JR21477: INSTANCE CRASH IN THE ICC LIBRARIES WHEN ENCRYPTION AND LDAP ARE USED

DB2 UDB Version 8.1 FixPak 16 (also known as Version 8.2 FixPak 9 )

APAR status

• Closed as program error.

Error description

• This APAR addresses an instance crash (trap, abend) that
  can occur when you are using LDAP directory support in DB2 UDB
  along with an authentication type of server_encrypt.
  The crash occurs in the IBM Crypto for C (ICC) libraries.  A
  example of the functions you will see in the trap file is as
  follows:
  
  ... offset: 00000023 in <__VEC_memcpy> <NotFound:-1>
  ... offset: 00000118 in <_cryptDecryptInit>
  <cryptBlockCipherICC.C:1261>
  ... offset: 00000331 in
  <?sqlexSlsServerEncryptAuthenticate@@YAHPAUUCintfc@@HPAI@Z>
  <sqlexsls.C:1622>
  ... offset: 000002EC in
  <?sqlexGwSecchk@@YAHPAUSQLEX_GW_WORK_AREA_T@@_N@Z>
  <sqlexsmg.C:633>
  ... offset: 00000705 in
  <?sqlexGwAuthenticate@@YAHPAUUCintfc@@@Z> <sqlexsmg.C:1427>
  

Local fix

• Disable the LDAP directory support.  For details, refer to http:
  //publib.boulder.ibm.com/infocenter/db2help/topic/com.ibm.db2.ud
  b.doc/admin/t0006054.htm
  

Problem summary

• USERS AFFECTED: All
  PROBLEM DESCRIPTION:
  If this APAR is not applied, your DB2 UDB instance can crash
  (trap, end abnormally, abend) while using the LDAP database
  directory features along with an authentication type of
  SERVER_ENCRYPT.
  PROBLEM SUMMARY: See the Error Description for an example of the
  call stack that typifies the problem.
  

Problem conclusion

• Problem was first fixed in Version 8.1 FixPak 11 (s060120).
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  DB2 CPE WINDOWS

• Fixed component ID

  5724B5601

Applicable component levels

• R810 PSY

     UP

• R820 PSY

     UP