CUCM 7.X backup issue with Globalscape SFTP

Answered Question
May 31st, 2010

Hi,

Would like to know if anyone out there is using Globalscape SFTP server for CUCM 7.X backup successfully.

Backups were working successfully with the mention SFTP server until we upgraded the cluster from 6.1.3 to 7.1.3. Backups stopped running straight after the upgrade. I deleted the Backup Device from DRS & tried to add it back in but am now getting the error below & it won't even let me add it as a device again.

"Update failed : Unable to access SFTP server or SFTP server too slow to respond.Please make sure the login credentials and path are correct."

The path & login credentials are verified 100% correct (especially as it was working just before the upgrade & nothing changed on the SFTP server which is successfully running backups for multiple other applications)

I can point CUCM at a server running FreeSSH & it works fine so am gathering its a compatibility issue between Globalscape SFTP & CUCM 7.X  - but as our Globalscape support has expired i don't want to renew & then find it still won't work.......so would love to know if anyone out there has this working or come across anything similar

Thanks

Correct Answer by htluo about 6 years 8 months ago

From the packet capture, CUCM was able to set up a SSL connection with Globalscape.  So we can rule out the possibility of network issue.

From the packet capture, it looks like it was Globalscape who disconnect the session.  I would guess a permission or directory issue.

You may test Globalscope with a 3rd-party SFTP client (such as http://the.earth.li/~sgtatham/putty/latest/x86/psftp.exe).

1) Put psftp.exe in C:\

2) Open a command prompt and go to C:\

3) Type "psftp userid@ip-of-globalscape"

4) Log in with password

5) Try to upload a file.  eg. "put test.txt" (assuming you have a test.txt in C:\)

Michael

http://htluo.blogspot.com

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (2 ratings)
Loading.
htluo Mon, 05/31/2010 - 14:12

Would you be able to do a packet capture from CUCM?

utils network capture file cucm count 100000 size all

Recreate the problem.  Press Ctrl-C to stop capture.  Then you may use RTMT to collect "packet capture logs" or use command line:

file get activelog platform/cli/cucm.cap

Michael

http://htluo.blogspot.com

rchaseling Tue, 06/01/2010 - 03:08

Cheers Michael,

I'll get that capture today.......can i send it to you privately?

Russell

Correct Answer
htluo Tue, 06/01/2010 - 09:37

From the packet capture, CUCM was able to set up a SSL connection with Globalscape.  So we can rule out the possibility of network issue.

From the packet capture, it looks like it was Globalscape who disconnect the session.  I would guess a permission or directory issue.

You may test Globalscope with a 3rd-party SFTP client (such as http://the.earth.li/~sgtatham/putty/latest/x86/psftp.exe).

1) Put psftp.exe in C:\

2) Open a command prompt and go to C:\

3) Type "psftp userid@ip-of-globalscape"

4) Log in with password

5) Try to upload a file.  eg. "put test.txt" (assuming you have a test.txt in C:\)

Michael

http://htluo.blogspot.com

rchaseling Wed, 06/02/2010 - 06:58

Michael,

There is obviously something wrong with the Globalscape server as i can't connect to it using psftp as you suggested - Its coming up with a network error. Now that i know its not a CUCM / Globalscape issue i can move forward with this.

I appreciate this & have added your advice to my bag of tricks

Russell

William Bell Wed, 06/02/2010 - 07:09

Russell,

You definitely want to store Michael's hints in your back of tricks.  You may need a new bag because Michael has a lot of good tips (+5 Michael!).  Now, if you are looking for a SFTP replacement, there are a few packages that Cisco references but the expectation is that you will test them out and validate in your own environment.  I have had good success with copSSH in environments where folks preferred to run the SFTP services on a Windows based host.  I haven't tested with Windows 7 or Windows 2008.  But I have used it on XP, 2000, and 2003 with good success.  It can run as a service, which makes it more appealing for supporting regular backups.

Of course, if you have a *nix system floating around and prefer to use that, then openSSH is a good bet.  Actually, copSSH is a port of openSSH to Windows.  I did a write up on how to setup copSSH for Cisco UC apps here:

http://www.netcraftsmen.net/resources/blogs/which-windows-sftp-server-should-i-use-for-my-cisco-uc-appliance-how-about-copssh.html

HTH.


Regards,
Bill

rchaseling Wed, 06/02/2010 - 07:32

Thanks guys,

Just a follow up note on this - the Globalscape server was locked down to only allow specified IP addresses. My PC's IP that i was testing psftp from was not in there which i why i couldn't connect.

After adding this in I can connect using psftp with the username/path but it still does not work with CUCM 7 (IP address is defintely allowed on SFTP server). The only thing it can be is either Cisco has changed SFTP version in 7.X to a version that Globalscape does not support......i'm not an expert on the SFTP protocol by any means but it has to be something similar as it was working till upgrading to 7.

At least i now know its a Globalscape issue & can follow up with them

Cheers again guys

Actions

This Discussion