Perhaps the affected folks are traversing a different network path using different appliances?
-----Original Message----- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Mark Pace Sent: Thursday, June 12, 2008 7:42 AM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: SSL Timeout I now believe that it must be a client or end-user network problem. Some people using SSL stay connected for 1 hour (TSO time-out - S522), and others time-out at 10-15 mins (terminal error - S622). What's confusing is that I had them check their version of PComm and each is using the same version (v5.8.0.0). So I can't really find a common demoninator between them. On Wed, Jun 11, 2008 at 3:26 PM, Mansell, George R. <[EMAIL PROTECTED]> wrote: > Obey. > My settings: > > TelnetParms > Port 23 > CodePage ISO8859-1 IBM-1047 > PrtInactive 0 > INACTIVE 2400 > TIMEMARK 900 > SCANINTERVAL 900 > > -----Original Message----- > From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On > Behalf Of Mark Pace > Sent: Wednesday, June 11, 2008 2:22 PM > To: IBM-MAIN@BAMA.UA.EDU > Subject: Re: SSL Timeout > > Well that didn't work. And I had the firewall guy check his settings. > He > specifically raised the time-out value on that port to 1 hour. No > difference, 10 mins, connection dies - S622. > > I wonder if the TIMEMARK and the other setting can be changed via OBEY > or if > I need to restart the TN3270 server. > > On Mon, Jun 9, 2008 at 5:12 PM, Mark Pace <[EMAIL PROTECTED]> wrote: > > > When I saw the defaults in the manual I thought so also. I've raised > the > > time-out values to the default and I'm waiting on the person with the > issue > > to report back to me. > > > > > > On Mon, Jun 9, 2008 at 4:52 PM, Mansell, George R. > <[EMAIL PROTECTED]> > > wrote: > > > >> Our firewall inactive timeout is 1 hour. When it happened it was > nasty; > >> Tcpip & Vtam resources were not recovered. We have Tcpip inactive set > to > >> timeout just before the firewall does. Your 10 minutes sounds awfully > >> short. > >> > >> -----Original Message----- > >> From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On > >> Behalf Of Mark Pace > >> Sent: Monday, June 09, 2008 7:52 AM > >> To: IBM-MAIN@BAMA.UA.EDU > >> Subject: SSL Timeout > >> > >> Is there a parameter somewhere that will time-out an SSL connected > >> TN3270 > >> session? I've just converted our users from standard TN3270 sessions > to > >> SSL/TLS TN3270 sessions. All users are using PCOMM. > >> After converting, one user has called me and says that he gets > >> disconnected > >> from the system after about 10 mins with a S622 (terminal error). > Our > >> TSO > >> timeout in JWT is set to 1 hour. No other user was having this > problem > >> so I > >> thought this was probably a coincidence since that user had tornadoes > in > >> his > >> area and some damage to his home. So I had him revert to standard > >> TELNET. > >> 1 hour later he timed out with a S522 (TSO time-out value reached). > I'm > >> still convinced it's a network issue, but I don't have a leg to stand > >> on. > >> > >> Anyone have an idea why a user might get disconnected when using > SSL/TLS > >> and > >> not standard telnet? > >> > >> -- > >> Mark Pace > >> Mainline Information Systems > >> > >> > ---------------------------------------------------------------------- > >> For IBM-MAIN subscribe / signoff / archive access instructions, > >> send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN > INFO > >> Search the archives at http://bama.ua.edu/archives/ibm-main.html > >> > >> > >> > >> > ------------------------------------------------------------------------ > ------ > >> NOTICE: This electronic mail message and any attached files are > >> confidential. The information is exclusively for the use of the > individual > >> or entity intended as the recipient. If you are not the intended > recipient, > >> any use, copying, printing, reviewing, retention, disclosure, > distribution > >> or forwarding of the message or any attached file is not authorized > and is > >> strictly prohibited. If you have received this electronic mail > message in > >> error, please advise the sender by reply electronic mail immediately > and > >> permanently delete the original transmission, any attachments and any > copies > >> of this message from your computer system. Thank you. > >> > >> > >> > ======================================================================== > ====== > >> > >> > ---------------------------------------------------------------------- > >> For IBM-MAIN subscribe / signoff / archive access instructions, > >> send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN > INFO > >> Search the archives at http://bama.ua.edu/archives/ibm-main.html > >> > >> > > > > > > -- > > Mark Pace > > Mainline Information Systems > > > > > > -- > Mark Pace > Mainline Information Systems > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO > Search the archives at http://bama.ua.edu/archives/ibm-main.html > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO > Search the archives at http://bama.ua.edu/archives/ibm-main.html > > -- Mark Pace Mainline Information Systems ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html NOTICE: This electronic mail message and any files transmitted with it are intended exclusively for the individual or entity to which it is addressed. The message, together with any attachment, may contain confidential and/or privileged information. Any unauthorized review, use, printing, saving, copying, disclosure or distribution is strictly prohibited. If you have received this message in error, please immediately advise the sender by reply email and delete all copies. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
