#1452 Issue closed: TSM Client 8.1.2 use other files for authentication

Labels: enhancement, support / question, fixed / solved / done

RolfWeilen opened issue at 2017-08-23 13:29:

Relax-and-Recover (ReaR) Issue Template

Fill in the following items before submitting a new issue
(quick response is not guaranteed with free support):

  • rear version (/usr/sbin/rear -V): Relax-and-Recover 2.2 / 2017-07-20

  • OS version (cat /etc/rear/os.conf or lsb_release -a):
    OS_VENDOR=RedHatEnterpriseServer
    OS_VERSION=7

  • rear configuration files (cat /etc/rear/site.conf or cat /etc/rear/local.conf):

# cat /etc/rear/site.conf
AUTOEXCLUDE_MULTIPATH=N
OUTPUT=ISO
#OUTPUT_URL=file:/var/lib/rear/output/
OUTPUT_URL=null
ISO_DEFAULT=manuel
TIMESYNC=NTP
BACKUP=TSM
TSM_RESULT_SAVE=n
TSM_RESULT_FILE_PATH=
USE_DHCLIENT=y
USE_STATIC_NETWORKING=n
# Include only rootvg
ONLY_INCLUDE_VG=(res9910vg00)
# Add an group Entry
GRUB_RESCUE=n
# Warten wir mal 360Tage
WAIT_SECS=31104000
# Login via ssh auf iso
SSH_ROOT_PASSWORD=rear
  • Are you using legacy BIOS or UEFI boot?
    BIOS
  • Brief description of the issue:
    New TSM Client use new file for authentication. The TSM.PWD file no longer exists.
  • Work-around, if any:
    Changed file /usr/share/rear/conf/default.conf
    old: - COPY_AS_IS_TSM=( /etc/adsm/TSM.PWD /opt/tivoli/tsm/client /usr/local/ibm/gsk8* )
    new: - COPY_AS_IS_TSM=( /etc/adsm/TSM.* /etc/adsm/spclicert.* /opt/tivoli/tsm/client /usr/local/ibm/gsk8* )
    or simpler: COPY_AS_IS_TSM=( /etc/adsm /opt/tivoli/tsm/client /usr/local/ibm/gsk8* )

RolfWeilen commented at 2017-08-23 13:40:

new files in /etc/adsm
-rw-rw-rw- 1 root root 80 Aug 23 09:41 spclicert.rdb
-rw-rw-rw- 1 root root 80 Aug 23 09:41 spclicert.crl
-rw------- 1 root root 193 Aug 23 09:41 spclicert.sth
-rw-rw-rw- 1 root root 5080 Aug 23 09:41 spclicert.kdb
-rw------- 1 root root 193 Aug 23 09:41 TSM.sth
-rw-rw-rw- 1 root root 645 Aug 23 09:41 TSM.IDX
-rw-rw-rw- 1 root root 3260 Aug 23 09:41 TSM.KDB

gdha commented at 2017-08-23 15:18:

@RolfWeilen So the work-around COPY_AS_IS_TSM=( /etc/adsm /opt/tivoli/tsm/client /usr/local/ibm/gsk8* ) update in default.conf would fix your issue, right?
@schabrolles Sebastien, I believe you are using TSM also - can you comment on this?

schabrolles commented at 2017-08-23 16:00:

I run TSM 8.1.0, It seems to be new in 8.1.2. https://www.ibm.com/support/knowledgecenter/en/SSEQVQ_8.1.2/client/c_secure_pwd.html

I agree with @RolfWeilen proposal COPY_AS_IS_TSM=( /etc/adsm /opt/tivoli/tsm/client /usr/local/ibm/gsk8* )

I can make a in test 8.1.2 next week when I will be back to the office.

RolfWeilen commented at 2017-08-24 07:32:

Hi
Yes we are using TSM as backup solution. I have tested this change in COPY_AS_IS_TSM with the new tsm client 8.1.2 and it works. If those file are missing you have to run the command dsmc, which will create this files, before run rear recover command. In this case you must now the password from the tsm node.
So we have an workaround for this situation.

schabrolles commented at 2017-09-01 15:21:

@RolfWeilen Changes from #1461 are now merged in master branch.
Could you please test again and confirm it works on your side ?

Thanks again.

RolfWeilen commented at 2017-09-04 14:43:

Hi

Should I install the new master for testing?

Regards
Rolf

Freundliche Grüsse

Rolf Weilenmann | Systemspezialist
Suva | Rösslimattstrasse 39 | 6002 Luzern
041 419 64 79
From: Sébastien Chabrolles [mailto:notifications@github.com]
Sent: Freitag, 1. September 2017 17:21
To: rear/rear rear@noreply.github.com
Cc: Weilenmann Rolf (WRA) rolf.weilenmann@suva.ch; Mention mention@noreply.github.com
Subject: Re: [rear/rear] TSM Client 8.1.2 use other files for authentication (#1452)

@RolfWeilenhttps://github.com/rolfweilen Changes from #1461https://github.com/rear/rear/pull/1461 are now merged in master branch.
Could you please test again and confirm it works on your side ?

Thanks again.

—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHubhttps://github.com/rear/rear/issues/1452#issuecomment-326608893, or mute the threadhttps://github.com/notifications/unsubscribe-auth/ATlO0Ig80ArENewzIEbfHhGDoeqZqkOPks5seCDpgaJpZM4PAA6a.

Disclaimer:

Diese Nachricht und ihr eventuell angehängte Dateien sind nur für den Adressaten bestimmt. Sie kann vertrauliche oder gesetzlich geschützte Daten oder Informationen beinhalten. Falls Sie diese Nachricht irrtümlich erreicht hat, bitten wir Sie höflich, diese unter Ausschluss jeglicher Reproduktion zu löschen und die absendende Person zu benachrichtigen. Danke für Ihre Hilfe.

This message and any attached files are for the sole use of the recipient named above. It may contain confidential or legally protected data or information. If you have received this message in error, please delete it without making any copies whatsoever and notify the sender. Thank you for your assistance.

gdha commented at 2017-09-04 14:55:

@RolfWeilen Yes the master repo contains the fixes.

schabrolles commented at 2017-09-15 15:05:

@RolfWeilen did you find time to test ReaR master branch to confirm if it solves your issue regarding TSM authentication in rescue image ?

jsmeix commented at 2017-09-21 08:02:

Because "no news is good news" I assume that since
https://github.com/rear/rear/pull/1461
is merged it works so that I can close this issue.
If the same issue persists this issue report can be reopened but
new and different issues need new and separated issue reports.

[Export of Github issue for rear/rear.]