Interim Fix 449040 for IBM Spectrum Symphony 7.1.2 and IBM Spectrum Conductor with Spark 2.2.0

Readme File for IBM^® Spectrum Symphony 7.1.2 and IBM^® Spectrum Conductor with Spark 2.2 Interim Fix 449040

Readme file for: IBM Spectrum Symphony and IBM Spectrum Conductor with Spark

Product/Component Release: 7.1.2 and 2.2

Update Name: Interim Fix 449040

Fix ID: sym-7.1.2-cws-2.2-build449040-jpmc

Publication date: April 12, 2017

This interim fix provides fixes for compliance to the Vendor Building Security In Maturity Model (vBSIMM) audit.

Contents

1. List of fixes

2. Products or components affected

3. Installation and configuration

4. Copyright and trademark information

1. List of fixes

APAR: P102183

2. Products or components affected

Component Name; Platform; Fix ID:

GUI, MapReduce, ascd, elk; Linux 64-bit; sym-7.1.2-cws-2.2-build449040-jpmc

3. Installation and configuration

System requirements

Linux x86_64 hosts in an environment where IBM Spectrum Symphony 7.1.2 and IBM Spectrum Conductor with Spark 2.2 are both installed.

Before installation

1. Log on to the master host as the cluster administrator:

> egosh user logon -u Admin -x Admin

2. Stop the ascd, elk-elasticsearch, and WEBGUI services:

> egosh service stop ascd

> egosh service stop elk-elasticsearch

> egosh service stop WEBGUI

3. For recovery purposes, log on to each management host in the cluster and back up the following files (which will be removed by this interim fix) to another directory:

> mkdir -p /tmp/ascdbackup

> mv $EGO_TOP/ascd/2.2.0/lib/commons-collections-3.2.1.jar /tmp/ascdbackup/

> mv $EGO_TOP/ascd/2.2.0/lib/spring-*.jar /tmp/ascdbackup/

> mkdir -p /tmp/elkbackup

> mv $EGO_TOP/integration/elk/1.2/elasticsearch-2.1.1/plugins/orchestratorsecurity/servlet-api-2.4.jar /tmp/elkbackup/

> mkdir -p /tmp/guibackup/egogui

> mkdir -p /tmp/guibackup/perfgui

> mkdir -p /tmp/hadoopbackup/

> mv $EGO_TOP/gui/3.5/lib/commons-fileupload-1.3.1.jar /tmp/guibackup/

> mv $EGO_TOP/gui/3.5/lib/commons-io-1.2.jar /tmp/guibackup/

> mv $EGO_TOP/gui/3.5/lib/commons-lang3-3.1.jar /tmp/guibackup/

> mv $EGO_TOP/gui/3.5/lib/freemarker-2.3.18.jar /tmp/guibackup/

> mv $EGO_TOP/gui/3.5/lib/javassist-3.9.0.GA.jar /tmp/guibackup/

> mv $EGO_TOP/gui/3.5/lib/ognl-3.0.6.jar /tmp/guibackup/

> mv $EGO_TOP/gui/3.5/lib/org.apache.commons-io-1.4.jar /tmp/guibackup/

> mv $EGO_TOP/gui/3.5/lib/struts2-core-2.3.16.3.jar /tmp/guibackup/

> mv $EGO_TOP/gui/3.5/lib/struts2-json-plugin-2.3.16.3.jar /tmp/guibackup/

> mv $EGO_TOP/gui/3.5/lib/struts2-spring-plugin-2.3.16.3.jar /tmp/guibackup/

> mv $EGO_TOP/gui/3.5/lib/xwork-core-2.3.16.3.jar /tmp/guibackup/

> mv $EGO_TOP/gui/3.5/lib/servlet-api-6.0.13.jar /tmp/guibackup/

> mv $EGO_TOP/gui/3.5/lib/spring-tx-3.0.5.RELEASE.jar /tmp/guibackup/

> mv $EGO_TOP/wlp/usr/servers/gui/apps/ego/3.5/platform/WEB-INF/lib/xstream-1.4.2.jar /tmp/guibackup/egogui/

> mv $EGO_TOP/wlp/usr/servers/gui/apps/perf/3.5/perfgui/WEB-INF/lib/freemarker-2.3.18.jar /tmp/guibackup/perfgui

> mv $EGO_TOP/wlp/usr/servers/gui/apps/perf/3.5/perfgui/WEB-INF/lib/ognl-3.0.6.jar /tmp/guibackup/perfgui

> mv $EGO_TOP/wlp/usr/servers/gui/apps/perf/3.5/perfgui/WEB-INF/lib/struts2-core-2.3.16.3.jar /tmp/guibackup/perfgui

> mv $EGO_TOP/wlp/usr/servers/gui/apps/perf/3.5/perfgui/WEB-INF/lib/xwork-core-2.3.16.3.jar /tmp/guibackup/perfgui

> mv $EGO_TOP/perf/3.5/lib/commons-fileupload-1.2.1.jar /tmp/guibackup/perfgui

> mv $EGO_TOP/soam/mapreduce/7.1.2/linux-x86_64/lib/hadoop-1.1.1/ /tmp/hadoopbackup/

> mv $EGO_TOP/soam/mapreduce/7.1.2/linux-x86_64/lib/hadoop-2.0.4/ /tmp/hadoopbackup/

> mv $EGO_TOP/soam/mapreduce/7.1.2/linux-x86_64/lib/hadoop-2.2.0/ /tmp/hadoopbackup/

> mv $EGO_TOP/soam/mapreduce/7.1.2/linux-x86_64/lib/hadoop-2.4.x/ /tmp/hadoopbackup/

> mv $EGO_TOP/soam/mapreduce/7.1.2/linux-x86_64/lib/hadoop-2.6.0/ /tmp/hadoopbackup/

> mv $EGO_TOP/soam/mapreduce/7.1.2/linux-x86_64/lib/commons-collections-3.2.1.jar /tmp/hadoopbackup/

> mv $EGO_TOP/wlp/usr/servers/gui/apps/kc/1.5.1/kc/WEB-INF/lib/commons-collections-3.2.1_kc.jar /tmp/hadoopbackup/

4. For recovery purposes, log on to each compute host in the cluster and back up the following files (which will be removed by this interim fix) to another directory:

> mkdir -p /tmp/hadoopbackup/

> mv $EGO_TOP/soam/mapreduce/7.1.2/linux-x86_64/lib/hadoop-1.1.1/ /tmp/hadoopbackup/

> mv $EGO_TOP/soam/mapreduce/7.1.2/linux-x86_64/lib/hadoop-2.0.4/ /tmp/hadoopbackup/

> mv $EGO_TOP/soam/mapreduce/7.1.2/linux-x86_64/lib/hadoop-2.2.0/ /tmp/hadoopbackup/

> mv $EGO_TOP/soam/mapreduce/7.1.2/linux-x86_64/lib/hadoop-2.4.x/ /tmp/hadoopbackup/

> mv $EGO_TOP/soam/mapreduce/7.1.2/linux-x86_64/lib/hadoop-2.6.0/ /tmp/hadoopbackup/

> mv $EGO_TOP/soam/mapreduce/7.1.2/linux-x86_64/lib/commons-collections-3.2.1.jar /tmp/hadoopbackup/

Installation

1. Log on to each management host in your cluster, download the sym-7.1.2.0_cws-2.2.0_x86_64_build449040.tar.gz package. Then, run the following commands:

> tar zxfo sym-7.1.2.0_cws-2.2.0_x86_64_build449040.tar.gz -C $EGO_TOP

> cp $EGO_TOP/gui/3.5/lib/commons-collections-3.2.2.jar $EGO_TOP/ascd/2.2.0/lib/

> cp $EGO_TOP/gui/3.5/lib/spring-aop-3.2.8.RELEASE.jar $EGO_TOP/ascd/2.2.0/lib/

> cp $EGO_TOP/gui/3.5/lib/spring-beans-3.2.8.RELEASE.jar $EGO_TOP/ascd/2.2.0/lib/

> cp $EGO_TOP/gui/3.5/lib/spring-context-3.2.8.RELEASE.jar $EGO_TOP/ascd/2.2.0/lib/

> cp $EGO_TOP/gui/3.5/lib/spring-core-3.2.8.RELEASE.jar $EGO_TOP/ascd/2.2.0/lib/

> cp $EGO_TOP/gui/3.5/lib/spring-expression-3.2.8.RELEASE.jar $EGO_TOP/ascd/2.2.0/lib/

> cp $EGO_TOP/wlp/8.5.5.9/dev/api/spec/com.ibm.ws.javaee.servlet.3.1_1.0.12.jar $EGO_TOP/integration/elk/1.2/elasticsearch-2.1.1/plugins/orchestratorsecurity/

> cp $EGO_TOP/gui/3.5/lib/commons-collections-3.2.2.jar $EGO_TOP/soam/mapreduce/7.1.2/linux-x86_64/lib/

> cp $EGO_TOP/gui/3.5/lib/commons-collections-3.2.2.jar $EGO_TOP/wlp/usr/servers/gui/apps/kc/1.5.1/kc/WEB-INF/lib/commons-collections-3.2.2_kc.jar

2. Delete all subdirectories and files in the ascd/workarea directory:

> rm -rf $EGO_TOP/ascd/workarea/*

NOTE: If you changed the default configuration for the WLP_OUTPUT_DIR environment variable and APPEND_HOSTNAME_TO_WLP_OUTPUT_DIR is set to true in the $EGO_CONFDIR/wlp.conf file, you must clean up the $WLP_OUTPUT_DIR/ascd_hostname/ascd/workarea/ directory.

3. Clean up the GUI work directories:

> rm -rf $EGO_TOP/gui/work/*

> rm -rf $EGO_TOP/gui/workarea/*

NOTE: If you configured the WLP_OUTPUT_DIR parameter and APPEND_HOSTNAME_TO_WLP_OUTPUT_DIR is set to true in the $EGO_CONFDIR/wlp.conf file, you must clean up the $WLP_OUTPUT_DIR/webgui_hostname/gui/workarea/ directory.

4. Launch a web browser and clear the browser cache.

5. On all management and compute hosts, edit the $SOAM_HOME/mapreduce/conf/pmr-env.sh file to configure the HADOOP_VERSION variable as 2_7_x:

export HADOOP_VERSION=2_7_x

6. On each compute host in your cluster, run the following command:

> cp $EGO_TOP/soam/mapreduce/7.1.2/linux-x86_64/lib/hadoop-2.7.x/commons-collections-3.2.2.jar $EGO_TOP/soam/mapreduce/7.1.2/linux-x86_64/lib/

7. Start the ascd, elk-elasticsearch, and WEBGUI services:

> egosh user logon -u Admin -x Admin

> egosh service start ascd

> egosh service start elk-elasticsearch

> egosh service start WEBGUI

Uninstallation (if required)

1. Log on as the cluster administrator on master host:

> egosh user logon -u Admin -x Admin

2. Stop the ascd, elk-elasticsearch, and WEBGUI services:

> egosh service stop ascd

> egosh service stop elk-elasticsearch

> egosh service stop WEBGUI

3. Log on to each management host in the cluster and delete the following files:

> rm -f $EGO_TOP/ascd/2.2.0/lib/spring-*.jar

> rm -f $EGO_TOP/ascd/2.2.0/lib/commons-collections-3.2.2.jar

> rm -f $EGO_TOP/integration/elk/1.2/elasticsearch-2.1.1/plugins/orchestratorsecurity/com.ibm.ws.javaee.servlet.3.1_1.0.12.jar

> rm -f $EGO_TOP/gui/3.5/lib/commons-fileupload-1.3.2.jar

> rm -f $EGO_TOP/gui/3.5/lib/commons-io-2.2.jar

> rm -f $EGO_TOP/gui/3.5/lib/commons-lang3-3.2.jar

> rm -f $EGO_TOP/gui/3.5/lib/freemarker-2.3.22.jar

> rm -f $EGO_TOP/gui/3.5/lib/javassist-3.11.0.GA.jar

> rm -f $EGO_TOP/gui/3.5/lib/ognl-3.0.19.jar

> rm -f $EGO_TOP/gui/3.5/lib/struts2-core-2.3.32.jar

> rm -f $EGO_TOP/gui/3.5/lib/struts2-json-plugin-2.3.32.jar

> rm -f $EGO_TOP/gui/3.5/lib/struts2-spring-plugin-2.3.32.jar

> rm -f $EGO_TOP/gui/3.5/lib/xwork-core-2.3.32.jar

> rm -f $EGO_TOP/wlp/usr/servers/gui/apps/ego/3.5/platform/WEB-INF/lib/xstream-1.4.8.jar

> rm -f $EGO_TOP/wlp/usr/servers/gui/apps/perf/3.5/perfgui/WEB-INF/lib/freemarker-2.3.22.jar

> rm -f $EGO_TOP/wlp/usr/servers/gui/apps/perf/3.5/perfgui/WEB-INF/lib/ognl-3.0.19.jar

> rm -f $EGO_TOP/wlp/usr/servers/gui/apps/perf/3.5/perfgui/WEB-INF/lib/struts2-core-2.3.32.jar

> rm -f $EGO_TOP/wlp/usr/servers/gui/apps/perf/3.5/perfgui/WEB-INF/lib/xwork-core-2.3.32.jar

> rm -f $EGO_TOP/soam/mapreduce/7.1.2/linux-x86_64/lib/commons-collections-3.2.2.jar

> rm -f $EGO_TOP/wlp/usr/servers/gui/apps/kc/1.5.1/kc/WEB-INF/lib/commons-collections-3.2.2_kc.jar

> rm -f $EGO_TOP/gui/3.5/lib/spring-tx-3.2.8.RELEASE.jar

4. Restore the backup for the following files on each management host:

$EGO_TOP/ascd/2.2.0/lib/commons-collections-3.2.1.jar

$EGO_TOP/ascd/2.2.0/lib/spring-*.jar

$EGO_TOP/integration/elk/1.2/elasticsearch-2.1.1/plugins/orchestratorsecurity/servlet-api-2.4.jar

$EGO_TOP/gui/3.5/lib/commons-fileupload-1.3.1.jar

$EGO_TOP/gui/3.5/lib/commons-io-1.2.jar

$EGO_TOP/gui/3.5/lib/commons-lang3-3.1.jar

$EGO_TOP/gui/3.5/lib/freemarker-2.3.18.jar

$EGO_TOP/gui/3.5/lib/javassist-3.9.0.GA.jar

$EGO_TOP/gui/3.5/lib/ognl-3.0.6.jar

$EGO_TOP/gui/3.5/lib/org.apache.commons-io-1.4.jar

$EGO_TOP/gui/3.5/lib/struts2-core-2.3.16.3.jar

$EGO_TOP/gui/3.5/lib/struts2-json-plugin-2.3.16.3.jar

$EGO_TOP/gui/3.5/lib/struts2-spring-plugin-2.3.16.3.jar

$EGO_TOP/gui/3.5/lib/xwork-core-2.3.16.3.jar

$EGO_TOP/gui/3.5/lib/servlet-api-6.0.13.jar

$EGO_TOP/gui/3.5/lib/spring-tx-3.0.5.RELEASE.jar

$EGO_TOP/wlp/usr/servers/gui/apps/ego/3.5/platform/WEB-INF/lib/xstream-1.4.2.jar

$EGO_TOP/wlp/usr/servers/gui/apps/perf/3.5/perfgui/WEB-INF/lib/freemarker-2.3.18.jar

$EGO_TOP/wlp/usr/servers/gui/apps/perf/3.5/perfgui/WEB-INF/lib/ognl-3.0.6.jar

$EGO_TOP/wlp/usr/servers/gui/apps/perf/3.5/perfgui/WEB-INF/lib/struts2-core-2.3.16.3.jar

$EGO_TOP/wlp/usr/servers/gui/apps/perf/3.5/perfgui/WEB-INF/lib/xwork-core-2.3.16.3.jar

$EGO_TOP/perf/3.5/lib/commons-fileupload-1.2.1.jar

$EGO_TOP/soam/mapreduce/7.1.2/linux-x86_64/lib/hadoop-1.1.1/

$EGO_TOP/soam/mapreduce/7.1.2/linux-x86_64/lib/hadoop-2.0.4/

$EGO_TOP/soam/mapreduce/7.1.2/linux-x86_64/lib/hadoop-2.2.0/

$EGO_TOP/soam/mapreduce/7.1.2/linux-x86_64/lib/hadoop-2.4.x/

$EGO_TOP/soam/mapreduce/7.1.2/linux-x86_64/lib/hadoop-2.6.0/

$EGO_TOP/soam/mapreduce/7.1.2/linux-x86_64/lib/commons-collections-3.2.1.jar

$EGO_TOP/wlp/usr/servers/gui/apps/kc/1.5.1/kc/WEB-INF/lib/commons-collections-3.2.1_kc.jar

5. Log on to each compute host in the cluster and delete the following file:

$EGO_TOP/soam/mapreduce/7.1.2/linux-x86_64/lib/commons-collections-3.2.2.jar

6. Restore the backup for the following files on each compute host:

> $EGO_TOP/soam/mapreduce/7.1.2/linux-x86_64/lib/hadoop-1.1.1/

> $EGO_TOP/soam/mapreduce/7.1.2/linux-x86_64/lib/hadoop-2.0.4/

> $EGO_TOP/soam/mapreduce/7.1.2/linux-x86_64/lib/hadoop-2.2.0/

> $EGO_TOP/soam/mapreduce/7.1.2/linux-x86_64/lib/hadoop-2.4.x/

> $EGO_TOP/soam/mapreduce/7.1.2/linux-x86_64/lib/hadoop-2.6.0/

> $EGO_TOP/soam/mapreduce/7.1.2/linux-x86_64/lib/commons-collections-3.2.1.jar

7. On each management host, delete all subdirectories and files in the ascd/workarea directory:

> rm -rf $EGO_TOP/ascd/workarea/*

8. Clean up the GUI work directories:

> rm -rf $EGO_TOP/gui/work/*

> rm -rf $EGO_TOP/gui/workarea/*

9. Launch your web browser and clear the browser cache.

10. Restore the HADOOP_VERSION in the $SOAM_HOME/mapreduce/conf/pmr-env.sh file on management and compute hosts.

11. Start the ascd, elk-elasticsearch, and WEBGUI services:

> egosh service start ascd

> egosh service start elk-elasticsearch

> egosh service start WEBGUI

4. Copyright and trademark information

U.S. Government Users Restricted Rights - Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp.

IBM®, the IBM logo, and ibm.com® are trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the Web at "Copyright and trademark information" at www.ibm.com/legal/copytrade.shtml.