Service Manager Command Line Interface, UCYBSMCL, on AIX fails when password encryption is activated

Products

• CA Automic Workload Automation - Automation Engine

Issue/Introduction

Error Message :
ERROR 3 Protocol violation (1879048192)

If the password encryption is done on an Automation Engine (AE) system on a Windows instance and copied to a UNIX ucysmgr.ini file the above error message is displayed and the authentication in the Service Manager Interface will fail when the password encryption is activated on UNIX no matter how it is used to interact with the processes, either using the command line (CLI) program, UCYBSMCL, or through the Service Manager dialog.
 
If a password with no encryption is used it works fine.  Also, if AE and the encryption tool are installed on Windows and the generated output is added directly as such to the Service Manager Configuration file it will work.

It only fails when the password encryption is performed on a Windows instance and the encrypted password is copied to a UNIX ucysmgr.ini file.

Investigation
 
From an AE Windows instance encrypt the password and copy the encrypted password to a UNIX ucysmgr.ini file.

On the UNIX machine run the following command from the CLI:
 

./ucybsmcl -c START_PROCESS -h <computer name> -n <phrase> -s <service name> -p <password>
 

NOTE:  Replace items in between <> with valid entries for the computer name, phrase, service name and password.

Results
 
Actual:  The Error listed above is returned in the Interface.
 
Expected:  The service should start.


 

Environment

OS: Unix
OS Version: N/A

Cause

Cause type:
By design
Root Cause: The problem is linked to a difference between the character sets used in Windows and in UNIX.

Resolution

The encrypted password is generated on an Automaton Engine (AE) instance using:

UCYBCRYP[.EXE] -p -n <Password>

This will generate a string similar to this output:

"--101A791A1B0D6D6F59"

Copy this string without the two beginning dash characters (--) .

On the UNIX Host, edit the Service Manager Configuration file, ucsmgr.ini, and add the following character string:

[GLOBAL]
........
password=­­101A791A1B0D6D6F59

Now add the two missing dashes "--" manually as follows:

password=­­--101A791A1B0D6D6F59
 

Save the file and restart the Service Manager process to activate the password encryption.

 

Fix Status: No Fix

Fix Version(s):
N/A

Additional Information

Workaround :
N/A