JADE Documentation (PDF) - SOS-Berlin

SOSFTP Documentation 30
4.7 Dynamic Password Retrieval
Instead of a hard-wired password in your configuration you can define a script. This script has to return the
password by printing it to stdout. The password script should not write any output to stdout except for the password.
Sample Dynamic Password Script getpassword.cmd:
@echo sos
You include this script by just setting it as password. Embedded into backticks “`” the password is interpreted as
a script which is evaluated:
password = `getpassword.cmd`
If the exit code of that script is 0 then its output to stdout is interpreted as a password. If the exit code of that
script is not 0 then the original parameter value is used as a password. For security concerns the script output
will not get logged - neither for stdout nor for stderr. Should you run into trouble then you could increase the log
level to level 3 in order to see what script is executed and to level 8 in order to check if the exit code is 0.
Sending Files by FTP authenticated with a Dynamic Password
The profile of the configuration file ftp_settings.ini:
…
[ftp_send_dyn]
protocol = ftp
host = 8of9
user = sos
; password = sos ; hard wired password
password = `.\getpassword.cmd` ; dynamic password
file_spec = .*
local_dir = outbound/
remote_dir = /inbound/
…
Example Command:
sosftp.cmd -settings=ftp_settings.ini -profile=ftp_send_dyn -operation=send
Dynamic Password Scripts can be used alternatively to the parameter “password” for the protocols FTP, SFTP
and FTPS. The parameter “jump_password” for the Jump Host does NOT support Dynamic Password Scripts.
The path of the Dynamic Password Script is always relative to your local host.
Software- und Organisations-Service GmbH