IT33833: CTGGA2296 ENABLE LOG BACKUP FAILED FOR MICROSOFT SQL SERVER DATABASE

APAR status

• Closed as program error.

Error description

• Enabling the log backups for a Microsoft SQL Server database
  might fail.
  
  The job log will display :
  
  DETAIL,,<timestamp>,2,CTGGE1023,[<SQLServerAddress>] Scheduling
  log backup task for database [<DBName>].
   ERROR,,<timestamp>,2,CTGGE1046,[<SQLServerAddress>] Last
  transaction log backup for [<DBName>] on [<InstanceName>]
  occurred at <timestamp> and failed.
  ...
   ERROR,,<timestamp>,2,CTGGA2296,Enable log backup failed for
  database <DBName>:Last run for database [<DBName>] failed.
  
  The command.log found in the job log bundle log will reveal the
  root cause :
  
  [<timestamp>] JobLog  agent_sql_log: <CTGGE1015> Backing up the
  transaction log.
  [<timestamp>] Debug <xxxx> Thread-<yy> agent_sql_log: Checking
  for existing db backup of db [<DBName>] on instance
  [<InstanceName>]
  [<timestamp>] Error <xxxx> Thread-<yy> agent_sql_log:
  <CTGGE1049> The log backup failed for database [<DBName>] on
  instance [<InstanceName>], error [ERROR [08001] [Microsoft][ODBC
  SQL Server Driver][Shared Memory]SSL Security error
  ERROR [01000] [Microsoft][ODBC SQL Server Driver][Shared
  Memory]ConnectionOpen (SECDoClientHandshake()).
  ERROR [01S00] [Microsoft][ODBC SQL Server Driver]Invalid
  connection string attribute].
  [<timestamp>] Debug <xxxx> Thread-<yy> agent_sql_log: Full
  transaction log backup error:
  System.Data.Odbc.OdbcException (0x80131937): ERROR [08001]
  [Microsoft][ODBC SQL Server Driver][Shared Memory]SSL Security
  error
  ERROR [01000] [Microsoft][ODBC SQL Server Driver][Shared
  Memory]ConnectionOpen (SECDoClientHandshake()).
  ERROR [01S00] [Microsoft][ODBC SQL Server Driver]Invalid
  connection string attribute
     at System.Data.Odbc.OdbcConnection.HandleError(OdbcHandle
  hrHandle, RetCode retcode)
     at System.Data.Odbc.OdbcConnectionOpen..ctor(OdbcConnection
  outerConnection, OdbcConnectionString connectionOptions)
     at
  System.Data.Odbc.OdbcConnectionFactory.CreateConnection(DbConnec
  tionOptions options, DbConnectionPoolKey poolKey, Object
  poolGroupProviderInfo, DbConnectionPool pool, DbConnection
  owningObject)
     at
  System.Data.ProviderBase.DbConnectionFactory.CreateNonPooledConn
  ection(DbConnection owningConnection, DbConnectionPoolGroup
  poolGroup, DbConnectionOptions userOptions)
     at
  System.Data.ProviderBase.DbConnectionFactory.TryGetConnection(Db
  Connection owningConnection, TaskCompletionSource`1 retry,
  DbConnectionOptions userOptions, DbConnectionInternal
  oldConnection, DbConnectionInternal& connection)
     at
  System.Data.ProviderBase.DbConnectionInternal.TryOpenConnectionI
  nternal(DbConnection outerConnection, DbConnectionFactory
  connectionFactory, TaskCompletionSource`1 retry,
  DbConnectionOptions userOptions)
     at
  System.Data.ProviderBase.DbConnectionInternal.OpenConnection(DbC
  onnection outerConnection, DbConnectionFactory
  connectionFactory)
     at System.Data.Odbc.OdbcConnection.Open()
     at SqlLogBackup.SqlController.BackupVdiLog(DatabaseInstanceEx
  database)
  ...
  [<timestamp>] Error <xxxx> Thread-<yy> agent_sql_log:
  <CTGGE1052> Log backup failed for database [<DBName>] on
  instance [<InstanceName>]. Error: 0x80131500
  [<timestamp>] Debug <xxxx> Thread-<yy> agent_sql_log: Log Backup
  Exception full exception:
   SqlLogBackup.GenericSqlControllerException: Exception of type
  'SqlLogBackup.GenericSqlControllerException' was thrown.
     at SqlLogBackup.SqlLogBackup.BackupLog(DatabaseInstanceEx
  database)
  [<timestamp>] Debug <xxxx> Thread-<yy> agent_sql_log: Released
  mutex of database <DBName>
  [<timestamp>] Debug <xxxx> Thread-<yy> agent_sql_log: Result of
  DB: [<DBName>]; [FAILURE]
  
  In the Microsoft SQL server system event log the following
  recurring messages will be seen :
  Error  <timestamp>  Schannel  <zzzz>  None  An SSL 3.0
  connection request was received from a remote client
  application, but none of the cipher suites supported by the
  client application are supported by the server. The TLS
  connection request has failed.
  
  This happens because TLSv1.2 protocol is enforced and the
  Spectrum Protect Agent uses SSLv3.
  
  IBM Spectrum Protect Plus Versions Affected:
  IBM Spectrum Protect Plus 10.1.x
  
  Initial Impact: Medium
  
  Additional Keywords: SPP, SPPLUS, TS003968406, SSL, TLS,
  security
  

Local fix

• If the in-house security rules allow it, enable SSLv3 on the
  Microsoft SQL server.
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * IBM Spectrum Protect Plus level 10.1.5 and 10.1.6            *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * See ERROR DESCRIPTION                                        *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Apply fixing level when available. This problem is currently *
  * projected to be fixed IBM Spectrum Protect Plus level 10.1.6 *
  * ifix2. and 10.1.7. Note that this is subject to change at    *
  * the discretion of IBM.                                       *
  ****************************************************************
  

Problem conclusion

• ODBC driver selection is enhanced to use the latest version of
  the driver on the system.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  SP PLUS

• Fixed component ID

  5737SPLUS

Applicable component levels