Product/components used and version/fix level:

webMethods Active Transfer (MFT) 10.15

Detailed explanation of the problem:

The FTP server is currently refusing every connection from any user on any listener (FTPS and HTTPS is configured). The server response is: “421-User access not allowed. Max user limit reached for server.”

This situation emerged after I was doing a bulk file operation. First I got banned (based on IP address). Later the ban was expired, but no login is possible with whatever user account.

Even after restarting the underlying Integration Server the problem still persists. In the Active Transfer admin UI (luckily, this is still accessible), I’ve also increased the “Maximum simultaneous user connections” (under “Listener preferences”/“Throttling”) to unlimited.

Somehow the old, stale sessions seem to congest the server. How can I drop/purge these sessions?

Error messages / full error message screenshot / log file:

The message from the server is: “421-User access not allowed. Max user limit reached for server.”
421 is also the HTTP response status code on the FTP control connection.
I couldn’t find anything related to this problem in the log files. Only the ban was reported in ActiveTransfer.log.

421-User access not allowed. Max user limit reached for server.
This limit seems to be on the server-side (FTP Host) and not on the client (i.e., MFT).

The FTP server’s licence limits the user sessions (perhaps its a free version?) and assuming that your MFT server is not the only client, then a licence upgrade is required to allow more sessions.

Else if your MFT server is the only client, then you can do 2 things -

1. Reach out to the FTP server admin and get them to terminate your user’s sessions
2. Check if there are any open threads on the underlying MFT IS and cancel/kill them (obviously not a recommended option, but the 1^st step alone should be sufficient)

KM

Dear Kasi,
thank you for the quick response!

I haven’t been precise enough at describing my setup. I’m using Active Transfer as FTP server (Integration Server package WmMFT). There is no additional FTP server behind this. The virtual folders of Active Transfer are hosted on the local file system, not on a remote storage location (such as an FTP server or cloud storage). I have full access to the Active Transfer admin UI, the underlying Integration Server, and the operating system (Ubuntu).

Regarding your suggestions:

1. Since there is no other FTP server involved, I guess, I should search for the user sessions on the Active Transfer server. Can I inspect/terminate these sessions somewhere in the Active Transfer admin UI or the underlying Integration Server?
2. I’ve shut down the Integration Server and looked for any remaining processes/threads. There was no such leftover. After starting the Integration Server again, the problem is still present: Users can’t log into the services (FTPS, WebDav/WebClient on HTTPS) provided by the Active Transfer server. The server’s response is still the mentioned 421 message.

Best regards,
Christian

Ah, that gives a better view now

I’m no expert on MFT, but you can try the following -

1. Increase the number of (server) threads/connections for the ActiveTransfer JDBC Pool and restart the server
2. Check if there’s a value set for this property; you should be able to use the admin service (link) -

Config: <InstallDir>/IntegrationServer/instances/default/packages/WmMFT/config/properties.cnf
Property Name: *mft.server.maxThreads=*

3. You can monitor and manage banned IPs (link).

KM

Dear Kasi,
thank you again for the quick reply and the valuable hints. I need to explore the problem deeper tomorrow.
Best regards,
Christian

Dear Kasi,
here’s an update regarding your latest suggestions:

1. I’ve increased the number of connections to 20 in the JDBC pool. That didn’t seem to be the bottleneck
2. The property mft.server.maxThreads doesn’t exist on my instance. I’ve checked it both in the configuration file and through the admin service you’ve mentioned.
3. I was searching for that feature already long time ago (ActiveTransfer user blocked: Is there some kind of dynamic blacklist?). Hence thank you very much! In my current case no IP is blocked.

Anyway, thank you very much for your dedicated help! Now I’m going to dig deeper into the file system and into the database attached to the Integration Server.

Best regards,
Christian

how to Create two input parameters with the data type ‘java.util.Date’ to represent your ‘fromDate’ and ‘toDate’.

Dear Murgesh, I guess your question went to the wrong thread. Best regards, Christian

sorry i was trying this forum for the first time soo

Dear Murgesh,

you’re welcome! If you have a question not related to an existing topic, you can create a new thread by clicking on + New Topic on the main page. Provide the necessary context there.

Also have a look at About - Software AG Tech Community & Forums and FAQ - Software AG Tech Community & Forums.

Best regards,
Christian

Next steps I’ve tried:

• Recreating the database component ActiveTransfer (ACT) with the Database Component Configurator. Importing the previously exported Active Transfer Server assets afterwards to restore the server configuration.
• Deleting and reinstalling the Integration Server package wmMFT.

Unfortunately, both approaches didn’t change anything. I’m going to open a support ticket now.

I appreciate the summary of steps you’ve tried - these will help the community, Christian.
It would be great to see what the cause and resolution are.

KM

Finally, MFT is working again!

For anyone running also into such 421 error: I guess a plain restart of the Integration Server or a reboot of the OS is already sufficient. But don’t set the maximum simultaneous user connections to unlimited (by deleting the number in the ActiveTransfer server admin UI)! The UI says unlimited, but for the backend it’s literally zero. This makes the 421 error really persistent. A future fix might remove this obstacle, but as of now, don’t set the maximum simultaneous user connections to unlimited!

I can’t say whether any additional step beside restarting/rebooting the system was really necessary for fixing the problem. But in case of trouble, try the actions recorded in this discussion (except setting maximum simultaneous user connections to unlimited).

Hi Christian,

In 10.15, the default value for simultaneous connection for a user, is set to ‘Unlimited’ in UI (0 in the backend.)
In your environment, what was it set by default, before it was set to ‘Unlimited’?

What is the value you have set now?

Regards
Biswa