ftp connection refused

[Linda Tan]

I tried to ftp to an Integrity Server running OpenVMS8.3-1H1 but received connection refused message. The TCPIP ftp server and client are both running on the system. I can do ftp from the system to other systems but I cannot ftp from other systems to it. Can someone tell me what do I missed here? Thanks.

[Steven Schweda]

> [...] connection refused message.

Normally that means that you can talk to the
server system, but that the particular server
program (FTP) isn't running/registered.

> The TCPIP ftp server and client are both
> running on the system.

Your opinion is, of course, interesting, but
do you have any evidence for that assertion?

Can you do FTP from the VMS system to itself?

@ SYS$MANAGER:TCPIP$CONFIG.COM
Server components
FTP


> [...] OpenVMS8.3-1H1 [...]

As usual, actual output from, say,
TCPIP SHOW VERSION
would have more value.

[Linda Tan]

From TCPIP$CONFIG, Server Components, the FTP is showing Enabled and Started.

Show version returned as follow.
-------------------------------------------
UDSRV6::SYSTEM>tcpip show version
HP TCP/IP Services for OpenVMS Industry Standard 64 Version V5.6 - ECO 4
on an HP rx2660 (1.59GHz/12.0MB) running OpenVMS V8.3-1H1
--------------------------------------------

I can ftp to other systems but not the system itself. Please refer to the following output.
-------------------------------------------
UDSRV6::SYSTEM>ftp udsrv6
%TCPIP-E-FTP_NETERR, I/O error on network device
-SYSTEM-F-REJECT, connect to network object rejected
UDSRV6::SYSTEM>ftp udsrv1
220 UDSRV1 MultiNet FTP Server Process V3.5(15) at Fri 11-Jun-10 2:13PM-F
Connected to UDSRV1.
Name (UDSRV1:system):
331 User name (system) ok. Password, please.
Password:
230 User SYSTEM logged into SYS$SYSROOT:[SYSMGR] at Fri 11-Jun-10 2:13PM-F, job
b5e.
FTP>
--------------------------------------------

Please advise. Thanks.

[Steven Schweda]

> [...] FTP is showing Enabled and Started.

So you say, but with my weak psychic powers,
I can't see it. ("Trust no one", I always
say.)

> UDSRV6::SYSTEM>ftp udsrv6
> %TCPIP-E-FTP_NETERR, I/O error on network device
> -SYSTEM-F-REJECT, connect to network object rejected

It doesn't look Enabled and Started there.

tcpip show service /full ftp

You might try stopping and restarting it.
(TCPIP$CONFIG.COM should offer to do that.)

You might also check to ensure that the name
"udsrv6" really translates to the right IP
address.

Possibly interesting:

telnet /port = 21 udsrv6
telnet /port = 21

but those should succeed or fail as with a
similar plain FTP command.


> UDSRV6::SYSTEM>ftp udsrv1

Outgoing is slightly interesting, but usually
not tightly coupled with incoming.

[Linda Tan]

You are right. From tcpip show service/full it does show TCP is disabled. Now, I am confused. From TCPIP$CONFIG it is showing Enabled and Started. I did stop and restart TCPIP but still not working. Please advise. Following are the output for the commands.

-------------------------------------------
UDSRV6::SYSTEM>tcpip show service/full ftp

Service: FTP
State: Disabled
Port: 21 Protocol: TCP Address: 0.0.0.0
User_name: not defined Process: TCPIP$FTP
UDSRV6::SYSTEM>telnet/port=21 udsrv6
%TELNET-I-TRYING, Trying ... 156.144.56.24
%TELNET-E-CONNFAIL, Failed to connect to remote host
-SYSTEM-F-REJECT, connect to network object rejected
UDSRV6::SYSTEM>â »
UDSRV6::SYSTEM>telnet/port=21 156.144.56.24
%TELNET-I-TRYING, Trying ... 156.144.56.24
%TELNET-E-CONNFAIL, Failed to connect to remote host
-SYSTEM-F-REJECT, connect to network object rejected
UDSRV6::SYSTEM>@sys$manager:tcpip$config

TCP/IP Network Configuration Procedure

This procedure helps you define the parameters required
to run HP TCP/IP Services for OpenVMS on this system.


Checking TCP/IP Services for OpenVMS configuration database files.



HP TCP/IP Services for OpenVMS Configuration Menu

Configuration options:

1 - Core environment
2 - Client components
3 - Server components
4 - Optional components

5 - Shutdown HP TCP/IP Services for OpenVMS
6 - Startup HP TCP/IP Services for OpenVMS
7 - Run tests

A - Configure options 1 - 4
[E] - Exit configuration procedure

Enter configuration option: 3

HP TCP/IP Services for OpenVMS Server Components Configuration Menu

Configuration options:

1 - BIND Enabled Started 12 - NTP Enabled Started
2 - BOOTP Disabled Stopped 13 - PC-NFS Enabled Started
3 - DHCP Disabled Stopped 14 - POP Enabled Started
4 - FINGER Enabled Started 15 - PORTMAPPER Enabled Started
5 - FTP Enabled Started 16 - RLOGIN Enabled Started
6 - IMAP Disabled Stopped 17 - RMT Enabled Started
7 - LBROKER Disabled Stopped 18 - SNMP Enabled Started
8 - LPR/LPD Disabled Stopped 19 - SSH Enabled Started
9 - METRIC Enabled Started 20 - TELNET Enabled Started
10 - NFS Enabled Started 21 - TFTP Enabled Started
11 - LOCKD/STATD Disabled Stopped 22 - XDM Enabled Started


A - Configure options 1 - 22
[E] - Exit menu

Enter configuration option:

[Steven Schweda]

> UDSRV6::SYSTEM>tcpip show service/full ftp
> [...]

On a convenient (working) system, some things
differ:

ALP $ tcpip show service /full ftp

Service: FTP
State: Enabled
Port: 21 Protocol: TCP Address: 0.0.0.0
Inactivity: 5 User_name: TCPIP$FTP Process: TCPIP$FTP
Limit: 10 Active: 0 Peak: 7

File: TCPIP$SYSTEM:TCPIP$FTP_RUN.COM
Flags: None

Socket Opts: Rcheck Scheck
Receive: 0 Send: 0

Log Opts: Acpt Actv Dactv Conn Error Exit Logi Logo Mdfy Rjct TimO
File: SYS$SYSDEVICE:[TCPIP$FTP]TCPIP$FTP_RUN.LOG
[...]

I'd start trying to set the missing item(s)
("tcpip set service ftp [...]"), and then try
to enable the thing manually ("tcpip enable
service ftp").

If you don't have a user TCPIP$FTP defined,
then I'd go back and re-do the basic FTP
server configuration (which should have
created it).


For the record:

ALP $ tcpip show version

HP TCP/IP Services for OpenVMS Alpha Version V5.6 - ECO 5
on a COMPAQ Professional Workstation XP1000 running OpenVMS V8.3


> [...] Version V5.6 - ECO 4

It probably doesn't matter here, but I
believe that ECO5 is the current one.

[P Muralidhar Kini]

Hi Linda,

>> %TCPIP-E-FTP_NETERR, I/O error on network device
>> -SYSTEM-F-REJECT, connect to network object rejected
This error message is a indication that FTP is disabled on the node udsrv6.

>> From TCPIP$CONFIG, Server Components, the FTP is showing Enabled
>> and Started.
>> UDSRV6::SYSTEM>tcpip show service/full ftp
>> Service: FTP
>> State: Disabled
Looks like in your case the FTP Server is disabled where as the FTP client is
enabled. I could see the same behavior on my system with FTP server
disabled and FTP client enabled.

When you configure the FTP using the @SYS$MANAGER:TCPIP$CONFIG.COM,
You would be configuring both the FTP Client and FTP Server.

I have attached a log in which i am enabling both the FTP client as well as the
FTP server. Check the attachement.

In your case looks like the FTP server is disabled, hence enabling the FTP
server should solve the problem.

Refer the attachment and enable the FTP server.
Then let us know if the problem is solved.

Regards,
Murali

[Linda Tan]

When I do the "tcpip show service/full ftp" it shows the service is disabled and user_name is not defined. That might be the problem.

User account TCPIP$FTP is created in the system. How can I add this to the service? FTP client and server services are both enabled and started according to TPCIP$CONFIG.

--------------------------------------------
UDSRV6::SYSTEM>@sys$manager:tcpip$config

TCP/IP Network Configuration Procedure

This procedure helps you define the parameters required
to run HP TCP/IP Services for OpenVMS on this system.


Checking TCP/IP Services for OpenVMS configuration database files.



HP TCP/IP Services for OpenVMS Configuration Menu

Configuration options:

1 - Core environment
2 - Client components
3 - Server components
4 - Optional components

5 - Shutdown HP TCP/IP Services for OpenVMS
6 - Startup HP TCP/IP Services for OpenVMS
7 - Run tests

A - Configure options 1 - 4
[E] - Exit configuration procedure

Enter configuration option: 2

HP TCP/IP Services for OpenVMS Client Components Configuration Menu

Configuration options:

1 - DHCP Client Disabled Stopped
2 - FTP Client Enabled Started
3 - NFS Client Enabled Started
4 - REXEC and RSH Enabled Started
5 - RLOGIN Enabled Started
6 - SMTP Enabled Started
7 - SSH Client Enabled Started
8 - TELNET Enabled Started
9 - TELNETSYM Disabled Stopped

A - Configure options 1 - 9
[E] - Exit menu

Enter configuration option: e

HP TCP/IP Services for OpenVMS Configuration Menu

Configuration options:

1 - Core environment
2 - Client components
3 - Server components
4 - Optional components

5 - Shutdown HP TCP/IP Services for OpenVMS
6 - Startup HP TCP/IP Services for OpenVMS
7 - Run tests

A - Configure options 1 - 4
[E] - Exit configuration procedure

Enter configuration option: 3

HP TCP/IP Services for OpenVMS Server Components Configuration Menu

Configuration options:

1 - BIND Enabled Started 12 - NTP Enabled Started
2 - BOOTP Disabled Stopped 13 - PC-NFS Enabled Started
3 - DHCP Disabled Stopped 14 - POP Enabled Started
4 - FINGER Enabled Started 15 - PORTMAPPER Enabled Started
5 - FTP Enabled Started 16 - RLOGIN Enabled Started
6 - IMAP Disabled Stopped 17 - RMT Enabled Started
7 - LBROKER Disabled Stopped 18 - SNMP Enabled Started
8 - LPR/LPD Disabled Stopped 19 - SSH Enabled Started
9 - METRIC Enabled Started 20 - TELNET Enabled Started
10 - NFS Enabled Started 21 - TFTP Enabled Started
11 - LOCKD/STATD Disabled Stopped 22 - XDM Enabled Started


A - Configure options 1 - 22
[E] - Exit menu

Enter configuration option: e

HP TCP/IP Services for OpenVMS Configuration Menu

Configuration options:

1 - Core environment
2 - Client components
3 - Server components
4 - Optional components

5 - Shutdown HP TCP/IP Services for OpenVMS
6 - Startup HP TCP/IP Services for OpenVMS
7 - Run tests

A - Configure options 1 - 4
[E] - Exit configuration procedure

Enter configuration option: e
UDSRV6::SYSTEM>


UDSRV6::SYSTEM>tcpip show service/full ftp

Service: FTP
State: Disabled
Port: 21 Protocol: TCP Address: 0.0.0.0
User_name: not defined Process: TCPIP$FTP
UDSRV6::SYSTEM>run authorize
UAF> show tcp$ip
%UAF-W-BADSPC, no user matches specification
UAF> show tcpip$ftp

Username: TCPIP$FTP Owner: TCPIP$FTP
Account: TCPIP UIC: [3655,6] ([TCPIP$AUX,TCPIP$FT
P])
CLI: DCL Tables: DCLTABLES
Default: SYS$SYSDEVICE:[TCPIP$FTP]
LGICMD: LOGIN
Flags: Restricted
Primary days: Mon Tue Wed Thu Fri
Secondary days: Sat Sun
Primary 000000000011111111112222 Secondary 000000000011111111112222
Day Hours 012345678901234567890123 Day Hours 012345678901234567890123
Network: ##### Full access ###### ##### Full access ######
Batch: ----- No access ------ ----- No access ------
Local: ----- No access ------ ----- No access ------
Dialup: ----- No access ------ ----- No access ------
Remote: ----- No access ------ ----- No access ------
Expiration: (none) Pwdminimum: 6 Login Fails: 0
Pwdlifetime: 90 00:00 Pwdchange: (pre-expired)
Last Login: (none) (interactive), 14-JUN-2010 10:04 (non-interactive)
Maxjobs: 0 Fillm: 100 Bytlm: 108000
Maxacctjobs: 0 Shrfillm: 0 Pbytlm: 0
Maxdetach: 0 BIOlm: 96 JTquota: 4096
Prclm: 8 DIOlm: 96 WSdef: 350
Prio: 8 ASTlm: 250 WSquo: 1024
Queprio: 4 TQElm: 50 WSextent: 4000
CPU: (none) Enqlm: 100 Pgflquo: 50000
Authorized Privileges:
NETMBX TMPMBX
Default Privileges:
NETMBX TMPMBX
UAF>

[Steven Schweda]

> When I do the "tcpip show service/full ftp"
> it shows the service is disabled and
> user_name is not defined. That might be the
> problem.

That's what _I_ thought.

> I'd start trying to set the missing item(s)
> ("tcpip set service ftp [...]"), and then try
> to enable the thing manually ("tcpip enable
> service ftp").

Still true.

> User account TCPIP$FTP is created in the
> system.

Ok. One fewer thing to worry about.

> How can I add this to the service?

tcpip help set service /user_name

> FTP client and server services are both
> enabled and started according to
> TPCIP$CONFIG.

Trust no one, I always say.

> UDSRV6::SYSTEM>@sys$manager:tcpip$config
> [...]

I don't see where you tried to re-configure
the FTP server. Which of us is missing
something?

> Enter configuration option: e

That doesn't do much useful stuff.

[P Muralidhar Kini]

Hi Linda,

>> When I do the "tcpip show service/full ftp" it shows the service is disabled
>> and user_name is not defined. That might be the problem.
Yes. As i had mentioned earlier, looks like the FTP server is disabled and the
FTP client is enabled.


>> UDSRV6::SYSTEM>@sys$manager:tcpip$config
...
>> 2 - FTP Client Enabled Started
...
>> - FTP Enabled Started

Note that the above information only tells you that the FTP client is enabled.
It does not tell you whether the FTP server is enabled or not.

I disabled the FTP server and enabled the FTP client in my system, after that
$tcpip show service/full ftp

Service: FTP
State: Disabled
Port: 21 Protocol: TCP Address: 0.0.0.0
User_name: not defined Process: TCPIP$FTP
$

Hence, in case your FTP server is disabled.
This is the reason for State = disabled and User_name = not defined in the
above output.

The problem is because of the FTP server being disabled.
Check the attachment which says how you can enable the FTP Sever.
Try this steps mentioned in the attachment and let us know if the problem is
solved.

Regards,
Murali

[The Brit]

Linda,
Easy question. After you start FTP, is there a process on your system called

TCPIP$NTP_1

??

try $ show system/proc=tcpip*

I often find with TCPIP services that the utility lies (sort of). It says it is "enabled/started", but this doesn't necessarily mean it is "running". If it is running, then the above process should exist, if it doesnt then it is not running.

If the process is not present, then this is the first problem to resolve.

Dave.

[RBrown_1]

The Brit asked:

>>After you start FTP, is there a process on your system called

>>TCPIP$NTP_1

>>??

Did he really mean TCPIP$FTP_1?

[Steven Schweda]

> Did he really mean TCPIP$FTP_1?

I sure hope so. (I have one of each.)

But I'd worry less about finding a process
with a particular name, and more about an
actual "connection refused" complaint.
Anyone can name his process to anything.

alp $ show system /proc = *ftp*
OpenVMS V8.3 on node ALP 15-JUN-2010 13:36:21.17 Uptime 86 17:06:05
Pid Process Name State Pri I/O CPU Page flts Pages
20200442 TCPIP$FTP_1 LEF 10 198237 0 00:00:41.83 662 151 N
20203471 TCPIP$FTP_1 CUR 4 875198 0 00:11:33.17 231746 184

One of those is an FTP server process, and
the other isn't.

alp $ show proc

15-JUN-2010 13:36:47.46 User: SMS Process ID: 20203471
Node: ALP Process name: "TCPIP$FTP_1"

Terminal: RTA1: (ALP::SYSTEM)
User Identifier: [SMS]
Base priority: 4
Default file spec: ALP$DKA0:[SMS]
Number of Kthreads: 1

Devices allocated: ALP$RTA1:

[Linda Tan]

When I do "show sys/proc=*tcpip*" I only have one process, "INETACP".

I stopped both FTP client and server and restarted them. I enabled the service manually and assigned the user name to the service manually but the ftp service is still showing disabled. The attachment is the output from what I tried. ???

Thanks.

[Steven Schweda]

> When I do "show sys/proc=*tcpip*" I only
> have one process, "INETACP".

Yeah, well, back at "connection refused" we'd
pretty well determined that the FTP server
wasn't running.

> [...] The attachment is the output from
> what I tried. ???

I'm sitting at a VMS workstation, so a
Microsoft Word document is not as convenient,
as, say, plain text would be. (It's not as
compact, either.)

[John Gillings]

Linda,

From your output it appears the server was started, but the process hasn't survived.

Check the log files for clues, they should be in SYS$SYSDEVICE:[TCPIP$FTP] called TCPIP$FTP_RUN.LOG.

Perhaps there's something in SYLOGIN that's blocking the process from starting correctly?

[P Muralidhar Kini]

Hi Linda,

From the recent logs you have given, you have started both the FTP server as
well as the FTP client.

>> UDSRV6::SYSTEM>show sys/proc=*tcpip*
>> OpenVMS V8.3-1H1 on node UDSRV6 15-JUN-2010 16:12:58.71 Uptime 40 00:40:11
>> Pid Process Name State Pri I/O CPU Page flts Pages
>> 000019A2 TCPIP$INETACP HIB 9 292 0 00:00:00.01 440 459
>> UDSRV6::SYSTEM>
From this output, we dont see the "TCPIP$FTP_1" process being active.
Looks like due to some problem, the "TCPIP$FTP_1" process is
either not getting started or getting exited.

As already advised, you might want to check the logfile
"SYS$SYSDEVICE:[TCPIP$FTP]TCPIP$FTP_RUN.LOG" for any messages that
are logged with respect to FTP server startup.

Regards,
Murali

[Joseph Huber_1 · Accepted solution]

Maybe this thread

http://forums11.itrc.hp.com/service/forums/questionanswer.do?admit=109447626+1274942308982+28353475&threadId=1310361

described the same problem, and was resolved by correcting sylogin.com

Take attention to what I was saying about the FTP server startup when it encounters an error from sylogin.

[Linda Tan]

Finally got it working. The problem was in sylogin.com. I added a command to define more symbols at the end of the file. The system does not like where I put it. I changed the order that the system likes and the FTP service is able to start. Thanks for everybody's reponses and advices.

[gbarcalow]

Ran into same problem today. Problem was again with sylogin.com but mine was permissions.

My sylogin.com was missing the W:E permission.

http://h71000.www7.hp.com/wizard/wiz_6895.html