When the JSCAPE server executable is executed, it will use the first
Java executable found in the system's executable search path. In Linux
or any other Unix based OS, the executable search path is determined
by the PATH environment variable. To use a ...
Most client component class (Ftp, Ftps, Sftp, Scp, Http, etc.) within
the various Java Component APIs write debug logs into the console by
default when debug is enabled. If you want them to write to a file
instead, you can do so by calling the setDebug...
Attached is a runnable shell script showing how curl can be use to
download and upload files from/to a JSCAPE MFT Server using HTTP
protocol.
A download can be initiated from curl using either one of following
ways.
1) Using a single curl command...
As of writing this KB article the Core FTP client does not support
compression when connecting using SFTP/SSH protocol. To resolve this
issue go to Services > SFTP/SCP in JSCAPE MFT Server Manager, enable
the "none" option in Compressions tab and click...
No, this is not a supported configuration.
While Server Manager may seem to connect, work with a different
version JSCAPE MFT Server, it is bound to cause strange, not easily
diagnosed problems. We only recommend using Server Manager against the
sam...
Yes. JSCAPE MFT Server started supporting AS2 since version 8.7. While
the AS2 service can be used to transfer any type of file, it's usually
used for exchanging EDI (Electronic Data Interchange) documents over
the Web. AS2 transactions work best with tri...
First you need to follow the instructions found here to set up your
form:
http://files.jscape.com/secureftpserver/docs/index.html?adding_custom_forms_on_file_up.htm
[http://files.jscape.com/secureftpserver/docs/index.html?adding_custom_forms_on_file_up.h...
The GetUserInfo function returns the user property specified in the
second argument of the function. The first argument can either be the
%Username% variable or an actual username. For example:
* %GETUSERINFO(%USERNAME%,"PHONE")% will return the phone...
When a command line utility fails to execute and instead generates an
"Error connecting to server" or asks for the configuration file path,
chances are you have yet to run the manager-configuration utility (for
MFT Server versions prior to 9.3) or the js-...
Sometimes, when your users go to your web page and check your
certificate version, they'll see the old cert information even after
you've recently renewed the certificate.
This can happen when the server caches your key/digital certificate.
To remedy ...
Several JSCAPE MFT Server features that involve cryptography (e.g.
OpenPGP, SFTP ciphers, digital certificates) require additional
libraries known as the JCE Unlimited Strength Jurisdiction Policy
Files.
Although instructions for installing these files ...
When your users connect to JSCAPE MFT Server via the Web UI, the
language they'll see will depend on the language setting on their Web
browser and whatever languages you've set your server to support. You
can see what languages your server currently suppo...
If you want to map a virtual path to a network share such as a Samba
or DFS share, these are the things you need to keep in mind:
1. You can't use the Browse button/feature and then navigate to the
network share. To specify the network share, you need t...
By default, the server0.log only stores up to 10MB worth of server log
data. If you want to increase this capacity, you may do so by
modifying the java.util.logging.FileHandler.limit property found in
the [MFT Server installation directory]/etc/server-log...
When you look at the server log, you'll find several entries
corresponding to file uploads similar to this:
....."file uploaded" /example.txt;2;3100 45000
While the last value (45000 in the above example) is easily identified
as the file size, the two...
JSCAPE MFT Server currently only supports OFTP v 2.0. It is not
backwards compatible with older versions of this protocol.
No.
Failover synchronization
(http://files.jscape.com/secureftpserver/docs/index.html?defining_a_failover_server.htm
[http://files.jscape.com/secureftpserver/docs/index.html?defining_a_failover_server.htm])
should only be performed on two instances of J...
The latest version of FileZilla will have problems connecting to the
SFTP service running on older versions of JSCAPE MFT Server. This is
usually caused by the only key exchange algorithm supported by older
versions of JSCAPE MFT Server - diffie-hellman-g...
There are couple of ways to do this. You can:
* PGP-encrypt each file uploaded by members of a group
[http://www.jscape.com/blog/pgp-encrypting-file-uploaded-by-members-of-a-group]
* PGP-encrypt each file uploaded by a particular user
[http://www.js...
In order to set up an active-active HA configuration, you would need
to place at least two instances of JSCAPE MFT Server behind a load
balancer like JSCAPE MFT Gateway. See figure below.
We highly recommend the following articles and tutorials for
refe...
No. You don't need MFT Gateway for this. JSCAPE MFT Server already
comes with a failover feature that will allow you to set up an
active-passive HA configuration.
This page in the documentation
[http://files.jscape.com/secureftpserver/docs/index.html?fa...
There are two main types of antivirus software: those that do
on-access scanning and those that do on-demand scanning.
If your antivirus supports on-access scanning, then it will
automatically scan files as soon as those files enter the filesystem.
You ...
To allow AFTP, make sure port 3000 is open for both TCP and UDP
connections on your firewall.
Some regulations require the use of logs that are able to record the
creation of user accounts who have admin privileges. This is for
digital forensics purposes, i.e. to aid investigators in the event of
a security incident.
In JSCAPE MFT Server, this c...
The domain log files can provide a wealth of information needed for
troubleshooting. That's why there are times when you'll be asked by a
member of our tech support staff to upload domain log files.
The domain log files can be found in the directory spe...
You might encounter a problem wherein your JSCAPE MFT Server
installation displays an Evaluation license even if you actually have
an Enterprise or Professional license.
Here's one possible reason for that.
In previous versions of JSCAPE MFT Server, t...
Some server admins want to know how to delete or archive log files in
order to save disk space or simply to maintain upkeep. Refer to this
blog post for guidance:
ROTATING AND ARCHIVING LOGS IN JSCAPE MFT SERVER
[HTTP://WWW.JSCAPE.COM/BLOG/BID/107655/RO...
On the login page of the user's Web UI, you'll see a link labeled
"Lost password". If configured correctly, that link will allow users
to change their passwords on their own, i.e. without any
administrative/help desk assistance.
Some organizations want ...
Yes. To run the same service (e.g. SFTP, FTPS, or FTP) on multiple
domains, you can either:
1. Use a different network interface/IP address for each service, e.g.
SFTP on Domain 1 uses 192.168.100.103 and SFTP on Domain 2 uses
192.168.100.104.
2. Use ...
Before you can import a .pfx file or certificate you need to establish
a couple of things.
FIRST, YOU NEED TO ENSURE THAT YOU HAVE ALREADY INSTALLED THE JCE
UNLIMITED STRENGTH JURISDICTION POLICY FILES
(http://files.jscape.com/secureftpserver/docs/index...
The JSCAPE MFT Server documentation you see here
[http://files.jscape.com/secureftpserver/docs/index.html] is for the
current version. If you're looking for the documentation of an older
version, you can either:
1. Launch the MFT Server Manager and then...
By default, all JSCAPE MFT Server configuration settings are stored in
an H2 database. This H2 database comes with the installation. In case
you want to use an external ANSI-compliant relational database (e.g.
MySQL, MS SQL Server, Oracle, etc.) instead o...
Some customers who have upgraded from a JSCAPE MFT Server version 9.2
(or lower) to a version 9.3 have experienced a rather slow upgrade
time. That is, the upgrade took too long to complete. This sometimes
happens when you have large .log files in the [mf...
There can be instances when you'll need to specify which Java
installation JSCAPE MFT Server should be running on.
To do this, go to the JSCAPE MFT Server installation directory and
edit the script named "server".
Uncomment the INSTALL4J_JAVA_HOME_OVE...
If you want to know what fixes were made from an older version to the
current version, you can view this in the version.txt file found in
the installation directory of your JSCAPE MFT Server installation.
Please note though that the bug fixes listed are...
This is an updated list of bug fixes made in JSCAPE MFT Server version
9.3. You can also view this in the version.txt file of any
installation of the latest version of JSCAPE MFT Server. Read this
knowledgebase article
[https://jscape.kayako.com/Knowledge...
This is an updated list of bug fixes made in JSCAPE MFT Server version
9.2. You can also view this in the version.txt file of any
installation of the latest version of JSCAPE MFT Server. Read this
knowledgebase article
[https://jscape.kayako.com/Knowledge...
This is an updated list of bug fixes made in JSCAPE MFT Server version
9.1. You can also view this in the version.txt file of any
installation of the latest version of JSCAPE MFT Server. Read this
knowledgebase article
[https://jscape.kayako.com/Knowledge...
This is an updated list of bug fixes made in JSCAPE MFT Server version
9.0. You can also view this in the version.txt file of any
installation of the latest version of JSCAPE MFT Server. Read this
knowledgebase article
[https://jscape.kayako.com/Knowledge...
When a user sends a file via ad-hoc email file transfer (through the
Web user interface), that user can specify when the download link
should expire. Once the download link expires, the recipient can no
longer download the file.
If, after sending out th...
Note: Always make sure your primary and failover servers have exactly
the same versions of MFT Server.
Normally, when you upgrade to the latest version of MFT Server, you
would have to backup the "data" directory first and then copy it back
after the up...
Global event variables are variables that can be used by all of your
triggers.
To create a new global variable, just go to Triggers > Settings > Add.
Give the variable a Name. For example, "globvar" (without the quotes).
Give the variable a value. For e...
When your FTPS server is behind a firewall, NAT, reverse proxy, or
other routing device, clients might encounter connectivity issues due
to the fact that the firewall (or other routing device) can't read the
source IP address and port number from the resp...
JSCAPE MFT Server is a Java based product therefore the ciphers used
for encryption are those that are provided by the JVM. Sun/Oracle does
not currently provide a FIPS validated JVM however they do provide
instructions on pointing to a FIPS provider. See...
It's possible to customize the content (text, images, or both) of the
JSCAPE MFT Server Web Client (screenshots of the client shown below).
This can be done in
Server > Settings > Web > Resources
or in
[domain] > Services > HTTP/S > Resources
Un...
These files are generated by Apache POI: Java API to access Microsoft
format files.
This APi is used in file searching service.
You can prevent users from uploading certain files to MFT Server by
using the Banned Files feature.
Instructions for using this feature can be found here:
http://files.jscape.com/secureftpserver/docs/index.html?setting_banned_files.htm
[http://files.j...
URL branding allows you to specify one or more custom login pages when
using the web interface. This is useful in shared environments where
you have several customers or users accessing a single domain but you
want each one to have their own custom logo d...
This is an updated list of bug fixes made in JSCAPE MFT Server version
10. You can also find this information in the version.txt file of any
installation of the latest version of JSCAPE MFT Server. Read this
knowledgebase article
[https://jscape.kayako.co...
SFTP public key authentication is an alternate method of
authentication to password-based authentication. It authenticates the
user/client based on something the user/client has, known as a private
key or secret key. When used in conjunction with password...
Watch the video below to learn how to set up a FTPS server:
To add any other service (e.g. FTP, SFTP, HTTP, HTTPS, WebDAV, etc.)
read this part of the documentation:
http://files.jscape.com/secureftpserver/docs/index.html?settingaccesspoints.htm
[http...
Watch this video to learn how to set up and use ad hoc file transfers.
You can also read this part of the documentation
[http://files.jscape.com/secureftpserver/docs/index.html?enabling_email_transfers.htm]
for settings pertinent to adhoc file transfers...
There are mainly two ways of setting high availability (HA) file
transfer services. One is through an active-active HA cluster. The
other one is by setting an active-passive HA cluster.
Read this post to understand the difference between the two:
Acti...
Sometimes, when a user runs a search via the search box found in the
end user Web UI, the interface returns a "0 result(s) found" even if
the file actually exists.
There are two possible reasons for this.
1. The user intended to search for a filename....
The temp files are created during uploads. This is not an issue. They
should automatically vanish after a successful upload. What remains
are those from uploads that got cancelled by users.
Should you wish to delete these tmp files, please check the time...
To automatically block an IP address after a specified number of
invalid login attempts, go to the Connections module and then set the
last 'minutes' parameter of the 'Disable IP after' setting to zero
(0). So, for example, your setting would be:
Disabl...
To enable users to self-register, you must:
* Enable web-based file transfers
[http://files.jscape.com/secureftpserver/docs/index.html?overview5.htm].
Self-registration can only be done via the web user interface.
* Configure email settings
[http:/...
Due to vulnerabilities found in SSL as well as TLSv1.0 and even
TLSv1.1, some companies want to disable these protocols.
To disable these protocols in JSCAPE MFT Server, follow these steps:
1) Make sure you are using Java 7 or higher (Java 8 is highly...
Note: This only applies to MFT Server versions that use a global
datastore for storing server configuration data.
In later versions of MFT Server (9.3 and above), server configuration
data is stored in a database known as a global datastore.
While the...
In some instances, when a user logs into the web user interface (HTML)
of JSCAPE MFT Server via Internet Explorer (usually, this occurs in IE
11), some portions of the UI takes forever to load. They either
display a "Loading..." indicator or a never endin...
After doing an upgrade, you might notice that your logo is missing
from the web interface.
This is normal. Logos and text label settings you have made to the web
interface will not be migrated during the upgrade process (see
Additional Notes at the bott...
When you enable the following key exchange algorithms:
* diffie-hellman-group-exchange-sha256
* diffie-hellman-group-exchange-sha1
in older versions of JSCAPE MFT Server, some clients might not be able
to connect. That's because those versions hav...
If you attempt to send an AS2 message and you get a "failed" status
even if the Trading Partner test succeeds ("test passed"), try viewing
the message details by selecting it and then clicking the View button.
Scroll down to the bottom until you reach t...
There are some triggers which, when selected, can be made to execute
manually by clicking the Run button.
Note that not all triggers have this capability. In fact, only
triggers with the "Current Time" event type can be made to run
manually.
You'll kn...
Password credentials are first hashed using SHA1 (salted). It's these
hashes that are stored in the database, not the passwords.
To prevent malicious individuals from acquiring JSCAPE MFT Server
admin credentials (e.g. passwords), these credentials are hashed using
salted SHA1 and then it's those hashes that are stored in the JSCAPE
MFT Server global datastore database.
However, ...
To enable HTTPS on the web admin interface, go to Settings > Web >
REST tab
Tick the "REST HTTPS on host" checkbox.
Click Apply.
If you get an error message that says "403 Forbidden" "Operation not
allowed!" when attempting to create a new trigger, it's likely because
you've reached the maximum limit allowed for trigger creation in an
evaluation edition.
Starting version 10.1, yo...
This video provides directions for finding the information you need
when using JSCAPE MFT Server:
When logging into the Web user interface as a domain administrator,
you might get an error message similar to this when attempting to add
a virtual path:
"Path must match or be a subdirectory of the ... restricted path"
This likely because you have re...
Watch this video for an introduction on Trading Partners.
Other related content:
How To Set Up A Scheduled Automatic Download With A Trading Partner
[http://www.jscape.com/blog/how-to-set-up-a-scheduled-automatic-download]
Setting Up A Trading Partn...
Note: This problem only affects versions 9.3 and higher.
If your JSCAPE MFT Server takes too long to complete its startup
process or suffers from performance issues (e.g. high latency, high
CPU consumption, high memory consumption, etc), it's probably b...
Sometimes, you might see this entry in your server0.log:
Server error: No such file () (2)
One possible cause for this error is a user trying to change to a
non-existent directory or trying to download a non-existent file.
Another possible cause is a...
If you see the following entries in your server0.log:
Error starting Web Service.
java.net.BindingException: Cannot assign requested address
Try navigating into [mft server manager] > Settings (or Server >
Settings) > Web and then inspect the IP add...
SFTP private key files used for trading partner public key
authentication are not included in the upgrade process. After
upgrading MFT Server, you need to copy those files from backup into
the exact same locations/folders/directories prior to the upgrade ...
Read the tutorial:
How To Set Up A HTTPS File Transfer
[http://www.jscape.com/blog/how-to-set-up-https-file-transfer]
Watch the video:
There may be instances when it appears you're unable to use certain
variables in the trigger conditions or trigger action parameters
modules.
This may simply because those variables don't exist in the context of
the trigger event used in the trigger.
...
There are a couple of reasons why you would want to choose which SFTP
algorithms to enable or disable on your JSCAPE MFT Server SFTP
service. You might want to enable only a select number of algorithms
to increase security or you might want to enable a la...
The process of upgrading a JSCAPE MFT Server installation that uses a
relational database as its global datastore is the same, regardless
whether that datastore is the built-in H2 database or an external
relational database like MySQL, Oracle, or MS SQL. ...
Please read this article:
3 Ways To Generate OpenPGP Keys
[http://www.jscape.com/blog/bid/108193/3-Ways-To-Generate-OpenPGP-Keys]
or watch this video:
To learn how to generate PGP keys.
Here are some links to online resources where you can find
information/instructions on how to configure AS2 on JSCAPE MFT Server:
* The online documentation
[http://files.jscape.com/secureftpserver/docs/index.html?overview18.htm]
* Blog posts/tutori...
Watch this video to learn how to configure JSCAPE MFT Server so that
it automatically deletes files as soon as they've been downloaded
These are the server versions and their supported protocol versions
- 6.0, SSH v. 2, SFTP v. 3
- 7.2, SSH v. 2, SFTP v. 3
- 8.6, SSH v. 2, SFTP v. 3
- 8.7, SSH v. 2, SFTP v. 3
- 8.8, SSH v. 2, SFTP v. 3
- 9.0, SSH v. 2, SFTP v. 3
- 9.1, SSH v. 2, SFTP v....
You have 2 options if you want to use encryption on AS2:
1. Use HTTPS
or
2. Enable the built-in encryption feature on AS2.
To enable HTTPS, follow the instructions on this post:
HOW TO SET UP A HTTPS FILE TRANSFER
[HTTP://WWW.JSCAPE.COM/BLOG/HOW...
To set up an automated AS2 file transfer, read this post:
HOW TO SET UP AN AUTOMATED AS2 FILE TRANSFER
[HTTP://WWW.JSCAPE.COM/BLOG/HOW-TO-SET-UP-AN-AUTOMATED-AS2-FILE-TRANSFER]
or watch this video
If you want to learn how to set up client certificate authentication
on your AS2 servers, read this post:
SETTING UP CLIENT CERTIFICATE AUTHENTICATION ON AN AS2 SERVER
[HTTP://WWW.JSCAPE.COM/BLOG/SETTING-UP-CLIENT-CERTIFICATE-AUTHENTICATION-ON-AN-AS2-SE...
If you want to use digital signatures on your AS2 messages, read this
post:
AS2 MESSAGE TUTORIAL ON APPLYING DIGITAL SIGNATURES
[HTTP://WWW.JSCAPE.COM/BLOG/APPLYING-DIGITAL-SIGNATURES-ON-AS2-MESSAGES-A-TUTORIAL]
or watch this video:
You may have encountered situations wherein your trigger actions fail
to connect to remote SFTP servers due to incompatible key exchange
algorithms (kex algorithms). For example, after reviewing the debug
logs, you discover that the remote SFTP server onl...
Note that only the Enterprise edition of JSCAPE MFT Server has ad hoc
file transfer capability. If your installation lacks the button for
sending files via email in the web UI, it's possible that your
installation is a Professional edition.
For comparis...
In order to create an Amazon S3 Trading Partner, you'll need two key
pieces of information: your ACCESS KEY ID and its corresponding SECRET
ACCESS KEY or Secret Key. They function like usernames and passwords,
respectively.
An ACCESS KEY ID would look l...
The fields or columns in a typical domain log file consists of the
following information:
#Fields: date time c-ip c-port s-ip s-port cs-username cs-method
cs-uri-stem sc-status sc-message cs-bytes sc-bytes sessionid
date - date of log entry
time - times...
To set up an Amazon S3 reverse proxy as your JSCAPE MFT Server's
external file storage system, you'll need the following:
* your ACCESS KEY ID. This functions like an account username
* An ACCESS KEY ID would look like this: AKIAIOSFODNN7EXAMPLE
...
Some security vulnerability scans (e.g. IBM Appscan) report a "Missing
Secure Attribute in Encrypted Session (SSL) Cookie" in older versions
of JSCAPE MFT Server. This vulnerability has been fixed since v9.3.
The recommended solution is to upgrade to the ...
When performing a migration to another machine, you might encounter
the following error and wouldn't be able to login or even start up MFT
Server:
java.net.BindException: Cannot assign requested address: bind
This issue occurs if you have services bou...
This is an updated list of bug fixes made in JSCAPE MFT Server version
10. You can also find this information in the version.txt file of any
installation of the latest patch of JSCAPE MFT Server v10. Read this
knowledgebase article
[https://jscape.kayako....
Several issues that involve encryption or cryptographic algorithms can
be resolved by simply installing the JCE Unlimited Strength
Jurisdiction Policy Files. The most common types of issues are
connection issues involving SFTP (most common), FTPS, and HTT...
Note that it's not possible to change the cryptographic algorithms,
i.e. ciphers, key exchange (KEX), MACs, used in the triggers
(particularly trigger actions) and reverse proxies
To clarify, when you go to the Services > SFTP/SCP tab and click on
the A...
Note: This issue usually appears in older (Pre-9.3) versions of JSCAPE
MFT Server
A "java.io.IOException: java.lang.ArrayIndexOutOfBoundsException: 0"
usually means you have a corrupted account datastore file. An account
datastore file is either a set of...
Memory errors can cause a variety of problems in JSCAPE MFT Server.
They can corrupt files, prevent users from logging in, degrade
performance and even cause the system to crash.
Some of these errors can be remedied by simply increasing either the
Heap ...
There may be instances when a user, after entering his/her username,
domain, and password, and then clicking Login, is constantly brought
back to the login page, unable to proceed.
If any of your users encounter this problem, try checking the
following:...
Directory Monitors support monitoring of UNC paths. The key to this
working is that the "Log on as" account used for the JSCAPE MFT Server
service must have the proper permissions to the UNC path. This is the
same case that a UNC path can be used as a map...
When you receive files from different AS2 trading partners, chances
are, you would want to store those files under distinct folders
representative of each trading partner. So, for example, if you have a
trading partner named TP1 and another trading partne...
AS2 trading partners can't be used for downloading files. They can
only be used for sending files. So when you attempt to use either a
'Trading Partner File Download' or 'Trading Partner Regex File
Download' trigger action, you won't be able to see your A...
One of the issues we have experienced in the past is with customers
running their servers in High Availability environments. They
typically have 2 or more server using a shared Datastore (relational
db). The problem they run into is that depending on how ...
The entries in the server.vmoptions file, e.g.
-Xmx2048m
-XX:MaxPermSize=512m
-XX:+UseConcMarkSweepGC
-XX:+ExplicitGCInvokesConcurrent
are valid Java command line options and are passed directly to the
Java runtime.
Please check the following docume...
Support for SSL/TLS versions is more dependent on the Java runtime
version (which JSCAPE MFT Server runs on) than the JSCAPE MFT Server
version itself. Java started supporting TLS 1.2 in Java 8. So, in
order for your installation of JSCAPE MFT Server to s...
When you view the domain logs of recent versions of JSCAPE MFT Server
(9.1 and above), you'll often see a field that says 'eventId='
followed by a string of characters. This usually accompanies
trigger-related entries.
The event ID is meant for troubles...
Migrating JSCAPE MFT Server from one machine to another can be a
tricky processes, especially if one or more services in the JSCAPE MFT
Server instance in the source machine are bound to specific IP
addresses and those IP addresses don't match the IP addr...
Please note that the MySQL JDBC driver version (v5.1.38 as of this
writing) that comes with JSCAPE MFT Server is only suitable for use
with MySQL Server versions 5.5, 5.6, and 5.7.
If you want to use a later version of MySQL Server (for example, for
sto...
Sometimes, you might encounter a "HTTP ERROR 500" issue when accessing
a domain via the HTML UI (HTTP/S service) after an upgrade to v10.2.
The issue occurs on some upgrades and happens when the "default"
language resource (Domains>Services>HTTP/S>Resou...
As pointed out in the article "Slow startup and other performance
issues due to large database
[https://jscape.kayako.com/Knowledgebase/Article/View/301/0/slow-startup-and-other-performance-issues-due-to-large-database]",
if the built-in H2 database used ...
When you see the same file getting uploaded or downloaded multiple
times (2 or more times) by a particular trigger, the first thing you
will want to check is whether the trigger is using a "... Regex File
Upload" type of trigger action. For example:
*...
When you use a directory monitor to monitor file additions, file
changes, file deletions, and file ages (i.e. using 'Monitor file add',
'Monitor file change', 'Monitor file delete', and 'File exceeds age
of' settings respectively), with the 'Monitor recur...
|
|
Help Desk Software by Kayako fusion