Zones and proftpd

Hello,
I want to have some informations about proftpd installation with solaris. Actually I have installed proftpd and it is working fine. The problem is that I can't connect me on it. I have the proftpd message during the connection on proftpd with filezilla but my user failed. I don't want anonymous connexions. proftpd is installed on a special zone with a virtual network.I have created a user on the special zone to connect to the ftp server.
useradd �d /export/toto -m �c � Mister toto� toto
passwd -r files toto
I what to now if the user must be created on the special zone and not in the global zone and if the useradd command is correct?. My user is not in the file /etc/ftpd/ftpusers.What can be the problem?
Thanks
PS : sorry for my english

I'm having a problem with proftpd on Solaris 10 with SMF.
I am using ProFTPD Version 1.3.0 from blastwave.
I have modified the inetadm setting so that exec="/opt/csw/sbin/in.proftpd"
If I reboot my zone the first ftp connection will fail with a "421 Service not available, remote server has closed connection." message.
An immediate retry to connect to the ftp server works, and all subsequent connections work. By looking at ps output it seems that the first (failed) connection attempt starts an in.proftpd daemon which stays running and then parents in.proftpd daemons for subsequent connections. If I create a start script to start the first in.proftpd daemon during boot (/etc/rc3.d/S90proftpd) then things work alright. The question is, why won't inetd just start in.proftpd like it should to respond to the first request?
In my proftpd.conf file I have "ServerType standalone" If I set "ServerType inetd" then it just doesn't work at all.
bash-3.00# inetadm -l ftp
SCOPE NAME=VALUE
name="ftp"
endpoint_type="stream"
proto="tcp6" <----- If I change this to "tcp" then it doesn't work at all
isrpc=FALSE
wait=FALSE
exec="/opt/csw/sbin/in.proftpd"
user="root"
default bind_addr=""
default bind_fail_max=-1
default bind_fail_interval=-1
default max_con_rate=-1
default max_copies=-1
default con_rate_offline=-1
default failrate_cnt=40
default failrate_interval=60
default inherit_env=TRUE
default tcp_trace=FALSE
default tcp_wrappers=FALSE

Similar Messages

HT1657 I downloaded a movie from iTunes on my iPhone 4S, went out of the wifi zone and now my movie is no where to be found. I can't find it on my iPhone, Mac or iPad. Where is it?

I downloaded a movie from iTunes on my iPhone 4S, went out of the wifi zone and now my movie is no where to be found. I can't find it on my iPhone, Mac or iPad. Where is it?

Sounds like the movie didn't finish downloading before the Wi-Fi signal dropping ...
Try re downloading. You won't be charged again.
Downloading past purchases from the App Store, iBookstore, and iTunes Store

Firm Zone and Trade off Zone in Scheduling Agreement

Dear All
Please explain in detailed the concept of Firm Zone and Trade off Zone in Scheduling Agreement, and it's effects in MRP run, i.e. If i take a MRP run for a material whci is having firm zone as 30 days and trade off zone as 60 days then what will be the result of MRP. The Material MRP type is VB
Thanks and Regards
Manoj

Hi,
Firm zone is the time frame in which you cannot change your orders (schedule lines) that you have ordered from a vendor in any way (Date change nor quantity change).
Trade off zone is time frame within which you can make changes to your procurement proposals, these changes are acceptable from vendor's side.
These time frames are agreed with the Vendor and then inserted for each scheduling agreement in 'Additional data'.
For your example if you take firm zone 30 days and trade-off zone 60 days, the check starts from current day on which MRP runs. For exampe current day is 1st Oct, all the procurement proposals with delivery date within 30 days that is till 1st September are firm orders, which MRP will not change in any case (You can find such orders with * in front of them in MD04 list). Beyond 1st september they are in trade off zone, in which MRP can modify them.
MRP types (VB in your case) have no correlation with these zones.
Amit G

I'm trying to burn a dvd from idvd but I keep getting error message, broken assets, but when I check my drop zones and their content there's no error messages on any of them?

I'm trying to burn a dvd from idvd but I keep getting error message, broken assets, but when I check my drop zones and their content there's no error messages on any of them?

Hi
And if You change view - in main "window/view field" so that You see the box-plot structure.
No exclamation marks there either ?
and non at the front page ?
iDVD do not copy Your material - only points to where it is stored. So if on any external hard disks, USB-memories, CDs or DVDs are missing - assetts are broken.
Or if You changed location of any material or directed iPhoto or iTunes or GarageBand to a new Library - Then iMovie/iDVD also get's lost.
Yours Bengt W

Is it possible to patch Global Zone and only specific Non-Global Zones?

Hi Champs,
Is it possible to patch Global Zone and only specific Non-Global Zones? Idea is to patch DEV-zones only on the system & test applications and then patch only the STG-zones on same server!
Not sure if it is possible but just throwing a question...
Cheers,
Nitin

M10vir wrote:
Yes, if you have branded (non-sparse) zone!Branded zones and sparse zones don't have the relation that you imply. In Solaris 10, native zones can be sparse or whole-root (non-sparse, as you say). Zones that are not native zones are branded zones. Branded zones on Solaris 10 include Solaris Legacy Containers, previously known as Solaris 8 Containers and Solaris 9 Containers. That add-on product allows you to run Solaris 8 and Solaris 9 application environments under a thin layer of virtualization provided by the brands framework. solaris8 and solaris9 branded zones can be patched independently of each other and of the global zone.
Solaris 11 has no "native zones" - all zones use the brands framework. The "solaris" brand does no emulation and in that respect is very similar to native zones on Solaris 10. Solaris 11 also provides Solaris 10 Zones via the solaris10 brand. This allows zones or the global zone from a Solaris 10 system to be transferred to a Solaris 11 system and run as solaris10 zones. When running on Solaris 11, solaris10 zones can each be patched independently from each other and the Solaris 11 global zone. Technically, Solaris 11 doesn't have patches - it just has newer versions of packages to which the system is updated.

To break out of a non-global zone and become root user in the global zone

Hi folks
"to break out of a non-global zone and become root user in the global zone through a kernel bug exploit"
Is this possible and has SUN allready a fix/workaround/patch for that?
Cheers

Is it possible there's a bug in the kernel? Sure.
Someone would need to find and identify such a bug before it could be fixed. I've not heard of the discovery of a bug like this. You could check the bug database at www.opensolaris.org.
Darren

Can external users change their language, time zone, and locale settings?

Hi,
We’re migrating our hosts from WebEx cloud to our on-prem solution right now (CWMS 1.5.1.323.A).
We’ve learned that CWMS 1.5 does not provide an online address book where hosts could customize language, time zone, and locale settings for their external attendees.
Do external users have any chance at all to change their language, time zone and locale settings individually?
Thank you,
Helge

Hi Dejan,
"external users" are those participants, who do not have an LDAP account in our deployment, since they are not intendet to act as hosts: our stakeholders, partners, customers, clients.
It looks, as if these people would stick to the systems' default language / time zone / locale.
We are wondering if there might be a CWMS-component like this:
https://artcom.webex.com/cmp0307l/webcomponents/widget/preference.do?serviceType=MC&siteurl=artcom&target=Page&backUrl=%2Fmw0307l%2Fmywebex%2Fdefault.do%3Fsiteurl%3Dartcom%26service%3D1
to allow those "extenal" participants to make their adjustments.
Thank you,
Helge

Dedicating physical CPUs to a zone and migrating a Solaris 8 box to a zone?

If I have a machine with a large number of cores (say 24), and dedicate 4 of the CPUs to the zone, psrinfo shows the number of CPU's dedicated to that zone as 4, however, the global zone still shows 24.
Does this mean that if there's enough stuff running in global that it can preempt the stuff running inside the zone? The concern here is that the stuff we want to run in the zone is a bit more critical than in global, so we wouldn't want global to eat up CPU resources of the zone. (I suppose we could repurpose the stuff running inside global and the zone, but then we'd get the reverse isolation issue at some other point.)
The other questions is that there's an old E450 running Solaris 8 and it's got a bunch of stuff installed on it. Would it be possible to somehow convert all the software and data of that E450 into a container or zone and run that on a more modern machine - say a T5420 which runs Solaris 10 (without upgrading the stuff running under the E450 to Solaris 10?)

you can create a flar archive of the entire system and then import it as a solaris 8 zone. if you are doing this on a cool threads system, beware of the processor. it does well with threads. if what you run on the 450 is mostly single threaded or needs a decent cpu, the coolthreads servers are not a good fit.

Time Zone and WLS6SP1 and date time problem

Hi,
We are having our development WebLogic server on a Solaris 2.8 machine. The time
zone of that machine is GMT+5
How ever when we start weblogic in the telnet console, we see this
LD_LIBRARY_PATH=.......
<Jul 5, 2001 1:19:46 AM GMT-05:00> <Info> <Security> <Getting boot password from
user.>
Enter password to boot WebLogic server:
It shows the time as GMT-5.
All our application client machines are at GMT+5.30.So when we update from our
application, the datetime fields go as one day lesser(we have our own serializable
component which does the updating). If i enter Dec 10 2000 in our applet client
and try updating, it goes as Dec 9 2000 into the database.
We tried on a NT machine which had GMT+5.30 as the time zone and it showed GMT+5.30
while starting weblogic. And the dates are updated properly.
Does WLS on Solaris take the timezone,etc from some other place?
Is there any workaround for this?
Thanks in Advance,
Ramkumar

We had the same thing using ReflectionX to connect. Users connection with Telnet
caused weblogic to log with the default timezone ( which included the effects of
daylight savings time ), while those users who connected with Rexec caused weblogic
to use GMT in its logging. This was with weblogic 6.0 sp2
"Joe" <[email protected].spam.com> wrote:
>
How are you starting up your server? We had a similar situation at our
site, and
it was due to the fact that we were using exceed to log into our sun box.
Exceed
was grabbing the users timezone info off of his/her local windows box.
is this what is happening for you?
"Ramkumar" <[email protected]> wrote:
Hi,
We are having our development WebLogic server on a Solaris 2.8 machine.
The time
zone of that machine is GMT+5
How ever when we start weblogic in the telnet console, we see this
LD_LIBRARY_PATH=.......
<Jul 5, 2001 1:19:46 AM GMT-05:00> <Info> <Security> <Getting boot password
from
user.>
Enter password to boot WebLogic server:
It shows the time as GMT-5.
All our application client machines are at GMT+5.30.So when we update
from our
application, the datetime fields go as one day lesser(we have our own
serializable
component which does the updating). If i enter Dec 10 2000 in our applet
client
and try updating, it goes as Dec 9 2000 into the database.
We tried on a NT machine which had GMT+5.30 as the time zone and it
showed GMT+5.30
while starting weblogic. And the dates are updated properly.
Does WLS on Solaris take the timezone,etc from some other place?
Is there any workaround for this?
Thanks in Advance,
Ramkumar

Jumbo Frames within Solaris 10 zones and multiple interfaces...

We have Jumbo Frames working in the Global Zone, and have the MaxFrameSize=3,3,3 etc...
We also have our AGGR's built correctly and defined aggr1:1 and aggr1:2
the problem is on boot-up, if all the name files (hostname.aggr1 and hostname.aggr1:1) are defined in the /etc directory, then you can't start the zones....?
and if you place the files in the /export/zones/<machinename>/root/etc/ directory, than the interfaces do not start-up automatically..... ?
So If I want all the interfaces in the global zone to be seen by the other zones, and for the interfaces to come live when the zones are booted.... where do the hostname.interface files live....???

Darren:
I understand where you're coming from from a technical perspective. But there is a way you could work around it.
For argument's sake, zones a+b with e1000g0 - e1000g3
From an implementation perspective, what's to stop you from:
e1000g0 / e1000g1 shared between all
e1000g2 plumbed at global, only assigned to zone a.
e1000g3 plumbed at global, only assigned to zone b.
You can certainly have an empty interface file (i.e. cp /dev/null /etc/hostname.e1000g2 ; cp /dev/null /etc/hostname.e1000g3). The interface will plumb but have no IP information configured.
This doesn't give truly exclusive interfaces to either zone, but it operates effectively as though it were.
Warning: I haven't actually tested this, but I see no reason that it wouldn't work.

Whole root or sparse root zones and patching

Hi all,
A while back, I did some cluster patching tests on a system with only sparse root zones, and one with whole root zones...and I seem to recall that the patch time was about equal which surprised me. I had thought the sparse root model mainly is patching the global zone, and even though patchadd may need to run through the sparse NGZ's...that it isn't doing much other than updating /var/sadm info in the NGZ's.
Has anyone seen this to be true or if there are major patching improvements using a "sparse" root NGZ model over a "whole" root model?
thanks much.

My testing showed the same results and I was a bit surprised as well. As I dug into it further my understanding was that the majority of the patch application time goes into figuring out what to patch, not actually copying files around. That work must be done for the sparse zones in the same way as for the full root zones, we just save the few milliseconds of actually backing up and replacing the file.
I suspect there is a large amount of slack that could be optimized in the patching process (both with and without zones), but I don't understand it nearly well enough to say that with any authority.

Whole root zone and packages

I installed in my global zone the "Entire Distribution" of Solaris 10 and some software from Companion CD.
Now I would like install a "whole root zone" with a basic set of packages (like "End User Distribution") and without the packages
from the Companion CD.
I can use pkgrm to delete the unnecessary packages in my whole root zone.
But is there a more elegant way to get a whole root zone only with basic packages?
Regards. P.

The "easy" way would be to do a minimal installation in the Global zone and then install the required services in the local zone.
HTH,
Roger S.

Non-global zones and unix sockets

Hello, I have a problem with local zones and unix socket sharing. I've created directory in global zone for ex. /zones/shared. Added it to zones via 'add fs, type=lofs' . In one zone I'm putting mysql socket in it and I want that other local zones could use it. Is it possible to share socket between zones?
After all my experiments I'm always getting 'can't connect to mysql ... (146)' , 146 is 'connection refused' error.

These services are off-line in the non-global zone, which is why non of the
rc2.d or rc3.d scripts are being run:
offline Dec_12 svc:/milestone/multi-user-server:default
offline Dec_12 svc:/milestone/multi-user:default
Any idea how to enable these, and why they are offline?
Michael
Created a non-global zone on a Solaris 10 box.
Boots up ok and I can login with zlogin.
It doesn't seem to run any of the scripts in
/etc/rc2.d or /etc/rc3.d
I know Solaris 10 uses "Service Management Facility"
for most services now,
but could still run legacy scripts in /etc/init.d ?
Also I can't get sshd to start on the non-global
zone.
# svcs -a |grep ssh2
offline 11:44:58 svc:/network/ssh:default
# svcadm enable -t svc:/network/ssh:default
# svcs -a |grep ssh2
offline 11:44:58 svc:/network/ssh:default
Anyone got any ideas?
Michael

GPO Security Zones and Content Ratings "Modify Settings" buttons are disabled

Task: Trying to modify a GPO so that specific users who logon to Remote Desktop Servers will have a lower Internet security level for Internet Explorer.
We have two Windows Server 2008 Domain Controllers, when I access the GPO using the Group Policy Management Console and Editor on either of the two Domain Controllers, then navigate to User Configuration > Policies > Windows Settings > Internet Explorer
Maintenance > Security > Security Zones and Content Ratings, the available "Modify Settings" buttons are both disabled.
I've read through several forum posts relating to this and the closest solution mentioned was to turn off IE ESC for Administrators on both Domain Controllers. I've done this and it nothing has changed as a result. Is there a way enable the "Modify Settings"
buttons, or is there another way to achieve the task mentioned at the top of this post?

Hi,
We need to import these settings before we modify them.
To import security zones and privacy settings from our computer using IEM:
Click
Import the current security zones and privacy settings
To import content ratings from our computer:
Click
Import the current Content Ratings settings
Regarding how to configure Security Zones and Content Ratings, the following article can be referred to for more information.
Configure Security Zones and Content Ratings
http://technet.microsoft.com/en-us/library/cc772410.aspx
Best regards,
Frank Shen

Coverage Zones and PAC files

Just wondering if anybody has used coverage zones and PAC files to do auth browser configuration.
I'm looking at a global deployment of Content Engines (ACNS 5.1) and would like to set each CE up as a PAC server to respond to a request and direct the user to the nearest CE. So if I'm in Milan I use the Milan CE and when I go to London I use the London CE.
I'm trying to get my head round this in the lab at present and want to get away with not using a Content Router only CE's. Can this be done?
Any experience will be really helpful and I'll post any findings back to this thread.
Thanks
Mark

Here is something that I found. ACNS 5.1 has the new auto proxy-config option which combines coverage zones with a proxy pac file. Essentially, you create a pac file that contains a special macro, and configure the CE (through the CDM GUI) to use that pac file in conjunction with the coverage zone information. Then, when the client requests that pac file from the CE, the CE replaces that macro in the pac file with one (or more) CE names based on the coverage zone that matches the requesting client's IP address. Link to the configuration.
http://www.cisco.com/univercd/cc/td/doc/product/webscale/uce/acns51/deploy51/51router.htm#wp1039339

Zones and proftpd

Similar Messages

Maybe you are looking for