coryb1

updated

12 years ago

C

coryb1

21 Posts

0

4988

August 20th, 2014 08:00

Celerra FTP service questions

We are trying to do some discovery on our EMC Celerra (NS480) systems to see if anyone is connecting to it with FTP for a migration project we have going.  Or original array support person is no longer with us and of course this project and work was dropped on my lap.  Any guidance or help would be greatly appreciated.

Information I am looking for is:

  1. What local accounts are created for ftp access to the systems?
    1. Where is their home folder?
  2. Is there ftp services or connection logs we can reference to get history  of:
    1. Who is connecting?
    2. When are they connecting?
    3. What folder locations are they going to?
    4. Where are they connecting from?

Thanks

Cory B.

  • Rainer_EMC

    6 Operator

    •

    8645 Posts

    2364

    0

    Posted August 22nd, 2014 07:00

    server_mount

  • dynamox

    11 Legend

    •

    20419 Posts

    •

    87439 Points

    1747

    0

    Posted August 20th, 2014 08:00

    i would look at this document and kind of back trace the config

    http://www.uccx.net/wp-content/uploads/2012/06/VNX-FTP-TFTP-and-SFTP.pdf

  • dynamox

    11 Legend

    •

    20419 Posts

    •

    87439 Points

    1747

    0

    Posted August 20th, 2014 09:00

    i don't think Celerra will log FTP access by default (maybe there is a way to enable more verbose auditing but i don't know).  The manual should give you pointers where to look for the actual ftp configuration.

  • coryb1

    21 Posts

    1747

    0

    Posted August 20th, 2014 09:00

    That is the problem.  To be blunt the manual is not very helpful.  It isn't giving very good pointers for what I am looking for.

  • coryb1

    21 Posts

    1747

    0

    Posted August 20th, 2014 09:00

    I have looked through that and don't see anything in that pdf telling me where the log files are.  and when I run the server_ftp.... -info command there is nothing in there telling me where the logs files are located.  I have also tried referencing the document titled "using ftp on celerra" and that didn't help either....

  • Rainer_EMC

    6 Operator

    •

    8645 Posts

    1747

    0

    Posted August 20th, 2014 10:00

    There is no extra log file for ftp

    Are you sure you actually have ftp enabled ?

    By default its off

    We might log ftp logins into the data mover log (see server_log) but I’m not sure

  • Rainer_EMC

    6 Operator

    •

    8645 Posts

    1747

    0

    Posted August 20th, 2014 10:00

    Logging – maybe at a specific debug level – you would have to ask customer service if they can find one

    You could also do a network trace and filter on ftp

    Do you have a /nas/sbin/server_user command ?

    Make sure you use the correct manual for your release – ftp has changed a bit over the last years

  • coryb1

    21 Posts

    1747

    0

    Posted August 20th, 2014 10:00

    Yes, ftp services are enabled and running see "server_ftp" output below.  In addition I confirmed with our iseries group that they are ftp'ing to this system and have the account they are logging in with and what directory they are getting/putting data too.  Problem is there is probably a hundred or so processes doing this and they are all not documented "of course".  So it has fail back to me to tell people what is happening with our system and when people are logging on to it with FTP.

    Is there anyway we can turn on FTP logging?  Also I cannot get the server_user command to work either I keep getting a command not found error message.  so am assuming I am using the wrong command.  Just can't find the right one to figure out the user home folder stuff too...

    server_ftp server_2 -info

    server_2 : done

    FTPD CONFIGURATION

    ==================

    State                      : running

    Control Port               : 21

    Data Port                  : 20

    Default dir                : /

    Home dir                   : disable

    Keepalive                  : 1

    High watermark             : 65536

    Low watermark              : 32768

    Timeout                    : 900

    Max timeout                : 7200

    Read size                  : 8192

    Write size                 : 49152

    Umask                      : 27

    Max connection             : 65535

    SSL CONFIGURATION

    =================

    Control channel mode       : disable

    Data channel mode          : disable

    Persona                    : default

    Protocol                   : default

    Cipher                     : default

    Control port               : 990

    Data port                  : 989

  • dynamox

    11 Legend

    •

    20419 Posts

    •

    87439 Points

    1747

    0

    Posted August 20th, 2014 11:00

    not for ftp protocol, SMB yes

  • coryb1

    21 Posts

    815

    0

    Posted August 20th, 2014 11:00

    Starting to wish we would have never setup FTP Services to this system.  There is no way to track what is going with it.  I guess I am going to have to resort to network traces...