ftp service problem

[Kivanc KARACURA]

i have an ftp problem on my vms 7.1 box.
when i check with
$ ucx show service ftp/full
the limit info is ;
Limit: 10 Active: 10 Peak: 10
when i disable / enable ftp service , active session begins to increase up to 10 and when it reaches to 10 ftp becomes unavailable.
i want to check the log file to find out what is causing this but when i try to read the log file UCX$FTPD.LOG;5044 under SYS$SYSDEVICE:[UCX$FTP] , it gives
$type UCX$FTPD.LOG
%TYPE-W-OPENIN, error opening SYS$SYSDEVICE:[UCX$FTP]UCX$FTPD.LOG;5044 as input
-RMS-E-FLK, file currently locked by another user
error. this is because the service is using the file , how can i cutoff this log file without stopping the service. i have tried disabling the service then opening it and it didn't work ... thanx in advance

[labadie_1]

Welcome to the Openvms forum

You should increase the service limit for FTP

ucx set service ftp/limit=200
for example, but then you will need to bump some quotas

What gives
$ ucx sh version ?
$ mc authorize sh ucx$ftp

[Kivanc KARACURA]

$ ucx sh version

DIGITAL TCP/IP Services for OpenVMS VAX Version V4.2
on a VAX 4000-106A running OpenVMS V7.1


Username: UCX$FTP Owner: UCX$FTP
Account: UCX$FTP UIC: [375,1] ([UCX$AUX,UCX$FTP])
CLI: DCL Tables: DCLTABLES
Default: SYS$SYSDEVICE:[UCX$FTP]
LGICMD: LOGIN
Flags: Restricted
Primary days: Mon Tue Wed Thu Fri
Secondary days: Sat Sun
Primary 000000000011111111112222 Secondary 000000000011111111112222
Day Hours 012345678901234567890123 Day Hours 012345678901234567890123
Network: ##### Full access ###### ##### Full access ######
Batch: ----- No access ------ ----- No access ------
Local: ----- No access ------ ----- No access ------
Dialup: ----- No access ------ ----- No access ------
Remote: ----- No access ------ ----- No access ------
Expiration: (none) Pwdminimum: 6 Login Fails: 0
Pwdlifetime: 90 00:00 Pwdchange: (pre-expired)
Last Login: (none) (interactive), 14-MAR-2007 19:22 (non-interactive)
Maxjobs: 0 Fillm: 50 Bytlm: 108000
Maxacctjobs: 0 Shrfillm: 0 Pbytlm: 0
Maxdetach: 0 BIOlm: 96 JTquota: 4096
Prclm: 2 DIOlm: 96 WSdef: 350
Prio: 8 ASTlm: 250 WSquo: 512
Queprio: 0 TQElm: 15 WSextent: 512
CPU: (none) Enqlm: 100 Pgflquo: 10240
Authorized Privileges:
NETMBX TMPMBX
Default Privileges:
NETMBX TMPMBX


we have 2 nodes running same application and on the other node the info is like below and there is no problem ;

$ ucx sho service ftp/full

Service: FTP
State: Enabled
Port: 21 Protocol: TCP Address: 0.0.0.0
Inactivity: 5 User_name: UCX$FTP Process: UCX$FTPD
Limit: 10 Active: 0 Peak: 11


something connects to server and could not bye and i want to find out what is going on ,for this i have to check the log file that i mentioned in my question. but i cnnot open it ...

[Karl Rohwedder]

A general way to look into a locked file is:

$ BACK/IGN=INTER file.log tmp.file
$ TYPE tmp.file

regards Kalle

[labadie_1]

Hello

Bump tqelm, bytlm and pgflquota of the ucx$ftp account, and restart ftp, so

mc authorize mod ucx$ftp/tqelm=bigger/pgflquo=bigger/bytlm=bigger

begin with 5 times the values posted.

Then stop and start ftp (when it is not a problem for other people)

$ @sys$startup:ucx$ftp_shutdown
$ @sys$startup:ucx$ftp_startup

Apply the last Eco for Ucx ( I think it is Eco 5)
ftp://ftp.itrc.hp.com/openvms_patches/archived_patches/vax7x.html

read first
ftp://ftp.itrc.hp.com/archived_patches/openvms_patches/vax/7.X/v7.0/tcpip/4.2/ucxvax_e05042.README

[Volker Halle]

You can use BACKUP/IGN=INTERLOCK SYS$SYSDEVICE:UCX$FTPD.LOG x.x
and then look at X.X

$ UCX SHO DEV /PORT=21 should also tell you, which session exist to the local FTP server.

Volker.

[Kivanc KARACURA]

although disable / enable ftp sessions are still there ...

$ ucx sho dev /port=21
Port Remote
Device_socket Type Local Remote Service Host

bg7526 STREAM 21 37770 FTP xxx.xxx.xxx.xxx
bg7541 STREAM 21 37776 FTP xxx.xxx.xxx.xxx
bg7548 STREAM 21 37782 FTP xxx.xxx.xxx.xxx
bg7552 STREAM 21 37789 FTP xxx.xxx.xxx.xxx
bg7737 STREAM 21 48369 FTP xxx.xxx.xxx.xxx
bg9987 STREAM 21 0 FTP 0.0.0.0



$ ucx sho dev /port=21
Port Remote
Device_socket Type Local Remote Service Host

bg7526 STREAM 21 37770 FTP xxx.xxx.xxx.xxx
bg7541 STREAM 21 37776 FTP xxx.xxx.xxx.xxx
bg7548 STREAM 21 37782 FTP xxx.xxx.xxx.xxx
bg7552 STREAM 21 37789 FTP xxx.xxx.xxx.xxx
bg7737 STREAM 21 48369 FTP xxx.xxx.xxx.xxx
bg9987 STREAM 21 0 FTP 0.0.0.0

$ ucx disable service ftp

$ ucx sho dev /port=21
Port Remote
Device_socket Type Local Remote Service Host

bg7526 STREAM 21 37770 FTP xxx.xxx.xxx.xxx
bg7541 STREAM 21 37776 FTP xxx.xxx.xxx.xxx
bg7548 STREAM 21 37782 FTP xxx.xxx.xxx.xxx
bg7552 STREAM 21 37789 FTP xxx.xxx.xxx.xxx
bg7737 STREAM 21 48369 FTP xxx.xxx.xxx.xxx
bg9987 STREAM 21 0 FTP 0.0.0.0


$ ucx enable service ftp


$ ucx sho dev /port=21
Port Remote
Device_socket Type Local Remote Service Host

bg7526 STREAM 21 37770 FTP xxx.xxx.xxx.xxx
bg7541 STREAM 21 37776 FTP xxx.xxx.xxx.xxx
bg7548 STREAM 21 37782 FTP xxx.xxx.xxx.xxx
bg7552 STREAM 21 37789 FTP xxx.xxx.xxx.xxx
bg7737 STREAM 21 48369 FTP xxx.xxx.xxx.xxx
bg9987 STREAM 21 0 FTP 0.0.0.0


and the log file says ;


%RMS-E-RNF, record not found
%UCX-E-FTP_GETHST, Error in getting host name
%RMS-E-RNF, record not found
%UCX-E-FTP_GETHST, Error in getting host name
%RMS-E-RNF, record not found
%UCX-E-FTP_GETHST, Error in getting host name
%RMS-E-RNF, record not found
%UCX-E-FTP_GETHST, Error in getting host name
%RMS-E-RNF, record not found
%UCX-E-FTP_GETHST, Error in getting host name
%RMS-E-RNF, record not found
%UCX-E-FTP_GETHST, Error in getting host name
%RMS-E-RNF, record not found
%UCX-E-FTP_GETHST, Error in getting host name
%RMS-E-RNF, record not found
%UCX-E-FTP_GETHST, Error in getting host name
%RMS-E-RNF, record not found
%UCX-E-FTP_GETHST, Error in getting host name
%RMS-E-RNF, record not found
%UCX-E-FTP_GETHST, Error in getting host name
%RMS-E-RNF, record not found

[Kivanc KARACURA]

again log file entry ;

%SYSTEM-F-NOLINKS, maximum network logical links exceeded
%UCX-E-FTP_GPRNAM, Error in getting peer name

[Volker Halle]

The FTP server seems to somehow have a problem with the FTP client requests from IP address xx.xx.xx.xx

try< to find out, what's running on that remote node and causing the FTP sessions to be quickly consumed.

You might need to stop the FTP server process before re-starting FTP.

$ SHOW SYS/PROC=*FTP*
$ STOP/ID=

Volker.

[Kivanc KARACURA]

last time i have stopped ucx$ftpd by SYS$COMMON:[SYSMGR]UCX$FTPD_SHUTDOWN.COM and
restart it by submiting
SYS$COMMON:[SYSMGR]UCX$FTPD_STARTUP.COM

in this case the account that ftp'es and gets files couldn't get files resides in its home folder. vms gave "could not create socket" error.

If i stop the process by pid id , how can i restart it ? by SYS$COMMON:[SYSMGR]UCX$FTPD_STARTUP.COM ? or is there anyway different ?

[labadie_1]

Yes you restart it by
$ @ SYS$COMMON:[SYSMGR]UCX$FTPD_STARTUP.COM
or using the menu
$ @sys$startup:ucx$config
and take the option
"start ucx" or a similar text

[Volker Halle]

Shutdown FTP using the UCX$FTPD_SHUTDOWN procedure. If the UCX$FTPD process does not disappear, use STOP/ID.

Then start FTP again using @SYS$STARTUP:UCX$FTPD_STARTUP

But be aware, that there seems to be some kind of problem with the FTP client application on that remote node.

Volker.

[Wim Van den Wyngaert]

$ show sys
Any processes in state beginning with RW ? (e.g. RWAST)

Wim

[Kivanc KARACURA]

no there is no process begining with RW.

a collegue of mine suggested to
SET EXECUTOR MAXIMUM LINKS 48

does this work ?
if so , at which promt should i run this command ?

[Volker Halle]

NCP SET EXE MAX LINKS xxx is a DECnet configuration command. This problem is with TCPIP (UCX) and has nothing to do with DECnet.

Volker.

[Kivanc KARACURA]

additionally , we have encountered ftp problem before and stopped / started ftp by

$SYS$COMMON:[SYSMGR]UCX$FTPD_SHUTDOWN.COM
$submit SYS$STARTUP:UCX$FTPD_STARTUP.COM

after this there was no process named UCX$FTPD , in place there was BATCH_78.
I think ftp service was running in a different manner and the account XXX could connect but that's all , it couldn't do anything even dir. you can see the process below.

331 Username XXX requires a Password
Password:
230 User logged in.
ftp> dir
200 PORT command successful.
425-Cannot create data socket.
425 insufficient privilege or object protection violation

what can be the problem ?
If i stop/start ftp by the same way again , probably the same thing would occur.

[Volker Halle]

Sorry, UCX$FTPD_STARTUP.COM is the FTP service start procedure, which runs the FTP service daemon and it's not meant to be called to start FTP.

The procedure to start/stop FTP should be xxx$FTP_STARTUP.COM or xxx$FTP_SHUTDOWN.COM, but that file doesn't seem to exist on this old UCX V4.2 version.

Stop that batch process and try UCX ENA SERVICE FTP.

Volker.

[labadie_1]

You should not use submit, but just @, and more important, from the SYSTEM account.

[Kivanc KARACURA]

Volker ,
I didn't run startup.com , this was the recent process.
for most recent problem
SYS$STARTUP:UCX$FTPD_SHUTDOWN.COM was worked and ftp deamon was killed.

SYS$STARTUP:UCX$FTPD_STARTUP.COM didn't work , after command i dropped
to $ promp without any error message but i couldn't see ftp deamon in sh
sys ...

after that i have run
submit SYS$STARTUP:UCX$FTPD_STARTUP.COM

then ftp service has started as batch job but as i mentioned ; while trying to ftp files vms gave error.

labadie ;
how can i run it by @ under system account ? should i login by SYSTEM or is there any parameter that i can use without knowing the password of SYSTEM

[Volker Halle]

If you look at UCX SHOW SERV/FULL FTP, you will see, that SYS$SYSDEVICE:[UCX$FTP]UCX$FTPD_STARTUP.COM is the file, which is run by the FTP service, if a session connects to port 21. It is NOT a command procedure to start the FTP service.

Try to start the FTP service by:

$ UCX ENABLE SERVICE FTP

You don't have to do this under SYSTEM. UCX V4.2 does not seem to have a separate DCL procedure to start the FTP service.

Volker.

[Volker Halle]

In UCX V4.2, the FTP service is being started via the procedure SYS$STARTUP:UCX$SERVICE_SETUP.COM, but there is no external calling interface except from UCX$STARTUP.COM.

So if you can't get FTP to start again, you would need to completely shutdown UCX and start UCX again. This will most likely mean a reboot.

Volker.

[Kivanc KARACURA]

reboot solved the problem but there should be a way of restarting ftp without reboot.

the problem was encountered due to a problem related with network. today morning , when we came , we have seen that whole network was very slow and ntw team has told that a saturation has occured. there was connection timeouts or reply telegrams were too slow like 130ms - 150ms. and after all i saw that ftp on my healthy box was down , now i had 2 production servers whose ftp services were down. then the magic command came up @sys$system:shutdown ....

after boot everything is fine now. in this case i have to add network issues as a threat.

[Volker Halle]

Next time start with UCX DISA SERVICE FTP. If the UCX$FTP* processes are not going away, use STOP/ID=xxx to stop them individually.

Then use UCX ENA SERVICE FTP

If this does not work and you want a supported and working way to stop and start FTP without a reboot, you might need to upgrade to a more recent version of TCPIP...

Volker.

[Kivanc KARACURA]

we use ucx version 4.2 on vms 7.1 ,
what is the most updated version of ucx that can run on vms 7.1 ?

[Volker Halle]

For OpenVMS VAX V7.1, you have the following choices (supported at the time of release back in 2001):

UCX V4.2 - most recent is ECO 5
Kit name: UCXVAX_E05042

TCPIP V5.0 - most recent ECO 3
Kit name: TCPIPVAX_E03A50

TCPIP V5.1 was once supported on V7.1, but ECO 5 was only supported on V7.2 or higher.

Volker.