To add my $0.02 of useless knowledge; In your FTP.DATA file did you also code?
SECURE_MECHANISM TLS TLSRFCLEVEL RFC4217 Just my $0.02 worth. I am no expert when it comes to IBM's FTP, but I recently had to add those two to make a connection work. Al Nims University of Florida. -----Original Message----- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Lizette Koehler Sent: Tuesday, September 13, 2016 3:36 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: IBM FTPS connect Just a thought. Kurt Q. has been helpful to folks offlist to resolve their FTP IBM issues. You may wish to see if he will assist. He really wants to be a smooth process and easy transition. Lizette > -----Original Message----- > From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] > On Behalf Of Mark Pace > Sent: Tuesday, September 13, 2016 11:32 AM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: Re: IBM FTPS connect > > That was a big help, thank you. I was able to confirm that all the > correct FMIDs were installed. So I know it "should" work. > I also tried FWFRIENDLY TRUE that didn't seem to make any difference. > Turned on DEBUG SOC. So now I'll have to research the output. > > > GET "/GIMPAF.XML" "/u/MP81136/test.content/GIMPAF.XML" > (REPLACE > >>> TYPE > I > 200 Type set to > I. > Command: > > SC1344 initDsConnection: > entered > >>> > EPSV > > 229 Entering Passive Mode > (|||65321|) > >>> RETR > /GIMPAF.XML > SC1981 connDsConnection: > entered > SC2075 connDsConnectionIPv4: > entered > GU4945 ftpSetApplData: > entered > 150 Opening BINARY mode SSL data connection for /GIMPAF.XML. > FU0388 protDataConn: secure_socket_init() failed with rc = 406 (Error > while read ing or writing > data) > CG1959 SETCEC code = > 17 > TLS security mechanism negotiation failed - data connection closed > SC2637 dataClose: > entered > 425 ftpd: (data conn) SSL_accept unspecified error > CG4118 rcvFile: rc -1 rc_write 0 rc_close > 0 > PC0921 setClientRC: > entered > PC0991 setClientRC: std_rc=16425, rc_type=STD, > rc=16425 > Std Return Code = 16425, Error Code = > 00017 > >>> > QUIT > > : Connection reset by > peer. > SC3358 endSession: entered > (sn=0F9EE7C8) > SC2637 dataClose: > entered > > > > > QUIT > > > > On Tue, Sep 13, 2016 at 12:50 PM, Cieri, Anthony <aci...@seic.com> wrote: > > > > > For the record, there are several FMIDs that may be > > installed with the z/OS Security Lvl 3 and z/OS Communications > > Server Security lvl 3 may also be required. The FMIDs for Z/OS > > Security Lvl 3 at z/OS Version 1.13 > > are: > > > > JCRY741 > > JCPT3D1 > > JSWK3D1 > > JRLS3D1 > > > > The FMID for z/OS Communications Server lvl 3 at z/OS Version > > 1.13.is: (ask me how I know this!!!) > > > > JIP61DK > > > > You would most likely see errors in PAGENT and its > > associated tasks (like IKED) if you did NOT have these installed!! > > > > Since you appear to be getting a successful control > > connection established ad subsequently failing on the data > > connection, I would suspect a possible firewall issue. The error message > > provided: > > > > EZA1735I Std Return Code = 16425 > > > > Indicates that the "get" command failed for one of the > > following > > reasons: > > > > 425: Can't open a data connection > > 425: Can't open a passive connection > > 425: Command terminated due to server shutdown in progress > > 425: Unable to open data connection > > > > HTH > > Tony > > > > > > > > -----Original Message----- > > From: IBM Mainframe Discussion List > > [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Rob Schramm > > Sent: Tuesday, September 13, 2016 11:53 AM > > To: IBM-MAIN@LISTSERV.UA.EDU > > Subject: Re: IBM FTPS connect > > > > The instructions for debugging connection issues indicates to run > > with debug soc which should provide some additional information. > > > > Rob Schramm > > > > On Tue, Sep 13, 2016, 11:10 AM Mark Pace <pacemainl...@gmail.com> wrote: > > > > > I'll have to go check on the z/OS Security lvl 3 FMID. I didn't > > > install this system, so I'm not sure. > > > > > > On Tue, Sep 13, 2016 at 9:12 AM, Tim Deller <ists...@bonton.com> wrote: > > > > > > > Perhaps the list of ciphers in the ftpdata file is too > > > > restrictive or maybe the z/OS Security Level 3 FMID is not installed. > > > > ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
