IBM Support

IT29343: AT PASSWORD EXPIRATION 'PASSWORDACCESS GENERATE' MIGHT FAIL WITHMESSAGES ANS1306E OR ANS2050E FROM CLIENT AND ANR0500W IN ACTLOG

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • The IBM Spectrum Protect client might fail to update an
    expiring password via option 'passwordaccess generate'
    
    Customer/L2 diagnostics
    =======================
    Client symptoms
    ---------------
    dsmsched.log
     - - - - - -
    ANS2050E IBM Spectrum Protect needs to prompt for the password
             but cannot prompt because the process is running
             in the background.
    
    'service' trace taken from the dsmc command line
     - - - - - - - - - - - - - - - - - - - - - - - -
    PasswordFile.cpp    ( 495): PasswordFile::unlockPasswordFile():
    Enter.
    psfile.cpp          ( 745): psFileRemove():
     Failed to delete file </etc/adsm/tsmpswd.lck>, error=<2>
    
    Remark: errno = 2 = ENOENT  /* No such file or directory */
    
    Server side message
    -------------------
    ANR0500W Transaction failed for session # for node XYZABC
             (Platform) - invalid password submitted.
    
    Product versions affected: All 7.1 and 8.1 client versions on
                               all platforms
               Initial impact: Medium
          Additional keywords: TS001447433 tsm security policy
                               authentication
    

Local fix

  • Manually reset the password:
    'dsmc query session'
    When prompted enter the new password.
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED:                                              *
    * IBM Spectrum Protect Backup-Archive Client versions 7.1 and  *
    * 8.1 running on all platforms                                 *
    ****************************************************************
    * PROBLEM DESCRIPTION:                                         *
    * see ERROR DESCRIPTION                                        *
    ****************************************************************
    * RECOMMENDATION:                                              *
    * Apply fixing level wen available. This problem is projected  *
    * to be fixed in level 7.1.8.7 and 8.1.9. Note that this is    *
    * subject to change at the discretion of IBM.                  *
    ****************************************************************
    *
    

Problem conclusion

  • The problem happened due to a timing & serialization issue in
    the password handling code.
    The password handling code has been fixed, so that the password
    expiration works correctly.
    The fix has also addressed other cases where valid passwords
    might be unexpectedly removed from the password file upon
    authentication issues which are not related to the password
    expiration processing.
    

Temporary fix

Comments

APAR Information

  • APAR number

    IT29343

  • Reported component name

    TSM CLIENT

  • Reported component ID

    5698ISMCL

  • Reported release

    81L

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2019-06-05

  • Closed date

    2019-08-12

  • Last modified date

    2019-12-04

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Modules/Macros

  • dsmc
    

Fix information

  • Fixed component name

    TSM CLIENT

  • Fixed component ID

    5698ISMCL

Applicable component levels

[{"Line of Business":{"code":"LOB26","label":"Storage"},"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SSGSG7","label":"Tivoli Storage Manager"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"81L"}]

Document Information

Modified date:
13 February 2021