IT24044: LDAP AUTHENTICATION FAILURE ANS1051I INVALID USER ID OR PASSWORD

APAR status

Closed as program error.

Error description

The procedure to add LDAP user to the IBM Spectrum Protect
server is successfully completed, however login attempt to the
server using newly created LDAP user fails
- Create a LDAP user:
register admin jdoe auth=ldap sessionsec=trans

grant auth jdoe cl=system



- Test connection:
$ dsmadmc
IBM Spectrum Protect
Command Line Administrative Interface
    - Version 8, Release 1, Level 2.0
    (c) Copyright by IBM Corporation and other(s) 1990, 2017.
    All Rights Reserved.


Enter your user id:  jdoe
Enter your password:


ANS1051I Invalid user id or password
The LDAP LDAPCACHE trace will show successful bind:
10:31:35.574 Ý596¨Ýldapintr.c¨Ý5344¨ÝLdapCheckEntry¨:Checking
via (&(objectClass=*)(|(sAMAccountName=jdoe@example.com)
(userPrincipalName=jdoe@example.com)))
...
10:31:35.577 Ý596¨Ýldapintr.c¨Ý1702¨ÝldapAuthenticate¨:Exit:
entryName = jdoe, entryId = 176, rc = 1116

The issue only occurs if the UPName does not match the standard
name@domain format.
This APAR is a follow-up from IT22066 however the 7.1 server is
not affected.
IBM Spectrum Protect Versions Affected:
IBM Spectrum Protect server 8.1 on all platforms
| MDVREGR 8.1.4.0-5698ISMSV |
Initial Impact:
Medium
Additional Keywords:
Spectrum Protect; TSM; LDAP; Active Directory; UPName;
SAMAccountName; ANS1051I; IT22066

Local fix

Problem summary

****************************************************************
* USERS AFFECTED:                                              *
* All IBM Spectrum Protect server users.                       *
****************************************************************
* PROBLEM DESCRIPTION:                                         *
* See error description.                                       *
****************************************************************
* RECOMMENDATION:                                              *
* Apply fixing level when available. This problem is currently *
* projected to be fixed in level 8.1.6.. Note that this is     *
* subject to change at the discretion of IBM.                  *
****************************************************************

Problem conclusion

This problem was fixed.
Affected platforms for reported release:  AIX, Linux, Windows.
Platforms fixed:  AIX, Linux, Windows.

Temporary fix

Comments

APAR Information

APAR number
IT24044
Reported component name
TSM SERVER
Reported component ID
5698ISMSV
Reported release
81A
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2018-02-12
Closed date
2018-03-29
Last modified date
2018-03-29

APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:

IT24490

Fix information

Fixed component name
TSM SERVER
Fixed component ID
5698ISMSV

Applicable component levels

[{"Business Unit":{"code":"BU029","label":"Software"},"Product":{"code":"SSGSG7","label":"Tivoli Storage Manager"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"81A"}]

Document Information

Modified date:
06 September 2023

Tips

IT24044: LDAP AUTHENTICATION FAILURE ANS1051I INVALID USER ID OR PASSWORD

Direct links to fixes

Subscribe

APAR status

Closed as program error.

Error description

Local fix

Problem summary

Problem conclusion

Temporary fix

Comments

APAR Information

APAR number

Reported component name

Reported component ID

Reported release

Status

PE

HIPER

Special Attention

Submitted date

Closed date

Last modified date

APAR is sysrouted FROM one or more of the following:

APAR is sysrouted TO one or more of the following:

Fix information

Fixed component name

Fixed component ID

Applicable component levels

Document Information

Share your feedback

Need support?