Readme for IBM Spectrum Conductor with Spark 2.2.0 Interim Fix 438630

Readme file for: IBM® Spectrum Conductor with Spark

Product/Component Release: 2.2.0

Update Name: Interim Fix 438630

Fix ID: cws-2.2.0-build438630

Publication date: Jan 20, 2017

Enhanced EGO audit logging to capture PAM user authentication issues

When user authentication is through PAM and EGO audit logging is enabled in the cluster, the EGO audit log does not capture information on users who are not authenticated. This interim fix enhances audit logging, so that error information about unauthenticated users is logged to the EGO audit log.

Contents

1. Download location

2. Products or components affected

3. Installation and configuration

4. List of files

5. Copyright and trademark information

1. Download location

Download Fix 438630 from the following location: http://www.ibm.com/eserver/support/fixes/

2. Products or components affected

EGO kernel module

3. Installation and configuration

System requirements

Linux x86_64 hosts

Before installation

1. Log on to the master host as the cluster administrator and shut down the cluster:

> egoshutdown.sh

2. Log on to all management hosts in the cluster and back up the following files (which will be replaced by this interim fix) to another directory:

> $EGO_TOP/3.5/linux-x86_64/lib/sec_ego_default.so

> $EGO_TOP/3.5/linux-x86_64/lib/sec_ego_ext_co.so

> $EGO_TOP/3.5/linux-x86_64/lib/sec_ego_pam_default.so

Installation

1. On each management host, decompress the cws-2.2.0.0_x86_64_build438630.tar.gz package and copy the required files. Ensure that the files have permissions identical to the cluster administrator user account.

> tar xvf cws-2.2.0.0_x86_64_build438630.tar.gz -C /tmp

> cp /tmp/3.5/linux-x86_64/lib/sec_ego_default.so $EGO_TOP/3.5/linux-x86_64/lib/sec_ego_default.so

> cp /tmp/3.5/linux-x86_64/lib/sec_ego_ext_co.so $EGO_TOP/3.5/linux-x86_64/lib/sec_ego_ext_co.so

> cp /tmp/3.5/linux-x86_64/lib/sec_ego_pam_default.so $EGO_TOP/3.5/linux-x86_64/lib/sec_ego_pam_default.so

2. Start the cluster from the egosh command prompt on each host:

> egosh ego start

Uninstallation

1. Stop all services and shut down the cluster:

> egoshutdown.sh

2. Log on to all management hosts in the cluster and restore the backup for the following files:

> $EGO_TOP/3.5/linux-x86_64/lib/sec_ego_default.so

> $EGO_TOP/3.5/linux-x86_64/lib/sec_ego_ext_co.so

> $EGO_TOP/3.5/linux-x86_64/lib/sec_ego_pam_default.so

3. Ensure that the files have permissions identical to the cluster administrator user account.

4. Start the cluster:

> egosh ego start.

4. List of files

cws-2.2.0.0_x86_64_build438630.tar.gz

5. Copyright and trademark information

© Copyright IBM Corporation 2017

U.S. Government Users Restricted Rights - Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp.

IBM®, the IBM logo, and ibm.com® are trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the Web at "Copyright and trademark information" at www.ibm.com/legal/copytrade.shtml.