onpassword utility related to Connection Mnager.
A user running Connection Manager (installed from CSDK 4.10 on a separate Windows host) tried to encrypt the password file with 'onpassword -k secretkey -e ...' and got "ICC library load failed / Failed to initialise ICC context." Respondents explained that onpassword (and encrypted communication) depends on IBM GSKit, which supplies the encryption libraries; he had none installed, and no gskit.log existed under $INFORMIXDIR/tmp. One poster noted APAR IT18763, where CSDK 4.10.FC8 shipped with the wrong GSKit version, and pointed to a blog post with a link for downloading the correct/latest GSKit separately as the fix. No confirmation from the original poster is recorded.
Auto-generated by DrWatson from the posts below — may be imperfect; read the full thread.
Encrypt the password file with the onpassword utility and an encryption key. I Used a text editor to create an ASCII text file(password.txt) containing the server names, user names, and passwords for all servers in the cluster.(on the host where CM is running). Eg. #Dbserver name dbserver alias username password ol_informix1210 ol_informix1210 informix admin@123 secondary secondary informix admin@123 Trying to Encrypt the password file with the onpassword utility, specifying the key name and the password file name: ( on the host where CM is running) onpassword -k secretkey -e D:\\\\informixCSDK\\\\tmp\\\\password.txt I am getting error: ICC library load failed. Failed to initialise ICC context. I am not able to find the reason for this error. Could anyone help me on this
IBM GSKit installed on this box? If yes, I'd assume a GSKit version problem. Which Informix products have you installed there? From: "MUKESH TANUKU" <mukeshbt1328@gmail.com> To: ids@iiug.org Date: 07/19/2017 03:28 PM Subject: onpassword utility related to Connection Mnager. [39604] Sent by: ids-bounces@iiug.org Encrypt the password file with the onpassword utility and an encryption key. I Used a text editor to create an ASCII text file(password.txt) containing the server names, user names, and passwords for all servers in the cluster.(on the host where CM is running). Eg. #Dbserver name dbserver alias username password ol_informix1210 ol_informix1210 informix admin@123 secondary secondary informix admin@123 Trying to Encrypt the password file with the onpassword utility, specifying the key name and the password file name: ( on the host where CM is running) onpassword -k secretkey -e D:\\\\informixCSDK\\\\tmp\\\\password.txt I am getting error: ICC library load failed. Failed to initialise ICC context. I am not able to find the reason for this error. Could anyone help me on this ******************************************************************************* Forum Note: Use "Reply" to post a response in the discussion forum.
Mukesh, look for the gskit.log under $INFORMIXDIR/tmp and see if the gskit was installed successfully. Mark
Dear Mark, I did not find any gskit.log file. As a part of HDR automatic fail-over, I have installed Connection manager from CSDK 4.10 version. (on Windows machine) Installed on separate host where database and application servers are not installed. After all the configurations settings are done for CM, need to encrypt the password file using onpassword while doing this I m getting error. I have only installed CM from CSDK on Windows machine thats it. I did nothing else.
I have not installed any GSKit. Just installed CM on separate computer using CSDK.
GSKit implements all the security and encryption, by means of providing required shared objects. So in order to use onpasswd, and later to be able to read encrypted file or use encrypted communication, you'll need to have GSKit installed. From: "MUKESH TANUKU" <mukeshbt1328@gmail.com> To: ids@iiug.org Date: 07/19/2017 06:48 PM Subject: Re: onpassword utility related to Connection Mnage [39611] Sent by: ids-bounces@iiug.org I have not installed any GSKit. Just installed CM on separate computer using CSDK. ******************************************************************************* Forum Note: Use "Reply" to post a response in the discussion forum.
Are you using CSDK 4.10.xC8 by any chance? I logged a PMR that resulted in this APAR recently: IT18763 CSDK 4.10.FC8 SHIPS WITH THE WRONG GSKIT VERSION It's mentioned in this slightly whiny blog post I wrote: https://informixdba.wordpress.com/2017/06/26/passwords-encrypted-over-the-networ k-why-is-this-feature-not-enabled-by-default/ The blog post has a link to where you can download the latest GSKit separately which ought to fix the issue. Ben.