FTP Issue differs from system to system

[former_member545416]

Dear Experts,

I have a scenario where I need to post the files on FTP(eg. FTP IP as 2.2.2.2 22). The program works correct from the SAP development system(eg. IP as 1.1.1.1) and I post the files on port 22. But when the same is tried from SAP quality system(eg. IP as 1.1.1.2) I receive the error as "User as no authorization for the computer 2.2.2.2 22, the same works, if I change the port to 21 in the quality system itself.

I have also maintained the entries of FTP IP in table SAPFTP_SERVERS_V.

Can anyone please suggest, as the Network team is also raising their hand, as it works from the development system?

Thanks & Regards,

Ashish Parwe

[Rashid_Javed]

With reference to your comment

"SAP quality system(eg. IP as 1.1.1.2) I receive the error as "User as no authorization for the computer 2.2.2.2 22, the same works, if I change the port to 21 in the quality system itself."

So you mean, you are able to connect ans send files from QA system to FTP server if you do it using port 21 but could not do it by using port 22 ??

[FredericGirod]

Port 22 should be SSH (and could be SCP)

Ports for ftp is 20/21

Did you ask your basis if there is a firewall ?

[former_member545416]

Dear Rashid Javed, Yes you are right, when I change the port to 21 it works but on port 22 it does not work in the quality system itself.

Dear Frederic Girod, Yes port 22 is a Secure port and the firewall is allowed with the access.

[Rashid_Javed]

Interesting issue. Just to clarify more about the problem:

Can you connect from QA server to this FTP site at server level? Not through ABAP code. Like on the server itself (if its windows/unix system), can you or some basis admin run a telnet/ftp from this QA server to your desired FTP site. It should be tested with both ports (21 and 22).

If you face the same issue from server itself, than the issue is not ABAP but it could be due to some firewall blocking the port. If someone in your network team can use Wireshark, that would be help a lot in analyzing the traffic to find root cause of this issue.

[former_member545416]

Dear Rashid Javed,

I am forwarding your suggestion to the network team. I hope it helps and we overcome the issue.

I will update once I receive any information.

[former_member545416]

Dear Rashid Javed,

I got a reply from Network Team can you please suggest,

Please find the highlighted comments below,

Can you connect from QA server to this FTP site at server level? Not through ABAP code. Like on the server itself (if its windows/unix system), can you or some basis admin run a telnet/ftp from this QA server to your desired FTP site. It should be tested with both ports (21 and 22). >>>>>>> We did check it directly from each of our servers (XXX.XX.XX.121, XXX.XX.XX.124 & XXX.XX.XX.125) and was able to connect successfully to the destination FTP server (XXX.XX.XX.115) over both the ports 21 & 22. Find the required logs below,

filters=[ host XXX.XX.XX.121 and host XXX.XX.XX.115 ]

18.777913 port23 out XXX.XX.XX.115.22 -> XXX.XX.XX..121.55141: syn 2571385502 ack 2706682135

[kashyap_shah3]

Hi Ashish,

Please have a look at SAP Note 2072995, if you haven't already.

Key points from above Note:

- Implement SAP Note 1605054 and 1830024
- Telnet should work to both source and destination ports
- FTP password should not contain any special characters (as a test you could well use Dev password as that's working)
- Ensure SAPFTP_SERVERS table has got correct port detail

Another point to check is TCP/IP RFC SAPFTPA. Again compare that with Dev one as it works there.

Best Regards,
Kashyap Shah

[kashyap_shah3]

In addition, if it's still a problem, please refer SAP Note 2401917 that makes a point to use password no more than 10 characters long.

[former_member545416]

Dear Kashyap Shah, the note suggested by you does not exist now anymore, message while downloading the note in the quality system:- SAP Note 0002072995 does not exist.

[kashyap_shah3]

Hi Ashish,

It's strange as Note very well open for me. I'm attaching text version of it for you.
I've anyway covered what Note states in my reply earlier.

Best Regards,
Kashyap Shah

[kashyap_shah3]

2072995.png

[former_member545416]

Dear Kashyap Shah,

The notes are in cannot implement stage.

[kashyap_shah3]

Hi Ashish,

How about remaining points mentioned earlier (as password length and special character is something I've encoutered myself):

- FTP password should not contain any special characters (as a test you could well use Dev password as that's working)
- Ensure SAPFTP_SERVERS table has got correct port detail

- TCP/IP RFC SAPFTPA comparison with Dev one as it works there.

Best Regards,
Kashyap Shah

[former_member545416]

Dear Kashyap Shah,

Please find my comments on below questions,

- FTP password should not contain any special characters (as a test you could well use Dev password as that's working) - It does have a special character, which works fine on Dev server. The team won't agree to change the password.
- Ensure SAPFTP_SERVERS table has got correct port detail - Yes I have maintained the correct entries of IP and port number

- TCP/IP RFC SAPFTPA comparison with Dev one as it works there. - Compared, exact same.

Thanks & Regards,

Ashish

[kashyap_shah3]

Hi Ashish,

How about password length - no more than 10 characters long as per SAP Note 2401917?
I think best way to rule out anything password related would be to set it same as the one that works on Dev.

Best Regards,
Kashyap Shah

[Sandra_Rossi]

It's not an issue from the ABAP code if it works on development system but not on quality system.

Either the administration team misconfigured the development system only (and then you will have to change your code after they have configured correctly), or misconfigured the quality system only (you don't need to change your ABAP code as it works on Dev system), or both.

You should tag your question SAP Administration, not ABAP Development. Note that your basis team should post the question themselves...

[Jelena_Perfiljeva]

I've alerted the moderators to move this to Basis tag and I agree that it'd be beneficial if your Basis team investigates this and asks questions, if necessary.

Please also use Comment button instead of Answer when replying to someone. Answer is meant only to post a possible solution to the original question.

[former_member545416]

Dear Sandra Rossi & Jelena Perfiljeva, Thank you for your valuable suggestions and comment. I will ask my basis team to investigate more on the same.