IBM Support

IT26568: MULTIPLE CLIENT SESSIONS CAN FAIL WITH GSKKM_IMPORTKEYS GSKKM_ERR_DATABASE_INVALID_FILE_TYPE

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • Sporadic TLS errors can occur when multiple client sessions are
    running on the same system.
    
    The dsmerror.log will show the following:
    
    11/30/2017 08:55:24 ANS1579E GSKit function GSKKM_ImportKeys
    failed with 17: GSKKM_ERR_DATABASE_INVALID_FILE_TYPE
    11/30/2017 08:55:28 ANS1592E Failed to initialize SSL protocol.
    11/30/2017 08:55:28 ANS8023E Unable to establish session with
    server.
    
    The client trace will show the following:
    
    11/30/2017 08:55:24.903 [020286] [706877248] : GSKKeymanager.cpp
    ( 353): GSKKeymanager::lockKeyDb(): successfully locked the
    file.
    11/30/2017 08:55:24.903 [020286] [706877248] : GSKKeymanager.cpp
    ( 291): EXIT  <===== GSKKeymanager::lockKeyDb
    11/30/2017 08:55:24.903 [020286] [706877248] : gskkmlib.cpp
    ( 796): ENTER =====> GSKKMlib::gskkmImportKeys
    11/30/2017 08:55:24.917 [020286] [706877248] : gskkmlib.cpp
    ( 833): GSKKMlib::gskkmImportKeys Import keys failed.
    Reason(GSKKM_ERR_DATABASE_INVALID_FILE_TYPE) - rc(17)
    
    11/30/2017 08:55:24.916 [020283] [4145211200] : gskit.cpp
    (2782): GSKit::getKeyDbNames(): Local key database name is
    '/root/IBM/SpectrumProtect/certs/dsmcert.kdb'
    11/30/2017 08:55:24.916 [020283] [4145211200] : gskit.cpp
    (2698): EXIT  <===== GSKit::getKeyDbNames, rc = 0
    11/30/2017 08:55:24.916 [020283] [4145211200] : gskit.cpp
    ( 934): GSKit::DoImportCertificate(): open key db
    '/root/IBM/SpectrumProtect/certs/dsmcert.kdb'.
    11/30/2017 08:55:24.952 [020283] [4145211200] : gskit.cpp
    ( 949): GSKit::DoImportCertificate(): GSKKM_OpenKeyDb() failed.
    err=12
    
    
    This is a timing issue. The client processes call the functions
    GSKKM_ImportKeys() and GSKKM_OpenKeyDb() at the same time, and
    the first function returns the error
    GSKKM_ERR_DATABASE_INVALID_FILE_TYPE, while the second one
    returns the error GSKKM_ERR_DATABASE_READ. This is a defect
    within GSKit affecting all platforms.
    
    
    Products affected:
    IBM Spectrum Protect Backup-Archive Client version 7.1 and 8.1
    on all platforms.
    
    IBM Spectrum Protect for Virtual Environments: Data Protection
    for VMware version
    7.1 and 8.1 on Microsoft Windows x64 and Linux x86_64 platforms.
    
    IBM Spectrum Protect for Virtual Environments: Data Protection
    for Microsoft Hyper-V
    version 7.1 and 8.1 on Microsoft Windows x64 platform.
    
    If you are using Backup-Archive Client 7.1 and 8.1, refer to
    APAR IT23993
    Note 1: The Backup-Archive Client is a prerequisite to using the
    Data Protection for VMware version 7.1. In Data Protection for
    VMware environments, the Backup-Archive Client is also
    known as the data mover.
    Note 2: The Backup-Archive Client is a prerequisite to using the
    Data Protection for Microsoft Hyper-V versions 7.1 till 8.1.2.
    In Data Protection for  Microsoft Hyper-V environments,
    the Backup-Archive Client is also known as the data mover.
    
    If you are using Data Protection for VMware 8.1,
    refer to APAR IT26568
    
    If you are using Data Protection for Microsoft Hyper-V
    8.1.4-8.1.6, refer to APAR IT26574
    
    
    
    Initial Impact:
    Low
    
    
    Additional Keywords:
    Spectrum Protect; TSM; ANS1579E; GSKit; GSKKM_ImportKeys;
    GSKKM_OpenKeyDb; GSKKM_ERR_DATABASE_INVALID_FILE_TYPE;
    GSKKM_ERR_DATABASE_READ
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED:                                              *
    * IBM Spectrum Protect for Virtual Environments: Data          *
    * Protection for VMware version 7.1 and 8.1 on Microsoft       *
    * Windows x64 and Linux x86_64 platforms.                      *
    ****************************************************************
    * PROBLEM DESCRIPTION:                                         *
    * see ERROR Description                                        *
    ****************************************************************
    * RECOMMENDATION:                                              *
    * This issue is projected to be fixed in the Data Protection   *
    * for VMware version 8.1.6.1 and 8.1.7 on Microsoft Windows    *
    * x64 and Linux x86_64 platforms.                              *
    * Note 1: This is subject to change at the discretion of IBM.  *
    ****************************************************************
    

Problem conclusion

  • After the fix  IBM Spectrum Protect backup-archive client and
    products which are using IBM Spectrum Protect API don't fail if
    multiple instances run at the same time.
    

Temporary fix

Comments

APAR Information

  • APAR number

    IT26568

  • Reported component name

    TSM FOR VE DP V

  • Reported component ID

    5725TVEVM

  • Reported release

    81L

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2018-10-17

  • Closed date

    2018-10-17

  • Last modified date

    2018-10-17

  • APAR is sysrouted FROM one or more of the following:

    IT23993

  • APAR is sysrouted TO one or more of the following:

Modules/Macros

  • dsm      dsmc     dsmadmc
    

Fix information

  • Fixed component name

    TSM FOR VE DP V

  • Fixed component ID

    5725TVEVM

Applicable component levels

  • R81L PSY

       UP

  • R81W PSY

       UP

[{"Line of Business":{"code":"LOB26","label":"Storage"},"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SS8TDQ","label":"Tivoli Storage Manager for Virtual Environments"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"81L"}]

Document Information

Modified date:
09 September 2021