IT29784: FTPS FAILS WHEN SERVER SENDS MULTI-PACKET WELCOME MESSAGE

APAR status

• Closed as program error.

Error description

• When using explicit FTP over TLS in the File Nodes, if the
  remote server sends a welcome message that spans multiple
  TCP/IP packets then the product interprets the second such
  packet as containing the response code for the AUTH TLS request.
  
  
  If this packet does not have a status code of 234 then the
  product will interpret this as a failure to switch to TLS and
  will immediately close the comand socket resulting in an
  exception like the following:
  
  
  BIP3384E: File node ''File Read1'' in message flow
  ''Nec_Customer''. An unexpected
  
  reply has been received from ''FTPS'' server ''hostName'. The
  command and reply are: ''Negative response received on AUTH:
  220''.
  
  
  Additional Symptom(s) Search Keyword(s):FTP over TLS, File
  Nodes,  AUTH TLS, BIP3384E,
  

Local fix

Problem summary

• ****************************************************************
  USERS AFFECTED:
  All users of IBM Integration Bus version 10 or App Connect
  version 11 using FTPS with the File Nodes.
  
  
  Platforms affected:
  MultiPlatform
  
  ****************************************************************
  PROBLEM DESCRIPTION:
  <span style="background-color:rgb(255, 255, 255)">When using
  explicit FTP over TLS in the File Nodes, if the </span><span
  style="background-color:rgb(255, 255, 255)">remote server sends
  a welcome message that spans multiple </span><span
  style="background-color:rgb(255, 255, 255)">TCP/IP packets then
  the product interprets the second such </span><span
  style="background-color:rgb(255, 255, 255)">packet as containing
  the response code for the AUTH TLS request.</span>
  <span style="background-color:rgb(255, 255, 255)">
  
  </span>
  <span style="background-color:rgb(255, 255, 255)">
  
  </span>
  <span style="background-color:rgb(255, 255, 255)">If this packet
  does not have a status code of 234 then the </span><span
  style="background-color:rgb(255, 255, 255)">product will
  interpret this as a failure to switch to TLS and </span><span
  style="background-color:rgb(255, 255, 255)">will immediately
  close the command socket resulting in an </span><span
  style="background-color:rgb(255, 255, 255)">exception like the
  following:                                  </span>
  <span style="background-color:rgb(255, 255, 255)">
  
  </span>
  <span style="background-color:rgb(255, 255, 255)">
  
  </span>
  <span style="background-color:rgb(255, 255, 255)">BIP3384E: File
  node ''File Read1'' in message flow </span><span
  style="background-color:rgb(255, 255, 255)">''Nec_Customer''. An
  unexpected </span><span style="background-color:rgb(255, 255,
  255)">reply has been received from ''FTPS'' server ''hostName'.
  The  </span><span style="background-color:rgb(255, 255,
  255)">command and reply are: ''Negative response received on
  AUTH: </span><span style="background-color:rgb(255, 255,
  255)">220''.               </span>
  

Problem conclusion

• The File Nodes now correctly recognise multi-packet welcome
  messages from FTPS servers and this error no longer occurs.
  
  ---------------------------------------------------------------
  The fix is targeted for delivery in the following PTFs:
  
  Version    Maintenance Level
  v10.0      10.0.0.18
  v11.0      11.0.0.6
  
  The latest available maintenance can be obtained from:
  http://www-01.ibm.com/support/docview.wss?rs=849&uid=swg27006041
  
  If the maintenance level is not yet available,information on
  its planned availability can be found on:
  http://www-1.ibm.com/support/docview.wss?rs=849&uid=swg27006308
  ---------------------------------------------------------------
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  INTEGRATION BUS

• Fixed component ID

  5724J0540

Applicable component levels