ftp at trusted system

[piyut_2]

gurus,

I just install trusted at my cluster server rp7410 hp-ux 11.00. after trusted installed, outside can't ftp to this server.i have already opened port fot ftp and tftp but still can't.
how come ???


regards,

piyut

[Steven E. Protter]

tail -f /var/adm/syslog/syslog.log

try an ftp, act on the message.

see that its configured in /etc/inetd.conf

inetd -c

swlist -l product | grep -w fptd

See if its installed.

SEP

[piyut_2]

ftpd is installed.
when i changed back to untrusted, users can ftp to this cluster server.
there are issues ftp at trusted system on cluster server???

[Darrel Louis]

Piyut,

What's the error message you see when trying to FTP?
Can you login via telnet to the server with the same user?
Check the consistency of the etc/password and trusted system password database, use the command:
/usr/sbin/authck
for more details see the man page of authck.

When system lockup(deactivate) users password, to activate the user password as follows:

from command line:

/usr/lbin/modprpw â k

Good Luck

Darr

[piyut_2]

All users can telnet or ssh to this server. when tried to ftp to this server, error messages is login failed, although user gave true password. the other issue is when user login to this server, user must give twice password, at the first, acces denied and then give password again, user can login to this server.

how come ??

[Jannik]

In order to properly set up FTP, complete the following:

1. Verify that the following line is in /etc/inetd.conf and not
commented out (no '#' in the first column):
For HP-UX:

ftp stream tcp nowait root /usr/lbin/ftpd ftpd
or
netstat -a |grep ftp

The output should look like:

tcp 0 0 *.ftp *.* LISTEN


2. Verify the following services are in /etc/services and not
commented out (no '#' in the first column):

ftp-data 20/tcp # File Transfer Protocol (Data)
ftp 21/tcp # File Transfer Protocol (Control)

If you get 530 access denied login failed:
A. Verify .netrc in the user's home directory.
If the .netrc file contains password or account information for
use for use other than for anonymous ftp, its owner must match
the effective user ID of the current process. Its read, write,
and execute permission bits for group and other must all be zero,
and it must be readable by its owner. Otherwise, the file is ignored.
So if you are unsure about this file, rename it to .netrc.old for
troubleshooting purposes.

B. Check /etc/ftpusers.
ftpd rejects remote logins to local user accounts that are named
in /etc/ftpusers. Each restricted account name must appear alone
on a line in the file. The line cannot contain any white space.
User accounts that specify a restricted login shell in /etc/passwd
should be listed in /etc/ftpusers because ftpd accesses local
accounts without using their login shells.

[piyut_2]

all ftp at /etc/services & /etc/inetd.conf is opened and there is no "#" in thats line. when i run netstat -a |grep ftp, output is
tcp 0 0 *.ftp *.* LISTEN

there is no .netrc file in user's home directory and in /etc/ftpusers, there are no users blocked by the system ( no users at /etc/ftpusers).

dear, at trusted system, ftp not run but at untrusted system, ftp run normally.