JR63208: PASSWORD IS IN CLEAR IN EVENTS EMITTER

Operational Decision Manager V8.10.5.0: Interim Fix 3 for Decision Server
IBM Operational Decision Manager V8.10.5.1 Fix Pack
Operational Decision Manager V8.10.5.0: Interim Fix 3 for Decision Server
IBM Operational Decision Manager V8.10.5.1 Fix Pack
Operational Decision Manager V8.10.4.0: Interim Fix 9 for Decision Server
Operational Decision Manager V8.10.5.0: Interim Fix 3 for Decision Server
IBM Operational Decision Manager V8.10.5.1 Fix Pack
Operational Decision Manager V8.10.4.0: Interim Fix 9 for Decision Server
Operational Decision Manager V8.10.2.2: Interim Fix 20 for Decision Server
IBM Operational Decision Manager for z/OS 8.10.5.1 Fix Pack

APAR status

• Closed as program error.

Error description

• The current Content Event Emitter log shows that the password
  is in clear:
  
  [12/10/20 7:24:51:129 UTC] 00000097
  com.ibm.dba.bai.events.kafka.Transport I Building transport
  with Kafka producer configuration: {security.protocol=SASL_SSL,
  ssl.truststore.type=PKCS12, ssl.enabled.protocols=TLSv1.2, ssl.t
  ruststore.location=/opt/ib
  m/wlp/usr/servers/defaultServer/resou
  rces/security/ibm_customFNCMTrustStore.p12, bootstrap.servers=de
  velopment-kafka-bootstrap-event-streams.apps.ocp45.tec.uk.ibm.co
  m:443, ssl.truststore.password=passw0rd,
  ssl.endpoint.identification.algorithm=, value.serializer=org.apa
  ch
  e.kafka.common.serialization.StringSerializer, sasl.jaas.conf
  ig=org.apache.kafka.common.security.scram.ScramLoginModule
  required username="eventstreams-for-icp4a-kafka-user"
  password="qjYhITWzQz2k";, retries=10, key.serializer=org.apache.
  kafka.common.serialization.StringS
  erializer,
  sasl.mechanism=SCRAM-SHA-512, acks=all}
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * Users working with events emitter.                           *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * The current Content Event Emitter log shows that the         *
  * password                                                     *
  * is in clear:                                                 *
  *                                                              *
  * [12/10/20 7:24:51:129 UTC] 00000097                          *
  * com.ibm.dba.bai.events.kafka.Transport I Building transport  *
  * with Kafka producer configuration:                           *
  * {security.protocol=SASL_SSL,                                 *
  * ssl.truststore.type=PKCS12, ssl.enabled.protocols=TLSv1.2,   *
  * ssl.t                                                        *
  * ruststore.location=/opt/ib                                   *
  * m/wlp/usr/servers/defaultServer/resou                        *
  * rces/security/ibm_customFNCMTrustStore.p12,                  *
  * bootstrap.servers=de                                         *
  * velopment-kafka-bootstrap-event-streams.apps.ocp45.tec.uk.ib *
  * m.co                                                         *
  * m:443, ssl.truststore.password=passw0rd,                     *
  * ssl.endpoint.identification.algorithm=,                      *
  * value.serializer=org.apa                                     *
  * ch                                                           *
  * e.kafka.common.serialization.StringSerializer,               *
  * sasl.jaas.conf                                               *
  * ig=org.apache.kafka.common.security.scram.ScramLoginModule   *
  * required username="eventstreams-for-icp4a-kafka-user"        *
  * password="qjYhITWzQz2k";, retries=10,                        *
  * key.serializer=org.apache.                                   *
  * kafka.common.serialization.StringS                           *
  * erializer,                                                   *
  * sasl.mechanism=SCRAM-SHA-512, acks=all}                      *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  

Problem conclusion

• No clear password in the log.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  CLOUD PAK FOR A

• Fixed component ID

  5737I2300

Applicable component levels

• RK00 PSY

     UP