IV81149: TEBS: ITM AIX SUPPORT FOR SHA256 CRYPTO FUNCTION

IBM Tivoli Monitoring 6.3.0 Fix Pack 7 (6.3.0-TIV-ITM-FP0007)

APAR status

• Closed as program error.

Error description

• Environment:
  This defect is specific to AIX platforms.
  
  Problem Description:
    The customer's security policy requires that the ITM TEMS /
  AIX  password encryption algorithm be changable from 'crypt' to
  'sha256' for user validation at the TEMS.
  
  Detailed Recreation Procedure:
    This can be recreated by configuring a Tivoli Monitoring
  server on AIX (where SHA256 is the default crypto function)
  attempting user validation at the TEMS. This will fail.
  
  Related Files and Output:
    The signature of this failure can be seen authentication
  failures in the RAS1 log.
  

Local fix

Problem summary

• The customer's security policy requires that the Tivoli
  Monitoring server / AIX  password encryption algorithm be
  changeable from 'crypt' to 'sha256' for user validation at the
  Tivoli Monitoring server.
  

Problem conclusion

• The Tivoli Monitoring server user validation code has been
  changed to use a new AIX Operating System API (available with
  5.3 TL7 and later versions) which provides user authentication
  services independent of the configured password encryption
  algorithm.  Documentation on this new AIX password
  https://www-304.ibm.com/support/knowledgecenter/ssw_aix_61/com.i
  bm.aix.security/long_passwords.htm?lang=en
  
  
  The fix for this APAR is contained in the following maintenance
  packages:
  
     | fix pack | 6.3.0-TIV-ITM-FP0007
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  TEMS

• Fixed component ID

  5724C04MS

Applicable component levels