Aspera Connect Server Admin Guide 3.6.0

200 Pages·2016·4.55 MB·English

Aspera Connect Server Admin Guide 3.6.0

Windows
Revision: 3.6.0.124980 Generated: 05/13/2016 19:23
| Contents | 2
Contents
Introduction...............................................................................................................5
Standard Installation................................................................................................6
Requirements.........................................................................................................................................................6
Before Upgrading..................................................................................................................................................6
Product Setup......................................................................................................................................................10
Configuring the Firewall....................................................................................................................................19
Securing your SSH Server.................................................................................................................................21
Testing a Locally Initiated Transfer...................................................................................................................25
Updating the Product License............................................................................................................................27
Upgrading Enterprise Server to Connect Server................................................................................................28
Uninstall..............................................................................................................................................................30
Connect Server Web UI Setup..............................................................................31
Configuring your Web UI Settings....................................................................................................................31
Customize your Web UI's Appearance..............................................................................................................34
Configuring HTTP and HTTPS Fallback..........................................................................................................35
Testing the Web UI.............................................................................................................................................38
Transferring Files with the Application...............................................................41
Application Overview.........................................................................................................................................41
Managing Connections.......................................................................................................................................42
Creating SSH Keys.............................................................................................................................................48
Enabling a Transfer or HTTP Proxy..................................................................................................................51
Transferring Files................................................................................................................................................55
Advanced Transfer Mode...................................................................................................................................58
Configuring Transfer Notifications....................................................................................................................60
Using Transfer Notifications..............................................................................................................................67
Reporting Checksums.........................................................................................................................................69
Configuring Multi-Session Transfers.................................................................................................................73
Managing Users.......................................................................................................77
Setting Up Users.................................................................................................................................................77
Testing a User-Initiated Remote Transfer..........................................................................................................79
Setting Up Groups..............................................................................................................................................80
Configuration Precedence...................................................................................................................................81
Setting Up a User's Public Key.........................................................................................................................83
General Configuration Reference.........................................................................84
Document Root...................................................................................................................................................84
Advanced Symbolic Link Options (ascp)..........................................................................................................85
Server-Side Symbolic Link Handling................................................................................................................86
Authorization.......................................................................................................................................................87
Server-Side Encryption at Rest (EAR)..............................................................................................................90
| Contents | 3
Bandwidth...........................................................................................................................................................93
Network...............................................................................................................................................................96
File Handling......................................................................................................................................................98
Global Transfer Settings......................................................................................103
Global Bandwidth Settings...............................................................................................................................103
Setting Up Virtual Links..................................................................................................................................104
Transfer Server Configuration..........................................................................................................................106
Configuring for Other Aspera Products............................................................108
Configuring for Faspex.....................................................................................................................................108
Configuring for Shares.....................................................................................................................................112
Configuring for Aspera for SharePoint............................................................................................................115
Managing the Node API...................................................................................... 121
Overview: Aspera Node API............................................................................................................................121
Node API Setup................................................................................................................................................121
Setting up Node Users......................................................................................................................................122
Node Admin Tool.............................................................................................................................................123
aspera.conf for Nodes.......................................................................................................................................124
Redis DB Backup/Restore................................................................................................................................127
Setting up SSL for your Nodes........................................................................................................................128
Hot Folders............................................................................................................132
Setting Up Hot Folders.....................................................................................................................................132
Managing Hot Folders......................................................................................................................................135
Pre- and Post-Processing (Prepost).....................................................................137
Setting Up Pre/Post...........................................................................................................................................137
Pre/Post Variables.............................................................................................................................................138
Pre/Post Examples............................................................................................................................................140
Setting Up Email Notification..........................................................................................................................141
Email Notification Examples............................................................................................................................144
Transferring from the Command Line.............................................................. 146
Ascp Command Reference...............................................................................................................................146
Ascp General Examples....................................................................................................................................156
Ascp File Manipulation Examples...................................................................................................................157
Ascp Transfers to Cloud Storage.....................................................................................................................159
Configuring the Aspera Watch Service............................................................................................................160
Transferring and Deleting Files with the Aspera Watch Service.....................................................................161
Token Generation..............................................................................................................................................163
Creating SSH Keys (Command Line)............................................................................................................164
Ascp FAQs........................................................................................................................................................165
Configuring for the Cloud...................................................................................168
Configuring aspera.conf for S3........................................................................................................................168
| Contents | 4
Authentication and Authorization......................................................................170
Access Key Authentication..............................................................................................................................170
Adding a Node to Aspera Files........................................................................................................................175
Setting Up Token Authorization.......................................................................................................................181
Configuring Token Authorization from the GUI.............................................................................................182
Configuring Token Authorization With aspera.conf........................................................................................183
Appendix................................................................................................................185
Updating the Aspera Service Account.............................................................................................................185
Restarting Aspera Services...............................................................................................................................185
Optimizing Transfer Performance....................................................................................................................186
Generate an Internet Server Certificate (IIS)...................................................................................................188
Setting Policies for OpenSSH User.................................................................................................................188
Log Files...........................................................................................................................................................189
Accessing Shares from the GUI.......................................................................................................................190
Product Limitations...........................................................................................................................................190
Troubleshooting.....................................................................................................192
Using the Troubleshooter.................................................................................................................................192
Error Adding Domain User..............................................................................................................................192
Clients Can't Establish Connection..................................................................................................................193
Configuring IIS for Web UI.............................................................................................................................194
Uninstall Version 2.2.1 for Upgrade................................................................................................................196
Technical Support.................................................................................................199
Legal Notice...........................................................................................................200
| Introduction | 5
Introduction
IBM Aspera Connect Server is a web-based file transfer server built upon Aspera's FASP transport. Connect Server
offers the following features:
Feature Description
FASP transport technology File transfer protocol that dramatically speeds transfers over IP networks by
eliminating the fundamental bottlenecks in conventional technologies. FASP features
bandwidth control, resume, transfer encryption, content protection, and data integrity
validation.
Transfer server Allows an unlimited number of concurrent client transfers. Uses virtual links to
manage aggregate bandwidth usage.
Connect Server Web UI A web-based interface that enables transfers for Aspera Connect clients. Includes the
HTTP Fallback Server to allow clients without FASP connectivity to transfer using
HTTP or HTTPS.
Connect Server application A graphical file transfer application for initiating and managing transfers, and for
configuring transfer users and server settings.
Hot Folders (Aspera Sync) A service, managed by the desktop application, that automates the transferring of files
from a specified directory.
Pre- and Post-Processing Executes customizable actions when transfer events - start and end of sessions and
(Prepost) files - occur. An email notification script is included.
ascp command The command-line file transfer program.
| Standard Installation | 6
Standard Installation
Install the IBM Aspera transfer product and set up your computer for FASP file transfers.
Requirements
Software and hardware requirements for optimal product performance
System requirements for IBM Aspera Connect Server:
• Windows 2008r2, 2012, 7, 8, or 10
• Product-specific Aspera license file.
• Active Server Pages (ASP) must be enabled.
• For web UI, Internet Information Service (IIS) version 6, or version 7 with IIS 6 Compatibility Component
installed (See Microsoft TechNet: IIS 6 Compatibility Components Not Installed).
• For usage in an Active Directory environment - Access to a domain administrator account for product installation.
• Access to run WMI.
• For Pre- and Post-Processing (Prepost) - Install Active Perl to enable Perl scripts.
• Screen resolution 1024 x 768 or higher.
Connect Server supports the following web browsers:
• On Windows: Internet Explorer 8+, Firefox 27+, Chrome 40+
• On Mac OS X: Safari 6+, Firefox 27+, Chrome 40+
• On Linux: Firefox 27+
If you plan to set up and use the Node API, you must also meet the following requirements on each node machine:
• In order to use this application on a cloud platform and access the object-based cloud storage, you must obtain an
on-demand license. Please contact Technical Support.
• Identify a directory you plan to use for sharing data. Later on (in Node API Setup), this directory will be used as
the absolute path for the transfer user.
• Verify that the machine's hosts file has an entry for " ." For UNIX-based nodes, check
127.0.0.1 localhost
. For Windows nodes, check .
/etc/hosts C:\Windows\system32\drivers\etc\hosts
• For UNIX-based nodes, verify that SELINUX is disabled by running .
cat /etc/sysconfig/selinux
SELINUX can be " " or " ," but not " ."
permissive disabled enforced
Before Upgrading
Steps to take before upgrading your IBM Aspera product.
The installer for Aspera Connect Server automatically checks for a previous version of the product on your system. If
a previous version is found, the installer automatically removes it and upgrades your computer to the newer version.
On a Windows system, the installer displays the following message when an older version of the product is detected:
| Standard Installation | 7
Although the installer performs your upgrade automatically, we highly recommend completing the tasks below before
starting the installation/upgrade process. If you do not follow these steps, you risk installation errors or losing your
former configuration settings. Skip any steps that do not apply to your specific product version.
Note: You cannot upgrade directly between different Aspera transfer products (such as from Point-to-
Point to Desktop Client, or from Point-to-Point to Enterprise Server). To upgrade, you need to back up the
configuration, uninstall the product, and perform a fresh install of the new version of the product. If you are
upgrading your Enterprise Server to Connect Server, see Upgrading Enterprise Server to Connect Server on
page 28.
1. All Versions - Verify the version of your existing product
Depending on your current product version, the upgrade preparation procedure may differ. In the Command
Prompt window , execute this command:
> ascp -A
This displays the product name and version number.
Note:
When upgrading from 2.7.X to 3.X on Windows, please be aware that user names are now case sensitive.
2. All Versions - Confirm your Aspera service account.
If you have already installed IBM Aspera Enterprise Server, Connect Server, Point-to-Point Client or Desktop
Client on your computer, there is already a user account that has been designated to run the services for Aspera
products. By default, the user name for the Aspera services account is ; however, this is not a
svcAspera
requirement and you can select a different user to run the services. When you install additional Aspera products
or perform an upgrade to an existing Aspera product, you must identify the same account name and password that
you set for your first Aspera product installation.
To confirm which user is designated as your Aspera service account in Windows 7, click Control Panel >
Administrative Tools > Services. In Windows 2008, go to the Server Manager and select Configuration >
Services. The account designated for each Aspera service is listed. Please make note of this account for the
installation of additional Aspera products or product upgrades. If you have forgotten your Aspera service account
password or would like to change the designated Aspera service account, please follow the instructions described
in Updating the Aspera Service Account on page 185.
3. All versions - Stop all FASP transfer-related applications and connections.
Before upgrading the application, close the following applications and services:
• connections
ascp
• SSH connections
• The service and any processes. To stop the service, go to the Computer Management
SSHD SSHD SSHD
window, which is accessible via Manage > Services and Applications > Services. Then, kill any
SSHD
processes (using the Windows Task Manager).
• The Connect Server application
• service
asperasync
| Standard Installation | 8
4. All versions - Verify the website that runs Web UI
Aspera recommends that you set up the new Connect Server Web UI on the same website that your current Web
UI is running on. During the installation, you will be able to select the website to use.
To find out which web site is running Web UI, go to Control Panel > Administrative Tools > Internet
Information Services (Manager). In the left panel, navigate into the (Computer name) > Web Sites . The
website that runs Web UI should contain the folder.
aspera
5. All versions - Back up the files
Depending on the version of your previous installation and the operating system, back up the files in the specified
locations:
Aspera Version Folder
2.5+ Note: If you have installed the product in a different location, change the path
accordingly.
32-bit Windows Default Path:
• (Configuration
C:\Program Files\Aspera\Enterprise Server\etc\
files, Shared Remote Hosts)
• (Prepost scripts,
C:\Program Files\Aspera\Enterprise Server\var\
Connect Server)
64-bit Windows Default Path:
•
C:\Program Files (x86)\Aspera\Enterprise Server\etc
(Configuration files, Shared Remote Hosts)
\
• (Prepost
C:\Program Files (x86)\Aspera\Enterprise Server\var\
scripts, Connect Server)
Individual User Files' Default Path:
• (Individual user's remote hosts
<APPDATA>\Aspera\Enterprise Server\
and hot folder info.)
Note: Use this command in a Command Prompt window to find out the current
user's path:
<APPDATA>
> echo %APPDATA%
2.2.x and earlier 32-bit Windows:
• (Configuration files)
C:\Program Files\Aspera\FASP\etc\
| Standard Installation | 9
Aspera Version Folder
• (Prepost scripts, Connect Server)
C:\Program Files\Aspera\FASP\var\
• (Remote Hosts an Hot
C:\Program Files\Aspera\Aspera Scp\etc\
Folders info)
64-bit Windows:
• (Configuration files)
C:\Program Files (x86)\Aspera\FASP\etc\
• (Prepost scripts, Connect
C:\Program Files (x86)\Aspera\FASP\var\
Server)
• (Remote Hosts
C:\Program Files (x86)\Aspera\Aspera Scp\etc\
and Hot Folders info)
In particular, be aware that upgrading backs up and deletes the existing file before installing
sshd_config
the new, default . Therefore, you may want to migrate any changes from the backup file
sshd_config
( ) to the newly installed .
sshd_config.old sshd_config
If a previous version of Connect Server (Aspera Web) was set up and customized on your computer, back up the
customized Connect Server installation in the following location and use it as a template to modify the new one:
C:\Inetpub\wwwroot\aspera\
6. Version 2.1.x - Verify Aspera's configuration file ( ) version
aspera.conf
If you are upgrading from Connect Server version 2.1.x and have HTTP Fallback configured, you may need to
modify file to avoid upgrading errors. Open with a text editor:
aspera.conf aspera.conf
Platform Path
32-bit Windows
C:\Program Files (x86)\Aspera\FASP\etc\aspera.conf
64-bit Windows
C:\Program Files\Aspera\FASP\etc\aspera.conf
Remove the from the opening tag :
version="2" <CONF>
<CONF version="2">
...
7. Version 2.2.x and earlier - Restore the saved "Remote Endpoints"
This is a post-install step.
Since 2.5, a connection (a.k.a. "endpoint") can either be shared with all users, as in previous versions, or kept
exclusive to the user who created it.
When you upgrade a product 2.2.x or earlier, on the first launch of the application, existing connections will be
imported only for that user. Aspera recommends you launch it as an administrator account after the upgrade, so
that you can import the connections and share them with other users.
Note:
When you have finished the upgrade procedure, to share the imported connections with other users, launch
the application and click Connections.
| Standard Installation | 10
Select a created connection and click the Connection tab. Select Share this connection with all users
on this computer for each connection to share. Refer to Managing Connections on page 42 for more
information.
Product Setup
Install the IBM Aspera transfer product and set up your computer for FASP file transfers.
Important: If this is a product upgrade, ensure that you have reviewed all prerequisites detailed under
"Before Upgrading."
IBM Aspera Connect Server is a web-based file server that enables file access through a browser, and transfers files
using the IBM Aspera Connect Browser Plug-in. Additionally, you can set up HTTP Fallback to establish HTTP- or
HTTPS-based file transfers with clients that don't have FASP connectivity.
Note: On Windows, Connect Server uses Internet Information Service (IIS) authentication. If user names use
the extended character set, both the client and server machine must be set to use the same codepage, and the
client must use IE 7 or later (other browsers don't support users names using extended characters). For more
information, refer to http://support.microsoft.com/kb/938418.
To install Connect Server, log into your computer with Administrator (or Domain Administrator if you are in an
Active Directory environment) permissions, and follow the steps below.
1. Install Windows Internet Information Service (IIS).
The Connect Server web UI requires Internet Information Service (IIS) 6, or IIS 7 with the IIS 6 Compatibility
component. Depending on your version of Windows, IIS may not be installed by default. For instructions on
installing/enabling IIS for your specific Windows OS, see the table below. Note that Windows 7, 8, and 2008
require installation of IIS 7 with the IIS 6 Compatibility component. You also need to ensure that ASP, ASP.NET,
and Basic Authentication services are installed.