Enable authentication in the file transfer service (Version 5.0.1 and later)

In Version 5.0.1, the Network Deployment file transfer service is enhanced to provide role-based authentication. To take advantage of the new security function, enable authentication for the file transfer service, and WebSphere global security must be enabled.

Two versions of the file-transfer Web application are provided with this fix pack:

• /QIBM/ProdData/WebAS5/ND/installableApps/filetransfer.ear
  (Default) The version of the file transfer service that does not use authentication. This version is provided for compatability between Version 5.0 and Version 5.0.1.

• /QIBM/ProdData/WebAS5/ND/installableApps/filetransferSecured.ear
  The version of the file transfer service that uses authentication. You must redeploy this application at the deployment manager level to enable authenticated file transfers.

A wsadmin Jacl script is provided to help you redeploy the file transfer application. The script is redeployFileTransfer.jacl and can be found in the /QIBM/ProdData/WebAS5/ND/bin directory. After the deployment manager and all the nodes have been upgraded to Version 5.0.1, you can deploy the secured file transfer service by running the script.

Note that the deployment manager must be running for these examples. If the deplyment manager is not running, specify additional paramaters on the command "-conntype NONE".

To enable authentication in the Network Deployment file transfer server, perform these steps:

1. Logon the iSeries system on which the deployment manager is running.

2. Run the Start Qshell (STRQSH) command.

3. In Qshell, run the redeployFileTransfer script:

   /QIBM/ProdData/WebAS5/ND/bin/wsadmin -instance instance
     -profile redeployFileTransfer.jacl -c "fileTransferAuthenticationOn
     /QIBM/ProdData/WebAS5/ND/installableApps"

   where instance is the name of your WebSphere Application Server instance name.

   Note: If the deployment manager is not running, specify the additional parameter, "-connType NONE"

To disable the authenticated file transfer service, redeploy the unsecured version with the redeployFileTransfer script:

/QIBM/ProdData/WebAS5/ND/bin/wsadmin -instance instance
  -profile redeployFileTransfer.jacl -c "fileTransferAuthenticationOff
  /QIBM/ProdData/WebAS5/ND/installableApps"

where instance is the name of your WebSphere Application Server instance name.