IZ56818: HTTP/HTTPS LISTENING PORT DISPLAYED IN RAS1 LOG

IBM Tivoli Monitoring 6.2.2 Fix Pack 8 (6.2.2-TIV-ITM-FP0008)
IBM Tivoli Monitoring 6.2.2 Fix Pack 9 (6.2.2-TIV-ITM-FP0009)
IBM Tivoli Monitoring 6.2.2 Fix Pack 6 (6.2.2-TIV-ITM-FP0006)

APAR status

• Closed as program error.

Error description

• Problem Description:
  HTTP and HTTPS protocol initialization in Tivoli Monitoring
     processes display the listening socket address in the RAS1
     log. While this is working as designed, some customers feel
     the display is a security exposure and would like some method
     of suppressing these messages in the RAS1 log.
  
   Detailed Recreation Procedure:
     Start a Tivoli Monitoring Process and note the following RAS1
     msg:  kdhslqm.c,188,"add_listener") listening:
     ip.tcp.http:38797
  
   Related Files and Output:
     none.
  

Local fix

Problem summary

• HTTP and HTTPS protocol initialization in Tivoli Monitoring
  processes display the listening socket address in the RAS1 log.
  While this is working as designed, some customers feel the
  display is a security exposure and would like some method of
  suppressing these messages in the RAS1 log.
  

Problem conclusion

• The code was enhanced to support a new environment variable
  giving customers control over the display of the listening
  socket address messages in the RAS1 log.
  
  The KDH_NODISPLAY_OPAQUE_PORTS is the environment variable
  implemented to suppress HTTP and HTTPS opaque port allocations
  from the RAS1 log.  When KDH_NODISPLAY_OPAQUE_PORTS is present
  and set to any value, HTTP and HTTPS opaque listening ports are
  not displayed in the RAS1 log.  The KDH_NODISPLAY_OPAQUE_PORTS
  environment variable is specified in the 'xxxENV' member
  corresponding to the Tivoli Monitoring process for which these
  messages are to be suppressed.  For example:
  
  KDH_NODISPLAY_OPAQUE_PORTS=1
  or
  KDH_NODISPLAY_OPAQUE_PORTS=YES
  
  Either of these statements will result in the opaque port RAS1
  messages being suppressed in the RAS logs.  IF the
  KDH_NODISPLAY_OPAQUE_PORTS value is not specified, the default
  behavior of displaying the opaque ports in the RAS log will
  prevail.
  
  
  The fix for this APAR is contained in the following maintenance
  packages:
  
     | interim fix | 6.2.0.3-TIV-ITM-IF0002
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  OA30635 OA31003 OA31033

Fix information

• Fixed component name

  TEMS

• Fixed component ID

  5724C04MS

Applicable component levels

• R620 PSY

     UP