IJ52714: AUTHENTICATION WITH EFS LEAK WHEN KEYSTORE DOESN'T EXIST APPLIES TO AIX 7300-04

APAR status

• Closed as program error.

Error description

• When efs is enabled and the user doesn't have a keystore
  in /var/efs/users/<user_name> a leak will be see when
  authenticating.
  This will be mostly transparent for normal user logins.
  But applications like db2ckpwd or oninit might exhibit
  the leak, and might fail when their max data limit is
  reached.
  

Local fix

• create a keystore for the user by doing a normal login
  verify then that /var/efs/users/<your_user>/keystore
  file exists.
  

Problem summary

• When efs is enabled and the user doesn't have a keystore
  in /var/efs/users/ user_name  a leak will be see when
  authenticating.
  
  This will be mostly transparent for normal user logins.
  But applications like db2ckpwd or oninit might exhibit
  the leak, and might fail when their max data limit is
  reached.
  

Problem conclusion

• AIX's EFS functions were modified to stop the memory leak
  when attempting to create a new user keystore.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

  IJ51027

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  AIX V7.3

• Fixed component ID

  5765CD300

Applicable component levels