IT05381: CONTENTS OF NS_CACHE ARE NOT EXPIRED WHEN VALUES ARE CHANGED.

APAR status

• Closed as program error.

Error description

• The IDS documentations states:
  "When you change the value for a particular
  cache with the onmode -wf or onmode -wm command, the server
  immediately
  expires all existing entries in that cache."
  
  However changing the value for NS_CACHE does not do this for
  12.10.FC4W1WE.
  After changing the user cache from 900 to 0 and back to 900 the
  old password is still in the
  cache. This can be reproduced with the following steps:
  Setting for NS_CACHE in oncifg is
  NS_CACHE=host=900,service=900,user=900,group=900
  
  1. useradd testpwd
  2. echo "testx" | passwd --stdin testpwd
  3. log in using the new account with password 'testx' (dbaccess)
  4. onmode -wm NS_CACHE=host=900,service=900,user=0,group=900
  
  5. echo "newpwd" | passwd --stdin testpwd
  6. log in using the new account with password 'newpwd'
  (dbaccess)   (good)
  7. onmode -wm NS_CACHE=host=900,service=900,user=900,group=900
  11/04/14 11:41:56  Value of NS_CACHE has been changed to
  host=900,service=900,user=900,group=900.
    7.1  --> login with "newpwd" :  951: Incorrect password or
  user
  
    7.2  --> login with "testx" : successful
  11/04/14 11:42:34  Password Validation for user [testpwd]
  failed!
  11/04/14 11:42:34  Check for password aging/account lock-out.
  11/04/14 11:42:34  listener-thread: err = -952: oserr = 0:
  errstr = testpwd@greenwood: User (testpwd@greenwood)'s password
  is not correct for the database server.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * users with informix 12.10                                    *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * See Error Description                                        *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Update to IDS-12.10.xC5                                      *
  ****************************************************************
  

Problem conclusion

• Problem Fixed In IDS-12.10.xC5
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  INFORMIX SERVER

• Fixed component ID

  5725A3900

Applicable component levels

• RC10 PSY

     UP