CWBSY1008 - General Security Error on V5R2

[High Lander]

i got the CWBSY1008 general security error every time trying to connect from Windows pc to a V5R2 machine. Have done the following but still the same problem :-

1. CWBSY1008 return value rc408.


2. Chk that "Client Access Properties" from the Windows Control Panel > "Language" tab:-

For the fields in "Character conversion overrides"
- "ANSI code page"
- "OEM code page"
- "EBCDIC CCSID"

all values above are existing "Default"



3. QSECOFR is the user profile used when establishing the iSeries Client Access connection; it's already ENABLED by default. Had changed password for QSECOFR still same.


4. When i chk, QUSER already have the following existing value :-

Status = ENABLED
Set Password to Expired = *NONE
Password Expiration interval = *NOMAX
Maximum Allowed Storage = *NOMAX


5. Have tried shutting down then bring up the system again, then tried again iSeries Client Access... Chk again joblog msg under QSYSWRK > QZSOSGND, it shows :

-------------------------------------------------------------------------------------
Host server communication error occured on SSL_Init_Application()

Host server error occurred with reason code 5 <- this line keep repeating for a few rows;
-------------------------------------------------------------------------------------

No error msg under QUSERWRK > QZSOSIGN.



6. Then i tried applying another set of HIPER PTF: SF9519 Level 137 (earlier HIPER applied were of

SF9519 Level 134), then IPL.

dspmsg qsysopr shows :

----------------------------------------------------------
....
User QTCP in job 001686/QTCP/QTCPIP started TCP/IP *Loopback interface 127.0.0.1
Controller ETHLINET contacted on line ETHLINE

>> Secure Sockets Layer Telnet not started

User QTCP started IP interface 198.x.x.x on ETHLINE

>> STRTCP completed successfully; however errors occured.

SNMP coldstart trap generated.
iSeries Support for Windows Network Neighborhood (iSeries NetServer) initialization complete.

----------------------------------------------------------

In above msg, are the lines noted in >> have anything to do with the problem i'm facing now ? And

what do these lines means ?


7. iSeries Client Access to another V5R2 machine no problem; only this particular machine ..


8. i try to look for QYSMSVRE user index if it's damaged, but seems can't locate it..

9. No CPIAD07 RC5 errors appear

10. System value QPWDVLDPGM -- didn't error in it...


But Telnet from DOS prompt get it right.


Any idea ? thx ..

[arrow483]

Re: CWBSY1008 - General Security Error on V5R2

If password is mixed case, try it with all upper or all lower.

[sms_mitschs]

Re: CWBSY1008 - General Security Error on V5R2

Hi High Lander,
it seems that you are trying to connect via SSL to the system.
Check if the properties of the communication configuration has somewhere in client access (either in PC5250 or Navigator) SSL enabled and forced to use.

If you have no valid SSL configuration on the target i you will never successfully connect to the system ...

Hope that helps to figure out your problem and to solve it )

[sms_mitschs]

Re: CWBSY1008 - General Security Error on V5R2

>> Secure Sockets Layer Telnet not started

... and another hint from the ibm pages:
Change TELNET Attributes (CHGTELNA)

(...)
Allow Secure Socket Layer (ALWSSL)

Specifies whether Secure Socket Layer and non Secure Socket Layer support should be started.
*SAMEThe Allow Secure Socket Layer setting is not changed if it was previously set. Otherwise, *YES is used. *YESThe Secure Socket Layer and non Secure Socket Layer support will be started. *NOThe non Secure Socket Layer support will be started. *ONLYThe Secure Socket Layer support will be started.


Check if this parameter is set to *NO to avoid forcing to SSL ....

[sms_mitschs]

Re: CWBSY1008 - General Security Error on V5R2

OK ... i stumbled in the same pitfall as others did.
Member Chotak is replying to all death threads to get his post count up

But probably any other stumbling in the original problem the replies might help to fix it.