IT29191: ANR0474W ERROR DURING OBJECT AGENT START UP WHEN ADMINONCLIENTPORT IS NO

APAR status

• Closed as program error.

Error description

• Starting the object agent results in the following errors as
  seen in the activity log:
  ANR0408I Session 69315 started for server MyObjectAgent (Linux
  x86-64) (SSL) for object agent. (SESSION: 7)
  ANR0474W Session 69315 for administrator MyObjectAgent (Linux
  x86-64) was refused because administrators are not allowed to
  initiate sessions on the client port. (SESSION: 7)
  ANR8592I Session 8 connection is using protocol TLSV12, cipher
  specification TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, certificate
  TSM Self-Signed Certificate. (SESSION: 8)
  This scenario only occurs when the server option
  AdminOnClientPort is set to NO.
  Versions affected: 8.1.7.x
  Keywords: TS002115777 objectagent SPP offload
  

Local fix

• Set  AdminOnClientPort to yes
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * All IBM Spectrum Protect server users of the object agent    *
  * for S3/Glacier ingest.                                       *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * See error description.                                       *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Apply fix level when available. This problem is fixed in     *
  * level 8.1.8 and above.                                       *
  * If the IBM Spectrum Protect server is configured with the    *
  * server option "AdminOnClientPort" set to "No", then it is    *
  * necessary to set an additional option in the IBM Spectrum    *
  * Protect object agent configuration file                      *
  * (spObjectAgent_objectagentname_serverport.config)  so that   *
  * sessions may authenticate using the admin port but move data *
  * and perform other operations over a separate client port. In *
  * the object agent configuration file, set the value of the    *
  * "serverlla" option to match the IBM Spectrum Protect         *
  * server's "TCPPort" value and set the new "serveradminlla"    *
  * option to match the IBM Spectrum Protect server's            *
  * "TCPAdminPort" value. For example, with a server "TCPPort"   *
  * value of 1500 and "TCPAdminPort" value of 1550, set the      *
  * following options in the object agent configuration file:    *
  *                                                              *
  * serverlla=1500                                               *
  * serveradminlla=1550                                          *
  *                                                              *
  * Restart the IBM Spectrum Protect object agent service for    *
  * any changes to the configuration file to take effect.        *
  ****************************************************************
  

Problem conclusion

• This problem has been fixed as of Spectrum Protect version 8.1.8
  (GA version).
  Affected platforms: Windows, Linux, AIX
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  TSM SERVER

• Fixed component ID

  5698ISMSV

Applicable component levels