TSM scheduler service and SSL issue

[lallirafn]

Dear fellow TSM users.

I wanted to use SSL secure socket connection between my Nodes and TSM server and set up the SSL exactly as described in the TSM manual. Everything worked fine, exept for my scheduler.

I always got these erros:

Dsmsched.log:
04/01/2010 20:46:29 TSM Backup-Archive Client Version 6, Release 1, Level 3.2
04/01/2010 20:46:29 Querying server for next scheduled event.
04/01/2010 20:46:29 Node Name: changed
04/01/2010 20:46:29 ANS1029E Communication with the TSM server is lost.
04/01/2010 20:46:29 Will attempt to get schedule from server again in 20 minutes.

Dsmerror.log:
04/01/2010 20:46:29 ANS9020E Could not establish a session with a TSM server or client agent. The TSM return code is -364.
04/01/2010 20:46:29 ANS1029E Communication with the TSM server is lost.


Even after extensive search on the web I could not find anything to help me with these erros


After a mad 3-days-long debugging session I found the problem: dsmcert.sth file in the client directory. This file is created by the key import part of the SSL procedure.

You need to change the permissions on this file and allow the local SYSTEM group on the node computer to have read and exexute rights for it.

After that, my schedules run as normal.

Just had to share this somewhere as I could not find anything useful about this error on the web.

 

[GregE]

Thank you for posting that info!

 

[alazarev]

THANK YOU! This post saved us at least 3-days of debugging. Why this permissions issue isn't fixed after a year seem very odd to me. This is only a problem on XP clients, however, on our 7 clients it works just fine without making the permissions change.