IUCV connect rejected by ESM using FTP under ACF2 for z/VM

Products

• ACF2 - z/OS

Issue/Introduction

 FTPSERVE failed to start.

DTCRUN1022I Console log will be sent to default owner ID: TCPMAINT            
DTCRUN1046I Using TCP/IP data file: TCPIP DATA F1                             
DTCRUN1051I DTCPARMS 'server' definition (FTPSERVE) from file: IBM DTCPARMS E1
DTCRUN1051I DTCPARMS 'class' definition (FTP) from file: SYSTEM DTCPARMS D1   
DMSVML2060I CAIMAINT 391 linked as 0391 file mode G                           
DTCRUN1096I STORAGE = 16M                                                     
CAIRPS002I External Security Manager module loaded at 00D77000.               
CAIRPS011E IUCV connect rejected by External Security Manager.                
CAIRPS005I External Security Manager has terminated.                          
DTCRUN1001E "RPIUCMS INIT" failed with return code 11                         
DTCRUN1099E Server not started - correct problem and retry      

 

 

Environment

Release : 16.0

Resolution

When running FTP in vm with acf2 for z/VM the following messages were seen.

CAIRPS002I External Security Manager module loaded at 00D77000.               
CAIRPS011E IUCV connect rejected by External Security Manager.                
CAIRPS005I External Security Manager has terminated.                          
DTCRUN1001E "RPIUCMS INIT" failed with return code 11                         
DTCRUN1099E Server not started - correct problem and retry      

This is resolved by adding ACF2/VM attribute VMESM to the FTPSERVE logonid.