FTP server enabled but disabled on 7.3-2

[Steven Schweda]

%DCL-E-NOCMDPROC looks bad. My log file
begins:

$ Set NoOn
$ VERIFY = F$VERIFY(F$TRNLNM("SYLOGIN_VERIFY"))
******************************************************************
FTP server started on alp.antinode.org
******************************************************************
[...]


alp $ help /mess NOCMDPROC

NOCMDPROC, error opening captive command procedure - access denied

Facility: CLI, Command Language Interpreter (DCL)

Explanation: When you attempted to log in, you failed because you have a
captive account and DCL received an error during the login.
For example, DCL could not find your LOGIN.COM file. You
may also have incorrect protection on the system's SYLOGIN
file (SYS$MANAGER:SYLOGIN.COM or /SYSTEM/EXEC logical). The
system's SYLOGIN file must be protected with at least WORLD:E
access to the file and the directory that contains it.

User Action: See your system manager.


I assume that "captive" here also includes
"restricted", as that's what AUTHORIZE says
about user TCPIP$TFTP.

Around here:

ALP $ dire /owne /prot SYS$SYSDEVICE:[000000]TCPIP$TFTP

Directory SYS$SYSDEVICE:[000000]

TCPIP$TFTP.DIR;1 [TCPIP$AUX,TCPIP$TFTP] (RWE,RWE,RE,E)

and, for the login.com:

Directory SYS$SYSDEVICE:[TCPIP$TFTP]

LOGIN.COM;1 [TCPIP$AUX,TCPIP$TFTP] (RWED,RWED,RE,RE)


Perhaps you should "See your system
manager." (You have a mirror?)

[Steven Schweda]

Also, where the real action is:

Directory SYS$COMMON:[SYSEXE]

TCPIP$FTP_RUN.COM;1
[SYSTEM] (RWED,RWED,RE,RE)

[Susan Abercrombie]

And the winner is -- Karl Rohwedder. Thanks, Kalle! Protection on sylogin.com was W:. There was also an error in it, I found, once the protection was fixed. So a previous edit was bungled twice.

Many thanks to all who responded.

Sue

[faris_3]

Not to minimise Karl's advice :-)

but in the article you can read :

Use the "$ DIRECTORY /SECURITY command to check the file protections of
the following:

TCPIP V5.n

...
SYS$MANAGER:SYLOGIN.COM,

...

/hf

[Susan Abercrombie]

My apologies, Homi. I had worked my way through a good deal but not all of the article, then was diverted to some more pressing issues. When I got back to this issue, there were new replies, one of which was the specific pointer to SYLOGIN. I had not looked that early in the chain of steps in creating the process. I had observed that the user LOGIN did not seem to execute. So I concentrated on SYLOGIN, and that was the answer.

I'll go back and see whether I managed to skip over that issue in the article or didn't get there.

Again, thanks to you (and to everyone who offered assistance).

Sue

[faris_3]

No problems Susan.

I was just wondering if your case was in the 99 % covered by the article
(even if as you have seen the names of some of the images have changed).

[Susan Abercrombie]

Hi, Homi!

I would probably have parsed the article a little more closely if I hadn't found the discrepancies right from the top. My initial scan of it suggested that, though not current, it had very good material in it. And I was grateful for the pointer to the detailed (and, parenthetically, official) information. Since it was out of date, I had to parse my way through detailed data that clearly wasn't current. That didn't make it of less interest, just slower to process. As it happened, someone else put the particular issue front and center in my face at the right time.

That is one of the problems with support publications. Out of date sources have important material which can be hidden by version discrepancies. I'm not sure when FTPC and FTPD disappeared, but several versions bsck. Their presence in the article is distracting. I don't know who is responsible for maintaining those resources. I'm inclined to think that it's time to make a distinction between TCPIP 5.0 (or so) and the current versions rather than UCX and 5.0 (or so). But that's just my $0.02.

In any event, thank you very much for your assistance and your continued interest in my problem after viewing it and posting your recommendation. In my experience, the inclination to help the other guy is what has distinguished the DEC/.../HP world from the rest of the industry.

Sue

[Jan van den Ende]

Sue,

what remains for you to do is to give some value to your thanks:

http://forums1.itrc.hp.com/service/forums/helptips.do?#33

Remember, it is the ONLY reward for the effort by your colleagues!

Proost.

Have one on me.

jpe

[faris_3]

>That is one of the problems with support >publications. Out of date sources have >important material which can be hidden by >version discrepancies.

Yes but the articles are validated only at the date of the publication and for the listed versions of the products.

>I don't know who is responsible for >maintaining those resources.

Usually the articles are written by Customer Support Center specialists ( i am one in France). But nobody (as far as i know) is responsible for maintaining the articles up to date. They are updated on a need basis (many calls on a given subject).
They should be considered as valid at the time of the publication.

>I'm inclined to think that it's time to >make a distinction between TCPIP 5.0 (or >so) and the current versions rather than >UCX and 5.0 (or so). But that's just my >$0.02.

Good suggestion. I'll try to update this one.

>In any event, thank you very much for your >assistance and your continued interest in >my problem after viewing it and posting >your recommendation. In my experience, the >inclination to help the other guy is what >has distinguished the DEC/.../HP world >from the rest of the industry.

I have no merit. It's my job. (Though the participation in the forum is not part of it).

/homi

[Ira Carmel2]

I have run into this problem with restricted accounts, but the solution was very subtle. The problem was that the account had a lgicmd SCT_LOGIN, and there was a logical with the same name as the file. This was very hard to figure out, as the account would work perfectly when it was not RESTRICTED, no errors, no indications, but then when you set the RESTRICTED flag on, the logical prevented the login.

-Ira