IBM Support

IV55866: 6.30.02 LDAP SSL FAILURES REQUIRE LDAP UPLIFT

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • After upgrade the TEMS and TEPS to 6.3 FP02, the LDAP
    authentication using SSL failed
    
    (52F93429.00CC-16:kglldp1.c,980,"LDP1_ValidateLDAPType") LDAP
    SSL initialization (-1), SSL failure reason code (0):
    LDP1_Keyring /tivoli/apps/itm/keyfiles/keyfile.kdb, password
    xxxxxxxx.
    (52F93429.00CD-16:kglldp1.c,988,"LDP1_ValidateLDAPType") Exit:
    0x64
    (52F93429.00CE-16:kglldp1.c,1722,"LDP1_ValidateLogonID")
    Validate with LDAP.
    
    misc info
    
    52334.999.000 COSTCO
    21503.499.000 TSA
    
    Both experienced problem on upgrade to 6.30.02
    
    ms   Tivoli Enterprise Monitoring Server
    aix536
    06.30.02.00   d3248a          20140211 0959   0
    
    cq   Tivoli Enterprise Portal Server
    aix536
    06.30.02.00   d3248a          20140212 1308   0
    
    We could recreate the problem locally
    

Local fix

Problem summary

  • The LDAP/SSL authentication path for the TIvoli Management
    server and Portal server fails in 6.30 FP2.
    
    
    After upgrade to 6.30 FP2, the Tivoli Management server and
    Portal server fail to authenticate valid user credentials (ID
    and password) when using LDAP/SSL services.  With the default
    trace (KBB_RAS1=ERROR) present, the RAS1 log will contain the
    following error message: "LDAP SSL initialization (-1), SSL
    failure reason code (0)".
    

Problem conclusion

  • In Release 6.30, GSKit Version 8 is bundled with Tivoli
    Monitoring software.  GSKit version 8 places new requirements on
    dependent services, one being LDAP.  The LDAP client API calls
    were upgraded to meet the GSKit Version 8 SSL requirements.
    
    
    The fix for this APAR is contained in the following maintenance
    packages:
    
      | fix pack | 6.3.0-TIV-ITM-FP0003
    

Temporary fix

Comments

APAR Information

  • APAR number

    IV55866

  • Reported component name

    OMEG DIST INSTA

  • Reported component ID

    5608A41CI

  • Reported release

    630

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2014-02-25

  • Closed date

    2014-05-16

  • Last modified date

    2014-08-08

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    TEMS

  • Fixed component ID

    5724C04MS

Applicable component levels

  • R630 PSY

       UP

[{"Line of Business":{"code":"LOB45","label":"Automation"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSTFXA","label":"Tivoli Monitoring"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"630"}]

Document Information

Modified date:
30 December 2022