ftp issues.

[Tom Marting]

Hello,
I'm running HP-UX 11.11 on an rp4440.

I am able to ftp to the rp4400 without issues, I can cd to certain filesystems (/opt, /root, /var, /home etc) and list their contents. But, when a try to cd into other directories such as /app (on internal disk) or /app2 (EMC disk) the ftp session hangs. It eventually comes back with the error:

421 Service not available, remote server has closed connection

A little background that may or may not be related to the ftp issues. Early this morning it appears automounter hung. Any process or session that tries to list or access /net hangs. We attempted to stop automounter by setting automounter=0 in nfsconf and stopping then starting nfs.core,client and server. This did not work, automouter won't go away.


Thanks,
Tom.

[YAQUB_1]

Hi,

If an FTP server won't allow logins, it is probably configured correctly, but the problem is probably with authorizing users at login. FTP servers in current distriubtions often authorize users with the Pluggable Authentication Modules library, in which case there should be an authorization file /etc/pam.d/ftp. A generic authorization file looks like this. (The line break on the first "auth" line is for readability. The entry is actually a single, long line).

#%PAM-1.0
auth required /lib/security/pam_listfile.so item=user \ sense=deny file=/etc/ftpusers onerr=succeed auth required /lib/security/pam_pwdb.so shadow nullok auth required /lib/security/
pam_shells.so
account required /lib/security/pam_pwdb.so
session required /lib/security/pam_pwdb.so

Also, make sure the /etc/ftpusers file, or whatever users file is named in the first "auth" line, is configured correctly.

BR/
Yaqub

[Steven E. Protter]

Shalom,

1) I think this is a good thing. ftp is a bad tool to be using, as authentication and data stream are pretty much in the clear.
2) That being said, check the ftpaccess file for configuration to chroot the user or prevent full access.
3) /var/adm/syslog/syslog.log might give you an error message pointing to the source of the problem.
4) Perhaps use HP's openssh implementation known as Secure Shell available at http://software.hp.com

SEP

[skt_skt]

does not look like Tom uses pam authentication!!

[Tom Marting]

Unfortunately the application, managed by a 3rd party, requires ftp. The server also doesn't have an ftpaccess file and syslog.log has been of no help.

[Dennis Handly]

>when a try to cd into other directories such as /app (on internal disk) or /app2 (EMC disk) the ftp session hangs.

This hang would make sense if they were NFS.

>We attempted to stop automounter by setting automounter=0 in nfsconf and stopping then starting nfs.core,client and server. This did not work

You may have to reboot but that may fix the automounter anyway.

[Tom Marting]

Hi Dennis,
The file systems are local to the system.

For automounter, I agree, the only way to free this up is to reboot.
Thanks,
Tom.