Re: SSL Timeout
On Fri, Jun 13, 2008 at 09h10, Mark Pace <[EMAIL PROTECTED]> wrote to IBM-Main about "SSL Timeout": > That's for certain. They all work from their homes. So different > ISPs, different routers, Cable, DSL, dial-up, wired, wireless, etc Mark: have the client check their personal DSL modem/firewall settings. I personally have mine set to disconnect from the ISP if idle for 17 minutes (I like unusual intervals) and they may have theirs set up in a similar fashion. The DSL connection is re- established on the next IP activity. If I'm gonna be gone from my PC for an extended [bathroom] break, I use the &973 command in SDSF to press 'Enter' every 15 minutes. [Why? I can leave my PC running all day and the firewall only has to block IP scans for a limited amount of that time ie. when my e-mail gets checked each hour. Definitely reduces the length of the firewall's log. Have you checked yours at home lately? *grin*] > On Thu, Jun 12, 2008 at 1:04 PM, Hal Merritt <[EMAIL PROTECTED]> wrote: > >> Perhaps the affected folks are traversing a different network path using >> different appliances? >> -Original Message- >> From: IBM Mainframe Discussion List On Behalf Of Mark Pace >> Sent: Thursday, June 12, 2008 7:42 AM >> >> I now believe that it must be a client or end-user network problem. >> >> Some people using SSL stay connected for 1 hour (TSO time-out - S522), >> and >> others time-out at 10-15 mins (terminal error - S622). What's confusing >> is >> that I had them check their version of PComm and each is using the same >> version (v5.8.0.0). So I can't really find a common demoninator between >> them. >> [snip] --> signature = 6 lines follows <-- Neil Duffee, Joe SysProg, U d'Ottawa, Ottawa, Ont, Canada telephone:1 613 562 5800 x4585 fax:1 613 562 5161 mailto:NDuffee of uOttawa.ca http:/ /aix1.uottawa.ca/ ~nduffee "How *do* you plan for something like that?" Guardian Bob, Reboot "For every action, there is an equal and opposite criticism." "Systems Programming: Guilty, until proven innocent" John Norgauer 2004 -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: SSL Timeout
> -Original Message- > From: IBM Mainframe Discussion List > [mailto:[EMAIL PROTECTED] On Behalf Of Mark Pace > Sent: Friday, June 13, 2008 8:10 AM > To: IBM-MAIN@BAMA.UA.EDU > Subject: Re: SSL Timeout > > That's for certain. They all work from their homes. So > different ISPs, > different routers, Cable, DSL, dial-up, wired, wireless, etc > > I'm totally confused on how to help them. > This is a problem here, too. People complain "work at home is slow". Diagnosing this is a royal PITA to the network people. It could be the local server, or the local network, or our ISP, or the backbone (net neutrality, anybody?), or their ISP, or their computer. One thing that I tried to talk management into doing (failed), was to put up a "Internet connection speed test" on one of our servers (dedicated, not virtual). Then the person could test their speed with our internal speed tester and with somebody else's. If the speed tests were the same, then the problem is likely in our ballpark. If our results were slower than the other site, then the problem is likely outside of our control. I guess this was deep 6'ed due to complexity. -- John McKown Senior Systems Programmer HealthMarkets Keeping the Promise of Affordable Coverage Administrative Services Group Information Technology The information contained in this e-mail message may be privileged and/or confidential. It is for intended addressee(s) only. If you are not the intended recipient, you are hereby notified that any disclosure, reproduction, distribution or other use of this communication is strictly prohibited and could, in certain circumstances, be a criminal offense. If you have received this e-mail in error, please notify the sender by reply and delete this message without copying or disclosing it. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: SSL Timeout
That's for certain. They all work from their homes. So different ISPs, different routers, Cable, DSL, dial-up, wired, wireless, etc I'm totally confused on how to help them. On Thu, Jun 12, 2008 at 1:04 PM, Hal Merritt <[EMAIL PROTECTED]> wrote: > Perhaps the affected folks are traversing a different network path using > different appliances? > > > > > -Original Message- > From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On > Behalf Of Mark Pace > Sent: Thursday, June 12, 2008 7:42 AM > To: IBM-MAIN@BAMA.UA.EDU > Subject: Re: SSL Timeout > > I now believe that it must be a client or end-user network problem. > > Some people using SSL stay connected for 1 hour (TSO time-out - S522), > and > others time-out at 10-15 mins (terminal error - S622). What's confusing > is > that I had them check their version of PComm and each is using the same > version (v5.8.0.0). So I can't really find a common demoninator between > them. > > On Wed, Jun 11, 2008 at 3:26 PM, Mansell, George R. > <[EMAIL PROTECTED]> > wrote: > > > Obey. > > My settings: > > > > TelnetParms > > Port 23 > > CodePage ISO8859-1 IBM-1047 > > PrtInactive 0 > >INACTIVE 2400 > >TIMEMARK 900 > >SCANINTERVAL 900 > > > > -Original Message----- > > From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On > > Behalf Of Mark Pace > > Sent: Wednesday, June 11, 2008 2:22 PM > > To: IBM-MAIN@BAMA.UA.EDU > > Subject: Re: SSL Timeout > > > > Well that didn't work. And I had the firewall guy check his settings. > > He > > specifically raised the time-out value on that port to 1 hour. No > > difference, 10 mins, connection dies - S622. > > > > I wonder if the TIMEMARK and the other setting can be changed via OBEY > > or if > > I need to restart the TN3270 server. > > > > On Mon, Jun 9, 2008 at 5:12 PM, Mark Pace <[EMAIL PROTECTED]> wrote: > > > > > When I saw the defaults in the manual I thought so also. I've > raised > > the > > > time-out values to the default and I'm waiting on the person with > the > > issue > > > to report back to me. > > > > > > > > > On Mon, Jun 9, 2008 at 4:52 PM, Mansell, George R. > > <[EMAIL PROTECTED]> > > > wrote: > > > > > >> Our firewall inactive timeout is 1 hour. When it happened it was > > nasty; > > >> Tcpip & Vtam resources were not recovered. We have Tcpip inactive > set > > to > > >> timeout just before the firewall does. Your 10 minutes sounds > awfully > > >> short. > > >> > > >> -Original Message- > > >> From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] > On > > >> Behalf Of Mark Pace > > >> Sent: Monday, June 09, 2008 7:52 AM > > >> To: IBM-MAIN@BAMA.UA.EDU > > >> Subject: SSL Timeout > > >> > > >> Is there a parameter somewhere that will time-out an SSL connected > > >> TN3270 > > >> session? I've just converted our users from standard TN3270 > sessions > > to > > >> SSL/TLS TN3270 sessions. All users are using PCOMM. > > >> After converting, one user has called me and says that he gets > > >> disconnected > > >> from the system after about 10 mins with a S622 (terminal error). > > Our > > >> TSO > > >> timeout in JWT is set to 1 hour. No other user was having this > > problem > > >> so I > > >> thought this was probably a coincidence since that user had > tornadoes > > in > > >> his > > >> area and some damage to his home. So I had him revert to standard > > >> TELNET. > > >> 1 hour later he timed out with a S522 (TSO time-out value reached). > > I'm > > >> still convinced it's a network issue, but I don't have a leg to > stand > > >> on. > > >> > > >> Anyone have an idea why a user might get disconnected when using > > SSL/TLS > > >> and > > >> not standard telnet? > > >> > > >> -- > > >> Mark Pace > > >> Mainline Information Systems > > >> > > >> > > -- > > >> For IBM-MAIN subscribe / signoff / archive access instructions, > > >> send
Re: SSL Timeout
Perhaps the affected folks are traversing a different network path using different appliances? -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Mark Pace Sent: Thursday, June 12, 2008 7:42 AM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: SSL Timeout I now believe that it must be a client or end-user network problem. Some people using SSL stay connected for 1 hour (TSO time-out - S522), and others time-out at 10-15 mins (terminal error - S622). What's confusing is that I had them check their version of PComm and each is using the same version (v5.8.0.0). So I can't really find a common demoninator between them. On Wed, Jun 11, 2008 at 3:26 PM, Mansell, George R. <[EMAIL PROTECTED]> wrote: > Obey. > My settings: > > TelnetParms > Port 23 > CodePage ISO8859-1 IBM-1047 > PrtInactive 0 >INACTIVE 2400 >TIMEMARK 900 >SCANINTERVAL 900 > > -Original Message- > From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On > Behalf Of Mark Pace > Sent: Wednesday, June 11, 2008 2:22 PM > To: IBM-MAIN@BAMA.UA.EDU > Subject: Re: SSL Timeout > > Well that didn't work. And I had the firewall guy check his settings. > He > specifically raised the time-out value on that port to 1 hour. No > difference, 10 mins, connection dies - S622. > > I wonder if the TIMEMARK and the other setting can be changed via OBEY > or if > I need to restart the TN3270 server. > > On Mon, Jun 9, 2008 at 5:12 PM, Mark Pace <[EMAIL PROTECTED]> wrote: > > > When I saw the defaults in the manual I thought so also. I've raised > the > > time-out values to the default and I'm waiting on the person with the > issue > > to report back to me. > > > > > > On Mon, Jun 9, 2008 at 4:52 PM, Mansell, George R. > <[EMAIL PROTECTED]> > > wrote: > > > >> Our firewall inactive timeout is 1 hour. When it happened it was > nasty; > >> Tcpip & Vtam resources were not recovered. We have Tcpip inactive set > to > >> timeout just before the firewall does. Your 10 minutes sounds awfully > >> short. > >> > >> -Original Message- > >> From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On > >> Behalf Of Mark Pace > >> Sent: Monday, June 09, 2008 7:52 AM > >> To: IBM-MAIN@BAMA.UA.EDU > >> Subject: SSL Timeout > >> > >> Is there a parameter somewhere that will time-out an SSL connected > >> TN3270 > >> session? I've just converted our users from standard TN3270 sessions > to > >> SSL/TLS TN3270 sessions. All users are using PCOMM. > >> After converting, one user has called me and says that he gets > >> disconnected > >> from the system after about 10 mins with a S622 (terminal error). > Our > >> TSO > >> timeout in JWT is set to 1 hour. No other user was having this > problem > >> so I > >> thought this was probably a coincidence since that user had tornadoes > in > >> his > >> area and some damage to his home. So I had him revert to standard > >> TELNET. > >> 1 hour later he timed out with a S522 (TSO time-out value reached). > I'm > >> still convinced it's a network issue, but I don't have a leg to stand > >> on. > >> > >> Anyone have an idea why a user might get disconnected when using > SSL/TLS > >> and > >> not standard telnet? > >> > >> -- > >> Mark Pace > >> Mainline Information Systems > >> > >> > -- > >> For IBM-MAIN subscribe / signoff / archive access instructions, > >> send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN > INFO > >> Search the archives at http://bama.ua.edu/archives/ibm-main.html > >> > >> > >> > >> > > -- > >> NOTICE: This electronic mail message and any attached files are > >> confidential. The information is exclusively for the use of the > individual > >> or entity intended as the recipient. If you are not the intended > recipient, > >> any use, copying, printing, reviewing, retention, disclosure, > distribution > >> or forwarding of the message or any attached file is not authorized > and is > >> strictly prohibited. If you have received this electronic mail > message in > >> erro
Re: SSL Timeout
I now believe that it must be a client or end-user network problem. Some people using SSL stay connected for 1 hour (TSO time-out - S522), and others time-out at 10-15 mins (terminal error - S622). What's confusing is that I had them check their version of PComm and each is using the same version (v5.8.0.0). So I can't really find a common demoninator between them. On Wed, Jun 11, 2008 at 3:26 PM, Mansell, George R. <[EMAIL PROTECTED]> wrote: > Obey. > My settings: > > TelnetParms > Port 23 > CodePage ISO8859-1 IBM-1047 > PrtInactive 0 >INACTIVE 2400 >TIMEMARK 900 >SCANINTERVAL 900 > > -Original Message- > From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On > Behalf Of Mark Pace > Sent: Wednesday, June 11, 2008 2:22 PM > To: IBM-MAIN@BAMA.UA.EDU > Subject: Re: SSL Timeout > > Well that didn't work. And I had the firewall guy check his settings. > He > specifically raised the time-out value on that port to 1 hour. No > difference, 10 mins, connection dies - S622. > > I wonder if the TIMEMARK and the other setting can be changed via OBEY > or if > I need to restart the TN3270 server. > > On Mon, Jun 9, 2008 at 5:12 PM, Mark Pace <[EMAIL PROTECTED]> wrote: > > > When I saw the defaults in the manual I thought so also. I've raised > the > > time-out values to the default and I'm waiting on the person with the > issue > > to report back to me. > > > > > > On Mon, Jun 9, 2008 at 4:52 PM, Mansell, George R. > <[EMAIL PROTECTED]> > > wrote: > > > >> Our firewall inactive timeout is 1 hour. When it happened it was > nasty; > >> Tcpip & Vtam resources were not recovered. We have Tcpip inactive set > to > >> timeout just before the firewall does. Your 10 minutes sounds awfully > >> short. > >> > >> -Original Message- > >> From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On > >> Behalf Of Mark Pace > >> Sent: Monday, June 09, 2008 7:52 AM > >> To: IBM-MAIN@BAMA.UA.EDU > >> Subject: SSL Timeout > >> > >> Is there a parameter somewhere that will time-out an SSL connected > >> TN3270 > >> session? I've just converted our users from standard TN3270 sessions > to > >> SSL/TLS TN3270 sessions. All users are using PCOMM. > >> After converting, one user has called me and says that he gets > >> disconnected > >> from the system after about 10 mins with a S622 (terminal error). > Our > >> TSO > >> timeout in JWT is set to 1 hour. No other user was having this > problem > >> so I > >> thought this was probably a coincidence since that user had tornadoes > in > >> his > >> area and some damage to his home. So I had him revert to standard > >> TELNET. > >> 1 hour later he timed out with a S522 (TSO time-out value reached). > I'm > >> still convinced it's a network issue, but I don't have a leg to stand > >> on. > >> > >> Anyone have an idea why a user might get disconnected when using > SSL/TLS > >> and > >> not standard telnet? > >> > >> -- > >> Mark Pace > >> Mainline Information Systems > >> > >> > -- > >> For IBM-MAIN subscribe / signoff / archive access instructions, > >> send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN > INFO > >> Search the archives at http://bama.ua.edu/archives/ibm-main.html > >> > >> > >> > >> > > -- > >> NOTICE: This electronic mail message and any attached files are > >> confidential. The information is exclusively for the use of the > individual > >> or entity intended as the recipient. If you are not the intended > recipient, > >> any use, copying, printing, reviewing, retention, disclosure, > distribution > >> or forwarding of the message or any attached file is not authorized > and is > >> strictly prohibited. If you have received this electronic mail > message in > >> error, please advise the sender by reply electronic mail immediately > and > >> permanently delete the original transmission, any attachments and any > copies > >> of this message from your computer system. Thank you. > >> > >> > >> > > =
Re: SSL Timeout
Obey. My settings: TelnetParms Port 23 CodePage ISO8859-1 IBM-1047 PrtInactive 0 INACTIVE 2400 TIMEMARK 900 SCANINTERVAL 900 -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Mark Pace Sent: Wednesday, June 11, 2008 2:22 PM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: SSL Timeout Well that didn't work. And I had the firewall guy check his settings. He specifically raised the time-out value on that port to 1 hour. No difference, 10 mins, connection dies - S622. I wonder if the TIMEMARK and the other setting can be changed via OBEY or if I need to restart the TN3270 server. On Mon, Jun 9, 2008 at 5:12 PM, Mark Pace <[EMAIL PROTECTED]> wrote: > When I saw the defaults in the manual I thought so also. I've raised the > time-out values to the default and I'm waiting on the person with the issue > to report back to me. > > > On Mon, Jun 9, 2008 at 4:52 PM, Mansell, George R. <[EMAIL PROTECTED]> > wrote: > >> Our firewall inactive timeout is 1 hour. When it happened it was nasty; >> Tcpip & Vtam resources were not recovered. We have Tcpip inactive set to >> timeout just before the firewall does. Your 10 minutes sounds awfully >> short. >> >> -Original Message- >> From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On >> Behalf Of Mark Pace >> Sent: Monday, June 09, 2008 7:52 AM >> To: IBM-MAIN@BAMA.UA.EDU >> Subject: SSL Timeout >> >> Is there a parameter somewhere that will time-out an SSL connected >> TN3270 >> session? I've just converted our users from standard TN3270 sessions to >> SSL/TLS TN3270 sessions. All users are using PCOMM. >> After converting, one user has called me and says that he gets >> disconnected >> from the system after about 10 mins with a S622 (terminal error). Our >> TSO >> timeout in JWT is set to 1 hour. No other user was having this problem >> so I >> thought this was probably a coincidence since that user had tornadoes in >> his >> area and some damage to his home. So I had him revert to standard >> TELNET. >> 1 hour later he timed out with a S522 (TSO time-out value reached). I'm >> still convinced it's a network issue, but I don't have a leg to stand >> on. >> >> Anyone have an idea why a user might get disconnected when using SSL/TLS >> and >> not standard telnet? >> >> -- >> Mark Pace >> Mainline Information Systems >> >> -- >> For IBM-MAIN subscribe / signoff / archive access instructions, >> send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO >> Search the archives at http://bama.ua.edu/archives/ibm-main.html >> >> >> >> -- >> NOTICE: This electronic mail message and any attached files are >> confidential. The information is exclusively for the use of the individual >> or entity intended as the recipient. If you are not the intended recipient, >> any use, copying, printing, reviewing, retention, disclosure, distribution >> or forwarding of the message or any attached file is not authorized and is >> strictly prohibited. If you have received this electronic mail message in >> error, please advise the sender by reply electronic mail immediately and >> permanently delete the original transmission, any attachments and any copies >> of this message from your computer system. Thank you. >> >> >> == >> >> -- >> For IBM-MAIN subscribe / signoff / archive access instructions, >> send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO >> Search the archives at http://bama.ua.edu/archives/ibm-main.html >> >> > > > -- > Mark Pace > Mainline Information Systems > -- Mark Pace Mainline Information Systems -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: SSL Timeout
Well that didn't work. And I had the firewall guy check his settings. He specifically raised the time-out value on that port to 1 hour. No difference, 10 mins, connection dies - S622. I wonder if the TIMEMARK and the other setting can be changed via OBEY or if I need to restart the TN3270 server. On Mon, Jun 9, 2008 at 5:12 PM, Mark Pace <[EMAIL PROTECTED]> wrote: > When I saw the defaults in the manual I thought so also. I've raised the > time-out values to the default and I'm waiting on the person with the issue > to report back to me. > > > On Mon, Jun 9, 2008 at 4:52 PM, Mansell, George R. <[EMAIL PROTECTED]> > wrote: > >> Our firewall inactive timeout is 1 hour. When it happened it was nasty; >> Tcpip & Vtam resources were not recovered. We have Tcpip inactive set to >> timeout just before the firewall does. Your 10 minutes sounds awfully >> short. >> >> -Original Message- >> From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On >> Behalf Of Mark Pace >> Sent: Monday, June 09, 2008 7:52 AM >> To: IBM-MAIN@BAMA.UA.EDU >> Subject: SSL Timeout >> >> Is there a parameter somewhere that will time-out an SSL connected >> TN3270 >> session? I've just converted our users from standard TN3270 sessions to >> SSL/TLS TN3270 sessions. All users are using PCOMM. >> After converting, one user has called me and says that he gets >> disconnected >> from the system after about 10 mins with a S622 (terminal error). Our >> TSO >> timeout in JWT is set to 1 hour. No other user was having this problem >> so I >> thought this was probably a coincidence since that user had tornadoes in >> his >> area and some damage to his home. So I had him revert to standard >> TELNET. >> 1 hour later he timed out with a S522 (TSO time-out value reached). I'm >> still convinced it's a network issue, but I don't have a leg to stand >> on. >> >> Anyone have an idea why a user might get disconnected when using SSL/TLS >> and >> not standard telnet? >> >> -- >> Mark Pace >> Mainline Information Systems >> >> -- >> For IBM-MAIN subscribe / signoff / archive access instructions, >> send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO >> Search the archives at http://bama.ua.edu/archives/ibm-main.html >> >> >> >> -- >> NOTICE: This electronic mail message and any attached files are >> confidential. The information is exclusively for the use of the individual >> or entity intended as the recipient. If you are not the intended recipient, >> any use, copying, printing, reviewing, retention, disclosure, distribution >> or forwarding of the message or any attached file is not authorized and is >> strictly prohibited. If you have received this electronic mail message in >> error, please advise the sender by reply electronic mail immediately and >> permanently delete the original transmission, any attachments and any copies >> of this message from your computer system. Thank you. >> >> >> == >> >> -- >> For IBM-MAIN subscribe / signoff / archive access instructions, >> send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO >> Search the archives at http://bama.ua.edu/archives/ibm-main.html >> >> > > > -- > Mark Pace > Mainline Information Systems > -- Mark Pace Mainline Information Systems -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: SSL Timeout
When I saw the defaults in the manual I thought so also. I've raised the time-out values to the default and I'm waiting on the person with the issue to report back to me. On Mon, Jun 9, 2008 at 4:52 PM, Mansell, George R. <[EMAIL PROTECTED]> wrote: > Our firewall inactive timeout is 1 hour. When it happened it was nasty; > Tcpip & Vtam resources were not recovered. We have Tcpip inactive set to > timeout just before the firewall does. Your 10 minutes sounds awfully > short. > > -Original Message- > From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On > Behalf Of Mark Pace > Sent: Monday, June 09, 2008 7:52 AM > To: IBM-MAIN@BAMA.UA.EDU > Subject: SSL Timeout > > Is there a parameter somewhere that will time-out an SSL connected > TN3270 > session? I've just converted our users from standard TN3270 sessions to > SSL/TLS TN3270 sessions. All users are using PCOMM. > After converting, one user has called me and says that he gets > disconnected > from the system after about 10 mins with a S622 (terminal error). Our > TSO > timeout in JWT is set to 1 hour. No other user was having this problem > so I > thought this was probably a coincidence since that user had tornadoes in > his > area and some damage to his home. So I had him revert to standard > TELNET. > 1 hour later he timed out with a S522 (TSO time-out value reached). I'm > still convinced it's a network issue, but I don't have a leg to stand > on. > > Anyone have an idea why a user might get disconnected when using SSL/TLS > and > not standard telnet? > > -- > Mark Pace > Mainline Information Systems > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO > Search the archives at http://bama.ua.edu/archives/ibm-main.html > > > > -- > NOTICE: This electronic mail message and any attached files are > confidential. The information is exclusively for the use of the individual > or entity intended as the recipient. If you are not the intended recipient, > any use, copying, printing, reviewing, retention, disclosure, distribution > or forwarding of the message or any attached file is not authorized and is > strictly prohibited. If you have received this electronic mail message in > error, please advise the sender by reply electronic mail immediately and > permanently delete the original transmission, any attachments and any copies > of this message from your computer system. Thank you. > > > == > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO > Search the archives at http://bama.ua.edu/archives/ibm-main.html > > -- Mark Pace Mainline Information Systems -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: SSL Timeout
Our firewall inactive timeout is 1 hour. When it happened it was nasty; Tcpip & Vtam resources were not recovered. We have Tcpip inactive set to timeout just before the firewall does. Your 10 minutes sounds awfully short. -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Mark Pace Sent: Monday, June 09, 2008 7:52 AM To: IBM-MAIN@BAMA.UA.EDU Subject: SSL Timeout Is there a parameter somewhere that will time-out an SSL connected TN3270 session? I've just converted our users from standard TN3270 sessions to SSL/TLS TN3270 sessions. All users are using PCOMM. After converting, one user has called me and says that he gets disconnected from the system after about 10 mins with a S622 (terminal error). Our TSO timeout in JWT is set to 1 hour. No other user was having this problem so I thought this was probably a coincidence since that user had tornadoes in his area and some damage to his home. So I had him revert to standard TELNET. 1 hour later he timed out with a S522 (TSO time-out value reached). I'm still convinced it's a network issue, but I don't have a leg to stand on. Anyone have an idea why a user might get disconnected when using SSL/TLS and not standard telnet? -- Mark Pace Mainline Information Systems -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- NOTICE: This electronic mail message and any attached files are confidential. The information is exclusively for the use of the individual or entity intended as the recipient. If you are not the intended recipient, any use, copying, printing, reviewing, retention, disclosure, distribution or forwarding of the message or any attached file is not authorized and is strictly prohibited. If you have received this electronic mail message in error, please advise the sender by reply electronic mail immediately and permanently delete the original transmission, any attachments and any copies of this message from your computer system. Thank you. == -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: SSL Timeout
We had similar problems with one client using Zephyr's product PassPort. After doing a log of debugging we determined that it might be the firewall problem. It seemed the timing mark request was not getting thought so tcpip thought the connection was broke. That fixed the problem somewhat. We then found out that if the user did not have any activity the firewall would time them out. We could not get that changed so we had to shorten the scaninterval and timemark settings to force some activity to keep things alive. Things are now working to the best of my knowledge. Brad Wissink Information Technology Services Iowa State University 515-294-3088 -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Mark Pace Sent: Monday, June 09, 2008 7:52 AM To: IBM-MAIN@BAMA.UA.EDU Subject: SSL Timeout Is there a parameter somewhere that will time-out an SSL connected TN3270 session? I've just converted our users from standard TN3270 sessions to SSL/TLS TN3270 sessions. All users are using PCOMM. After converting, one user has called me and says that he gets disconnected from the system after about 10 mins with a S622 (terminal error). Our TSO timeout in JWT is set to 1 hour. No other user was having this problem so I thought this was probably a coincidence since that user had tornadoes in his area and some damage to his home. So I had him revert to standard TELNET. 1 hour later he timed out with a S522 (TSO time-out value reached). I'm still convinced it's a network issue, but I don't have a leg to stand on. Anyone have an idea why a user might get disconnected when using SSL/TLS and not standard telnet? -- Mark Pace Mainline Information Systems -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
