Disable GSSAPI when using an FTP client?


 
Thread Tools Search this Thread
Operating Systems HP-UX Disable GSSAPI when using an FTP client?
# 1  
Old 08-30-2013
Disable GSSAPI when using an FTP client?

We have two HP-UX machines, both are B.11.31.

When I FTP from the HP-UX boxes to a remote IBM server,-

HP-UX 1:
Code:
Connected to xxxx.
220-FTPD1 IBM FTP CS V1R12 at R2, 12:24:39 on 2013-08-30.
220 Connection will close if idle for more than 15 minutes.
Name (xxxx:user):

HP-UX 2:
Code:
Connected to xxxx.
220-FTPD1 IBM FTP CS V1R12 at R2, 12:25:02 on 2013-08-30.
220 Connection will close if idle for more than 15 minutes.
Trying GSSAPI...
GSSAPI rejected as security mechanism.
*** Using plaintext user and password ***
Name (xxxx:user):

inetsvcs_sec status shows: kerberos disabled (which is supposed to disable sis for FTP).

I can find no ftp client configuration files and I am not passing any options to ftp.

Q1: Why is one trying GSSAPI and the other not?
Q2: How do you disable the GSSAPI with ftp?

Last edited by Scott; 08-31-2013 at 02:02 PM.. Reason: Please use code tags
# 2  
Old 08-31-2013
GSSAPI is an interface tool. It allows C code or java code to access disparate authentication systems using an identical methodology. It often runs against Kerberos.

I do not know definitely if there is a way to "turn off" something like this, but I do not believe you can. The cause is an underlying security setting for system #2. Are you using LDAP or Active Directory? Consider getting your AD folks to look at what the user account settings are with regard to the HPUX box. The authentication in your example did NOT fail, BTW.
This User Gave Thanks to jim mcnamara For This Post:
# 3  
Old 09-03-2013
If we are not using LDAP or AD, just plain logins, where would that account setting likely be?

I looked in .profile and saw nothing.
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. Solaris

Disable create subdirectory Solaris 8 ftp

Running Solaris 10. For FTP users or groups, I want to prevent them from creating new subdirectories, but I still want to allow them to create, upload, download files from the subdirs. I understand how to set the general file/directory permissions -- read, write, execute. So for a directory,... (0 Replies)
Discussion started by: themonman
0 Replies

2. Red Hat

GSSAPI Error FTP

Hi Experts, While trying ftp from newly setup Linux box it is giving following error. GSSAPI error major:Unspecified GSS failure.Minor code may provide more information GSSAPI error minor:Unknown code krb5 195 GSSAPI error:initializing context GSSAPI authntication failed 504 AUTH... (1 Reply)
Discussion started by: sai_2507
1 Replies

3. HP-UX

FTP service Enable/Disable

hi everybody, I can easily enable /disable the FTP service from SAM, how can I do this via command line? using inetd? how? cheers, messi (1 Reply)
Discussion started by: messi777
1 Replies

4. Solaris

LDAP client config GSSAPI

Configure ldap client: I have configured my ldapclient with the AuthenticationMethod=simple and with the credentialLevel=proxy. However, as soon as i want to set the AuthenticationMethod=sasl/GSSAPI, and credentiallevel=self, then it fails to configure. Kerberos is already setup successfully. The... (0 Replies)
Discussion started by: Henk Trumpie
0 Replies

5. Solaris

Disable ftp

HI all, I am using Solaris 10 and would like to know if it possible to disable ftp use for a single entry in my /etc/hosts file. Thanks (5 Replies)
Discussion started by: pxy2d1
5 Replies

6. AIX

FTP access disable in AIX

Hello, I have AIX machine communication to mainframe machine. From AIX machine, i have to use always SSH communication. For this, i have created SSH tunnel in AIX machine and using FTP with SSH. Now both connections are working: 1) only FTP to mainframe machine 2) create SSH and do FTP... (3 Replies)
Discussion started by: balareddy
3 Replies

7. UNIX for Dummies Questions & Answers

Telnet Server FTP warning messages 500 'AUTH GSSAPI' how to resolve??

These are the warning messages I am getting but the FTP works fine.How do I get rid of these? 220 FTP server (SunOS 5.8) ready. 500 'AUTH GSSAPI': command not understood. 500 'AUTH KERBEROS_V4': command not understood. KERBEROS_V4 rejected as an authentication type (0 Replies)
Discussion started by: csviking
0 Replies

8. UNIX for Advanced & Expert Users

Disable ftp on web browser

Hi there, how can i disable the possibility of accessing hp-ux with ftp in the web browser? is there any way to do this? thanks (2 Replies)
Discussion started by: vascobrito
2 Replies

9. UNIX for Dummies Questions & Answers

Disable anonymous ftp????

How do i disable anonymous ftp on a unix system?????? Please help!!!!!!!1 (2 Replies)
Discussion started by: rrivas
2 Replies

10. UNIX for Dummies Questions & Answers

FTP Client

Is there any ftp CLIENT(either freeware or sharware) can support passive mode else ncftp? Thanks! (2 Replies)
Discussion started by: coolmans
2 Replies
Login or Register to Ask a Question

Featured Tech Videos