I am in a weeks long battle involving documentation, error messages, and 
Network Configuration Assistant for the Communication Server, and z/OSMF.

The history is long and painfully tedious.  This latest skirmish is similar in 
form to all of my travails so far, so here goes:

Error messages in the log are --
Feb 15 12:09:45 jismvs IKE: Message instance 1433: (00000003) EZD0981I Unable 
to set ID - ID mismatch
Feb 15 12:09:45 jismvs IKE: Message instance 1433: (00000003) EZD0984I IKE 
function 08D3 - CommonDomainOfInterpretation::set_ID_from_payload(inet_ID &, 
const inet_ID_payload *) failed : 889 | -1 | set_ID
Feb 15 12:09:45 jismvs IKE: Message instance 1433: (00000003) EZD0984I IKE 
function 08BF - set_ID_from_payload() failed : 0 | 0 | 
Feb 15 12:09:45 jismvs IKE: Message instance 1433: (00000003) EZD0984I IKE 
function 092B - doi->set_remote_ID() failed : 0 | 0 |
Feb 15 12:09:45 jismvs IKE: Message instance 1433: (00000003) EZD0984I IKE 
function 0A7C - kep->process_msg() failed : -2 | 0 |
Feb 15 12:09:45 jismvs IKE: Message instance 1433: (00000003) EZD0984I IKE 
function 0AC6 - process_phase1_msg() failed : 0 | 0 |
Feb 15 12:09:45 jismvs IKE: Message instance 1433: (00000003) EZD0984I IKE 
function 0824 - isakmp_anchor::msg_handler(IKEBuffer *, sa_addr &, sa_addr &, 
stackObj *) failed : 330 | -1 | process_msg

The EZD098I message basically says --- see the EZD0984I messages.
EZD0984I basically echoes internal error codes.
I am not intimate with the delightful internals of IKE negotiation code for 
Security Associations.   BUT I will take a wild guess there is something wrong 
with the 'ID'  in the IKE payload.

SO --- I now need to know a) what is the invalid value   and b) how do I 
correct what is sent in the packet?

I go to the manuals  --- all of the 'SYSPROG Actions'  are NONE.    Totally 
unhelpful.  --- The messages are in effect telling me  'Hey, these things 
happened but I am fine, thanks for asking' .   I have no direction to follow on 
tracing the problem further.
--
Looking ahead, I have not seen any ikedConf settings or ipSec setting regarding 
an 'ID' in the NCA.  So I cannot even try options. 
Some other day, we can revisit the fact that if a manual says to set Directive 
X to Value Y,   I can find no published cross reference for how to get that 
information into NCA.

Does anybody know the magic spell to vanquish this demon?

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Reply via email to