IBM Support

IC87274: (CD) USER ABLE TO CREATE NETMAP USING THE SAME NAME WHEN USING MIX CASE

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • Env: Linux
    Product: Secure Proxy v.3.2.00, Patch 4, Build 106
    
    We have identified a problem where we ended up with two node
    entries in  the same netmap where the nodes are the same except
    for case, ie.ppx008/PPX008.  What we found was that this second
    entry was created because the remote was a windows node and it
    was entered to match the server node name case.  The
    connections were using the security settings on the lower case
    entry for all connections.
    
    We would like to determine if the C:D and SSP systems truely
    normalizes all node names so that case doesn't matter when
    making connections and checking netmap entries.
    
    Based on the results of that answer, we would then expect that
    a bug/enhancement be entered to prohibit duplicate entries from
    being allowed in SSP.  On the same note, the search function
    would need to be updated to return any case that matches the
    letters of a search, today it is case sensitive as well.
    

Local fix

  • STRRTC - 347314
    RJ/RJ
    Circumvention: None
    

Problem summary

  • Using the SSP configuration GUI for the CD netmap, the
    administrator is able to add a duplicate node using the same
    name if they use mixed case.
    

Problem conclusion

  • Now use a case-insensitive search for duplicate node names
    within the CD netmap before saving a new nodename.
    

Temporary fix

Comments

APAR Information

  • APAR number

    IC87274

  • Reported component name

    STR SECURE PROX

  • Reported component ID

    5725D0300

  • Reported release

    320

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2012-10-16

  • Closed date

    2012-11-02

  • Last modified date

    2012-11-02

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    STR SECURE PROX

  • Fixed component ID

    5725D0300

Applicable component levels

  • R331 PSY

       UP

  • R340 PSY

       UP

  • R341 PSY

       UP

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SS6PNW","label":"IBM Sterling Secure Proxy"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"3.2","Edition":"","Line of Business":{"code":"LOB59","label":"Sustainability Software"}}]

Document Information

Modified date:
02 November 2012