IV31241: THE COMMAND "ITMCMD CONFIG -S -R -T TEMSNAME" DISPLAYS KCIIN0295E ERROR

IBM Tivoli Monitoring 6.2.3 Fix Pack 5 (6.2.3-TIV-ITM-FP0005)
IBM Tivoli Monitoring 6.2.3 Fix Pack 4 (6.2.3-TIV-ITM-FP0004)

APAR status

• Closed as program error.

Error description

• The command "itmcmd config -S -r -t TEMSNAME" will fail and
  display the
  KCIIN0295E error message in certain conditions.
  
  config/.ConfigData/kmsenv|*/ms/bin/kdsvlunx owner|KCIIN0295E
  displayed
  
  TEMSNAME|SECURITY|NO|     tivadmin:tivadmin       No
  TEMSNAME|SECURITY|YES|    root:root               No
  TEMSNAME|SECURITY|NO|     root:root               Yes
  TEMSNAME|SECURITY|YES|    tivadmin:tivadmin       Yes
  
  RECREATE INSTRUCTIONS:
  Login in to the system as a non-root user.
  1) Install the TEMS
  2) Configure the TEMS
     -) Respond 1 to the following prompt.
  Security: Validate User ? [1=YES, 2=NO] (Default is: 2):
     -) Provide the root password after the following prompt.
  Info - Checking TEMS User Authentication requirements.
  Info - TEMS User Authentication requirements need to be
  completed before
             User Authentication will function. These changes will
  be done
                        automatically if you type the root
  password below:
  3) Start the TEMS
  4) As the root user, chown $CANDLEHOME/*/ms/bin/kdsvlunx back to
  the
     non-root user.
  5) Reconfigure the TEMS using the -r operand
     itmcmd config -S -r -t TEMSNAME
  6) You will see messages similar to the following.
  Configuring TEMS...
   ... Writing to database file for ms.
  ... creating config file
  "/opt/IBM/ITM.itmuser/config/538d2lp3_ms_HUB_aaron.config"
  ... creating file
  "/opt/IBM/ITM.itmuser/tables/HUB_aaron/glb_site.txt."
  ... updating "/opt/IBM/ITM.itmuser/config/kbbenv"
  ... verifying Hot Standby.
  Info - Checking TEMS User Authentication requirements.
  KCIIN0295E TEMS User Authentication attempted silently as
  non-root User.
  

Local fix

• The work-around is to ensure that neither of the two "Yes"
  conditions
  listed in the Problem Description above are allowed to occur.
  If the kdsvlunx owner is changed to tivadmin, ensure that the
  SECURITY setting is NO before running itcmd config -S with -r.
  If the kdsvlunx owner is changed to root, ensure that the
  SECURITY setting is YES before running itcmd config -S with -r.
  

Problem summary

• The command "itmcmd config -S -r -t TEMSNAME" displays the
  KCIIN0295E error message and terminates the configuration
  without prompting to restart the running monitoring server.
  
  Info - Checking TEMS User Authentication requirements.
  KCIIN0295E TEMS User Authentication attempted silently as
  non-root User.
  

Problem conclusion

• The command "itmcmd config -S -r -t TEMSNAME" was changed to
  prompt for the root password as needed so that the configuration
   is not terminated.
  
  Info - Checking TEMS User Authentication requirements.
  Info - TEMS User Authentication requirements need to be
  completed before
             User Authentication will function.  These changes
  will be done
                        automatically if you type the root
  password below:
  
  entering validateJRexec
  Tried to run authorized...  processing TEMS "TEMS" on host
  "538d2lp3"
  Info - OK, TEMS User Authentication requirements completed
  successfully.
  TEMS configuration completed...
  Would you like to restart the component to allow new
  configuration to take effect? [1=Yes, 2=No] (Default is: 2): 1
  Stopping Tivoli Enterprise Monitoring Server
  Tivoli Enterprise Monitoring Server stopped
  Starting Tivoli Enterprise Monitoring Server
  Tivoli Enterprise Monitoring Server started
  
  The fix for this APAR is included in the following maintenance
  vehicle:
  
     | fix pack | 6.2.3-TIV-ITM-FP0003
  
  Note: Search the IBM technical support web site for maintenance
  package availability.
  

Temporary fix

• Either turn off monitoring server user authentication or run
  "SetPerm -s" to correctly turn on monitoring server user
  authentication before running the command "itmcmd config -S -r
  -t TEMSNAME".
  

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  OMEG DIST INSTA

• Fixed component ID

  5608A41CI

Applicable component levels

• R623 PSY

     UP