IBM Support

IT24044: LDAP AUTHENTICATION FAILURE ANS1051I INVALID USER ID OR PASSWORD

Subscribe

You can track all active APARs for this component.

APAR status

  • Closed as program error.

Error description

  • The procedure to add LDAP user to the IBM Spectrum Protect
    server is successfully completed, however login attempt to the
    server using newly created LDAP user fails
    - Create a LDAP user:
    register admin jdoe auth=ldap sessionsec=trans
    
    grant auth jdoe cl=system
    
    
    
    - Test connection:
    $ dsmadmc
    IBM Spectrum Protect
    Command Line Administrative Interface
        - Version 8, Release 1, Level 2.0
        (c) Copyright by IBM Corporation and other(s) 1990, 2017.
        All Rights Reserved.
    
    
    Enter your user id:  jdoe
    Enter your password:
    
    
    ANS1051I Invalid user id or password
    The LDAP LDAPCACHE trace will show successful bind:
    10:31:35.574 Ý596¨Ýldapintr.c¨Ý5344¨ÝLdapCheckEntry¨:Checking
    via (&(objectClass=*)(|(sAMAccountName=jdoe@example.com)
    (userPrincipalName=jdoe@example.com)))
    ...
    10:31:35.577 Ý596¨Ýldapintr.c¨Ý1702¨ÝldapAuthenticate¨:Exit:
    entryName = jdoe, entryId = 176, rc = 1116
    
    The issue only occurs if the UPName does not match the standard
    name@domain format.
    This APAR is a follow-up from IT22066 however the 7.1 server is
    not affected.
    IBM Spectrum Protect Versions Affected:
    IBM Spectrum Protect server 8.1 on all platforms
    | MDVREGR 8.1.4.0-5698ISMSV |
    Initial Impact:
    Medium
    Additional Keywords:
    Spectrum Protect; TSM; LDAP; Active Directory; UPName;
    SAMAccountName; ANS1051I; IT22066
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED:                                              *
    * All IBM Spectrum Protect server users.                       *
    ****************************************************************
    * PROBLEM DESCRIPTION:                                         *
    * See error description.                                       *
    ****************************************************************
    * RECOMMENDATION:                                              *
    * Apply fixing level when available. This problem is currently *
    * projected to be fixed in level 8.1.6.. Note that this is     *
    * subject to change at the discretion of IBM.                  *
    ****************************************************************
    

Problem conclusion

  • This problem was fixed.
    Affected platforms for reported release:  AIX, Linux, Windows.
    Platforms fixed:  AIX, Linux, Windows.
    

Temporary fix

Comments

APAR Information

  • APAR number

    IT24044

  • Reported component name

    TSM SERVER

  • Reported component ID

    5698ISMSV

  • Reported release

    81A

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2018-02-12

  • Closed date

    2018-03-29

  • Last modified date

    2018-03-29

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    IT24490

Fix information

  • Fixed component name

    TSM SERVER

  • Fixed component ID

    5698ISMSV

Applicable component levels

  • R81A PSY

       UP

  • R81L PSY

       UP

  • R81W PSY

       UP



Document information

More support for: Tivoli Storage Manager

Software version: 81A

Reference #: IT24044

Modified date: 29 March 2018