|
Problem IC91574
|
Status: Closed |
AUTHENTICATION VERY SLOW ON CERTAIN PSERIES HARDWARE WITH POWER7 CPU'S |
| product: |
DB2 FOR LUW / DB2FORLUW / 970 - DB2 |
| Problem description: |
OS Authentication for DB2 can be very slow in AIX or pSeries
Linux on certain pSeries hardware with POWER7 CPUs.
The function cryptContextRealInit which makes ICC (IBM
Cryptographic library for C) API calls.
The problem exists on the following environments:
- Certain models of pSeries POWER7 CPUs (AIX and Linux)
or
- Virtualized environments (LPARs) (not restricted to any
specific CPU)
TRNG(true random number generators) code is always timing
sensitive, the changes like new hardware, new compilers, and the
changes to the underlying OS have all impacts.
Faster hardware has also put more pressure on the available
entropy.
This problem exists in all current versions of DB2. |
| Problem Summary: |
****************************************************************
* USERS AFFECTED: *
* All *
****************************************************************
* PROBLEM DESCRIPTION: *
* See Error Description *
****************************************************************
* RECOMMENDATION: *
* Upgrade to Version 9.7 FixPack 9 *
**************************************************************** |
| Local Fix: |
For AIX on PowerPC, see the technote:
"DB2 Performance Issue Related to Cryptography on Power Series
Hardware"
http://www.ibm.com/support/docview.wss?uid=swg21614548
Even trying the instructions in the technote, but the problem
persists, please contact DB2 Technical Support to get a special
build with ICC_TRNG=ALT2 support (in GSKit v8.0.14.27.)
Note that ICC_TRNG=ALT2 is still only available in non-FIPS
mode.
Otherwise, there is no local fix. |
| available fix packs: |
DB2 Version 9.7 Fix Pack 9 for Linux, UNIX, and Windows
DB2 Version 9.7 Fix Pack 9a for Linux, UNIX, and Windows
DB2 Version 9.7 Fix Pack 10 for Linux, UNIX, and Windows
|
| Solution |
Problem was first fixed in DB2 UDB Version 9.7 FixPack 9 |
| Workaround |
not known / see Local fix |
| BUG-Tracking |
forerunner : APAR is sysrouted TO one or more of the following: IC97833 IC97842
follow-up : |
| Timestamps |
Date - problem reported :
Date - problem closed :
Date - last modified :
| 16.04.2013
17.12.2013
17.12.2013 |
| Problem solved at the following versions (IBM BugInfos) |
9.7.FP9
|
| Problem solved according to the fixlist(s) of the following version(s) |
| 9.7.0.9
|
 |
| 9.7.0.9
|
|
