topic Re: Question about FTP in Operating System - HP-UX

Question about FTP

hp wattel — Mon, 19 Aug 2002 18:21:25 GMT

Hi,

I have recently setup a new HP-UX 11.0 server. For some reason, non-root users can not ftp from the server to other servers in our LAN or on the WAN. Root can ftp to other servers as appropriate. Name resolution is working in all cases, and all of the apps on the box, save ftp, work fine. I have no special inet security enabled. A non-root user CAN ftp to this server *from* this server, but ftping to all other servers fails with "unknown server error" before a connection is established. Other servers can ftp to this server with no problem. It looks like a permissions problem of some sort to me, but I can not find the problem. Any help would be appreciated.

Thanks,

Bob

Re: Question about FTP

Sajid_1 — Mon, 19 Aug 2002 18:26:33 GMT

Did you try the 'ftp' with IP_ADDRESS? Did you check the settings/security enables on other servers? If other servers are configured to have ftp permission to only listed hosts, then add this servers entry there.

hth,

Re: Question about FTP

Uday_S_Ankolekar — Mon, 19 Aug 2002 18:29:47 GMT

Hello,

- create file called shells in /etc
and put all shell information in it like /usr/bin/sh,ksh,csh etc and then try

- Try ftp with IP address instead of hostname

-USA..

Re: Question about FTP

Hai Nguyen_1 — Mon, 19 Aug 2002 18:36:25 GMT

Bob,

Can a non-root user telnet to other servers from this server?

Hai

Re: Question about FTP

Chris Lonergan — Mon, 19 Aug 2002 18:36:34 GMT

Try looking at the permissions of the IP Addr resolutiotion files. e.g. /etc/hosts or nsswitch.conf

Chris

Re: Question about FTP

hp wattel — Mon, 19 Aug 2002 18:42:34 GMT

Stupid me, I should have mentioned that ftping with the IP address does work. Which I would think would indicate some sort of resolution problem, but nslookup, ping, etc. work fine.
I am assuming ftp uses the resolver in some way shape or form.

The shells file was setup correctly already.

Thanks for the replies!

Re: Question about FTP

Eric Crosby_1 — Mon, 19 Aug 2002 19:37:58 GMT

I agree with Chris on this one. Check the permissions on /etc/hosts /etc/resolv.conf and /etc/nsswitch.conf just to make sure. I have all three files at 400.

Hope it helps some.

Eric

Re: Question about FTP

Shannon Petry — Mon, 19 Aug 2002 19:51:06 GMT

The last post was not correct.
/etc/hosts
/etc/resolv.conf
/etc/nsswitch.conf
need to all have 444 permissions, not 400!

Also, /etc/nsswitch.conf may not exist. However if you list /etc/nsswitch.* you will see several premade files for different scenarios. I.E. nsswitch.nis, nsswitch.nisplus, etc...

If you are using any of the resolvers like NIS, or DNS, make sure to edit the nsswitch.conf or copy the correct one.

Regards,
Shannon