Downloading a file over a secure FTP link - receiving errors

farmer · Post by **farmer** » Mon Nov 01, 2004 1:47 pm

Errors encountered : Failed to decrypt security message and
550 Operation is not supported under Connect:Enterprise FTP server.

If the file to pickup is under 30K in size...it works fine. But, if it is over 30K then these error messages encountered.

I appreciate any assistance with this matter..

Thanks
Greg Bronk
Programmer / Analyst
Mayo Foundation
(507) 266-1186

Example log:

27 Entering Passive Mode (170,135,124,70,82,10)
RETR l300.lbm01d7g.x320
Connect socket #820 to 170.135.124.70, port 21002...
150 Opening BINARY mode data connection for l300.lbm01d7g.x320.
Failed to decrypt security message.
426 Data connection: Error 0.
TYPE I

and

00 PROT P OK, data channel will be secured.
PASV
227 Entering Passive Mode (170,135,124,70,82,11)
REST 30720
550 Operation is not supported under Connect:Enterprise FTP server.
TYPE I
200 Type set to I.

farmer · Post by **farmer** » Mon Nov 01, 2004 4:36 pm

The FTP is coming from a UNIX box. I have tried both Open and Windows SSL .... Windows SSL appears to be working the best.

farmer · Post by **farmer** » Thu Nov 04, 2004 3:58 pm

This thing is really acting weird. Sometimes I can connect and pull the file down - and most of the time I get the errors listed in the log below. I did put in the changes Chris suggested...please let me know your thoughts.
Thanks
Greg

230 Connect:Enterprise UNIX login ok, access restrictions apply.

SYST

215 UNKNOWN Type: L8

CWD /

250 CWD to '/' successful

PWD

257 "/" is current directory.

CWD /ce206804/

250 CWD command successful.

PASV

227 Entering Passive Mode (170,135,125,70,82,8)

LIST

Connect socket #88 to 170.135.125.70, port 21000...150 Opening ASCII mode data connection for .

226 Transfer complete.

Transferred 415 bytes in 0.008 seconds

TYPE I

200 Type set to I.

PASV

227 Entering Passive Mode (170,135,125,70,82,9)

RETR l300.lbm01d7g.x320

Connect socket #88 to 170.135.125.70, port 21001...150 Opening BINARY mode data connection for l300.lbm01d7g.x320.

Failed to decrypt security message.426 Data connection: Error 0.

Total uploaded files: 0

Total uploaded data: 0

Total downloaded files: 0

Total downloaded data: 30 KB

farmer · Post by **farmer** » Thu Nov 04, 2004 6:36 pm

Started on Thursday November 04, 2004 at 09:56:AMConnect socket #568 to 170.135.125.70, port 20021...220 <<<Connect:Enterprise UNIX 2.1.00 Secure FTP>>> at rsceprod FTP server ready. Time = 09:56:09

AUTH SSL

234 AUTH TLS-P/SSL OK.

dtw01 · Post by **dtw01** » Fri Nov 12, 2004 3:33 pm

Chris, The latest error that we are receving is as follows:

Started on Friday November 12, 2004 at 06:15:AMConnect socket #564 to 170.135.125.70, port 20021...220 <<<Connect:Enterprise UNIX 2.1.00 Secure FTP>>> at rsceprod FTP server ready. Time = 06:15:05
AUTH SSL
234 AUTH TLS-P/SSL OK.
SSLv3, cipher TLSv1/SSLv3 (DES-CBC3-SHA) - 168 bitUSER ce206800
331 Password required for ce206800.
PASS **********
230 Connect:Enterprise UNIX login ok, access restrictions apply.
SYST
215 UNKNOWN Type: L8
CWD /
250 CWD to '/' successful
PWD
257 "/" is current directory.
CWD /ce206803/
250 CWD command successful.
PASV
227 Entering Passive Mode (170,135,125,70,82,10)
LIST
Connect socket #532 to 170.135.125.70, port 21002...SSLv3, cipher TLSv1/SSLv3 (DES-CBC3-SHA) - 168 bit150 Opening ASCII mode data connection for .
226 Transfer complete.
Transferred 339 bytes in 0.016 seconds
TYPE I
200 Type set to I.
PASV
227 Entering Passive Mode (170,135,125,70,82,11)
RETR l300.lbm01d7h.x320
Connect socket #532 to 170.135.125.70, port 21003...550 *** ERROR *** NO BATCHES FOR TRANSMISSION
Total uploaded files: 0
Total uploaded data: 0
Total downloaded files: 0
Total downloaded data: 0

There are currently 4 files in the directory with the name l300.lbm01d7h.x320 and have their attributes changed so that we can't download them a second time. So in a way it is correct in that we shouldn't be picking up any files, but the application shouldn't report this as a 550 error and abend with a return code of 10.

Here is what we see in the directory.

FileName Size Date Permissions

l300.lbm01d7h.x320 1KB 11/09/04 -ART------TCP
l300.lbm01d7h.x320 3KB 11/10/04 -ART------TCP
l300.lbm01d7h.x320 7KB 11/05/04 -ART------TCP
l300.lbm01d7h.x320 10KB 11/08/04 -ART------TCP

Any thoughts on what we should try?

btw- we are running build 1398.

dtw01 · Post by **dtw01** » Fri Nov 12, 2004 5:23 pm

I'm only aware of it being a problem for this last scenario. I think it should be made to act consistentently as with other FTP sessions in that it doesn't report an error if there are no files to download.

I think the other issue that "farmer" - Greg mentioned earlier may have been resolved with us adding the -O parameter from the command line.

dtw01 · Post by **dtw01** » Fri Nov 12, 2004 6:19 pm

Our system is pretty flexible and I'm sure we can work around the problem if we have to. I wonder why this particular server treats this as a 550 error though and other servers do not. I wonder if it would make any difference if we used a wild card instead of the fixed name for the download?