IC91022: WITH GSKIT 8.0.15.6 DRDA CONNECTION MAY FAIL TO AUTHENTICATE OR CAUSE AF

Subscribe

You can track all active APARs for this component.

APAR status

  • Closed as change to accomodate OEM Vendor's code.

Error description

  • After GSKit  was updated from 8.0.13.3 to 8.0.15.6 the DRDA
    connection using ODBC fails to authenticate:
    
    SQLSTATE: 08001
    native error: -30082
    diagnostics: [IBM][CLI Driver] SQL30082N  Security processing
    failed with reason "24" ("USERNAME AND/OR PASSWORD INVALID").
    SQLSTATE=08001
    
    even though correct and unexpired user credentials were used.
    
    An attempt to connect through DRDA might crash Informix.
    Note the onlinelog points to GSKit version 8.0.15.6:
    
    11:33:23  IBM Global Security Kit (GSKit) version 8.0.15.6.
    11:33:24  Assert Failed: No Exception Handler
    .....
    
    Here are some stacks which might be observed:
    
    ifx_ICC_BN_num_bytes
    crypto_dispatch
    crypto_thread
    startup
    
    or
    
    C98E_BN_copy
    C98E_BN_MONT_CTX_set_locked
    C98E_DH_OpenSSL
    ICC_DH_generate_key
    crypto_dispatch
    crypto_thread
    startup
    
    or
    
    __1cQsqljsParseEncKey6FpnbASQdDLEX_SECURITY_INTERFACE_T__i_
    __1cQsqljsParseAccsec6FpnNsqljsDrdaAsCb_pnOdb2UCinterface_pnNsql
    jDDMObject__i_
    __1cQsqljs_ddm_accsec6FpnOdb2UCinterface_pnNsqljDDMObject__i_
    __1cRsqljsParseConnect6FpnNsqljsDrdaAsCb_pnNsqljDDMObject_pnOdb2
    UCinterface__i_
    sqljsParse
    do_drdamain
    drdamain
    spawn_thread
    startup
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED:                                              *
    * Users using encrypted communications with IBM Informix       *
    * 11.70.xC7 and earlier using versions of GSKit 8.0.15.6 and   *
    * newer.                                                       *
    ****************************************************************
    * PROBLEM DESCRIPTION:                                         *
    * See Error Description                                        *
    ****************************************************************
    * RECOMMENDATION:                                              *
    * Upgrade to IBM Informix 11.70.xC8 or later.                  *
    ****************************************************************
    

Problem conclusion

  • GSKit made some changes to the interface that caused failures in
    IBM Informix clients using encrypted communications with the
    server.
    

Temporary fix

Comments

APAR Information

  • APAR number

    IC91022

  • Reported component name

    INFORMIX SERVER

  • Reported component ID

    5725A3900

  • Reported release

    B70

  • Status

    CLOSED OEM

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2013-03-21

  • Closed date

    2014-05-06

  • Last modified date

    2014-05-06

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels

  • RB70 PSN

       UP

  • RB70 PSY

       UP



Rate this page:

(0 users)Average rating

Document information


More support for:

Informix Servers

Software version:

B70

Reference #:

IC91022

Modified date:

2014-05-06

Translate my page

Machine Translation

Content navigation