Question about FTP

[hp wattel]

Hi,

I have recently setup a new HP-UX 11.0 server. For some reason, non-root users can not ftp from the server to other servers in our LAN or on the WAN. Root can ftp to other servers as appropriate. Name resolution is working in all cases, and all of the apps on the box, save ftp, work fine. I have no special inet security enabled. A non-root user CAN ftp to this server *from* this server, but ftping to all other servers fails with "unknown server error" before a connection is established. Other servers can ftp to this server with no problem. It looks like a permissions problem of some sort to me, but I can not find the problem. Any help would be appreciated.

Thanks,

Bob

[Sajid_1]

Did you try the 'ftp' with IP_ADDRESS? Did you check the settings/security enables on other servers? If other servers are configured to have ftp permission to only listed hosts, then add this servers entry there.

hth,

[Uday_S_Ankolekar]

Hello,

- create file called shells in /etc
and put all shell information in it like /usr/bin/sh,ksh,csh etc and then try

- Try ftp with IP address instead of hostname


-USA..

[Hai Nguyen_1]

Bob,

Can a non-root user telnet to other servers from this server?

Hai

[Chris Lonergan]

Try looking at the permissions of the IP Addr resolutiotion files. e.g. /etc/hosts or nsswitch.conf

Chris

[hp wattel]

Stupid me, I should have mentioned that ftping with the IP address does work. Which I would think would indicate some sort of resolution problem, but nslookup, ping, etc. work fine.
I am assuming ftp uses the resolver in some way shape or form.

The shells file was setup correctly already.

Thanks for the replies!

[Eric Crosby_1]

I agree with Chris on this one. Check the permissions on /etc/hosts /etc/resolv.conf and /etc/nsswitch.conf just to make sure. I have all three files at 400.

Hope it helps some.

Eric

[Shannon Petry]

The last post was not correct.
/etc/hosts
/etc/resolv.conf
/etc/nsswitch.conf
need to all have 444 permissions, not 400!

Also, /etc/nsswitch.conf may not exist. However if you list /etc/nsswitch.* you will see several premade files for different scenarios. I.E. nsswitch.nis, nsswitch.nisplus, etc...

If you are using any of the resolvers like NIS, or DNS, make sure to edit the nsswitch.conf or copy the correct one.

Regards,
Shannon