IBM Support

IC76873: PAM AUTHENTICATION CAN ABEND SERVER

Subscribe to this APAR

By subscribing, you receive periodic emails alerting you to the status of the APAR, along with a link to the fix after it becomes available. You can track this item individually or track all items by product.

Notify me when this APAR changes.

Notify me when an APAR for this component changes.

 

APAR status

  • Closed as program error.

Error description

  • PAM authentication can abend server
    
    When IDS is configured to use PAM authentication, the server can
    abend inside the msc vp:
    
      afstack
      mt_ex_throw_sig
      afsig_handler
      <signal frame>
      stcmpr
      idx_ggetenv_ses
      idx_ggetenv
      ifx_getOSAFFamily
      ifx_gethostbyname
      __osgethostbyname
      aio_workon
      iothread
      startup
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED:                                              *
    * Users using 11.50.xC8 and earlier using PAM authentication   *
    * on non-Solaris platforms that support IPV6.                  *
    ****************************************************************
    * PROBLEM DESCRIPTION:                                         *
    * Because the code that determines IPV6 support was not called *
    * properly at init time, it had to be called in each vp.       *
    * In particular in the msc vp which is also used for PAM       *
    * authentication. A thread doing PAM authentication could      *
    * leave                                                        *
    * a pointer to data for that thread that has already exited    *
    * causing the abend.                                           *
    ****************************************************************
    * RECOMMENDATION:                                              *
    * Upgrade to IDS 11.50.xC9 when available.                     *
    ****************************************************************
    

Problem conclusion

  • Added scb to list of values saved/restored by AIO main thread.
    Make sure that ifx_getOSAFFamily() is called to set global value
    before forking other vp's.  Fixed in IDS 11.50.xC9.
    

Temporary fix

Comments

APAR Information

  • APAR number

    IC76873

  • Reported component name

    IBM IDS ENTRP E

  • Reported component ID

    5724L2304

  • Reported release

    B15

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2011-06-08

  • Closed date

    2011-09-27

  • Last modified date

    2011-09-27

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    IBM IDS ENTRP E

  • Fixed component ID

    5724L2304

Applicable component levels

  • RB15 PSN

       UP

[{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSGU8G","label":"Informix Servers"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"B15","Edition":"","Line of Business":{"code":"LOB10","label":"Data and AI"}}]

Document Information

Modified date:
27 September 2011