EZD0944I   Transform transform_id : duplicate attribute ( attribute )

Explanation

An IKE negotiation failed because a transform specified the same attribute more than the allowed number of times.

Additional diagnostic messages with the same message instance number will be issued to identify the impacted security association (SA). The message instance number precedes the message number in the log output and is used to group related messages from the IKE daemon.

transform_id is the value used to identify this transform in an IKE proposal. Supported transforms for IKE SAs are described in Policy Agent and policy applications in z/OS Communications Server: IP Configuration Reference. Phase 1 transforms are specified on a KeyExchangeOffer statement, and phase 2 transforms are specified on an IpDataOffer statement.

attribute is the attribute that was duplicated. See the information about Policy Agent and policy applications in z/OS Communications Server: IP Configuration Reference for more information about transform attributes.

System action

This SA negotiation failed; IKE daemon processing continues.

Operator response

Contact the system programmer.

System programmer response

Notify the administrator of the remote security endpoint about this error and ask the administrator to ensure that all attributes are specified correctly. With the exception of the life-value tag, attributes can be specified only once in a single transform.

Module

gen.cpp

Procedure name

None.