IJ05990: HISTORY IN UNIX CONTAINS UNENCRYPTED PASSWORDS

7.1.0-TIV-NCI-ZLINUX-FP0014
7.1.0-TIV-NCI-WINDOWS-FP0014
7.1.0-TIV-NCI-SOLARIS-FP0014
7.1.0-TIV-NCI-AIX-FP0014
7.1.0-TIV-NCI-LINUX-FP0014
7.1.0.13-TIV-NCI-IF0006-Windows
7.1.0.13-TIV-NCI-IF0006-Solaris
7.1.0.13-TIV-NCI-IF0006-Linux
7.1.0.13-TIV-NCI-IF0006-AIX
IBM Tivoli Netcool/Impact V7.1.0 Interim Fix 6 (7.1.0.13-TIV-NCI-IF0006)
IBM Tivoli Netcool/Impact V7.1.0 Fix Pack 14 (7.1.0-TIV-NCI-FP0014)

APAR status

• Closed as program error.

Error description

• In Impact 7.1 the passwords used on the commands to
  manipulate users and roles is stored in the bsh history with its
  unencrypted password
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * All Impact Users                                             *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * The command-line tools for Netcool/Impact require passwords  *
  * to be entered as command line arguments. No alternative      *
  * input method is offered.                                     *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  Since the command-line tools only accept passwords as
  command-line arguments, you must manually clear the terminal
  history if you want the password removed from the terminal
  history.
  

Problem conclusion

• The following command line tools have been updated to support
  password prompts as an alternative to entering passwords on the
  command line.
  
  install/security/confAuth4LDAP
  install/security/confAuth4OMNIbus
  install/security/configImpactSSL
  install/security/configImpactSSO
  install/security/configUsersGroups
  bin/nci_add_service
  bin/nci_policy
  bin/nci_sendevent
  
  If the password argument is excluded from the command line call,
  then the tool will prompt you to enter in the password value.
  
  Note: The bin/nci_trigger tool does not support a password
  prompt as it already includes support for encrypted passwords.
  
  The fix for this APAR is contained in the following maintenance
  packages:
  |Fix Pack | 7.1.0-TIV-NCI-FP0014
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Modules/Macros

• UNKNOWN
  

Fix information

• Fixed component name

  NETCOOL/IMPACT

• Fixed component ID

  5724O59IS

Applicable component levels

• R710 PSY

     UP