Issues in connecting to SFTP servers

Question

Hi,

We are migrating OBIEE 12.2.1.4 to OAC. While setting up SFTP server connection via Manage Publisher → FTP Connection, we are getting errors like Connection Timed Out or Invalid Connection Details etc. The same details are working on OBIEE.

We have created ingress rules for these servers in OCI and egress is open to all. The businesses are saying that the IP/ports are allowed at their firewall as well but their firewalls are not getting any hits.

* Can anyone help with all the configuration that needs to be done at the OCI/OAC end?
* Business is expecting a public IP for OAC, while our OAC app is configured on a private subnet with a public load balancer. There's also an internet gateway configured. In this case, which IP/port should be allowed by business's firewall rules?
* Is there any way to test telnet from OAC to the SFTP server? We have already tested it successfully from another VM setup on the same private subnet.

Thanks

Debadrita Ghosh

Mallikarjuna Kuppauru-Oracle · Answer

Hi @Debadrita Ghosh-Oracle

Server must be accessible from public internet - Is it the same as having a public IP? —> should have an Public IP.

Should the port number be the SFTP server port (like 22) or any port related to OAC (like 443)?

Standard port is 22  .

Regards,

Arjun

Debadrita Ghosh-Oracle · Answer

Hi @Mallikarjuna,

Thank you for sharing these information. Could you please help with the questions below?

* Server must be accessible from public internet - Is it the same as having a public IP?
* For the command-

firewall-cmd   --add-port  --permanent   port=990/tcp

Should the port number be the SFTP server port (like 22) or any port related to OAC (like 443)?

Thanks

Debadrita Ghosh

Mallikarjuna Kuppauru-Oracle · Answer

Hi @Debadrita Ghosh-Oracle

Refer-

https://docs.oracle.com/en/cloud/paas/analytics-cloud/acabi/set-delivery-destinations.html#GUID-1A152160-B412-49A1-9765-042212C3AED0

Configuration most on client Side means customer side Only.

The FTP server or SFTP server must be accessible from the public internet.

Some of the Major points need to check -

* VCN and subnet should have ports open for ftp and sftp.  ( in security list – default or subnet specific one  )
* Make sure  ftp/sftp service is running  ( ps –efl | grep ftp  ) , also note port number )
* If  firewall daemon is running,   then open firewall port    ( firewall-cmd   --add-port  --permanent   port=990/tcp     assuming  port number, check  correct port )

Regards,

Arjun