topic Re: Telnet connection problem on OpenVMS Alpha 7.3-2 in Operating System - OpenVMS

Telnet connection problem on OpenVMS Alpha 7.3-2

zheng_fei — Fri, 16 Dec 2011 03:13:32 GMT

I ran into a telnet connection problem on a node running OpenVMS Alpha 7.3-2 a few days ago.

The outgoing telnet from this node is ok. Decnet and ftp are also ok.

But the incoming telnet always fails, meaning that other nodes cannot access this node thru telnet.

Telnet localhost also failed after hanging for a while.

To investigate the problem, I enabled debug for telnet. The screen output is posted below:

------------------------------

TELNET> enable debug

TELNET> connect localhost
%TELNET-I-TRYING, Trying ... 127.0.0.1
%TELNET-I-SESSION, Session 01, host localhost, port 23
-TELNET-I-ESCAPE, Escape character is ^]
SEND [ 0] FFFB18FFFB 3FFFD 3FFFB17FFFB1F
RCVD [ 0] FFFB 1FFFB 3
SEND [ 0] FFFD 1
RCVD [ 0] FFFD18FFFA18 1FFF0
SEND [ 0] FFFA18 05654313032FFF0
RCVD [ 0] FFFD17FFFD1F
SEND [ 0] FFFA175F525441313A2F53595354454DFFF0FFFA1F 084 018FFF0
%TELNET-S-REMCLOSED, Remote connection closed
-TELNET-I-SESSION, Session 01, host localhost, port 23
TELNET> exit

------------------------------

I also put the telnet config below, seems no problem:

------------------------------

TCPIP> sh service telnet /full

Service: TELNET
State: Enabled
Port: 23 Protocol: TCP Address: 0.0.0.0
Inactivity: 1 User_name: not defined Process: not defined
Limit: 10000 Active: 0 Peak: 2

File: not defined
Flags: Listen Rtty IPv6

Socket Opts: Keepalive Rcheck Scheck
Receive: 3000 Send: 3000

Log Opts: Actv Dactv Conn Error Logi Logo Mdfy Rjct
File: not defined

Security
Reject msg: not defined
Accept host: 0.0.0.0
Accept netw: 0.0.0.0
TCPIP>

------------------------------

Anyone has any idea for this problem? Thanks.

Re: Telnet connection problem on OpenVMS Alpha 7.3-2

zheng_fei — Fri, 16 Dec 2011 03:25:32 GMT

Another finding is, when I telnet the node with another terminal, I notice that new terminal TNAx was created. But the Owner process is "" and Owner process ID is 00000000.

-------------------------------

>sh dev tna /full

Terminal TNA0:, device type unknown, is online, record-oriented device, carriage
control, device is a template only.

Error count 0 Operations completed 0
Owner process "" Owner UIC [SYSTEM]
Owner process ID 00000000 Dev Prot S:RWPL,O:RWPL,G,W
Reference count 0 Default buffer size 80

Terminal TNA9:, device type unknown, is online, record-oriented device, carriage
control.

Error count 0 Operations completed 1
Owner process "" Owner UIC [SYSTEM]
Owner process ID 00000000 Dev Prot S:RWPL,O:RWPL,G,W
Reference count 0 Default buffer size 80

-------------------------------

I am wondering if this is abnormal

Re: Telnet connection problem on OpenVMS Alpha 7.3-2

Steven Schweda — Fri, 16 Dec 2011 04:48:45 GMT

Re: Telnet connection problem on OpenVMS Alpha 7.3-2

zheng_fei — Fri, 16 Dec 2011 08:27:34 GMT

Hi, Steven,

Thanks for the reply. I checked the problem again according to your suggestions:

Tcpip version:

------------------------------------------------

>tcpip sh vers

HP TCP/IP Services for OpenVMS Alpha Version V5.4
on a AlphaServer ES40 running OpenVMS V7.3-2

------------------------------------------------

sys$announce:

------------------------------------------------

>sh log sys$announce
"SYS$ANNOUNCE" = " Welcome to OpenVMS (TM) Alpha Operating System, Version V7.3-2 " (LNM$SYSTEM_TABLE)

------------------------------------------------

I also set the logical tcpip$telnet_server_debug (which is used in SYS$SYSTEM:TCPIP$TELNET_RUN.COM) to true, but still do not get any further debug info:

------------------------------------------------

>define /sys/exec tcpip$telnet_server_debug "true"

>telnet localhost
%TELNET-I-TRYING, Trying ... 127.0.0.1
%TELNET-I-SESSION, Session 01, host localhost, port 23
-TELNET-I-ESCAPE, Escape character is ^]
%TELNET-S-REMCLOSED, Remote connection closed
-TELNET-I-SESSION, Session 01, host localhost, port 23

------------------------------------------------

I did not get any OPCOM message during the process.

I also do not have SYS$SYSDEVICE:[TCPIP$TELNET] directory in this node. I checked other nodes which run telnet properly, the SYS$SYSDEVICE:[TCPIP$TELNET] does not exist as well.

Thanks

Zheng Fei

Re: Telnet connection problem on OpenVMS Alpha 7.3-2

Hoff — Fri, 16 Dec 2011 15:04:19 GMT

Have you configured and started the telnet server with the @SYS$MANAGER:TCPIP$CONFIG tool?

Did you attempt to configure and start the daemon using TCPIP> commands and not the CONFIG tool?

Look for the default directory associated with the user TCPIP$TELNET; that should be the target directory.

Re: Telnet connection problem on OpenVMS Alpha 7.3-2

Steven Schweda — Fri, 16 Dec 2011 15:07:04 GMT

Re: Telnet connection problem on OpenVMS Alpha 7.3-2

zheng_fei — Mon, 19 Dec 2011 02:21:50 GMT

Hi, Hoff

Yes. the telnet server has been started with SYS$MANAGER:TCPIP$CONFIG, please see below

----------------------------------------------------

HP TCP/IP Services for OpenVMS Client Components Configuration Menu

Configuration options:

1 - DHCP Client Disabled Stopped
2 - FTP Client Enabled Started
3 - NFS Client Disabled Stopped
4 - REXEC and RSH Enabled Started
5 - RLOGIN Enabled Started
6 - SMTP Enabled Started
7 - SSH Client Enabled Started
8 - TELNET Enabled Started
9 - TELNETSYM Disabled Stopped

A - Configure options 1 - 9
[E] - Exit menu

----------------------------------------------------

HP TCP/IP Services for OpenVMS Server Components Configuration Menu

Configuration options:

1 - BIND Disabled Stopped 12 - NTP Disabled Stopped
2 - BOOTP Disabled Stopped 13 - PC-NFS Disabled Stopped
3 - DHCP Disabled Stopped 14 - POP Disabled Stopped
4 - FINGER Disabled Stopped 15 - PORTMAPPER Disabled Stopped
5 - FTP Enabled Started 16 - RLOGIN Enabled Started
6 - IMAP Disabled Stopped 17 - RMT Disabled Stopped
7 - LBROKER Disabled Stopped 18 - SNMP Disabled Stopped
8 - LPR/LPD Disabled Stopped 19 - SSH Enabled Started
9 - METRIC Disabled Stopped 20 - TELNET Enabled Started
10 - NFS Disabled Stopped 21 - TFTP Disabled Stopped
11 - LOCKD/STATD Disabled Stopped 22 - XDM Enabled Started

A - Configure options 1 - 22
[E] - Exit menu

---------------------------------------------------

I did not attemp to configure and start it by using TCPIP> commands as I think it makes no difference with the @SYS$MANAGER:TCPIP$CONFIG tool. I will try later if let you know if I find any difference

Can you advise where to find the default directory associated with the user TCPIP$TELNET?

Thanks

Zheng Fei

Re: Telnet connection problem on OpenVMS Alpha 7.3-2

zheng_fei — Mon, 19 Dec 2011 02:34:32 GMT

Hi Steven,

I will see if I can get Eco 7.

The basic system resources should be ok as I do not notice any problem with other programs and network services.

Thanks

Zheng Fei

Re: Telnet connection problem on OpenVMS Alpha 7.3-2

zheng_fei — Mon, 19 Dec 2011 03:52:25 GMT

just checked that process cnt is ok

--------------------------------------

>mc sysgen
SYSGEN> SH MAXPROCESSCNT
Parameter Name Current Default Min. Max. Unit Dynamic
-------------- ------- ------- ------- ------- ---- -------
MAXPROCESSCNT 800 32 12 16384 Processes

Re: Telnet connection problem on OpenVMS Alpha 7.3-2

The Brit — Tue, 20 Dec 2011 11:45:36 GMT

It isnt so much the SYSGEN value of MAXPROCESSCNT that is important, it is the number of slots available.

type:

$ show memory/slots

As for the TELNET default directory, look at the TCPIP$TELNET account in the UAF. On my systems the default is

SYS$SYSDEVICE:[TCPIP$TELNET]

Also check the ownership and protection of this directory, vis.

$ Directory/Security SYS$SYSDEVICE:[000000]TCPIP$TELNET.dir

Directory SYS$SYSDEVICE:[000000]

TCPIP$TELNET.DIR;1 [TCPIP$AUX,TCPIP$TELNET] (RWE,RWE,RE,E)

Dave,

Re: Telnet connection problem on OpenVMS Alpha 7.3-2

zheng_fei — Fri, 30 Dec 2011 02:36:39 GMT

Sorry for the late update. Busy with other projects these days.

To Dave:

1. results of $ show memory/slots:

-------------------------------------------------------------------

Slot Usage (slots): Total Free Resident Swapped
Process Entry Slots 800 776 24 0
Balance Set Slots 798 776 22 0

-------------------------------------------------------------------

2. It is weired that I cannot find the TCPIP$TELNET account in the UAF, even in another machine whose telnet is confirmed to work.

To check if this problem is caused by TCPIP V5.4, We uninstalled TCPIP and installed TCPWare instead. The telnet problem is still there: outgoing telnet is ok, incoming telnet is hanging.

Zheng Fei

Re: Telnet connection problem on OpenVMS Alpha 7.3-2

Volker Halle — Fri, 30 Dec 2011 08:17:03 GMT

Zheng Fei,

as far as I'm aware, there is no separate 'TELNET server' process for OpenVMS TCPIP. TCPIP SHOW DEV/PORT=23 shows you the 'listening' BG device and that's owned by TCPIP$INETACP. Could you post a TCPIP SHOW DEV/FULL BGx of that BG device when trying a TELNET localhost from another session ?

If the same error occurs with both HP TCPIP and TCPware, it must either be a more generic problem inside your OpenVMS system or something in your TCPIP network configuration (does DNS name resolution work correctly ?).

If you say 'DECnet' works, you meant DECnet SET HOST to that node, right ?

Volker.

Re: Telnet connection problem on OpenVMS Alpha 7.3-2

Hoff — Fri, 30 Dec 2011 14:30:45 GMT

This is getting somewhat confusing; the symptoms are not clustering around a specific problem.

Call HP support and ask them for troubleshooting assistance, or contact and work with some other entity that knows VMS and TCP/IP Services and related troubleshooting, and work through this directly on the server(s) and network involved.

For general connectivity, ask your networking organization to have a look at the VLANs and IP routing here, if you're using managed switches. That you're not getting connections via localhost implies more than the network is involved here, though. Out on a managed network, it is quite possible for the networking team to block just telnet traffic, for instance.

One caution: do not trust what the corporate networking folks will tell you. Ever. They will sometimes tell you what are effectively bald-faced lies, and entirely with the best of intentions. Believe what they tell you only after you have verified the data yourself. To quote the old Russian Proverb: Trust, but Verify.

If you're looking within the real and live SYSUAF database (it's quite possible to have more than one SYSUAF file around), then not finding the username entries for the TCPIP Services product strongly implies that the system authorization configuration is likely invalid or that TCP/IP Services is not correctly configured; that your authentication database and/or TCP/IP Services database is/are effectively corrupt.

UAF> show {your username here} ! see if the last login time looks correct, etc; see if you're looking at "live" data

UAF> sho tcp*/br
Owner Username UIC Account Privs Pri Directory

TCPIP$BIND TCPIP$BIND [3655,7] TCPIP Normal 8 SYS$SPECIFIC:[TCPIP$BIND]
TCPIP$BOOTP TCPIP$BOOTP [3655,12] TCPIP Normal 8 SYS$SYSDEVICE:[TCPIP$BOOTP]
TCPIP$DHCP TCPIP$DHCP [3655,1] TCPIP Normal 8 SYS$SYSDEVICE:[TCPIP$DHCP]
TCPIP$FINGER TCPIP$FINGER [3655,3] TCPIP Normal 8 SYS$SYSDEVICE:[TCPIP$FINGER]
TCPIP$FTP TCPIP$FTP [3655,4] TCPIP Normal 8 SYS$SYSDEVICE:[TCPIP$FTP]
TCPIP$IMAP TCPIP$IMAP [3655,21] TCPIP Normal 8 SYS$SYSDEVICE:[TCPIP$IMAP]
TCPIP$LPD TCPIP$LPD [3655,23] TCPIP Normal 8 SYS$SPECIFIC:[TCPIP$LPD]
TCPIP$NFS TCPIP$NFS [3655,22] TCPIP Normal 8 SYS$SYSDEVICE:[TCPIP$NFS]
TCPIP$NFSLCK TCPIP$NFSLCK [3655,13] TCPIP Normal 8 SYS$SYSDEVICE:[TCPIP$NFSLCK]
TCPIP$NOBODY TCPIP$NOBODY [3375,1] TCPIP Normal 8 SYS$SYSDEVICE:[TCPIP$NOBODY]
TCPIP$NTP TCPIP$NTP [3655,14] TCPIP Normal 8 SYS$SPECIFIC:[TCPIP$NTP]
TCPIP$PCNFS TCPIP$PCNFS [3655,16] TCPIP Normal 8 SYS$SYSDEVICE:[TCPIP$PCNFS]
TCPIP$POP TCPIP$POP [3655,15] TCPIP Normal 8 SYS$SYSDEVICE:[TCPIP$POP]
TCPIP$PORTM TCPIP$PORTM [3655,5] TCPIP Normal 8 SYS$SYSDEVICE:[TCPIP$PORTM]
TCPIP$REXEC TCPIP$REXEC [3655,11] TCPIP Normal 8 SYS$SYSDEVICE:[TCPIP$REXEC]
TCPIP$RSH TCPIP$RSH [3655,10] TCPIP Normal 8 SYS$SYSDEVICE:[TCPIP$RSH]
TCPIP$SMTP TCPIP$SMTP [3655,2] TCPIP Normal 8 SYS$SPECIFIC:[TCPIP$SMTP]
TCPIP$SNMP TCPIP$SNMP [3655,6] TCPIP Normal 8 SYS$SYSDEVICE:[TCPIP$SNMP]
TCPIP$SSH TCPIP$SSH [3655,24] TCPIP Normal 8 TCPIP$SSH_DEVICE:[TCPIP$SSH]
TCPIP$TELNET TCPIP$TELNET [3655,20] TCPIP Normal 8 SYS$SYSDEVICE:[TCPIP$TELNET]
TCPIP$TFTP TCPIP$TFTP [3655,17] TCPIP Normal 8 SYS$SYSDEVICE:[TCPIP$TFTP]
UAF>

Telnet itself is started from inetd.

And this:

>To check if this problem is caused by TCPIP V5.4, We uninstalled TCPIP and installed TCPWare instead. The telnet problem is still there: outgoing telnet is ok, incoming telnet is hanging.

Implies a more generic issue with the local network or local configuration, local DNS services or other issues.

Re: Telnet connection problem on OpenVMS Alpha 7.3-2

zheng_fei — Fri, 06 Jan 2012 02:43:41 GMT

Volker:

Now with TCPWare installed, I dont know how to SHOW DEV/FULL BGx as TCPIP. Can you advise?

Another question is: Is it necessary to config the DNS service? I tried to use ip address instead of host name, the problem is still there.

Btw, yes, I can set host to that node via DECnet.

Re: Telnet connection problem on OpenVMS Alpha 7.3-2

zheng_fei — Fri, 06 Jan 2012 02:58:00 GMT

Hoff:

I am using system account to login that node. UAF>sho system gives me:

---------------------------------------------------------------------

Username: SYSTEM Owner: SYSTEM MANAGER
Account: SYSTEM UIC: [1,4] ([SYSTEM])
CLI: DCL Tables: DCLTABLES
Default: SYS$SYSROOT:[SYSMGR]
LGICMD: SYSTEM_LOGIN.COM
Flags:
Primary days: Mon Tue Wed Thu Fri
Secondary days: Sat Sun
No access restrictions
Expiration: (none) Pwdminimum: 6 Login Fails: 0
Pwdlifetime: (none) Pwdchange: (pre-expired)
Last Login: 6-JAN-2012 09:14 (interactive), 5-JAN-2012 18:03 (non-interactive)
Maxjobs: 0 Fillm: 100 Bytlm: 64000
Maxacctjobs: 0 Shrfillm: 0 Pbytlm: 0
Maxdetach: 0 BIOlm: 10000 JTquota: 4096
Prclm: 10 DIOlm: 200 WSdef: 2000
Prio: 4 ASTlm: 250 WSquo: 4000
Queprio: 0 TQElm: 200 WSextent: 16384
CPU: (none) Enqlm: 2048 Pgflquo: 50000
Authorized Privileges:
ACNT ALLSPOOL ALTPRI AUDIT BUGCHK BYPASS
CMEXEC CMKRNL DIAGNOSE DOWNGRADE EXQUOTA GROUP
GRPNAM GRPPRV IMPERSONATE IMPORT LOG_IO MOUNT
NETMBX OPER PFNMAP PHY_IO PRMCEB PRMGBL
PRMMBX PSWAPM READALL SECURITY SETPRV SHARE
SHMEM SYSGBL SYSLCK SYSNAM SYSPRV TMPMBX
UPGRADE VOLPRO WORLD
Default Privileges:
ACNT ALLSPOOL ALTPRI AUDIT BUGCHK BYPASS
CMEXEC CMKRNL DIAGNOSE DOWNGRADE EXQUOTA GROUP
GRPNAM GRPPRV IMPERSONATE IMPORT LOG_IO MOUNT
NETMBX OPER PFNMAP PHY_IO PRMCEB PRMGBL
PRMMBX PSWAPM READALL SECURITY SETPRV SHARE
SHMEM SYSGBL SYSLCK SYSNAM SYSPRV TMPMBX
UPGRADE VOLPRO WORLD
Identifier Value Attributes
NET$MANAGE %X91F50002

---------------------------------------------------------------------

The last login time is correct. The result of UAF> sho tcp*/br is posted below:

---------------------------------------------------------------------

Owner Username UIC Account Privs Pri Directory

TCPIP$DHCP TCPIP$DHCP [3655,1] TCPIP Normal 8 SYS$SYSDEVICE:[TCPIP$DHCP]
TCPIP$FTP TCPIP$FTP [3655,4] TCPIP Normal 8 SYS$SYSDEVICE:[TCPIP$FTP]
TCPIP$REXEC TCPIP$REXEC [3655,10] TCPIP Normal 8 SYS$SYSDEVICE:[TCPIP$REXEC]
TCPIP$RSH TCPIP$RSH [3655,7] TCPIP Normal 8 SYS$SYSDEVICE:[TCPIP$RSH]
TCPIP$SMTP TCPIP$SMTP [3655,3] TCPIP Normal 8 SYS$SPECIFIC:[TCPIP$SMTP]
TCPIP$SNMP TCPIP$SNMP [3655,5] TCPIP Normal 8 SYS$SYSDEVICE:[TCPIP$SNMP]
TCPIP$SSH TCPIP$SSH [3655,6] TCPIP Normal 8 TCPIP$SSH_DEVICE:[TCPIP$SSH]
TCPIP$TELNET TCPIP$TELNET [3655,2] TCPIP Normal 8 SYS$SYSDEVICE:[TCPIP$TELNET]
TCPIP$XDM TCPIP$XDM [3655,11] TCPIP Normal 8 SYS$SPECIFIC:[TCPIP$XDM]

---------------------------------------------------------------------

Now I notice that the TCPIP$TELNET account exists after the install of TCPWare. See below, if you find anything wrong, let me know. Thanks

---------------------------------------------------------------------

UAF> sho TCPIP$TELNET

Username: TCPIP$TELNET Owner: TCPIP$TELNET
Account: TCPIP UIC: [3655,2] ([TCPIP$AUX,TCPIP$TELNET])
CLI: DCL Tables: DCLTABLES
Default: SYS$SYSDEVICE:[TCPIP$TELNET]
LGICMD: LOGIN
Flags: Restricted
Primary days: Mon Tue Wed Thu Fri
Secondary days: Sat Sun
Primary 000000000011111111112222 Secondary 000000000011111111112222
Day Hours 012345678901234567890123 Day Hours 012345678901234567890123
Network: ##### Full access ###### ##### Full access ######
Batch: ----- No access ------ ----- No access ------
Local: ----- No access ------ ----- No access ------
Dialup: ----- No access ------ ----- No access ------
Remote: ----- No access ------ ----- No access ------
Expiration: (none) Pwdminimum: 6 Login Fails: 0
Pwdlifetime: 90 00:00 Pwdchange: (pre-expired)
Last Login: (none) (interactive), (none) (non-interactive)
Maxjobs: 0 Fillm: 1024 Bytlm: 400000
Maxacctjobs: 0 Shrfillm: 0 Pbytlm: 0
Maxdetach: 0 BIOlm: 400 JTquota: 4096
Prclm: 8 DIOlm: 1024 WSdef: 350
Prio: 8 ASTlm: 2448 WSquo: 20000
Queprio: 4 TQElm: 20 WSextent: 20000
CPU: (none) Enqlm: 3000 Pgflquo: 20000
Authorized Privileges:
NETMBX TMPMBX
Default Privileges:
NETMBX TMPMBX

Re: Telnet connection problem on OpenVMS Alpha 7.3-2

zheng_fei — Fri, 06 Jan 2012 03:25:14 GMT

But it is strange that I cannot find the TCPIP$TELNET account in a host which Telnet is confirmed work.

I am quite confused...