IZ68708: USING THE TACMD CLI IS NOT CURRENTLY ABLE TO HANDLE THE PERMISSION PROPERTIES FOR USERS WHEN DIFF REALM/NAMESPACE

IBM Tivoli Monitoring 6.2.2 Fix Pack 8 (6.2.2-TIV-ITM-FP0008)
IBM Tivoli Monitoring 6.2.2 Fix Pack 9 (6.2.2-TIV-ITM-FP0009)
IBM Tivoli Monitoring 6.2.2 Fix Pack 6 (6.2.2-TIV-ITM-FP0006)

APAR status

• Closed as program error.

Error description

• ENVIRONMENT:
  ITM 6.2.1
  OMXE for Msg 7.0
  Platform AIX
  
  -------
  
  PROBLEM DESCRIPTION :
  
  Using the tacmd editUser command fails yet the Gui succeeds
  Reproduced in L2 & L3 lab
  
  User command and error displayed
  
  
  "CLI is  not currently able to handle the permission properties
  for users when there is a different REALM / Namespace on
  TEPS..like it is for MQ agents.
  
  eg :
  /home/users/itmadmin/tim > tacmd edituser -i itmuser -f -u
  itmadmin -w  '<pwd>' -p "Permissions=Configure.View=F"
  
  KUICEU001I Validating user credentials...
  KUICEU002I The user itmadmin has been successfully edited on the
  TEPS
  located at http://localhost:1920.
  
  Cmd has succesfully exited, but the change has not been made.
  
  /home/users/itmadmin/tim > tacmd viewuser -i itmuser -p
  ...
  ...
  
  Configure                  : View=T, Modify=T
  
  Correct value for "View" above should be "View=F".
  
  Confirmed by TACMD L3 as defect, requires APAR.
  

Local fix

• The GUI interface will succeed.
  

Problem summary

• The tacmd edituser CLI is  not currently able to handle the
  permission properties for users when there is a different Realm
  / Namespace on portal server like it is for MQ agents.   The CLI
  edituser reports success but the change has not actually been
  made.
  

Problem conclusion

• The problem has been fixed with proper checking of the defined
  user permissions belonging to all the realms (including the
  non-standard ones as permission related to MQ agent)
  
  The fix for this APAR is included in the following maintenance
  vehicle:
      | interim fix | 6.2.1-TIV-ITM-FP0003
  

Temporary fix

• Edit the permissions via the portal client rather than the CLI.
  

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  TEMS

• Fixed component ID

  5724C04MS

Applicable component levels

• R621 PSY

     UP