IBM Support

IT37783: SERVER FAILS TO CONNECT TO BACKEND S3 OBJECT STORE FOR ONPREM CLOUD POOL OPERATIONS.

Direct links to fixes

8.1.12.200-IBM-SPSRV-WindowsX64
8.1.12.200-IBM-SPSRV-Linuxx86_64
8.1.12.200-IBM-SPSRV-Linuxs390x
8.1.12.200-IBM-SPSRV-Linuxppc64le
8.1.12.200-IBM-SPSRV-AIX
IBM Spectrum Protect Server V8.1 Fix Pack 13 (V8.1.13) Downloads
IBM Spectrum Protect Server V8.1.12.X interim fix downloads

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • Tracing of the problem will show similar to follows:

09:13:50.207 [155][jvm.c][1552][JavaSideTrace]:<
com.tivoli.dsm.cloud.api.ProviderS3 createContainer rc =
NotConnected (1)
09:13:50.207 [2][ffdcutil.c][429][FFDCLogThread]:[06-11-2021
09:13:50.207][ FFDC_GENERAL_SERVER_ERROR ]: (jvm.c:1602)
com.tivoli.dsm.cloud.api.ProviderS3 handleException
com.amazonaws.SdkClientException Unable to execute HTTP request:
Received fatal alert: handshake_failure
09:13:50.208 [155][jvm.c][1552][JavaSideTrace]:<
com.tivoli.dsm.cloud.api.CloudHandler createContainer rc =
NotConnected (1)
09:13:50.208 [155][sdcloud.c][4682][PrintJavaError]:Entering
09:13:50.208 [2][ffdcutil.c][440][FFDCLogThread]:newpos=239011
maxSize=1048576
09:13:50.208 [10][smtrans.c][2117][SmSendVerbX]: Contents of
verb (0xf1) AdmCmdResp, length=140, extended=0: (no data fields)

09:13:50.209 [155][sdcloud.c][4718][PutConsoleMsg]:ANR3701E
Cannot connect to the cloud service provider for the create
container operation on the <poolname> storage pool.~
09:13:50.209 [155][sdcloud.c][4880][PrintJavaError]:Exit
09:13:50.209 [155][sdcloud.c][4250][CloudCreateContainer]:Exit:
rc=2903
09:13:50.209
[155][sdcloud.c][1897][SdCloudCreateContainer]:Exit: rc=2903
09:13:50.209 [155][sdcloud.c][2298][SdCloudUploadFile]:not
attached
09:13:50.209 [155][sdcloud.c][2308][SdCloudUploadFile]:Exit.
cntrId 133; rc=2903; bytes written = 0
09:13:50.210
[155][sdio.c][2356][SdWriteContainerFileToCloud]:Exit: rc=2903
09:13:50.210 [155][sddefrag.c][6323][ExtTransferContainer]:Exit:
rc=2903, bytes written = 0
09:13:50.210 [2][ffdcutil.c][429][FFDCLogThread]:[06-11-2021
09:13:50.210][ FFDC_GENERAL_SERVER_ERROR ]: (sddefrag.c:2246)
Unrecoverable error while moving cntr =
M:\s3tmplocal\00\0000000000000085.dcf, rc=2903, cancelling
process.

The problem happens when the target cloud object store and the
server can not agree on a cipher to encrypt the session with.

Local fix

  • change the java.security file to set the property
jdk.tls.disabledAlgorithms to this:

jdk.tls.disabledAlgorithms=SSLv3, TLSv1, TLSv1.1, DH keySize <
2048, EC keySize < 256, DSS, 3DES_EDE_CBC, DES, DESede, RC4,
MD5, SSL_RSA_WITH_AES_128_CBC_SHA,
SSL_RSA_WITH_AES_128_CBC_SHA256 usage TLSServer,
SSL_RSA_WITH_AES_256_CBC_SHA, SSL_RSA_WITH_AES_256_CBC_SHA256
usage TLSServer, SSL_RSA_WITH_AES_128_GCM_SHA256 usage
TLSServer, SSL_RSA_WITH_AES_256_GCM_SHA384 usage TLSServer,
anon, NULL, SHA1 usage TLSServer

Then restart Spectrum Protect.

Problem summary

  • ****************************************************************
* USERS AFFECTED:                                              *
* All IBM Spectrum Protect server users.                       *
****************************************************************
* PROBLEM DESCRIPTION:                                         *
* See error description.                                       *
****************************************************************
* RECOMMENDATION:                                              *
* Apply fixing level when available. This problem is currently *
* projected to be fixed in levels 8.1.12.200 and 8.1.13. Note  *
* that this is subject to change at the discretion of IBM.     *
****************************************************************

Problem conclusion

  • This problem was fixed.
Affected platforms for reported release:  AIX, Linux, and
Windows.
Platforms fixed:  AIX, Linux, and Windows.

Temporary fix

  • 



Comments


    

  • 



APAR Information




    

  • APAR number
    IT37783
    • 

  • Reported component name
    TSM SERVER
    • 

  • Reported component ID
    5698ISMSV
    • 

  • Reported release
    81A
    • 

  • Status
    CLOSED  PER
    • 

  • PE
    NoPE
    • 

  • HIPER
    NoHIPER
    • 

  • Special Attention
    NoSpecatt / Xsystem
    • 

  • Submitted date
    2021-07-27
    • 

  • Closed date
    2021-07-29
    • 

  • Last modified date
    2021-07-29
    • 





    

  • APAR is sysrouted FROM one or more of the following:
    

    • 

  • APAR is sysrouted TO one or more of the following:
    

    • 



Fix information


    

  • Fixed component name
    TSM SERVER
    • 

  • Fixed component ID
    5698ISMSV
    • 



Applicable component levels


    

  • R81A  PSY
       UP
    • 








      
              
                            

              

              [{"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SSGSG7","label":"Tivoli Storage Manager"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"81A","Line of Business":{"code":"LOB26","label":"Storage"}}]
              

                          

          
 
        

      

    

      

        

          

            
Document Information


            

            


                        

            Modified date:
            

            28 April 2022
            

            
                      

        


        

        


      

    

  



    

  

  
    
            

          
Page Feedback