IBM Support

IY93604: TAM POLICY SERVER BECOME UNRESPONSIVE OR CRASH

Subscribe

You can track all active APARs for this component.

APAR status

  • Closed as program error.

Error description

  • ENVIRONMENT
    
    L2 machine where the problem has been recreated:
    
    TAM Policy Server 6.0 FP5 on Linux Sles 9 or Windows 2003
    ITDS 6.0 FP2
    
    exact customer environment:
    
    RHEL 4 Server, Update 4: Kernel 2.6.9-42.0.2.ELsmp
    DB 8.1.2.104 (FixPack 11)
    TDS 6.0 FixPack 3
    TAM 6.0 FixPack 5
    
    
    
    
    PROBLEM DESCRIPTION
    
    
    when from pdadmin you run the following command
    
    pdadmin sec_master> rsrccred modify ebsskanska rsrctype web set
    -rsrcuser Andersond -rsrcpwd stendヤrrd user pippo
    
    than TAM Polcy Server become unresponsive or crash.
    
    
    on my windows environemtn the oucome of the above pdadmin
    command is :
    
    Error: HPDBA0282E   An unknown exception was caught.  No
    exception information i
    s available. (status 0x1065211a)
    
    
    The Policy Server however is not crashed but it is necesary to
    re-start in order to be able again to connect to it using
    pdadmin CLI.
    
    
    
    On Linux the outcome is a bit different
    
    pdadmin sec_master> rsrccred modify ebsskanska  rsrctype web set
    -rsrcuser Ander
    ssond -rsrcpwd stendヤrre user pippo
    2007-01-13-05:00:00.391+01:00I----- 0x1354A425 pdadmin ERROR ivc
    socket mtssecur
    esocket.cpp 228 0x00000400
    HPDCO1061E   Timeout occurred while attempting to read from
    socket.
    Could not perform the administration request
    Error: HPDBA0219E   An error occurred reading data from an SSL
    connection. (stat
    us 0x106520db)
    
    
    anyway also on Linux my test have carried out that the process
    is not crashed but as in windows it is necessary to re-start the
    server in order to use it again.
    
    
    I've run the same test on a Solaris with TAM 6.0.5 that use
    Iplanet as directory server but apparently the same command
    seems to not create any problem.
    
    
    
    
    MORE:
    
    customer has confirmed that on his environments ( TAM 6.0.5 on
    Windows and on Linux RH ) the above command make in both case
    the process to die ( after running the above command a pd_start
    status shows the Policy Server down- in my test the Policy
    Server keep running even if unusuable and a re-start is needed )
    
    
    
    
    STEPS TO REPRODUCE:
    
    
    
    
    You can reproduce the error with the following cmd?s in pdadmin:
    
    This cmd will work:
    rsrccred modify ebsskanska rsrctype web set -rsrcuser Anderssond
    -rsrcpwd stendヤr user AnderssonD
    
    This cmd will crash the pdmgrd:
    rsrccred modify ebsskanska rsrctype web set -rsrcuser Anderssond
    -rsrcpwd stendヤrre user AnderssonD
    
    Notes:
    It does not matter if you assign the rsrcpwd with create or
    modify, the
    pdmgrd will crash anyway.
    
    
    The key point seems to be the length and the position of the
    ヤ or any other umlaut chracter of the password.
    

Local fix

Problem summary

  • Policy server crashes or hangs when character o
     umlaut o used in resource credential password.
    

Problem conclusion

  • The fix for this APAR is expected to be cont
    ained in the following maintenance delivery vehicles:
    | LA interim fix | 6.0.0-TIV-TAM-LA0008
    | fixpack | 6.0.0-TIV-TAM-FP0009
    

Temporary fix

Comments

APAR Information

  • APAR number

    IY93604

  • Reported component name

    ACCESS MGR BASE

  • Reported component ID

    5724C0801

  • Reported release

    600

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2007-01-16

  • Closed date

    2007-02-28

  • Last modified date

    2007-02-28

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    ACCESS MGR BASE

  • Fixed component ID

    5724C0801

Applicable component levels

  • R600 PSN

       UP



Document information

More support for: IBM Security Access Manager for Web

Software version: 600

Reference #: IY93604

Modified date: 28 February 2007