Configuring SHH FTP for local SHH FTP mailbox

Username
The mailbox alias. This value is used by your trading partner to log in to your FTP server. Specify a value not already in use.
Password
The password for the mailbox. This value is used by your trading partner to log in to your FTP server.
Use Public Key Authentication
Select the check box to enable public key authentication and specify the name of the file containing the client's authentication certificate (the remote client certificate to be used for authentication). You can click Browse to navigate to and select the file you want to use.
Use Key From File
Select the check box to enable use of the client's SSH public key and specify the name of the file containing the key. You can click Browse to navigate to and select the file you want to use.
Note: The file you select could contain multiple keys in the supported formats (RFC 4716 and OpenSSH). A file with multiple keys can contain either RSA or DSA keys of different sizes. The two formats cannot be mixed within a file.  Keys must be separated by an LF or CRLF.
LDAP Usergroup
Select the LDAP Usergroup check box to designate the mailbox as an LDAP user group mailbox and enable the Mailbox LDAP Tab (see Configuring LDAP for Local FTP Mailbox. Many of the other fields on this tab are disabled as are no longer applicable.  An LDAP user group mailbox has the following features:
  • The mailbox no longer corresponds to a single user, but rather a group of users configured in an external directory server.
  • In addition to authenticating usernames and passwords through the external directory server, user home directory paths can also be provided by the directory service, if necessary, by selecting Use LDAP Home Directory.  If this option is not selected, and Use Default Root\Username is selected, the VersaLexCleo HarmonyCleo VLTraderCleo LexiCom application dynamically appends the username to the root directory by way of a %username% macro variable.
Unlock
This button is enabled when the user has too many failed log in attempts. Mouse over the Unlock button to display when the user will be unlocked automatically or you must unlock the user manually. Click Unlock and then click Apply to unlock the user.
User Home Directory
Defaults to a username subdirectory under the default root directory defined on the General tab (see Configuring local SSH FTP user directories). To override this path for this user only, clear the Use Default Root\Username check box and click the ... button to change the home directory; or select a custom macro variable from the drop-down list.  See Using macro variables Using Macro Variables for a list of the applicable macros (Default Root Directory context). 
Subdirectories
Click Subdirectories to display the Local User Subdirectories dialog box. This dialog box displays host-level settings (read-only) for the current folder configuration and allows you to specify additional folders at the mailbox level in the Mailbox-level Settings > Others
field. You can add multiple paths separated by commas, semi-colons, or carriage returns. All paths must be relative and cannot include reserved macro variables (for example, %mailbox%).
Pipe Incoming Payload
Allows for this trading partner to send to your FTP server and redirect, or pipe, the incoming payload out through a different protocol. If the transfer out to the pipe mailbox fails, the transfer into the local mailbox also fails.
  1. The SSH FTP server supports either public key or password based authentications.
    1. Password Authentication: Enter the user’s Password.  You will be asked to confirm the password when applying (once applied, the displayed length of the masked password will not necessarily represent the actual password length).
    2. Public Key Authentication using a CA Certificate: Specify the name of the file containing the Client’s Authentication Certificate (the remote client certificate to be used for authentication) by clicking Browse.  Find the certificate that matches the one received from your trading partner and click Select.
    3. Public Key Authentication using a SSH Public Key File: Specify the name of the file containing the Client’s SSH Public Key file by clicking Browse.  Find the SSH Public Key file that matches the one received from your trading partner and click Select.
      Note: The file selected may contain multiple keys in the supported formats (RFC 4716 and OpenSSH). A file with multiple keys can contain either RSA or DSA keys of different sizes. The two formats cannot be mixed within a file.  Keys must be separated by an LF or CRLF.
  2. To designate the mailbox as an LDAP user group mailbox select the LDAP Usergroup check box.  Selecting this check box will enable the Mailbox LDAP tab (see Configuring LDAP for Local HTTP Mailbox) and disable most of the fields above as they are no longer applicable.  An LDAP user group mailbox has the following features:
    1. The mailbox no longer corresponds to a single user, but rather a group of users configured in an external directory server.
    2. In addition to authenticating usernames and passwords through the external directory server, user home directory paths can also be optionally provided by the directory service by selecting Use LDAP Home Directory.  If this option is not selected, and Use Default Root\Username is selected, the VersaLexCleo HarmonyCleo VLTraderCleo LexiCom application will dynamically append the username to the root directory by way of a %username% macro variable.
  3. If the user has too many failed login attempts, then Unlock will be enabled. Holding the mouse over Unlock will display when the user will be unlocked automatically or if it must manually be unlocked. Selecting Unlock and then Apply will unlock the user.