FTP Problem...

[jmckinzie]

I have two servers on the same network that are virtually identical.

I can FTP to one, but cannot ftp to the other.

I know ftp used to work but no longer does...

Any ideas on what to check to get FTP working again?

[Joseph C. Denman]

A couple of questions:

Are you on the same network as the server. Is a firewall between?

What error are you getting?

Joe...

[A. Clay Stephenson]

The very first thing to check is /etc/inetd.conf. Is the ftp entry there commented out or missing? Id so, reenable the entry and issue an inetd -c to reinitialize inetd.

[jmckinzie]

We are on the same network...no firewall..

getting this error:

530 Login incorrect
Login Failed

Thanks in advance!

[Joseph C. Denman]

Check /etc/ftpd/ftpusers.

Ensure your username is not listed in the file.

...jcd...

[jmckinzie]

I have already done the inetd thing. Both the servers have the exact same inetd config.

[jmckinzie]

/etc/ftpd/ftpusers doesn't even exist.

[A. Clay Stephenson]

Can you then telnet to this box or login locally. Your account may simply be locked/invalid. You should also check the ftpusers file and ftpaccess.

[jmckinzie]

# cksum /etc/opt/rftpd/ftpaccess
402898303 645 /etc/opt/rftpd/ftpaccess

So, ftpaccess on both servers is exactly the same...

as far as ftpusers, the only entry on both servers is root.

[jmckinzie]

Any other ideas?

-TIA

[A. Clay Stephenson]

All of this points to a locked/invalid/expired account so check your passwd file and do a getprpw login if a trusted system and see if any bits in lockout are non-zero.

[Joseph C. Denman]

I agree. You it does appear to be an invalid/expired account issue????????

...jcd..

[jmckinzie]

I can assure you that none of the three acounts that were tested are locked out...

we use keon to authenticate for both servers therefore, if one server were locked out, the other would also be.

Also, I have verified that the shadow passwords in /tcb/files/auth were all synced up within the entire cluster.

Any other ideas?

-Thanks again.

[jmckinzie]

Please help!!!
Thanks,

Jody

[Tom Henning]

Is the same user shell being used on both boxes? Is it one of the default shells, or if it is not is it listed in /etc/shells?

[Jose Mosquera]

Hi,

What about the /var/adm/inetd.sec file?
Pls check allow/deny entries to ftp's service.

Rgds.

[jmckinzie]

The servers name was listed as myhost.abc.def.com

I had to add abc.def.com as the first entry in the search line in /etc/resolv.conf
because it was the 7th entry.

/etc/resolv.conf only has the ability to have 6 domains in the search line.

Wow...what a pain.