IBM Support

IT21131: ENTERPRISE CONFIGURATION SERVER RESETS THE MANAGED SERVER SSL SETTING FROM 'YES' TO 'NO' DURING CONFIGURATION REFRESH

Subscribe

You can track all active APARs for this component.

APAR status

  • Closed as program error.

Error description

  • When server to server communication is configured to use SSL and
    the configuration manager runs a configuration refresh using
    'notify subscribers', SSL is reset to no and breaks the SSL
    configuration.
    This happens because the SSL column is not propagated during a
    configuration refresh.
    
    Example:
    
    Both the managed server and the configuration manager have the
    following server definition (removed some fields for
    readability):
    
    Protect: server>q server managedserver f=d
    
                                      Server Name: MANAGEDSERVER
                                     Comm. Method: TCPIP
                                  Transfer Method: TCPIP
                               High-level Address: a.b.c.d
                                Low-level Address: 1543
                                             ..........
                                              SSL: Yes
    
    After running 'notify subscribers' on the configuration manager,
    the managed server has:
    
    Protect: server>q server managedserver f=d
    
                                      Server Name: MANAGEDSERVER
                                     Comm. Method: TCPIP
                                  Transfer Method: TCPIP
                               High-level Address: a.b.c.d
                                Low-level Address: 1543
                                             ..........
                                              SSL: No
    
    The SSL parameter changed from 'Yes' to 'No', while the
    Low-level Address still is the SSL enabled port. This breaks the
    server to server communication.
    
    | MDVPARTL 6.3.3.0-TIV_5698ISMSV IC83655 |
    
    IBM Spectrum Protect Versions Affected:
    All supported IBM Spectrum Protect server version on all
    platforms
    
    Initial Impact: Medium
    
    Additional Keywords: S2S, TSM, tivoli, storage, manager, sslno,
    config,
    

Local fix

  • Update server definition on the managed server with 'SSL=YES'
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED:                                              *
    * All IBM Tivoli Storage Manager and IBM Spectrum Protect      *
    * server users.                                                *
    ****************************************************************
    * PROBLEM DESCRIPTION:                                         *
    * See error description.                                       *
    ****************************************************************
    * RECOMMENDATION:                                              *
    * Apply fixing level when available. This problem is currently *
    * projected to be fixed in levels 7.1.9 and 8.1.4. Note that   *
    * this is subject to change at the discretion of IBM.          *
    ****************************************************************
    

Problem conclusion

  • Problem Conclusion:
    This problem was fixed.
    Affected platforms for reported release:  AIX, Solaris, Linux,
    and Windows.
    Platforms fixed:  AIX, Solaris, Linux, and Windows.
    

Temporary fix

Comments

APAR Information

  • APAR number

    IT21131

  • Reported component name

    TSM SERVER

  • Reported component ID

    5698ISMSV

  • Reported release

    71L

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2017-06-28

  • Closed date

    2017-09-01

  • Last modified date

    2017-09-01

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    TSM SERVER

  • Fixed component ID

    5698ISMSV

Applicable component levels

  • R71A PSY

       UP

  • R71S PSY

       UP

  • R71L PSY

       UP

  • R71W PSY

       UP

  • R81A PSY

       UP

  • R81L PSY

       UP

  • R81W PSY

       UP



Document information

More support for: Tivoli Storage Manager

Software version: 7.1.3

Reference #: IT21131

Modified date: 01 September 2017