PI13288: MSGIKJ56652I WHEN INVOKING FTP FROM COBOL PROGRAM AND AFTER AUTHORIZING FTP

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• After FTP is added to AUTHCMD/AUTHPGM of IKJTSOxx, a COBOL
  program calls FTP under a dynamic TSO/E environment created by
  IKJTSOEV.  The call fails with the message IKJ56652I
  "You attempted to run an authorized command or program. This is
  not supported under the dynamic TSO/E environment."
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * All users of the IBM Communications Server                   *
  * for z/OS Version 2 Release 1  IP: FTP                        *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * If you do not add FTP to the AUTHCMD or AUTHPGM statements   *
  * in IKJTSOxx, FTP generates message EZA1555I, which inicates  *
  * a user exit failure.                                         *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Apply PTF                                                    *
  ****************************************************************
  Starting in V2R1 FTP issued message EZA1555I if FTP was not
  specified on the AUTHCMD and AUTHPGM NAMES section in the
  IKJTSOxx member. This error message was confusing and is being
  blocked by this APAR in this situation.
  

Problem conclusion

• FTP has been corrected.
  
  The following documentation updates will be made.
  Migration from z/OS V1R13 and z/OS V1R12 to z/OS V2R1:
  
  Change from:
  IP Services: Ensure FTP is listed in the AUTHCMD and AUTHPGM
  NAMES section of your IKJTSOxx member of SYS1.PARMLIB
  Therefore, you must add FTP to the AUTHCMD and AUTHPGM NAMES
  section of your IKJTSOxx member of SYS1.PARMLIB. Otherwise, the
  following error messages EZA1555I are displayed when you start
  the FTP client:
  . CSVDYNEX DEFINE failed for user exit EZAFCCMD, RETURN CODE
  x'08' REASON CODE x'00000804'
  . CSVDYNEX DEFINE failed for user exit EZAFCREP, RETURN CODE
  x'08'REASON CODE x'00000804'
  Element or feature: Communications Server.
  When change was introduced: z/OS V2R1.
  Applies to migration from: z/OS V1R13 and z/OS V1R12.
  Timing: Before installing z/OS V2R1.
  Is the migration action required? Yes, if you invoke the z/OS
  FTP client.
  
  Steps to take:
  Add FTP in the AUTHCMD and AUTHPGM NAMES section of your
  IKJTSOxx member of SYS1.PARMLIB.
  
  To:
  IP Services: Add FTP in the AUTHCMD and AUTHPGM NAMES section of
  your IKJTSOxx member of SYS1.PARMLIB
  Therefore, if you want to use the z/OS FTP client user exits,
  you must add FTP to the AUTHCMD and AUTHPGM NAMES section of
  your IKJTSOxx member of SYS1.PARMLIB.
  Element or feature: Communications Server.
  When change was introduced: z/OS V2R1.
  Applies to migration from: z/OS V1R13 and z/OS V1R12.
  Timing: Before installing z/OS V2R1.
  Is the migration action required? No, only if you want to use
  the z/OS FTP client user exits.
  
  Steps to take:
  Add FTP in the AUTHCMD and AUTHPGM NAMES section of your
  IKJTSOxx member of SYS1.PARMLIB if you want to use the z/OS FTP
  client user exits.
  
  
  IP Configuration Reference:
  
  Add another below restriction to 'FTP client user exits':
  FTP client user exits are not supported in an environment where
  the FTP client is invoked that does not allow FTP to execute as
  an authorized program/command, such as invoking FTP using the
  IKJTSOEV service.
  
  
  z/OS Communications Server: New Function Summary:
  In 'FTP client security user exits' section, add a bullet for a
  general restriction on the FTP client user exits as below before
  'The following restrictions are for FTP command user exit
  EZAFCCMD':
  FTP client user exits are not supported in an environment where
  the FTP client is invoked that does not allow FTP to execute as
  an authorized program/command, such as invoking FTP using the
  IKJTSOEV service."
  
  
  z/OS Communications Server: IP Messages Volume 1 (EZA) :
  . Remove EZA1535I message.
  . In the Example part of message EZA1545I, EZA1546I, EZA1549I,
  EZA1532I, EZA1555I, EZA1556I, EZA1548I and EZA1533I, remove
  EZA1535I message information.
  
  
  z/OS Summary of Message and Interface Changes:
  In 'New' list of 'Communications Server summary of message
  changes for z/OS V2R1', remove EZA1535I message.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UI17736

Modules/Macros

• EZAFTPCU EZAFTPCF EZAFTPCV EZAFTPCY EZAFTPSM EZAFTPRX EZAFTPDM
  

Fix information

• Fixed component name

  TCP/IP V3 MVS

• Fixed component ID

  5655HAL00

Applicable component levels

• R210 PSY UI17736

     UP14/06/24 P F406

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.