IBM Support

IT24634: SERVER MAY UNEXPECTEDLY HALT WHEN USING SECURITY PLUGIN LIBRARIES THAT DOES FORK()/VFORK() CALL TO IBM DB2 DATABASE.

Subscribe to this APAR

By subscribing, you receive periodic emails alerting you to the status of the APAR, along with a link to the fix after it becomes available. You can track this item individually or track all items by product.

Notify me when this APAR changes.

Notify me when an APAR for this component changes.

APAR status

  • Closed as program error.

Error description

  • Problem Description:
    Using an external tool that connects to the IBM Spectrum Protect
    server DB2 database and that uses security plugin-libraries
    doing fork()/vfork() call to the database, may cause
    unexpectedly server hang.
    
    
    
    
    Customer/L2 Diagnostics:
    The problem is due to  DB2 not supporting this kind of security
    plugin (fork() or vfork().)
    This is documented here :
    
    https://www.ibm.com/support/knowledgecenter/en/SSEPGG_11.1.0/com
    .ibm.db2.luw.admin.sec.doc/doc/r0012006.html
    
    ====
    Fork
    Plug-in libraries should not fork because file descriptors and
    sockets will be duplicated in the child process, and this can
    cause hangs or incorrect behavior. In particular, it can cause
    false file lock conflicts if child was forked when we had an
    open file descriptor on that file. There is also the possibility
    that the fork will inherit many other resources like semaphores.
    ====
    
    Enable a Spectrum Protect server plugin trace in order to
    diagnostic problem.
    The last entry in the server plugin trace will be something like
    
    For UNIX
    Mon Feb 19 03:45:22 2018 6554520 ValidatePasswordWithOS[1946]
    calling fork()
    
    For Linux
    Mon Feb 19 03:45:22 2018 6554520 ValidatePasswordWithOS[1946]
    calling vfork()
    
    
    
    
    IBM Spectrum Protect versions affected:
    Server 7..x and 8.x on Linux and UNIX supported platforms
    
    
    
    Initial Impact:
    High
    
    
    
    Additional Keywords:
    TSM "Spectrum Protect" "ValidatePasswordWithOS" calling vfork
    fork DB2 plugin tool server hang halt
    

Local fix

  • Option #1 - Do not connect to the server's database. For example
                a 3rd party application/tool that connects to the
                server's database.
    
    
    Option #2 - Connect to the server database locally on the same
                machine as the server running as the DB2 instance
                owner user using IPC. For example
    
                login as tsminst1
                "db2 connect to TSMDB1"
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED:                                              *
    * All IBM Spectrum Protect server users.                       *
    ****************************************************************
    * PROBLEM DESCRIPTION:                                         *
    * See error description.                                       *
    ****************************************************************
    * RECOMMENDATION:                                              *
    * Apply fixing level when available. This problem is currently *
    * projected to be fixed in level 8.1.6. Note that this is      *
    * subject to change at the discretion of IBM.                  *
    ****************************************************************
    

Problem conclusion

  • This problem was fixed.
    Affected platforms for reported release:  AIX and Linux.
    Platforms fixed:  AIX and Linux.
    

Temporary fix

Comments

APAR Information

  • APAR number

    IT24634

  • Reported component name

    TSM SERVER

  • Reported component ID

    5698ISMSV

  • Reported release

    81A

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2018-04-06

  • Closed date

    2018-05-24

  • Last modified date

    2018-05-24

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    TSM SERVER

  • Fixed component ID

    5698ISMSV

Applicable component levels



Document information

More support for: Tivoli Storage Manager

Software version: 81A

Reference #: IT24634

Modified date: 24 May 2018


Translate this page: