IBM Platform LSF 9.1.2 Fix 431032 Readme File

Abstract

P101982. This fix allows the LSF Ticket Granting Ticket forwarding feature to work with Kerberos version 1.12 and above.

Description

Readme documentation for IBM Platform LSF 9.1.2 Fix 431032 including installation-related instructions, prerequisites and co-requisites, and list of fixes.

This fix addresses the following issue:

If the version of Kerberos is 1.12 and above, LSF failed to renew a ticket when using the LSF Ticket Granting Ticket forwarding feature.

Meanwhile, Kerberos provides two pre-authentication mechanism. If preauth attribute has been configured for krbtgt principle on Kerberose 1.12 and above, the administrator should configure pre-authentication mechanism in kdc.conf and krb5.conf.

Readme file for:IBM® Platform LSF

Product/Component Release:9.1.2

Update Name: Fix 431032

Fix ID: LSF-9.1.2-build431032

Publication date:10 November 2016

Last modified date: 10 November 2016

Contents:

1. List of fixes

2. Download location

3. Products or components affected

4. System requirements

5. Installation and configuration

6. List of files

7. Product notifications

8. Copyright and trademark information

1. List of fixes

P101982

2. Download Location

Download Fix 431032 from the following location: http://www.ibm.com/eserver/support/fixes/

3. Products or components affected

Affected components include: LSF/krbrenewd, LSF/eauth.krb5

4. System requirements

Linux2.6-glibc2.3-x86_64

5. Installation and configuration

5.1 Before installation

(LSF_TOP=Full path to the top-level installation directory of LSF.)

1)    Log on to the LSF master host as root

2)    Set your environment:

- For csh or tcsh: % source LSF_TOP/conf/cshrc.lsf

- For sh, ksh, or bash: $ . LSF_TOP/conf/profile.lsf

5.2 Installation steps

1)    Go to the patch install directory: cd $LSF_ENVDIR/../9.1/install/

2)    Copy the patch file to the install directory $LSF_ENVDIR/../9.1/install/

3)    Run patchinstall: ./patchinstall <patch>

4)    If eauth.krb5 is used as eauth in cluster

- Run "badmin hshutdown"

- Run "badmin mbdrestart"

- Run "cp $LSF_SERVIRDIR/eauth.krb5  $LSF_SERVIRDIR/eauth"

- Run "badmin hstartup"

5.3 After installation

None

5.4 Uninstallation

To roll back a patch:

1)    Log on to the LSF master host as root

2)    Run ./patchinstall -r <patch>

3)    If eauth.krb5 is used as eauth in cluster

- Run "badmin hshutdown"

- Run "badmin mbdrestart"

- Run "cp $LSF_SERVIRDIR/eauth.krb5  $LSF_SERVIRDIR/eauth"

- Run "badmin hstartup"

6. List of files

krbrenewd
eauth.krb5

7. Product notifications

To receive information about product solution and patch updates automatically, subscribe to product notifications on the My notifications page (www.ibm.com/support/mynotifications) on the IBM Support website (support.ibm.com). You can edit your subscription settings to choose the types of information you want to get notification about, for example, security bulletins, fixes, troubleshooting, and product enhancements or documentation changes.

8. Copyright and trademark information

© Copyright IBM Corporation 2017

U.S. Government Users Restricted Rights - Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp.

IBM®, the IBM logo and ibm.com® are trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the Web at "Copyright and trademark information" at www.ibm.com/legal/copytrade.shtml.