Readme for IBM® Spectrum Conductor with Spark 2.2.0 Interim Fix 478317
Readme file for: IBM Spectrum Conductor with Spark
Product/Component Release: 2.2.0
Update Name: Interim Fix 478317
Fix ID: cws-2.2-build478317-citi
Publication date: Jan 2, 2018
Abstract
Unable to logout after
successfully logging in to the cluster management console in IBM Spectrum
Conductor with Spark v2.2.0 from the Citi portal using an LDAP user.
Description
This interim fix resolves the issue of being unable to logout after successfully logging in to the cluster management console in IBM Spectrum Conductor with Spark v2.2.0 from the Citi portal using an LDAP user.
Contents
1. List of fixes
2. Download location
3. Products or components affected
4. Installation and configuration
5. List of files
6. Copyright and trademark information
1. List of fixes
APAR: P102474
2. Download location
Download Fix 478317 from the following location: http://www.ibm.com/eserver/support/fixes/.
3. Products or components affected
· IBM Spectrum Conductor with Spark v2.2.0
· WEBGUI
· Linux 64-bit
· cws-2.2-build478317-citi
4. Installation and configuration
System requirements
·
Linux x86_64
· This interim fix depends on the cws-2.2.0.0-build450357-citi RFE, and single sign-on with the third-party identity provider feature enabled.
Before installation
1.
Log on as the cluster administrator and stop the
WEBGUI service:
> egosh user logon -u Admin -x Admin
> egosh service stop WEBGUI
2.
For recovery purposes, log on to each management
host in the cluster and back up the following file (which is replaced by this
interim fix) to another directory:
gui/3.5/lib/commons-ego.jar
wlp/usr/servers/gui/apps/3.5/common_ui/js/common.js
wlp/usr/servers/gui/apps/perf/3.5/perfgui/js/common.js
wlp/usr/servers/gui/apps/ego/3.5/platformv5/WEB-INF/classes/com/platform/gui/sp/acs/Saml2AcsCallback.class
wlp/usr/servers/gui/apps/ego/3.5/platformv5/WEB-INF/classes/com/platform/gui/sp/common/utils/Saml2ConfigFactory.class
wlp/usr/servers/gui/apps/ego/3.5/platformv5/WEB-INF/classes/com/platform/gui/sp/authentication/Saml2Logon.class
wlp/usr/servers/gui/apps/ego/3.5/platformv5/WEB-INF/classes/com/platform/gui/sp/authentication/Saml2Logon$1.class
wlp/usr/servers/gui/apps/ego/3.5/platformv5/WEB-INF/classes/com/platform/gui/sp/authentication/Saml2Logon$MySecurityGrantedAccessAdapter.class
wlp/usr/servers/gui/apps/ego/3.5/platformv5/WEB-INF/classes/com/platform/gui/sp/authentication/Saml2Logout.class
wlp/usr/servers/gui/apps/ego/3.5/platformv5/WEB-INF/classes/com/platform/gui/sp/metadata/Saml2SPMetadata.class
wlp/usr/servers/gui/apps/ego/3.5/platformv5/WEB-INF/classes/com/platform/gui/cuf/framework/rest/SSORestResource.class
wlp/usr/servers/gui/apps/ego/3.5/platformv5/SSOlogin/SSOloginRedirect.html
wlp/usr/servers/gui/apps/asc/2.2.0/ascgui/WEB-INF/classes/com/platform/gui/asc/application/service/impl/real/ASCApplicationPackagesListServiceImpl.class
wlp/usr/servers/gui/apps/asc/2.2.0/ascgui/WEB-INF/classes/com/platform/gui/asc/application/action/ASCGetPackagesTree$ASCPackage.class
wlp/usr/servers/gui/apps/asc/2.2.0/ascgui/WEB-INF/classes/com/platform/gui/asc/application/action/ASCGetPackagesTree.class
wlp/usr/servers/gui/apps/asc/2.2.0/ascgui/WEB-INF/classes/com/platform/gui/asc/common/ASCRestClient.class
wlp/usr/servers/gui/apps/asc/2.2.0/ascgui/WEB-INF/classes/com/platform/gui/asc/application/action/ASCUpdatePackageAction.class
wlp/usr/servers/gui/apps/asc/2.2.0/ascgui/WEB-INF/classes/com/platform/gui/asc/application/action/ModifyApplicationInstanceAction.class
wlp/usr/servers/gui/apps/asc/2.2.0/ascgui/WEB-INF/classes/com/platform/gui/asc/application/action/RegisterApplicationInstanceAction.class
Installation
1. Log on to each management host in your cluster as the cluster administrator and decompress the cws-2.2.0.0_x86_64_build478317-citi.tgz file to the directory where you installed IBM
Spectrum Conductor with Spark:
> tar zxof
cws-2.2.0.0_x86_64_build478317-citi.tgz -C $EGO_TOP
2. Delete all subdirectories and files in the gui/workarea
directory:
> rm –rf $EGO_TOP/gui/workarea/*
Note:
If you changed the default configuration for the WLP_OUTPUT_DIR environment variable and APPEND_HOSTNAME_TO_WLP_OUTPUT_DIR is set to true in the $EGO_CONFDIR/wlp.conf file, you must
clean up the $WLP_OUTPUT_DIR/webgui_hostname/gui/workarea/ directory.
3. Add the following parameter to the $EGO_CONFDIR/../../gui/conf/pmcconf/pmc_conf_ego.xml configuration file:
SAML2SSO.logout: Set this parameter
to the logout URL of the identity provider. For example:
<Parameter>
<Name>SAML2SSO.logout</Name>
<Value>https://secureaccessweb.sit.nam.citigroup.net/siteminderagent/forms/logout.html</Value>
</Parameter>
4.
Start
the WEBGUI service:
> egosh user logon -u Admin -x Admin
> egosh service start WEBGUI
Note: After logging out, the IBM Spectrum Conductor with Spark cluster management console redirects you to the defined logout URL. If you want to log on to the cluster management console again, you must re-input the IBM Spectrum Conductor with Spark cluster management console URL in the current tab or a new tab.
Uninstallation
(if required)
1.
Log on as the cluster administrator and stop the
WEBGUI service:
> egosh user logon -u Admin -x Admin
> egosh service stop WEBGUI
2.
Log on to each management host in the cluster and
restore the backup files.
3.
Delete all subdirectories and files in the gui/workarea directory:
> rm –rf $EGO_TOP/gui/workarea/*
Note:
If you changed the default configuration for the WLP_OUTPUT_DIR environment variable and APPEND_HOSTNAME_TO_WLP_OUTPUT_DIR
is set to true in the $EGO_CONFDIR/wlp.conf file, you must clean up the $WLP_OUTPUT_DIR/webgui_hostname/gui/workarea/ directory.
4.
Start the WEBGUI service:
> egosh service start WEBGUI
5. List of files
gui/3.5/lib/commons-ego.jar
wlp/usr/servers/gui/apps/3.5/common_ui/js/common.js
wlp/usr/servers/gui/apps/perf/3.5/perfgui/js/common.js
wlp/usr/servers/gui/apps/ego/3.5/platformv5/WEB-INF/classes/com/platform/gui/sp/acs/Saml2AcsCallback.class
wlp/usr/servers/gui/apps/ego/3.5/platformv5/WEB-INF/classes/com/platform/gui/sp/common/utils/Saml2ConfigFactory.class
wlp/usr/servers/gui/apps/ego/3.5/platformv5/WEB-INF/classes/com/platform/gui/sp/authentication/Saml2Logon.class
wlp/usr/servers/gui/apps/ego/3.5/platformv5/WEB-INF/classes/com/platform/gui/sp/authentication/Saml2Logon$1.class
wlp/usr/servers/gui/apps/ego/3.5/platformv5/WEB-INF/classes/com/platform/gui/sp/authentication/Saml2Logon$MySecurityGrantedAccessAdapter.class
wlp/usr/servers/gui/apps/ego/3.5/platformv5/WEB-INF/classes/com/platform/gui/sp/authentication/Saml2Logout.class
wlp/usr/servers/gui/apps/ego/3.5/platformv5/WEB-INF/classes/com/platform/gui/sp/metadata/Saml2SPMetadata.class
wlp/usr/servers/gui/apps/ego/3.5/platformv5/WEB-INF/classes/com/platform/gui/cuf/framework/rest/SSORestResource.class
wlp/usr/servers/gui/apps/ego/3.5/platformv5/SSOlogin/SSOloginRedirect.html
wlp/usr/servers/gui/apps/asc/2.2.0/ascgui/WEB-INF/classes/com/platform/gui/asc/application/service/impl/real/ASCApplicationPackagesListServiceImpl.class
wlp/usr/servers/gui/apps/asc/2.2.0/ascgui/WEB-INF/classes/com/platform/gui/asc/application/action/ASCGetPackagesTree$ASCPackage.class
wlp/usr/servers/gui/apps/asc/2.2.0/ascgui/WEB-INF/classes/com/platform/gui/asc/application/action/ASCGetPackagesTree.class
wlp/usr/servers/gui/apps/asc/2.2.0/ascgui/WEB-INF/classes/com/platform/gui/asc/common/ASCRestClient.class
wlp/usr/servers/gui/apps/asc/2.2.0/ascgui/WEB-INF/classes/com/platform/gui/asc/application/action/ASCUpdatePackageAction.class
wlp/usr/servers/gui/apps/asc/2.2.0/ascgui/WEB-INF/classes/com/platform/gui/asc/application/action/ModifyApplicationInstanceAction.class
wlp/usr/servers/gui/apps/asc/2.2.0/ascgui/WEB-INF/classes/com/platform/gui/asc/application/action/RegisterApplicationInstanceAction.class
6. Copyright and trademark information
© Copyright IBM Corporation 2018
U.S. Government Users Restricted Rights - Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp.
IBM®, the IBM logo, and ibm.com® are trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the Web at "Copyright and trademark information" at www.ibm.com/legal/copytrade.shtml.