A small note-ette here for client authentication problems.
After trying the usual
upd no commands on the TSM server for a node that doesn’t want to authenticate, including using
passexp, I found a resolution by finding the
TSM.PWD file and deleting it. This forces the client to re-encrypt the password based on the hostname (this might be because things can go screwy if you’ve got multiple stanzas in dsm.sys for cluster instances).
In this case
TSM.PWD was in
/etc/security/adsm, but it could be elsewhere.
dsmc q file (with the
-optfile= if necessary) command to re-enter the nodename and password and you should now be ok.