IT26258: THE UPDATE SSHREMOTEPROFILE API FAILS WHEN UPDATING PROFILE WITH PUBLIC_KEY AUTHENTICATION

APAR status

• Closed as program error.

Error description

• The Update SSHRemoteProfile API fails when updating profile is
  configured with PUBLIC_KEY authentication.
  
  
  
  Environment: IBM Sterling B2B Integrator 5263_6.
  
  1. An SSH Profile is created through the dashboard UI. Make sure
  it uses PUBLIC_KEY Authentication type.
  2) Next from API UI, update SSH profile in #1.
  
  Here is sample request JSON.
  {
  "characterEncoding": null,
  "compression": "NONE",
  "connectionRetryCount": null,
  "directory": null,
  "knownHostKeys": null,
  "localPortRange": null,
  "preferredAuthenticationType": "PUBLIC_KEY",
  "preferredCipher": "AES128-CTR",
  "preferredMacAlgorithm": "HMAC-SHA1",
  "profileName": "UIprofile",
  "remoteHost": "2.2.2.2",
  "remotePort": 2222,
  "remoteUser": "remote",
  "responseTimeOut": null,
  "retryDelay": null,
  "sshPassword": null,
  "userIdentityKey": "gregsftpuser_18400"
  }
  
  Response with error -
  { "errorCode": 400, "errorDescription": "API000313: SSH
  Password is required when Preferred Authentication Type is
  Password. Please try again" }
  
  ---
  In a different test when there is
  security.SSHCipherList=aes128-ctr,aes192-ctr,aes256-ctr in
  custer_overrides.properties, Update/Create SSH Remote Profile
  API does not trim cipher list but shows all ciphers. Choosing
  any cipher other one in above list in Update SSH Profile API
  throws 400 error as below.
  
  { "errorCode": 400, "errorDescription": "CPI000303: Cipher not
  supported. Please provide the NIST compliant Cipher" }
  

Local fix

• STRRTC 573857
  
  BR/BR
  
  Circumvention :None
  

Problem summary

• Users Affected:
  All
  
  Problem Description:
  The Update SSHRemoteProfile API fails when updating the profile
  with PUBLIC_KEY authentication.
  
  Platforms Affected:
  All
  

Problem conclusion

• Resolution Summary:
  
  A code fix is provided.
  
  Delivered In:
  5020603_7
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  STR B2B INTEGRA

• Fixed component ID

  5725D0600

Applicable component levels