We are trying to do some discovery on our EMC Celerra (NS480) systems to see if anyone is connecting to it with FTP for a migration project we have going. Or original array support person is no longer with us and of course this project and work was dropped on my lap. Any guidance or help would be greatly appreciated.
Information I am looking for is:
What local accounts are created for ftp access to the systems?
Where is their home folder?
Is there ftp services or connection logs we can reference to get history of:
i don't think Celerra will log FTP access by default (maybe there is a way to enable more verbose auditing but i don't know). The manual should give you pointers where to look for the actual ftp configuration.
I have looked through that and don't see anything in that pdf telling me where the log files are. and when I run the server_ftp.... -info command there is nothing in there telling me where the logs files are located. I have also tried referencing the document titled "using ftp on celerra" and that didn't help either....
Yes, ftp services are enabled and running see "server_ftp" output below. In addition I confirmed with our iseries group that they are ftp'ing to this system and have the account they are logging in with and what directory they are getting/putting data too. Problem is there is probably a hundred or so processes doing this and they are all not documented "of course". So it has fail back to me to tell people what is happening with our system and when people are logging on to it with FTP.
Is there anyway we can turn on FTP logging? Also I cannot get the server_user command to work either I keep getting a command not found error message. so am assuming I am using the wrong command. Just can't find the right one to figure out the user home folder stuff too...
Starting to wish we would have never setup FTP Services to this system. There is no way to track what is going with it. I guess I am going to have to resort to network traces...
Rainer_EMC
6 Operator
•
8645 Posts
2364
0
Posted August 22nd, 2014 07:00
server_mount