Re: FTP Switch between users not accepted as anonymouslevel = 3
I agree with Charles. This is probably a firewall issue on the client side. Have their network guys check the logs to see what's going on. If it works for you, it should also work for the client. When I've seen these before, and we see a lot of this, 99 times out of 100, it's the client's firewall blocking the connection. You can get all sorts of messages as processing continues by ftp. They probably need to whitelist you on their side as a "safe" connection partner. Ramsey On Wed, Nov 17, 2021 at 12:59 PM Charles Mills wrote: > My *guess* at this time is that > > 1. The true cause of the error is a customer firewall or similar that is > blocking the connection. > > 2. The "anonymouslevel" text in the error message is totally spurious and > has nothing to do with reality. I have seen this before, where the "detail" > part of an FTP error message was devoid of a connection to reality. My > *suspicion* is that the component generating the error is failing to set > the > "reason code" (using the term in a general sense) correctly, leading the > message generation routine to insert spurious text. > > Charles > > > -Original Message- > From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On > Behalf Of Charles Mills > Sent: Monday, November 15, 2021 3:56 PM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: FTP Switch between users not accepted as anonymouslevel = 3 > > Does anyone know what the heck I should be looking for on this? > > A customer running the z/OS FTP client is attempting to log into our FTP > server. The FTP client is ATTACHed dynamically with FTP -e -i -n > -f//DD:SYS00032 url.of.ftp.server > > The FTP client is passed an INPUT file that begins > > Useruserid password > > The output from the FTP client is > > EZA1736I FTP -e -i -n -f //DD:SYS00032 url.of.ftp.server > EZY2640I Using dd:SYS00032 for local site configuration parameters. > EZA1450I IBM FTP CS V2R3 > EZA1772I FTP: EXIT has been set. > EZA1554I Connecting to: url.of.ftp.server dotted.address port: 21. > EZA2589E Connection to server interrupted or timed out. USER command > failed. > Switch between users not accepted as anonymouslevel = 3 > EZA1735I Std Return Code = 1, Error Code = 8 > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: FTP Switch between users not accepted as anonymouslevel = 3
My *guess* at this time is that 1. The true cause of the error is a customer firewall or similar that is blocking the connection. 2. The "anonymouslevel" text in the error message is totally spurious and has nothing to do with reality. I have seen this before, where the "detail" part of an FTP error message was devoid of a connection to reality. My *suspicion* is that the component generating the error is failing to set the "reason code" (using the term in a general sense) correctly, leading the message generation routine to insert spurious text. Charles -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Charles Mills Sent: Monday, November 15, 2021 3:56 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: FTP Switch between users not accepted as anonymouslevel = 3 Does anyone know what the heck I should be looking for on this? A customer running the z/OS FTP client is attempting to log into our FTP server. The FTP client is ATTACHed dynamically with FTP -e -i -n -f//DD:SYS00032 url.of.ftp.server The FTP client is passed an INPUT file that begins Useruserid password The output from the FTP client is EZA1736I FTP -e -i -n -f //DD:SYS00032 url.of.ftp.server EZY2640I Using dd:SYS00032 for local site configuration parameters. EZA1450I IBM FTP CS V2R3 EZA1772I FTP: EXIT has been set. EZA1554I Connecting to: url.of.ftp.server dotted.address port: 21. EZA2589E Connection to server interrupted or timed out. USER command failed. Switch between users not accepted as anonymouslevel = 3 EZA1735I Std Return Code = 1, Error Code = 8 -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: FTP Switch between users not accepted as anonymouslevel = 3
On Wed, 17 Nov 2021 07:22:59 -0800, Charles Mills wrote: >> Does the input have the USER keyword specified, then the actual >> userid/password? > >Yes, the first line of DD INPUT is (asterisks substituted for sensitive data) > >USER *** > Beware of case sensitivity, enforced by some clients/servers on keywords in RFC 959, particularly for arguments of "QUOTE". For example, quote HELP might work, while quote help fails. -- gil -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: FTP Switch between users not accepted as anonymouslevel = 3
> Does the input have the USER keyword specified, then the actual
> userid/password?
Yes, the first line of DD INPUT is (asterisks substituted for sensitive data)
USER ***
> I thought if you actually connected by specifying a
> URL, you didn't need the USER keyword.
No, the URL is a synonym for the IP address ("foreign host" in FTP-speak). You
still potentially need a port specification (default is 21) but you definitely
still need to specify a userid and password eventually, somehow. Not just my
theory: the same FTP-attaching code works (1) this customer mainframe to
another server mainframe; and (2) other customer mainframe clients to this
server mainframe.
Charles
-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf
Of Michael Babcock
Sent: Wednesday, November 17, 2021 6:25 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: FTP Switch between users not accepted as anonymouslevel = 3
Does the input have the USER keyword specified, then the actual
userid/password? I thought if you actually connected by specifying a
URL, you didn't need the USER keyword.
On 11/16/2021 11:47 AM, Charles Mills wrote:
> Thanks. Good thought. The file is machine-generated by software that
> generally works so that seems unlikely. I don't *think* it is even getting up
> to the USER statement, because that should come after the 220 message, but I
> am grasping at straws here too.
>
> Charles
>
>
> -Original Message-
> From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On
> Behalf Of Michael Babcock
> Sent: Tuesday, November 16, 2021 9:36 AM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Re: FTP Switch between users not accepted as anonymouslevel = 3
>
> A grasp at straws, but make sure the INPUT data does not contain data in
> column 72 onward (mostly it would be line numbers).
>
> On 11/15/2021 5:55 PM, Charles Mills wrote:
>> Does anyone know what the heck I should be looking for on this?
>>
>>
>>
>> A customer running the z/OS FTP client is attempting to log into our FTP
>> server. The FTP client is ATTACHed dynamically with FTP -e -i -n
>> -f//DD:SYS00032 url.of.ftp.server
>>
>>
>>
>> The FTP client is passed an INPUT file that begins
>>
>>
>>
>> Useruserid password
>>
>>
>>
>> The output from the FTP client is
>>
>>
>>
>> EZA1736I FTP -e -i -n -f //DD:SYS00032 url.of.ftp.server
>>
>> EZY2640I Using dd:SYS00032 for local site configuration parameters.
>>
>> EZA1450I IBM FTP CS V2R3
>>
>> EZA1772I FTP: EXIT has been set.
>>
>> EZA1554I Connecting to: url.of.ftp.server dotted.address port: 21.
>>
>> EZA2589E Connection to server interrupted or timed out. USER command failed.
>> Switch between users not accepted as anonymouslevel = 3
>>
>> EZA1735I Std Return Code = 1, Error Code = 8
>>
>>
>>
>> I can connect from another z/OS system using similar parameters with no
>> problem, but this customer has never tried it before. "Nothing has changed."
>> Does anyone have a clue?
>>
>>
>>
>> Charles
>>
>>
>>
>>
>> --
>> For IBM-MAIN subscribe / signoff / archive access instructions,
>> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: FTP Switch between users not accepted as anonymouslevel = 3
Does the input have the USER keyword specified, then the actual userid/password? I thought if you actually connected by specifying a URL, you didn't need the USER keyword. On 11/16/2021 11:47 AM, Charles Mills wrote: Thanks. Good thought. The file is machine-generated by software that generally works so that seems unlikely. I don't *think* it is even getting up to the USER statement, because that should come after the 220 message, but I am grasping at straws here too. Charles -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Michael Babcock Sent: Tuesday, November 16, 2021 9:36 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: FTP Switch between users not accepted as anonymouslevel = 3 A grasp at straws, but make sure the INPUT data does not contain data in column 72 onward (mostly it would be line numbers). On 11/15/2021 5:55 PM, Charles Mills wrote: Does anyone know what the heck I should be looking for on this? A customer running the z/OS FTP client is attempting to log into our FTP server. The FTP client is ATTACHed dynamically with FTP -e -i -n -f//DD:SYS00032 url.of.ftp.server The FTP client is passed an INPUT file that begins Useruserid password The output from the FTP client is EZA1736I FTP -e -i -n -f //DD:SYS00032 url.of.ftp.server EZY2640I Using dd:SYS00032 for local site configuration parameters. EZA1450I IBM FTP CS V2R3 EZA1772I FTP: EXIT has been set. EZA1554I Connecting to: url.of.ftp.server dotted.address port: 21. EZA2589E Connection to server interrupted or timed out. USER command failed. Switch between users not accepted as anonymouslevel = 3 EZA1735I Std Return Code = 1, Error Code = 8 I can connect from another z/OS system using similar parameters with no problem, but this customer has never tried it before. "Nothing has changed." Does anyone have a clue? Charles -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: FTP Switch between users not accepted as anonymouslevel = 3
Thanks. Good thought. The file is machine-generated by software that generally works so that seems unlikely. I don't *think* it is even getting up to the USER statement, because that should come after the 220 message, but I am grasping at straws here too. Charles -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Michael Babcock Sent: Tuesday, November 16, 2021 9:36 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: FTP Switch between users not accepted as anonymouslevel = 3 A grasp at straws, but make sure the INPUT data does not contain data in column 72 onward (mostly it would be line numbers). On 11/15/2021 5:55 PM, Charles Mills wrote: > Does anyone know what the heck I should be looking for on this? > > > > A customer running the z/OS FTP client is attempting to log into our FTP > server. The FTP client is ATTACHed dynamically with FTP -e -i -n > -f//DD:SYS00032 url.of.ftp.server > > > > The FTP client is passed an INPUT file that begins > > > > Useruserid password > > > > The output from the FTP client is > > > > EZA1736I FTP -e -i -n -f //DD:SYS00032 url.of.ftp.server > > EZY2640I Using dd:SYS00032 for local site configuration parameters. > > EZA1450I IBM FTP CS V2R3 > > EZA1772I FTP: EXIT has been set. > > EZA1554I Connecting to: url.of.ftp.server dotted.address port: 21. > > EZA2589E Connection to server interrupted or timed out. USER command failed. > Switch between users not accepted as anonymouslevel = 3 > > EZA1735I Std Return Code = 1, Error Code = 8 > > > > I can connect from another z/OS system using similar parameters with no > problem, but this customer has never tried it before. "Nothing has changed." > Does anyone have a clue? > > > > Charles > > > > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: FTP Switch between users not accepted as anonymouslevel = 3
A grasp at straws, but make sure the INPUT data does not contain data in column 72 onward (mostly it would be line numbers). On 11/15/2021 5:55 PM, Charles Mills wrote: Does anyone know what the heck I should be looking for on this? A customer running the z/OS FTP client is attempting to log into our FTP server. The FTP client is ATTACHed dynamically with FTP -e -i -n -f//DD:SYS00032 url.of.ftp.server The FTP client is passed an INPUT file that begins Useruserid password The output from the FTP client is EZA1736I FTP -e -i -n -f //DD:SYS00032 url.of.ftp.server EZY2640I Using dd:SYS00032 for local site configuration parameters. EZA1450I IBM FTP CS V2R3 EZA1772I FTP: EXIT has been set. EZA1554I Connecting to: url.of.ftp.server dotted.address port: 21. EZA2589E Connection to server interrupted or timed out. USER command failed. Switch between users not accepted as anonymouslevel = 3 EZA1735I Std Return Code = 1, Error Code = 8 I can connect from another z/OS system using similar parameters with no problem, but this customer has never tried it before. "Nothing has changed." Does anyone have a clue? Charles -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: FTP Switch between users not accepted as anonymouslevel = 3
This makes no sense. 1. The Server FTPD specifies ANONYMOUSLEVEL 1 2. I have no idea what the client FTPD specifies, but ANONYMOUSLEVEL is a server-only configuration statement. 3. There should be no "anonymous" anywhere in this picture. The first statement in the INPUT data set is USER userid password It appears to me that the error occurs very early on the initial connection because there is no 220-FTPD1 IBM FTP CS V2R4 at ... as would be expected. No TLS in the picture, and we're not up to that point in the dialog anyway. I duplicate the customer's parameters as closely as I can (different naming conventions and so forth, of course) and it works exactly as expected. Has anyone seen this? Does anyone have any idea what might be going on? Charles -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Charles Mills Sent: Monday, November 15, 2021 3:56 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: FTP Switch between users not accepted as anonymouslevel = 3 Does anyone know what the heck I should be looking for on this? A customer running the z/OS FTP client is attempting to log into our FTP server. The FTP client is ATTACHed dynamically with FTP -e -i -n -f//DD:SYS00032 url.of.ftp.server The FTP client is passed an INPUT file that begins Useruserid password The output from the FTP client is EZA1736I FTP -e -i -n -f //DD:SYS00032 url.of.ftp.server EZY2640I Using dd:SYS00032 for local site configuration parameters. EZA1450I IBM FTP CS V2R3 EZA1772I FTP: EXIT has been set. EZA1554I Connecting to: url.of.ftp.server dotted.address port: 21. EZA2589E Connection to server interrupted or timed out. USER command failed. Switch between users not accepted as anonymouslevel = 3 EZA1735I Std Return Code = 1, Error Code = 8 I can connect from another z/OS system using similar parameters with no problem, but this customer has never tried it before. "Nothing has changed." Does anyone have a clue? Charles -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: FTP Switch between users not accepted as anonymouslevel = 3
It works all the time from other z/OS clients, using the same userid. I just logged on from a Windows FTP client using the same userid. It works from their client to a different z/OS server, and no, I do not know what is different between the two servers -- probably lots of little things -- I did not set either one up originally. Charles -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Attila Fogarasi Sent: Monday, November 15, 2021 4:17 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: FTP Switch between users not accepted as anonymouslevel = 3 They are missing part of the Anonymous config required or maybe the USS directory was changed. When specifying Anonymous 3 you also have to configure all of the access rights, looks like they did not :) It can get pretty voluminous. https://www.ibm.com/docs/en/zos/2.2.0?topic=protocol-anonymous-ftp-server-statement -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: FTP Switch between users not accepted as anonymouslevel = 3
They are missing part of the Anonymous config required or maybe the USS directory was changed. When specifying Anonymous 3 you also have to configure all of the access rights, looks like they did not :) It can get pretty voluminous. https://www.ibm.com/docs/en/zos/2.2.0?topic=protocol-anonymous-ftp-server-statement On Tue, Nov 16, 2021 at 10:56 AM Charles Mills wrote: > Does anyone know what the heck I should be looking for on this? > > > > A customer running the z/OS FTP client is attempting to log into our FTP > server. The FTP client is ATTACHed dynamically with FTP -e -i -n > -f//DD:SYS00032 url.of.ftp.server > > > > The FTP client is passed an INPUT file that begins > > > > Useruserid password > > > > The output from the FTP client is > > > > EZA1736I FTP -e -i -n -f //DD:SYS00032 url.of.ftp.server > > EZY2640I Using dd:SYS00032 for local site configuration parameters. > > EZA1450I IBM FTP CS V2R3 > > EZA1772I FTP: EXIT has been set. > > EZA1554I Connecting to: url.of.ftp.server dotted.address port: 21. > > EZA2589E Connection to server interrupted or timed out. USER command > failed. > Switch between users not accepted as anonymouslevel = 3 > > EZA1735I Std Return Code = 1, Error Code = 8 > > > > I can connect from another z/OS system using similar parameters with no > problem, but this customer has never tried it before. "Nothing has > changed." > Does anyone have a clue? > > > > Charles > > > > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
FTP Switch between users not accepted as anonymouslevel = 3
Does anyone know what the heck I should be looking for on this? A customer running the z/OS FTP client is attempting to log into our FTP server. The FTP client is ATTACHed dynamically with FTP -e -i -n -f//DD:SYS00032 url.of.ftp.server The FTP client is passed an INPUT file that begins Useruserid password The output from the FTP client is EZA1736I FTP -e -i -n -f //DD:SYS00032 url.of.ftp.server EZY2640I Using dd:SYS00032 for local site configuration parameters. EZA1450I IBM FTP CS V2R3 EZA1772I FTP: EXIT has been set. EZA1554I Connecting to: url.of.ftp.server dotted.address port: 21. EZA2589E Connection to server interrupted or timed out. USER command failed. Switch between users not accepted as anonymouslevel = 3 EZA1735I Std Return Code = 1, Error Code = 8 I can connect from another z/OS system using similar parameters with no problem, but this customer has never tried it before. "Nothing has changed." Does anyone have a clue? Charles -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
