IBM Support

IT04249: DP DOMINO PLUGIN CAN STILL BE USED BY THE BA JAVA GUI AND WEB GUI EVEN AFTER AUTHENTICATION FAILS WITH THE GUI

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • When using the Tivoli Storage Manager for Mail: Data Protection
    for Domino plugin to the Tivoli Storage Manager Client's Java
    GUI or Web GUI interfaces, use of those interfaces is possible
    even after a failed authentication attempt.
    Versions Affected: 5.4, 5.5, 6.1, 6.3, and 7.1
    

Local fix

  • Configure web access, and access to the local machine, in such a
    manner that only trusted users are allowed to access the TSM
    Backup-Archive Client Java GUI and Web GUI interfaces.
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED:                                              *
    * All Tivoli Storage Manager for Mail: Data Protection for     *
    * Domino 5.4, 5.5, 6.3, 6.4, and 7.1                           *
    ****************************************************************
    * PROBLEM DESCRIPTION:                                         *
    * See error description and security bulletin tech note        *
    * located here:                                                *
    * http://www.ibm.com/support/docview.wss?uid=swg21695183       *
    ****************************************************************
    

Problem conclusion

  • The Tivoli Storage Manager Client software has been updated to
    prohibit usage of the Java GUI or Web GUI interface to Data
    Protection for Domino after an authetication failure.
    

Temporary fix

  • ****************************************************************
    * The complete list of interim fixes, by platform, is detailed *
    * in the security bulletin tech note located here:             *
    * http://www.ibm.com/support/docview.wss?uid=swg21695183       *
    ****************************************************************
    

Comments

APAR Information

  • APAR number

    IT04249

  • Reported component name

    TDP FOR DOMINO

  • Reported component ID

    5698DPDAP

  • Reported release

    71W

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2014-09-07

  • Closed date

    2014-09-07

  • Last modified date

    2015-02-12

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Modules/Macros

  • PLUGIN
    

Fix information

  • Fixed component name

    TDP FOR DOMINO

  • Fixed component ID

    5698DPDAP

Applicable component levels

  • R71W PSY

       UP

  • R71A PSY

       UP

  • R71L PSY

       UP

  • R63A PSY

       UP

  • R63L PSY

       UP

  • R63D PSY

       UP

  • R63W PSY

       UP

[{"Business Unit":{"code":"BU010","label":"Systems - Storage"},"Product":{"code":"SSTG2D","label":"Tivoli Storage Manager for Mail"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"71W","Edition":""}]

Document Information

Modified date:
12 February 2015