Non-VMS to VMS SSH File Transfer

[Allan Large]

When files are downloaded via SSH from a non-VMS system to a VMS system, the file does not have the security settings defined in the DEFAULT_PROTECTION ACL setup for that directory.

For example, the ACL is:

SPEEDE.DIR;1 [STDSRV,REG] (RWE,RWE,RWED,)
(DEFAULT_PROTECTION,SYSTEM:RWED,OWNER:RWED,GROUP:RWED,WORLD:)


When the file is downloaded, it's protection settings are :

EDITRN56.;1 [STDSRV,REG] (RWD,RWD,R,)


When files are transferred from a VMS system, the protection settings are correct according to the ACL DEFAULT_PROTECTION.

We are experiencing this on all versions of VMS / TCPIP ranging from TCPIP V5.4 to V5.6 with all the latest ECO's.

Anyone have any ideas as to how we might be able to make this work ?

[Richard Whalen]

What are the file protections on the source system? Some implementations of SFTP attempt to set the same characteristics (protection, dates, size, etc) on the newly created file after copying it from the source. Of course "execute" privilege is completely different in the Unix world than the VMS world.

[Allan Large]

The thing is ... we don't know what the protection settings are on the client.

After a little more testing, we found that OpenSSH for Windows does work properly when copying to the VMS system.

To be specific, the client system that is sending the files is running FreeBSD 5.4 using SSHcomm's SSH-1.99-3.2.3.

What we are trying to accomplish to have the downloaded file take on the protection settings as defined in the ACE entry.

[Hoff]

Please enable and post (as text file attachments) the tracing of the full working and the full non-working transfer sequences. Usually the -vv flag on the sftp command.

Consider using a resource identifier here, as well. That can trump various of these issues:

http://labs.hoffmanlabs.com/node/1450

[Steven Schweda]

> When files are downloaded via SSH [...]

Which way is down? Which system is the
client, and which the server?

> To be specific, the client system that is
> sending the files is running FreeBSD 5.4
> using SSHcomm's SSH-1.99-3.2.3.

Many people would call that uploading.

> [...] the -vv flag [...]

Do we know even what the actual command being
used there is? The OpenSSH SFTP client has a
"-P" option to preserve permissions and
times, and something like that might affect
the results of a transfer. I'd expect any
chmod activity to appear in that diagnostic
output.

[Allan Large]

While the assigning of ACL's doesn't fix the root problem, it does give a work-around.

Thanks guys !!!