IV41569: BAD PERMISSION ON *_UD_*_RUNTIME.PROPERTIES CAUSES HIGH CPU

IBM Tivoli Monitoring 6.2.3 Fix Pack 5 (6.2.3-TIV-ITM-FP0005)

APAR status

• Closed as program error.

Error description

• When the user running the DB2 monitoring agent instance <inst>
  does not have write permission to the file
  $CANDLEHOME/config/*_ud_<inst>_runtime.properties, the cpu usage
  of the db2sysc process randomly goes into high cpu usage for the
  DB2 V10.1 FP2 instance.
  
  RECREATE INSTRUCTIONS:
  
  1) Install multiple versions of the DB2 product.
  2) Upgrade one of those instance to DB2 V10.1 FP2
  3) Install the ITM 6.22 FP2 OS agent.
  4) Install the ITCAM for APPs V7.1 DB2 monitoring agent.
  5) Create a group (itmgroup) and add all of the IDs that will be
  used to
     install, configure, start and stop the agents and agent
  instances in
     this installation.
  6) Configure the installed agents and desired agent instances.
  7) Run "secureMain -g itmgroup lock"
  8) Start each agent and/or agent instance using the desired ID.
  9) [ERROR] The cpu usage of the db2sysc process may randomly go
  into
     high cpu usage for the DB2 V10.1 FP2 instance.
  

Local fix

• Manually change the permission on
  $CANDLEHOME/config/*_ud_<inst>_runtime.properties from 644 to
  664.
  

Problem summary

• Insufficient file permissions on DB2 agent files may cause high
  CPU on AIX. The affected file is one that is generated at
  runtime in the 7.1.0 release of the DB2 agent,
  $CANDLEHOME/config/*_ud_<inst>_runtime.properties. This file
  will only be generated for DB2 V10 or higher servers with at
  least one database in the monitored database instance. This is
  typically seen in a non-root agent installation with
  insufficient group-write privileges on the aforementioned file.
  

Problem conclusion

• The secureMain command has been updated to ensure the new
  runtime files have 664 permissions when the lock option is
  specified.
  
  The fix for this APAR is contained in the following maintenance
  packages:
  | fix pack | 6.2.3-TIV-ITM-FP0005
  

Temporary fix

• Manually change the permissions on
  $CANDLEHOME/config/*_ud__runtime.properties to 664.
  

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  OMEG DIST INSTA

• Fixed component ID

  5608A41CI

Applicable component levels

• R623 PSY

     UP