IJ34689: WHEN USING THE REMOTE LOG FILE MONITORING FUNCTION (SSHHOSTLIST), THE AGENT TERMINATES SOON AFTER STARTUP

APAR status

• Closed as Permanent restriction.

Error description

• When using the Log File Agent feature to monitor logs on a
  remote system (using ssh), the agent terminates in
  libicclib085.so.  The feature to monitor remote logs is used
  when the *conf file includes the SshHostList keyword.
  
  Environment: Can occur across Log File Agent versions.
  The issue occurs when GSKit is upgraded to version 8.0.55.17 and
  above.  The GSKit version is upgraded to 8.0.55.17 when agent
  shared components are upgraded to 6.30 FP7 SP6 (and above).  For
  example, if there is an OS Agent on the same system and that
  agent is upgraded to 6.30 FP7 SP6, then the GSKit for all agents
  in that $CANDLEHOME will share the upgraded GSKit version.
  
  Related Files and Output: When the core file is analyzed, the
  following stack trace is observed:
  
  
  Stack trace of thread 165000:
  #0  0x0000145f657fbbff BN_num_bits (libicclib085.so)
  #1  0x0000145f658e2df4 RSA_size (libicclib085.so)
  #2  0x0000145f658ec5d1 int_rsa_verify (libicclib085.so)
  #3  0x0000145f658ecae8 RSA_verify (libicclib085.so)
  #4  0x0000145f658e9a7d pkey_rsa_verify (libicclib085.so)
  #5  0x0000145f658d457b EVP_PKEY_verify (libicclib085.so)
  #6  0x0000145f658c9f16 EVP_VerifyFinal (libicclib085.so)
  #7  0x0000145f20f622be _libssh2_rsa_sha1_verify
  (libklossh-gsk8.so)
  #8  0x0000145f20f56a3a hostkey_method_ssh_rsa_sig_verify
  (libklossh-gsk8.so)
  #9  0x0000145f20f58a98
  kex_method_diffie_hellman_groupGP_sha1_key_exchange (libklossh->
  
  #10 0x0000145f20f5abc3
  kex_method_diffie_hellman_group14_sha1_key_exchange (libklossh->
  
  #11 0x0000145f20f5eb66 libssh2_kex_exchange (libklossh-gsk8.so)
  #12 0x0000145f20f7660d session_startup (libklossh-gsk8.so)
  #13 0x0000145f20f77091 libssh2_session_startup
  (libklossh-gsk8.so)
  #14 0x0000145f21193b61 libssh2_session_startup (libkloudp.so)
  #15 0x0000145f2117f9b9 ssh_session_connect (libkloudp.so)
  #16 0x0000145f2117db13 ssh_connection_check (libkloudp.so)
  #17 0x0000145f2112f8df VerifyInitializeMonitorFileSpec
  (libkloudp.so)
  #18 0x0000145f211335ea KUMP_FileServer (libkloudp.so)
  #19 0x0000145f2116b982 Task (libkloudp.so)
  #20 0x0000145f6bba914a start_thread (libpthread.so.0)
  #21 0x0000145f6a974dc3 __clone (libc.so.6)
  

Local fix

• When using the remote log file monitoring of the Tivoli Log
  File Agent, install the agent on a system where 6.30 FP7 SP6 (or
  later) has not been installed.
  

Problem summary

• There is a comability issue between the Agent Builder agent and
  the newer levels of GSKit (after 8.0.55.17).
  

Problem conclusion

• This is being closed as a product limitation.  The agent will
  need to be installed locally on the system where the logs are
  to be monitored.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels