IV25946: UNABLE TO LOGIN TO TEMS USING TACMD LOGIN COMMAND WITH A PERIOD (.) IN A USERNAME

IBM Tivoli Monitoring 6.2.3 Fix Pack 5 (6.2.3-TIV-ITM-FP0005)
IBM Tivoli Monitoring 6.2.3 Fix Pack 4 (6.2.3-TIV-ITM-FP0004)

APAR status

• Closed as program error.

Error description

• TACMD login username not working with period like adm.user
  
  Result :
  
  C:\IBM\ITM\CMS>tacmd login -s rrsahana -u test.ragu
  
   KUIC02001E: The command did not complete because the value
  given for -u option is not an String matching the [A-Za-z0-9
   _#$ regular expression
  
  Authenticates a user name and password with a hub monitoring
  server so that a user can execute subsequent commands from
  the local machine.
  
  USAGE:
  
  tacmd login
  {-s|--server} {[PROTOCOL://]HOST[:PORT]}
  {-u|--username} USERNAME
  {-p|--password} PASSWORD
  [{-t|--timeout}TIMEOUT]
  
  Standard input option:
  
  tacmd login
  {-stdin|--stdin}
  
  where:
  
  -s|--server
  Specifies a hub Tivoli Enterprise Monitoring Server to log into.
  
  -u|--username
  Specifies the user to authenticate. The software prompts you for
  the user name if you do not specify one.
  
  -p|--password
  Specifies the password of the user to authenticate. The software
  prompts you for the password if you do not specify one.
  
  
  -t|--timeout
  Specifies the maximum number of minutes that can elapse between
  invocations of tacmd before the user is denied access to
   run tacmd. The default timeout is 15 minutes. The maximum
  timeout is 1440 minutes (24 hours).
  
  -stdin|--stdin
  This option indicates that all command line parameters will be
  processed from standard input (in the same command line f
  ormat) instead of being parsed from the command line arguments.
  
  
  This command is working as designed but L3 engineer agreed to
  open a severity 4 APAR to fix this issue
  

Local fix

• Workaround :
  
  Windows :
  
  Edit the %candlehome%\BIN\xml\kuiloginVld.xml file and add the
  period(.) char in the username validation list as shown below
  
  Linux/UNIX :
  
  Edit the %candlehome/$binArch/ue/xml/kuiloginVld.xml file and
  add the period(.) char in the username validation list as shown
  below
  
  
  where $candlehome is the ITM installation directory and $binArch
  is the platform and looks like lx8266, aix536 etc..
  
  
  <?xml version="1.0" encoding="utf-8"?>
  <Command>
  <Subcommand Name="login" Arguments="Y">
    <Host    arg1="-s"  arg2="--server" Type="String"
  ValidationRegExp="[-A-Za-z0-9()_ .://]" Required="Y"/>
    <Username   arg1="-u"  arg2="--username" Type="String"
  ValidationRegExp="[-A-Za-z0-9 _#$@.:]" Required="Y"/>
    <Password    arg1="-p"  arg2="--password" Type="String"
  Required="O"/>
    <Timeout     arg1="-t" arg2="--timeout" Type="Integer"
  ValidationRegExp="[0-9]" Minimum="1" Maximum="1440"
  Required="Y"/>
  </Subcommand>
  </Command>
  

Problem summary

• The "tacmd login" command fails if the username parameter value
  that is provided contains the period (.) character.
  
  For example:
  
  C:\Documents and Settings\Administrator>tacmd login -s localhost
  -u user.name
  
  KUIC02001E: The command did not complete because the value given
  for -u option is not an String matching the [A-Za-z0-9_#$
  regular expression
  
  Authenticates a user name and password with a hub monitoring
  server so that a user can execute subsequent commands from the
  local machine.
  

Problem conclusion

• The command validation mechanism has been modified to allow for
  username values that contain the period character.
  
  
  The fix for this APAR is contained in the following maintenance
  packages:
  
     | fix pack | 6.2.3-TIV-ITM-FP0004
     | release | 6.3.0-TIV-ITM
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  TEMS

• Fixed component ID

  5724C04MS

Applicable component levels

• R623 PSY

     UP