IZ68369: INCORRECT TACMD LOGIN ERROR MESSAGE FOR NOT AUTHORIZED USERS ON TEMS

IBM Tivoli Monitoring 6.2.2 Fix Pack 8 (6.2.2-TIV-ITM-FP0008)
IBM Tivoli Monitoring 6.2.2 Fix Pack 9 (6.2.2-TIV-ITM-FP0009)
IBM Tivoli Monitoring 6.2.2 Fix Pack 6 (6.2.2-TIV-ITM-FP0006)

APAR status

• Closed as program error.

Error description

• Using ITM 6.21 IF04, customer was getting the following error
  when trying to sign on (using tacmd) to TEMS using LDAP
  authentication:
  
  KUIC00003E: Cannot connect to a hub monitoring server at
  addresses:
  https://<host>/<port_number>
  
  Customer has the exact same environment where this works, but
  is using ITM 6.21 IF03 instead of IF04.
  
  This problem was fixed by making changes to the access list file
  kshxhubs.xml by changing the user to use their short login name.
  However, the error received when doing this does not match the
  actual problem.  Instead of the error text talking about a
  connection problem, the customer feels that the error message
  should provide a better description of the actual problem
  (something like "not authorized" instead of "cannot connect").
  

Local fix

• N/A
  

Problem summary

• If SOAP security is configured, tacmd login returns an incorrect
  message, stating error on CONNECTION, for non-authorized users.
  
  This is the incorrect connection error:
  
  KUIC00003E: Cannot connect to a hub monitoring server at
  addresses:
  https://<host>/<port_number>
  
  This error message might be hiding the face that the problem is
  validation related, rather than connection related.
  

Problem conclusion

• Added the correct logic and message to ensure the correct
  message is returned.
  
  The fix for this APAR is included in the following maintenance
  vehicle:
      | interim fix | 6.2.1-TIV-ITM-FP0003
  

Temporary fix

• Based on the directions provided in the Installation Guide,
  section "Configuring IBM Tivoli Monitoring Web Services (SOAP
  Server)", please ignore the connection error and check that the
  user is authorized to perform the required operation.
  

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  TEMS

• Fixed component ID

  5724C04MS

Applicable component levels

• R621 PSY

     UP