topic Re: ftp error in Operating System - HP-UX

ftp error

BrianDoyle — Wed, 12 Mar 2008 10:39:28 GMT

Hi,
When trying to ftp(using root) from my laptop to a HPUX server i get:
530 Login incorrect.
Login failed.

I have no trouble ftp'ing to it from a server in the same in the same subnet. I just cant connect directly.

There's no ftpusers file. A /etc/shells file exists.

In /etc/services:
ftp-data 20/tcp # File Transfer Protocol (Data)
ftp 21/tcp # File Transfer Protocol (Control)
(i.e. not commented out)

netstat -a |grep ftp
tcp 0 0 *.ftp *.* LISTEN

It's a Trusted System running 11.31.
What might i be forgetting??

Regards,
Brian

Re: ftp error

BrianDoyle — Wed, 12 Mar 2008 11:26:08 GMT

I checked inetd.conf and tftp was hased out so ive unhashed it. There is a user account for tftp.

On the other trusted systems in the subnet i dont have a problemm with ftp.
So this has me confused....

Re: ftp error

Torsten. — Wed, 12 Mar 2008 11:41:59 GMT

TFTP has nothing to do with FTP.

If the connection and login is working from another system to your server, I would guess the problem is on your PC (NUM on or different keyboard layout?).

Re: ftp error

BrianDoyle — Wed, 12 Mar 2008 11:47:13 GMT

hi tosten,
thanks for the reply.

From a DOS prompt, Im able to ftp to any other of the servers so i dont think it's the PC. Ive tried to connect from other machines and its the same.

Re: ftp error

Tim Nelson — Wed, 12 Mar 2008 12:43:58 GMT

Can you ftp to this server as a different user other than root ? This would at least prove ftp services are working from the subnet your laptop is on.

If not, look in /var/adm/inetd.sec. This file controls what IPs/subnets services are allowed to. Someone would have purposefully edited this file as by default all services to all subnets is allowed.

Re: ftp error

Torsten. — Wed, 12 Mar 2008 12:45:41 GMT

Have a look into the syslog file for related messages. This may help too.

Re: ftp error

Jash_1 — Wed, 12 Mar 2008 13:20:48 GMT

Did you restart inetd after unhashing ftp?

inetd -c

Or kill the pid and restart.

Just a thought.

Re: ftp error

BrianDoyle — Wed, 12 Mar 2008 13:37:15 GMT

Hi,

Yes, i did inetd -c after i unhashed ftp. Still the same.

There's no var/adm/inetd.sec file on any of the servers and no mention of it in the syslog.

Re: ftp error

Jash_1 — Wed, 12 Mar 2008 13:51:57 GMT

Have you checked the resolv.conf file is the same as the other servers and that it has a default gateway defined.

Re: ftp error

Torsten. — Wed, 12 Mar 2008 14:06:40 GMT

Do you have a ftpaccess or ftpusers file in /etc/ftpd ?

Re: ftp error

Torsten. — Wed, 12 Mar 2008 14:13:59 GMT

If you need a more secure (!) "workaround", consider to use another client application like filezilla on your PC and connect via sftp or scp to the server. I'm sure this will work.

Re: ftp error

BrianDoyle — Wed, 12 Mar 2008 14:23:42 GMT

Hi guys,

/etc/resolv.conf has a nameserver and the gateway is correct (in netconf)

There's no ftpaccess or ftpusers file in /etc/ftpd

I'd really like to find out why this is not working befoer i use ftp software.
Its a strange one.....

Re: ftp error

BrianDoyle — Wed, 12 Mar 2008 14:31:25 GMT

I can telnet to the server.....just cant connect with ftp.

Re: ftp error

Torsten. — Wed, 12 Mar 2008 14:31:39 GMT

1) per default all ftp related actions (login) are logged into syslog.

Open another session to the server and run

# tail -f /var/adm/syslog/syslog.log
and watch it while you try to connect.

2) it would make sense (and probably somebody already did it) on a secured system to restrict or even disable ftp and telnet daemons at all for security reasons.

Re: ftp error

BrianDoyle — Wed, 12 Mar 2008 14:44:57 GMT

tail -f /var/adm/syslog/syslog.log
It doesnt show anything new in the past 2 days, even as I try to connect via ftp or even telnet/ssh etc, nothing logged.....

Logging must be outputted to another file but how can I find out?

# more /etc/syslog.conf
mail.debug /var/adm/syslog/mail.log
*.info;mail.none /var/adm/syslog/syslog.log
*.alert /dev/console
*.alert root
*.emerg *

Re: ftp error

Tim Nelson — Wed, 12 Mar 2008 15:12:20 GMT

Let's start over.

While ftp'ing you are getting a login and password prompt but end up with the 530 login incorrect error.

This means ftp is running and working normally. Again, try as a different user other than root to test.

Also, if you have no entries for the ftp connections in syslog.log then tack on a "-l" (el) at the end of the ftpd line in /etc/inetd.conf and inetd -c to re-read the conf. This will at least put some entries in the syslog.log and we will take it from there.

If you still do not see some ftp connection info in syslog.log then just maybe you are not connecting to the server you think you are ?

Re: ftp error

BrianDoyle — Wed, 12 Mar 2008 15:21:39 GMT

hi tim,

I believe the cause is it being a trusted system and there's some parameter i havent modified to allow ftp through.

My inetd.conf currently has
ftp stream tcp6 nowait root /usr/lbin/ftpd ftpd -l
so i was expecting logging but nothing at all in the syslog.

Re: ftp error

Siju Vadakkan — Wed, 12 Mar 2008 16:48:19 GMT

I think it is becz ur password contains special characters like @,#. try a password without @and #.

Re: ftp error

BrianDoyle — Wed, 12 Mar 2008 17:48:26 GMT

hi
there are no characters like that in the passwords

Re: ftp error

Davis Paul — Wed, 12 Mar 2008 18:17:35 GMT

Hi,
Please check the file /var/adm/inetd.sec for any ftp restriction....
Regards,
Davis Paul.