PQ83233: FTP CLIENT AND SERVER LOADS THE KERBEROS DLL AT STARTUP, RATHER THAN ONLY WHEN KERBEROS SUPPORT IS DESIRED

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• The FTP sever and client load the kerberos dll (EUVFKDLL) at
  startup.  If the kerberos dll cannot be loaded, the FTP server
  will take abend806 and a ceedump.  In the CEEDUMP, you will see
  message CEE3501S The module EUVFKDLL was not found.  For the
  FTP client, you will also see the CEE3501S The module EUVFKDLL
  was not found.  The server and client should only load the
  kerberos dll when kerberos authentication is needed.
  .
  KEYWORDS: kerberos dll ftpd abend806 abends806 CEEDUMP
  
  Additional Symptom: ABENDU4039 U4039
  
     Systems that have the library containing EUVFKDLL in the
     search order but do not have that library defined in a SAF
     PROGRAM profile will receive an 'Uncontrolled Environment'
     message (ICH420I for systems using RACF, other products will
     have different messages) followed by:
        BPXP014I ENVIRONMENT MUST BE CONTROLLED FOR DAEMON
                 (BPX.DAEMON) PROCESSING.
  

Local fix

• Ensure that EUVF.SEUVFLPA is added to LPALIB and
     EUVF.SEUVFLNK to LNKLST.  This way when FTP tries to load the
     dll at startup, it will be found.
  
     If the Uncontrolled Environment message is encountered, then
     add the SEUVFLNK and SEUVFLPA libraries library to the
     appropriate PROGRAM profile.  For systems using RACF, this
     can be accomplished by the following commands:
        RALTER PROGRAM * ADDMEM('hlq.SEUVFLPA'/volser/NOPADCHK)
        RALTER PROGRAM * ADDMEM('hlq.SEUVFLNK'/volser/NOPADCHK)
        SETROPTS WHEN(PROGRAM) REFRESH
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: All users of the IBM Communications Server   *
  *                 for z/OS Version 1 Release 4 and             *
  *                 z/OS Version 1 Release 5 IP: FTP             *
  ****************************************************************
  * PROBLEM DESCRIPTION: If the kerberos DLL cannot be loaded,   *
  *                      the FTP server will take ABEND806 and   *
  *                      a CEEDUMP.  In the CEEDUMP, you will    *
  *                      see message CEE3501S The module         *
  *                      EUVFKDLL was not found.  For the        *
  *                      FTP client, you will also see the       *
  *                      CEE3501S The module EUVFKDLL            *
  *                      was not found.                          *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  The FTP server and client should only require the Kerberos
  DLL to be loaded if the connection is using Kerberos
  authentication.
  +-------------------------------------------------------------+
  + Please check our Communications Server for OS/390 homepages +
  + for common networking tips and fixes.  The URL for these    +
  + homepages can be found in Informational APAR II11334.       +
  +-------------------------------------------------------------+
  

Problem conclusion

• FTP has been changed to dynamically load the Kerberos DLL
  when required for authentication.
  
  The following documentation change will be made.
  
  OS/390 IBM Communications server IP and SNA Codes
  Document Number: SC31-8791
  
  In the FTPD Reply Codes chapter the following
  reply will be added.
  
  535 Request to load the Kerberos DLL library failed
  
  Explanation: The connection to the FTP server is protected by
  the GSSAPI security mechanism. This requires the Kerberos DLL
  library to be loaded and the load of that library failed.
  
  System Action: The command fails and the connection to the FTP
  server is not established.  FTP continues.
  
  User Response: None
  
  
  System Programmer Response: Verify that the Kerberos libraries
  are added to the system data set concatenation.
  EUVF.SEUVFLNK  - add to the LNKLSTxx PARMLIB member
  EUVF.SEUVFLPA  - add to the LPALSTxx PARMLIB member
  
  * Cross Reference between External and Internal Names
  PREFTPCX (EZAFTPCX)  PREFTPLS (EZAFTPLS)
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UQ85820 UQ85821 UQ85822 UQ85823 PQ91346

Modules/Macros

• EZAFTPCX EZAFTPCZ EZAFTPFC EZAFTPFR EZAFTPGL
  EZAFTPGM EZAFTPLS EZAFTPRX EZAFTPSR
  

Fix information

• Fixed component name

  TCP/IP V3 MVS

• Fixed component ID

  5655HAL00

Applicable component levels

• R140 PSY UQ85820

     UP04/04/08 P F404

• R149 PSY UQ85821

     UP04/04/08 P F404

• R150 PSY UQ85822

     UP04/04/08 P F404

• R159 PSY UQ85823

     UP04/04/08 P F404

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.