Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  • Create a Shared Account with Password Authentication for a Local Server.

  • Assign a Shared Account to a Local Server via Local Servers Shared Accounts Service.
  • Assign a Shared Account to a Local Server via

    Shared Accounts

    Local Servers Service.

  • Create a Shared Account with SSH Key Authentication for a Local SFTP Server.

Create a Shared Account with Password Authentication for a Local Server

Step 1

From the UDMG Admin UI navigation pane, select Shared Accounts. The Shared Accounts list displays.

Image RemovedImage Added

Step 2

Click the Add icon () above the Shared Account tab.

Step 3

The Shared Account Details displays:

SFTP

  • In the Account Name field, enter stonebranch-01. The Account Name is only for display and reference inside UDMG.
  • In the Login Name field, enter stonebranch-01. The Login Name is the name for authentication; for example, the expected SFTP user name. 
  • In the Password field, enter any value for instance ChangeMe.

FTPES

stonebranch-10

Step 4

Click the Save icon (Image Removed).

Image Removed

Image Removed

Assign a Shared Account to a Local Server - Local Servers Service

Search for the correct shared account and add using the Image Removedarrow. For the SFTP server,  stonebranch-01. For the FTPES server, stonebranch-10.

Click the  Save changes button. 

Image Removed

  • In the Member of Business Service fields, select the appropriate one. 

FTPES

  • In the Account Name field, enter stonebranch-10
  • In the Login Name field, enter stonebranch-10
  • In the Password field, enter any value for instance ChangeMe.
  • In the Member of Business Service fields, select the appropriate one. 
Step 1

To create a local server follow XX or XX.

 SFTP: stonebranch-sftp-01, stonebranch-sftp-02

FTPES: stonebranch-ftpes-01 

Step 2

From the UDMG Admin UI navigation pane, select Local Servers. The Local Servers list displays.

Image Removed

Step 3

Select the correct server record. The server details are populated on the Details tabs.

Select the Accounts tab.

Image Removed

Step 4

Select the Pencil icon to add a shared account to the local SFTP server.

Image Removed

Step 5Step 6

It's now possible to connect to the SFTP server with this account credentials:

Code Block
$  sftp -P 4100 stonebranch-01@0.0.0.0
stonebranch-01@0.0.0.0's password:
Connected to 0.0.0.0.
sftp> ls
sftp-01-in

It's now possible to connect to the FTPES server with this account credentials:

Code Block
Step 4

Click the Save icon (Image Added). The shared account now displays in the Shared Accounts list. 

Image Added

Image Added

Assign a Shared Account to a Local Server - Shared Accounts Service

Step 1

To create a local server follow XX or XX Tutorial - Creating and Manually Starting an SFTP Server or Tutorial - Creating and Manually Starting an FTPES Server.

SFTP: stonebranch-sftp-01, stonebranch-sftp-02

FTPES: stonebranch-ftpes-01 

Step 2

From the UDMG Admin UI navigation pane, select Shared Accounts. The Shared Accounts list displays.

Select the newly created SFTP user stonebranch-1 and or FTPES user stonebranchuser stonebranch-10.

Step 3

Select the Local Servers tab. The list of associated Local Servers displays. 

Initially, the account is created without any reference and cannot be used for authentication to any of the local servers.

By associating it with 1 or more local servers, it is allowed for each of them. 

Step 4

Select the Pencil icon to associate a Local Server to the Shared Account.

Step 5

Search for stonebranch-ftpes-01 and add using the arrow. Click the Save changes button. 

Step 6

The Local Server list is updated for the account

...



Assign a Shared Account

...

to a Local

...

Server - Local Servers Service

If you don't already have a public key, generate a new SSH key for this account, for example:

Step 1

From the UDMG Admin UI navigation pane, select Shared Accounts. The Shared Accounts list displays.

Image Removed

Step 2

Click the Add icon (Image Removed) above the Shared Account tab.

Image Removed

Step 3

The Shared Account Details displays:

  • In the Account Name field, enter stonebranch-01. The Account Name is only for display and reference inside UDMG.
  • In the Login Name field, enter stonebranch-01. The Login Name is the name for authentication; for example, the expected SFTP user name. 
  • In the Password field, enter any value for instance ChangeMe.
Step 4

Click the Save icon (Image Removed).

Image Removed

Image Removed

Step 5
Step 1

Follow the above steps again to create another shared account stonebranch-02.

Step 2
Code Block
$ ssh-keygen -t ed25519 -C "stonebranch-02" -N "" -f stonebranch-02
Generating public/private ed25519 key pair.
Your identification has been saved in stonebranch-02.
Your public key has been saved in stonebranch-02.pub.
The key fingerprint is:
SHA256:gNvc9Km/Zoe6b/UEtfD0mIjjhiRO/eYujv/SU4+d8sk stonebranch-02
The key's randomart image is:
+--[ED25519 256]--+
|                 |
|     .      . o  |
|    . ...  . * = |
|     +o+o.o.o = .|
|    .oooS+o. .   |
|      . ..= o .  |
|        .= + * . |
|       .o.O +.=. |
|      .o=%*+ oE  |
+----[SHA256]-----+
Note
titleNote

The public key must be in OpenSSH format.
The following key types are supported: ed25519, ecdsa, rsa, dss. RSA and DSS are obsolete and not supported by all SFTP software servers and clients.

Step 3From the UDMG Admin UI navigation pane, select Local Servers. The Local Servers list displays.Step 4Select or create an SFTP server, stonebranch-sftp-02.Step 5

Follow the above steps again to add the shared account, stonebranch-02 to the local server. 

The details are populated in the Accounts tab. 

Image Removed

Step 6

Click the Certificates / Keys tab.

Image Removed

Step 7

Click the Add icon (Image Removed).

Image Removed

Step 8

The Certificate Details displays.

  • In the Name field, enterstb-02-pub.
  • In the Public Key field, select enter the user public key, for instance the content of the file stonebranch-02.pub:

Image Removed

The fields can be resized for easier display, simply move up or down the resize grabber in the corner of the field.

Step 9

Click Submit button.

The SSH key is stored for this account and client connection can be performed with SSH key authentication.

Step 10

It's now possible to connect to the SFTP server with this account private key:

Code Block
$ sftp -i stonebranch-02 -P 4101 stonebranch-02@0.0.0.0
Connected to 0.0.0.0.
sftp> ls
sftp-01-in

In this tutorial, you will:

  • Create a shared account for a local SFTP server using password authentication.
  • Create a shared account for a local SFTP server using SSH key authentication.
  • Create a shared account for a local FTPES server using password authentication.

Create a Shared Account with Password Authentication for a Local SFTP Server

Step 6 or create a SFTP server, for example stonebranch-sftp-01.:

Image Removed

Image Removed

Select the

To create a local server follow Tutorial - Creating and Manually Starting an SFTP Server or Tutorial - Creating and Manually Starting an FTPES Server.

SFTP: stonebranch-sftp-01, stonebranch-sftp-02

FTPES: stonebranch-ftpes-01 

Step 2

From the UDMG Admin UI navigation pane, select Local Servers. The Local Servers list displays.

Image Modified

Step 3

Select

the correct server record. The server details are populated on the Details tabs

Step 7

.

Select the Accounts tab.

Image Modified

Step 8

Step 4

Select the Pencil icon to add a shared account to the local SFTP server.

Step 95

Search for stonebranch-01 the correct shared account and add using the arrow. For the SFTP server,  stonebranch-01. For the FTPES server, stonebranch-10.


Click the  Save changes button. 

Step 106

It's now possible to connect to the SFTP server with this account credentials:


Code Block
$  sftp -P 4100 stonebranch-01@0.0.0.0
stonebranch-01@0.0.0.0's password:
Connected to 0.0.0.0.
sftp> ls
sftp-01-in

It's now possible to connect to the FTPES server with this account credentials:

Code Block




Create a Shared Account with SSH Key Authentication for a Local SFTP Server

Step 1

Follow the above steps again to create another shared account stonebranch-02.

Step 2

If you don't already have a public key, generate a new SSH key for this account, for example:

Code Block
$ ssh-keygen -t ed25519 -C "stonebranch-02" -N "" -f stonebranch-02
Generating public/private ed25519 key pair.
Your identification has been saved in stonebranch-02.
Your public key has been saved in stonebranch-02.pub.
The key fingerprint is:
SHA256:gNvc9Km/Zoe6b/UEtfD0mIjjhiRO/eYujv/SU4+d8sk stonebranch-02
The key's randomart image is:
+--[ED25519 256]--+
|                 |
|     .      . o  |
|    . ...  . * = |
|     +o+o.o.o = .|
|    .oooS+o. .   |
|      . ..= o .  |
|        .= + * . |
|       .o.O +.=. |
|      .o=%*+ oE  |
+----[SHA256]-----+


Note
titleNote

The public key must be in OpenSSH format.
The following key types are supported: ed25519, ecdsa, rsa, dss. RSA and DSS are obsolete and not supported by all SFTP software servers and clients.


Step 3From the UDMG Admin UI navigation pane, select Local Servers. The Local Servers list displays.
Step 4Select or create an SFTP server, stonebranch-sftp-02.
Step 5

Follow the above steps again to add the shared account, stonebranch-02 to the local server. 

The details are populated in the Accounts tab. 

Step 6

Click the Certificates / Keys tab.

Step 7

Click the Add icon ().

Step 8

The Certificate Details displays.

  • In the Name field, enterenter stb-02-pub.
  • In the Public Key field, select enter the user public key, ; for instance the content of the file stonebranch-02.pub:


The fields can be resized for easier display, ; simply move up or down the resize grabber in the corner of the field.

Step 9

Click Submit button.

The SSH key is stored for this account and client connection can be performed with SSH key authentication.

Step 10

It's now possible to connect to the SFTP server with this account private key:

Code Block
$ sftp -i stonebranch-02 -P 4101 stonebranch-02@0.0.0.0
Connected to 0.0.0.0.
sftp> ls
sftp-01-in

Create a Shared Account with Password Authentication for a Local FTPES Server

From the Shared Accounts list, select the newly created user stonebranch-10.

Select the Local Servers tab. The list of associated Local Servers displays. 

Initially, the account is created without any reference and cannot be used for authentication to any of the local servers.

By associating it with 1 or more local servers, it is allowed for each of them. 

Image Removed

Step 1

From the UDMG Admin UI navigation pane, select Shared Accounts. The Shared Accounts list displays.

Image Removed

Step 2

Click the Add icon (Image Removed) above the Shared Account tab.

Image Removed

Step 3

The Shared Account Details displays:

  • In the Account Name field, enter stonebranch-10. The Account Name is only for display and reference inside UDMG.
  • In the Login Name field, enter stonebranch-10. The Login Name is the name for authentication; for example, the expected FTP user name. 
  • In the Password field, enter any value for instance ChangeMe.
Step 4

Click the Save icon (Image Removed).

Image Removed

Step 5
Step 6

Select the Pencil icon to associate a Local Server to the Shared Account.

Image Removed

Step 7

Search for stonebranch-ftpes-01 and add using the Image Removedarrow. Click the Save changes button. 

Image Removed

Step 8

The Local Server list is updated for the account

Image Removed

Step 9

It's now possible to connect to the FTPES server with these account credentials.

Step 10

The association between Local Server and Shared Accounts can also be edited from the Accounts tab of the Local Server Service:  

Image Removed