IZ01646: ORACLE GATEWAY AUTHENTICATION FAILURE FOR OBJECT SERVER IN SECURE MODE WITH PAM AUTHENTICATED USER

APAR status

• Closed as fixed if next.

Error description

• Oracle gateway receives authentication failure from the object
  server if the object server runs in secure mode and the user is
  is PAM enabled.
  
  There is no problem logging into the object server directly via
  nco_sql using the Oracle gateway Sec.Password and Sec.UserName.
  
  Omnibus version: 7.1 with Fixpack 2
  Oracle GW version: 1.0.1986
  
  Oracle gateway log file:
  07/16/07 09:44:35: Error: E-UNK-000-000: Sybase: Error
  20000/0/0: From Server 'NOS' - Line 0, No error
  
  07/16/07 09:44:35: Error: E-UNK-000-000: Sybase: CS-Library
  error 4/1/4/44 - ct_connect(): protocol specific layer: external
  error: The attempt to connect to the server failed.
  
  Oracle gateway login properties:
  Sec.UserName : 'CFM_system_user'
  Sec.Password     : 'CECNAOBICDFMCICDCOGBGAFB'
  
  Object server log file:
  07/16/07 10:47:21: Error: E-SEC-102-033: User authentication of
  user 'CFM_system_user', has failed. [9][Authentication failed]
  07/16/07 10:47:21: Debug: D-SEC-105-001: Authentication of user
  'CFM_system_user': Failed.
  07/16/07 10:47:21: Information: I-SEC-104-003: Cannot
  authenticate user "CFM_system_user" via PAM. PAM Error =
  'Authentication failed'.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: Gateway for Oracle users connecting to an    *
  *                 ObjectServer using secure login and PAM      *
  *                 using some LDAP server configurations.       *
  ****************************************************************
  * PROBLEM DESCRIPTION: When attempting to connect to the       *
  *                      Object|Server the gateway uses          *
  *                      incorrect encryption algorithm fo       *
  *                      passwords. These encrypted passwords    *
  *                      are not recognised and so connection    *
  *                      attempt fails.                          *
  ****************************************************************
  * RECOMMENDATION:                                              *
  *                                                              *
  ****************************************************************
  When attempting to connect to the Object|Server the gateway
  uses incorrect encryption algorithm fo passwords. These
  encrypted passwords are not recognised and so connection
  attempt fails.
  

Problem conclusion

Temporary fix

Comments

• Limited Availability: contact support. Date of Release:
  30/9/2007
  
  Date of Release: 09/30/07 Fix Pack Name: gateway-nco-g-oracle
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Modules/Macros

•    NETCOOL
  

Fix information

Applicable component levels

• R100 PSY

     UP