IY93604: TAM POLICY SERVER BECOME UNRESPONSIVE OR CRASH

6.0.0-ISS-TAM-IF0039-LIN_NPTL
6.0.0-ISS-TAM-IF0039-WIN
6.0.0-ISS-TAM-IF0039-SOL-X86
6.0.0-ISS-TAM-IF0039-SOL
6.0.0-ISS-TAM-IF0039-S390
6.0.0-ISS-TAM-IF0039-LIN-PPC
6.0.0-ISS-TAM-IF0039-LIN
6.0.0-ISS-TAM-IF0039-HP-IA64
6.0.0-ISS-TAM-IF0039-HP
6.0.0-ISS-TAM-IF0039-AIX
6.0.0-ISS-TAM-IF0037-WIN
6.0.0-ISS-TAM-IF0037-SOL-X86
6.0.0-ISS-TAM-IF0037-SOL
6.0.0-ISS-TAM-IF0037-S390
6.0.0-ISS-TAM-IF0037-LIN-PPC
6.0.0-ISS-TAM-IF0037-LIN_NPTL
6.0.0-ISS-TAM-IF0037-LIN
6.0.0-ISS-TAM-IF0037-HP-IA64
6.0.0-ISS-TAM-IF0037-HP
6.0.0-ISS-TAM-IF0037-AIX

APAR status

• Closed as program error.

Error description

• ENVIRONMENT
  
  L2 machine where the problem has been recreated:
  
  TAM Policy Server 6.0 FP5 on Linux Sles 9 or Windows 2003
  ITDS 6.0 FP2
  
  exact customer environment:
  
  RHEL 4 Server, Update 4: Kernel 2.6.9-42.0.2.ELsmp
  DB 8.1.2.104 (FixPack 11)
  TDS 6.0 FixPack 3
  TAM 6.0 FixPack 5
  
  
  
  
  PROBLEM DESCRIPTION
  
  
  when from pdadmin you run the following command
  
  pdadmin sec_master> rsrccred modify ebsskanska rsrctype web set
  -rsrcuser Andersond -rsrcpwd stendﾔrrd user pippo
  
  than TAM Polcy Server become unresponsive or crash.
  
  
  on my windows environemtn the oucome of the above pdadmin
  command is :
  
  Error: HPDBA0282E   An unknown exception was caught.  No
  exception information i
  s available. (status 0x1065211a)
  
  
  The Policy Server however is not crashed but it is necesary to
  re-start in order to be able again to connect to it using
  pdadmin CLI.
  
  
  
  On Linux the outcome is a bit different
  
  pdadmin sec_master> rsrccred modify ebsskanska  rsrctype web set
  -rsrcuser Ander
  ssond -rsrcpwd stendﾔrre user pippo
  2007-01-13-05:00:00.391+01:00I----- 0x1354A425 pdadmin ERROR ivc
  socket mtssecur
  esocket.cpp 228 0x00000400
  HPDCO1061E   Timeout occurred while attempting to read from
  socket.
  Could not perform the administration request
  Error: HPDBA0219E   An error occurred reading data from an SSL
  connection. (stat
  us 0x106520db)
  
  
  anyway also on Linux my test have carried out that the process
  is not crashed but as in windows it is necessary to re-start the
  server in order to use it again.
  
  
  I've run the same test on a Solaris with TAM 6.0.5 that use
  Iplanet as directory server but apparently the same command
  seems to not create any problem.
  
  
  
  
  MORE:
  
  customer has confirmed that on his environments ( TAM 6.0.5 on
  Windows and on Linux RH ) the above command make in both case
  the process to die ( after running the above command a pd_start
  status shows the Policy Server down- in my test the Policy
  Server keep running even if unusuable and a re-start is needed )
  
  
  
  
  STEPS TO REPRODUCE:
  
  
  
  
  You can reproduce the error with the following cmd?s in pdadmin:
  
  This cmd will work:
  rsrccred modify ebsskanska rsrctype web set -rsrcuser Anderssond
  -rsrcpwd stendﾔr user AnderssonD
  
  This cmd will crash the pdmgrd:
  rsrccred modify ebsskanska rsrctype web set -rsrcuser Anderssond
  -rsrcpwd stendﾔrre user AnderssonD
  
  Notes:
  It does not matter if you assign the rsrcpwd with create or
  modify, the
  pdmgrd will crash anyway.
  
  
  The key point seems to be the length and the position of the
  ﾔ or any other umlaut chracter of the password.
  

Local fix

Problem summary

• Policy server crashes or hangs when character o
   umlaut o used in resource credential password.
  

Problem conclusion

• The fix for this APAR is expected to be cont
  ained in the following maintenance delivery vehicles:
  | LA interim fix | 6.0.0-TIV-TAM-LA0008
  | fixpack | 6.0.0-TIV-TAM-FP0009
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  ACCESS MGR BASE

• Fixed component ID

  5724C0801

Applicable component levels

• R600 PSN

     UP