FTP problems

[David R. Asher]

Hello...

I'm having a problem sending a file via FTP from an HP-UX 11.0 machine to a Novell server (v5.0). All of the permissions on the Novell FTP side are valid. When attempting to put the file, FTP returns "550 permission denied. I have another identical HPUX11 server that works just fine with this. Is there something specific on the original HP machine that could be causing this problem?

Thanks,
Dave

[Dario_1]

Hi!

Check the directory permissions.

Regards,

DR

[Dave La Mar]

Dave -
Have to ask -
Same ftp user as the one that works?

Best regards,

dl

[Shannon Petry · Accepted solution]

This is not an HP problem, but a Novell issue. The FTP server in ALL cases is what issues the error, never the client. The FTP server (you stated was novell) has an entry somewhere to deny permission to the host/machine/user to write data to whatever directory your attempting to put.

Regards,
Shannon

[Dario_1]

Dave:

Are you the owner of the file? Does the file has at least the permissions set to 666?

Regards,

DR

[David R. Asher]

The FTP user is defined the same on both HP boxes. In addition, this same user has full ownership (777) of the file being sent. It does sound as though it could be a problem with the Novell FTP server. That still doesn't explain why it would work with one HP server and not another. Nothing additional was ever added to the Novell server's configuration to enable this.

Thanks again for all of your responses...

Dave

[Todd Whitcher]

Hi Dave,

You can verify that the permission denied is being sent to the HPUX client from the novell via a network trace. You can also compare the working and non-working systems this way. The ftp server is the one that is sending the 550 message. If the file permissions are correct then it could be a ftp configuration restriction on the Novell. For example, HPUX uses wu-ftp, there are files like /etc/ftpd/ftpusers and ftpaccess you can set up to allow / deny permission. I'm not certain how novell controls that access.

Network trace instructions:

Start a trace on the HP

# /usr/sbin/nettl -tn pduin pduout -e ns_ls_ip -s 1024 -tm 99999 -f outfile

ftp to the novell and try to put your file, once you get the error stop the trace.

# /usr/sbin/nettl -tf -e all

Now your going to have a outfile.TRC0

Do this to read it:

Create a filter_file
ex.
# cat filter_file
filter tcp_sport 21
filter tcp_dport 21
filter ip_saddr novell_ip.addr
filter ip_daddr novell_ip.addr

Then format the trace:

# /usr/sbin/netfmt -Nnlf outfile.TRC0 -c filter > format.out

When you look at the format.out you will see that the Novell is sending the 550 Permission Denied message back to the HPUX.

Look for this type of packet:
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ARPA/9000 NETWORKING^^^^^^^^^^^^^^^^^^^^^^^^^^@#%
Timestamp : Tue Jun 10 EDT 2003 08:31:17.755128
Process ID : [ICS] Subsystem : NS_LS_IP
User ID ( UID ) : -1 Trace Kind : PDU IN TRACE
Device ID : -1 Path ID : 0
Connection ID : 0
Location : 00123
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
================================ IP Header (inbound -- [ICS]) ================
Source: 15.17.186.112(A) Dest: 15.17.187.167(A)
len: 75 ttl: 64 proto: 6 cksum: 0x803b id: 0x2628
flags: DF tos: 0x10 hdrlen: 20 offset: 0x0 optlen: 0
-------------------------------- TCP Header ----------------------------------
sport: 21 --> dport: 50875 flags: PUSH ACK
seq: 0x55b20566 urp: 0x0 chksum: 0x54b6 data len: 35
ack: 0xebcf8045 win: 0x8000 optlen: 0
-------------------------------- FTP -----------------------------------------
0: 35 35 30 20 2f 74 6d 70 2f 66 74 70 64 3a 20 50 550 /tmp/ftpd: P
16: 65 72 6d 69 73 73 69 6f 6e 20 64 65 6e 69 65 64 ermission denied
32: 2e 0d 0a -- -- -- -- -- -- -- -- -- -- -- -- -- ................


Hope that helps some,

Todd

[Tom Danzig]

I've seen a similar issue. In my case it turned out the the ftp sever did not support filenames that were not in 8.3 format. Sending a file called "testfile" worked file whereas, sending a file called "testfile1" failed with "permission denied" due to the 9 character length.