IT29313: CLIENT SESSION FAILS WITH GSK_ERROR_IO

APAR status

• Closed as program error.

Error description

• A client session may fail with following error message
  ANS1017E (RC-50) Session rejected: TCP/IP connection failure.
  
  The server side will only log:
  ANR8217W The server experienced a TCP/IP error while receiving
  data on socket xxx.  Reason 73.
  
  Diagnosing the issue further:
  
  A SERVICE COMMDETAIL client side trace will show the following
  reason:
  gskit.cpp(3459): setError(): gsk_secure_soc_read returned 406:
  'GSK_ERROR_IO'
  commtcp.cpp(2091): TcpReadAvailable(SSL): sslSock->recv()
  failed.
  
  To confirm the problem a network trace of TCP/IP exchange
  between the client and the server will be required and should
  show that the gsk_secure_soc_read call exited prematurely in
  relation to the time the server's response package was
  received.
  
  Spectrum Protect Versions Affected:
  IBM Spectrum Protect Client versions 7.1.8 and 8.1.2 and later.
  
  Initial Impact: Low
  
  Additional Keywords:
  TS001988107 GSK_ERROR_IO
  

Local fix

• None. Contact IBM support.
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * IBM Spectrum Protect backup-archive client versions 7.1.x    *
  * and 8.1.x on all platforms.                                  *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * See ERROR DESCRIPTION.                                       *
  * For more information, refer to the security bulletin         *
  * published at this location:                                  *
  * https://www.ibm.com/support/pages/node/1107777               *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Apply fixing level when available. This problem is projected *
  * to be fixed in level 7.1.8.7 and 8.1.9. Note that this is    *
  * subject to change at the discretion of IBM.                  *
  ****************************************************************
  

Problem conclusion

• The problem happened due to an issue in the GSKit function that
  is going to be deprecated.
  The Spectrum Protect client code has been modified to use the
  GSKit recommended I/O callback functions instead.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Modules/Macros

• dsmc
  

Fix information

• Fixed component name

  TSM CLIENT

• Fixed component ID

  5698ISMCL

Applicable component levels