IBM Support

IT11349: TIVOLI STORAGE MANAGER PASSWORD IS DISPLAYED IN PLAIN TEXT WHEN USING THE CHANGETSMPASSWORD COMMAND WHILE TRACING ISENABLED

Subscribe

You can track all active APARs for this component.

APAR status

  • Closed as program error.

Error description

  • When using one of the following applications:
    - Tivoli Storage FlashCopy Manager on Windows
     - Tivoli Storage Manager for Databases: Data Protection for
       Microsoft SQL Server
    - Tivoli Storage Manager for Mail: Data Protection for Microsoft
       Exchange Server
    the Tivoli Storage Manager (TSM) password is displayed in plain
    text via application trace output when the "Change TSM Password"
    (changetsmpassword) command is used while application tracing is
    enabled.
    

Local fix

  • Do no enable application tracing when changing the Tivoli
    Storage Manager (TSM) password.
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED:                                              *
    * Users of:                                                    *
    * Tivoli Storage Manager on Windows 2.1, 2.2, 3.1, 4.1         *
    * Tivoli Storage Manager for Databases: Data Protection for    *
    * Microsoft SQL Server 5.5, 6.3, 6.4, 7.1                      *
    * Tivoli Storage Manager for Mail: Data Protection for         *
    * Microsoft Exchange Server 5.5, 6.1, 6.3, 6.4, and 7.1        *
    ****************************************************************
    * PROBLEM DESCRIPTION:                                         *
    * See ERROR DESCRIPTION                                        *
    * For additional details, refer to the security bulletin       *
    * published here:                                              *
    * http://www.ibm.com/support/docview.wss?uid=swg21969514       *
    ****************************************************************
    * RECOMMENDATION:                                              *
    * Apply fixing level when available. This fix is currently     *
    * projected to be available in:                                *
    *                                                              *
    * Tivoli Storage Manager on Windows 4.1.4                      *
    * Tivoli Storage Manager for Databases: Data Protection for    *
    * Microsoft SQL Server 7.1.4                                   *
    * Tivoli Storage Manager for Mail: Data Protection for         *
    * Microsoft Exchange Server 7.1.4                              *
    *                                                              *
    * Note: This information is subject to change at the           *
    * discretion of IBM.                                           *
    ****************************************************************
    

Problem conclusion

  • Tivoli Storage  FlashCopy Manager for Microsoft SQL Server,
    Tivoli Storage Manager for Databases: Data Protection for
    Microsoft SQL Server, Tivoli Storage  FlashCopy Manager for
    Microsoft Exchange Server, Tivoli Storage Manager for Mail: Data
    Protection for Microsoft Exchange Server and Tivoli Storage
    FlashCopy Manager for File System have been updated to avoid TSM
    node password disclosure via diagnostic traces for tsm password
    update operation.
    

Temporary fix

  • Tivoli Storage Manager on Windows 3.1.1.6, 3.2.1.8
    Tivoli Storage Manager for Databases: Data Protection for
    Microsoft SQL Server 5.5.6.2, 6.3.1.6, 6.4.1.8
    Tivoli Storage Manager for Mail: Data Protection for Microsoft
    Exchange Server 6.3.1.6, 6.4.1.8
    

Comments

APAR Information

  • APAR number

    IT11349

  • Reported component name

    TDP EXCHANGE WI

  • Reported component ID

    5698DPXAP

  • Reported release

    71W

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2015-09-21

  • Closed date

    2015-12-02

  • Last modified date

    2016-08-26

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Modules/Macros

  • FCM      tdpsql   tdpexcc
    

Fix information

  • Fixed component name

    TDP EXCHANGE WI

  • Fixed component ID

    5698DPXAP

Applicable component levels

  • R55W PSY

       UP

  • R61W PSY

       UP

  • R63W PSY

       UP

  • R64W PSY

       UP

  • R71W PSY

       UP



Document information

More support for: Tivoli Storage Manager for Mail

Software version: 71W

Reference #: IT11349

Modified date: 26 August 2016