PAM Session recordings are not viewable when a service is used to launch the PCOMM 3270 terminal emulator
book
Article ID: 191452
calendar_today
Updated On:
Products
CA Privileged Access Manager (PAM)CA Privileged Access Manager - Cloakware Password Authority (PA)CA Privileged Access Manager - Server Control (PAMSC)
Issue/Introduction
The PCOMM 3270 terminal emulator can be configured as a Mainframe Proxy service in PAM an be used with session recording. When PCOMM is used with its default configuration the following error will appear when attempting to view one of these recordings: Warning: EOR received when not in 3270 mode, ignored.
Environment
Release : 3.3.x and 4.0.x
Component : PRIVILEGED ACCESS MANAGEMENT
Cause
PAM uses a third party IBM access tool (c3270) to emulate the session and post-process the packets in order to create the session recording file. When PCOMM is used c3270 failed during the function negotiation phase. As a result c3270 failed to emulate the session using pcomm client packet because the packet contained the CONTENTION-RESOLUTION function which is not supported by c3270. C3270 it implements rfc2355, but CONTENTION-RESOLUTION is in the RFC 2355 Extensions.
Resolution
The PCOMM client enables CONTENTION-RESOLUTION by default. It can be disabled by adding the following keyword to the .WS profile. [Telnet3270] TN3270EContentionResolution=N
Once TN3270EContentionResolution was disabled the PCOMM recordings will be viewable.