FTP configuration

[Paul Johnston_4]

We have 2 HP servers, a 5470 and a 2470. The 2470 has FTP already setup and it works fine but I need to configure the 5470. I have read the HP docs for FTP configuration. Either of the servers have the necessary files in the
/etc/ftpd/ directory but what is confusing is
why does the 2470 FTP work but not the 5470 without the file setup. I have also verified that the inetd.conf is correctly setup for both servers.

Any thoughts ??

[Sridhar Bhaskarla]

Hi,

What errors are you getting? And how do you want to customize ftp?

ftp will need to have an entry in /etc/services for getservent() calls. Also make sure you are not denying ftp access in /var/adm/inetd.sec file.

-Sri

[Paul Johnston_4]

When I use any FTP client to the 5470 server with any userid I encounter a 530 Login Incorrect error. I have check the /var/adm/inetd.sec file as mention and it is not opposing any users.
I able to setup Anonymous FTP using SAM but
I need a USER ftp access to other directories.

Thanks

[Sridhar Bhaskarla]

Hi,

Enable ftp with logging in /etc/inetd.sec. Like

ftp stream tcp nowait root /usr/lbin/ftpd ftpd -l -a -v

if it is not already there. Refresh inetd configuration with "inetd -c".

Then try ftp'ing to the system and note the errors logged into /var/adm/syslog/syslog.log file. May be you have created /etc/shells files and didn't add all the shells in there. You will find those errors in syslog.log.

-Sri

[Sridhar Bhaskarla]

Oops. It's not ined.sec it's inetd.conf under /etc.

-Sri

[Michael Tully]

Have a valid shell type for the ftp user?
Do you have a /etc/shells file being utilised?

[Steven E. Protter]

Just follow Sri's revised instructions and:

tail -f /var/adm/syslog/syslog.log

Then ftp, you will see what you need to take the next step. Post results please.

SEP

[Paul Johnston_4]

Hi Again.

As per the suggestions I have looked at the SHELLS on both servers. I also edited the
inetd.conf with the changes and reset it.
I tried to FTP and then viewd the log. (attached) . It indicates that a FTPAccess file is missing. This is were it is confusing because the 2470 server does not have this file either and I am able to FTP.
??

Paul

[Michael Schulte zur Sur]

Hi Paul,

could be pam,the difference?

greetings,

Michael

[Michael Schulte zur Sur]

Hi Paul,

could be pam the difference?

greetings,

Michael

[RAC_1]

Post the ftp line in inetd.conf on 5470. alo do you have /etc/ftpusers file?

[Paul Johnston_4]

In response.

This is the line in inetd.conf
ftp stream tcp nowait root /usr/lbin/ftpd ftpd -l -a -v

I am unsure of the function of PAM.

and the ftpd directory on both servers does not have any files.

[RAC_1]

You ftp line in inetd.conf has -a option which specifies that /etc/ftpd/ftpaccess file will be used. Remove that option and restart inetd--> inetd -c

Check and post.

[Jim Butler]

Verify that both machines are at the same ftp patch level - there was a patch that effectively disabled ftpd a couple of years back (low probability), but in view of all the traffic here, is easy to verify.

good luck

[Sridhar Bhaskarla]

Hi,

-a was suggested as you were saying that you had necessary files in /etc/ftpd directory. One of them is ftpaccess.

Obviously you don't have ftpaccess file. Remove -a from ftpd line, re-read inetd (inetd -c) and then try ftp.

You made two changes at the same time - adding -l -v -a and editing /etc/shells. After taking out -a, your ftp should work.

-Sri

[Paul Johnston_4]

Well , we have success.
After removing the -a from ftpd command
in the inetd.conf. I again viewed the log
after trying FTP and it indicated a Bad Shell. I then added

/bin/ksh
/bin/csh
/bin/sh

to the shells file, the same as the other server. This is working great.

I thought having

/usr/bin/ksh
/usr/bin/csh
/usr/bin/sh

would have been sufficient but apparently not.

Thanks all for your help.
First time using the forum and it has served me well. I hoped to return the assistance in the future.

Paul

[Michael Schulte zur Sur]

Hi Paul,

sure come again and don't fotget to award points to those involved and especially to those, who helped you find the solution.

They don't cost you anything and they make friends, off course no need to overdo it. ;-)

Michael

[Michael Schulte zur Sur]

Hi Paul,

wow, you surely are a fast learner. ;-)
My hint was a complete waste.

Michael

[Paul Johnston_4]

Michael,

There are no replies that are a waste.

Some replies are more relevant. But all replies are useful because they make you think.

Thanks for your response.

Paul