Open FTP from Linux to HP-UX

[Tonatiuh]

I want to open an FTP from a Red Hat Enterprise Linux 4 to a HP-UX server.

I got an error:

[root@dev ~]# ftp 172.16.117.39
Connected to 172.16.117.39.
220 Check Point FireWall-1 Secure FTP server running on DGSATMEXSP
421 Service not available, remote server has closed connection
No control connection for command: Illegal seek
KERBEROS_V4 rejected as an authentication type

The firewall is open for FTP connections between this two machines. Could the problem be due to the KERBEROS authentication?

Any idea?

[Rick Garland]

You could be using some other ftp package.
Do the command 'chkconfig --list | grep -i ftp'

I have 2 versions, gssftp and vsftp. The gssftp version gives me the kerberos stuff. I leave it off and use the vsftp.

My chkconfig is
gssftp off
vsftp on

[Tonatiuh]

What do you mean? Is "chkconfig" exists in HP-UX? As far as I know I must not be started the ftp service in my linux because I am try to open an ftp in the HP-UX server, not in my linux server.

[Ivan Ferreira]

Are you really using KERBEROS? Linux will try to use kerberos, but if not available will switch to another authentication method.

You should try to troubleshoot by disabling firewall between this two machines. If the connection is sucessful, there is the problem.

Also, you can try with another machine in the same subnet.

You should verify the FTP server log file.

[Steven E. Protter]

Well, your thread is in the Linux section, so its an easy mistake to make.

Usually if the thread involves HP-UX better to post there, because there are more users there.

to check services running in HP-UX:

ftpd:
Controlled in /etc/inetd.conf

There is an xinetd replacement from the open source world but I can't say its often used.

SEP

[Rick Garland]

Try this quick test.
Got a WIN system around? A system that you know has the ability to execute ftp functionality. Do an ftp to the HPUX system from the WIN box. Do you get a login?
(No matter if you can login, just if it is there.) If true, HPUX has nothing to do with this problem, it is on the Linux side.

By default, the ftp is functioning on HPUX. On Linux you need to do some work. Hence the output of the 'chkconfig --list' command. (This command does not exist on HPUX)

What ftp service on the Linux are you running?

[Tonatiuh]

FTP es working properly in HP-UX. I cannot disable the firewall but I have changed the IPs from a machine which can FTP with the other one that cannot. The problem is in Linux not in privileges in the firewall.

Really I am not using kerberos. If kerberos could be the problem, tell me how to disable kerberos to try.

[Arunvijai_4]

I dont think kerberos is creating a problem for you, I tried connecting from RHEL 3.0 to HP-UX 11i, it is working fine.

linux: /root>ftp hpux
Connected to hpux.
220 hpux FTP server (Version 1.1.214.4(PHNE_30432) Thu Feb 26 10:46:14 GMT 2004) ready.
534 Kerberos Authentication not enabled.
534 Kerberos Authentication not enabled.
KERBEROS_V4 rejected as an authentication type
Name (hpux:root): root
331 Password required for root.
Password:
230 User root logged in.
Remote system type is UNIX.
Using binary mode to transfer files.

Check /var/adm/syslog/syslog.log in HP-UX

-Arun

[Steve Kruger]

One thing that I discovered on Linux (Using Fedora 1) that may help you is that ftp does not work for root.

As a non-root user, it works fine.

You may want to give the above a quick try.

[Tonatiuh]

In Red Hat Enterprise Linux is possible to ftp with root (setting the correct config files). And my ftp problem is with a non-root user.

[Tonatiuh]

Arunvijai: /var/adm/syslog/syslog.log just show the succesfull FTP sessions. It does not show anything about failed ftp sessions.

[Rick Garland]

If I can ask the question again, what ftp client are you using on the RH ES? Issue the 'chkconfig --list | grep -i ftp' command.

Depending on which client you are using, there will be config files. These are typically located in /etc. 'ls /etc | grep -i ftp'

Example, for vsftpd client, there are /etc/vsftpd.conf and /etc/vsftpd.ftpusers files.