IZ40362: HACMP PASSWD UTILITY FAILS WHEN LONG PASSWD ALGORITHM IS ENABLED

A fix is available

Subscribe

You can track all active APARs for this component.

APAR status

  • Closed as program error.

Error description

  • Loadable Password Algorithm (LPA) was introduced with
    APAR IY97798 in AIX 5.3 TL07. HACMP password utility
    (clpasswd) is unable to handle passwords generated by
    a LPA (e.g. ssha256).
    
    clpasswd utility is corrupting the encrypted password
    when distributing to the nodes, so that a login fails.
    

Local fix

Problem summary

  • LPA allows passwords longer than the traditional limit of 8
    characters.  When C-SPOC propogates the encrypted string
    generated for those longer passwords, the encrypted string
    will be truncated resulting in corruption of the passwords
    on other nodes in the cluster.
    

Problem conclusion

  • The following text will be added to the release_notes file:
    
    HACMP cluster-wide C-SPOC password administration does not
    support use of the feature allowing passwords longer than 8
    characters which became available with the Loadable Password
    Algorithm as part of AIX 53 TL 7.
    

Temporary fix

Comments

APAR Information

  • APAR number

    IZ40362

  • Reported component name

    HACMP VER 5

  • Reported component ID

    5765F6200

  • Reported release

    530

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Submitted date

    2008-12-18

  • Closed date

    2008-12-18

  • Last modified date

    2009-05-22

  • APAR is sysrouted FROM one or more of the following:

    IZ30309

  • APAR is sysrouted TO one or more of the following:

    U826877

Fix information

  • Fixed component name

    HACMP VER 5

  • Fixed component ID

    5765F6200

Applicable component levels

  • R530 PSY U826877

       UP09/05/22 I 1000



Rate this page:

(0 users)Average rating

Add comments

Document information


More support for:

PowerHA

Software version:

530

Operating system(s):

AIX

Reference #:

IZ40362

Modified date:

2009-05-22

Translate my page

Machine Translation

Content navigation