User named "Connected" logged on to my FTP server
I was checking out the activity on my server and found that I had a user with the name "Connected" logged into my FTP server as an authenticated user from address 218.188.21.181. I checked the system log and all I can find for entries on this IP address are repeated login failures.
My question is why does it show an active "Authenticated" connection from that IP address in Server Admin with a bogus name of "Connected", when the system log only shows entries from that IP address as repeated login failures? How can I tell if this person logged in successfully since successful logins are not logged?
This is all that I can find in the system log for that IP address. From what I can tell (system.log does not show successful FTP connections from what I can see), he has not connected. If he has, he has not done anything over FTP. I have every option selected for FTP logging, so any directory change, or file transfer would be logged. Anonymous access is disabled and I have gone over every share to make sure that none of them have guest access enabled. What bothers me is when looking at the FTP service in Server Admin, under the connections tab, it shows the following connection:
Name: connected
Type: Authenticated
Address: 218.188.21.181
Activity: IDLE
Other (known) users are listed as well, and when I look at the activity log, I can see that they are uploading/dowloading files from the server as expected. I just want to know why I have this user named "connected" that appears to be connected to the server.
System.log:
Jan 22 18:09:46 minime ftpd[132]: repeated login failures from 218.188.21.181 [218.188.21.181]
Jan 22 18:19:52 minime ftpd[689]: repeated login failures from 218.188.21.181 [218.188.21.181]
Jan 22 18:30:05 minime ftpd[1138]: repeated login failures from 218.188.21.181 [218.188.21.181]
Jan 22 18:40:29 minime ftpd[1652]: repeated login failures from 218.188.21.181 [218.188.21.181]
Jan 22 18:51:01 minime ftpd[1853]: repeated login failures from 218.188.21.181 [218.188.21.181]
Jan 22 19:01:43 minime ftpd[2001]: repeated login failures from 218.188.21.181 [218.188.21.181]
Jan 22 19:12:34 minime ftpd[2269]: repeated login failures from 218.188.21.181 [218.188.21.181]
Jan 22 19:23:33 minime ftpd[2452]: repeated login failures from 218.188.21.181 [218.188.21.181]
Jan 22 19:34:41 minime ftpd[2610]: repeated login failures from 218.188.21.181 [218.188.21.181]
Jan 22 19:45:58 minime ftpd[2792]: repeated login failures from 218.188.21.181 [218.188.21.181]
Jan 22 19:57:24 minime ftpd[2967]: repeated login failures from 218.188.21.181 [218.188.21.181]
Jan 22 20:08:59 minime ftpd[3129]: repeated login failures from 218.188.21.181 [218.188.21.181]
Jan 22 20:20:43 minime ftpd[3446]: repeated login failures from 218.188.21.181 [218.188.21.181]
Jan 22 20:32:36 minime ftpd[3570]: repeated login failures from 218.188.21.181 [218.188.21.181]
Jan 22 20:44:38 minime ftpd[3675]: repeated login failures from 218.188.21.181 [218.188.21.181]
Jan 22 20:56:49 minime ftpd[3769]: repeated login failures from 218.188.21.181 [218.188.21.181]
Jan 22 21:09:09 minime ftpd[3868]: repeated login failures from 218.188.21.181 [218.188.21.181]
Jan 22 21:21:42 minime ftpd[4085]: repeated login failures from 218.188.21.181 [218.188.21.181]
Jan 22 21:34:20 minime ftpd[4164]: repeated login failures from 218.188.21.181 [218.188.21.181]
Jan 22 21:47:07 minime ftpd[4264]: repeated login failures from 218.188.21.181 [218.188.21.181]
Jan 22 22:00:04 minime ftpd[4383]: repeated login failures from 218.188.21.181 [218.188.21.181]
Jan 22 22:13:10 minime ftpd[4573]: repeated login failures from 218.188.21.181 [218.188.21.181]
Jan 22 22:26:24 minime ftpd[4731]: repeated login failures from 218.188.21.181 [218.188.21.181]
Similar Messages
-
Users cannot connect over SMB 10.10.1 server.app 4.0 and 4.0.3
Hello,
I have an issue where users cannot connect to a server for files sharing over SMB.
Info:
All users on 10.10.1
2 Servers on 10.10.1
Server.app 4.0.3 but issue was also present using 4.0
SMB connection works when connecting to the OD Master
SMB does not work when connecting to the OD Replica ServerBut AFP works fine when connecting to the OD Replica Server.
I have destroyed and re-added the OD replica but that did not seem to help
This is what I see in the logs each time I try to connect(logs have been cleaned to remove client details:
Jan 9 14:37:12 server.pretendco.com digest-service[9961]: label: default
Jan 9 14:37:12 server.pretendco.com digest-service[9961]: dbname: od:/Local/Default
Jan 9 14:37:12 server.pretendco.com digest-service[9961]: mkey_file: /var/db/krb5kdc/m-key
Jan 9 14:37:12 server.pretendco.com digest-service[9961]: acl_file: /var/db/krb5kdc/kadmind.acl
Jan 9 14:37:12 server.pretendco.com digest-service[9961]: digest-request: uid=0
Jan 9 14:37:12 server.pretendco.com digest-service[9961]: digest-request: netr probe 0
Jan 9 14:37:12 server.pretendco.com digest-service[9961]: digest-request: init request
Jan 9 14:37:12 server.pretendco.com digest-service[9961]: digest-request: init return domain: SERVER2 server: SERVER2 indomain was: <NULL>
Jan 9 14:37:13 server.pretendco.com digest-service[9961]: digest-request: uid=0
Jan 9 14:37:13 server.pretendco.com digest-service[9961]: digest-request: init request
Jan 9 14:37:13 server.pretendco.com digest-service[9961]: digest-request: init return domain: SERVER2 server: SERVER2 indomain was: <NULL>
Jan 9 14:37:13 server.pretendco.com kdc[4802]: Got a canonicalize request for a LKDC realm from local-ipc
Jan 9 14:37:13 server.pretendco.com kdc[4802]: Asked for LKDC, but there is none
Jan 9 14:37:13 server.pretendco.com sandboxd[395] ([4802]): kdc(4802) deny file-read-data /private/etc/krb5.conf
Jan 9 14:37:22 server.pretendco.com kdc[4802]: Got a canonicalize request for a LKDC realm from local-ipc
Jan 9 14:37:22 server.pretendco.com kdc[4802]: Asked for LKDC, but there is none
Jan 9 14:37:23 server.pretendco.com digest-service[9961]: digest-request: uid=0
Jan 9 14:37:23 server.pretendco.com digest-service[9961]: digest-request: init request
Jan 9 14:37:23 server.pretendco.com digest-service[9961]: digest-request: init return domain: SERVER2 server: SERVER2 indomain was: <NULL>
Jan 9 14:37:23 server.pretendco.com digest-service[9961]: digest-request: uid=0
Jan 9 14:37:23 server.pretendco.com digest-service[9961]: digest-request: init request
Jan 9 14:37:23 server.pretendco.com digest-service[9961]: digest-request: init return domain: SERVER2 server: SERVER2 indomain was: <NULL>
Jan 9 14:37:23 server.pretendco.com digest-service[9961]: digest-request: uid=0
Jan 9 14:37:23 server.pretendco.com digest-service[9961]: digest-request: od failed with 2 proto=ntlmv2
Jan 9 14:37:23 server.pretendco.com digest-service[9961]: digest-request: user=SERVER2\\username
Jan 9 14:37:23 server.pretendco.com digest-service[9961]: digest-request: kdc failed with 36150275 proto=unknown
Jan 9 14:37:23 server.pretendco.com digest-service[9961]: digest-request: guest failed with -1561745590 proto=ntlmv2
Jan 9 14:37:23 server.pretendco.com digest-service[9961]: digest-request: uid=0
Jan 9 14:37:23 server.pretendco.com digest-service[9961]: digest-request: init request
Jan 9 14:37:23 server.pretendco.com digest-service[9961]: digest-request: init return domain: SERVER2 server: SERVER2 indomain was: <NULL>
Jan 9 14:37:23 server.pretendco.com digest-service[9961]: digest-request: uid=0
Jan 9 14:37:23 server.pretendco.com digest-service[9961]: digest-request: init request
Jan 9 14:37:23 server.pretendco.com digest-service[9961]: digest-request: init return domain: SERVER2 server: SERVER2 indomain was: <NULL>
Jan 9 14:37:23 server.pretendco.com digest-service[9961]: digest-request: uid=0
Jan 9 14:37:23 server.pretendco.com digest-service[9961]: digest-request: od failed with 2 proto=ntlmv2
Jan 9 14:37:23 server.pretendco.com digest-service[9961]: digest-request: user=SERVER2\\codywood
Jan 9 14:37:23 server.pretendco.com digest-service[9961]: digest-request: kdc failed with 36150275 proto=unknown
Jan 9 14:37:23 server.pretendco.com digest-service[9961]: digest-request: guest failed with -1561745590 proto=ntlmv2
I suspect the problem is to do with Kerberos and in relation to this server being an OD Replica.
I would really appreciate anyone's insight into this.
Thanks
MorgsI have the same problem although I upgraded from Lion Server to Mountain Lion Server. The error appears to go hand in hand with this error.
userInit: CFPreferences: user home directory for user kCFPreferencesCurrentUser at /Network/Servers/fullyqualifieddomainname/Users/user is unavailable. User domains will be volatile.
I've read a number of things to try. A lot of people point to DNS being a problem, but I'm confident this is correct in my environment. -
I have a small workgroup of about 30 users that are a mix of XP Pro, 7 Pro and 8.1 desktop / laptop users that connect to a Windows 2008 R2 Server to use Quickbooks Enterprise, share files and printers. I dont want the users to be able to save their password
on their workstations, I want them to have to log in every time they connect to the server. How do I turn that off?Is the something on the server in Group Policy or a secruity setting that will not allow a saved credential for logging onto the server?Hi,
I have a small workgroup of about 30 users that are a mix of XP Pro, 7 Pro and 8.1 desktop / laptop users that connect to a Windows 2008 R2 Server to use Quickbooks Enterprise
By connecting to the server, do you mean users log on locally or through remote desktop services, or just through network to access network resources instead of log on to the server directly?
If it’s log on locally, please disable auto logon feature by configure the registry entry
AutoLogonCount to 0, it is under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon.
If it’s remote desktop connection, please clear Logon Credentials for corresponding remote desktop sessions.
If it’s network access, then it is by design because network logon has a single-sign-on feature.
More information for you:
How to disable Auto Login?
https://social.technet.microsoft.com/Forums/windowsserver/en-US/705b0cf8-53f1-45f9-b6bf-2ba61c8d10bf/how-to-disable-auto-login?forum=winservergen
How Interactive Logon Works
http://technet.microsoft.com/en-us/library/cc780332(v=WS.10).aspx
Best Regards,
Amy
Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected] -
Cannot connect to ftp server other than in safe boot
hello. After updating to 10.6, no ftp client in my use will connect or upload to an ftp server. Apple's finder (connect to server) shows the remote contents, but will not upload. Dreamweaver, FileZilla, Cyberduck and ClassicFTP don't connect at all. None of these occur in safe mode, which should indicate a conflict with third party software—however, which one could that be? I turn off all firewalls (including the system's); what else? I run Butler, no other third pary software. Anyone had that, or any idea?
ThanksCould it be a signal? Have a look here http://suite101.com/article/2012-end-of-the-world-predictions-by-nostradamus-a148071
On a more professional note, I think it is best to contact the host, he/she is sure to help you.
Gramps -
10.5.2 FTP Server- get rid of aliases to AFP/SMB shares?
Hi all,
I'd like to open up exactly one folder on my Xserve to outside FTP, from one account. That's easy to do with SACLs, and Server Admin: FTP Settings: Advanced: "Home Directory Only", and defining the FTP root as that one folder.
The problem is that this folder also gets populated with aliases to the AFP/SMB shares on this server. They don't do anything, they don't connect to anything, but yet, they also have no business being there, and I want them gone.
How can I have my FTP root not have these unwanted links?
This is exactly the issue brought up in the archived thread here:
http://discussions.apple.com/thread.jspa?messageID=5859326�Even if you delete the symlinks, they come back the next time a user logs into the server via FTP
SO...
Heres how I did it...
You gotta have a user that's designed to access your site!
Think about it... When you log into an FTP site, do you log in with a legitimate user name that has gui access to that computer? Make sure your users know to log in with an FTP user account that we create here.
First, I created a Group called FTP
Then I created a user named commweb (short for community web) with a home folder located in /Library/WebServer/Documents/CommunityHome
So in your server config, the home folder settings for my user are:
Mac OS X Server/Share Point URL:
afp://******.****.com/Library/WebServer/Documents
Path to Home Folder:
CommunityHome
Full Path:
/Network/Servers/****.***.com/Library/WebServer/Documents/CommunityHome
Then I made commweb a member of the group "FTP"
This is where it gets tricky.
I put the website in a folder IN my commweb's home folder. I called it CommunitySite.
(The site location is /Library/WebServer/Documents/CommunityHome/CommunitySite +you have to specify that in the web server settings+)
I then "Shared" the commweb home folder (/Library/WebServer/Documents/CommunityHome) making sure to give commweb read and write permission.
Now.... We wanna deny complete access to all the sharepoints to ANYONE in the FTP group. (Just select 'deny' - Read and write on the rest of the sharepoints) That way the ftp group can't have access to the folders even if they could see them.
So now, when my commweb user logs in, I make sure that the Initial Path is CommunitySite. Note that you have to specify it in the syntax when logging in through the terminal. For instance the command would be:
ftp commweb@****.***.com/CommunitySite
267,899 steps, but it works.
-Graham -
Help Fetching files from an FTP server into a DBase or local folder
Hello Gurus!
I need help to automate or design/write an app capable of (replace a manual process) reading log files in an ftp server folder, this log files are called CDR (Call Detail Record) and named as follow cdr.txt.20020221010000 meaning that this log file was created on 2002/02/21 at 01:00:00.
This CDR log files are generated every hour by a Lucent telephone switch using a software/program called EXS ExchangePlus in ASCII format (fixed length delaminated, Char data type). EXS ExchangePlus writes a record in this CDR/log files after the call is completed, i.e. Calling_Number, Called_Number, Date_connect (yyyymmdd), Time_connect (hhmmss), Charged_time (hhmmss, duration of the call), and so on.
The manual process I am using now is:
1. Log in the ftp server into the folder where the CDRs log files are, located the latest generated CDRs log files and downloaded them into a local folder/directory. Normally I download the CDR for full day or 24 CDRs log files.
1a. Optionally sometimes I used a program called VEdit compiled/gather all 24 CDRs into a single file.
2. Once I have downloaded the CDRs I want to process (normally I process a full day 24 CDRs) I imported then into a Data Base temp table, where then I do the conversion of data types (i.e. Dates and times fields from char type -> to ->Date type) and calculations for billing purposes.
So if somebody can help with this, I would really appreciated ideas or any kind of information on how to automated this process.
I�m familiar with Java2 platform (using JDeveloper ) so if somebody has done something like this before using java, this would very helpful. Or Maybe using Visual Basic 6.0 would help too.
Thanks Gurus, and I look forward to hear from you soon!
Alf Pathros!Thanks for the idea, even though an example would help me more.
I already found the FTPClient class.
I also would like to knwo if there is a away Ican append/merged various files CDRs into a single/one to then dump/import it into the database -
How to implement logger in this ftp server
I have written a FTP Server that is used by the clients to upload xml over to the server.
Currently it is using a console and it is printing stuff out on a console.
I have tried a lot to implement a logger class so that all console messages get written to a file.
But it has not been working out at all.
I would deeply appreciate if all you java gurus out there could modify the code given below to correctly log messages to a log file.
Please do Explain if possible ...I will try to rectify this issue in several other applications i developed as well.
import java.net.*;
import java.io.*;
import java.util.*;
import java.util.Date;
import java.text.SimpleDateFormat;
import java.text.DateFormat;
import java.text.Format;
import java.lang.Object;
import java.lang.*;
import javax.crypto.*;
import javax.crypto.spec.PBEKeySpec;
import javax.crypto.spec.PBEParameterSpec;
import java.security.spec.AlgorithmParameterSpec;
import java.security.spec.KeySpec;
public class FTPServer
{ public static void main(String args[]) throws Exception
{ ServerSocket soc=new ServerSocket(5217);
System.out.println("FTP Server Started on Port Number 5217");
while(true)
System.out.println("Waiting for Connection ...");
transferfile t=new transferfile(soc.accept());
class transferfile extends Thread
Socket ClientSoc;
DataInputStream din;
DataOutputStream dout;
transferfile(Socket soc)
{ try
{ ClientSoc=soc;
din=new DataInputStream(ClientSoc.getInputStream());
dout=new DataOutputStream(ClientSoc.getOutputStream());
System.out.println("FTP Client Connected ...");
System.out.println("External IP of Client ..." + ClientSoc.getInetAddress());
//System.out.println("FTP Client Connected ..." + ClientSoc.getRemoteSocketAddress());
start();
catch(Exception ex)
//encrypto routine starts
class DesEncrypter {
Cipher ecipher;
Cipher dcipher;
// 8-byte Salt
byte[] salt = {
(byte)0xA9, (byte)0x9B, (byte)0xC8, (byte)0x32,
(byte)0x56, (byte)0x35, (byte)0xE3, (byte)0x03 };
// Iteration count
int iterationCount = 19;
DesEncrypter(String passPhrase) {
try {
// Create the key
KeySpec keySpec = new PBEKeySpec(passPhrase.toCharArray(), salt, iterationCount);
SecretKey key = SecretKeyFactory.getInstance(
"PBEWithMD5AndDES").generateSecret(keySpec);
ecipher = Cipher.getInstance(key.getAlgorithm());
dcipher = Cipher.getInstance(key.getAlgorithm());
// Prepare the parameter to the ciphers
AlgorithmParameterSpec paramSpec = new PBEParameterSpec(salt, iterationCount);
// Create the ciphers
ecipher.init(Cipher.ENCRYPT_MODE, key, paramSpec);
dcipher.init(Cipher.DECRYPT_MODE, key, paramSpec);
} catch (java.security.InvalidAlgorithmParameterException e) {
} catch (java.security.spec.InvalidKeySpecException e) {
} catch (javax.crypto.NoSuchPaddingException e) {
} catch (java.security.NoSuchAlgorithmException e) {
} catch (java.security.InvalidKeyException e) {
// Buffer used to transport the bytes from one stream to another
byte[] buf = new byte[1024];
public void encrypt(InputStream in, OutputStream out) {
try {
// Bytes written to out will be encrypted
out = new CipherOutputStream(out, ecipher);
// Read in the cleartext bytes and write to out to encrypt
int numRead = 0;
while ((numRead = in.read(buf)) >= 0) {
out.write(buf, 0, numRead);
out.close();
} catch (java.io.IOException e) {
public void decrypt(InputStream in, OutputStream out) {
try {
// Bytes read from in will be decrypted
in = new CipherInputStream(in, dcipher);
// Read in the decrypted bytes and write the cleartext to out
int numRead = 0;
while ((numRead = in.read(buf)) >= 0) {
out.write(buf, 0, numRead);
//added later on
in.close();
out.close();
} catch (java.io.IOException e) {
} //encryptor routine ends
//not implemented right now as we arent using the ftp server to download stuff...can be activated later on if we want
void SendFile() throws Exception
String filename=din.readUTF();
File f=new File(filename);
if(!f.exists())
dout.writeUTF("File Not Found");
return;
else
{ dout.writeUTF("READY");
FileInputStream fin=new FileInputStream(f);
int ch;
do
ch=fin.read();
dout.writeUTF(String.valueOf(ch));
while(ch!=-1);
fin.close();
dout.writeUTF("File Received Successfully");
String Compare(String filename) throws Exception
///dout.writeUTF("entering compare");
String dateTempString=new String();
Date dateValue=new Date();
SimpleDateFormat formatter = new SimpleDateFormat ("hhmmss");
dateTempString = formatter.format(dateValue);
File dir1 = new File("C:\\FTPnew");
boolean success2 = dir1.mkdir();
if (!success2) {
// Directory creation failed /Already Exists
File dir = new File("C:\\FTPnew\\server");
boolean success = dir.mkdir();
if (!success) {
// Directory creation failed /Already Exists
File ftemp=new File(dir,dateTempString + filename);
File fnewtemp=new File(dir,"new-enc-"+filename);
// Create encrypter/decrypter class
DesEncrypter encrypter = new DesEncrypter("My Pass Phrase!");
FileOutputStream fout=new FileOutputStream(fnewtemp);
int ch;
String temp;
do
{ temp=din.readUTF();
ch=Integer.parseInt(temp);
if(ch!=-1)
fout.write(ch);
}while(ch!=-1);
fout.close();
//dout.writeUTF("written temp en file");
// Decrypt
encrypter.decrypt(new FileInputStream(fnewtemp),
new FileOutputStream(ftemp));
//String Option;
dout.writeUTF("Delete");
System.out.println("File Upload Successfull--Duplicate file with timestamp Created");
boolean success1 = fnewtemp.delete();
return "hello" ;
void ReceiveFile() throws Exception
String ip=din.readUTF();
System.out.println("\tRequest Coming from Internal IP Address : "+ ip);
String filename=din.readUTF();
if(filename.compareTo("File not found")==0)
return;
// Destination directory
File dir11 = new File("C:\\FTPnew");
boolean success22 = dir11.mkdir();
if (!success22) {
// Directory creation failed /Already Exists
File dir = new File("C:\\FTPnew\\server");
boolean success21 = dir.mkdir();
if (!success21) {
// Directory creation failed /Already Exists
File f=new File(dir ,"enc-"+filename);
File fe=new File(dir,filename);
String option;
if(fe.exists())
//dout.writeUTF("File Already Exists");
String compvalue = Compare(filename);
//dout.writeUTF(compvalue);
if(compvalue.compareTo("hello")==0)
//dout.writeUTF("Transfer Completed");
return;
option=din.readUTF();
else
//dout.writeUTF("SendFile");
option="Y";
if(option.compareTo("Y")==0)
// Generate a temporary key.
// Create encrypter/decrypter class
DesEncrypter encrypter = new DesEncrypter("My Pass Phrase!");
FileOutputStream fout=new FileOutputStream(f);
int ch;
String temp;
do
{ temp=din.readUTF();
ch=Integer.parseInt(temp);
if(ch!=-1)
fout.write(ch);
}while(ch!=-1);
fout.close();
// Decrypt
encrypter.decrypt(new FileInputStream(f),
new FileOutputStream(fe));
boolean success2 = f.delete();
dout.writeUTF("Delete");
System.out.println("File Upload Successfull");
else
return;
public void run()
while(true)
try
String Command=din.readUTF();
if(Command.compareTo("SEND")==0)
System.out.println("\tSEND Command Received ...");
ReceiveFile();
continue;
catch(Exception ex)
//System.out.println("\tClient Terminated Abnormally ...........");
continue;
}Stick a
Logger log = Logger.getLogger( "me ftp server" );at the top.
Checn Sys.out.println to log.info( ... )
Add a logging prefs file.
http://java.sun.com/j2se/1.4.2/docs/guide/util/logging/overview.html -
How to set Lion built-in FTP Server auto run off
Hello all.
I set FTP Server by using Rumpus Server application.
But Lion's built-in FTP Server is running on the front.
So if I try to connect my FTP Server out of my LAN, I can only connect to the built-in FTP Server despite I wanted to connect Rumpus FTP Server.
It can be solved by unload the built-in FTP Server(using sudo -s launchctl unload...) but every after rebooting I should set it because it is set to run automatically in every booting.
How can I set the auto run off?well, the ftp server (=ftpd) takes account info from the user list for your mac. so, go to the system settings on your mac, then to users, and then just add another user with a password of your choice (tap on the little plus-sign to add a user!). this will then be a valid user for your ftp server after you restart your ftp server.
the other thing you want to do, about the home directory, is called chroot. you can set the home directory of a specific ftp-user to be another directory then the standard. for this, there are configuration directives in the configuration file in /private/etc/ftpd.conf which you have to edit by hand. so make sure what you do there.
you should read this before editing the file, this will give you a better understanding of what to put there: https://developer.apple.com/library/mac/documentation/darwin/reference/manpages/ man8/tnftpd.8.html -
FTP server - hide share points?
10.5 Server, relatively minor issue.
FTP is set up, with the intent of having a single FTP repository for outside folks to access. I've set up a local user account with no home folder. FTP Server setting is "Home directory only."
When the FTP user logs in, they go to the proper directory (the FTP root), with full access to that directory.
The minor issue is that the FTP user see the names of (as folders) for other server shares. They can't access those shares so it's not the end of the world ("permission denied"). It however makes me nervous that some other unintended change should allow users into the other shares. I'd rather not show them at all.
It appears the server daemon adds these aliases/hard links to the FTP directory itself. I can delete them, but they're recreated by the server.
I gave the ftp user a home directory matching the FTP root, and I get the same results.
What I'd like is a drop into the FTP root, without even seeing the existence of other shares.
Any way to do this?
Thanks!Hi,
Did you guys find out a way to do this under 10.5.x...?
I presume that we need to manipulate the files here:
/Library/ftpserver/Configuration
I guess there is some "mask" or way to do this.
I'm using PureFTP on my other Xserve, running 10.4.x, ... however the pain there is that you have to manually create user/pass for each user. At least this way you don't have to worry about setting up extra stuff.
I'd also like a way to be able to setup my Admin FTP account, so that it has "/" root access, even though the default is to show them only their Home Folders.
Anyone cracked this..?
Cheers,
Steve -
Transfer file to an external FTP SERVER
HI Gentelemen!!,
I'm trying to open an external FTP connection, sending a file from the MiniSAP.
Which is the appropiate RFC connection that I have to use??
Anybody know how to set RFC connection to access an external FTP server.
This are the MF that I use:
CALL FUNCTION 'SCRAMBLE_STRING'
To encrypt password
CALL FUNCTION 'FTP_CONNECT'
here i have an import value for RFC DESTINATION
return handle - I use it to close the connection
CALL FUNCTION 'FTP_COPY'
CALL FUNCTION 'FTP_DISCONNECT'
Use HANDLE numbre to close the connection
Thanks for your help.
POLAK.-I am not sure minisap has sapftp and sapftpa executable.
Anyway the two RFC destination used to do FTP are SAPFTPA and SAPFTP. This are 2 TCP/IP RFC destination (Type T) that launch either the program sapftp or sapftpa on the application server.
If these rfc destination are not setup in transaction SM59 you can try to define them but it might not work on minisap.
Regards -
Running a batch file on ftp server
HI All,
i am trying to use Command line facility of file adapter to run a batch file..
i batch file i have a single command as
mkdir ranjeet.
how should i call this batch file from file adapter..
i tried putting batch file name in the command line section. I had copied the batch file on ftp server at location of Target Directory..but in audit log of adapter i am getting error as OS command cannot be executed..Ranjeet,
>>ok..but what will command to be run of ftp run..
How do you expect any one of us to know what your ftp server is based on.
The previous reply by Carme has answered your XI query and to the point. You acknowledge it with a <b>ok</b>!! I guess it is too rude on your part.
Anway answering your question, that depends on your FTP server. Log in to your FTP server manally and try executing these commands and check.
Regards,
Jai Shankar -
Hello,
I have a strange file in my Users folder, named PortDetect.log
I have no idea which app created it and it reappears when I delete it.
Has anyone got the same file? Or know where it may originate from?
Thanks in advance!know where it may originate from?
The Huawei wireless modem driver. -
Domain users cannot connect to the network folders when logged in via rds remote apps
Hi,
recently I setup an RDS farm for remote apps on server 2012 r2.
all users can connect to the apps published. no problems there.
but when users connect via rds they cannot connect to the networkfolders and cannot store the resultance of there work (docx and xlsx files)
all users are normally connected to the networkfolders using a small login batch file handing down the unc path needed. when I log in as domain admin, also using a login batch, connections are setup correctly. It seems to me to be an security issue on the
rds session host.
how to alter this?
greetz, Fons
Fons system and network engineer Balie AmsterdamHi,
Thank you for posting in Windows Server Forum.
We use WMI to communicate with the RDSH server. Various issues can cause WMI to deny access or return error codes. Here's a few things you can try:
1. Check if the "TS Web Access Computers" security group on the RDSH server has incorrect permissions in DCOM and/or WMI:
For checking DCOM security settings:
1. Start the Component Services MMC snapin
2. Navigate to Component Services -> Computers -> My Computer
3. Right-click on My Computer and select properties
4. Go to the COM Security tab
5. Under Access Permissions, click the Edit Limits button
6. Ensure that TS Web Access Computers is in the list, with all of the permissions set to “allow”.
7. Under Launch and Activation Permissions, click the Edit Limits button
8. Ensure that TS Web Access Computers is in the list, with all of the permissions set to “allow”.
For checking WMI security settings:
1. Start the WMI Control MMC snapin
2. Right-click the WMI Control node and select properties
3. Go to the Security tab
4. Navigate to Root->CIMV2->TerminalServices
5. With TerminalServices selected, click the Security button
6. Ensure that TS Web Access Computers is in the list with Execute Methods, Enable Account, and Remote Enable set to "allow"
2. Verify the RD Session Host server's firewall allows WMI calls.
3. Verify that the RD Connection Broker hasn't lost its trust relationship with the domain.
4. See if non-RDS related WMI calls can be successfully made to the RDSH server. This can help differentiate between a general WMI issue and an issue calling the RDS WMI provider.
(Quoted from following thread.)
RemoteApp Source not working from RDWeb
http://social.technet.microsoft.com/Forums/windowsserver/en-US/173d4546-e12f-47c1-ac66-8b4f69826892/remoteapp-source-not-working-from-rdweb?forum=winserverTS
Hope it helps!
Thanks.
Dharmesh Solanki -
Os10.5.8 connection FTP server no popup windows asking for my logging and password
I'm actually working on mac book pro 10.5.8 and I try to access a FTP server. Finder then command+P and my address. The finder open me two files "Array and Info" but nothing in the Array folder where everything should be. The problem found is that the system is not asking me for my password and login. My friend who is working on 10.6 get this popup windows asking for login and password. Why I don't get this windows on os 10.5.8.
find the trick. ftp://name@server
-
Can not connect to Cerberus FTP Server with PASV
I setup a FTP Server and i can connect from the inside fine but from the outside i can not connect in passive mode. I can in regular ftp or ssh.
Here is the log from filezilla
Status: Resolving address of domain.com
Status: Connecting to ExternalIP:990...
Status: Connection established, initializing TLS...
Status: Verifying certificate...
Status: TLS/SSL connection established, waiting for welcome message...
Response: 220-220-Welcome to Cerberus FTP Server
Response: 220 220 Created by Cerberus, LLC
Command: USER test
Response: 331 User test, password please
Command: PASS ***********
Response: 230 Password Ok, User logged in
Command: CLNT FileZilla
Response: 200 Command okay
Command: OPTS UTF8 ON
Response: 220 UTF8 support on
Command: PBSZ 0
Response: 200 PBSZ=0
Command: PROT P
Response: 200 PROT P OK, data channel will be secured
Status: Connected
Status: Retrieving directory listing...
Command: PWD
Response: 257 "/" is the current directory
Command: TYPE I
Response: 200 Type Binary
Command: PASV
Response: 227 Entering Passive Mode (external IP,195,83)
Command: MLSD
Error: Connection timed out
Error: Failed to retrieve directory listing
Result of the command: "show running-config"
: Saved
ASA Version 8.0(4)
interface Vlan1
nameif inside
security-level 100
ip address 192.168.10.10 255.255.255.0
interface Vlan2
nameif outside
security-level 0
pppoe client vpdn group att
ip address pppoe setroute
interface Ethernet0/0
switchport access vlan 2
interface Ethernet0/1
interface Ethernet0/2
interface Ethernet0/3
interface Ethernet0/4
interface Ethernet0/5
interface Ethernet0/6
interface Ethernet0/7
ftp mode passive
clock timezone CST -6
clock summer-time CDT recurring
object-group service RDP tcp
description RDP
port-object eq 3389
object-group service FTP_PASV_Ports tcp
description Passive Ports
port-object range 35000 35999
object-group service FTPS tcp
description FTPS
port-object eq 990
access-list outside_access_in extended permit tcp any any object-group RDP
access-list outside_access_in extended permit icmp any any
access-list outside_access_in extended permit tcp any any eq ftp
access-list outside_access_in extended permit tcp any any eq telnet
access-list outside_access_in extended permit tcp any any eq smtp
access-list outside_access_in extended permit tcp any any eq www
access-list outside_access_in extended permit tcp any any eq pop3
access-list outside_access_in extended permit tcp any any eq https
access-list outside_access_in remark passive FTP port range
access-list outside_access_in extended permit tcp any host server object-group FTP_PASV_Ports
access-list outside_access_in extended permit tcp any any eq ssh
access-list outside_access_in extended permit tcp any any object-group FTPS
access-list outside_access_in extended permit tcp any any eq ftp-data
pager lines 24
logging enable
logging asdm informational
mtu inside 1500
mtu outside 1492
icmp unreachable rate-limit 1 burst-size 1
asdm image disk0:/asdm-621.bin
no asdm history enable
arp timeout 14400
global (outside) 1 interface
nat (inside) 1 0.0.0.0 0.0.0.0
static (inside,outside) tcp interface www server www netmask 255.255.255.255
static (inside,outside) tcp interface https server https netmask 255.255.255.255
static (inside,outside) tcp interface smtp server smtp netmask 255.255.255.255
static (inside,outside) tcp interface 3389 server 3389 netmask 255.255.255.255
static (inside,outside) tcp interface pop3 server pop3 netmask 255.255.255.255
static (inside,outside) tcp interface ftp server ftp netmask 255.255.255.255
static (inside,outside) tcp interface ssh server ssh netmask 255.255.255.255
static (inside,outside) tcp interface 990 server 990 netmask 255.255.255.255
static (inside,outside) tcp interface ftp-data server ftp-data netmask 255.255.255.255
access-group outside_access_in in interface outside
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
dynamic-access-policy-record DfltAccessPolicy
http server enable
http 192.168.10.0 255.255.255.0 inside
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
crypto ipsec security-association lifetime seconds 28800
crypto ipsec security-association lifetime kilobytes 4608000
telnet 0.0.0.0 0.0.0.0 inside
telnet timeout 5
ssh 192.168.10.0 255.255.255.0 inside
ssh timeout 5
console timeout 0
vpdn group att request dialout pppoe
vpdn group att localname @static.sbcglobal.net
vpdn group att ppp authentication pap
vpdn username @static.sbcglobal.net password *********
dhcpd auto_config outside
threat-detection basic-threat
threat-detection statistics access-list
no threat-detection statistics tcp-intercept
username admin password rcuFiQnIXLd encrypted privilege 15
class-map inspection_default
match default-inspection-traffic
policy-map type inspect dns preset_dns_map
parameters
message-length maximum 512
policy-map global_policy
class inspection_default
inspect dns preset_dns_map
inspect h323 h225
inspect h323 ras
inspect rsh
inspect rtsp
inspect esmtp
inspect sqlnet
inspect skinny
inspect sunrpc
inspect xdmcp
inspect sip
inspect netbios
inspect tftp
inspect ftp
service-policy global_policy global
prompt hostname context
Cryptochecksum:ecb5356a2f5e680b
: end
I am programing the router with ASDM so if you could tell me what i need to do from the GUI to fix this.Dan,
Looking at the output,
Status: Resolving address of domain.com
Status: Connecting to ExternalIP:990...
Status: Connection established, initializing TLS...
Status: Verifying certificate...
Status: TLS/SSL connection established, waiting for welcome message...
This looks like FTPS which is not supported on the ASA. You can workaround it by trying to connect using Active mode from the outside instead of PSV.
You can find more info here:
https://supportforums.cisco.com/docs/DOC-23206
Mike
Maybe you are looking for
-
Just updated to Yosemite, can't update or uninstall adobe flash, system hangs
Just updated to Yosemite, can't update or uninstall adobe flash, system hangs, have to force quit,. Is this a problem with the new operating system and how do I fix this?
-
Some UIMessages not received while C# GUI is open
I have a sequence file that has a front end GUI written in C#. When the MainSequence is run, there is a sequence call step to show the C# GUI using a new thread. The GUI is used to select which other sequences to run in the sequence file as well as d
-
How to use an existing remote database instance?
Hi, is it possible to use an existing remote database instance for installation of Solution Manager? Our dba has setup an empty database instance on a hpux oracle cluster for me and I don´t know how to tell the SAPinst during the installation of the
-
Please tell me... we r maintained three transalation types in which 1. document date 2. posting date 3. transalation date. I know document date and posting date, but i am in confuse about the Transalation Date. Let it be conform what is the importanc
-
Dependency injection and inheritance
Given: class abstract AbstractFoo MyObject obj; class ConcreteFoo extends AbstractFoo Now, I'd like to declare @EJB on "MyObject obj" but AbstractFoo is extended by other subclasses on the client end (outside the container) and so I don't want them t