IBM Support

IC54419: ISC PASSWORDS PRINTED IN FFDC LOGS AS CLEAR TEXT

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • Due to WebSphere APARs PK10136 and PK04923, iscadmin and SSL IDs
    and passwords may be viewable in FFDC logs.
    Initial Impact: Medium
    TSM Versions Affected: All ISC/Admin Center users
    Additional Keywords: PWD iscadmin ISC AC passwd pass clear
                         security IC53576
    

Local fix

  • None. Apply the eFix.
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED: All users of IBM Tivoli Storage Manager      *
    *                 Administration Center versions 5.4 and 5.5   *
    ****************************************************************
    * PROBLEM DESCRIPTION: See ERROR DESCRIPTION                   *
    ****************************************************************
    * RECOMMENDATION: Perform the following steps which are        *
    *                 needed to install the ISC efix for this APAR *
    *                 to correct the problem.  See the steps for   *
    *                 either Windows or for Unix and Linux.        *
    *                                                              *
    *                 Windows:                                     *
    *                                                              *
    *                 Get the efix from the following FTP site:    *
    *                           ftp://service.boulder.ibm.com/-    *
    *                 storage/tivoli-storage-management/patches/-  *
    *                 admincenter/IC54419/WindowsUpdateISC.zip     *
    *                 0. Log in as administrator                   *
    *                 1. Download the efix and place the file      *
    *                 into a temporary directory (example:         *
    *                 c:\temp\)                                    *
    *                 2. Unzip the efix:                           *
    *                 from Windows Explorer, right-click the file  *
    *                 and select Extract. Use the wizard to        *
    *                 extract the files to the temp directory.     *
    *                 This will create a subdirectory called       *
    *                 WindowsUpdateISC.                            *
    *                 3. Open a command shell (from Start, click   *
    *                 on "run" and enter "command" in the prompt   *
    *                 to bring up the DOS command)                 *
    *                 4. Verify that a 32-bit Java Runtime         *
    *                 Environment 1.4.2 or higher is on the        *
    *                 system. Do not use a 64-bit Java Runtime     *
    *                 Environment.                                 *
    *                 In the shell, run the following command to   *
    *                 gather information about the java installed  *
    *                 on the system and in the PATH:               *
    *                 java -version                                *
    *                 5. Verify that the JAVA_HOME environment     *
    *                 variable is set to point to the root         *
    *                 directory for the 32-bit Java Runtime        *
    *                 Environment 1.4.2 or higher installation.    *
    *                 Ensure that the JAVA_HOME environment        *
    *                 variable does not point to the Java          *
    *                 Runtime Environment for the application      *
    *                 server that Integrated Solutions Console     *
    *                 (ISC) runtime uses (default is               *
    *                 C:\PROGRAM FILES\IBM\ISC601). In the shell,  *
    *                 run the following command to check the       *
    *                 environment variable:                        *
    *                    echo %JAVA_HOME%                          *
    *                 The JAVA_HOME var should be the root of the  *
    *                 java installed directory, ie. the parent of  *
    *                 the bin directory in that tree.              *
    *                 In the shell, run the following command to   *
    *                 set the JAVA_HOME environ variable. Also,    *
    *                 you must use progra~1 instead of             *
    *                 "Program Files" if your JRE is in that       *
    *                 directory tree:                              *
    *                  set JAVA_HOME=C:\progra~1\path\to\java-jre  *
    *                 6. Stop the ISC services by right-clicking   *
    *                 MyComputer, selecting Manage and then        *
    *                 Services and, stopping the following         *
    *                 two services:                                *
    *                 IBM WebSphere Application Server V6 -        *
    *                     ISC 6.0.1 Runtime Service                *
    *                 ISC 6.0.1 Help Service                       *
    *                 7. In the shell, run the following command   *
    *                 to change to the WindowsUpdateISC            *
    *                 subddirectory:                               *
    *                       CD C:\temp\WindowsUpdateISC            *
    *                 8. In the shell, issue the following         *
    *                 command:                                     *
    *                  updateISC.bat -installDIR "isc_root"        *
    *                  -install                                    *
    *                  -fixDIR "temp_fix_directory"                *
    *                  -fixList PR195881 PR195878                  *
    *                  -wasAdmin was_administrator -wasAdminPw     *
    *                  was_password -ISCAdmin isc_administrator    *
    *                  -ISCAdminPw isc_password                    *
    *                  -stopServers -norestart                     *
    *                 where the was_administrator/password is the  *
    *                 same as the isc_administrator/password       *
    *                 where "isc_root" default is                  *
    *                 "C:\PROGRAM FILES\IBM\ISC601"                *
    *                 where "temp_fix_directory" is the location   *
    *                 where you extracted the efix,                *
    *                 eg. C:\temp\WindowsUpdateISC                 *
    *                 8. Wait until the Update Installer           *
    *                 finishes, which may take up to half an hour. *
    *                 See the output to check that the             *
    *                 installation is successful.                  *
    *                 9. Re-start the ISC services using           *
    *                 My Computer -> Manage -> Services            *
    *                   IBM WebSphere Application Server V6        *
    *                     - ISC 6.0.1 Runtime Service              *
    *                   ISC 6.0.1 Help Service                     *
    *                 10. (Optional) Delete the temporary          *
    *                 directory where the efix was extracted       *
    *                                                              *
    *                 Unix and Linux:                              *
    *                                                              *
    *                 Download the following files according to    *
    *                 platform from this site:                     *
    *                   ftp://service.boulder.ibm.com/-            *
    *                   storage/tivoli-storage-management/-        *
    *                   patches/admincenter/IC54419                *
    *                         AIXISCUpdateInstaller.tar.Z          *
    *                         SolarisISCUpdateInstaller.tar.Z      *
    *                         LinuxISCUpdateInstaller.tar.Z        *
    *                         Linux390ISCUpdateInstaller.tar.Z     *
    *                         LinuxppcISCUpdateInstaller.tar.Z     *
    *                 For all Unix/Linux platforms, also download  *
    *                 the following file:                          *
    *                          PR195881_PR295878.tar               *
    *                 0. log in as root and open a command shell   *
    *                 1. Place the file into a temporary           *
    *                 directory                                    *
    *                 (example: /tmp/iscefix)                      *
    *                 2. In the command shell, uncompress and      *
    *                 untar the files into the iscefix dir         *
    *                 tar -xvf <-platform>ISCUpdateInstaller.tar.Z *
    *                 tar -xvf PR195881_PR295878.tar               *
    *                 3. Verify that a 32-bit Java Runtime         *
    *                 Environment 1.4.2 or higher is on the        *
    *                 system. Do not use a 64-bit Java Runtime     *
    *                 Environment. In the shell, run the           *
    *                 following commands to gather information     *
    *                 about the java installed on the system and   *
    *                 in the PATH:                                 *
    *                    which java                                *
    *                    java -version                             *
    *                 4. Verify that the JAVA_HOME environment     *
    *                 variable is set to point to the root         *
    *                 directory for the 32-bit Java Runtime        *
    *                 Environment 1.4.2 or higher installation.    *
    *                 Ensure that the JAVA_HOME environment        *
    *                 variable does not point to the Java          *
    *                 Runtime Environment for the application      *
    *                 server that Integrated Solutions Console     *
    *                 (ISC) runtime uses (default is               *
    *                 /opt/IBM/ISC601).                            *
    *                 In the shell, run the following commands to  *
    *                 check the environment variable:              *
    *                    env | grep JAVA_HOME                      *
    *                 The JAVA_HOME var should be the root of the  *
    *                 java installed directory, ie. the parent of  *
    *                 the bin directory in that tree. In the shell *
    *                 run the following command to set the         *
    *                 JAVA_HOME environ variable.                  *
    *                    export JAVA_HOME=/path/to/java            *
    *                 5. In tthe shell, change to the temp         *
    *                 directory where the efix was extracted and   *
    *                 run the following command:                   *
    *                    chmod -R 777 *                            *
    *                 6. In the shell, run the following command   *
    *                 to stop the ISC service:                     *
    *                    <isc_root>/PortalServer/bin/stopISC.sh    *
    *                      ISC_Portal <iscadminID> <iscadminPass>  *
    *                 where <isc_root> default is /opt/IBM/ISC601  *
    *                 7. In the shell, run the following command:  *
    *                    updateISC.sh -installDIR "isc_root"       *
    *                    -install -fixDIR "temp_fix_directory"     *
    *                    -fixList PR195881 PR195878 -wasAdmin      *
    *                    was_administrator -wasAdminPw             *
    *                    was_password -ISCAdmin isc_administrator  *
    *                    -ISCAdminPw isc_password                  *
    *                    -stopServers -norestart                   *
    *                 where the was_administrator/password is the  *
    *                 same as the isc_administrator/password       *
    *                 where "isc_root" default is                  *
    *                 "/opt/IBM/ISC601"                            *
    *                 where "temp_fix_directory" is the location   *
    *                 where you extracted the efix, eg             *
    *                 /tmp/iscefix                                 *
    *                 8. Wait until the Update Installer finishes, *
    *                 which may take up to half an hour. See the   *
    *                 output to check that the installation is     *
    *                 successful.                                  *
    *                 9. In the shell, run the following command   *
    *                 to start the ISC service:                    *
    *                    <isc_root>/PortalServer/bin/startISC.sh   *
    *                    ISC_Portal                                *
    *                 10. (Optional) Delete the temporary          *
    *                 directory where the efix was extracted       *
    ****************************************************************
    *
    

Problem conclusion

  • The problem has been fixed
    

Temporary fix

Comments

APAR Information

  • APAR number

    IC54419

  • Reported component name

    TSM SERVER

  • Reported component ID

    5698ISMSV

  • Reported release

    54A

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    YesHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2007-11-14

  • Closed date

    2007-12-13

  • Last modified date

    2008-03-10

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    TSM SERVER

  • Fixed component ID

    5698ISMSV

Applicable component levels

  • R54A PSY

       UP

  • R54L PSY

       UP

  • R54S PSY

       UP

  • R54W PSY

       UP

  • R55A PSY

       UP

  • R55L PSY

       UP

  • R55S PSY

       UP

  • R55W PSY

       UP

[{"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SSGSG7","label":"Tivoli Storage Manager"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"54A","Edition":"","Line of Business":{"code":"LOB26","label":"Storage"}}]

Document Information

Modified date:
10 March 2008