SFTP and SSHD character ID limitation (with Spanish and Portuguese version))

Did you try to use SFTP or SSHD with a user ID that have more than 8 character and have see the following error ?

No user exist for uid 1742

 There is an eight-character limitation on the user profiles that can access the IBM i through SSHD. The eight-character limitation is also placed on any group profile that the user might be a member of. If any of the other members in a group profile have more than eight characters in their user name, access to the system will be denied.

There is a solution to this eight-character limitation, you can either create system wide environment variable:

ADDENVVAR ENVVAR(PASE_USRGRP_LIMITED) VALUE(‘N’) LEVEL(*SYS)

or add a specicial directive to the sshd_config file:

ibmpaseforienv PASE_USRGRP_LIMITED=N

 The OpenSSH daemon configuration file (sshd_config) is located in the following IFS directories:

R540 – /QOpenSys/QIBM/UserData/SC1/OpenSSH/openssh-3.5p1/etc
R610 – /QOpenSys/QIBM/UserData/SC1/OpenSSH/openssh-3.8.1p1/etc
R710 – /QOpenSys/QIBM/UserData/SC1/OpenSSH/openssh-4.7p1/etc
R720 – /QOpenSys/QIBM/UserData/SC1/OpenSSH /etc

 

SPANISH:

Ha intentado utilizar SFTP o SSHD con un ID de mas 8 caracteres y se encontró son el siguiente error ?

No user exist for uid 1742

 Hay una limitación de ocho caracteres en los perfiles de usuario para acceder o utilizar IBM i en SSHD o SFTP.

Esta limitacion tambien es para los perfiles de grupo que el usuario es miembro, si cualquiera de los miembros del perfil de grupo tiene mas de 8 caracteres en su nombre de usuario, el acceso sera negado.

Hay una solucion para esta limitacion de caracteres, puede crear una variable de entorno de todo el sistema:

ADDENVVAR ENVVAR(PASE_USRGRP_LIMITED) VALUE(‘N’) LEVEL(*SYS)

o añadir una directiva en el archivo sshd_config:

ibmpaseforienv PASE_USRGRP_LIMITED=N

 El archivo OpenSSH daemon (sshd_config) esta ubicado en el siguiente directorio del IFS

R540 – /QOpenSys/QIBM/UserData/SC1/OpenSSH/openssh-3.5p1/etc
R610 – /QOpenSys/QIBM/UserData/SC1/OpenSSH/openssh-3.8.1p1/etc
R710 – /QOpenSys/QIBM/UserData/SC1/OpenSSH/openssh-4.7p1/etc
R720 – /QOpenSys/QIBM/UserData/SC1/OpenSSH /etc

Cuando los cambios fueron realizados para que entren en vigencia tiene que finalizar y rearrancar el servicio SSHD.

 

PORTUGUESE:

Você tentou usar SFTP ou SSHD com uma ID de usuário com mais de 8 caracteres e ver o seguinte erro?

Nenhum usuário existe para uid 1742

Existe uma limitação de oito caracteres nos perfis de usuários que podem acessar o IBM i através do SSHD. A limitação de oito caracteres também é colocada em qualquer perfil de grupo do qual o usuário possa ser membro. Se qualquer um dos outros membros em um perfil de grupo tiver mais de oito caracteres em seu nome de usuário, o acesso ao sistema será negado.

Existe uma solução para esta limitação de oito caracteres, você pode criar uma variável de ambiente abrangente do sistema:

ADDENVVAR ENVVAR (PASE_USRGRP_LIMITED) VALOR (‘N’) NÍVEL (* SYS)

ou adicione uma diretiva específica ao arquivo sshd_config:

ibmpaseforienv PASE_USRGRP_LIMITED = N

O arquivo de configuração do daemon OpenSSH (sshd_config) está localizado nos seguintes diretórios IFS:

R540 – /QOpenSys/QIBM/UserData/SC1/OpenSSH/openssh-3.5p1/etc

R610 – /QOpenSys/QIBM/UserData/SC1/OpenSSH/openssh-3.8.1p1/etc

R710 – /QOpenSys/QIBM/UserData/SC1/OpenSSH/openssh-4.7p1/etc

R720 – / QOpenSys / QIBM / UserData / SC1 / OpenSSH / etc

RPG FROM OBJECT TO SOURCE, WHEN YOU WANT AND WHEN YOU DON’T WANT

In this study I would elaborate on the need to recuperate code from an object, or to protect code when you don’t want that someone could recover your source.

Spanish version.

Portuguese version.

It could happen that you want to work on a program but you aren’t able to find source, the object description indicates a library/source file no more existing or the source member isn’t simply there.

If the source object is a CLP/CLLE and it was compiled with “Allow RTVCLSRC” parameter = *YES, you could easily use the IBM command RTVCLSRC to recover your source. If the source is RPG or RPGLE there isn’t a standard IBM command to let you retrieve the code source. Then if the object is compiled with “Source listing options” there are different ways to solve the problem: you can check it by executing DSPPGM command verifying the observability option (*ALL).

If the program is compiled with observability you could use STRISDB (Start Interactive Source Debugger) or STRDBG to debug it and recover the source. This could be heavy for source with a lot of lines because you should “cut and past” a lot of times.

A valid alternative could be RDI or, if you don’t have it, “System I Navigator” will help you with the following steps (program compiled with Debug *ALL or *LIST):

1) Under Databases, right click on the system name and select Run SQL Script

2)Select Run as Debugger

3)Enter the program name and library and press Enter.

For more details about “System I Navigator” please have a look at the site

http://www-01.ibm.com/support/docview.wss?uid=nas8N1013133

 

But what happen if the code doesn’t have the debugging options?

I had a look around and it seems the only solution is to ask help for companies that have decompiling tools: the only one I found who could recover without observability is “juggersoft”. Check the site at http://www.juggersoft.com or the faq page at http://www.juggersoft.com/faq.htm

 

And when you want to debug your code on the customer environment? Your code could be unprotected….. So in version 7.1 the ILE compilers (RPG, COBOL, CL, C and C++) and precompilers have a new parameter that you can use to encrypt your debug views. You could send code that can be debugged but your code isn’t exposed.

With the DBGENCKEY option, you can specify the encryption key that is used to encrypt the program source. The debugger requires the user to enter the debug encryption key before the views are decrypted. The key can have 1-16 bytes, with blank if the user specifies less bytes. Length zero means *NONE.

So the steps to use this parameter are:

  • Encrypt the debug view:

CRTBNDRPG PGM_NAME DBGENCKEY(‘my code’)

  • Run the STRDBG PGM_NAME DBGENCKEY(‘my code’)

IBM i in cloud: “trick or treat…?” – PART 2

 

Following to the study about Cloud in the previous post:

IBM i in cloud: “trick or treat…?” – PART 1

I tried to have a look around the sites that are hosting providers, trying to understand services, prices, service level and so on. The work was very hard because most of their don’t show clearly prices, term and conditions but remind to a form for requiring more info.

At the last I prepared this list.  I hope I could enrich it with your suggestions/corrections or with new hosting providers.

1) https://www.source-data.com/cloud-400/

free 60-day trial

You shold get a quote from the:

Solution Of Interest
Cloud400
IBM i on POWER Server
IBM i / OS400 Version Upgrade
Disaster Recover
Hosted High Availability
On Premise High Availability
Cloud Backup And Recovery
On Premise Backup Server
Emergency Replacement Server

2) http://iinthecloud.com

Basic Access to Single Partition $ 50/month
Dedicated Partition Single User (7.2, 7.1, or 6.1) $100/month
Dedicated Partition Single User (V5R3 or V5R4) $300/month

Terms:
Access is provided via the internet. No VPN is needed. Users can connect directly to the partition. We can provide a secure connection to your partition with an SSH tunnel. SMTP/POP/IMAPI and other mail protocols are not available and are not allowed. If you need a mail server for development, we can supply a separate quote.

A 3-month minimum is required on all orders. After the first 3 months, billing will be done monthly.

Performance will be monitored and changes made as needed.

Production workloads and commercial development (building software for resale) cannot be allowed due to our agreement with IBM. Shareware and open source developers are welcome. Using the system to build and/or deliver educational material is not only encouraged, but welcomed. That’s what we are all about!

3) http://www.abacusllc.com/Cloud/i-Cloud.aspx#.VaaAJ9jbJ0Q:

Abacus i Cloud Options:
– Enterprise i Cloud was created with IBM i business critical workloads in mind
– Entry i Cloud fills the void the IBM i market place has been screaming for – a low cost, short term, and ease of entry/exit cloud
– Hosting let Abacus be the final destination for your older AS/400, IBM iSeries, System i, and IBM Power Systems environments.

You should ask for a quote

4) http://www.all-for-one.com/de/leistungen/dcw-software/dcw-hosting.html (Germany)

5) http://www.apsu.com/managed-it-services/managed-services-power-i/

You should ask for more details

6) https://baseline-data.com/

You should ask for more details

7) http://www.bluechip.co.uk/ibm-support/os400-support/os400-managed-services

8) https://www.source-data.com/cloud-400/

free-60-day-trial
and you should request for a quote

9) http://www.connectria.com/technologies/iseries.php

10) https://www.databalance.nl/

11) http://www.evolutionsystems.com.au/solutions/cloud

12) https://www.fnts.com/cloud

13) http://iinthecloud.com/

14) https://www-356.ibm.com/partnerworld/wps/servlet/ContentHandler/stg_com_sys_power-development-platform

15) https://www.itechsol.com/solutions/cloud-backup-capability/

Cloud backup solutions

16) http://www.keyinfo.com/solutions-we-build/Key-Cloud/

IBM i machines start at $157/month and grow to as big as you need

But the list could be enriched with the following:

– https://www.krengeltech.com/litmis/spaces/
– http://www.legatotech.com/ibm-system-i.html
– http://www.us.logicalis.com/microsites/cloud-computing.aspx
– http://logicalishddc.co.uk/cloud/caas/ibm/
– http://www.meridiancloudsolutions.com/
– http://www.mindshift.com/Iam/IT-Executive/Data-Center-Services/Hosting.aspx
– http://nspi.com/iseries.html
– https://www.firstlight.net/oxford-networks/
– Rent-as400.eu
– http://www.rzkh.de/
– http://www.siasmsp.com/
– http://www.servit.net//?service_cats=power-systems
– http://thinksis.com/sis-managed-solution-center-data-center/platform-hosting/as400-ibm-iseries
– https://www.source-data.com/
– http://www.sym-corp.com/as400/
– http://www.acscloud.com/14