Direct links to fixes
4.1.1-TIV-ITNMIP-Linux-FP0002
4.1.1_README_NLS_FP0002
4.1.1_README_FP0002
3.9.0-TIV-ITNMIP-Solaris-FP0005
3.9.0_INSTALL_NLS_FP0005
3.9.0_INSTALL_FP0005
3.9.0-TIV-ITNMIP-Windows-FP0005
3.9.0-TIV-ITNMIP-zLinux-FP0005
3.9.0-TIV-ITNMIP-Linux-FP0005
3.9.0-TIV-ITNMIP-AIX-FP0005
4.1.1_README_NLS_FP0001
4.1.1_README_FP0001
4.1.1-TIV-ITNMIP-Linux-FP0001
3.9.0.4-TIV-ITNMIP-CORE-OpenSSL-Windows-IF0001
3.9.0.4-TIV-ITNMIP-GUI-Windows-IF0001
3.9.0.4-TIV-ITNMIP-GUI-Window-IF0001
3.9.0.4-TIV-ITNMIP-GUI-Unix-IF0001
3.9.0.4-TIV-ITNMIP-CORE-OpenSSL-zLinux-IF0001
3.9.0.4-TIV-ITNMIP-CORE-OpenSSL-Solaris-IF0001
3.9.0.4-TIV-ITNMIP-CORE-OpenSSL-Linux-IF0001
3.9.0.4-TIV-ITNMIP-CORE-OpenSSL-AIX-IF0001
3.9.0.4-TIV-ITNMIP-zLinux-CORE-IF0001
3.9.0.4-TIV-ITNMIP-Windows-CORE-IF0001
3.9.0.4-TIV-ITNMIP-Solaris-CORE-IF0001
3.9.0.4-TIV-ITNMIP-Linux-CORE-IF0001
3.9.0.4-TIV-ITNMIP-AIX-CORE-IF0001
3.9.0.4_README_NLS_IF0001
3.9.0.4_README_GUI_IF0001
3.9.0.4_README_CORE_OpenSSL_IF0001
3.9.0.4_README_CORE_IF0001
IBM Tivoli Network Manager IP 3.9.0.4 Interim Fix 1, 3.9.0.4-TIV-ITNMIP-IF0001
IBM Tivoli Network Manager IP Edition 3.9.0 Fix Pack 5, 3.9.0-TIV-ITNMIP-FP0005
IBM Tivoli Network Manager IP Edition 4.1.1 Fix Pack 2, 4.1.1-TIV-ITNMIP-FP0002
APAR status
Closed as program error.
Error description
Product: Tivoli Network Manager Version: 3.9, 4.1.0, 4.1.1 Component: unmanage.xml Environment: This has been replicated in a basic install of ITNM, all the defaults accepted. Symptoms: In $NCHOME/precision/profiles/TIPProfile/etc/tnm/tools/unmanage.xml we have a filter called <security> The documented attributes for the section are user, group or role name; http://www-01.ibm.com/support/knowledgecenter/api/content/SSSHRK _4.1.1/com.ibm.networkmanagerip.doc_4.1.1/itnm/ip/wip/admin/refe rence/nmip_adm_xmlattributesforsecurityfilters.html The default filter is set to <role name="ncp_manage_unmanage"/> And this filter works fine: Log in as itnmadmin and you can unmanage or manage a device in Network Views by right hand clicking on the device icon and selecting the unmanage/manage tool from the list. Log in as itnmuser and that option is not available. But the other two attributes do not work. Set the attribute to <user name="itnmadmin"/> or <group name="Network_Manager_IP_Admin"/> ... and then log in as itnmadmin, and the unmanage option is not available.
Local fix
Use only the working role name.
Problem summary
**************************************************************** * USERS AFFECTED: * * ITNM users using 3.9FP4 and older, 4.1 GA or 4.1.1GA * **************************************************************** * PROBLEM DESCRIPTION: * * The user and group attributes didn't work as described in * * this doc: * * * * http://www-01.ibm.com/support/knowledgecenter/api/content/SS * * SHRK * * _4.1.1/com.ibm.networkmanagerip.doc_4.1.1/itnm/ip/wip/admin/ * * refe * * rence/nmip_adm_xmlattributesforsecurityfilters.html * **************************************************************** * RECOMMENDATION: * * | fix pack | 3.9.0-ITNMIP-FP0005 * * | fix pack | 4.1.0-ITNMIP-FP0001 * * | fix pack | 4.1.1-ITNMIP-FP0001 * * | fix pack | 3.9.4-ITNMIP-IF0001 * ****************************************************************
Problem conclusion
use role attribute as workaround
Temporary fix
Comments
APAR Information
APAR number
IV65238
Reported component name
TIV NETWK MGR I
Reported component ID
5724S4500
Reported release
411
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2014-09-25
Closed date
2014-10-22
Last modified date
2015-04-13
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Fix information
Fixed component name
TIV NETWK MGR I
Fixed component ID
5724S4500
Applicable component levels
R410 PSN
UP
R410 PSY
UP
R411 PSN
UP
R411 PSY
UP
Document Information
Modified date:
13 April 2015