TIBCO Managed File Transfer Platform Server for UNIX Release Notes

TIBCO Managed File Transfer Platform Server for UNIX Release Notes Software Release 7.2.0 November 2015 Two-Second Advantage

2 Important Information SOME TIBCO SOFTWARE EMBEDS OR BUNDLES OTHER TIBCO SOFTWARE. USE OF SUCH EMBEDDED OR BUNDLED TIBCO SOFTWARE IS SOLELY TO ENABLE THE FUNCTIONALITY (OR PROVIDE LIMITED ADD-ON FUNCTIONALITY) OF THE LICENSED TIBCO SOFTWARE. THE EMBEDDED OR BUNDLED SOFTWARE IS NOT LICENSED TO BE USED OR ACCESSED BY ANY OTHER TIBCO SOFTWARE OR FOR ANY OTHER PURPOSE. USE OF TIBCO SOFTWARE AND THIS DOCUMENT IS SUBJECT TO THE TERMS AND CONDITIONS OF A LICENSE AGREEMENT FOUND IN EITHER A SEPARATELY EXECUTED SOFTWARE LICENSE AGREEMENT, OR, IF THERE IS NO SUCH SEPARATE AGREEMENT, THE CLICKWRAP END USER LICENSE AGREEMENT WHICH IS DISPLAYED DURING DOWNLOAD OR INSTALLATION OF THE SOFTWARE (AND WHICH IS DUPLICATED IN THE LICENSE FILE) OR IF THERE IS NO SUCH SOFTWARE LICENSE AGREEMENT OR CLICKWRAP END USER LICENSE AGREEMENT, THE LICENSE(S) LOCATED IN THE LICENSE FILE(S) OF THE SOFTWARE. USE OF THIS DOCUMENT IS SUBJECT TO THOSE TERMS AND CONDITIONS, AND YOUR USE HEREOF SHALL CONSTITUTE ACCEPTANCE OF AND AN AGREEMENT TO BE BOUND BY THE SAME. This document contains confidential information that is subject to U.S. and international copyright laws and treaties. No part of this document may be reproduced in any form without the written authorization of TIBCO Software Inc. TIBCO, Two-Second Advantage, TIBCO Managed File Transfer Suite, TIBCO Managed File Transfer Command Center, TIBCO Managed File Transfer Internet Server, TIBCO Managed File Transfer Platform Server are either registered trademarks or trademarks of TIBCO Software Inc. or its subsidiaries in the United States and/or other countries. All other product and company names and marks mentioned in this document are the property of their respective owners and are mentioned for identification purposes only. THIS SOFTWARE MAY BE AVAILABLE ON MULTIPLE OPERATING SYSTEMS. HOWEVER, NOT ALL OPERATING SYSTEM PLATFORMS FOR A SPECIFIC SOFTWARE VERSION ARE RELEASED AT THE SAME TIME. SEE THE README FILE FOR THE AVAILABILITY OF THIS SOFTWARE VERSION ON A SPECIFIC OPERATING SYSTEM PLATFORM. THIS DOCUMENT IS PROVIDED AS IS WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT. THIS DOCUMENT COULD INCLUDE TECHNICAL INACCURACIES OR TYPOGRAPHICAL ERRORS. CHANGES ARE PERIODICALLY ADDED TO THE INFORMATION HEREIN; THESE CHANGES WILL BE INCORPORATED IN NEW EDITIONS OF THIS DOCUMENT. TIBCO SOFTWARE INC. MAY MAKE IMPROVEMENTS AND/OR CHANGES IN THE PRODUCT(S) AND/OR THE PROGRAM(S) DESCRIBED IN THIS DOCUMENT AT ANY TIME. THE CONTENTS OF THIS DOCUMENT MAY BE MODIFIED AND/OR QUALIFIED, DIRECTLY OR INDIRECTLY, BY OTHER DOCUMENTATION WHICH ACCOMPANIES THIS SOFTWARE, INCLUDING BUT NOT LIMITED TO ANY RELEASE NOTES AND "READ ME" FILES. Copyright 2003-2015 TIBCO Software Inc. ALL RIGHTS RESERVED. TIBCO Software Inc. Confidential Information

3 Contents TIBCO Documentation and Support Services...4 New Features...5 Changes in Functionality... 7 Deprecated and Removed Features...8 Migration and Compatibility...9 Closed Issues...10 Known Issues...14

4 TIBCO Documentation and Support Services Documentation for this and other TIBCO products is available on the TIBCO Documentation site: https://docs.tibco.com Documentation on the TIBCO Documentation site is updated more frequently than any documentation that might be included with the product. To ensure that you are accessing the latest available help topics, please visit https://docs.tibco.com. Product-Specific Documentation Documentation for TIBCO products is not bundled with the software. Instead, it is available on the TIBCO Documentation site. The following documents for this product can be found on the TIBCO Documentation site: TIBCO Managed File Transfer Platform Server for UNIX Installation TIBCO Managed File Transfer Platform Server for UNIX User's Guide TIBCO Managed File Transfer Platform Server for UNIX Release Notes How to Contact TIBCO Support For comments or problems with this manual or the software it addresses, contact TIBCO Support: For an overview of TIBCO Support, and information about getting started with TIBCO Support, visit this site: http://www.tibco.com/services/support If you already have a valid maintenance or support contract, visit this site: https://support.tibco.com Entry to this site requires a user name and password. If you do not have a user name, you can request one. How to Join TIBCOmmunity TIBCOmmunity is an online destination for TIBCO customers, partners, and resident experts. It is a place to share and access the collective experience of the TIBCO community. TIBCOmmunity offers forums, blogs, and access to a variety of resources. To register, go to the following web address: https://www.tibcommunity.com

5 New Features The following are new features added in version 7.2.0 of TIBCO Managed File Transfer Platform Server for UNIX. Add Encode Parameter This release adds Encode parameter in the COMMON section of config.txt to define the code page used to convert file names. Add Ciphers Parameter This release adds Ciphers parameter in the SERVER and CLIENT sections of config.txt to specify ciphers used for server and client TLS negotiation. Add SSL Support to Command Center Functions This release adds SSL support to the Command Center functions. When the connection security type for the destination platform server is defined as implicit SSL, Command Center can run these functions to the platform server: managing platform server nodes, managing platform server profiles, performing platform server audit inquiry, and executing platform server transfers. All these SSL functions are performed using AES256 encryption. Add MaintainBDW and MaintainRDW Parameters for z/os Transfers This release adds maintainbdw and maintainrdw transfer parameters to define whether to maintain the Block Descriptor Word (BDW) and Record Descriptor Word (RDW) when sending or receiving variable block binary files to or from a z/os system. Add New File Tokens This release supports the following new file tokens: Token $(DateUS) Description Resolved in the format MMDDYYYY. $(FL##) $(FR##) File qualifier computed from left-justified position. There can be a maximum of 16 qualifiers. File qualifier computed from right-justified position. There can be a maximum of 16 qualifiers. Upgrade Openssl Version This release upgrades OpenSSL version to OpenSSL 1.0.1h (fips 2.0.9) for all platforms except HP-UX RISC. Support ScanSubDir Parameter for Transfers Initiated from Command Center This release supports sending subdirectories when a platform server transfer request is initiated from Command Center. This capability will be available in a forthcoming release of TIBCO MFT Command Center. Support Moving Directories with the fusutil Utility This release supports moving directories with the fusutil utility. You can use mvdir movedir option to perform this function. Support IPv6 This release supports IPv6.

6 Add Command Center Support to Node Requests Initiated by Command Center This release adds the Command Center Support option to node requests initiated by Command Center. This capability requires TIBCO MFT Command Center with version 7.3 or higher. Add PAM Authentication Support for the Root Installation This release supports any authentication supported by PAM, including LDAP for the root installation on all platforms. For the non-root installation, it supports responder profile authentication only. The new parameter PamAuth is added to the server definitions in the config.txt. Support Multi-Byte Characters in File Name, Log.txt and Command Center Requests This release supports multi-byte characters in file names, Log.txt, transfer and collector requests initiated by TIBCO MFT Command Center with version 7.3 or higher. Allow More Values for RP_ED Parameter This release supports RP_ED=1999/000, and if you enters RP_ED=99/000, it is converted to 1999000. Add SSLEnabledProtocols Parameter This release adds SSLEnabledProtocols parameter in both the SERVER and CLIENT sections in config.txt to define whether SSLV3 is supported. Add LogDirectoryTransfers Parameter This release adds LogDirectoryTransfers parameter in the COMMON section in config.txt to define whether a cfdir request is logged or not. The valid values are Y, N, or Errors. Add Three Digest Algorithm Length for Generating Certificate This release adds the ability to generate certificate request for SHA256, SHA384, SHA512 in sslutility.exe utility. Add New Configuration File cfcos.cfg This release adds the cfcos.cfg file in the MFTPS_install to define different levels of SBufferSize and RBufferSize. You can specify the ClassOfService parameter in both the SERVER and CLIENT sections in the config.txt to improve transfer performance.

7 Changes in Functionality The following are changes in functionality in version 7.2.0 of TIBCO Managed File Transfer Platform Server for UNIX. Increase the Local and Responder User Profile User ID Maximum This release increases the maximum length of both local and responder profile user IDs from 20 characters to 64 characters. Send Only One Summary Email for Successful Directory Transfers When you perform a directory transfer and all the files within the directory are transferred successfully, if EmailSuccess is specified, only a summary email is sent. However, if any of those file transfers fails, an individual email is sent for that failed transfer and a summary email is sent when the directory transfer is completed. Display an Error When a Node Does Not Exist in cfrprofile Prompt When cfrprofile prompt:yes is executed, if you type in a node name that does not exist, an error message stating the node definition cannot be found is displayed.

8 Deprecated and Removed Features The following tables list any features that have been deprecated or removed as of version 7.2.0 of TIBCO Managed File Transfer Platform Server for UNIX. For deprecated features, if relevant, useful alternatives to the deprecated features are listed. Any use of a deprecated feature should be discontinued as it might be removed in a future release. You should avoid becoming dependent on deprecated features and become familiar with the suggested alternative features. Removed Features Affected Component Description Deprecate d Release Removed Release OCSP OCSP support for SSL transfers is removed. 7.2.0 7.2.0 License Key The cfapplykey utility in the MFTPS_install directory, and the license key information in the MFTPS_install/config/config.txt is removed. 7.2.0 7.2.0

9 Migration and Compatibility There are no migration procedures or compatibility issues in version 7.2.0 of TIBCO Managed File Transfer Platform Server for UNIX.

10 Closed Issues The table lists closed issues in version 7.2.0 of TIBCO Managed File Transfer Platform Server for UNIX. Key PSU-396 PSU-383 PSU-348 PSU-377 PSU-214 PSU-338 PSU-333 PSU-319 PSU-236 PSU-207 PSU-175 PSU-217 PSU-216 PSU-213 Summary When sending a zero byte file from Windows to AIX, if the encryption used on the AIX system was Rijndael, the transfer failed. When initiating a transfer from Internet Server to a platform server on UNIX, if the transfer failed or was cancelled before the first checkpoint was taken, the PQF record on the platform server was not deleted. When you initiated a directory transfer from Command Center to send files between two platform servers on UNIX, after the transfer was completed, the pid.error files did not get deleted in the mftps_install/temp folder on the platform server for UNIX. Resolves a problem with Double Byte characters in the FileName when BW submits the transfer through MFT Command Center to MFT Platform Server on UNIX. Add support for double byte characters in the Initiator File Name and Responder File Name for Platform Transfers initiated by Command Center. Resolves a problem when CyberResp is not started from the CFROOT directory, internal commands like FUSUTIL and CFDIR fail. Updates the socket buffer sizes to the TCP default. Upgrades openssl to openssl-0.9.8zf. Resolves a problem where all errors were retried, not just temporary errors. Under some circumstances, a temporary error may be reported as a permanent error. Resolves a problem where DataClass was always reported as N/A in Unix Log.txt. Changes made to create a new directory with the same permissions as the parent directory. Previously new directories were created with 700 permissions. If a directory is created under the root "/", it will be created with 755. MFT Platform Client requires the TLS protocol when initiating an SSL connection to TIBCO MFT Platform Server. Resolves a problem where the last character of the Remote File Name can be truncated. Allows the following values for the RetenPeriod_ExpDate (rp_ed) parameter: Allow 1999/000 Change 99/000 to 1999000

11 Key PSU-208 PSU-197 PSU-188 PSU-172 PSU-183 PSU-180 PSU-179 PSU-178 PSU-176 PSU-174 Summary Resolves a problem recovering from "Process Limit Reached - Try Again Later" error after resource shortage. Resolves a problem when transferring files with Unicode file names. Resolves a problem supporting Unicode characters in FileName, Log.txt and Collector Requests A new Encode parameter was added to the config.txt COMMON section, for example: # [ COMMON ] Encode: IBM-eucKR { N, encoding_name } If Encode is N or not defined, no additional encoding conversion will be done; all file names assumed to be in UTF-8. If Encode is defined, local and remote file names will be converted: => when Initiating a transfer, the file names are converted from native file system "Encode" to UTF-8 => when Responding to a transfer request, the file names are converted from UTF-8 to native system "Encode" This encoding conversion is performed on cfsend, cfrecv, CyberResp. It is a "Global" parameter common to both Initiator and Responder. Adds the following command line transfer parameters: maintainbdw mbdw { y, n } maintainrdw mrdw { y, n } The default value is n. Resolves a problem with non-root installs when CyberResp attempts to restart a transfer. Now if the user that submits the transfer is the same as the CyberResp user, the transfer will be restarted. If the user that submits the transfer is different than the CyberResp user, an error message will be written indicating the transfer cannot be restarted. Resolves a problem where the RetenPeriod_ExpDate (rp_ed) parameter did not allow a date yyyy/ddd where ddd equals 000. Resolves a problem where PPA commands were truncated when using double quotes within the command. Resolved an intermittent core dump when the TIBCO MFT Command Center performed a Node function to this platform server. Added trace messages to display DNS lookup information when the trace level is set to Medium or High. Resolves a problem when running a directory transfer. If no files are found the audit record incorrectly set this as a temporary error.

12 Key Summary PSU-170 Resolves a core dump when cflist.cfg contains a file name longer than 22 characters. PSU-153 Added the move option to the fusutil utility to resolve a problem where fusutil rename would fail when a file is renamed to a directory on a different partition. Example command: S,R,COMMAND,fusutil m <old_filename> <new_filename> PSU-139 PSU-149 PSU-148 PSU-147 PSU-146 PSU-145 PSU-144 PSU-143 PSU-141 PSU-128 PSU-127 PSU-125 PSU-100 Resolves a problem where a cfdir or fusutil command fails when an installation path is too long. Resolves a problem with directory transfers from JMS where the Wait for Transfer to Complete finishes prematurely, after the first transfer completes. Resolves the following error when sending a file with a size of exactly 4075 bytes or a multiple of 4075 bytes and AES encryption is enabled: Reason: Write file failed. The supplied user buffer is not valid for the requested operation. Resolves a problem where a high volume of concurrent transfers may result in duplicate transaction IDs. Resolves a problem where the line feed delimiter value "LF" was not preserved in the audit record. Resolves a problem where the ScanSubDir parameter did not work when executing a platform transfer from Command Center. The field is also now included in the audit record and collected audit records on Command Center correctly report the ScanSubDir value. Note, this fix is dependent on a Command Center update to be released after this hotfix. Resolves a problem where the byte count was reported as zero when a network error occurred. Resolves a problem where the RetenPeriod_ExpDate (rp_ed) parameter is corrupted when sending to z/os. Resolves a problem where the Platform Server starts but terminates when ECONNABORTED exception is received. Resolves an error when sending a zero byte file to z/os as initiator or responder. Updated the OpenSSL modules to version OpenSSL 0.9.8y-fips. Note, not included for the HP-UX RISC platform. Improves transfer speed by increasing the size of the socket send and receive buffers. Increased the maximum User ID length from 20 to 64 bytes in the cfprofile, audit record and IS collector requests.

13 Key PSU-094 CA01875-AIX CS01876- Solaris SPARC CN01877- Solaris x86 CH01878-HP RISC CI01879-HP Itanium CL01880-Linux CM01881-z/ Linux Summary Resolves a problem where the Remove Trailing Spaces parameter did not work when executing a platform transfer from Command Center. The field is also now included in the audit record and collected audit records on Command Center correctly report the Remove Trailing Spaces value. Resolves a problem authenticating to a system configured to use shadow passwords. Resolves a problem where no Audit record was written when a Platform to Platform transfer was submitted from TIBCO MFT Command Center and an error occurred as a result of invalid parameter settings. Audit records for transfers containing a remote DomainName\UserId have been updated to report the domain name. Resolves a problem where Directory Transfer Summary audit record set the end time to the same value as the start time. Resolves a problem when using TIBCO MFT Command Center to pull audit records for a specific transfer user, all records were for all users were being returned. Resolves a problem when a user is not in the cfbrowse or cfadmin groups, and the user specifies the LocalUser parameter, cfinq incorrectly returned all transfers for the logged on user. cfinq now returns no transfers. Updated Audit log entry to report BF_56 instead of BF_256 when encryption type Blowfish is used. Resolves a problem on cfsend when specifying the uperm parameter with a value of n. The remote system was not correctly using the default permissions set the config.txt file.

14 Known Issues The table lists known issues in version 7.2.0 of TIBCO Managed File Transfer Platform Server for UNIX. Key PSU-398 PSU-397 PSU-389 PSU-248 Summary Summary: During send transfers to a distribution list, if you specify some of the these parameters on the command line: encryption, SSL, port and compression, they cannot override the values defined for the nodes which are included in the distribution list. Workaround: Configure the necessary encryption, SSL, port and compression in the node definition when sending to a distribution list. Summary: PAM authentication does not work on HP-UX. Workaround: None. Summary: After finishing a send command transfer from the platform server on UNIX to a platform server on Windows, if you retrieve the audit log from the platform server on UNIX and resubmit the transfer on the Audit Details page of Command Center, the transfer direction changes to receive. Workaround: None. Summary: When you run the fusping command against TIBCO MFT Platform Server for Windows with earlier versions, if the license key of the Windows server has expired, a wrong message indicating a network error is displayed. Workaround: None.