FTP Error 532 When Password is Supplied Using ACCOUNT
Command for Minidisk Not Protected by an ESM


 APAR Identifier ...... PQ19761      Last Changed ........ 99/03/01
 FTP ERROR 532 WHEN PASSWORD IS SUPPLIED USING ACCOUNT COMMAND
 FOR MINIDISK NOT PROTECTED BY AN ESM
 
 Symptom ...... IN INCORROUT         Status ........... CLOSED  FIN
 Severity ................... 3      Date Closed ......... 99/03/01
 Component .......... 5735FAL00      Duplicate of ........
 Reported Release ......... 310      Fixed Release ............
 Component Name TCP/IP V2 FOR V      Special Notice
 Current Target Date ..              Flags
 SCP ...................
 Platform ............
 
 Status Detail: APARCLOSURE - APAR is being closed.
 
 PE PTF List:
 
 PTF List:
 Release 230   : No PTF planned
 Release 240   : No PTF planned
 Release 310   : No PTF planned
 
 Parent APAR:
 Child APAR list:
 
 ERROR DESCRIPTION:
 A user is attempting to access a password-protected minidisk on
 a VM host, on which an External Security Manager (ESM) is in
 use.  The ESM is configured to perform user authentication, but
 not minidisk access control.  When the user FTPs into the VM
 host, a "no working directory defined" message is received,
 which also requests the user to send a minidisk password, via
 the FTP "Account" (ACCT) subcommand.  When this command is
 issued, the FTP server attempts a LINK command (that fails).
 The user receives the message:
 
  532 Invalid password;  still no working directory
 
 From trapping the CP LINK command, it appears the FTP server
 (FTPSERVE) is not passing the supplied password as part of its
 LINK command.  This problem only occurs on systems that are
 running an ESM, but for which minidisks are also password
 protected.
 
 LOCAL FIX:
 
 PROBLEM SUMMARY:
 ****************************************************************
 * USERS AFFECTED: All users of the VM FTP server using an      *
 *                 external security manager.                   *
 ****************************************************************
 * RECOMMENDATION:                                              *
 ****************************************************************
 The FTP server design does not account for configurations where
 an External Security Manager (ESM) is used to protect only
 certain system resources, and not all resources (for example,
 user ID access is controlled by an ESM, but minidisk access is
 not).  This is an admitted shortcoming.
 
 PROBLEM CONCLUSION:
 
 TEMPORARY FIX:
 
 COMMENTS:
 This APAR is being closed FIN (Fixed If Next).  This closing
 code indicates that the problem will be resolved if there is
 a next release of VM TCP/IP after the reported release.  This
 closing code has been agreed upon by the APAR submittor.
 
 MODULES/MACROS:   NONE
 
 SRLS:
 
 RTN CODES:
 
 CIRCUMVENTION:
 
 MESSAGE TO SUBMITTER: