Re: Not able to Ftp



I was also looking at the missing challenge from the local security. However, 'security' does not always mean that. It can also mean things like encryption.

The OP appears to fail in the handshake somewhere after the session security is established but before the credential challenge. It is possible that the server is configured to require some sort of security that the client is unable to provide. Or it is still possible that the user is not permitted OMVS services (but I would expect a message to that effect).

The missing file could be an important symptom, but I don't think it is the root issue.




-----Original Message-----
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@xxxxxxxxxxx] On Behalf Of Pommier, Rex R.
Sent: Thursday, May 05, 2011 11:18 AM
To: IBM-MAIN@xxxxxxxxxxx
Subject: Re: Not able to Ftp

Hal,

Actually that isn't it (I don't think anyway). I have been following the thread and tried the same FTP command. Mine works fine, and I get the same security message. The thing I find interesting is that there doesn't appear to be any logon message. Here are the final few lines of an FTP to myself. I would be more looking at the message in the "-v" output that says it is using "FTP configuration defaults". From a later post by the original poster, I haven't talked myself into deleting the /usr/lib directory path to see if I can recreate the problem. :-)


EZA1554I Connecting to: 172.16.0.3 port: 21.
220-FTPD1 IBM FTP CS V1R10 at testlpar.CNASURETY.NET, 16:06:12 on 2011-05-05.
220 Connection will close if idle for more than 5 minutes.
GU4872 ftpSetApplData: entered
CZ0462 ftpOpen: no security mechanism is specified
GV0515 seq_stat_file(2): lrecl=0 recfm=0 blksize=0 mode=1
CZ1483 rnetrc:(3) file RRPX.NETRC does not exist
EZA1459I NAME (172.16.0.3:RRPX):


Rex

-----Original Message-----
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@xxxxxxxxxxx] On Behalf Of Hal Merritt
Sent: Thursday, May 05, 2011 10:42 AM
To: IBM-MAIN@xxxxxxxxxxx
Subject: Re: Not able to Ftp

I'd say the key might be:

" CZ0390 ftpOpen: no security mechanism is specified "

Since the server is the one that performs initial authentication, I'd focus there.

The missing file is a separate issue, I think.




-----Original Message-----
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@xxxxxxxxxxx] On Behalf Of jagadishan perumal
Sent: Thursday, May 05, 2011 10:07 AM
To: IBM-MAIN@xxxxxxxxxxx
Subject: Re: Not able to Ftp

Hi,

I have executed the given command : the output are as below :
with -d

CY2046 ftpSocks:
entered
CY1939 findSocks:
entered
CY0911 ftpStart: start parm and ftp.data processing is
complete
GU1089 chkVerRel: system information for CTS2: z/OS version 1 release 6
(2066)
EZYFT25I Using //'TCPIP.STANDARD.TCPXLBIN' for FTP translation tables for
the c
ontrol
connection.
EZYFT31I Using //'TCPIP.STANDARD.TCPXLBIN' for FTP translation tables for
the d
ata
connection.
EP2149 set_dbcs_langs: __ipdbcs() returned 0 parms from LOADDBCSTABLES
stateme
nt(s)

EZA1450I IBM FTP CS
V1R6
CY1013 ftpStart: setibmopt() failed on IBMTCP_IMAGE - EDC5138I No such
device
or address.
(errno2=0x11B3005A)
CY1026 ftpStart: single-stack (INET) environment. Ignoring TCPIPJOBNAME
TCPIP
from
tcpip.data.
CY1089 ftpStart: internal messages timestamp = 2004 050 01:08
UTC
Open message catalog fails 'EDC5129I No such file or directory.'. Using
interna
l
messages
CY1116 ftpStart: socket() failed on AF_INET6 - EDC8114I Address family not
sup
ported.
(errno2=0x112B0000)
CY1124 ftpStart: client operating in IPv4 only
mode
CZ0240 ftpOpen:
entered
SC0419 initConnection:
entered
SC0837 initIPv4Connection: entered
CY2711 access_via_socks_server: entered
EZA1554I Connecting to 10.237.5.102. port 21
220-FTPD1 IBM FTP CS V1R6 at CTS2800, 14:58:34 on 2011-05-05.
220 Connection will close if idle for more than 5 minutes.
CZ0390 ftpOpen: no security mechanism is specified
EZA1534I Control connection with 10.237.5.102 dies.
SC3018 endSession: entered (sn=096456F8)
SC2302 dataClose: entered
CZ1138 ftpClose: entered
CZ0573 ftpOpen: lost session after successful init
EZA1460I Command:


=====================================================================
with -v


EZY2638I Using FTP configuration
defaults.
EZYFT25I Using //'TCPIP.STANDARD.TCPXLBIN' for FTP translation tables for
the c
ontrol
connection.
EZYFT31I Using //'TCPIP.STANDARD.TCPXLBIN' for FTP translation tables for
the d
ata
connection.
EZA1450I IBM FTP CS
V1R6
Open message catalog fails 'EDC5129I No such file or directory.'. Using
interna
l
messages
EZA1554I Connecting to 10.237.5.102. port
21
220-FTPD1 IBM FTP CS V1R6 at CTS2800, 15:00:53 on
2011-05-05.
220 Connection will close if idle for more than 5
minutes.
EZA1534I Control connection with 10.237.5.102
dies.
EZA1460I
Command:

On Thu, May 5, 2011 at 8:26 PM, Hal Merritt <HMerritt@xxxxxxxxxxxxx> wrote:

I don't the missing file is a serious problem.

Check the server logs. This appears to be something in the basic set up.

Try your FTP command with -D and -V sub commands.





-----Original Message-----
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@xxxxxxxxxxx] On
Behalf Of jagadishan perumal
Sent: Thursday, May 05, 2011 9:43 AM
To: IBM-MAIN@xxxxxxxxxxx
Subject: Re: Not able to Ftp

Mark,

I did ftp from tso/ispf from the option 6 and i got the below error :

EZA1450I IBM FTP CS
V1R6
Open message catalog fails 'EDC5129I No such file or directory.'. Using
interna
l
messages
EZA1554I Connecting to 10.237.5.102. port 21
220-FTPD1 IBM FTP CS V1R6 at zos2800, 14:35:36 on 2011-05-05.
220 Connection will close if idle for more than 5 minutes.
EZA1534I Control connection with 10.237.5.102 dies.
EZA1460I Command:


Could anyone please guide to re-instate the missing directory.

Regards,
Jags

On Thu, May 5, 2011 at 7:06 PM, Mark Zelden <mark@xxxxxxxxxxx> wrote:

On Thu, 5 May 2011 15:23:19 +0530, jagadishan perumal
<jagadishanp@xxxxxxxxx> wrote:

Hi,

I have few files in my desktop to FTP it to mainframe. When i type FTP
XXXXXXX from the dos i get a message as

C:\Documents and Settings\255209\JCL>ftp 10.237.5.102
Connected to 10.237.5.102.
220-FTPD1 IBM FTP CS V1R6 at xxx2800, 09:42:34 on 2011-05-05
220 Connection will close if idle for more than 5 minutes.
Connection closed by remote host.

I have checked the firewall too and it is open from both the end. When i
do
a /D A,L from mainframe I can can see the FTPD1 step running :
FTPD1 STEP1 FTPD OWT

I also did a tso netstat I can see the FTPD1 port is in listening mode.
I
am
not able to ftp from my desktop. Also from the TCPIP started task I see
a
message as :

23.39.49 STC05976 IEE301I FTPD1 CANCEL COMMAND ACCEPTED

But no one has issue a cancel command. it seems to be a weird . Could
anyone
please provide me a suggestion.


To rule out any firewall issues, from TSO / ISPF option 6 try
ftp 10.237.5.102

And see if it functions. If not, the problem is on the z/OS side.

Mark
--
Mark Zelden - Zelden Consulting Services - z/OS, OS/390 and MVS
mailto:mark@xxxxxxxxxxx
Mark's MVS Utilities: http://www.mzelden.com/mvsutil.html
Systems Programming expert at http://expertanswercenter.techtarget.com/

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to listserv@xxxxxxxxxxx with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to listserv@xxxxxxxxxxx with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
NOTICE: This electronic mail message and any files transmitted with it are
intended
exclusively for the individual or entity to which it is addressed. The
message,
together with any attachment, may contain confidential and/or privileged
information.
Any unauthorized review, use, printing, saving, copying, disclosure or
distribution
is strictly prohibited. If you have received this message in error, please
immediately advise the sender by reply email and delete all copies.

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to listserv@xxxxxxxxxxx with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to listserv@xxxxxxxxxxx with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
NOTICE: This electronic mail message and any files transmitted with it are intended
exclusively for the individual or entity to which it is addressed. The message,
together with any attachment, may contain confidential and/or privileged information.
Any unauthorized review, use, printing, saving, copying, disclosure or distribution
is strictly prohibited. If you have received this message in error, please
immediately advise the sender by reply email and delete all copies.

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to listserv@xxxxxxxxxxx with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

The information contained in this e-mail may contain confidential and/or privileged information and is intended for the sole use of the intended recipient. If you are not the intended recipient, you are hereby notified that any unauthorized use, disclosure, distribution or copying of this communication is strictly prohibited. If you received this e-mail in error, please reply to sender and destroy or delete the message and any attachments. Thank you.

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to listserv@xxxxxxxxxxx with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
NOTICE: This electronic mail message and any files transmitted with it are intended
exclusively for the individual or entity to which it is addressed. The message,
together with any attachment, may contain confidential and/or privileged information.
Any unauthorized review, use, printing, saving, copying, disclosure or distribution
is strictly prohibited. If you have received this message in error, please
immediately advise the sender by reply email and delete all copies.

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to listserv@xxxxxxxxxxx with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
.



Relevant Pages

  • [UNIX] SafeTP Reveals Internal Server IP Addresses
    ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... Protocol) to connect to their accounts on UNIX or NT/2000 FTP servers. ... check out the "227 Entering Passive Mode ... Timed out waiting for connection from server. ...
    (Securiteam)
  • Re: TCP hanshake problem
    ... Destination of the FTP? ... Does FTP from any other platform to z/OS work? ... We send a SYN to open the connection. ... Search the archives at http://bama.ua.edu/archives/ibm-main.html ...
    (bit.listserv.ibm-main)
  • Re: Not able to Ftp
    ... Subject: Not able to Ftp ... I have executed the given command: the output are as below: ... connection. ... Search the archives at http://bama.ua.edu/archives/ibm-main.html ...
    (bit.listserv.ibm-main)
  • RE: Telnet/ftp problems SBS2000
    ... Please make sure your client computers are configured as both Firewall ... will find two options "Enable folder view for FTP sites" and "Use Passive ... that the control connection has been successfully established, ... (other than port 21) ...
    (microsoft.public.windows.server.sbs)
  • Re: IPSwitch, Inc. WS_FTP Server
    ... > bounce attack as well as PASV connection hijacking. ... > The FTP bounce vulnerability allows a remote attacker to cause the ... > anonymously along with any internal addresses that the FTP server has ... That means it's got to handle a PORT ...
    (Bugtraq)