IBM Support

PM03226: FTP CLIENT API FAILS WHEN USING KERBEROS

A fix is available

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • The FTP API is used to open a FTP kerberos session by adding
    -a GSSAPI to the open string passed in on the INIT call.  After
    the user command is sent, the FTP client sends an ADAT command.
    The server respond back with this, but the API truncates the
    response causing the FTP client to report an error.
    .
    KEYWORDS: KINIT REXX EZAFTPIR ADAT
    .
    VERIFICATION STEPS:
    FTP output shows (note, this is truncated due to the length of
    the ADAT command the server responds with)
    PAZ >>> AUTH GSSAPI
    PAZ 334 Using authentication mechanism GSSAPI
    PAZ >>> ADAT
    PAZ 235 ADAT=YGgGCSqGSIb3EgECAgIAb1kwV6ADAgEFoQMCAQ+iSzBJoAMCAQG
    PAZ Cannot base 64 decode reply: 2
    .
    The API will fail with
    FTP Client API Error:
        Result     = -3
        Status     = 0
        IE         = 0
        CEC        = 2
        ReturnCode = 0
        ReasonCode = 0
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED: All users of the IBM Communications Server   *
    *                 for z/OS Version 1 Release(s) 10 and 11 IP:  *
    *                 FTP Client API with Kerberos                 *
    ****************************************************************
    * PROBLEM DESCRIPTION: The FTP client API is used to open a    *
    *                      FTP kerberos session by adding          *
    *                      -a GSSAPI to the open string passed in  *
    *                      on the INIT call.  After the user       *
    *                      command is sent, the FTP client sends   *
    *                      an ADAT command.  The server responds   *
    *                      with the ADAT reply, but the API        *
    *                      truncates the response causing the      *
    *                      FTP client to report an error.          *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    The FTP client code was erroneously inserting a null at the end
    of the ADAT reply before passing the ADAT reply to radix_decode.
    This is incorrect because the FTP client API reply() code had
    already stripped off the new line (x'15') at the end of the
    reply and inserted a null.
    +-------------------------------------------------------------+
    + Please check our Communications Server for OS/390 homepages +
    + for common networking tips and fixes.  The URL for these    +
    + homepages can be found in Informational APAR II11334.       +
    +-------------------------------------------------------------+
    

Problem conclusion

  • The FTP client had been corrected.
    
    * Cross Reference between External and Internal Names
    

Temporary fix

Comments

APAR Information

  • APAR number

    PM03226

  • Reported component name

    TCP/IP V3 MVS

  • Reported component ID

    5655HAL00

  • Reported release

    1A0

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2009-12-10

  • Closed date

    2010-01-12

  • Last modified date

    2010-03-01

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    UK53514 UK53515

Modules/Macros

  • EZAFTPFC
    

Fix information

  • Fixed component name

    TCP/IP V3 MVS

  • Fixed component ID

    5655HAL00

Applicable component levels

  • R1A0 PSY UK53514

       UP10/02/09 P F002

  • R1B0 PSY UK53515

       UP10/02/09 P F002

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG19M","label":"APARs - z\/OS environment"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"1A0","Edition":"","Line of Business":{"code":"","label":""}},{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SSCY4DZ","label":"DO NOT USE"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"1A0","Edition":"","Line of Business":{"code":"","label":""}}]

Document Information

Modified date:
01 March 2010