Upgraded to eDirectory 8.8 sp2 ftf2 (ds version 20216.62)
Tivoli TSM client is 5.5.0.1
Everything was backing up fine prior to the upgrade. After the upgrade, when TSM tries to backup NDS, it errors out and asks for a username/password.
Error: ~ANS1874E error
TSM is unable to deal with case-sensitive passwords. It stores all passwords in uppercase in the TSM.PWD file. When you have a UP policy on the TSM account that requires case-sensitive passwords, this can cause TSM to fail its authentication.
Assuming you have your UP policy keep the NDS password and UP password in sync on a user account, the authentication can succeed if the NDS password is checked first because the NDS password is also not case-sensitive. eDirectory 8.7 will use the NDS password if it exists on a user account and check the UP second. eDirectory 8.8 will prefer the UP over the NDS password which is why things started to fail after the upgrade and because I was requiring case-sensitive passwords.
A temporary fix is to create a special UP policy for your TSM accounts that doesn't require case-sensitivity. IBM is looking into the possibility of fixing the TSM client so that passwords are stored in a case-sensitive format but it's unsure when, if ever, that would be released.
Another temporary fix would be changing the password to only uppercase characters.
Thinking the tsm.pwd file was corrupted, I deleted and proceeded to re-setup the tsm client.
Using DSMC, I found the following behavior:
Discussion