APAR status
Closed as program error.
Error description
After an upgrade of the Spectrum Protect Plus, the SSH configuration on the Spectrum Protect Plus for some of the registered VADPs expired or fell out of sync. This desynchronization required that the SSH configuration be refreshed before an SSH connection could be made with the faulty VADP appliances. Since this failure was related to the authentication portion of the SSH handshake, this issue manifested as an authentication error on the Spectrum Protect Plus User Interface.
Local fix
It was discovered that registering the VADP appliance as an Oracle application server (and then unregistering it) resynchronized the SSH configuration and allowed the VADPs to be updated through the Spectrum Protect Plus User Interface. The Oracle application server registration process includes a less-restrictive SSH connection, which allowed for Spectrum Protect Plus to connect to the VADP appliance even though the VADP registration process (which is not stringent) could not. The underlying SSH connection used in the Oracle case is now implemented as part of an automated retry process for the VADP registration (i.e., if the VADP registration process fails with an authentication issue, an SSH connection is established with the VADP using the less-restrictive SSH process and then the VADP registration is reattempted). This amounts to automating the manual workaround.
Problem summary
**************************************************************** * USERS AFFECTED: * * IBM Spectrum Protect Plus level 10.1.6. * **************************************************************** * PROBLEM DESCRIPTION: * * See ERROR DESCRIPTION * **************************************************************** * RECOMMENDATION: * * Apply fixing level when available. This problem is currently * * projected to be fixed IBM Spectrum Protect Plus level * * 10.1.7. * * Note that this is subject to change at the discretion of * * IBM. * ****************************************************************
Problem conclusion
Logic was added to the VADP registration process to automatically update and refresh the SSH configuration between SPP and a VADP.
Temporary fix
Comments
APAR Information
APAR number
IT34495
Reported component name
SP PLUS
Reported component ID
5737SPLUS
Reported release
A16
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2020-10-09
Closed date
2020-11-20
Last modified date
2020-11-20
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Fix information
Fixed component name
SP PLUS
Fixed component ID
5737SPLUS
Applicable component levels
[{"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SSNQFQ","label":"IBM Spectrum Protect Plus"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"A16","Line of Business":{"code":"LOB26","label":"Storage"}}]
Document Information
Modified date:
31 January 2024