Telnet connection problem on OpenVMS Alpha 7.3-2

[zheng_fei]

Sorry for the late update. Busy with other projects these days.

To Dave:

1. results of $ show memory/slots:

-------------------------------------------------------------------

Slot Usage (slots): Total Free Resident Swapped
Process Entry Slots 800 776 24 0
Balance Set Slots 798 776 22 0

-------------------------------------------------------------------

2. It is weired that I cannot find the TCPIP$TELNET account in the UAF, even in another machine whose telnet is confirmed to work.

To check if this problem is caused by TCPIP V5.4, We uninstalled TCPIP and installed TCPWare instead. The telnet problem is still there: outgoing telnet is ok, incoming telnet is hanging.

Zheng Fei

[Volker Halle]

Zheng Fei,

as far as I'm aware, there is no separate 'TELNET server' process for OpenVMS TCPIP. TCPIP SHOW DEV/PORT=23 shows you the 'listening' BG device and that's owned by TCPIP$INETACP. Could you post a TCPIP SHOW DEV/FULL BGx of that BG device when trying a TELNET localhost from another session ?

If the same error occurs with both HP TCPIP and TCPware, it must either be a more generic problem inside your OpenVMS system or something in your TCPIP network configuration (does DNS name resolution work correctly ?).

If you say 'DECnet' works, you meant DECnet SET HOST to that node, right ?

Volker.

[Hoff]

This is getting somewhat confusing; the symptoms are not clustering around a specific problem.

Call HP support and ask them for troubleshooting assistance, or contact and work with some other entity that knows VMS and TCP/IP Services and related troubleshooting, and work through this directly on the server(s) and network involved.

For general connectivity, ask your networking organization to have a look at the VLANs and IP routing here, if you're using managed switches.  That you're not getting connections via localhost implies more than the network is involved here, though.  Out on a managed network, it is quite possible for the networking team to block just telnet traffic, for instance.

One caution: do not trust what the corporate networking folks will tell you.  Ever. They will sometimes tell you what are effectively bald-faced lies, and entirely with the best of intentions.  Believe what they tell you only after you have verified the data yourself.   To quote the old Russian Proverb: Trust, but Verify.

If you're looking within the real and live SYSUAF database (it's quite possible to have more than one SYSUAF file around), then not finding the username entries for the TCPIP Services product strongly implies that the system authorization configuration is likely invalid or that TCP/IP Services is not correctly configured; that your authentication database and/or TCP/IP Services database is/are effectively corrupt. 

UAF> show {your username here} ! see if the last login time looks correct, etc; see if you're looking at "live" data

UAF> sho tcp*/br
Owner Username UIC Account Privs Pri Directory

TCPIP$BIND TCPIP$BIND [3655,7] TCPIP Normal 8 SYS$SPECIFIC:[TCPIP$BIND]
TCPIP$BOOTP TCPIP$BOOTP [3655,12] TCPIP Normal 8 SYS$SYSDEVICE:[TCPIP$BOOTP]
TCPIP$DHCP TCPIP$DHCP [3655,1] TCPIP Normal 8 SYS$SYSDEVICE:[TCPIP$DHCP]
TCPIP$FINGER TCPIP$FINGER [3655,3] TCPIP Normal 8 SYS$SYSDEVICE:[TCPIP$FINGER]
TCPIP$FTP TCPIP$FTP [3655,4] TCPIP Normal 8 SYS$SYSDEVICE:[TCPIP$FTP]
TCPIP$IMAP TCPIP$IMAP [3655,21] TCPIP Normal 8 SYS$SYSDEVICE:[TCPIP$IMAP]
TCPIP$LPD TCPIP$LPD [3655,23] TCPIP Normal 8 SYS$SPECIFIC:[TCPIP$LPD]
TCPIP$NFS TCPIP$NFS [3655,22] TCPIP Normal 8 SYS$SYSDEVICE:[TCPIP$NFS]
TCPIP$NFSLCK TCPIP$NFSLCK [3655,13] TCPIP Normal 8 SYS$SYSDEVICE:[TCPIP$NFSLCK]
TCPIP$NOBODY TCPIP$NOBODY [3375,1] TCPIP Normal 8 SYS$SYSDEVICE:[TCPIP$NOBODY]
TCPIP$NTP TCPIP$NTP [3655,14] TCPIP Normal 8 SYS$SPECIFIC:[TCPIP$NTP]
TCPIP$PCNFS TCPIP$PCNFS [3655,16] TCPIP Normal 8 SYS$SYSDEVICE:[TCPIP$PCNFS]
TCPIP$POP TCPIP$POP [3655,15] TCPIP Normal 8 SYS$SYSDEVICE:[TCPIP$POP]
TCPIP$PORTM TCPIP$PORTM [3655,5] TCPIP Normal 8 SYS$SYSDEVICE:[TCPIP$PORTM]
TCPIP$REXEC TCPIP$REXEC [3655,11] TCPIP Normal 8 SYS$SYSDEVICE:[TCPIP$REXEC]
TCPIP$RSH TCPIP$RSH [3655,10] TCPIP Normal 8 SYS$SYSDEVICE:[TCPIP$RSH]
TCPIP$SMTP TCPIP$SMTP [3655,2] TCPIP Normal 8 SYS$SPECIFIC:[TCPIP$SMTP]
TCPIP$SNMP TCPIP$SNMP [3655,6] TCPIP Normal 8 SYS$SYSDEVICE:[TCPIP$SNMP]
TCPIP$SSH TCPIP$SSH [3655,24] TCPIP Normal 8 TCPIP$SSH_DEVICE:[TCPIP$SSH]
TCPIP$TELNET TCPIP$TELNET [3655,20] TCPIP Normal 8 SYS$SYSDEVICE:[TCPIP$TELNET]
TCPIP$TFTP TCPIP$TFTP [3655,17] TCPIP Normal 8 SYS$SYSDEVICE:[TCPIP$TFTP]
UAF>

Telnet itself is started from inetd.

And this:

>To check if this problem is caused by TCPIP V5.4, We uninstalled TCPIP and installed TCPWare instead. The telnet problem is still there: outgoing telnet is ok, incoming telnet is hanging.

Implies a more generic issue with the local network or local configuration, local DNS services or other issues.

[zheng_fei]

Volker:

Now with TCPWare installed, I dont know how to SHOW DEV/FULL BGx as TCPIP. Can you advise?

Another question is: Is it necessary to config the DNS service? I tried to use ip address instead of host name, the problem is still there.

Btw, yes, I can set host to that node via DECnet.

[zheng_fei]

Hoff:

I am using system account to login that node. UAF>sho system gives me:

---------------------------------------------------------------------

Username: SYSTEM Owner: SYSTEM MANAGER
Account: SYSTEM UIC: [1,4] ([SYSTEM])
CLI: DCL Tables: DCLTABLES
Default: SYS$SYSROOT:[SYSMGR]
LGICMD: SYSTEM_LOGIN.COM
Flags:
Primary days: Mon Tue Wed Thu Fri
Secondary days: Sat Sun
No access restrictions
Expiration: (none) Pwdminimum: 6 Login Fails: 0
Pwdlifetime: (none) Pwdchange: (pre-expired)
Last Login: 6-JAN-2012 09:14 (interactive), 5-JAN-2012 18:03 (non-interactive)
Maxjobs: 0 Fillm: 100 Bytlm: 64000
Maxacctjobs: 0 Shrfillm: 0 Pbytlm: 0
Maxdetach: 0 BIOlm: 10000 JTquota: 4096
Prclm: 10 DIOlm: 200 WSdef: 2000
Prio: 4 ASTlm: 250 WSquo: 4000
Queprio: 0 TQElm: 200 WSextent: 16384
CPU: (none) Enqlm: 2048 Pgflquo: 50000
Authorized Privileges:
ACNT ALLSPOOL ALTPRI AUDIT BUGCHK BYPASS
CMEXEC CMKRNL DIAGNOSE DOWNGRADE EXQUOTA GROUP
GRPNAM GRPPRV IMPERSONATE IMPORT LOG_IO MOUNT
NETMBX OPER PFNMAP PHY_IO PRMCEB PRMGBL
PRMMBX PSWAPM READALL SECURITY SETPRV SHARE
SHMEM SYSGBL SYSLCK SYSNAM SYSPRV TMPMBX
UPGRADE VOLPRO WORLD
Default Privileges:
ACNT ALLSPOOL ALTPRI AUDIT BUGCHK BYPASS
CMEXEC CMKRNL DIAGNOSE DOWNGRADE EXQUOTA GROUP
GRPNAM GRPPRV IMPERSONATE IMPORT LOG_IO MOUNT
NETMBX OPER PFNMAP PHY_IO PRMCEB PRMGBL
PRMMBX PSWAPM READALL SECURITY SETPRV SHARE
SHMEM SYSGBL SYSLCK SYSNAM SYSPRV TMPMBX
UPGRADE VOLPRO WORLD
Identifier Value Attributes
NET$MANAGE %X91F50002

---------------------------------------------------------------------

The last login time is correct. The result of UAF> sho tcp*/br is posted below:

 ---------------------------------------------------------------------

Owner Username UIC Account Privs Pri Directory

TCPIP$DHCP TCPIP$DHCP [3655,1] TCPIP Normal 8 SYS$SYSDEVICE:[TCPIP$DHCP]
TCPIP$FTP TCPIP$FTP [3655,4] TCPIP Normal 8 SYS$SYSDEVICE:[TCPIP$FTP]
TCPIP$REXEC TCPIP$REXEC [3655,10] TCPIP Normal 8 SYS$SYSDEVICE:[TCPIP$REXEC]
TCPIP$RSH TCPIP$RSH [3655,7] TCPIP Normal 8 SYS$SYSDEVICE:[TCPIP$RSH]
TCPIP$SMTP TCPIP$SMTP [3655,3] TCPIP Normal 8 SYS$SPECIFIC:[TCPIP$SMTP]
TCPIP$SNMP TCPIP$SNMP [3655,5] TCPIP Normal 8 SYS$SYSDEVICE:[TCPIP$SNMP]
TCPIP$SSH TCPIP$SSH [3655,6] TCPIP Normal 8 TCPIP$SSH_DEVICE:[TCPIP$SSH]
TCPIP$TELNET TCPIP$TELNET [3655,2] TCPIP Normal 8 SYS$SYSDEVICE:[TCPIP$TELNET]
TCPIP$XDM TCPIP$XDM [3655,11] TCPIP Normal 8 SYS$SPECIFIC:[TCPIP$XDM]

 ---------------------------------------------------------------------

Now I notice that the TCPIP$TELNET account exists after the install of TCPWare. See below, if you find anything wrong, let me know. Thanks

 ---------------------------------------------------------------------

UAF> sho TCPIP$TELNET

Username: TCPIP$TELNET Owner: TCPIP$TELNET
Account: TCPIP UIC: [3655,2] ([TCPIP$AUX,TCPIP$TELNET])
CLI: DCL Tables: DCLTABLES
Default: SYS$SYSDEVICE:[TCPIP$TELNET]
LGICMD: LOGIN
Flags: Restricted
Primary days: Mon Tue Wed Thu Fri
Secondary days: Sat Sun
Primary 000000000011111111112222 Secondary 000000000011111111112222
Day Hours 012345678901234567890123 Day Hours 012345678901234567890123
Network: ##### Full access ###### ##### Full access ######
Batch: ----- No access ------ ----- No access ------
Local: ----- No access ------ ----- No access ------
Dialup: ----- No access ------ ----- No access ------
Remote: ----- No access ------ ----- No access ------
Expiration: (none) Pwdminimum: 6 Login Fails: 0
Pwdlifetime: 90 00:00 Pwdchange: (pre-expired)
Last Login: (none) (interactive), (none) (non-interactive)
Maxjobs: 0 Fillm: 1024 Bytlm: 400000
Maxacctjobs: 0 Shrfillm: 0 Pbytlm: 0
Maxdetach: 0 BIOlm: 400 JTquota: 4096
Prclm: 8 DIOlm: 1024 WSdef: 350
Prio: 8 ASTlm: 2448 WSquo: 20000
Queprio: 4 TQElm: 20 WSextent: 20000
CPU: (none) Enqlm: 3000 Pgflquo: 20000
Authorized Privileges:
NETMBX TMPMBX
Default Privileges:
NETMBX TMPMBX

[zheng_fei]

But it is strange that I cannot find the TCPIP$TELNET account in a host which Telnet is confirmed work.

I am quite confused...