What was figured out? I have not been able to run my SMPe receive service job
this month either, worked last month, but I am not getting an SSL error:
IBM FTP CS V1R13
FTP: EXIT has been set.
Connecting to: dispby-117.boulder.ibm.com 170.225.15.117 port: 21.
220-IBM's internal systems must only be used for conducting IBM's
220-business or for purposes authorized by IBM management.
220-
220-Use is subject to audit at any time by IBM management.
220-
220-
220-dhebpcb01 secure FTP server
220 ready.
>>> AUTH TLS
234 TLSv1
Authentication negotiation succeeded
>>> PBSZ 0
200 PBSZ=0
>>> PROT P
200 Command PROT okay.
Data connection protection is private
NAME (deliverycb-bld.dhe.ibm.com:AJNIMS2):
> xxxxxxxx
>>> USER xxxxxxxx
331 Password required for xxxxxxxx.
PASSWORD:
> ********
>>> PASS
230 virtual user xxxxxxxx logged in from /128.227.128.75:29260.
Command:
> CCC
> BINARY
> QUIT
GIM69233I FTP FAILED, ATTEMPT 01 OF 10. FTP WILL BE RETRIED IN 60 SECONDS.
It repeats 10 times and then SMPe fails it with:
GIM22800S ** REPLY FROM THE FTP SERVER AT deliverycb-bld.dhe.ibm.com WAS NOT
RECEIVED AFTER 10 ATTEMPTS.
No JOB log messages.
I am attempting to get my IBMLINK setup, but both the UFL persons that need to
approve it, HAVE RETIRED! :)
Al Nims
Systems Admin/Programmer 3
UFIT
University of Florida
(352) 273-1298
-----Original Message-----
From: IBM Mainframe Discussion List [mailto:[email protected]] On Behalf
Of Ward, Mike S
Sent: Wednesday, November 16, 2016 2:58 PM
To: [email protected]
Subject: Re: TCP/IP SSL trace help please xposted to IBMMAIN
Thanks for replying. We had to use the smpe batch job name it finally worked.
Donald J. on IBMMAIN figured it out.
Thanks all.
-----Original Message-----
From: IBM TCP/IP List [mailto:[email protected]] On Behalf Of VANDER
WOUDE, PETER
Sent: Wednesday, November 16, 2016 1:30 PM
To: [email protected]
Subject: Re: [IBMTCP-L] TCP/IP SSL trace help please xposted to IBMMAIN
Mike,
Add the following to the ftp step.
PARM='ENVAR("GSK_TRACE=0xFFFF")/'
Then after running the job, go into USS and you will see a file that starts
with gskssl.xxxxx.trc (where xxxxx is numbers)
Run the command
Gsktrace /tmp/gskssl.xxxxx.trc > ssltrace.txt
The ssltrace.txt file will the the ssl trace so you can see the tls exchange.
Regards,
Peter Vander Woude
Systems Administrator IV
Work: 704-844-4331
Fax: 704-844-3266
701 Crestdale Rd.
Matthews, NC 28105
-----Original Message-----
From: IBM TCP/IP List [mailto:[email protected]] On Behalf Of Ward, Mike S
Sent: Wednesday, November 16, 2016 2:19 PM
To: [email protected]
Subject: TCP/IP SSL trace help please xposted to IBMMAIN
Hello all, we are having a little FTPS problem. As you can see below we are
getting: EZA1735I Std Return Code = 10234, Error Code = 00017 We are using the
smpe secure procedure. We did this last month and it worked fine now we are
getting the above error.
We are trying to get an SSL trace of the problem, but we can't seem to get it
to work. Below are the commands that we are using to start the SSL trace.
After we run the job and stop the trace the dataset we use on GSKWTR is empty.
Can someone help us with the GSK trace? Oh the jobename of the FTP started task
is FTPD1. We have also tried tracing the TCPIP task same results.
Thanks
S GSKSRVR
TRACE CT,WTRSTART=GSKWTR
TRACE CT,ON,COMP=GSKSRVR
R n,JOBNAME=(yyy),OPTIONS=(LEVEL=255),WTR=GSKWTR,END where yyy is the name of
STC.
SMPE FTP JOB
TRACE CT,OFF,COMP=GSKSRVR
TRACE CT,WTRSTOP=GSKWTR
get into IPCS
update 0 DEFAULTS - Specify default dump and options with GSKWTR produced
> /bin/ftp -e -v -f "//'SSF1.SMPE.JCL(FTPDATA)'"
> deliverycb-bld.dhe.ibm.com
EZY2640I Using 'SSF1.SMPE.JCL(FTPDATA)' for local site configuration parameters.
EZYFT25I Using //'TCPIP.STANDARD.TCPXLBIN' for FTP translation tables for the
co ntrol connection.
EZYFT31I Using //'TCPIP.STANDARD.TCPXLBIN' for FTP translation tables for the
da ta connection.
EZA1450I IBM FTP CS V1R13
EZA1772I FTP: EXIT has been set.
EZYFT18I Using catalog '/usr/lib/nls/msg/C/ftpdmsg.cat' for FTP messages.
EZA1554I Connecting to: dispby-117.boulder.ibm.com 170.225.15.117 port: 21.
220-IBM's internal systems must only be used for conducting IBM's 220-business
or for purposes authorized by IBM management.
220-
220-dhebpcb01 secure FTP server
220 ready.
EZA1701I >>> AUTH TLS
234 TLSv1
EZA2897I Authentication negotiation failed EZA2898I Unable to successfully
negotiate required authentication EZA1735I Std Return Code = 10234, Error Code
= 00017
EZA2897I Authentication negotiation failed EZA2898I Unable to successfully
negotiate required authentication
SSF1.SMPE.JCL(FTPDATA) contains the below.
SECURE_MECHANISM TLS
TLSRFCLEVEL CCCNONOTIFY
TLSMECHANISM FTP
SECURE_FTP REQUIRED
SECURE_CTRLCONN CLEAR ; COMMANDS MAY BE CLEAR (UNENCRYPTED).
SECURE_DATACONN PRIVATE ; PAYLOAD MUST BE ENCRYPTED.
KEYRING S250SAC/IBMSHOPZ
EPSV4 TRUE
==========================
This email, and any files transmitted with it, is confidential and intended
solely for the use of the individual or entity to which it is addressed. If you
have received this email in error, please notify the system manager. This
message contains confidential information and is intended only for the
individual named. If you are not the named addressee, you should not
disseminate, distribute or copy this e-mail. Please notify the sender
immediately by e-mail if you have received this message by mistake and delete
this e-mail from your system. If you are not the intended recipient, you are
notified that disclosing, copying, distributing or taking any action in
reliance on the contents of this information is strictly prohibited.
----------------------------------------------------------------------
For IBMTCP-L subscribe / signoff / archive access instructions, send email to
[email protected] with the message: INFO IBMTCP-L
________________________________
CONFIDENTIALITY NOTICE: This e-mail message and all attachments may contain
legally privileged and confidential information intended solely for the use of
the addressee. If the reader of this message is not the intended recipient, any
reading, dissemination, distribution, copying, or other use of this message or
its attachments is prohibited. If you have received this communication in
error, please notify the sender immediately by telephone at 704.844.3100 and
delete this message and all copies and backups thereof. Thank you.
----------------------------------------------------------------------
For IBMTCP-L subscribe / signoff / archive access instructions, send email to
[email protected] with the message: INFO IBMTCP-L
==========================
This email, and any files transmitted with it, is confidential and intended
solely for the use of the individual or entity to which it is addressed. If you
have received this email in error, please notify the system manager. This
message contains confidential information and is intended only for the
individual named. If you are not the named addressee, you should not
disseminate, distribute or copy this e-mail. Please notify the sender
immediately by e-mail if you have received this message by mistake and delete
this e-mail from your system. If you are not the intended recipient, you are
notified that disclosing, copying, distributing or taking any action in
reliance on the contents of this information is strictly prohibited.
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions, send email to
[email protected] with the message: INFO IBM-MAIN
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN
