FTP access

[Nemer_1]

Hello all,

I have HP-UX 11.0 box on which ftp access is allowed. I can access and login successfully to this server from anywhere in my network using ftp.

Yesterday I add my PC name to the hosts file in that server and for some unknown reason the server become not accessible via ftp from my PC as long as that entry exists in the hosts file...

C:\>ftp
Connected to .
220 FTP server (Version 1.1.214.8 Fri Apr 20 07:27:4
2 GMT 2001) ready.
User (:(none)): root
530 User root access denied....
Login failed.
ftp>

regards

[Arunvijai_4]

Do you use DHCP on your network ? Check your PC's IP and has anybody changed any config files (/etc/ftpaccess) ?

-Arun

[Arunvijai_4]

Also, check this thread,

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=630481

-Arun

[Nemer_1]

Arun,

I'm not using DHCP at all and the IP address resolution is correct. note that if I remove the entry of my PC from the hosts file every think work fine....

thanks

[Arunvijai_4]

Can you able to telnet from your PC and able to login as root ? Please check /var/adm/inetd.sec for any ftp deny.

Also, Run inted with logging (inetd -l)enabled and check /var/adm/syslog/syslog.log

-Arun

[RAC_1]

Most probably this seems fromt he fact that root is not allowed to do ftp.
What is the message in syslog.log file?? (I hope you have enabled inetd logging. inetd -l)

Check /etc/ftpd/ftpusers file.
Check /etc/ftpusers file.

If root is in the file, you need to take it away. But doing doing direct ftp/telnet/ssh with root is not a good sysadministration practise.

[Muthukumar_5]

check the /var/adm/inetd.sec file service denial. Check ftpusers file for user restriction. Are you able to access it by normal user using ftp?

-Muthu

[Nemer_1]

Hi all,
sorry for my late response.

actually, my problem is with ftp access only, I can telnet my server normally. my problem appears only after I add myPC IP to the hosts file. everything was working fine before...even now if I remove that entry from the hosts file, I can ftp my server from my PC with any account.

I double check the inet.sec file and the ftp access is allowed. also the ftpusers file is empty. right now I cann't start the inetd with -l option because I cann't stop the inetd service.

I'm wondering what is the relation between the ftp service & hosts file??

thanks,

[Darrel Louis]

Hi,

What's your ftp line in /etc/inetd.conf?
If the -a option is not used it will not check the ftpaccess file.
Are you making use of ftphosts file?
Are you making use of LDAP/NIS, if yes check your /etc/nsswitch.conf.

What's the error message your seeing in ftpd.log or syslog.log?

GoodLuck

Darrel

[Nemer_1]

Hi,

the ftp entry in /etc/inetd.conf is :
ftp stream tcp nowait root /usr/lbin/ftpd ftpd -l -a

we are not using ftphosts, LDAP/NIS.

Also there is no logs related to ftp appears in the syslog.log file. ftpd.log is not there.

Regards,

[Darrel Louis · Accepted solution]

Hi,

Can you please attach your inetd.conf and ftpaccess file, so I can have a quick look at it.

Darrel

[Darrel Louis]

Hi,

Can you add the following entry to the /etc/syslog.conf:
#------------------------------
# FTPD messages
#------------------------------
local5.debug /var/adm/syslog/ftpd.log

Make sure that you use the TAB instead of spaces. Do a kill -HUP to re-read syslog.conf.

Also add the -v option to your ftp line and then do a inetd -c.

GoodLuck

Darrel

[Nemer_1]

Thanks All,

The problem was in the ftpaccess file. it was configured to allow only specific class of addresses to connect to the server. Darrel solution help me in identifying this problem. The old entry in the ftpaccess file was something like:

class ftpusers real *.*.*.*

I change this entry to:

class ftpusers real *

and its now working fine.

regards

[Amitabh_1]

I have the same problem and i did everything what members suggested. What else could be the reson for not enabling FTP ?