IZ51580: SSM 4.0 FP7 crash on Windows 2003 x64 as soon as sysres is loade d

IBM Tivoli 4.0.0-TIV-SSM-FP0010
IBM Tivoli 4.0.0-TIV-SSM-FP0011
IBM Netcool System Service Monitor SSM 4.0 Fix Pack 12 README 4.0.0-TIV-SSM-FP0012
IBM Netcool System Service Monitor SSM 4.0 Fix Pack 13 README 4.0.0-TIV-SSM-FP0013
IBM Netcool System Service Monitor SSM 4.0 Fix Pack 14 README 4.0.0-TIV-SSM-FP0014
IBM Netcool System Service Monitor SSM 4.0 Interim Fix 1 README 4.0.0.14-TIV-SSM-IF0001
IBM Netcool System Service Monitor SSM 4.0 Interim Fix 2 README 4.0.0.14-TIV-SSM-IF0002
IBM Netcool System Service Monitor SSM 4.0 Interim Fix 3 README 4.0.0.14-TIV-SSM-IF0003
IBM Netcool System Service Monitor SSM 4.0 Interim Fix 4 README 4.0.0.14-TIV-SSM-IF0004
IBM Netcool System Service Monitor SSM 4.0 Interim Fix 5 README 4.0.0.14-TIV-SSM-IF0005
IBM Netcool System Service Monitor SSM 4.0 Interim Fix 6 README 4.0.0.14-TIV-SSM-IF0006
IBM Netcool System Service Monitor SSM 4.0 Interim Fix 7 README 4.0.0.14-TIV-SSM-IF0007
IBM Netcool System Service Monitor SSM 4.0 Interim Fix 8 README 4.0.0.14-TIV-SSM-IF0008
IBM Netcool System Service Monitor SSM 4.0 Interim Fix 1 README 4.0.0.15-TIV-SSM-IF0001

APAR status

• Closed as program error.

Error description

• On Windows Server 2003 Enterprise x64 Edition SP1, the SSM
  wouldcrash as soon as sysres was loaded. This does not happen on
  mostsystems of exactly the same operating system, but is
     reproducible on some. This only occurs for Fix Pack 7 (
    4.0.0-TIV-SSM-FP0007 ).
  

Local fix

• Uninstall Fix Pack 7 and install Fix Pack 6 instead or patch OS
  to SP2 or greater.
  

Problem summary

• ****************************************************************
  USERS AFFECTED:
  All users of the SSM running Fix Pack 7 who load the Sysres
  subagent on windows 2003 server x64 SP1.
  ****************************************************************
  PROBLEM DESCRIPTION:
  After installing Fix Pack 7 onto a Windows Server 2003 x64 SP1
  machine the sysres subagent would crash on loading. This was
  happening  in a system call to ntQueryObject.
  ****************************************************************
  RECOMMENDATION:
  Either revert to Fix pack 6, apply Fix pack 8 or greater or
  patch the Operating system to SP2 or greater.
  ****************************************************************
  

Problem conclusion

• Changed the SSM to check the version of ntdll and not call the
  offending system call if a problematic version of ntdll is on
  the system. This will cause the srSystemOpenFileCount object to
  be 0. Updating the windows installation to SP2 or greater will
  resolve this problem.
  
  The fix for this APAR is contained in the following maintenance
  packages:
     | fix pack | 4.0.0-TIV-SSM-FP0008
  
  
   | MDVREGR 4.0.0-TIV-SSM-FP0007 |
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  NETCOOL SYS SVC

• Fixed component ID

  5724P4300

Applicable component levels

• R400 PSY

     UP