IBM Support

OA37533: MS SQL AGENT DB_PASSWORD WRITTEN AS DES

A fix is available

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • When the MS SQL Agent db_password is configured using the TEP,
    the
    password is written with DES encryption rather than AES256.
    
    
    RECREATE INSTRUCTIONS:
    
    Setup Windows Domain user as administrator on all machines.
    Install TEMS 6.2.2 FP3 on Windows box A.
    Install TEP 6.2.2 FP3  on Windows box B.
    Install TEMA 6.2.2 FP3 on Windows 2003 Server Endpoint
    Add MS SQL Agent 6.2.1 to TEMS Depot
    Execute "Add Managed System" on TEP
    Specify MS SQL Server Password as "abcd"
    Examine the MS SQL Agent configuration file on TEMA.
    Observe that the db_password text is preceeded by the string DES
    and not
    AES256.
    

Local fix

  • No workaround available.
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED: All TEMS users.                              *
    ****************************************************************
    * PROBLEM DESCRIPTION: WRONG PASSWORD TYPE IS USED ON A 64-BIT *
    *                      MACHINE.                                *
    ****************************************************************
    * RECOMMENDATION: Apply this PTF.                              *
    ****************************************************************
    When configuring the MSSQL agent via remote deploy, the 64-
    bit version of the cryptographic routines are used with the
    32-bit agent and the MSSQL agent configuration fails.  The
    problem occurs on a 64-bit Windows system running a 64-bit
    NT agent and a 32-bit MSSQL Server agent.
    

Problem conclusion

  • Code has been added to make sure that the correct
    cryptographic routines are always invoked.
    

Temporary fix

Comments

APAR Information

  • APAR number

    OA37533

  • Reported component name

    MGMT SERVER DS

  • Reported component ID

    5608A2800

  • Reported release

    622

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2011-09-14

  • Closed date

    2011-09-21

  • Last modified date

    2011-11-02

  • APAR is sysrouted FROM one or more of the following:

    IZ96600

  • APAR is sysrouted TO one or more of the following:

Modules/Macros

  • KFAXCF
    

Fix information

  • Fixed component name

    MGMT SERVER DS

  • Fixed component ID

    5608A2800

Applicable component levels

  • R622 PSY UA62291

       UP11/10/07 P F110

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SSRJ5K","label":"Tivoli Management Server for Distributed Systems on z\/OS"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"622","Edition":"","Line of Business":{"code":"LOB17","label":"Mainframe TPS"}}]

Document Information

Modified date:
02 November 2011