SFTP to AIX6.1 EFS

UNIX AIX
1

Hello all, my first post so please be gentle!
I have 2 x AIX 6.1.4.0 environments, one has EFS enabled and the other does not.

I have installed SSH & SSL on both systems, and configured SFTP using SSL authentication between both boxes:

openssh.base.client 5.2.0.5300 COMMITTED Open Secure Shell Commands
openssh.base.server 5.2.0.5300 COMMITTED Open Secure Shell Server
openssh.license 5.2.0.5300 COMMITTED Open Secure Shell License
openssh.man.en_US 5.2.0.5300 COMMITTED Open Secure Shell
openssh.msg.en_US 5.2.0.5300 COMMITTED Open Secure Shell Messages -
openssl.base 0.9.8.1100 COMMITTED Open Secure Socket Layer
openssl.man.en_US 0.9.8.1100 COMMITTED Open Secure Socket Layer
openssh.base.client 5.2.0.5300 COMMITTED Open Secure Shell Commands
openssh.base.server 5.2.0.5300 COMMITTED Open Secure Shell Server
openssl.base 0.9.8.1100 COMMITTED Open Secure Socket Layer

When I SFTP from one box to the EFS box, I can not transfer a file, and see a "Couldn't get handle: Failure" message. I have a similar problem when I SSH from one box to the EFS box and attempt to "touch" a file ("touch: 0652-046 Cannot create TESTING.").

When I perform any actions on the non-EFS locations on the EFS server (e.g. /tmp) it all works fine.

Can anybody assist?

Thanks

2

I hope there come people up with ideas that have actually AIX 6.1 boxes at hand (I do not, sadly ;)), but I found this nice article here:

Understanding EFS

They write you have to setup a SSL-Keystore and can grant access to it to others users etc. I guess you use a user with sftp which has this access?

As side note which will not have anything to do with EFS is, that you might want to use scp instead of sftp cause of the more comfortable syntax etc., if possible in your environment.

3

Thanks for the reply. I have seen the artcile to which you refer, and also tried SCP with the same results. I think I have set up the keystores for the correct users but the issue seems to be that my SFTP to the EFS server over SSL is not loading the UID of the EFS - enabled user.

I will continue investigations, and post the results here as soon as I have some!

4

In case anybody else has this problem in the not too distant future, I think I have found what I am looking for in the article linked below:

IBM System Mag