Fixes are available
Rational ClearQuest Fix Pack 17 (8.0.1.17) for 8.0.1
Rational ClearQuest Fix Pack 3 (9.0.1.3) for 9.0.1
Rational ClearQuest Fix Pack 18 (8.0.1.18) for 8.0.1
Rational ClearQuest Fix Pack 4 (9.0.1.4) for 9.0.1
Rational ClearQuest Fix Pack 5 (9.0.1.5) for 9.0.1
Rational ClearQuest Fix Pack 19 (8.0.1.19) for 8.0.1
Rational ClearQuest Fix Pack 6 (9.0.1.6) for 9.0.1
Rational ClearQuest Fix Pack 20 (8.0.1.20) for 8.0.1
Rational ClearQuest Fix Pack 21 (8.0.1.21) for 8.0.1
Rational ClearQuest Fix Pack 7 (9.0.1.7) for 9.0.1
Rational ClearQuest Fix Pack 22 (8.0.1.22) for 8.0.1
Rational ClearQuest Fix Pack 8 (9.0.1.8) for 9.0.1
Rational ClearQuest Fix Pack 9 (9.0.1.9) for 9.0.1
Rational ClearQuest Fix Pack 23 (8.0.1.23) for 8.0.1
Rational ClearQuest Fix Pack 24 (8.0.1.24) for 8.0.1
Rational ClearQuest Fix Pack 25 (8.0.1.25) for 8.0.1
APAR status
Closed as program error.
Error description
CRMMD1826E LDAP operation 'ratl_ldap_ssl_environment_init' failed with error code 408. Description: Unknown error. Validating LDAP failed. Newer GSkit, for example from ikeyman (in IHS 8.5.5.12) is generating the ldapkey.sth file as a v2 stash encryption file because it is using gskit 8.0.50.79 which supports v2 stash encryption. ClearQuest is using a version of GSkit that does not support this newer stash file format, making it difficult to update the keystore without using a host with older gskit.
Local fix
Problem summary
**************************************************************** * USERS AFFECTED: * * ClearQuest * **************************************************************** * PROBLEM DESCRIPTION: * * Secure LDAP connections may fail with the error message * * "CRMMD1826E LDAP operation 'ratl_ldap_ssl_environment_init' * * failed with error code 408. Description: Unknown error" if * * using v2 stash encryption files. These v2 stash files are * * generated with the newer versions of the GSKit such as * * 8.0.50.79 which is shipped with IBM HTTP server 8.0.50.79. * **************************************************************** * RECOMMENDATION: * ****************************************************************
Problem conclusion
A fix is available in ClearQuest 8.0.1.17 and 9.0.1.3. ClearQuest is now shipped with version 8.0.50.88 of the GSKit which supports the v2 stash encryption file format.
Temporary fix
Comments
APAR Information
APAR number
PI94189
Reported component name
CLEARQUEST WIN
Reported component ID
5724G3600
Reported release
901
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2018-02-22
Closed date
2018-05-04
Last modified date
2018-05-04
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Fix information
Fixed component name
CLEARQUEST WIN
Fixed component ID
5724G3600
Applicable component levels
R901 PSY
UP
Document Information
Modified date:
18 October 2021