Hello,
you are hit by the "0" byte password bug...

Your encrypted password is stored in a file. If the encrypted password
contains a "0" byte than some TSM clients are not able to handle this.

This bug is fixed in the newer clients.

Bye

  Rainer Tammer


Tivoli:
=====

DCF Document ID: 1049593 - IBM Tivoli Storage Manager: PASSWORDACCESS GENERATE 
Continually prompts for the password.
Problem Desc: APAR IC31516 "Passwordaccess Generate" does not work if encryption of 
the password causes a zero byte to be part of the password.

Solution: This is covered in APAR IC31516.

When using "passwordaccess generate", a password record is formed
for writing to the "tsm.pwd" file. The password record consists
of the userid, servername, nodename, and the encrypted password.
All parts of the password record are written as a string and the
encrypted password will fail to be written correctly if the
string contains a 0-byte within it.
For example, if the encrypted password string is:
"D8 D6 BD 00 94 26 CB 11 7F" when it is written to the
password record, it is truncated at the 0-byte to "D8 D6 BD"
and is thus incorrect within the "tsm.pwd".

This problem will only occur with "passwordaccess generate"
and the password encryption scheme results in a "0" symbol
within it. Since the password is incorrect in the "tsm.pwd" file,
the user will be prompted for the password even if it was
already set using "passwordaccess generate".


Local Fix:

Use a different nodename and/or password so the encryption
scheme will generate a different encryption string that does
not contain a "0" within it.

To ensure the password is different use a number as part of the password.

Example:

To alleviate this issue, set the password on the TSM server to a different value.
>From a TSM server administrative session "dsmadmc":
o Update node CLIENT 1passwd
Where "CLIENT" is the nodename being updated and "1passwd" is the password
being assigned.

RESOLUTION:
This APAR fix is scheduled to be included in Client PTF level 4.2.2 and 5.1.0.
Add Dt: 2001-11-19
Add Time: 08:43:28
Add User Id: kathy pang/san jose/ibm
Product: IBM Tivoli Storage Manager
Component Id: Not Applicable
Attribute: AIX;HP-UX;NetWare;SunOS -4.2
Document Type: Solution
Document Expiry Dt: 2002-11-18
Document Id: 1049593
Publish Dt: 2002-02-22


On Tue, 28 May 2002 16:07:49 -0300, Nazir Najjar wrote:

>Hi,
>
>I have been working with TSM Server 4.1.5 on Windows 2000 and TSM client
>4.1.13 on Windows NT.
>In dsm.opt of the client I set the option "passwordaccess   generate" , but
>it always requests the password.
>All the others options are ok.
>Why does the client request the password ?
>
>Thank you.
>
>
>Nazir Najjar
>Itautec - Seguranga Internet
>[EMAIL PROTECTED]
>55 (11) 6097-3959
>

Reply via email to