Kurt, thanks for the response. I had closed my ticket before they could respond because I compared my secure FTP settings with IBM recommended here: https://www.ibm.com/support/knowledgecenter/SSLTBW_2.1.0/com.ibm.zos.v2r1.gim3000/gim3116.htm
SECURE_FTP ALLOWED SECURE_MECHANISM TLS TLSRFCLEVEL CCCNONOTIFY TLSMECHANISM FTP SECURE_DATACONN PRIVATE KEYRING keyringname EPSV4 TRUE In my jobs I had coded TLSMECHANISM AT-TLS when the failure occurred. I changed it to TLSMECHANISM FTP base on the doc above and things started working again, maybe it was a timing co-incidence? I'll run another job tomorrow when there may be additional maint to download reverting back to AT-TLS. _________________________________________________________________ Dave Jousma Manager Mainframe Engineering, Assistant Vice President david.jou...@53.com 1830 East Paris, Grand Rapids, MI 49546 MD RSCB2H p 616.653.8429 f 616.653.2717 -----Original Message----- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Kurt Quackenbush Sent: Monday, August 15, 2016 2:10 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: SMPE receive order broken this morning? On 8/15/2016 9:40 AM, Jousma, David wrote: > All, > > I apologize if this has been asked, but I've been on vacation for the last > week or two. Last time it worked for me was prior to this. Seems like > something changed? Seems to be refused at IBM end. I do have ticket open > with them, but thought maybe I might have missed something. > >> /bin/ftp -e -v -f "//'SYS1.TCPPARMS(FTPSECUR)'" >> deliverycb-bld.dhe.ibm.com > > EZY2640I Using 'SYS1.TCPPARMS(FTPSECUR)' for local site configuration > parameters . > EZYFT25I Using //'TCPIP.STANDARD.TCPXLBIN' for FTP translation tables > for the co ntrol connection. > EZYFT31I Using //'TCPIP.STANDARD.TCPXLBIN' for FTP translation tables > for the da ta connection. > EZA1450I IBM FTP CS V2R2 > EZA1772I FTP: EXIT has been set. > EZYFT18I Using catalog '/usr/lib/nls/msg/C/ftpdmsg.cat' for FTP messages. > EZA1554I Connecting to: dispby-117.boulder.ibm.com 170.225.15.117 port: 21. > 220-IBM's internal systems must only be used for conducting IBM's > 220-business or for purposes authorized by IBM management. > 220- > 220-Use is subject to audit at any time by IBM management. > 220- > 220 dhebpcb01 secure FTP server ready. > EZA1701I >>> AUTH TLS > 234 SSLv23/TLSv1 > EZA2897I Authentication negotiation failed EZA2898I Unable to > successfully negotiate required authentication EZA1735I Std Return > Code = 10234, Error Code = 00017 > _________________________________________________________________ > Dave Jousma As already mentioned, IBM did have an upgrade this past weekend for its download server infrastructure, and unsecured FTP downloads are no longer allowed. You must use now FTPS or HTTPS when downloading from IBM's servers to your z/OS systems. Unfortunately, perhaps as a result of this deployment, there was also this morning an outage with the download infrastructure, but it does appear to be working now. Hopefully Dave received a similar response to his open ticket. If anyone tries again and continues to have troubles, please open a problem record with IBM support. Kurt Quackenbush -- IBM, SMP/E Development ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN This e-mail transmission contains information that is confidential and may be privileged. It is intended only for the addressee(s) named above. If you receive this e-mail in error, please do not read, copy or disseminate it in any manner. If you are not the intended recipient, any disclosure, copying, distribution or use of the contents of this information is prohibited. Please reply to the message immediately by informing the sender that the message was misdirected. After replying, please erase it from your computer system. Your assistance in correcting this error is appreciated. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
