IBM Support

IT22854: QUERY ADMIN FAILS WITH 'ANR9999D_2631152740 ADMGETSECURITYSETTINGS' ERROR MESSAGES

Subscribe

You can track all active APARs for this component.

APAR status

  • Closed as program error.

Error description

  • When an admin is registered with a name that is a zero length
    string "", the QUERY ADMIN and SELECT FROM ADMIN commands fail
    with the following error messages,
    
    ============
     ANR2017I Administrator GLYNCH issued command: QUERY ADMIN
     ANR9999D_2631152740  admGetSecuritySettings(admutil.c:1771-)
    Thread<194894>: Invalid input parameter:  (SESSION: xxxx)
     ANR9999D Thread<194894> issued message 9999 from:  (SESSION:
    xxxx)
    ANR9999D Thread<194894>  0x0000000100031034 tdPutText (SESSION:
    xxxx)
    ANR9999D Thread<194894>  0x0000000100031c98 OutDiagToCons
    (SESSION: xxxx)
    ANR9999D Thread<194894>  0x000000010000ad74 outDiagfExt
    (SESSION: xxxx)
    ANR9999D Thread<194894>  0x0000000100073ac0
    admGetSecuritySettings  (SESSION: xxxx)
    ANR9999D Thread<194894>  0x000000010052f164 AdmQueryAdmin
    (SESSION: xxxx)
    ANR9999D Thread<194894>  0x0000000100f299a8 AdmUseExtCmdTab
    (SESSION: xxxx)
    ANR9999D Thread<194894>  0x000000010073f300 AdmCommandLocal
    (SESSION: xxxx)
    ANR9999D Thread<194894>  0x000000010073cc8c admCommand (SESSION:
    xxxx)
    ANR9999D Thread<194894>  0x0000000100c4b854 SmAdminCommandThread
    (SESSION: xxxx)
    ANR9999D Thread<194894>  0x000000010000e294 StartThread
    (SESSION: xxxx)
    
     ANR9999D_3849106420 AdmQueryAdmin(admadmin.c:9729)
    Thread<194894>: Failed to get admin  security settings, rc 9990.
     ANR9999D Thread<194894> issued message 9999 from: (SESSION:
    xxxx)
    ANR9999D Thread<194894>  0x0000000100031034 StdPutText (SESSION:
    xxxx)
    ANR9999D Thread<194894>  0x0000000100031c98 OutDiagToCons
    (SESSION: xxxx)
    ANR9999D Thread<194894>  0x000000010000ad74 outDiagfExt
    (SESSION: xxxx)
    ANR9999D Thread<194894>  0x0000000100531f38 AdmQueryAdmin
    (SESSION: xxxx)
    ANR9999D Thread<194894>  0x0000000100f299a8 AdmUseExtCmdTab
    (SESSION: xxxx)
    ANR9999D Thread<194894>  0x000000010073f300 AdmCommandLocal
    (SESSION: xxxx)
    ANR9999D Thread<194894>  0x000000010073cc8c admCommand (SESSION:
    xxxx)
    ANR9999D Thread<194894>  0x0000000100c4b854 SmAdminCommandThread
    (SESSION: xxxx)
    ANR9999D Thread<194894>  0x000000010000e294 StartThread
    (SESSION: xxxx)
    
    ANR2032E QUERY ADMIN: Command failed - internal server error
    detected.
    ANR9999D Thread<194894> issued message 2032 from
    ANR9999D Thread<194894>  0x0000000100030280 IPRA.$StdPutMsg
    ANR9999D Thread<194894>  0x00000001000321c8 outTextfTrFL
    ANR9999D Thread<194894>  0x0000000100531f54 AdmQueryAdmin
    ANR9999D Thread<194894>  0x0000000100f299a8 AdmUseExtCmdTab
    ANR9999D Thread<194894>  0x000000010073f300 AdmCommandLocal
    ANR9999D Thread<194894>  0x000000010073cc8c admComman
    ANR9999D Thread<194894>  0x0000000100c4b854 SmAdminCommandThread
    ANR9999D Thread<194894>  0x000000010000e294 StartThread
    
    ==========
    
    tsm: xxxx>select * from admins
    ANR2034E SELECT: No match found using this criteria.
    ANS8001I Return code 11.
    
    Customer/L2 Diagnostics :
    
    Run below db2 command to verify the if there is any null admin
    name exists:
    
    db2 connect to tsmdb1
    db2 "select adminname, adminid from tsmdb1.administrators where
    adminname='' "
    
    Example output shows null value in 'adminname' field.
    
    ADMINNAME                            ADMINID
                                                           208
    
    IBM Spectrum Protect Versions Affected: IBM Spectrum Protect
    server versions 7.1.8, 8.1.2, 8.1.3
    
    Initial Impact: Low
    
    Additional Keywords: TSM, query admin, ANR9999D_2631152740
    

Local fix

  • Login as instance user and run following commands,
    
    db2 connect to tsmdb1
    db2 "update tsmdb1.administrators set adminname='SOMETHING'
    where adminname=''"
    db2 terminate
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED:                                              *
    * All IBM Tivoli Storage Manager and IBM Spectrum Protect      *
    * server users.                                                *
    ****************************************************************
    * PROBLEM DESCRIPTION:                                         *
    * QUERY ADMIN, QUERY NODE, and QUERY SERVER all fail with      *
    *                                                              *
    * ANR9999D_2631152740 admGetSecuritySettings(admutil.c:1729)   *
    * Thread<225>: Invalid input parameter: 0x7f5a80c26f80 0 0.    *
    *                                                              *
    * if an admin, node, or server name, respectively, is the      *
    * zero-length string "".                                       *
    *                                                              *
    * An attempt to rename or remove the admin named "" fails with *
    * one of the following errors                                  *
    * ANR3383E Administrator  is the monitoring administrator and  *
    * cannot be removed or renamed.                                *
    * ANR0150E Failed to open Node . There was an error decrypting *
    * the Node password.                                           *
    * ANR2032E REMOVE ADMIN: Command failed - internal server      *
    * error detected.                                              *
    *                                                              *
    * An attempt to delete the server named "" fails with          *
    * ANR1664W DELETE SERVER: Server  is currently in use.         *
    ****************************************************************
    * RECOMMENDATION:                                              *
    * Apply fixing level when available. This problem is currently *
    * projected to be fixed in levels 7.1.9 and 8.1.5. Note that   *
    * this is subject to change at the discretion of IBM.          *
    ****************************************************************
    

Problem conclusion

  • This problem was fixed.  In addition, the REGISTER ADMIN,
    REGISTER NODE, and DEFINE SERVER commands have been changed not
    to allow the registration or definition of an admin, node, or
    server with a name that is the zero-length string "".  The
    RENAME ADMIN and RENAME NODE commands have been changed not to
    allow an admin or node to be renamed to a name that is the
    zero-length string "".
    
    Affected platforms for reported release:  AIX, HP-UX, Solaris,
    Linux, and Windows.
    Platforms fixed:  AIX, HP-UX, Solaris, Linux, and Windows.
    

Temporary fix

Comments

APAR Information

  • APAR number

    IT22854

  • Reported component name

    TSM SERVER

  • Reported component ID

    5698ISMSV

  • Reported release

    81A

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2017-10-27

  • Closed date

    2017-11-09

  • Last modified date

    2017-11-09

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    TSM SERVER

  • Fixed component ID

    5698ISMSV

Applicable component levels

  • R71A PSY

       UP

  • R71H PSY

       UP

  • R71L PSY

       UP

  • R71S PSY

       UP

  • R71W PSY

       UP

  • R81A PSY

       UP

  • R81L PSY

       UP

  • R81W PSY

       UP



Document information

More support for: Tivoli Storage Manager

Software version: 81A

Reference #: IT22854

Modified date: 09 November 2017