[cisco-voip] cygwin as sftp server

[Heim, Dennis]

I think the easiest option is just to deploy a Ubuntu or other Linux VM. You might have to spent 30 minutes to adjust the permissions... but I find that is easier than messing with Cygwin.

Dennis Heim | Emerging Technology Architect (Collaboration)
World Wide Technology, Inc. | +1 314-212-1814


"Innovation happens on project squared" -- http://www.projectsquared.com

Click here to join me in my Collaboration Meeting Room



-----Original Message-----
From: cisco-voip [mailto:cisco-voip-bounces at puck.nether.net] On Behalf Of Charles Goldsmith
Sent: Thursday, April 09, 2015 5:31 PM
To: voip puck
Subject: [cisco-voip] cygwin as sftp server

I was helping a customer out today to get their backups going on a new install and from the TAC supported choices, they chose cygwin.  It's been a few years since I've worked with it, but tested ssh/sftp to it from putty, but when trying to add a backup device in CUCM DRS, we were getting the standard failed message:

 - Unable to save Backup Device successfully. Update failed : Unable to access SFTP server. Please ensure the username and password are correct.

doing some debugs on the cygwin ssh, I saw that we were getting this :

 - ssh_dispatch_run_fatal: no matching key exchange method found

I'm no ssh expert, and even with the highest verbosity on the debugs, I couldn't figure out which one of these was the culprit, but these lines resolved it in the /etc/sshd_config

KexAlgorithms diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1
Ciphers aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc

My guess is that the latest cygwin comes with a newer version of openssh that by default, doesn't allow an older method to come from CUCM.

The customer's environment is 10.5.2, and I was testing with 9.1.2 in my lab.  Both environments was using cygwin 1.7.35 and OpenSSH 6.8p1

Let me know if you have any questions
_______________________________________________
cisco-voip mailing list
cisco-voip at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip