IT48205: ANR4397E/ANR0454E STORAGE AGENT COMMUNICATION PROBLEM WHEN PASSWORDS CONTAIN SPECIAL CHARACTERS

APAR status

• Closed as documentation error.

Error description

• The IBM Storage Protect Storage agent devconfig file is created
  by running the following type of command:
  ./dsmsta setstorageserver myname=sta_node mypassword=xxxxx
  myhla=1.2.3.4 hla=5.6.7.8 lla=1500 servername=server1
  serverpa=yyyyy ssl=yes
  
  
  This creates the devconfig file with encrypted passwords.
  If the passwords used, "xxxxx" or "yyyyy", contain special
  characters (for example x@$xx or yy@$$), these can be
  incorrectly interpreted by the Unix shell.
  
  Incorrect password interpretation will trigger the following
  messages when the server tries to communicate with the Storage
  agent:
   ANR2017I Administrator A issued command: PING SERVER STA_NODE
  
  
   ANR8592I Session 75 connection is using protocol TLSV13, cipher
  specification TLS_AES_256_GCM_SHA384, certificate TSM
  Self-Signed Certificate.
  
   ANR4397E (Session: 72, Origin: STA_NODE)  Certificate delivery
  failed due to incorrect password definition for this server on
  server SERVER1
  
   ANR0454E Session rejected by server STA_NODE, reason: 201
  Communication Failure.
  
   ANR4546W A ping request to server 'STA_NODE' was not able to
  establish a connection by using server credentials.
  
  
  IBM Storage Protect Versions Affected:  All IBM Storage
  Protect Servers 8.1.x on all supported Unix platforms
  Additional Keywords: TS018777377 Stagent
  

Local fix

• Use the backslash {\} characters before each special characters
  of the passwords to prevent incorrect shell interpretation.
  For example, instead of running this:
  
  ./dsmsta setstorageserver myname=sta_node mypassword=x@$xx
  myhla=1.2.3.4 hla=5.6.7.8 lla=1500 servername=server1
  serverpa=yy@$$ ssl=yes
  Run this:
  ./dsmsta setstorageserver myname=sta_node mypassword=x@\$xx
  myhla=1.2.3.4 hla=5.6.7.8 lla=1500 servername=server1
  serverpa=yy@\$\$ ssl=yes
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * All IBM Storage Protect server users                         *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * See error description.                                       *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Apply fixing level when available. This problem is currently *
  * projected to be fixed in levels 8.2.1. Note that this is     *
  * subject to change at the discretion of IBM.                  *
  ****************************************************************
  

Problem conclusion

• This problem was fixed.
  Platforms fixed:  AIX, Linux, and Windows.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels