IT29201: LANFREE TRANSFER MIGHT FAIL WITH THE CLIENT ERROR "ANS7525E (RC81) SSL IS REQUIRED BY SERVER"

APAR status

• Closed as program error.

Error description

• IBM Spectrum Protect client communication with a storage agent
  might fail due to an error in handling the session setup when
  SSL is to be used for authentication but not for data transfer.
  
  This switching between encrypted communication and non encrypted
  file data does not work with LanFree data transfer.
  
  Typical IBM Spectrum Protect client error message:
  ANS7525E (RC81) SSL is required by server
  
  Corresponding server message:
  ANR1888W Session ### for node ABC (platform) refused
   - client requires SSL connection with this server.
  
  Product versions affected: IBM Spectrum Protect client
                             7.1 versions 7.1.8.0 and above
                             8.1 versions 8.1.2.0 and above
             Initial impact: Medium
        Additional keywords: GSKit encryption security performance
                             TSM TS001780742
  

Local fix

• Set the client up to use SSL for both authentication and data
  transfer by using the 'SSL YES' option.
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * IBM Spectrum Protect client 7.1.8, 8.1.2, 8.1.4, 8.1.6,      *
  * 8.1.7 and 8.1.8  running on all AIX, Linux, Windows,         *
  * Solaris, HP-UX                                               *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * See ERROR DESCRIPTION                                        *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * This issue is projected to be fixed in the IBM Spectrum      *
  * Protect client  version 7.1.8.7 and 8.1.9 on all platforms.  *
  * Note that this is subject to change at the discretion of     *
  * IBM.                                                         *
  ****************************************************************
  

Problem conclusion

• Now Lan-free backup works correctly when option SSL is set to NO
  on the server, STA and client
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  TSM CLIENT

• Fixed component ID

  5698ISMCL

Applicable component levels

• R81W PSY

     UP

• R81S PSY

     UP

• R81L PSY

     UP

• R81A PSY

     UP

• R81H PSY

     UP