IT26978: THE USER CANNOT AUTHENTICATE TO THE SERVER FROM BA CLIENT.

APAR status

• Closed as suggestion for future release.

Error description

• When the KDB file is corrupted in the BA client, the wrong GSKIT
  output message is logged.
  dsmcert.kdb is size 0
  
  This issue started appearing after upgrading to a new version of
  GSKit is because GSKKM_ImportKeys return codes changed.
  
  8.0.55.2
  GSKKM_ImportKeys returns an error when reading an empty file.
  0/15/2018 15:04:12.302 [013676] [12480] :
  ..\..\common\enc\gskkmlib.cpp( 855): ENTER =====>
  GSKKMlib::gskkmImportKeys
  10/15/2018 15:04:12.326 [013676] [12480] :
  ..\..\common\enc\gskkmlib.cpp( 905): 10/15/2018 15:04:12.326
  [013676] [12480] : ..\..\common\enc\gskkmlib.cpp(1144): ENTER
  =====> GSKKMlib::setLastGskkmError
  10/15/2018 15:04:12.326 [013676] [12480] :
  ..\..\common\enc\gskkmlib.cpp(1144): EXIT  <=====
  GSKKMlib::setLastGskkmError
  10/15/2018 15:04:12.326 [013676] [12480] :
  ..\..\common\enc\gskkmlib.cpp(1116): ENTER =====>
  GSKKMlib::gskkmLogError
  10/15/2018 15:04:12.327 [013676] [12480] :
  ..\..\common\ut\GlobalRC.cpp( 428): msgNum = 1579 changed the
  Global RC.
  10/15/2018 15:04:12.327 [013676] [12480] :
  ..\..\common\ut\GlobalRC.cpp( 429): Old values: rc = 0,
  rcMacroMax = 0, rcMax = 0.
  10/15/2018 15:04:12.327 [013676] [12480] :
  ..\..\common\ut\GlobalRC.cpp( 444): New values: rc = 12,
  rcMacroMax = 12, rcMax = 12.
  10/15/2018 15:04:12.328 [013676] [12480] :
  ..\..\common\enc\gskkmlib.cpp(1116): EXIT  <=====
  GSKKMlib::gskkmLogError
  10/15/2018 15:04:12.328 [013676] [12480] :
  ..\..\common\enc\gskkmlib.cpp( 855): EXIT  <=====
  GSKKMlib::gskkmImportKeys
  
  8.0.50.86
  GSKKM_ImportKeys succeeds.
  10/16/2018 08:55:29.250 [018444] [17872] :
  ..\..\common\enc\gskkmlib.cpp( 855): ENTER =====>
  GSKKMlib::gskkmImportKeys
  10/16/2018 08:55:29.317 [018444] [17872] :
  ..\..\common\enc\gskkmlib.cpp( 902): GSKKMlib::gskkmImportKeys
  Import keys successful.
  10/16/2018 08:55:29.317 [018444] [17872] :
  ..\..\common\enc\gskkmlib.cpp(1144): ENTER =====>
  GSKKMlib::setLastGskkmError
  10/16/2018 08:55:29.317 [018444] [17872] :
  ..\..\common\enc\gskkmlib.cpp(1144): EXIT  <=====
  GSKKMlib::setLastGskkmError
  10/16/2018 08:55:29.317 [018444] [17872] :
  ..\..\common\enc\gskkmlib.cpp( 855): EXIT  <=====
  GSKKMlib::gskkmImportKeys
  
  GSKIT
  Should add message so that the user can delete the file
  themselves
  ANS1579E GSKit function GSKKM_ImportKeys failed with 12
  'C:\Users\adminhvcet\IBM\SpectrumProtect\certs\dsmcert.kdb':
  GSKKM_ERR_DATABASE_READ
  
  Platform & Versions affected - All products/versions using GSKIT
  

Local fix

• From the server, set the node back to transitional.
  Stop the CAD
  From the client, delete corrupted kdb file
  Restart the CAD and it will generate new kdb files
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * IBM Spectrum Protect backup archive client version 7.1.8,    *
  * 8.1.2, 8.1.4, 8.1.6, 8.1.7 on all platforms                  *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * See ERROR DESCRIPTION.                                       *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  

Problem conclusion

• A technote will be published to describe which steps to perform
  if backup-archive client failed with ANS1579E when dsmcert.kdb
  is corrupted.
  

Temporary fix

Comments

• The following technote will be published to describe which steps
  to perform if backup-archive client failed with ANS1579E when
  dsmcert.kdb is corrupted.
  http://www.ibm.com/support/docview.wss?uid=ibm10871708
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels