM i.................................................................. 19 Requiring client authentication for the FTP server........................................................................ 20 Enabling SSL on the FTP server......................................................................................................21 Securing FTP clients with TLS or SSL...................................................................................................21 Securing FTP with Kerberos authentication........................................................................................ 23 Managing access using FTP exit programs..........................................................................................25 Managing access using System i Navigator.........................................................................................26 Monitoring incoming FTP users............................................................................................................26 Managing the FTP server........................................................................................................................... 27 Starting and stopping the FTP server.................................................................................................. 27 Setting the number of available FTP servers.......................................................................................27 Improving FTP server performance with configurable subsystem support.......................................28 Using the FTP client on the IBM i platform............................................................................................... 28 Starting and stopping a client session.................................................................................................28 Server timeout considerations.............................................................................................................32 Transferring files with FTP................................................................................................................... 32 Running FTP in unattended mode using a batch job on IBM i ........................................................... 33 Simple example: Batch FTP............................................................................................................33 iii Complex example: Batch FTP........................................................................................................ 35 Example: Creating a CL program to start FTP.......................................................................... 35 Example: Creating the FTP input file (FTCPDMS).....................................................................36 Example: CL program for submitting the FTPBATCH job.........................................................38 Example: Checking the FTP output file for errors.................................................................... 38 FTP reference information.........................................................................................................................41 FTP server subcommands on i5/OS.................................................................................................... 41 FTP client subcommands on IBM i...................................................................................................... 60 FTP exit programs................................................................................................................................ 95 Request validation exit point: client and server............................................................................ 96 Example: FTP client or server Request Validation exit program in CL code............................97 Example: FTP Server Request Validation exit program in ILE RPG code................................ 99 VLRQ0100 exit point format................................................................................................... 103 FTP server logon exit point...........................................................................................................107 Example: FTP Server Logon exit program in CL code............................................................ 109 Example: FTP Server Logon exit program in C code.............................................................. 110 Example: FTP Server Logon exit program in ILE RPG code................................................... 117 TCPL0100 exit point format....................................................................................................119 TCPL0200 exit point format....................................................................................................123