IT38377: NO METHOD ERROR LISTED IN VIRGO LOG AND BACKUP MIGHT FAIL WHEN USING KERBEROS AUTHENTICATION

APAR status

• Closed as Permanent restriction.

Error description

• When using Kerberos authentication in the Virgo log is the
  following  NoMethod error listed:
  
  [2021-08-27T04:30:38.739Z] INFO pool-91-thread-1
  com.catalogic.ecx.deploy.winrm.WinRM               1630036800233
  Internal winRM exception. Retrying
  /data/log/guestdeployer/2021-08-27/1630036808100/SSWin19SQL19.qa
  .catalogic.us/ecxCommand_2021.08.27_04.30.37.646_eab14a09-a086-4
  130-b9f9-8b2ba44279ff.rb.
  Last Error:
  /usr/local/share/gems/gems/winrm-2.2.3/lib/winrm/shells/cmd.rb:5
  7:in `open_shell': undefined method `text' for nil:NilClass
  (NoMethodError)[2021-08-27T04:30:38.739Z] INFO pool-91-thread-1
  com.catalogic.ecx.deploy.winrm.WinRM               1630036800233
  Internal winRM exception. Retrying
  /data/log/guestdeployer/2021-08-27/1630036808100/SSWin19SQL19.qa
  .catalogic.us/ecxCommand_2021.08.27_04.30.37.646_eab14a09-a086-4
  130-b9f9-8b2ba44279ff.rb. Last Error:
  /usr/local/share/gems/gems/winrm-2.2.3/lib/winrm/shells/cmd.rb:5
  7:in `open_shell': undefined method `text' for nil:NilClass
  (NoMethodError) from
  /usr/local/share/gems/gems/winrm-2.2.3/lib/winrm/shells/base.rb:
  168:in `block in open' from /usr/local/share/
  
  Also backup operations might fail when using this authentication
  method to connecting to Windows Servers.
  Even this authentication method is listed in the documentation
  as an option when connecting to Windows Servers, this method is
  slower and less reliable than NTLM.
  
  Affected versions: IBM Spectrum Protect Plus V10.1.3 and later
  

Local fix

• Use NTLM authentication when connecting to Windows Servers.
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  *  IBM Spectrum Protect Plus V10.1.3, 10.1.4, 10.1.5, 10.1.6,  *
  * 10.1.7, 10.1.8                                               *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * See ERROR DESCRIPTION.                                       *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  

Problem conclusion

• The Kerberos authentication is not working reliable to run
  backup operations. For that reason this method can not used as
  valid  option when connecting to Windows Servers, and is not
  supported by IBM Spectrum Protect Plus.
  
  The topics in the IBM Spectrum Protect Plus Installation and
  Users Guide and IBM Docs were updated to remove the statements
  concerning Kerberos in the File Indexing and Restore
  requirements and SQL Server requirements topics.  Additionally,
  the Adding SQL application server and Adding Oracle application
  server topics were updated to remove the misleading information.
  The following will be updated after the next refresh from IBM
  for version 10.1.8:
  https://www.ibm.com/docs/en/spp/10.1.8?topic=requirements-micros
  oft-sql-server
  https://www.ibm.com/docs/en/spp/10.1.8?topic=requirements-file-i
  ndexing-restore
  https://www.ibm.com/docs/en/spp/10.1.8?topic=server-adding-sql-a
  pplication
  https://www.ibm.com/docs/en/spp/10.1.8?topic=databases-sql-serve
  r
  https://www.ibm.com/docs/en/spp/10.1.8?topic=oracle-adding-appli
  cation-server
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels