[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Ftpapi] [EXTERNAL] Re: Authentication using public and private key



Hello Scott,

 

We are a System Administration team, we don’t know much about the matter. What we know is that we were given a cer with a key which we’ve imported to DCM and it should give us permission to access the webservice but it isn’t working because it’s asking for a user and password. We are sending as attachment the logs given by the application team. Can you help us?

Thank you very much,


Manuel Ribeiro

Técnica de sistemas System i
Área - Filials, Internacional

e-mail: manuel.ribeiro@xxxxxxxxxxxxxxxxxxxx

               bgitnow.systemi.fil@xxxxxxxx

Tel.: +351 916050991

Máximo/peticiones/Catálogo de Oferta: FILIALES-> SERVIDORES Y ALMACENAMIENTO -> IBM i

 

 

 

 

From: ftpapi-bounces@xxxxxxxxxxxxxxxxxxxxxx <ftpapi-bounces@xxxxxxxxxxxxxxxxxxxxxx> On Behalf Of Scott Klement
Sent: 18 de setembro de 2020 23:07
To: ftpapi@xxxxxxxxxxxxxxxxxxxxxx
Subject: [EXTERNAL] Re: [Ftpapi] Authentication using public and private key

 

Este mensaje proviene de un remitente externo: tenga cuidado, especialmente, con enlaces y archivos adjuntos.


Hello Manuel,

You haven't provided very much information.  What sort of public/private key authentication are you trying to use?  Do you have an example of doing this with a different tool that could be adapted to HTTPAPI?

Also, the portion of the HTTP_DEBUG log you provide doesn't contain the actual HTTP conversation, which might have had some information that would explain what is needed.  Can you provide the remainder of the log?  Or, if its private, perhaps you can look in the log and determine what needs to be done?

Thanks!

 

On 9/18/2020 5:00 AM, Técnica de Sistemas System-i Filiales wrote:

Hello,

 

Does anyone knows how I can setup public and private key authentication in HTTPAPI? Do I need to import something on DCM or anywhere else?

We are currently getting this error.



 

SetError() #13: HTTP/1.1 401 Unauthorized

recvresp(): end with 401

recvdoc parms: chunked 0

SetError() #36: This page requires a user-id & password

http_close(): entered

 

Thank you in advance


Manuel Ribeiro

Técnica de sistemas System i
Área - Filials, Internacional

e-mail: manuel.ribeiro@xxxxxxxxxxxxxxxxxxxx

               bgitnow.systemi.fil@xxxxxxxx

Tel.: +351 916050991

Máximo/peticiones/Catálogo de Oferta: FILIALES-> SERVIDORES Y ALMACENAMIENTO -> IBM i

 

 

 


__________________________________________________

Li cal imprimir aquest missatge? Protegim el medi ambient •¿Necesita imprimir este mensaje? Protejamos el medio ambiente • Do you need to print this message? Let's protect the environment

Advertiment legal: la informació d’aquest missatge de correu electrònic s’adreça exclusivament al destinatari previst. Si ha rebut el missatge per error, si us splau, notifiqui-ho al remitent i esborri’l sense copiar-lo, enregistrar-lo ni distribuir-lo.

Advertencia legal: la información de este mensaje de correo electrónico se dirige exclusivamente al destinatario previsto. Si usted ha recibido el mensaje por error, por favor, notifíquelo al remitente y bórrelosin copiarlo, grabarlo ni distribuirlo.

Legal warning: the information contained in this e-mail message is for the exclusive attention of the planned recipient. If you have received the message by error, please notify the sender and delete the message without copying, recording or distributing it.
__________________________________________________

IT NOW, S.A.
c/ Numancia 164, 08029 Barcelona
Registro Mercantil de Barcelona, tomo 37789, folio 29, hoja número B-41494
CIF: A-58443060




__________________________________________________

Li cal imprimir aquest missatge? Protegim el medi ambient •¿Necesita imprimir este mensaje? Protejamos el medio ambiente • Do you need to print this message? Let's protect the environment

Advertiment legal: la informació d’aquest missatge de correu electrònic s’adreça exclusivament al destinatari previst. Si ha rebut el missatge per error, si us splau, notifiqui-ho al remitent i esborri’l sense copiar-lo, enregistrar-lo ni distribuir-lo.

Advertencia legal: la información de este mensaje de correo electrónico se dirige exclusivamente al destinatario previsto. Si usted ha recibido el mensaje por error, por favor, notifíquelo al remitente y bórrelosin copiarlo, grabarlo ni distribuirlo.

Legal warning: the information contained in this e-mail message is for the exclusive attention of the planned recipient. If you have received the message by error, please notify the sender and delete the message without copying, recording or distributing it.
__________________________________________________


IT NOW, S.A.
c/ Numancia 164, 08029 Barcelona
Registro Mercantil de Barcelona, tomo 37789, folio 29, hoja número B-41494
CIF: A-58443060

{"detail":"Client authentication failed.","title":"invalid_client","instance":"/MensajesSwiftSAAXMLWS/MTtoXMLv2","type":"about:blank"}
HTTPAPI Ver 1.42 released 2020-10-12
NTLM Ver 1.4.0 released 2014-12-22
OS/400 Ver V7R2M0

http_url_post(): entered
http_persist_open(): entered
http_long_ParseURL(): entered
DNS resolver retrans: 2
DNS resolver retry  : 2
DNS resolver options: x'00000136'
DNS default domain: lacaixa.es
DNS server found: 10.117.20.84
DNS server found: 10.241.10.17
Nagle's algorithm (TCP_NODELAY) disabled.
SNI hostname set to: apib2b.pre.internal.cer.banco.com
-------------------------------------------------------------------------------------
Dump of server-side certificate information:
-------------------------------------------------------------------------------------
Cert Validation Code = 0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Serial Number: 1B:00:03:F5:EC:8B:E1:E9:54:B4:7A:D1:26:00:00:00:03:F5:EC
Common Name: *.pre.internal.cer.banco.com
Country: ES
State/Province: Barcelona
Locality: AVDA. DIAGONAL, 621
Org Unit: banco, S.A.
Org: APLICACIONS CLOUD
Issuer CN: banco CA Emisora
Issuer Org: banco S.A.
Version: 3
not before: 20200701215247
Unknown Field: 21:52:47 01-07-2020
not after: 20220701215247
Unknown Field: 21:52:47 01-07-2022
pub key alg: 1.2.840.113549.1.1.1
signature algorithm: 1.2.840.113549.1.1.11
Unknown Field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
Unknown Field: 2048
Unknown Field: 8A858A2C03775F8196C2E42301063DDD
Unknown Field: 1.2.840.113549.2.5
Unknown Field: B23C8773F3D00656547FBC19DBDD84C20E380458
Unknown Field: 8F0CEC4EC5A3597C3A919B28D34D8FA37C5163B3ED2665BA3E12DD348979EDC9
Unknown Field: 5
Unknown Field: api.pre.internal.cer.banco.com
Unknown Field: 1.3.6.1.5.5.7.3.1

Protocol Used: TLS Version 1.2
http_persist_post(): entered
http_persist_req(POST) entered.
http_long_ParseURL(): entered
http_long_ParseURL(): entered
do_oper(POST): entered
There are 0 cookies in the cache
POST /MensajesSwiftSAAXMLWS/MTtoXMLv2 HTTP/1.1
Host: apib2b.pre.internal.cer.banco.com
User-Agent: http-api/1.24
Content-Type: text/xml;charset=utf-8
Content-Length: 743


senddoc(): entered
<soap:Envelope xmlns:soap="http://www.w3.org/2003/05/soap-envelope"; xmlns:mtt="http://mttoxmlv2.mensajesswiftsaaxmlws.mca.si.absis.lacaixa.es/";>   <soap:Header/>   <soap:Body>      <mtt:MTtoXMLv2>           <externalInputTO>           <entorno>PRE</entorno>            <firmaDigital>N</firmaDigital>            <msgIn>{1:F01CAIXDEF0XXXX2010141756}{2:I999CAIXMAM0XXXXN}{3:{108:FREE20201014207}}{4:
:20:FREE20201014207
:79:TEST WS SWIFT 202014101630-}</msgIn>            <origen>DE</origen>            <revisionSAA>2.0.6</revisionSAA>            <routingCode>XDLS001A</routingCode>            <msgInBase64>N</msgInBase64>            <msgOutBase64>N</msgOutBase64>         </externalInputTO>      </mtt:MTtoXMLv2>   </soap:Body></soap:Envelope>
recvresp(): entered
HTTP/1.1 401 
Date: Wed, 14 Oct 2020 14:30:37 GMT
Content-Type: application/json;charset=UTF-8
Content-Length: 134
Connection: keep-alive
X-REQUEST-ID: 85862ae8-5dce-420b-a536-0e54b151810d
Strict-Transport-Security: max-age=15724800; includeSubDomains


SetError() #13: HTTP/1.1 401
recvresp(): end with 401
recvdoc parms: identity 134
SetError() #36: This page requires a user-id & password
header_load_cookies() entered
AuthPlugin_mustReceiceAuthErrorPage(): entered
recvdoc(): entered
SetError() #0:
recvdoc(): Receiving 134 bytes.
{"detail":"Client authentication failed.","title":"invalid_client","instance":"/MensajesSwiftSAAXMLWS/MTtoXMLv2","type":"about:blank"}
SetError() #36: This page requires a user-id & password
http_close(): entered
-- 
_______________________________________________
Ftpapi mailing list
Ftpapi@xxxxxxxxxxxxxxxxxxxxxx
http://scottklement.com/mailman/listinfo/ftpapi