UNIX for Dummies Questions & Answers

Hi,

I am getting the following error when trying to use SFTP to go from my PROD to DEV. We are running AIX 5.3 64 bit.

[tcutil] /home/tcutil/scripts 3720=>sftp -o Cipher=blowfish -o Compression=yes dradmin@xyz
Connecting to xyz....
dradmin@xyz's password:
buffer_get_ret: trying to get more bytes 1 than in buffer 0
buffer_get_char_ret: buffer_get_ret failed
buffer_get_char: buffer error
Connection closed

I am no Unix Guru so please bare with me. Would this indicate that SFTP is not setup or does this indicate that there is something wrong with my statement of how I am connecting?

Try it without the cipher or compression options and see what it does.

>sftp dradmin@xyz
Connecting to xyz...
dradmin@xyz's password:
sftp>


Looks like that worked, but I would like to use the cipher option. What is required to do so?

Well, I think the server would need to be using that cipher option too...

Any quick hints or links on how to set this up?

Hmm... I'm not sure whether you're using openssl or not, but I've been looking through 'man 5 sshd_config'. It may be the compression option that's fouling it up -- sshd defaults to negotiating for compression, but you're feeding it something already compressed which it can't understand. 'Compression=delayed' may work better on the client side, or you could set Compression=yes on the server side(be cautious though, since that would affect all sshd connections!) Also, 'blowfish-cbc' might be what you want, I don't see blowfish listed as anything else in its default allowed cipher list.

sftp -o Cipher=blowfish -o Compression=delayed dradmin@xyz
Connecting to xyz...
command-line line 0: Bad yes/no argument.
Connection closed

Problem is that I don't have access to modify the config file to enable the blowfish-cbc When I look at it I don't see any CIPHER parameter setting and also, I only see /etc/ssh as opposed to /etc/ssh2...???? Could that be a problem?