SHIFT

--- Sjoerd Hooft's InFormation Technology ---

User Tools

Site Tools


Sidebar

Recently Changed Pages:

View All Pages


View All Tags


LinkedIn




WIKI Disclaimer: As with most other things on the Internet, the content on this wiki is not supported. It was contributed by me and is published “as is”. It has worked for me, and might work for you.
Also note that any view or statement expressed anywhere on this site are strictly mine and not the opinions or views of my employer.


Pages with comments

View All Comments

tivolindsbackup

Tivoli NDS Backup

Environment

Upgraded to eDirectory 8.8 sp2 ftf2 (ds version 20216.62) Tivoli TSM client is 5.5.0.1 Everything was backing up fine prior to the upgrade. After the upgrade, when TSM tries to backup NDS, it errors out and asks for a username/password. Error: ~ANS1874E error

Explanation

TSM is unable to deal with case-sensitive passwords. It stores all passwords in uppercase in the TSM.PWD file. When you have a UP policy on the TSM account that requires case-sensitive passwords, this can cause TSM to fail its authentication. Assuming you have your UP policy keep the NDS password and UP password in sync on a user account, the authentication can succeed if the NDS password is checked first because the NDS password is also not case-sensitive. eDirectory 8.7 will use the NDS password if it exists on a user account and check the UP second. eDirectory 8.8 will prefer the UP over the NDS password which is why things started to fail after the upgrade and because I was requiring case-sensitive passwords.

Workaround

A temporary fix is to create a special UP policy for your TSM accounts that doesn't require case-sensitivity. IBM is looking into the possibility of fixing the TSM client so that passwords are stored in a case-sensitive format but it's unsure when, if ever, that would be released. Another temporary fix would be changing the password to only uppercase characters.

Additional Info

Thinking the tsm.pwd file was corrupted, I deleted and proceeded to re-setup the tsm client. Using DSMC, I found the following behavior:

  • Using “q node”
    • Successfully finds nodes schedule
  • Using “q tsa”
    • Asked for name/password.
    • Successfully logged in.
    • Successfully saved password to tsm.pwd.
    • Successfully shows TSAFS stats.
  • Using “q tsa nds”
    • Asks for name/password. Will not accept the same credentials I entered in the previous step. Errors out with: “~ANS1874E Login denied to ~NetWare Target Service Agent 'TREE name'.”
  • I've verified that the account can log in using a Novell Client.
  • Verified that the account is a trustee of ROOT with browse rights.
You could leave a comment if you were logged in.
tivolindsbackup.txt · Last modified: 2021/09/23 22:25 (external edit)