problem with TSM, possably security on ports

[Alan Casey]

Running hp-ux 11.0
I am having a problem with Tivoli Storage Agent, it doesnt seem to be able to communicate over tcp/ip with the tivoli server.
The session just hangs on the hpux server (client server). This is a new install of tivoli and I think it may be a security problem.

I have added the ipaddress of the tivoli server to the hosts.allow but this didnt seem to do the trick. Any ideas?

[Matti_Kurkela · Accepted solution]

Are you sure the connection attempt even reaches the Tivoli server? The symptom of the connection just hanging is typical when there's a firewall in the way that's configured to accept some traffic and silently drop the rest to the bit-bucket.

/etc/hosts.allow is effective only if the access to the server program is controlled by using TCP-Wrapper (tcpd) in /etc/inetd.conf (or equivalent) OR the server program is compiled to use "libwrap" library. If neither of these is true, /etc/hosts.allow has no effect on the server program.

On HP-UX inetd, there is a similar access control mechanism which is controlled by /var/adm/inetd.sec. If the Tivoli services are listed in /etc/inetd.conf on the server, check that first. It can be modified using SAM: the path is Networking and Communications -> System Access -> Internet Services.

If the Tivoli server does not have anything Tivoli-related in /etc/inetd.conf, look for access control settings in Tivoli server software.

[Alan Casey]

Thanks Matti, Tivoli doesnt have any entries in /etc/inetd.conf so I cant see anything for it in sam internet security.

[Kurt Beyers.]

Alan,

By default the port 1500 is used for communication between the Storage Agent and the TSM server.

Was the conifguration of the SA allright? Does a LAN backup using the 'dsm' BA GUI works?

Kurt