LIBGWT Messages 1600-1699
1601
INFO: Only Triple-DES is supported for session authentication by ldom..
Description
The environmental variable GWT_SNP_3DES is set to "YES" for local GWTDOMAIN gateway ldom
. The local GWTDOMAIN gateway ldom
will only accept or establish connection with remote GWTDOMAIN gateway that supports using Triple-DES for session authentication. The default value for "GWT_SNP_3DES" is "NO".
Action
No action is required, this is informational. If this is not what you want then change the environmental variable value to NO.
1602
ERROR: Triple-DES is required by ldom but remote domain <.rdom>. does not support it, outbound connection request rejected!
Description
The local GWTDOMAIN gateway ldom
requires Triple-DES for session authentication, but the remote GWTDOMAIN gateway rdom
is running on an older version and does not support it. This happens when SECURITY is configured with either APP_PW or DM_PW, and local GWTDOMAIN gateway ldom
is the connection initiator.
Action
Either upgrade the remote GWTDOMAIN Tuxedo installation to a release or patch level that supports Triple-DES, or change the configuration to NONE, or change the environmental variable "GWT_SNP_3DES" to "NO".
1603
ERROR: Triple-DES is required by ldom but remote domain <.rdom>. does not support it, inbound connection request rejected!
Description
The local GWTDOMAIN gateway ldom
requires Triple-DES for session authentication, but the remote GWTDOMAIN gateway rdom
is running on an older version and does not support it. This happens when SECURITY is configured with either APP_PW or DM_PW, and local GWTDOMAIN gateway ldom
is the connection responder.
Action
Either upgrade the remote GWTDOMAIN Tuxedo installation to a release or patch level that supports Triple-DES, or change the SECURITY configuration to NONE, or change the environmental variable "GWT_SNP_3DES" to "NO".
1604
WARN: TDomain Session Negotiation timed out by ldomid, SNP state <.snp_state>.; close connection to remote domain<rdomid, rdom_naddr>!
Description
It took longer than expected to complete Session Negotiation for connection between local GWTDOMAIN gateway ldomid
and remote GWTDOMAIN rdomid
. The host IP address of the remote GWTDOMAIN gateway is rdom_naddr
. The last SNP state for that connection is snp_state
.
Action
The administrators have to checkout possible connection flooding attack. If not being attacked then check out why the communication between the two gateway is slow, and correct the problem accordingly. Or may be need to make the SNP timeout value larger or disable it. By default there is no SNP timeout, it has to be enabled through environmental "GWT_SNP_TIMEOUT".
1605
WARN: TDomain Session Negotiation State timed out by ldomid, SNP state <.snp_state>.; close connection to remote domain<rdomid, rdom_naddr>!
Description
It took longer than expected to transition from current Session Negotiation state to the next Session Negotiation state for connection between local GWTDOMAIN gateway ldomid
and remote GWTDOMAIN rdomid
. The host IP address of the remote GWTDOMAIN gateway is rdom_naddr
. The last SNP state for that connection is snp_state
.
In the case of environment variable GWT_VALIDATE_HOST is not set to "YES", and GWT_ALLOW_FROM_ANY_HOST is set to NO, GWTDOMAIN will accept any incoming connections. This will open a door of DOS attack if GWTDOMAIN doesn't run in a secure environment.
Action
The administrators have to checkout possible connection flooding attack. If not being attacked then check out why the communication between the two gateway is slow, and correct the problem accordingly. Or may be need to make the SNS timeout value larger or disable it. By default there is no SNS timeout, it has to be enabled through environmental "GWT_SNS_TIMEOUT".
1606
WARN: Both password paris expired for TDomain session <.ldomid, rdomid>., open connection failed.
Description
Both password pairs for TDomain session between local GWTDOMAIN gateway ldomid
and remote GWTDOMAIN gateway rdomid
are expired. There is no more valid password pair can be used to do TDomain Session Authentication.
Action
Update the password pair information either using dmadmin
utility or using DMIB
.
See Also
DMIB
(5), dmadmin
(1)
1607
WARN: The only password pair expired for TDomain session <.ldomid, rdomid>., open connection failed.
Description
There is only one password pair configured for TDomain session between local GWTDOMAIN gateway ldomid
and remote GWTDOMAIN gateway rdomid
, and it already expired. There is no more valid password pair can be used to do TDomain Session Authentication.
Action
Update the password pair information either using dmadmin
utility or using DMIB
.
See Also
DMIB
(5), dmadmin
(1)
1608
ERROR: Password pair failed to decrypt authenticator for TDomain session <.ldomid, rdomid>., error code ec, open connection failed.
Description
There is only one password pair configured for TDomain session between local gateway ldomid
and remote gateway rdomid
, and it failed to decrypt the authenticator.
Action
Update the password pair information either using dmadmin
utility or using DMIB
. And check for potential illegal access from the network.
1609
ERROR: Both password pairs failed to decrypt authenticator for TDomain session <.ldomid, rdomid>., error code ec, open connection failed.
Description
There are two password pairs configured for TDomain session between local gateway ldomid
and remote gateway rdomid
, and both failed to decrypt the authenticator.
Action
Update the password pair information either using dmadmin
utility or using DMIB
. And check for potential illegal access from the network.
1610
INFO: Session authentication succeeded using password pair pwd for TDomain session <.ldomid, rdomid>., error code ec, they will expire at e_date.
Description
The session authentication succeeded for TDomain session between local gateway ldomid
and remote gateway rdomid
. The password pair number is pwd
, and it will expire at the date e_date
.
Action
No action is required.
1611
INFO: Log password pair approaching expiration is enabled for ldom.
Description
The feature to log password pair about to expired is enabled. This feature is enabled through environmental variable "GWT_SNP_LOG_WARN_PW_EXPIRING". The default value is 0 which means no logging of this message.
Action
No action is required.
1612
INFO: Validate host feature is enabled by ldom.
Description
This feature validates the host address for the incoming connection request. It is enabled by set an environmental variable "GW_VALIDATE_HOST" to "YES". By default this feature is disabled. When it is enabled GWTDOMAIN gateway will check the host IP address to see whether it is from one of the host configured.
Action
No action is required.
1613
INFO: Session Negotiation Protocol timeout set to sec seconds is being envorced by ldom.
Description
The environmental variable GWT_SNP_TIMEOUT is set to a value between 0 and MAXINT
. By default the SNP timeout is disabled, if enabled then all the session negotiation must be complete before the timer expires.
Action
No action is required.
1614
WARN: Session Negotiation Protocol timeout is disabled by ldom.
Description
The SNP timeout is explicitly disabled by setting GWT_SNP_TIMEOUT
to negative value.
Action
No action is required.
1615
INFO: Session Negotiation State timeout set to sec seconds is being envorced by ldom.
Description
The environmental variable GWT_SNS_TIMEOUT
is set to a value between 0 and MAXINT
. By default the SNS timeout is disabled, if enabled then session negotiation internal must transition to one of the possible next states before the timer expires.
Action
No action is required.
1618
INFO: Invalid host access logging is explicitly turned off by ldom!.
Description
When validate host feature is enabled any accesses from remote hosts that are not configured there will be a USERLOG entry in the ULOG. To disable this feature user can set an environmental variable GWT_SNP_LOG_INVALID_IP
to YES
.
Action
No action is required.
1619
ERROR: No password pair defined for TDomain session <.ldomid, rdomid>..
Description
There is no password pair defined for TDomain session between local gateway ldomid
and remote gateway rdomid
.
Action
Add the password pair information either using dmadmin
utility or using DMIB
.
See Also
DMIB
(5), dmadmin
(1)
1620
ERROR: Unable to encrypt authenticator for remote domain <.rdomid>..
Description
Failed to encrypt authenticator.
Action
Contact your BEA Tuxedo Customer Support.
1621
ERROR: Unable to encrypt authenticator for remote domain <.rdomid>..
Description
Failed to encrypt authenticator.
Action
Contact your BEA Tuxedo Customer Support.
1622
ERROR: Unable to create encryption key for remote domain <.rdomid>..
Description
Unable to create encryption key.
Action
Contact your BEA Tuxedo Customer Support.
1623
ERROR: Unable to create encryption key for remote domain <.rdomid>..
Description
Unable to create encryption key.
Action
Contact your BEA Tuxedo Customer Support.
1624
ERROR: Unable to create encryption key for remote domain <.rdomid>..
Description
Unable to create encryption key.
Action
Contact your BEA Tuxedo Customer Support.
1625
ERROR: Unable to create encryption key for remote domain <.rdomid>..
Description
Unable to create encryption key.
Action
Check for other error message and handle the error as described in those error messages. If there is no other error message contact your BEA Tuxedo Customer Support.
1626
ERROR: Unable to create encryption key for remote domain <.rdomid>..
Description
Unable to create encryption key.
Action
Contact your BEA Tuxedo Customer Support.
1627
ERROR: Unable to encrypt authenticator for remote domain <.rdomid>..
Description
Failed to encrypt authenticator.
Action
Contact your BEA Tuxedo Customer Support.
1628
ERROR: Unable to encrypt authenticator for remote domain <.rdomid>..
Description
Failed to encrypt authenticator.
Action
Contact your BEA Tuxedo Customer Support.
1629
ERROR: Unable to create encryption key for remote domain <.rdomid>..
Description
Unable to create encryption key.
Action
Contact your BEA Tuxedo Customer Support.
1630
ERROR: Unable to encrypt authenticator for remote domain <.rdomid>..
Description
Failed to encrypt authenticator.
Action
Contact your BEA Tuxedo Customer Support.
1631
ERROR: Unable to create encryption key for remote domain <.rdomid>..
Description
Unable to create encryption key.
Action
Contact your BEA Tuxedo Customer Support.
1632
ERROR: Unable to create decryption key for remote domain <.rdomid>..
Description
Unable to create decryption key.
Action
Contact your BEA Tuxedo Customer Support.
1633
ERROR: Unable to decrypt authenticator for remote domain <.rdomid>..
Description
Failed to decrypt authenticator.
Action
Contact your BEA Tuxedo Customer Support.
1634
ERROR: Unable to decrypt authenticator for remote domain <.rdomid>..
Description
Failed to decrypt authenticator for TDomain session between local gateway and remote gateway rdomid.
Action
Contact your BEA Tuxedo Customer Support.
1635
ERROR: Unable to create decryption key for remote domain <.rdomid>..
Description
Unable to create decryption key.
Action
Contact your BEA Tuxedo Customer Support.
1636
Failed to decrypt authenticator for TDomain session between local gateway and remote gateway rdomid.
Description
Failed to decrypt authenticator.
Action
Contact your BEA Tuxedo Customer Support.
1637
ERROR: Unable to decrypt authenticator for remote domain <.rdomid>..
Description
Failed to decrypt authenticator for TDomain session between local gateway and remote gateway rdomid.
Action
Contact your BEA Tuxedo Customer Support.
1638
ERROR: Unable to create decryption key for remote domain <.rdomid>..
Description
Unable to create decryption key.
Action
Contact your BEA Tuxedo Customer Support.
1639
ERROR: Unable to decrypt authenticator for remote domain <.rdomid>..
Description
Failed to decrypt authenticator.
Action
Contact your BEA Tuxedo Customer Support.
1640
ERROR: Unable to decrypt authenticator for remote domain <.rdomid>..
Description
Failed to decrypt authenticator.
Action
Contact your BEA Tuxedo Customer Support.
1641
ERROR: Unable to create decryption key for remote domain <.rdomid>..
Description
Unable to create decryption key.
Action
Contact your BEA Tuxedo Customer Support.
1642
ERROR: Unable to decrypt authenticator for remote domain <.rdomid>..
Description
Failed to decrypt authenticator.
Action
Contact your BEA Tuxedo Customer Support.
1643
ERROR: Unable to decrypt authenticator for remote domain <.rdomid>..
Description
Failed to decrypt authenticator.
Action
Contact your BEA Tuxedo Customer Support.
1644
ERROR: Channel binding security failure.
Description
The channel binding information does not match, session authentication failed.
Action
Check for possible attack from network, enable validate host feature if possible. If everything fine but channel binding checking keep failure contact your BEA Tuxedo Customer Support.
1645
ERROR: Channel binding security failure.
Description
The channel binding information does not match, session authentication failed.
Action
Check for possible attack from network, enable validate host feature if possible. If everything fine but channel binding checking keep failure contact your BEA Tuxedo Customer Support.
1646
ERROR: Memory allocation failure.
Description
Dynamic memory allocation failed during session authentication.
Action
Check for TDOMAIN Gateway process size, and try to lessen memory usage in other process.
1647
ERROR: Failed to decode security token.
Description
The network decoding failed during TDomain session negotiation.
Action
Check for possible illegal access from remote host. If everything looks good but still failing with security token decoding contact your BEA Tuxedo Customer Support.
1648
ERROR: Received invalid token type <.t_type.
Description
The TDomain gateway received an unrecognizable security token from remote gateway.
Action
Check for possible attack from network, enable validate host feature if possible. If everything looks fine but keep on receiving invalid token contact your BEA Tuxedo Customer Support.
1649
ERROR: Memory allocation failure.
Description
Dynamic memory allocation failed during session authentication.
Action
Check for TDOMAIN Gateway process size, and try to lessen memory usage in other process.
1650
ERROR: Failed to decode security token.
Description
The network decoding failed during TDomain session negotiation.
Action
Check for possible illegal access from remote host. If everything looks good but still failing with security token decoding contact your BEA Tuxedo Customer Support.
1651
ERROR: Received invalid token type <.t_type.
Description
The TDomain gateway received an unrecognizable security token from remote gateway.
Action
Check for possible attack from network, enable validate host feature if possible. If everything looks fine but keep on receiving invalid token contact your BEA Tuxedo Customer Support.
1652
ERROR: Source name <.src_name>. does not match target name.
Description
The session authentication token contains invalid information.
Action
Check for incorrect configuration. If configuration is good, then check for possible attack from network. If everything looks fine but the problem persists call your BEA Tuxedo Customer Support.
1653
ERROR: Memory allocation failure.
Description
Dynamic memory allocation failed during session authentication.
Action
Check for TDOMAIN Gateway process size, and try to lessen memory usage in other processes.
1654
ERROR: Failed to decode security token.
Description
The network decoding failed during TDomain session negotiation.
Action
Check for possible illegal access from remote host. If everything looks good but still failing with security token decoding contact your BEA Tuxedo Customer Support.
1655
ERROR: Received invalid token type <.t_type.
Description
The TDomain gateway received an unrecognizable or unexpected security token from remote gateway.
Action
Check for possible attack from network, enable validate host feature if possible. If everything looks fine but keep receiving invalid token contact your BEA Tuxedo Customer Support.
1656
ERROR: Memory allocation failure.
Description
Dynamic memory allocation failed during session authentication.
Action
Check for TDOMAIN Gateway process size, and try to lessen memory usage in other process.
1657
ERROR: Failed to decode security token.
Description
The network decoding failed during TDomain session negotiation.
Action
Check for possible illegal access from remote host. If everything looks good but still failing with security token decoding contact your BEA Tuxedo Customer Support.
1658
ERROR: Received invalid token type <.t_type.
Description
The TDomain gateway received an unrecognizable security token from remote gateway.
Action
Check for possible attack from network, enable validate host feature if possible. If everything looks fine but keep on receiving invalid token contact your BEA Tuxedo Customer Support.
1659
ERROR: Session authentication failed for TDomain session <.ldomid, rdomid>..
Description
The session authentication failed.
Action
Check for possible attack from network, enable validate host feature if possible. If everything looks fine but failure persists then contact your BEA Tuxedo Customer Support.
1660
ERROR: Failed to find required password entry for TDomain session <ldomid, rdomid>., close connection.
Description
The Gateway security is configured to DM_PW but can not find password pair for TDomain session between local gateway ldomid
and remote gateway rdomid
.
Action
Add the password pair information either using dmadmin
utility or using DMIB
, then manually open the connection using dmadmin
command co
.
See Also
DMIB
(5), dmadmin
(1)
1661
ERROR: Failed to find required password entry for TDomain session <ldomid, rdomid>., close connection.
Description
The Gateway security is configured to DM_PW but can not find password pair for TDomain session between local gateway ldomid
and remote gateway rdomid
.
Action
Add the password pair information either using dmadmin
utility or using DMIB
, then manually open the connection using dmadmin
command co
.
1662
ERROR: Failed to decode authenticator.
Description
Failed to do network decoding of authenticator.
Action
Check for possible attack from network and try to prevent it. If everything looks find but problem persists then contact your BEA Tuxedo Customer Support.
1663
ERROR: Unable to encrypt session ticket for remote domain <.rdomid>..
Description
Failed the encryption operation of session ticket.
Action
Contact your BEA Tuxedo Customer Support.
1664
ERROR: Unable to encrypt session ticket for remote domain <.rdomid>..
Description
Failed the encryption operation of session ticket.
Action
Contact your BEA Tuxedo Customer Support.
1665
ERROR: Unable to decrypt session ticket for remote domain <.rdomid>..
Description
Failed the decryption operation of session ticket.
Action
Contact your BEA Tuxedo Customer Support.
1666
ERROR: Unable to decrypt session ticket for remote domain <.rdomid>..
Description
Failed the decryption operation of session ticket.
Action
Contact your BEA Tuxedo Customer Support.
1667
ERROR: Bad message from rdomid. Closing file descriptor
Description
The message meta header is incorrect. This can come from other network program that does not know TDomain Gateway protocol data unit by accident, or this is someone attacking gateway.
Action
Check and take carte of your network security issues. If problem persists contact your BEA Tuxedo Customer Support.
1668
WARN: Local domain <.ldomid>. detected a network attack, close connection to remote domain(rdomid, rdom_naddr)!
Description
Local domain gateway ldomid
detected a network attack or message corruption it closes the network connection.
Action
Check for your network security and correct any problems you can find. If problem persists contact your BEA Tuxedo Customer Support.
1669
INFO: Checking maximum SAP PDU size is enabled by ldomid.
Description
The environmental variable GWT_SAP_MAX_PDU_SIZE
is set to valid value, any message received from network with size greater than this value will cause error and connection will be closed.
Action
Check your application maximum data size before you setting up this environmental variable.
1670
INFO: Network block timeout enabled
Description
The environmental variable GWT_NW_TIMEOUT
is set to YES
.
Action
No action required.
1671
INFO: Anonymous connection disabled by val.
Description
In the case of environment variable GWT_VALIDATE_HOST is not set to "YES", and GWT_ALLOW_FROM_ANY_HOST is set to NO, GWTDOMAIN will accept any incoming connections. This will open a door of DOS attack if GWTDOMAIN doesn't run in a secure environment.
Action
No action is required.
1672
ERROR: In memory queue creation failed
Description
The threaded gateway failed to create internal queue.
Action
This is an internal error with no associated user action. If the error persists, please contact your BEA Customer Support with the exact error message.
1673
ERROR: attempt to access uninitialized in memory queue
Description
The threaded gateway attempts to access an invalid internal queue.
Action
This is an internal error with no associated user action. If the error persists, please contact your BEA Customer Support with the exact error message.
1674
ERROR: No more memory available to expand in memory queue
Description
The threaded gateway failed to expand internal queue due to the lack of virtual memory.
Action
Attempt to identify and stop any extraneous processes to free up virtual memory on your system.
1675
ERROR: Condition variable failure in memory queue
Description
The threaded gateway failed to access condition variable resource.
Action
This is an internal error with no associated user action. If the error persists, please contact your BEA Customer Support with the exact error message.
1676
WARN: In memory queue overflow, max size %d
Description
The memory queue in threaded gateway has reached the maximum size allowable [max size].
Action
This is an internal warning with no associated user action. If the warning persists, please contact your BEA Customer Support with the exact error message.
1677
ERROR: Unable to allocate space for temporary domains message
Description
The threaded gateway failed to create domains message due to the lack of virtual memory.
Action
Attempt to identify and stop any extraneous processes to free up virtual memory on your system.
1678
INFO: .SysConnectionSuccess: Connection successful between LDOM and RDOM
Description
This event is generated when a connection between a local domain and a remote domain has established. The names of local domain and remote domain are printed.
Action
No action required. The connection is established and an event is generated.
See Also
dmconfig
(5), DM_MIB
(5)
1679
INFO: .SysConnectionFailed: Connection failed between LDOM and RDOM. reason string
Description
This event is generated when establishing a connection between a local domain and a remote domain has failed. The names of local domain and remote domain and a possible reason are printed.
Action
Action may be needed for administrator to check the reason of failure.
See Also
dmconfig
(5), DM_MIB
(5)
1680
INFO: .SysConnectionDropped: Connection dropped between LDOM and RDOM. reason string
Description
This event is generated when the connection between a local domain and a remote domain has been dropped. The names of local domain and remote domain and a possible reason are printed.
Action
Action may be needed for administrator to check the reason of failure.
See Also
dmconfig
(5), DM_MIB
(5)