IT35788: CANNOT LOG IN IBM SPECTRUM PROTECT PLUS USER INTERFACE IN THE NAT ENVIRONMENT

APAR status

• Closed as program error.

Error description

• When first logging on IBM Spectrum Protect Plus user interface,
  it fails to reset the default user name admin and its password
  with error:
  
  An error has occurred. See logs for more information
  
  The virgo log shows:
  
  INFO http-nio-8082-exec-6
  com.syncsort.dp.xsb.service.authentication.impl.AuthServiceImpl
  User "admin" sign in from session
  "f6c8e543c39f4d83838393752db6e547".
  INFO http-nio-8082-exec-6
  c.s.dp.xsb.api.endeavour.session.controller.SessionController
  ####SPP-12909 - SessionProvider::getLoginUser(): userUrl =
  http://localhost:8082/api/security/user/1000
  ERROR http-nio-8082-exec-6
  c.s.dp.xsb.api.commons.exception.ExceptionMessageTranslator
  org.springframework.web.client.HttpClientErrorException: 400
  null
  ...
  ERROR http-nio-8082-exec-6
  c.s.dp.xsb.api.commons.exception.ExceptionMessageTranslator
  com.syncsort.dp.xsb.commons.XSBException: An error has
  occurred. See logs for more information.
  
  On user login attempt, SPP UI is making "POST
  https://<IP>/api/endeavour/session?screenInfo=1". If the
  incoming request IP address is NAT address, the call to
  api/security/user/1000 in getLoginUser() fails with HttpStatus
  400. Even the reset can work after switching to direct IP
  address of SPP appliance, later login still fails with same
  error after changing back to NAT address.
  
  Versions affected:
  10.1.*
  

Local fix

• N/A
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * IBM Spectrum Protect Plus level 10.1.x                       *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * see ERROR Description                                        *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Apply the fixing level when available. This problem is       *
  * currently projected to be fixed in IBM Spectrum Protect Plus *
  * level 10.1.8 patch1 and 10.1.9.                              *
  * Note that this is subject to change at the discretion of     *
  * IBM.                                                         *
  ****************************************************************
  

Problem conclusion

• Incoming requests to a NAT address of the IBM Spectrum Protect
  Plus appliance can result in a HTTP status 400 response. Fixes
  have been made to IBM Spectrum Protect Plus to accommodate
  incoming requests to a NAT address.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  SP PLUS

• Fixed component ID

  5737SPLUS

Applicable component levels