Natural UPgrade to 3.1.6 : Natural RPC server could not strt

Hello to all ,

Enviroment :
Natural : 3.1.6
Entirex : 6.1.1
OS390 : 2.10
We try to upgrade Natural 3.1.6 from 2.3.4 on the test enviroment.When we try to start RPC server ,which we can start it on 2.3.4,we cannot start it.We get below messages and task goes down.
Any recommandations will be very helpfull .

NAT9995 NATURAL SESSION TERMINATED NORMALLY
M *** Init a NAT316 RPC server on MVS/ESA in lib SYSRPC at 17:27:07
M *** Startup parameters for transport:
M *** Server = SRV7
M *** Node = ETB148
M *** UserID = *NSC
M *** Natural RPC version: 5.1.1 - update level 0
M *** Highest supported protocol version: 1130
M EntireX Broker Stub Version=6.1.1, Patch Level=30, Highest API Supported=6
M *** LOGON to Broker ETB148 failed.
M 00200379 API: Inconsistent Security Installation
MC *** Initialization aborted at 17:27:08

//ETBSRV4 PROC
//SAGTOK3 EXEC PGM=SAGTOKEN,
// PARM=(‘DELETE LOCAL,STUBLOG=’)
//STEPLIB DD DSN=SAGLIBT.EXX611.LOAD,DISP=SHR
//*
//STASRV4 EXEC PGM=NATBATCH,REGION=0M
//STEPLIB DD DSN=SAGTEST.SMALOAD,DISP=SHR
// DD DSN=SAGLIBT.SMALOAD,DISP=SHR
// DD DSN=SAGLIBT.NTASK.LOAD,DISP=SHR
// DD DSN=SAGLIBT.EXS611.LOAD,DISP=SHR
// DD DSN=SAGTEST.ADA713.LOAD,DISP=SHR
// DD DSN=SAGLIBT.EXX611.LOAD,DISP=SHR
// DD DSN=SAGTEST.NAT316.LOAD,DISP=SHR
//SYSTCPD DD DSN=HTPLEX.TCPIP.PARMS(DATAHT30),DISP=SHR
//SYSUDUMP DD SYSOUT=X
//SYSPRINT DD SYSOUT=X
//CMPRINT DD SYSOUT=X
//CMPRINT1 DD SYSOUT=X
//CMPRINT2 DD SYSOUT=X
//CMPRINT3 DD SYSOUT=X
//CMPRINT4 DD SYSOUT=X
//CMPRT10 DD SYSOUT=X
//CMPRT11 DD SYSOUT=X
//CMPRT12 DD SYSOUT=X
//CMPRT13 DD SYSOUT=X
//CMPRT14 DD SYSOUT=X
//TRACE1 DD SYSOUT=X
//TRACE2 DD SYSOUT=X
//TRACE3 DD SYSOUT=X
//TRACE4 DD SYSOUT=X
//TRACE5 DD SYSOUT=X
//STUBLOG DD SYSOUT=X
//SYSOUT DD SYSOUT=X
//DDCARD DD DSN=SAGLIBT.EXX611.JOBS(ADACARD4),DISP=SHR
//*
//CMPRMIN DD DSN=HTPLEX.ADABAS.PROCLIB(PARM4),DISP=SHR
//* CMPRMIN DD *
//*

****************PARM4 **************
INTENS=1,BPID=0,DSIZE=32,IM=D,MADIO=0,MAXCL=0,DBID=2,
ETID=’ ‘,PRINT=((10),AM=STD)
RPC=(SERVER=ON,MAXBUFF=20,SRVNAME=SRV7,TRACE=2,RPCSIZE=32,
SRVNODE=ETB148,LOGONRQ=OFF,ACIVERS=4,SRVUSER=’*NSC’),
RCA=(BROKER),RCALIAS=(BROKER,BKIMBTSO)
STACK=(LOGON SYSRPC,ETBSRV1,ETBSRV22)

REgards

The error indicates that either you have a secured client and an unsecured Broker, or, more likely, a secured broker (using EntireX Security) and a client Broker stub without the security option installed.

From the installation documentation:

Applications using BKIMBTSO
Run job SAGJ108 in order to create load module SECUEXIT. This module must be made available in the steplib of the application. Member SAGJ108 contains INCLUDEs for the following additional modules: NA2PSUEX Broker security stub module
NA2PETS Broker security stub logic
NA2PPRM System parameter module

Ensure the system parameter module (i.e., NA2PPRM), created using job SAGJ010, is the same as the one used by the EntireX Security Started Task component.

We created load module SECUEXIT by using below parameters and JCl to link edit

NA2PARM parameter member is below.

NA2PPRM GWDBID=145, DBID OF SAF GATEWAY X
GWSIZE=32, SAF GATEWAY BUFFER SIZE X
GWMSGL=1, SAG GATEWAY MESSAGE LEVEL X
GWSTYP=1, TYPE OF SECURITY REPOSITORY X
BKPRIV=0, BROKER - NO ENCRYPTION OF MESSAGES X
BKREG=N, BROKER - REGISTER AUTHORIZATION X
BKNCU=2, BROKER - NUMBER CHECKS BUFFERED / USER X
BKUNI=Y, X
BKICLS=Y, X
BKINME=N, X
BKISER=N, X
BKTUID=Y, X
BKICON=Y BROKER - NO TCP/IP ADDRESS CHECK
END

==========================================

//USEREXC JOB SMA,MSGLEVEL=1,
// CLASS=T,MSGCLASS=X,REGION=4M
//LKD7657 EXEC PGM=IEWL,
// PARM=(‘RENT,REUS,XREF,LET,LIST,NCAL’,
// ‘SIZE=(1024K,256K)’),
// COND=(4,LT)
//SYSLMOD DD DSN=SAGLIBT.EXS611.LOAD,
// DISP=SHR
//SYSLIN DD DDNAME=SYSIN
//SYSUT1 DD UNIT=3390,SPACE=(1700,(500,100))
//SYSPRINT DD SYSOUT=*,
// DCB=(RECFM=FB,LRECL=121,BLKSIZE=1210)
//EXSLIB DD DSN=SAGLIBT.EXS611.LOAD,DISP=SHR
//SMALIB DD DSN=SAGLIBT.SMALOAD,DISP=SHR
//SYSIN DD *
INCLUDE EXSLIB(NA2PSUEX) ENTIREX SECURITY STUB MODULE
INCLUDE EXSLIB(NA2PETS) ENTIREX SECURITY STUB LOGIC
INCLUDE SMALIB(NA2PPRM) ENTIREX SECURITY PARAMETERS
NAME SECUEXIT(R)

We used below Broker Atribute parameters
** ENTIRE Broker attributes **********

DEFAULTS = BROKER
AUTOLOGON = YES
BROKER-ID = ETB148:3001
CLIENT-NONACT = 15M
CONV-DEFAULT = 1000
LONG-BUFFER-DEFAULT = 400
NUM-CLIENT = 500
NUM-CONVERSATION = 5000
NUM-LONG-BUFFER = 4000
NUM-SERVER = 100
NUM-SERVICE = 100
NUM-SHORT-BUFFER = 5000
NUM-WORKER = 10
SECURITY = YES
SERVICE-UPDATES = YES

And finally ,we use below startu proc. for ETBSEC .

//ETBSEC PROC
//EXSGATE EXEC PGM=SAFMPM,REGION=0M
//STEPLIB DD DISP=SHR,DSN=SAGLIBT.EXS611.LOAD
// DD DISP=SHR,DSN=SAGTEST.SMALOAD
// DD DISP=SHR,DSN=SAGLIBT.SMALOAD
// DD DISP=SHR,DSN=SAGLIBT.WAL712.LOAD
//DDDRUCK DD SYSOUT=X
//DDPRINT DD SYSOUT=X
//MPMDUMP DD SYSOUT=X
//SYSUDUMP DD SYSOUT=X
//DDPRINT DD SYSOUT=X
//DDCARD DD DISP=SHR,DSN=SAGLIBT.SMASRCE(EXSDDCAR)

EXSDDCAR member is as below

NODE=145
SVC=249
PRODUCT=EXS
LOCAL=NO
NABS=50
NU=100
NC=50
TIMER=600
LU=32768
CT=120
FORCE=NO

And we use Natural Security Logon Option = S

Altough we used all above definitions ,when we start Natural RPC server from TSO we get same message given before

M *** Server = SRV7
M *** Node = ETB148
M *** UserID = *NSC
M *** Natural RPC version: 5.1.1 - update level 0
M *** Highest supported protocol version: 1130
M EntireX Broker Stub Version=6.1.1, Patch Level=30, Highest API Supported=6
M *** LOGON to Broker ETB148 failed.
M 00200379 API: Inconsistent Security Installation

Is SECUEXIT available in the STEPLIB of the Natural job, as the first load library in the concatenation? (starting an RPC server from TSO is not particularly recommended since it just ties up that TSO terminal session)

Apply NAT316 and NSC316 PL16 as a start.
This will upgrade your RPC version to:
*** Natural RPC version: 5.1.1 update level 4
*** Highest supported protocol version: 1130
EntireX Broker Stub Version=7.1.1.60, Highest API Supported=7

Solved a number of issues for us.
William

Adabas SVC version was wrong.Problem was solved after correction of SVS version and re-IPLed system.Classical test enviroment problem. :?

Thanks to all .
Regards.