IBM RELEASE 7.3 Computer Drive User Manual


 
etc/hpss.keytab.
HPSS_UNIX_KEYTAB_FILE specifies the name of the file containing the security keys necessary for
successfully initializing the Client API for UNIX authentication. The default is
auth_keytab:/var/hpss/etc/hpss.unix.keytab.
14.2. FTP/PFTP Daemon Configuration
The pftp_client binary is an enhanced ftp client providing parallel data transfer facilities, HPSS specific
features, and transfer of files greater than 4GB. The HPSS binary, hpss_pftpd, is an enhanced FTP
Server facilitating parallel transfers into HPSS. This binary ONLY functions with HPSS. If you are
using an "ftp" binary or a "pftp_client" binary to access HPSS the site MUST run the hpss_pftpd binary.
The hpss_pftpd binary provides FTP services for both the standard system FTP client and the parallel-
enhanced HPSS pftp_client. NOTE: NOT every feature of every system FTP client will be honored by
the hpss_pftpd. Additionally, system FTP clients cannot take advantage of the parallel transfer features
nor the increased file size capacity provided by the hpss_pftpd. If a site wishes to provide FTP services
to both the system FTP Server, ftpd, and HPSS, hpss_pftpd, it will be necessary to set up the two services
to listen on different ports.
There are four steps that must be performed prior to using the FTP user interface to transfer HPSS data:
1. Verifying the FTP Initial Configuration
2. Configuring the FTP Daemon Syslog
3. Defining the FTP Access
4. Creating FTP Users
These steps are described in more detail in the paragraphs that follow.
Step 1. Verifying the FTP Configuration
During the HPSS infrastructure configuration phase, the following files were created or modified by the
mkhpss script:
/etc/services: Verify that the hpssftp and hpssftp-data entries were added correctly. Ports 20 and
21 are the ports of choice to prevent having to educate every user to alternate ports. By default,
mkhpss uses ports 4020/4021. It may be necessary to move the existing ftp and ftp-data to other
ports when assigning the hpssftp and hpssftp-data to ports 20/21.
/etc/inetd.conf or /etc/xinetd.conf: Verify that the hpssftp entry was added correctly. The only
flag that has relevance is the -cFileName flag which specifies an alternative HPSS.conf file
(located in /var/hpss/etc).
Refresh inetd or restart xinetd after making these changes:
% refresh -s inetd # (AIX only)
% /etc/init.d/xinetd restart # (Linux only)
A “TCP Wrapper” application may be used for initiating the HPSS PFTP Daemon, to make it more
secure, however such a program is not provided by the HPSS project.
The file /var/hpss/etc/HPSS.conf provides the options for both an HPSS Parallel FTP Daemon and a
HPSS Management Guide November 2009
Release 7.3 (Revision 1.0) 341