IT46183: LOG UPLOAD FAILS FOR STORAGE DEVICES WHICH ARE AUTHENTICATED VIA SSH

APAR status

• Closed as program error.

Error description

• Log Package Upload fails for storage system which has
  authentication method as SSH and added via data collector
  
  In the log file below error was found:
  
  [EP-SubJob: 2debecb0-8d92-11eb-90b4-61803de959f9]
  [SVCNAPILogCollector.run()] [ERROR] Error running
  SVCNAPILogCollector
  com.ibm.srm.dc.common.exception.NAPIConnectionException: rc = 9,
  msg = For IP XX.XX.XX.XX unknown error encountered.
  
  	at com.ibm.srm.dc.common.connect.TPCSecureSession.openSession
  (TPCSecureSession.java:413)
  	at com.ibm.srm.dc.common.connect.TPCSecureSession.openSession(
  TPCSecureSession.java:174)
  	at com.ibm.srm.dc.common.api.log.napi.SVCNAPILogCollector.exec
  uteSshCommand(SVCNAPILogCollector.java:571)
  	at com.ibm.srm.dc.common.api.log.napi.SVCNAPILogCollector.getL
  ogs(SVCNAPILogCollector.java:455)
  	at com.ibm.srm.dc.common.api.log.napi.SVCNAPILogCollector.run(
  SVCNAPILogCollector.java:329)
  	at com.ibm.srm.dc.common.api.probe.AbstractProbeCollector.coll
  ectAndProcessData(AbstractProbeCollector.java:117)
  	at com.ibm.srm.dc.runtime.ep.UploadSystemLogsHandler.handle(Up
  loadSystemLogsHandler.java:54)
  	at com.ibm.srm.dc.runtime.ep.ExternalProcessLauncherProbe$SubJ
  obThread.run(ExternalProcessLauncherProbe.java:175)
  Caused by: java.io.IOException: Error attempting to decode DER
  formatted key: java.lang.IllegalAccessException: class
  com.ibm.net.ssh.OpensshPrivateKeyReader cannot access class
  sun.security.util.DerInputStream (in module java.base) because
  module java.base does not export sun.security.util to unnamed
  module @deba5792
  	at com.ibm.net.ssh.OpensshPrivateKeyReader.derDecode(OpensshPr
  ivateKeyReader.java:462)
  	at com.ibm.net.ssh.OpensshPrivateKeyReader.load(OpensshPrivate
  KeyReader.java:335)
  	at com.ibm.net.ssh.OpensshPrivateKeyReader.<init>(OpensshPriva
  teKeyReader.java:183)
  	at com.ibm.net.ssh.PrivateKeyFile.load(PrivateKeyFile.java:126)
  	at
  com.ibm.net.ssh.PrivateKeyFile.<init>(PrivateKeyFile.java:89)
  	at com.ibm.srm.dc.common.connect.Pem.<init>(Pem.java:60)
  	at com.ibm.srm.dc.common.connect.PrivateKeyFileAdapter.<init>(
  PrivateKeyFileAdapter.java:32)
  	at com.ibm.srm.dc.common.connect.TPCSecureSession.openSession(
  TPCSecureSession.java:247)
  

Local fix

• This is a workaround until the fix is deployed:
  
  1. Stop the data collector that is monitoring the storage
  devices that are having issues.
  
  2. On the data collector machine, navigate into the 'conf'
  sub-directory where the data collector is installed.
  
  3. Edit the  setup.properties  file and add these two lines to
  the end of that file:
  
  epJvmArgs=--add-exports=java.base/sun.security.util=ALL-UNNAMED
  dcJvmArgs=--add-exports=java.base/sun.security.util=ALL-UNNAMED
  
  4. Save and exit the setup.properties file.
  
  5. Restart the data collector.
  
  --------------------
  
  Or, another workaround is to change authentication method to
  username/password.
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * IBM Storage Insights users uploading support data for        *
  * storage device which is authenticated via SSH                *
  *                                                              *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * In Storage Insights, when attempting to upload a storage     *
  * system log package, the upload fails for those storage       *
  * systems which are monitored via a Data Collector and         *
  * configured for SSH authentication.                           *
  *                                                              *
  *                                                              *
  *                                                              *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  

Problem conclusion

• The fix for this APAR is targeted for the following release:
  
  IBM Storage Insights 2Q24   [ 54X-IBM-SI ]
  ( release target 2Q 2024 / June )
  
  The target dates for future releases do not represent a formal
  commitment by IBM. The dates are subject to change without
  notice.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  STORAGE INSIGHT

• Fixed component ID

  5608TPCSI

Applicable component levels