IJ55348: LKU WITH IPSEC FAILS WITH CHECKPOINT FILE PROBABLY CORRUPTED APPLIES TO AIX 7300-03

APAR status

• Closed as program error.

Error description

• ****************************************************************
  * USERS AFFECTED:
  * Systems running the 7300-03 Technology Level with
  * any of the following filesets at or between the given levels:
  * MIN          MAX          FILESET
  * 7.3.3.1      7.3.3.1      bos.net.ipsec.rte
  ****************************************************************
  * PROBLEM DESCRIPTION:
  * consecutive LKU runs may fail with:
  *     fake-init 1745591663.647 DEBUG  mcr_shlib_srm_aix -
  * Shlib data starts with Ý 0xce 0xea 0xce 0xea ... ¨
  *      KLVUPD 1745591663.648       ERROR - 4915398/12714149
  * 0973-006 Checkpoint file probably corrupted
  * (600000000001E)
  * mcr: cke_errno 52 cke_Sy_error 23352 cke_Xtnd_error 20
  * cke_buf
  * When ipsec filters are enabled
  ****************************************************************
  * RECOMMENDATION:
  * Update to AIX 7300-03-02-2546 or later.
  ****************************************************************
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:
  * Systems running the 7300-03 Technology Level with
  * any of the following filesets at or between the given levels:
  * MIN          MAX          FILESET
  * 7.3.3.1      7.3.3.1      bos.net.ipsec.rte
  ****************************************************************
  * PROBLEM DESCRIPTION:
  * consecutive LKU runs may fail with:
  *     fake-init 1745591663.647 DEBUG  mcr_shlib_srm_aix -
  * Shlib data starts with   0xce 0xea 0xce 0xea ...
  *      KLVUPD 1745591663.648       ERROR - 4915398/12714149
  * 0973-006 Checkpoint file probably corrupted
  * (600000000001E)
  * mcr: cke_errno 52 cke_Sy_error 23352 cke_Xtnd_error 20
  * cke_buf
  * When ipsec filters are enabled
  ****************************************************************
  * RECOMMENDATION:
  * Update to AIX 7300-03-02-2546 or later.
  ****************************************************************
  

Problem conclusion

• The LKU IPsec code has been updated to support repeated
  LKU execution when the parameter "ipsec_auto_migrate = yes"
  is enabled.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  IJ55437

Fix information

• Fixed component name

  AIX V7.3

• Fixed component ID

  5765CD300

Applicable component levels