CUCM 7.X backup issue with Globalscape SFTP

Answered Question
May 31st, 2010
User Badges:

Hi,


Would like to know if anyone out there is using Globalscape SFTP server for CUCM 7.X backup successfully.


Backups were working successfully with the mention SFTP server until we upgraded the cluster from 6.1.3 to 7.1.3. Backups stopped running straight after the upgrade. I deleted the Backup Device from DRS & tried to add it back in but am now getting the error below & it won't even let me add it as a device again.


"Update failed : Unable to access SFTP server or SFTP server too slow to respond.Please make sure the login credentials and path are correct."


The path & login credentials are verified 100% correct (especially as it was working just before the upgrade & nothing changed on the SFTP server which is successfully running backups for multiple other applications)


I can point CUCM at a server running FreeSSH & it works fine so am gathering its a compatibility issue between Globalscape SFTP & CUCM 7.X  - but as our Globalscape support has expired i don't want to renew & then find it still won't work.......so would love to know if anyone out there has this working or come across anything similar


Thanks

Correct Answer by htluo about 7 years 1 month ago

From the packet capture, CUCM was able to set up a SSL connection with Globalscape.  So we can rule out the possibility of network issue.


From the packet capture, it looks like it was Globalscape who disconnect the session.  I would guess a permission or directory issue.


You may test Globalscope with a 3rd-party SFTP client (such as http://the.earth.li/~sgtatham/putty/latest/x86/psftp.exe).


1) Put psftp.exe in C:\

2) Open a command prompt and go to C:\

3) Type "psftp [email protected]-of-globalscape"

4) Log in with password

5) Try to upload a file.  eg. "put test.txt" (assuming you have a test.txt in C:\)


Michael

http://htluo.blogspot.com

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (2 ratings)
Loading.
htluo Mon, 05/31/2010 - 14:12
User Badges:
  • Red, 2250 points or more

Would you be able to do a packet capture from CUCM?

utils network capture file cucm count 100000 size all

Recreate the problem.  Press Ctrl-C to stop capture.  Then you may use RTMT to collect "packet capture logs" or use command line:

file get activelog platform/cli/cucm.cap


Michael

http://htluo.blogspot.com

rchaseling Tue, 06/01/2010 - 03:08
User Badges:

Cheers Michael,


I'll get that capture today.......can i send it to you privately?


Russell

Correct Answer
htluo Tue, 06/01/2010 - 09:37
User Badges:
  • Red, 2250 points or more

From the packet capture, CUCM was able to set up a SSL connection with Globalscape.  So we can rule out the possibility of network issue.


From the packet capture, it looks like it was Globalscape who disconnect the session.  I would guess a permission or directory issue.


You may test Globalscope with a 3rd-party SFTP client (such as http://the.earth.li/~sgtatham/putty/latest/x86/psftp.exe).


1) Put psftp.exe in C:\

2) Open a command prompt and go to C:\

3) Type "psftp [email protected]-of-globalscape"

4) Log in with password

5) Try to upload a file.  eg. "put test.txt" (assuming you have a test.txt in C:\)


Michael

http://htluo.blogspot.com

rchaseling Wed, 06/02/2010 - 06:58
User Badges:

Michael,


There is obviously something wrong with the Globalscape server as i can't connect to it using psftp as you suggested - Its coming up with a network error. Now that i know its not a CUCM / Globalscape issue i can move forward with this.


I appreciate this & have added your advice to my bag of tricks


Russell

William Bell Wed, 06/02/2010 - 07:09
User Badges:
  • Purple, 4500 points or more

Russell,


You definitely want to store Michael's hints in your back of tricks.  You may need a new bag because Michael has a lot of good tips (+5 Michael!).  Now, if you are looking for a SFTP replacement, there are a few packages that Cisco references but the expectation is that you will test them out and validate in your own environment.  I have had good success with copSSH in environments where folks preferred to run the SFTP services on a Windows based host.  I haven't tested with Windows 7 or Windows 2008.  But I have used it on XP, 2000, and 2003 with good success.  It can run as a service, which makes it more appealing for supporting regular backups.


Of course, if you have a *nix system floating around and prefer to use that, then openSSH is a good bet.  Actually, copSSH is a port of openSSH to Windows.  I did a write up on how to setup copSSH for Cisco UC apps here:


http://www.netcraftsmen.net/resources/blogs/which-windows-sftp-server-should-i-use-for-my-cisco-uc-appliance-how-about-copssh.html



HTH.


Regards,
Bill

rchaseling Wed, 06/02/2010 - 07:32
User Badges:

Thanks guys,


Just a follow up note on this - the Globalscape server was locked down to only allow specified IP addresses. My PC's IP that i was testing psftp from was not in there which i why i couldn't connect.


After adding this in I can connect using psftp with the username/path but it still does not work with CUCM 7 (IP address is defintely allowed on SFTP server). The only thing it can be is either Cisco has changed SFTP version in 7.X to a version that Globalscape does not support......i'm not an expert on the SFTP protocol by any means but it has to be something similar as it was working till upgrading to 7.


At least i now know its a Globalscape issue & can follow up with them


Cheers again guys

Actions

This Discussion