IBM Communications Server for Windows Version 6.4.0.8 is an upgrade version of Version 6.4.0 through version 6.4.0.7, which provides the new functionality mentioned under section 1.1.
This document contains information supplementary to the online help and the publications. It describes the features such as newly-added functions, hints, tips, restrictions, and corrections.
Thank you for choosing IBM Communications Server!
The following list of APARS are included in this release that
have been provided as fixes since the distributed Communications Server v6.4.0 release:
APARS included from FixPack 8 |
|
| JR58731 | DLUR-DLUS RTP PIPE TIMES OUT, OUTSTANDING RUI_WRITE INIT-SELF FAILS |
| JR55930 | SLI APPLICATION HANGS WITH RUI INVALID_PROCESS |
| JR58761 | CRASH IN APPN.SYS |
| JR58791 | FIX RTPSTAT FLOW ON HPR LINK DISCONNECT RECOVERY |
| JR57894 | TLS 1.2 CIPHER LIST NOT FULL INITIALIZED |
| JR58486 | CONTENTION RESOLUTION ERROR RECOVERY FIX ON BID RACE CONDITION |
| JR58742 | SUPPORT FOR 3270 INTRUSION DETECTION SERVICE |
| JR57102 | SWEET 32: BIRTHDAY ATTACKS ON 64-BIT BLOCK CIPHERS (CVE-2016-2183) |
APARS included from FixPack 7 |
|
| JR55374 | SOME TN3270 SESSIONS MAY HANG WHEN HOST APPL TERMINATES |
| JR55055 | GSKIT HASH SELECTOR LOGIC DOES NOT SELECT FROM ALLOWED SET FOR TLS1.2 |
| JR54811 | GSKIT FIX FOR CONNECTION TIMEOUT RECOVERY OF SESSION |
| JR54157 | JVM CRASH FROM WCPIC32.DLL |
| JR53780 | MALFORMED ECPARAMETERS CAUSES INFINITE LOOP (CVE-2015-1788) |
| JR53585 | CSWIN NODE TAKES A LONG TIME TO START |
| JR53091 | The RC4 BAR MITXVAH ATTACK FIX REMOVES RC4 CIPHERS FROM SSL |
| JR52865 | GSKit EPHEMERAL RSA VULNERABILITY (CVE-2015-0138) |
| JR52855 | GSKIT FREAK VULNERABILITY Fix |
| JR52832 | AFTER OUTAGE CP-CP SESSIONS RETRY TOO QUICKLY THEN GIVE UP |
| JR52457 | RSETUP RETRY TIMER IS TOO SHORT |
| JR52421 | AUTOLOGON SUPPORT BIT IS LEFT ON WHEN REPLYING TO LOCATE |
APARS included from FixPack 6 |
|
| JR48173 | WTSQUERYUSERTOKEN FAILED |
| JR48671 | REFIFO NOT ENABLED ON CPSVCMG PIPE |
| JR51151 | TRCGUI FAILS TO START |
| JR49449 | SLI_OPEN/RUI_INIT REJECTED AFTER LU RESET |
| JR49602 | CP-CP SESSIONS MAY NOT RECOVER AFTER OUTAGE |
| JR51178 | SNA 3270 PRINTER SESSION DOES NOT RECOVER AFTER HOST APPLICATION RESTART |
| JR51189 | DLUR INTERNAL PU DOES NOT AUTO-ACTIVATE WHEN LU FROM POOL IS ACCESSED |
APARS included from FixPack 5 |
|
| JR45675 | SLI_CLOSE AND SLI_BID ON API CLIENT PRODUCE WRONG RESULTS. |
| JR46455 | CSWIN INCORRECTLY REPORTS PRINTER SESSIONS ONLINE TO HOST |
| JR47065 | UNABLE TO READ FIRST COUNTER VALUE |
| JR47520 | HPR HANG DUE TO HOST GAP MESSAGE PACKET BEING DROPPED IN THE NETWORK. |
| JR47527 | VRN DELETED FROM TOPOLOGY AFTER 15 DAYS. |
| JR47510 | POSSIBLE HANG OR CRASH WHEN APPLICATION EXIT WITHOUT PROPER CLEANUP. |
| APARS included from FixPack 4 | |
| JR39438 | PCS5920E SEEN WHEN STARTING CSWIN FROM COMMAND LINE BUT NOT WHEN USING NODE OPS TOOL |
| JR41157 | TRAP IN TN3270 SERVER |
| JR41158 | CPIC API USES INCORRECT LU |
| JR41892 | MEMORY LEAK IN TN3270 SERVER WHEN USING SSL |
| JR42892 | TN3270 SERVER HANGS WHEN A BIND WITH USER DATA IS RECEIVED |
| JR43387 | PRINTER LOSES CONNECTION WHEN SSCP TAKEOVER OCCURS |
| JR44768 | CRASH IN APPN.SYS |
| JR44764 | ASSERT IN NRTPAPI.C |
| JR44778 | 805000B RECEIVED WHEN LOGGING IN TO 3270 APPLICATION |
| JR44767 | MODIFICATIONS TO RTP_TUNING TO ALLOW SMALLER REFIFO AND SRT CAPS |
| APARS included from FixPack 3 | |
| JR37752 | PCS3001E WITH STYSTEM ERROR 1813 |
| JR38860 | NEW FUNCTION: SUPPORT FOR GSKIT 8 TLS 1.2 |
| JR39149 | Cumulative APARS for Communication Server for Windows v6.4.0.3 |
| APARS included from FixPack 2 | |
| JR34211 | PUNAME SENT TO HOST ON REQACTPU WHEN NO_PUNAME_TO_HOST=1 SET. |
| JR34028 | LUs COULD NOT BE RE-ESTABLISHED WHEN CICS RESET SOME TN3270 SESSIONS. |
| JR36022 | PROBLEM WITH DOWNSTREAM FIXED PACING WITH DLUR WHEN WINDOW SIZE 0. |
| JR34029 | LUs HANG WHEN BOTH PARTNER TRYING TO ACTIVATE THE SESSION AT THE SAME TIME. |
| JR34031 | SYSTEM CRASH WHILE STOPPING THE NODE, WHEN THE SESSION IS ACTIVE. |
| JR33954 | CONFIGURATION APPLICATION TRAP, WHEN ATTEMPTING TO CONFIGURE EICON CONNECTION. |
| JR34512 | TRNSDT MISSING FILES. |
| JR36023 | GSKIT TLS HANDSHAKE RENEGOTIATION WEAK SECURITY CVE-2009-3555. |
| JR36025 | MEMORY LEAK IN APPNBASE WITH NMVT ALERTS QUEUED. |
| JR36026 | CS/Windows CRASH WHILE PROCESSING APPC DATA WITH INCORRECT LENGTH. |
| JR35775 | SLI_OPEN HANG AFTER LINK OUTAGE AND RECOVERY. |
| JR36021 | BLUE SCREEN, WHEN THE DLUR-DLUS PIPE FAILS DURING THE ACTIVATION OF A DLUR INTERNAL PU. |
| JR37433 | HIGH CPU USAGE, WHEN TN3270E CLIENT HAS ISSUED LARGE SYSREQ KEYSTROKES, WHILE SERVER WAITING FOR A DATA FROM HOST. |
| JR37455 | UNABLE TO ESTABLISH NEW SESSION AFTER TAKEOVER / GIVEBACK TO APPL. RESIDING ON VTAM BEYOND DLUS/NNS. |
| JR37217 | PCS3001E AND PCS5501E MESSAGE WHILE STARTING TN3270 SERVER AFTER APPLYING IP FILTER TO RUNNING NODE. |
| JR37552 | PCS3001E : MISSING OF TN3270E MESSAGES IN THE RESOURCE FILE. |
Check the web sites listed in section 4 for the latest information about this product.
The SNA API Client will run in 32-bit compatibility mode on Windows 64-bit operating systems.
Communications Server require 5MB of disk space on a boot drive and 175 MB on any hard disk drive for permanent use.
SNA API client require 25 MB on any hard disk drive for permanent use.
Additionally:
One of the following browsers is required to install Communications Server using the launchpad:
[Return to top of document] [Table of Contents]
You can also view the Quick Beginnings documentation from the installation package.
[Return to top of subsection] [Return to top of document] [Table of Contents]
[Return to top of subsection] [Return to top of document] [Table of Contents]
[Return to top of subsection] [Return to top of document] [Table of Contents]
IBM provides corrective maintenance through:
Refer to Section 1.2 above for the list of APARs that are
provided in the release found on this CD.
You can find the latest fixpacks and CSDs for Communications
Server for Windows under the Product Group "Other Software" located at Fix Central :
http://www.ibm.com/support/fixcentral/
[Return to top of subsection] [Return to top of document] [Table of Contents]
For Windows Installer 4.0 on Windows Vista and greater, Communications Server products have verbose logging of the install/uninstall enabled by default. However, for Windows systems prior to Vista, by default, uninstalls initiated from "Add or Remove Programs" will not be logged.
Earlier systems need the following entry added to the machine's registry in order to log uninstalls from "Add or Remove Programs":
In order to log an uninstall, before uninstalling for any of the three Communications Server products, run msilogging_add.reg which is installed under Tools under the main Communications Server install directory to update the registry.
Note: Since Windows Installer logging applies to all products which are installed/uninstalled on the system, leaving this logging enabled can affect performance and disk space.
After uninstalling, run msilogging_remove.reg to remove the entry. Even though the product has been uninstalled, the msilogging files will still be under Tools under the main Communications Server install directory. These files are not uninstalled with the product.
The install logs will be in the log directory specified when installing the product. When the product is uninstalled using "Add or Remove Programs", the uninstall log will be under the machine's TEMP directory. The log file name will have the format MSI***.log where *** is some number. Use the datestamp to determine which file corresponds to the Communications Server uninstall.
[Return to top of subsection] [Return to top of document] [Table of Contents]
Communications Server version 6.1.2 APAR JR21546 provides a cleanup package that removes 6.1.2 and prior level Communications Server code and registry information. To ensure a complete un-installation of prior Communications Server product, you can download the cleanup package (JR21546) from http://www.ibm.com/support/docview.wss?rs=2262&uid=swg24009834
Un-installation instructions are located in the Quick Beginnings book at http://www.ibm.com/software/network/commserver/windows/library/index.html
You can also view the Quick Beginnings from the installation media.
If Personal Communications is installed on the same machine as Communications Server, you must uninstall Personal Communications before uninstalling Communications Server.
If Personal Communications cannot be successfully uninstalled,
go to the following Communications Server support page and search
Technotes for additional information:
http://www.ibm.com/support/search.wss?tc=SSHQNF&rs=2262&rank=8&dc=DB520+D800+D900+DA900+DA800+DB560&dtm
All applications using Communications Server should be terminated before you attempt to uninstall the product. Attempting to uninstall Communications Server while an application (such as APING or Personal Communications) is running will cause the uninstall to hang until the application is terminated.
This Web site provides information and links to headline information, specification sheets, frequently asked questions, education, and much more.
This Web site provides information and links to code fixes, tips, newsgroups, maintenance, and much more.
[Return to top] [Table of Contents]
The GSKit package for CS Windows is included in the full package refresh image found on Fix Central and in the entitled APAR JR57874, also found on Fix Central. The Fixpack package that provides the partial fix installation to bring an existing Communications Server for Windows install to the 6.4.0.8 level does not include the JR57874, or GSKit 8.0.50.86 level. If the Fixpack installation package is installed, the JR57874 will also need to be installed to set the TN3270 Server SSL level to 8.0.50.86.
APAR JR58742 - SUPPORT FOR 3270 INTRUSION DETECTION SERVICE:
The Communications Server for Windows V6.4.0.8 can support z/OS APARS for 3270
Intrusion Detection Service. The z/OS Communications Server that the Communications Server for Windows TN3270 Server
connects to must support one of the pairs of APARs listed below or z/OS level:
- OA49911 and OA50623
- OA48802 and OA50623
- z/OS 2.3
The 3270 IDS for the Communications Server for Windows TN3270 Server will prohibit TN3270 clients from queuing
responses and data to the host. This function may change the behavior of some existing
client/server flows. Be aware that the change may be needed to detect 3270 data intrusion
violations. To set the 3270 IDS support for a Communications Server for Windows TN3270 Server implementation,
set the following environment variable:
set TN_INTRUSION_DETECTION=TRUE
After setting this variable in the environment file, the communications server must
be stopped and restarted. This will configure the TN3270 Server to prevent clients
from queuing responses and data to the host that could cause z/OS Communications Server
3270 IDS to flag a violation.
[Return to top of subsection] [Return to top of document] [Table of Contents]
The GSKit package for CS Windows is included in the full package refresh image found on Fix Central and in the entitled APAR JR55055, also found on Fix Central. The Fixpack package that provides the partial fix installation to bring an existing Communications Server for Windows install to the 6.4.0.7 level does not include the JR55055, or GSKit 8.0.50.57 level. If the Fixpack installation package is installed, the JR55055 will also need to be installed to set the TN3270 Server SSL level to 8.0.50.57.
[Return to top of subsection] [Return to top of document] [Table of Contents]
[Return to top of subsection] [Return to top of document] [Table of Contents]
[Return to top of subsection] [Return to top of document] [Table of Contents]
Required Keyword Type Unsigned Number Default 8000 Range 5-24000 Multiples Allowed? NoThe RTP protocol uses a timer called the Short Request Timer. The value of the timer is calculated as part of the protocol, but MAX_SHORT_REQ_TIME specifies a maximum value in milliseconds, beyond which the timer cannot increase. In some situations, setting this maximum value can improve performance. Setting a value of 0 means that the timer is not limited and can take any value calculated by the protocol. The minimum value is 5 milliseconds, with a default value of 8000 milliseconds. If the specified value is 1-4 milliseconds, a value of 5 milliseconds is used.
Required Keyword Type Unsigned Number Default 4000 Range 5-12000 Multiples Allowed? NoThe RTP protocol uses a timer called the Re-FIFO Timer. The value of the timer is calculated as part of the protocol, but MAX_REFIFO_TIME specifies a maximum value in milliseconds, beyond which the timer cannot increase. In some situations, setting this maximum value can improve performance. Setting a value of 0 means that the timer is not limited and can take any value calculated by the protocol. The minimum value is 5 milliseconds, with a default value of 4000 milliseconds. If the specified value is 1-4 milliseconds, a value of 5 milliseconds is used.
[Return to top of subsection] [Return to top of document] [Table of Contents]
[Return to top of subsection] [Return to top of document] [Table of Contents]
The following example shows the .ACG file entry.
NODE=([Return to top of subsection] [Return to top of document] [Table of Contents]
ANYNET_SUPPORT=NONE
CP_ALIAS=A
DEFAULT_PREFERENCE=NATIVE
DISCOVERY_SUPPORT=NO
DLUR_SUPPORT=MULTI_SUBNET
FQ_CP_NAME=A.A
ARB_SUPPORT=ANY
LU62_INIT_SELF_ENQUEUE=1
GVRN_SUPPORT=0
SUPPRESS_LUWID=0
NO_PUNAME_TO_HOST=0
DLUR_REX_PACING_SUPPORT=0
MAX_LOCATES=150
MAX_LS_EXCEPTION_EVENTS=200
NODE_ID=05D00000
NODE_STYLE TYPE=END_NODE
REGISTER_WITH_CDS=1
REGISTER_WITH_NN=ALL
SEND_TERM_SELF=0
SLI_CLOSE_SYNC_SUPPORT=0
TP_SECURITY_BEHAVIOR=VERIFY_EVEN_IF_NOT_DEFINED
)
The Communications Server for
Windows provides secure
encryption and
authentication
for TN3270 Server clients by using Secure Socket Layer(SSL). The SSL
support
is provided by the GSKIT common component from IBM (package name
gskta).
Refer to the document, JR36023_TLS_SSLv3_Update_CS.pdf, provided with
this
APAR on Fix Central or on the CS/Windows media provided through Fix
Central or
Passport Advantage.
The JR36023 APAR can be found on the Communications Server for Windows
product
under the brand "WebSphere" on Fix Central at:
http://www.ibm.com/support/docview.wss?rs=2262&uid=swg1JR36023
[Return to top of subsection] [Return to top of document] [Table of Contents]
NOTE: AnyNet SNA over IP does not support IPV6 addressing. The AnyNet function in the Communications Server for Windows is being sunset in the next release. You should plan to replace this function with Enterprise Extender or the use of a SNA API Client implementation.
[Return to top of subsection] [Return to top of document] [Table of Contents]
The definition of the VCB structure for the CANCEL_CONVERSATION verb is as follows:
typedef struct cancel_conversation{
unsigned short opcode; /* verb operation code */
unsigned char opext; /* verb extension code */
unsigned char format; /* format */
unsigned short primary_rc; /* primary return code */
unsigned long secondary_rc; /* secondary return code */
unsigned char tp_id[8]; /* TP identifier */
unsigned long conv_id; /* conversation identifier */
} CANCEL_CONVERSATION;
Please refer the Client/Server programming guide for usage of this verb.
The required synchronization level can be selected, when defining the Transaction Program from the basic panel of Node configuration application.
[Return to top of subsection] [Return to top of document] [Table of Contents]
This parameter can set/unset in the Configuration GUI under the Node definition Advanced panel, as well as in the .ACG file.
[Return to top of subsection] [Return to top of document] [Table of Contents]
To customize RTP operation, specify one of the following values for the above ARB_SUPPORT keyword in NODE section:
[Return to top of subsection] [Return to top of document] [Table of Contents]
The default value for this parameter is zero, indicating that a path switch attempt can occur as soon as the protocol indicates it is required.
Please refer chapter 23. RTP_TUNNING section in Configuration File Reference manual for more information.
[Return to top of subsection] [Return to top of document] [Table of Contents]
The DISABLE_REMOTE_ACT in the .ACG file is part of LINK_STATION definition. This parameter can be set/unset in the Link Station definition under reactivation panel.
[Return to top of subsection] [Return to top of document] [Table of Contents]
csdisplay ALU
LU Name LUNAME05
PU Name PUNAME
NAU Address 5
Session Type LU-LU
LU Name LUNAME09
PU Name PUNAME
NAU Address 9
Session Type SSCP-LU
Configured LUs 15
Active LUs 9
LUA(SSCP) 1
LUA(LU-LU) 1
TN3270(SSCP) 0
TN3270(LU-LU) 0
csdisplay ALU
LU Name BASELU02
PU Name PUNAME
NAU Address 2
Session Type TN3270E SSCP-LU, 9.122.19.106
LU Name BASELU03
PU Name PUNAME
NAU Address 3
Session Type TN3270E LU-LU, 9.122.19.106
Configured LUs 15
Active LUs 9
LUA(SSCP) 0
LUA(LU-LU) 0
TN3270(SSCP) 1
TN3270(LU-LU) 1
csdisplay ALU
Configured LUs 15
Active LUs 9
LUA(SSCP) 0
LUA(LU-LU) 0
TN3270(SSCP) 0
TN3270(LU-LU) 0
[Return to top of subsection] [Return to top of document] [Table of Contents]
[Return to top of subsection] [Return to top of document] [Table of Contents]
Remote Desktop Clients <====> WTS with Personal Communications and SNA API Client <====> CS/Windows <====> z/OS host
[Return to top of subsection] [Return to top of document] [Table of Contents]
Configuration on WTS is as follows:
For example, if the user 1 configuration is located in the file C:\user1\user1.ini and the user 2 configuration is located in C:\user2\user2.ini, the configuration is as follows:
There is no other change to the configuration procedure. The configuration of LUA sessions, transaction programs, and so on remain unchanged. The Personal Communications configuration does not need to be changed. The steps for configuring Personal Communications or any LU application remain the same.
[Return to top of subsection] [Return to top of document] [Table of Contents]
The default values (file size and maximum number of files) can be changed with the command tracedg /s FileSize /n MaxNum. This value is global. The value set by one user will affect all the users.
For example, tracedg /s 92160 /n 20 will create each pcatrace file of size 90k, and the maximum number of files that will be created is 20. After 20 files, the first file will be over-written.
C:\>INFOB
It will go through a series of 13 steps and finally collect the information (11 documents mentioned below) in cspd.exe. cspd.exe will be located in the installation directory ( default C:\Program Files\IBM\CS SNA API Client).
For any problem reported, please run infobundler and send IBM support cspd.exe file.
The summary of features of the Infobundler for SNA API Client is as follows:
[Return to top of subsection] [Return to top of document] [Table of Contents]
Schema extensions are provided for Netscape Directory Server and must be added to the server configuration before configuring the SNA API clients. The other supported directory servers already contain the necessary schema definitions. Access control for entries and attributes must be controlled using the directory server's administration utility.
The SNA API LDAP configuration utility allows you to modify the extended entries. The user ID used with this utility must have access to write entries into the directory. You can use the directory administrator ID (which has these permissions) when executing the client configuration utility.
To add the schema extensions to the Netscape server, add the following lines to the slapd.conf file, which is located in the \config directory of the Netscape directory server.
include ibmcs-oc-ns.conf
include ibmcs-at-ns.conf
The exact path name of this directory is dependent on where the directory server is installed and the name of the directory server. See the following example:
drive_letter:\netscape\suitespot\slapd-hostname\config
[Return to top of subsection] [Return to top of document] [Table of Contents]
[Return to top of subsection] [Return to top of document] [Table of Contents]
[Return to top of subsection] [Return to top of document] [Table of Contents]
[Return to top of subsection] [Return to top of document] [Table of Contents]
PATHNAME=C:\IBMCS\apingd.exe
to
PATHNAME=C:\Program Files\IBM\Communications Server\apingd.exe
This can be changed by either editing the .acg configuration file or from the configuration GUI under "CPIC and APPC -> Transaction Programs."
[Return to top of subsection] [Return to top of document] [Table of Contents]
Communications Server for Windows allows you to configure various levels of encryption (High, Medium, Authenticate Only) for a TN3270(E) or TN5250 port definition. These encryption levels are found in the Security panel of the Define TN3270 Port Definitions dialog.
Some TN3270 or TN5250 clients (such as Host On-Demand Version 5) do not make full use of the SSLv3 information that Communications Server advertises in an SLP packet. These clients connect to the first port with the SSL level, scope, pool, and load that they requested, without regard to the encryption level. The resulting connection might result in a session connecting to a port with a different encryption level than intended.
To avoid this situation, use only one encryption level (High, Medium, or Authenticate Only) for each machine or scope. Ports on a given server can be uniquely targeted by enabling and disabling Security and Client Authentication.
[Return to top of subsection] [Return to top of document] [Table of Contents]
[Return to top of subsection] [Return to top of document] [Table of Contents]
Tivoli, and Tivoli License Management are trademarks of Tivoli Systems Inc. or International Business Machines Corporation in the United States, other countries, or both.
Lotus and Domino are trademarks or registered trademarks of International Business Machines Corporation in the United States, other countries, or both.
Microsoft, Windows, Windows NT, Windows 2000, Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008 and Windows 7 are trademarks or registered trademarks of Microsoft Corporation in the United States, other countries, or both.
VMware is a registered trademark of VMware, inc.