> This is my first post on the listserv - excuse any formatting errors.
>
> I am attempting to debug why out of 6 lpars running the supposed same
config from
> what I can see, I cannot enter passive mode on one of the lpars during an
FTP session.
>
> The error that I am getting when I debug the trace on for FTPD1 and the
error is(The
> hash's represent my ID) :
>
> BPXF024I (######) Dec 14 16:36:04 ftps[50659948]: SR2055 pasv:
> listen() failed - EDC8112I Operation not supported on socket.
> (errno2=0x744C7332) .
>
> BPXF024I (######) Dec 14 16:36:04 ftps[50659948]: SR3397 reply: -->
> 425 Can't open passive connection..
>
> I will continue to dig through manuals.
>
> Thanks,
>
> Ryan Henrichon
>
>
Looking in IBMLINK I found the following. Maybe it applies.
Also, there is a TCPIP Newsgroup you may wish to join
----------------------------------------------------------------------
For IBMTCP-L subscribe / signoff / archive access instructions, send email
to lists...@vm.marist.edu with the message: INFO IBMTCP-L
Source..........: CA ASKQQA
Last updated....: 20091203
Abstract........: FTP can't open passive connection in DV
IPA environmen
TITLE: FTP can't open a passive data connection on a DVIPA.
USERS: Communications Server dynamic VIPA z/OS 5655HAL00
PROBLEM SUMMARY:
FTP server gives 425 Can't open passive connection to FTP clients when
connecting to a dynamic (not distributed) VIPA.
SOLUTION:
Code SYSPLEXPORTS, even though you're not distributing anything.
PROBLEM DETAILS:
Hi IBM;
I'm having a problem. We have a system with a home VIPA 10.170.128.30
and a VIPADEFINE ip of 10.170.128.32.
When I FTP to 10.170.128.30 and go to PASV mode I get
227 Entering Passive Mode (10,170,128,30,12,90)
When I ftp to 10.170.128.32 I get
425 Can't open passive connection.
Why?
Hi Customer;
Thanks for using Q&A Support.
Is that address distributed?
I'd like to have a look at an FTP debug trace. Please add the
activate an FTPD server trace using the following command:
MODIFY ftpjobname,DEBUG=(ALL)
Recreate the failure. Then issue:
MODIFY ftpjobname,DEBUG=(NONE)
This will turn of the trace. Output goes to syslogd. You can e-mail the
trace.
Thanks and regards -- Matt
Hi IBM;
Yes - 10.170.128.32 is distributed, but not for port 21.
VIPADEFINE 255.255.255.0 10.170.128.32
VIPADISTRIBUTE 10.170.128.32 port 23 3000 3006 3011 3012
DESTIP 10.170.230.227 10.170.230.228
I ran the ftp trace and it looks like ftp is trying to get an
ephemeral Port. but port 21 is not distributed?
Hi Customer;
ftps[67305701]: SR1501 setEphemeralPortRange: entered
ftps[67305701]: SR1823 pasv: listen() failed - EDC8112I Operation not
supported on socket. (errno2=0x744C7332)
This is a SYSPLEXPORTS not defined error, but since this port is
not distributed, not sure why this is issued.
I conferred with development: even though you are not distributing
port 21, you still need SYSPLEXPORTS in order to track ephemeral port
assignments on a DVIPA. This makes sense: if your DVIPA moves to a new
LPAR, it needs to make sure any new ephemeral ports continue to be
unique.
Please let us know if we can clarify anything.
Hi IBM;
Thanks for the explanation.
Lizette
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
