FTP Authentication not working

I have a v240 with solaris 9 and the latest patches. After a poweroutage I can not login via ftp. I have tried from the console from computers on the same subnet., with the full DNS name and just localhost. nothing works but SSH works fine but I need ftp to work. I also tried to install proftp and I get the same results. If someone could point me in the right direction that would be great.
-E

Sounds a bit beyond me, but I would think somemore information would be useful to anyone who could help.
When you say 'cannot login via ftp' what actually happens, and what messages, etc. do you get?
What happens if you try and telnet to the ftp port (it's either 21 or 23, I always get thsoe confused!).

Similar Messages

[svn] 1720: Bugs: LCDS-304 - Authentication not working in all cases when using security constraint with NIO endpoints .

Revision: 1720
Author: [email protected]
Date: 2008-05-14 14:50:06 -0700 (Wed, 14 May 2008)
Log Message:
Bugs: LCDS-304 - Authentication not working in all cases when using security constraint with NIO endpoints.
QA: Yes
Doc: No
Details:
Update to the TomcatLoginCommand to work correctly with NIO endpoints.
Ticket Links:
http://bugs.adobe.com/jira/browse/LCDS-304
Modified Paths:
blazeds/branches/3.0.x/modules/opt/src/tomcat/flex/messaging/security/TomcatLoginCommand. java

Revision: 1720
Author: [email protected]
Date: 2008-05-14 14:50:06 -0700 (Wed, 14 May 2008)
Log Message:
Bugs: LCDS-304 - Authentication not working in all cases when using security constraint with NIO endpoints.
QA: Yes
Doc: No
Details:
Update to the TomcatLoginCommand to work correctly with NIO endpoints.
Ticket Links:
http://bugs.adobe.com/jira/browse/LCDS-304
Modified Paths:
blazeds/branches/3.0.x/modules/opt/src/tomcat/flex/messaging/security/TomcatLoginCommand. java

Fire FTP does not work with Firesfox 4. It worked OK with version 3. How can I get a New Fire FTP? Last version of FTP does not solve the problem

Fire FTP does not work with Firesfox 4. It worked OK with version 3. How can I get a New Fire FTP? Last version of FTP does not solve the problem

I need to know if it's 64-bit or 32-bit.
If it's 64-bit, try copying the mms.cfg file from C:\WINDOWS\syswow64\Macromed\Flash to C:\WINDOWS\system32\Macromed\Flash

Ldap authentication not working for Solaris 8 host - Help!

Greetings folks,
I just recently migrated a host to use LDAP authentication. The only difference between this host and the rest of the hosts in the environment that I've converted to use LDAP is that this one is running Solaris 8.
Here's the steps I took to migrate it (though, I used the same steps for another Sol8 host in another environment and it works fine):
ldapclient -P stg -d mydomain.com -D cn=proxyagent,ou=profile,dc=mydomain,dc=com -w secret 192.168.1.69
My /etc/nsswitch.conf looks like this:
passwd: files ldap
group: files ldap
My /etc/pam.conf looks like this:
login auth requisite pam_authtok_get.so.1
login auth required pam_dhkeys.so.1
login auth sufficient pam_unix_auth.so.1
login auth required pam_ldap.so.1
sshd auth requisite pam_authtok_get.so.1
sshd auth sufficient pam_unix_auth.so.1
sshd auth required pam_ldap.so.1
other auth requisite pam_authtok_get.so.1
other auth required pam_dhkeys.so.1
other auth sufficient pam_unix_auth.so.1
other auth required pam_ldap.so.1
passwd auth sufficient pam_passwd_auth.so.1
passwd auth required pam_ldap.so.1
I've also cleared out the local user accounts for my human users, so there aren't any more passwd or shadow entries (yes, I ran pwconv). I also cleaned out the /etc/group entries for the same users. The machine appears to be configured properly, because I can run various DS commands that indicate this:
hostname# getent passwd user1
user1::1001:1001:User 1:/opt/home/user1:/bin/bash
hostname# ldaplist -l passwd user1
dn: uid=user1,ou=people,dc=mydomain,dc=com
shadowFlag: 0
userPassword: {crypt}(removed)
uid: user1
objectClass: posixAccount
objectClass: shadowAccount
objectClass: account
objectClass: top
cn: user1
uidNumber: 1001
gidNumber: 1001
gecos: User 1
homeDirectory: /opt/home/user1
loginShell: /bin/bash
However, in the end, actual logins to this host fail via ssh. Snooping the traffic reveals that all the right info is being handed back to the client, including the crypt'ed password hash, uid, etc. just like I see with other hosts that work.
Any ideas?
Thanks!
Patrick

I assume you have applied lastest kernel patch and 108993 to this Solaris8 machine, and its nss_ldap.so.1 and pam_ldap.so.1 are the same as the other Solaris8 LDAP clients that are working for ssh via LDAP auth.
1) Please replace "objectClass: account" with "objectClass: person", I know SUN ONE DS5.2 likes "person".
2) Did you test and verify telnet/ftp/su working? but SSH not working?
3) If telnet/ftp/su all worked, and SSH (SUN-SSH or OpenSSH), make sure you have "UsePAM yes" in sshd_config and restart sshd.
4) It is not a must I think but normally I will add "shadow: files ldap" to /etc/nsswitch.conf, restart nscd after that.
5) Whenever ldapclient command is run and ldap_cachemgr is restarted, I usually also restart nscd and sshd after that, if not testing result may not be accurate as nscd is still remembering OLD stuffs cached which could be very misleading.
6) You may use "ssh -v userid@localhost" to watch the SSH communications, on top of your usual "snoop"ing of network packets.
7) Use the sample pam.conf that is meant for pam_ldap from Solaris 10 system admin guide with all the pam_unix_cred.so.1 lines commented out. This works for me, there is no sshd defintions as it will follow "other".
http://docs.sun.com/app/docs/doc/816-4556/6maort2te?a=view
Gary

FTP access not working

The server has FTP running (green light is on). However, the Log (Library/Logs/FTP.transfer.log) remains empty in Server Admin.
Connecting to the server with SFTP (e.g., Fugu or WinSCP) is not working.
Fugu returns the error 'Permission denied (publickey,gssapi-keyex,gssapi-with-mic,keyboard-interactive).' Also, I cannot create a tunnel.
WinSCP returns the error 'No supported authentication methods available'. How the tunnel works in WinSCP is unclear to me.
Could it be a firewall problem? Which port does SFTP use? In Server Admin I can only see an SFTP port 115, but that is called 'Simple File Transfer Protocol'. Currently 20-21-22 are open.
Thanks for your help!
PS I am still a server novice!

Thanks MrHoffman.
Does that mean I can turn ftp off and turn off ports 20-21in the firewall without prejudicing my chances to establish an sftp/ssh connection?
ssh -vvv [email protected] may provide better diagnostics, but to me as a newbie it's unfortunately difficult to understand. Apparently there is a connection established, but authentication fails. This is the relevant second half of the message, with what I hope are the relevant details:
<snip>
debug1: Host 'xxx.xxx.xxx.xxx' is known and matches the RSA host key
debug1: Found key in /Users/.../.ssh/known_hosts:5
debug2: bits set: 504/1024
debug1: sshrsaverify: signature correct
debug2: kexderivekeys
debug2: set_newkeys: mode 1
debug1: SSH2MSGNEWKEYS sent
debug1: expecting SSH2MSGNEWKEYS
debug2: set_newkeys: mode 0
debug1: SSH2MSGNEWKEYS received
debug1: SSH2MSG_SERVICEREQUEST sent
debug2: service_accept: ssh-userauth
debug1: SSH2MSG_SERVICEACCEPT received
debug2: key: /Users/.../.ssh/identity (0x0)
debug2: key: /Users/.../.ssh/id_rsa (0x100123fd0)
debug2: key: /Users/.../.ssh/id_dsa (0x0)
debug1: Authentications that can continue: publickey,gssapi-keyex,gssapi-with-mic,keyboard-interactive
debug3: start over, passed a different list publickey,gssapi-keyex,gssapi-with-mic,keyboard-interactive
debug3: preferred publickey,keyboard-interactive,password
debug3: authmethod_lookup publickey
debug3: remaining preferred: keyboard-interactive,password
debug3: authmethodisenabled publickey
debug1: Next authentication method: publickey
debug1: Trying private key: /Users/.../.ssh/identity
debug3: no such identity: /Users/.../.ssh/identity
debug1: Offering public key: /Users/.../.ssh/id_rsa
debug3: sendpubkeytest
debug2: we sent a publickey packet, wait for reply
debug1: Authentications that can continue: publickey,gssapi-keyex,gssapi-with-mic,keyboard-interactive
debug1: Trying private key: /Users/.../.ssh/id_dsa
debug3: no such identity: /Users/.../.ssh/id_dsa
debug2: we did not send a packet, disable method
debug3: authmethod_lookup keyboard-interactive
debug3: remaining preferred: password
debug3: authmethodisenabled keyboard-interactive
debug1: Next authentication method: keyboard-interactive
debug2: userauth_kbdint
debug2: we sent a keyboard-interactive packet, wait for reply
debug2: inputuserauth_inforeq
debug2: inputuserauth_inforeq: num_prompts 1
Password:
debug3: packet_send2: adding 32 (len 26 padlen 6 extra_pad 64)
debug1: Authentications that can continue: publickey,gssapi-keyex,gssapi-with-mic,keyboard-interactive
debug2: userauth_kbdint
debug2: we sent a keyboard-interactive packet, wait for reply
debug2: inputuserauth_inforeq
debug2: inputuserauth_inforeq: num_prompts 1
Password:
debug3: packet_send2: adding 32 (len 26 padlen 6 extra_pad 64)
debug1: Authentications that can continue: publickey,gssapi-keyex,gssapi-with-mic,keyboard-interactive
debug2: userauth_kbdint
debug2: we sent a keyboard-interactive packet, wait for reply
debug2: inputuserauth_inforeq
debug2: inputuserauth_inforeq: num_prompts 1
Password:
debug3: packet_send2: adding 32 (len 26 padlen 6 extra_pad 64)
debug1: Authentications that can continue: publickey,gssapi-keyex,gssapi-with-mic,keyboard-interactive
debug2: we did not send a packet, disable method
debug1: No more authentication methods to try.
Permission denied (publickey,gssapi-keyex,gssapi-with-mic,keyboard-interactive).
Should that tell me something?
Your help is much appreciated!
Adriaanh

PI 7.30: OS command on AIX to archive files on FTP does not work

Dear experts,
Our PI system runs on an AIX server.
I have a scenario PI --> FTP. I also need to archive files in a seperate folder on the FTP.
I have been following thread:
Read or Write File On FTP server based on another file existence.
After file processing in the Audit Log in RWB I among others I get the information:
Execute OS command "sh /usr/sap/SYS/flex/batches/archive.sh file.zip /ftpfolder/file.zip"
It seems it is working properly.
The file itself gets processed to the "ftpfolder". But in the archive folder I do not get a copy of that file.
My script looks like this:
#!/bin/ksh
ftp -n -v <<%%EOF%%
open ftpserver
user myuser mypassword
prompt
asci
cd archivefolder
mput $2
bye
%%EOF%%
In the file receiver I have "Run OS command after message processing":
"sh /usr/sap/SYS/flex/batches/archive.sh %f %F"
%F stands for the complete path, right? So if I say "mput $2" in my script it should use %F.
Could you please help me out here. I really don't know what the problem could be.
Thank you and best regards,
Peter

hi Peter,
>>>I have a scenario PI --> FTP
but FTP does not support OS command as far as I remember
correction:
"Note that for the File Adapter transport protocol "FTP", the operating system command is NOT executed on the FTP server, but on the server hosting the Adapter Engine."
please check for details:
Note 841704 - XI File & JDBC Adapter: Operating system command
Regards,
Michal Krawczyk
Edited by: Michal_Krawczyk_PIXI on Feb 3, 2012 3:38 PM

FTP service not working anymore. ??

We have successfully been using ftp service with a new XServe 2 (Base Station 802.11n as gateway) for about a month. But, possibly following the latest firmware update that was run on the base station a few weeks ago, the ftp service just stopped working.
FTP works within the network if I connect via Cyberduck using the internal server address. But, to connect from the outside using the IP that is offered from within Base Station—the way we've done this successfully for a whole month—Cyberduck will spin and spin and never even see the network much less attempt to authenticate. Crazy.
• I have done a hard reset on Base Station. No change.
• I have unplugged and reset cable modem multiple times. No change.
• The ISP has confirmed that ports 20 and 21 are still open. Nothing unusual from their end.
• I've used ServerAdmin multiple times to stop & start ftp service, restart server, etc. No effect.
• Here's a curious detail: from the server I can go to whatismyipaddress.com, and it correctly sees the Base-Station-issued IP that I am trying to connect via ftp from the outside. Hmm.
Any experience from someone who can help isolate this issue? I'll admit, it appears to be a Base Station issue (maybe. likely.) since I can connect ftp from within the network. And, I am about 60-70% certain the latest firmware update was run near the time it spontaneously stopped working. But, ftp had been working. Not sure what is different now or why resetting things is not fixing anything.
Thoughts? Thanks in advance!
Greg

Yeah im able to connecto to my account no problem. Its that everytime I try to log in to my email on my N8, it keeps saying it could not connect. I just dont understand what this has happened, I never had such problem before.
Did Nokia close hotmail accounts acces for Symbian phones or something?

Sg300 - 802.1x NPS - mac authentication not working

I configured 802.1x on a sg300 switch. It is working very well with some Windows 7 machines and a Windows Server 2008 NPS server.
Now I tried to get the MAC authentication running, on a 3850X it is working without problems, but every access request sent from the SG300 is declined.
My current port configuration on the SG300:
interface fastethernet1
dot1x guest-vlan enable
dot1x max-req 1
dot1x reauthentication
dot1x timeout quiet-period 10
dot1x authentication 802.1x mac
dot1x radius-attributes vlan static
dot1x port-control auto
switchport mode access
On the Windows NPS server there is following error to see:
Authentication Details:
   Connection Request Policy Name:   Secure Wire
   Network Policy Name:       -
   Authentication Provider:       Windows
   Authentication Server:        myradius.local
   Authentication Type:       -
   EAP Type:           -
   Account Session Identifier:       30353030399999
   Reason Code:           1
   Reason:               An internal error occurred. Check the system event log for additional information.
There is compared to the message from the 3850 the authentication type missing (PAP) and a not very helpful error message displayed...

Still not working.
I tried different settings and (also older) software versions on the SF302-08P.
Also started to change the settings on the NPS (though it is working with the 3850X!), without success.
The NPS reports following error:
Schannel:
The following fatal alert was received: 40.
EventID 36887
If I search for this error, every source is pointing to certificate errors, but there should not be any certificate involved?!
... is this a bug on the SF302-08P?

Cisco Ise Central Web authentication not working

Hello Guys,
CWA is not working. It says that authentication suceeded but posture status is pending. No error in my Monitor--authentication. Checking it in my Windows 7, it does not shows the CWA portal.
What might be the possible problem of this.?
thanks

Kindly review the below links:
http://www.cisco.com/en/US/products/ps11640/products_configuration_example09186a0080ba6514.shtml
http://www.cisco.com/en/US/products/ps11640/products_configuration_example09186a0080bead09.shtml

"Allow insecure authentication" not working on mac mail after upgrade to Yosimite

I recently upgraded to the new Yosemite OS. Since then, I have not been able to access my ISP's IMAP server. After spending time troubleshooting with the service provider, it seems that the "allow insecure authentication" feature is not working. The password appears to be sent as a series of "*" which the server can not recognize and I fail the login. It is of note that I am still able to access this email account through my iPhone 4S with all the same settings and had no issues before the Yosimite upgrade. Is there anyway around this issue?

I had the same problem. Rebooting the computer fixed the issue for me.

Fire FTP is not working with firefox 4 and i need it badly. how do i do to make it work in the new version?

sinds i upgrade firefox to the new version 4, fire FTP it's not working. i cannot open it. and i need it badly to work everyday. so i would like to know how to make it work in this new version. what do i do? how i can open it?

Which version of Fire FTP do you have installed? <br />
Version 1.99.# is needed for Firefox 4.0+ <br />
https://addons.mozilla.org/en-US/firefox/addon/fireftp/versions/

J2EE and user authentication not working

Hi,
has anyone gotten the basic/form based authentication to
work in the latest version of the 9iAS?
Oracle9iAS (9.0.2.0.0)
I've read all the posts and articles from orionsupport.com
BUT it still does not work.
Support Folks from ORacle: Where is the latest documentation
for the Server ???? Everything seems outdated??
cheers,
Vijay

Hi,
You can change User and password through SU01 through UME. and also read SNote: Note 891614 - Login problems / Expired password
Regards
Thomas

Dreamweaver CS5 ftp does not work after my host server was updated

I'm on an iMac running Mavericks.
I'm using Dreamweaver CS 5.5 from the creative suite.
Suddenly the FTP function in Dreamweaver does not work.
My website host stated that they were forced to upgrade their server software for FTP and the Dreamweaver was not compatible.
Will there be an upgrade soon to resolve the problem? I'm having to use Filezilla to upload/download files from my site and it's a real pain compared to just using Dreamweaver.
Please help ASAP! Thanks.
Marcus

DWCS5.5 hasn't received an update in years and is no longer supported by Adobe. The chances of there being an update for any new compatibility issue is pretty much slim to none.
If (and it's a big if) your hosting company actually did something that made DW itself incompatible with the server, you would just have to use some other FTP program, like the free Filezilla client, to do your uploads.
Not a big deal, just a small extra step.

Kerberos Authentication Not Working on OS X 10.6

Using FF version 20.0, on OS X 10.6.8, I can not get it to use Kerberos authentication to allow SSO to a SharePoint web site.
On OS X 10.8, with the same configuration in the about:config, everything works fine - the user is not prompted for credentials.
I have put the necessary entires in network.negotiate-auth.delegation-uris and network.automatic-ntlm-auth.trusted-uris, network.negotiate-auth.gsslib is set to true.
When I have setup to log the errors from the authentication module, I find in the log file "Fail to load gssapi library".
Interestingly on 10.8, when I start Firefox from the command line the Kerberos authentication does not work. When I start it via the icon, it does. What is the difference? Are the preferences not being loaded when launching via the command line?
Thanks for any help,
Richard

Found the solution:
Was a combination of kinit being run on login (apparently a known 10.6 bug). Our Mac team were able to alter the appropriate plist file so that this does happen on login.
We also had to add an extra SPN for the actual server, as well as the DNS name of the SharePoint site we were trying to access with Kerberos authentication - although this may have something to do with using host-named site collections at the SharePoint end.
Main problem was the kinit thing though.

Kerberos / GSSAPI authentication not working in Mail.app

I am using Kerberos with a Debian server on which is running the MIT KDC, Cyrus imapd, and sendmail. I have been using Kerberos authentication with Mail.app in this environment for some time, under Tiger. I just upgraded to Leopard, and it no longer works. The problem is simple: the Mail.app IMAP conversation goes like this:
OK sequoia Cyrus IMAP4 v2.1.18-IPv6-Debian-2.1.18-5.1 server ready
1.11 CAPABILITY
* CAPABILITY IMAP4 IMAP4rev1 ACL QUOTA LITERAL+ MAILBOX-REFERRALS NAMESPACE UIDP LUS ID NOATOMICRENAME UNSELECT CHILDREN MULTIAPPEND SORT THREAD=ORDEREDSUBJECT THREAD=REFERENCES IDLE STARTTLS AUTH=GSSAPI AUTH=CRAM-MD5 AUTH=DIGEST-MD5 AUTH=NTLM ANNOTATEMORE
1.11 OK Completed
2.11 AUTHENTICATE GSSAPI
+
2.11 NO authentication failure
Mail.app simply sends an empty GSSAPI message. This problem does not appear to be in the Kerberos libraries or endemic to Apple's apps in general, since Kerberos authentication still works in both SSH and WebDAV. This appears to be a Mail.app bug.
- Richard Silverman

Have you found any work around? I'm having exactly the same problem.
As you say, kerberos in general seems okay -- not only does GSSAPI work fine for other programs, it even works correctly for ThunderBird running under 10.5. Meanwhile Mail.app doesn't even try to fetch service tickets, nor does it use them if something else already has.
I've tried everything I can think of -- using the real A/PTR hostname instead of the CNAME, adding a user with a principal name that matches my username, hard-coding kerberos settings into the config file rather than relying on DNS -- but nothing makes Mail.app even try to use GSSAPI for IMAP or SMTP.

FTP Authentication not working

Similar Messages

Maybe you are looking for