IP Services: Ensure FTP is listed in the AUTHCMD and AUTHPGM NAMES section of your IKJTSOxx member of SYS1.PARMLIB

Description: Beginning in z/OS V2R1, the z/OS FTP client supports user exits. The FTP client invokes z/OS Dynamic Exit Services (DES) to determine whether you have installed FTP client user exit EZAFCCMD or EZAFCREP. To invoke DES successfully, the program FTP must be APF authorized. Therefore, if you want to use the z/OS FTP client user exits, you must add FTP to the AUTHCMD and AUTHPGM NAMES section of your IKJTSOxx member of SYS1.PARMLIB.

Note: Before applying the PTF of TCP/IP APAR PI05065, you will receive the following messages during the FTP Server initialization if you do not add the FTP program to the AUTHCMD and AUTHPGM NAMES section of your IKJTSOxx parmlib member.

EZA1555I CSVDYNEX DEFINE failed for user exit EZAFCCMD, 
		RETURN CODE x'08' REASON CODE x'00000804'
EZA1555I CSVDYNEX DEFINE failed for user exit EZAFCREP, 
		RETURN CODE x'08' REASON CODE x'00000804'

Element or feature:

Communications Server.

When change was introduced:

z/OS V2R1.

Applies to migration from:

z/OS V1R13 and z/OS V1R12.

Timing:

Before the first IPL of z/OS V2R1.

Is the migration action required?

No, only if you want to use the z/OS FTP client user exits.

Target system hardware requirements:

None.

Target system software requirements:

None.

Other system (coexistence or fallback) requirements:

The IKJTSOxx change cannot be shared between z/OS V2.1 systems and pre-z/OS V2.1 systems. That is, do not share the IKJTSOxx change for FTP between z/OS V2.1 and prior systems.

Restrictions:

None.

System impacts:

If you make the IKJTSOxx FTP change on your z/OS V1.12 or z/OS V1.13 system, you may see various ABENDs or problems. These problems may result in message IKJ56652I: "You attempted to run an authorized command or program. This is not supported under the dynamic TSO/E environment," or other related problems.

Related IBM Health Checker for z/OS check:

None.

Steps to take:

Add FTP in the AUTHCMD and AUTHPGM NAMES section of your IKJTSOxx member of SYS1.PARMLIB if you want to use the z/OS FTP client user exits.

Note: SYS1.SAMPLIB(IKJTSO00) member was updated with TSO/E APAR OA45541 to remove the FTP definitions in both the AUTHCMD and AUTHPGM NAMES sections, which were added in z/OS V2R1.

Reference information: For information, see the following:

FTP client user exits in z/OS V2R1.0 Communications Server: IP Configuration Reference.
TSO command authorization in z/OS V2R1.0 Communications Server: IP Configuration Guide
For a complete list of all the z/OS Communications Server commands and programs that need to be added to the AUTHCMD NAMES and AUTHPGM NAMES statements in your IKJTSOxx PARMLIB member, see the z/OS Program Directory at the z/OS installation related information website.