topic Re: FTP login error in Operating System - HP-UX

FTP login error

Kathleen — Thu, 04 Oct 2001 15:16:52 GMT

When a user logs into the FTP_LE software, they are not allowed to signin. This happens from time to time. I had her try to do a run--c:\windows\ftp and try to sign in that way to FTP but she gets a "connection closed by remote host" message. What is causing this....or what can I check to fix the problem? This doesnt' happen all the time....just from time to time.
Thanks

Re: FTP login error

Santosh Nair_1 — Thu, 04 Oct 2001 15:24:09 GMT

What kind of errors (if any) are you getting on the server side? Check /var/adm/syslog. Also try starting up the ftp daemon with logging, i.e. in /etc/inetd.conf change the entry for ftpd:

ftp stream tcp nowait root /usr/lbin/ftpd ftpd -l -L -v

the -l logs each ftp session,
the -L logs all commands sent to the ftp daemon
the -v logs logs other information include what files were transfered, etc.

then restart inetd (inetd -c). Then see if you could reproduce the problem from the client side and then check /var/adm/syslog/syslog.log for any errors.

-Santosh

Re: FTP login error

Joseph C. Denman — Thu, 04 Oct 2001 16:19:51 GMT

Hi Kathleen,

There are a couple of things that could cause this:

1. First, I would do as stated above and restart inetd with ftp logging turned on. You can force inetd to reread the conf file with the -c option. To restart inetd, /sbin/init.d/inetd stop;/sbin/init.d/inetd start

Then when the problem occurs, check the log.

2. I could be a network problem. If the person is comming through a firewall, I have seen the firewall proxy glitches cause the same intermittent problem.

...jcd...

Re: FTP login error

Rita C Workman — Thu, 04 Oct 2001 18:12:06 GMT

Hi Kathleen,

All good ideas to check so far...and here's a couple more.
On that box that is closing your connection...login to it and see if it can ftp to itself. If it can..good; if not than that is where to begin.
If 1 passed ok...then check on that box for /var/adm/inetd.sec file and see if it is restricting ftp access.

Just a couple thoughts,
Rita

Re: FTP login error

Kathleen — Wed, 10 Oct 2001 14:14:28 GMT

These are some things I see in the syslog

Sep 10 11:23:44 proxy ftpd[19087]: cannot stat private access file /etc/ftpd/ftp
groups: No such file or directory
Sep 10 11:23:44 proxy ftpd[19087]: FTP LOGIN FROM 10.120.12.92 [10.120.12.92], fhs
Sep 10 11:41:27 proxy ftpd[19087]: exiting on signal 14
Oct 4 12:04:05 proxy ftpd[19087]: cannot stat private access file /etc/ftpd/ftp
groups: No such file or directory
Oct 4 12:04:06 proxy ftpd[19087]: FTP LOGIN FROM 10.120.20.89 [10.120.20.89], fhs
Oct 4 12:05:06 proxy ftpd[19087]: FTP session closed

Re: FTP login error

Wodisch — Wed, 10 Oct 2001 16:53:44 GMT

Hello Kathleen,

signal 14 is SIGALRT (alert after a time-out),
and the ip-address tells me that there is no
(correct) name resolution for the client's
hostname/ip-address. And since this usually
takes enormous amounts of time (if configured
wrong or plainly not working) then this would
explain the SIGALRT...
Can you check for your DNS setup? And for the
response time of your DNS-servers?

Just my ?0.02,
Wodisch

Re: FTP login error

Kathleen — Wed, 10 Oct 2001 17:08:56 GMT

I can check that...the DNS but what do I look for specifically?

Re: FTP login error

Rita C Workman — Wed, 10 Oct 2001 17:47:02 GMT

I believe for DNS it would be the named.boot file, otherwise you want to check your /etc/hosts. If this user IP's address is in either place it should resolve. The order (or what it uses) depends on the /etc/nsswitch.conf file.

Now here is one more thought....is their an /etc/ftpuser (ver 10.2). On 10.2 creating this /etc/ftpuser file and simply entering the user login id will restrict them from getting logged in...

Just a thought,
Rita

Re: FTP login error

Kevin Wright — Wed, 10 Oct 2001 17:53:44 GMT

to check DNS, what you want to try is nslookup on the IP address in syslog. If it returns a hostname, your fine, if not, your reverse DNS is not working properly.

if your using dns, your /etc/named.conf file will point you to the right files to edit. You should check as was noted /etc/nsswitch.con for the hosts line as well.

Re: FTP login error

Kathleen — Thu, 11 Oct 2001 13:05:22 GMT

On the DNS server my nsswitch.conf file says

hosts: dns [NOTFOUND=continue] files

On the server that I am having troubles signing into FTP.... I see
hosts: files [notfound=continue unavail=continue tryagain=continue] dns

What should this say?

Re: FTP login error

Kathleen — Thu, 11 Oct 2001 13:10:43 GMT

Also,
Now all I am getting in my syslog for users is...

Oct 11 08:24:10 proxy ftpd[6477]: FTP session closed
Oct 11 08:27:44 proxy ftpd[6497]: FTP session closed
Oct 11 08:30:20 proxy ftpd[6516]: FTP session closed
Oct 11 09:18:11 proxy ftpd[6731]: FTP session closed
Oct 11 09:19:39 proxy ftpd[6735]: FTP session closed
Oct 11 09:54:23 proxy ftpd[6938]: getpeername (/usr/lbin/ftpd): Socket operation
on non-socket