topic Re: ftp issues. in Operating System - HP-UX

ftp issues.

Tom Marting — Thu, 10 Jul 2008 16:33:08 GMT

Hello,
I'm running HP-UX 11.11 on an rp4440.

I am able to ftp to the rp4400 without issues, I can cd to certain filesystems (/opt, /root, /var, /home etc) and list their contents. But, when a try to cd into other directories such as /app (on internal disk) or /app2 (EMC disk) the ftp session hangs. It eventually comes back with the error:

421 Service not available, remote server has closed connection

A little background that may or may not be related to the ftp issues. Early this morning it appears automounter hung. Any process or session that tries to list or access /net hangs. We attempted to stop automounter by setting automounter=0 in nfsconf and stopping then starting nfs.core,client and server. This did not work, automouter won't go away.

Thanks,
Tom.

Re: ftp issues.

YAQUB_1 — Thu, 10 Jul 2008 16:39:58 GMT

Hi,

If an FTP server won't allow logins, it is probably configured correctly, but the problem is probably with authorizing users at login. FTP servers in current distriubtions often authorize users with the Pluggable Authentication Modules library, in which case there should be an authorization file /etc/pam.d/ftp. A generic authorization file looks like this. (The line break on the first "auth" line is for readability. The entry is actually a single, long line).

#%PAM-1.0
auth required /lib/security/pam_listfile.so item=user \ sense=deny file=/etc/ftpusers onerr=succeed auth required /lib/security/pam_pwdb.so shadow nullok auth required /lib/security/
pam_shells.so
account required /lib/security/pam_pwdb.so
session required /lib/security/pam_pwdb.so

Also, make sure the /etc/ftpusers file, or whatever users file is named in the first "auth" line, is configured correctly.

BR/
Yaqub

Re: ftp issues.

Steven E. Protter — Thu, 10 Jul 2008 16:42:39 GMT

Shalom,

1) I think this is a good thing. ftp is a bad tool to be using, as authentication and data stream are pretty much in the clear.
2) That being said, check the ftpaccess file for configuration to chroot the user or prevent full access.
3) /var/adm/syslog/syslog.log might give you an error message pointing to the source of the problem.
4) Perhaps use HP's openssh implementation known as Secure Shell available at http://software.hp.com

SEP

Re: ftp issues.

skt_skt — Thu, 10 Jul 2008 16:45:16 GMT

does not look like Tom uses pam authentication!!

Re: ftp issues.

Tom Marting — Thu, 10 Jul 2008 16:48:40 GMT

Unfortunately the application, managed by a 3rd party, requires ftp. The server also doesn't have an ftpaccess file and syslog.log has been of no help.

Re: ftp issues.

Dennis Handly — Fri, 11 Jul 2008 05:03:19 GMT

>when a try to cd into other directories such as /app (on internal disk) or /app2 (EMC disk) the ftp session hangs.

This hang would make sense if they were NFS.

>We attempted to stop automounter by setting automounter=0 in nfsconf and stopping then starting nfs.core,client and server. This did not work

You may have to reboot but that may fix the automounter anyway.

Re: ftp issues.

Tom Marting — Fri, 11 Jul 2008 10:56:42 GMT

Hi Dennis,
The file systems are local to the system.

For automounter, I agree, the only way to free this up is to reboot.
Thanks,
Tom.