Good day all,
I'm not sure which forum to pose this question as perhaps OpenSSH related.
Using the OpenSSH User's Guide etc to implement SFTP,
CoZBatchÝN¨: version: 4.0.0 2016-07-14
CoZBatchÝN¨: Copyright (C) Dovetailed Technologies, LLC. 2005-2016. All rights reserved.
CoZBatchÝI¨: executing progname=login-shell="-/bin/sh"
Co:Z SFTP version: 4.0.0 (6.4p1) 2016-07-14
Copyright (C) Dovetailed Technologies, LLC. 2008-2016. All rights reserved.
Connecting to 10.30.6.40...
FOTS3001 zsshIcsfMacCompute (540): CSFPOWH failed: return code = 12, reason code = 36156
Ý83.569¨ Connection closed
CoZBatchÝI¨: returning rc=exitcode=255
The reason code indicates :
8D3C (36156)
A PKCS #11 service is being requested. The service is disabled due to an ICSF FIPS self test failure. The request is not processed.
User action: Report the problem to your IBM support center
The CPACF feature code is not activated and won't be able to due to our z196 withdrawn from marketing and we can't order any additional features on the z196 processor.
Is there any way to run SFTP without the use of CPACF ?
Many thanks for your replies.
Regards,
Vikesh
SFTP fails RC = 12, RSNcode = 36156
Re: SFTP fails RC = 12, RSNcode = 36156
The FOTS3001 error is an IBM Ported Tools OpenSSH failure.
You need to update your IBM OpenSSH configuration to disable ICSF, then you will be able to use CO:Z SFTP.
You need to update your IBM OpenSSH configuration to disable ICSF, then you will be able to use CO:Z SFTP.
Re: SFTP fails RC = 12, RSNcode = 36156
Hi,
Not sure if disable ICSF meant removing the following statements from zos_ssh_config & zos_sshd_config, but doing so allowed SFTP to work.
CiphersSource ICSF
MACsSource ICSF
Much appreciated for your assistance,
Vikesh
Not sure if disable ICSF meant removing the following statements from zos_ssh_config & zos_sshd_config, but doing so allowed SFTP to work.
CiphersSource ICSF
MACsSource ICSF
Much appreciated for your assistance,
Vikesh