IJ54600: IKEDB -P :LSP FUNCTION DETECTED A BAD PARAMETER APPLIES TO AIX 7200-05

APAR status

• Closed as program error.

Error description

• ****************************************************************
  * USERS AFFECTED:
  * Systems running the 7200-05 Technology Level with
  * any of the following filesets at or between the given levels:
  * MIN          MAX          FILESET
  * 7.2.5.202    7.2.5.202    bos.net.ipsec.keymgt
  ****************************************************************
  * PROBLEM DESCRIPTION:
  * Starting at
  * AIX 7200-05-08-2420/bos.net.ipsec.keymgt 7.2.5.202
  * ikedb -p thows error "A LSP FUNCTION DETECTED A BAD
  * PARAMETER
  * This only occurs when using certificates and ASN1_DN |
  * FQDN as identifiers rather
  * than IP address.
  * This is not the older similar apar:
  * IJ38354: IKDEB -P THROWS ERROR "A LSP FUNCTION DETECTED A
  * BAD PARAMETER" APPLIES TO AIX 7300-00 ? APAR status ?
  ****************************************************************
  * RECOMMENDATION:
  * Update to AIX 7200-05-11-2546 or later.
  ****************************************************************
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:
  * Systems running the 7200-05 Technology Level with
  * any of the following filesets at or between the given levels:
  * MIN          MAX          FILESET
  * 7.2.5.202    7.2.5.202    bos.net.ipsec.keymgt
  ****************************************************************
  * PROBLEM DESCRIPTION:
  * Starting at
  * AIX 7200-05-08-2420/bos.net.ipsec.keymgt 7.2.5.202
  * ikedb -p thows error "A LSP FUNCTION DETECTED A BAD
  * PARAMETER
  * This only occurs when using certificates and ASN1_DN |
  * FQDN as identifiers rather
  * than IP address.
  * This is not the older similar apar:
  * IJ38354: IKDEB -P THROWS ERROR "A LSP FUNCTION DETECTED A
  * BAD PARAMETER" APPLIES TO AIX 7300-00 ? APAR status ?
  ****************************************************************
  * RECOMMENDATION:
  * Update to AIX 7200-05-11-2546 or later.
  ****************************************************************
  

Problem conclusion

• ikedb code has been changed to handle the xml file
  that specify identifiers such as ASN1_DN or FQDN etc
  rather than IP address.
  

Temporary fix

Comments

• 7200-05 - use AIX APAR IJ54600
  7300-04 - use AIX APAR IJ55199
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  IJ55199 IJ55508

Fix information

• Fixed component name

  AIX V7.2

• Fixed component ID

  5765CD200

Applicable component levels