IC87274: (CD) USER ABLE TO CREATE NETMAP USING THE SAME NAME WHEN USING MIX CASE

Subscribe to this APAR

By subscribing, you receive periodic emails alerting you to the status of the APAR, along with a link to the fix after it becomes available. You can track this item individually or track all items by product.

Notify me when this APAR changes.

Notify me when an APAR for this component changes.

APAR status

  • Closed as program error.

Error description

  • Env: Linux
    Product: Secure Proxy v.3.2.00, Patch 4, Build 106
    
    We have identified a problem where we ended up with two node
    entries in  the same netmap where the nodes are the same except
    for case, ie.ppx008/PPX008.  What we found was that this second
    entry was created because the remote was a windows node and it
    was entered to match the server node name case.  The
    connections were using the security settings on the lower case
    entry for all connections.
    
    We would like to determine if the C:D and SSP systems truely
    normalizes all node names so that case doesn't matter when
    making connections and checking netmap entries.
    
    Based on the results of that answer, we would then expect that
    a bug/enhancement be entered to prohibit duplicate entries from
    being allowed in SSP.  On the same note, the search function
    would need to be updated to return any case that matches the
    letters of a search, today it is case sensitive as well.
    

Local fix

  • STRRTC - 347314
    RJ/RJ
    Circumvention: None
    

Problem summary

  • Using the SSP configuration GUI for the CD netmap, the
    administrator is able to add a duplicate node using the same
    name if they use mixed case.
    

Problem conclusion

  • Now use a case-insensitive search for duplicate node names
    within the CD netmap before saving a new nodename.
    

Temporary fix

Comments

APAR Information

  • APAR number

    IC87274

  • Reported component name

    STR SECURE PROX

  • Reported component ID

    5725D0300

  • Reported release

    320

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2012-10-16

  • Closed date

    2012-11-02

  • Last modified date

    2012-11-02

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    STR SECURE PROX

  • Fixed component ID

    5725D0300

Applicable component levels

  • R331 PSY

       UP

  • R340 PSY

       UP

  • R341 PSY

       UP



Rate this page:

(0 users)Average rating

Add comments

Document information


More support for:

Sterling Secure Proxy

Software version:

3.2

Reference #:

IC87274

Modified date:

2012-11-02

Translate my page

Machine Translation

Content navigation