IT04249: DP DOMINO PLUGIN CAN STILL BE USED BY THE BA JAVA GUI AND WEB GUI EVEN AFTER AUTHENTICATION FAILS WITH THE GUI

APAR status

• Closed as program error.

Error description

• When using the Tivoli Storage Manager for Mail: Data Protection
  for Domino plugin to the Tivoli Storage Manager Client's Java
  GUI or Web GUI interfaces, use of those interfaces is possible
  even after a failed authentication attempt.
  Versions Affected: 5.4, 5.5, 6.1, 6.3, and 7.1
  

Local fix

• Configure web access, and access to the local machine, in such a
  manner that only trusted users are allowed to access the TSM
  Backup-Archive Client Java GUI and Web GUI interfaces.
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * All Tivoli Storage Manager for Mail: Data Protection for     *
  * Domino 5.4, 5.5, 6.3, 6.4, and 7.1                           *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * See error description and security bulletin tech note        *
  * located here:                                                *
  * http://www.ibm.com/support/docview.wss?uid=swg21695183       *
  ****************************************************************
  

Problem conclusion

• The Tivoli Storage Manager Client software has been updated to
  prohibit usage of the Java GUI or Web GUI interface to Data
  Protection for Domino after an authetication failure.
  

Temporary fix

• ****************************************************************
  * The complete list of interim fixes, by platform, is detailed *
  * in the security bulletin tech note located here:             *
  * http://www.ibm.com/support/docview.wss?uid=swg21695183       *
  ****************************************************************
  

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Modules/Macros

• PLUGIN
  

Fix information

• Fixed component name

  TDP FOR DOMINO

• Fixed component ID

  5698DPDAP

Applicable component levels

• R71W PSY

     UP

• R71A PSY

     UP

• R71L PSY

     UP

• R63A PSY

     UP

• R63L PSY

     UP

• R63D PSY

     UP

• R63W PSY

     UP