PQ88308: MAKE FTP SERVER 220 REPLY MESSAGE MORE SECURE.

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• REPLYSECURITYLEVEL currently supports two levels of restriction:
  0 indicates that no restrictions are placed on the replies
      sent by the FTP server.
    1 indicates that the FTP server's replies should not contain
      any ports, IP addresses, or operating system level.
  The problem is with level 1, the server 220 reply still
  contains the operating system type (IBM) and should not.
  

Local fix

• N/A
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: All users of the IBM Communications Server   *
  *                 for z/OS Version 1 Release 2, 4, 5           *
  *                 and 6 IP: FTP                                *
  ****************************************************************
  * PROBLEM DESCRIPTION: REPLYSECURITYLEVEL currently supports   *
  *                      two levels of restriction:              *
  *                      0 indicates that no restrictions are    *
  *                        placed on the replies sent by the FTP *
  *                        server.                               *
  *                      1 indicates that the FTP server's       *
  *                        replies should not contain any ports, *
  *                        IP addresses, or operating system     *
  *                        level.                                *
  *                      The problem is with level 1, the server *
  *                      220 reply still contains the operating  *
  *                      system type (IBM) and should not.       *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  The FTP servers initial 220 reply should omit the operating
  system type (IBM) in the reply text.
  +-------------------------------------------------------------+
  + Please check our Communications Server for OS/390 homepages +
  + for common networking tips and fixes.  The URL for these    +
  + homepages can be found in Informational APAR II11334.       +
  +-------------------------------------------------------------+
  

Problem conclusion

• The FTP server has been corrected.
  The following publication will be updated.
  ============================================
  z/OS Communications Server
  IP and SNA Codes
  Document Number SC31879104  V1R6
                  SC31879103  V1R5
                  SC31879102  V1R4
                  SC31879101  V1R2
  
  FTPD Reply Codes, the following reply should be updated.
  220- FTP init_time on init_date.
  
  * Cross Reference between External and Internal Names
  PREFTPLD (EZAFTPLD)  PREFTPLD (EZAFTPLD)
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UQ89164 UQ89165 UQ89166 UQ89167 UQ89168 UQ89169 UQ89170 106PC1Ÿ
  UQ89171 106PC1Ÿ

Modules/Macros

• EZAFTPLD EZAFTPSD EZAFTPSR
  

Fix information

• Fixed component name

  TCP/IP V3 MVS

• Fixed component ID

  5655HAL00

Applicable component levels

• R120 PSY UQ89164

     UP04/06/24 P F406

• R129 PSY UQ89165

     UP04/06/24 P F406

• R140 PSY UQ89166

     UP04/06/24 P F406

• R149 PSY UQ89167

     UP04/06/24 P F406

• R150 PSY UQ89168

     UP04/06/24 P F406

• R159 PSY UQ89169

     UP04/06/24 P F406

• R160 PSY UQ89170

     UP04/06/24 P F406

• R169 PSY UQ89171

     UP04/06/24 P F406

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.