IT31825: IBM SPECTRUM PROTECT WEB CLIENT V8.1.7 DOESN'T ALLOW THE LOGIN NAME TO BE CHANGED

APAR status

• Closed as program error.

Error description

• The IBM Spectrum Protect web client V8.1.7 doesn't allow editing
  of the name used to authenticate with the server.  The login
  name field is editable in earlier versions of the IBM Spectrum
  Protect web client, so any defined admin with appropriate
  privileges can perform operations.
  The V8.1.7 backup-archive client documentation states that the
  admin user ID must be the same as the node name, then in the Tip
  section it states that any admin user 'with client owner
  privilege, system privilege, or policy privilege can still
  perform client operations on your workstation through the web
  client'.  The statements appear to be contradictory.
  If you plan to use the web client, ensure that you are assigned
  an administrative user ID with system privilege, policy
  privilege, client access authority, or client owner authority.
  When a new node is registered with the server, the node must be
  given an administrative user ID of the same node name with
  client owner authority.
  The IBM Spectrum Protect™ server administrator must specify the
  userid parameter with the REGISTER NODE server command:
  REGISTER NODE node_name password userid=user_id
  where the node name and the administrative user ID must be the
  same. For example:
  REGISTER NODE node_a mypassw0rd userid=node_a
  Tip You can use the revokeremoteaccess option to prevent IBM
  Spectrum Protect administrators with client access privilege
  from performing client operations on your workstation through
  the web client. However, IBM Spectrum Protect administrators
  with client owner privilege, system privilege, or policy
  privilege can still perform client operations on your
  workstation through the web client.
  IBM Spectrum Protect versions affected:
  IBM Spectrum Protect Client 8.1.7 and higher on all platforms
  Additional keywords:
  TS002523260
  

Local fix

• Start the web client and generate a fresh dsm.jnlp file.  Edit
  the dsm.jnlp file, change the following line from the default:
   
  <param name="loginID" value=""/>
   
  Insert the administrator name you wish to use to authenticate to
  the server with, in the following example the name is
  WEBRESTORE:
   
  <param name="loginID" value="WEBRESTORE"/>
   
  Execute the edited dsm.jnlp file, click on the operation you
  wish to perform (backup/restore/archive/retrieve) or click on
  File > Connection Information.   This should result in a prompt,
  the administrator name specified in the dsm.jnlp file should be
  displayed.  Enter the password for the administrator id. 
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * Backup-Archive client version 8.1 running on all Windows and *
  * Unix/Linux platforms.                                        *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * See ERROR DESCRIPTION                                        *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Apply fixing level when available. This problem is currently *
  * projected to be fixed in level 8.1.10.                       *
  * Note that this is subject to change at the discretion of     *
  * IBM.                                                         *
  ****************************************************************
  

Problem conclusion

• A check was missing, so the login information wasn't properly
  initialized for dsmj when it is started as a web-start
  application.
  Due to this the login screen was displayed as if the password
  has already been entered incorrectly, with only password field
  active.
  The code has been fixed, so the login data is properly
  initialized and the login screen shows proper fields active.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Modules/Macros

• dsmj
  

Fix information

• Fixed component name

  TSM CLIENT

• Fixed component ID

  5698ISMCL

Applicable component levels