PH61015: New Function - SMTP AUTH support for CSSMTP

Obtain the fix for this APAR.

APAR status

• Closed as new function.

Error description

• New Function
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * All users of the IBM Communications Server for z/OS Version  *
  * 2 Releases 5 and z/OS 3.1 IP:CSSMTP                          *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * New Function - SMTP AUTH support for CSSMTP                  *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Apply PTF                                                    *
  ****************************************************************
  CSSMTP, the z/OS email client, is enhanced to support the SMTP
  AUTH command with username and password using the PLAIN and
  LOGIN authentication methods.
  

Problem conclusion

Temporary fix

Comments

• CSSMTP, the z/OS email client, is enhanced to support the SMTP
  AUTH command with username and password using the PLAIN and
  LOGIN authentication methods. This provides a mechanism to allow
  mail servers to authenticate the originator of email.
  
  Note: The username and password used for SMTP AUTH are stored in
  a SAF LDAPBIND entity. RACF supports encrypting the LDAPBIND
  entity with AES-256 protection beginning in z/OS V2R5 with RACF
  APAR OA66458.
  
  To use SMTP AUTH support for CSSMTP, use the following
  references.
  
  - See the topic ?Steps for CSSMTP AUTH configuration?
  (https://www.ibm.com/docs/en/zos/3.1.0?topic=application-steps-c
  ssmtp-auth-configuration) in the z/OS Communications Server: IP
  Configuration Guide for the steps needed to configure CSSMTP to
  authenticate with the target server.
  - See the topic ?TargetServer statement?
  (https://www.ibm.com/docs/en/zos/3.1.0?topic=statements-targetse
  rver-statement) in the z/OS Communications Server: IP
  Configuration Reference for details on configuring the new
  AuthEntity parameter.
  - The EZARACF sample in the SEZAINST installation data set is
  updated to include a section on SMTP AUTH RACF Configuration.
  
  The following publications have been updated:
  
  - The topic ?Steps for CSSMTP AUTH configuration?
  (https://www.ibm.com/docs/en/zos/3.1.0?topic=application-steps-c
  ssmtp-auth-configuration) in the z/OS Communications Server: IP
  Configuration Guide is added to provide the steps needed to
  configure CSSMTP to authenticate with the target server.
  
  - The topic ?TargetServer statement?
  (https://www.ibm.com/docs/en/zos/3.1.0?topic=statements-targetse
  rver-statement) in the z/OS Communications Server: IP
  Configuration Reference is updated to provide details on
  configuring the new AuthEntity parameter.
  
  - The topic ?MODIFY command: Communications Server SMTP
  application (CSSMTP)?
  (https://www.ibm.com/docs/en/zos/3.1.0?topic=command-modify-comm
  unications-server-smtp-application-cssmtp) in the z/OS
  Communications Server: IP System Administrator's Commands is
  updated to show the new AUTHENTITY field in the MODIFY
  CSSMTP,DISPLAY,CONFIG report and the new AUTH STATE field in the
  MODIFY CSSMTP,DISPLAY,TARGETS report.
  
  - The topic ?Resolving mail problems related to SMTP Auth?
  (https://www.ibm.com/docs/en/zos/3.1.0?topic=problems-resolving-
  mail-related-smtp-auth) in the z/OS Communications Server: IP
  Diagnosis Guide is added to provide information on diagnosing
  problems related to CSSMTP?s support of SMTP AUTH.
  
  - The topic ?CSSMTP configuration record (CONFIG subtype 48)?
  (https://www.ibm.com/docs/en/zos/3.1.0?topic=records-cssmtp-conf
  iguration-record-config-subtype-48) in the z/OS Communications
  Server: IP Programmer's Guide and Reference is updated with new
  fields for the SMF 119 subtype 48 record. New fields defined
  include SMF119ML_CF_RptSysoutCls and SMF119ML_CF_MailbxCmptblty.
  New data added to configuration data section includes the
  ReportMailFrom setting and the AuthEntity setting for each
  target server.
  
  - The topic ?SMF type 1154, subtype 4 ? CSSMTP client compliance
  evidence record?
  (https://www.ibm.com/docs/en/zos/3.1.0?topic=t1sr-smf-type-1154-
  subtype-4-cssmtp-client-compliance-evidence-record) in the z/OS
  Communications Server: IP Programmer's Guide and Reference is
  updated with the new field, SMF1154_4_MLTS_Auth, for the SMF
  1154 subtype 4 record.
  
  - The topic ?SMTP AUTH support for CSSMTP?
  (https://www.ibm.com/docs/en/zos/3.1.0?topic=security-smtp-auth-
  support-cssmtp)in the z/OS Communications Server: New Function
  Summary is added.
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UO02744 UO02745

Modules/Macros

• EZAMLUXT EZAMLLRT EZAMLCFP EZAMLUTL EZATMAIL EZAMLCKP EZASMF
  EZAMLJSP EZAMLUDV EZA482   EZAMLSSI EZAMLEML EZAMLLOG EZAMLCON
  EZAMLMSG EZAMLJES EZASMF77 EZAMLSMT EZARACF  EZAMLCAT EZAMLHCK
  EZASM482 EZAMLSSR EZAMLJSU EZAMLSMF EZAMLERT EZAMLCFM EZAMLCFG
  EZAMLMN  EZAMLERR EZAMLRES EZAMLCNF
  

Fix information

• Fixed component name

  TCP/IP MVS

• Fixed component ID

  5655HAL00

Applicable component levels

• R250 PSY UO02744

     UP25/04/17 P F504  

• R310 PSY UO02745

     UP25/04/17 P F504  

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.