PI18672: FTP LEVEL 2 CLIENT AUTHENTICATION IS NOT WORKING WITH RACF

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• FTP level 2 client authentication where the user ID is mapped to
  the certificate in RACF is not working as designed.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * All users of the IBM Communications Server                   *
  * for z/OS Version 2 Release 1                                 *
  * IP: FTP                                                      *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * FTP native TLS authentication fails                          *
  * when using DIGTNMAP class name filters.                      *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Apply PTF                                                    *
  ****************************************************************
  FTP native TLS client authentication fails when DIGTNMAP class
  name filters are used to map client certificates to userids.
  A null userid is returned.
  

Problem conclusion

• FTP has been corrected.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

  PI17244

• APAR is sysrouted TO one or more of the following:

  UI19403 UI19404 UI19405

Modules/Macros

• EZAFTPFM
  

Fix information

• Fixed component name

  TCP/IP V3 MVS

• Fixed component ID

  5655HAL00

Applicable component levels

• R210 PSY UI19403

     UP14/08/12 P F408

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.