1834903 Members
2701 Online
110071 Solutions
New Discussion

FTP login error

 
SOLVED
Go to solution
Kathleen
Regular Advisor

FTP login error

When a user logs into the FTP_LE software, they are not allowed to signin. This happens from time to time. I had her try to do a run--c:\windows\ftp and try to sign in that way to FTP but she gets a "connection closed by remote host" message. What is causing this....or what can I check to fix the problem? This doesnt' happen all the time....just from time to time.
Thanks
10 REPLIES 10
Santosh Nair_1
Honored Contributor

Re: FTP login error

What kind of errors (if any) are you getting on the server side? Check /var/adm/syslog. Also try starting up the ftp daemon with logging, i.e. in /etc/inetd.conf change the entry for ftpd:

ftp stream tcp nowait root /usr/lbin/ftpd ftpd -l -L -v

the -l logs each ftp session,
the -L logs all commands sent to the ftp daemon
the -v logs logs other information include what files were transfered, etc.

then restart inetd (inetd -c). Then see if you could reproduce the problem from the client side and then check /var/adm/syslog/syslog.log for any errors.

-Santosh
Life is what's happening while you're busy making other plans
Joseph C. Denman
Honored Contributor

Re: FTP login error

Hi Kathleen,

There are a couple of things that could cause this:

1. First, I would do as stated above and restart inetd with ftp logging turned on. You can force inetd to reread the conf file with the -c option. To restart inetd, /sbin/init.d/inetd stop;/sbin/init.d/inetd start

Then when the problem occurs, check the log.

2. I could be a network problem. If the person is comming through a firewall, I have seen the firewall proxy glitches cause the same intermittent problem.


...jcd...
If I had only read the instructions first??
Rita C Workman
Honored Contributor

Re: FTP login error

Hi Kathleen,

All good ideas to check so far...and here's a couple more.
On that box that is closing your connection...login to it and see if it can ftp to itself. If it can..good; if not than that is where to begin.
If 1 passed ok...then check on that box for /var/adm/inetd.sec file and see if it is restricting ftp access.

Just a couple thoughts,
Rita
Kathleen
Regular Advisor

Re: FTP login error

These are some things I see in the syslog

Sep 10 11:23:44 proxy ftpd[19087]: cannot stat private access file /etc/ftpd/ftp
groups: No such file or directory
Sep 10 11:23:44 proxy ftpd[19087]: FTP LOGIN FROM 10.120.12.92 [10.120.12.92], fhs
Sep 10 11:41:27 proxy ftpd[19087]: exiting on signal 14
Oct 4 12:04:05 proxy ftpd[19087]: cannot stat private access file /etc/ftpd/ftp
groups: No such file or directory
Oct 4 12:04:06 proxy ftpd[19087]: FTP LOGIN FROM 10.120.20.89 [10.120.20.89], fhs
Oct 4 12:05:06 proxy ftpd[19087]: FTP session closed
Wodisch
Honored Contributor

Re: FTP login error

Hello Kathleen,

signal 14 is SIGALRT (alert after a time-out),
and the ip-address tells me that there is no
(correct) name resolution for the client's
hostname/ip-address. And since this usually
takes enormous amounts of time (if configured
wrong or plainly not working) then this would
explain the SIGALRT...
Can you check for your DNS setup? And for the
response time of your DNS-servers?

Just my ?0.02,
Wodisch
Kathleen
Regular Advisor

Re: FTP login error

I can check that...the DNS but what do I look for specifically?
Rita C Workman
Honored Contributor
Solution

Re: FTP login error

I believe for DNS it would be the named.boot file, otherwise you want to check your /etc/hosts. If this user IP's address is in either place it should resolve. The order (or what it uses) depends on the /etc/nsswitch.conf file.

Now here is one more thought....is their an /etc/ftpuser (ver 10.2). On 10.2 creating this /etc/ftpuser file and simply entering the user login id will restrict them from getting logged in...

Just a thought,
Rita
Kevin Wright
Honored Contributor

Re: FTP login error

to check DNS, what you want to try is nslookup on the IP address in syslog. If it returns a hostname, your fine, if not, your reverse DNS is not working properly.

if your using dns, your /etc/named.conf file will point you to the right files to edit. You should check as was noted /etc/nsswitch.con for the hosts line as well.
Kathleen
Regular Advisor

Re: FTP login error

On the DNS server my nsswitch.conf file says

hosts: dns [NOTFOUND=continue] files

On the server that I am having troubles signing into FTP.... I see
hosts: files [notfound=continue unavail=continue tryagain=continue] dns

What should this say?
Kathleen
Regular Advisor

Re: FTP login error

Also,
Now all I am getting in my syslog for users is...

Oct 11 08:24:10 proxy ftpd[6477]: FTP session closed
Oct 11 08:27:44 proxy ftpd[6497]: FTP session closed
Oct 11 08:30:20 proxy ftpd[6516]: FTP session closed
Oct 11 09:18:11 proxy ftpd[6731]: FTP session closed
Oct 11 09:19:39 proxy ftpd[6735]: FTP session closed
Oct 11 09:54:23 proxy ftpd[6938]: getpeername (/usr/lbin/ftpd): Socket operation
on non-socket