IV36143: EVENTID ERROR IN WINDOWS APPLICATION LOGS ON VM

Tivoli Service Automation Manager Fix Pack 1 - 7.2.4-TIV-TSAM-FP0001

APAR status

• Closed as program error.

Error description

• Provisioned Windows Server 2008R2 x64 generates
  error event every logging. It seems that cygwin
  sshd is not configured properly and tries to
  search for type of key which is not available
  on each login. This generates the error events.
  Cygwin tries to find /etc/ssh_host_ecdsa_key,
  because this file is default for ssh server
  configuration.
  

Local fix

• Add the following lines in cloud_cygwin_ssh_config.sh
  .
  if ￸ | -f "/etc/ssh_host_ecdsa_key" ﾂ; then
      ssh-keygen -t dsa -f /etc/ssh_host_ecdsa_key -N ""
  fi
  .
  Just below the
  .
  if ￸ | -f "/etc/ssh_host_dsa_key" ﾂ; then
      ssh-keygen -t dsa -f /etc/ssh_host_dsa_key -N ""
  fi
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: All users of Tivoli Service Automation Manager
  7.2.2.0 or later.
  ****************************************************************
  * PROBLEM DESCRIPTION:
  Provisioned Windows Server 2008R2 x64 generates error event
  every logging. (Could not load host key:
  /etc/ssh_host_ecdsa_key)
  ****************************************************************
  * RECOMMENDATION:
  In order to fix the problem, apply the following steps
  Manual repair instructions:
      Convert Windows Template into the Virtual Machine on the
  VSphere console.
      Edit C:\cygwin\bin\cloud_cygwin_ssh_config.sh and/or
  C:\temp\cygwin\cloud_cygwin_ssh_config.sh
      Insert the following lines
          if [ ! -f "/etc/ssh_host_ecdsa_key" ]; then
              ssh-keygen -t dsa -f /etc/ssh_host_ecdsa_key -N ""
          fi
          Just below the
          if [ ! -f "/etc/ssh_host_dsa_key" ]; then
              ssh-keygen -t dsa -f /etc/ssh_host_dsa_key -N ""
          fi
      Open cygwin terminal and run
          dos2unix  C:\\cygwin\\bin\\cloud_cygwin_ssh_config.sh
          dos2unix  C:\\temp\\cygwin\\cloud_cygwin_ssh_config.sh
      shut down the Virtual machine and convert it back into the
  template.
  
  For permanent resolution apply Tivoli Service Automation Manager
  7.2.4 Fixpack 1 when available.
  

Problem conclusion

• Cygwin sshd services loads several keys during the startup. (e.g
  ssh_host_ecdsa_key).
  TSAM creates ssh_host_dsa_key and ssh_host_rsa_key but not the
  ssh_host_ecdsa_key which results into the error "Could not load
  host key: /etc/ssh_host_ecdsa_key" in C:\cygwin\var\log.
  Windows event logger logs this event in the event manager
  console.
  This APAR solves the problem - after repairing the Windows
  Template the problem will not occur any more, there are no
  additional actions required for the customer.
  
  The fix for this APAR is contained in the following maintenance
  packages:
  | fix pack | 7.2.4-TIV-TSAM-FP0001
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  TSAM (& INSTALL

• Fixed component ID

  5724W7800

Applicable component levels

• R724 PSY

     UP