Readme file for IBM® Spectrum Conductor 2.4.1 Interim Fix 600083
Readme file for: IBM Spectrum Conductor
Product/Component release: 2.4.1
Fix ID: sc-2.4.1-build600083-welfg
Publication date: January 15 2021
This interim fix enables you to add a parameter to control reading multiple lines for user groups for the PAM security plug-in.
1. List of fixes
2. Download location
3. Products or components affected
4. Installation and configuration
5. Uninstallation
6. List of files
7. Product notifications
8. Copyright and trademark information
APAR: P104036
2. Download location
Download interim fix 600083 from the following location: http://www.ibm.com/eserver/support/fixes/.
Component name, Platform, Fix ID:
EGO, Linux x86_64, sc-2.4.1-build600083-welfg
Follow the instructions in this section to download and install this interim fix on hosts in your cluster.
System requirements
Linux x86_64
Installation
a. Log on to the primary host as the cluster administrator, source your environment, stop all EGO services, and shut down all primary and primary candidate hosts, all Linux management and compute hosts:
(BASH) . $EGO_TOP/profile.platform
(CSH) source $EGO_TOP/cshrc.platform
> egosh user logon -u Admin -x Admin
> egosh service stop all
> egosh ego shutdown hostname
b. Log on to each Linux management and compute host as the cluster administrator and source your environment:
(BASH) . $EGO_TOP/profile.platform
(CSH) source $EGO_TOP/cshrc.platform
c. Download the egocore-3.8.0.1_x86_64_build600083.tar.gz package to each of your Linux management hosts and compute hosts. Download to, for example, to a /conductorfixes directory.
d. Run the egoinstallfixes command to install the egocore-3.8.0.1_x86_64_build600083.tar.gz file:
> egoinstallfixes /conductorfixes/egocore-3.8.0.1_x86_64_build600083.tar.gz
Note: Running the egoinstallfixes command automatically backs up the current binary files to a fix backup directory for recovery purposes. Do not delete this backup directory; you will need it if you want to recover the original files. For more information on using this command, see the egoinstallfixes command reference.
e. Run the pversions command to verify the installation:
> pversions -b 600083
f. Update the PAM configuration file $EGO_SEC_CONF/pamauth.conf (the EGO_SEC_CONF value is defined in $EGO_CONFDIR/ego.conf file), by adding the following line if you want to read multiple lines for included user groups:
READ_MULTIPLE_LINES_FOR_INCLUDED_USERGROUP=Y
See the Configuration section for more detail about this parameter.
g. From the primary host, start all primary and primary candidate hosts, all Linux management and compute hosts:
> egosh ego start hostname
Configuration
This fix includes a new parameter called READ_MULTIPLE_LINES_FOR_INCLUDED_USERGROUP for the pamauth.conf file to control reading multiple lines for included user groups.
|
Configuration |
Result |
|
READ_MULTIPLE_LINES_FOR_INCLUDED_USERGROUP=Y or READ_MULTIPLE_LINES_FOR_INCLUDED_USERGROUP=y |
Reads multiple lines for the included user group |
|
READ_MULTIPLE_LINES_FOR_INCLUDED_USERGROUP does not exist in the pamauth.conf file or READ_MULTIPLE_LINES_FOR_INCLUDED_USERGROUP=N or READ_MULTIPLE_LINES_FOR_INCLUDED_USERGROUP=n |
Reads a single line for the included user group |
If required, follow the instructions in this section to uninstall this interim fix from hosts in your cluster.
a. Log on to the primary host as the cluster administrator, stop all EGO services, and shut down all primary and primary candidate hosts, all Linux management and compute hosts:
> egosh user logon -u Admin -x Admin
> egosh service stop all
> egosh ego shutdown hostname
b. Log on to each Linux management and compute host in the cluster and roll back this interim fix:
> egoinstallfixes -r 600083
c. From the primary host, start all primary and primary candidate hosts, all Linux management and compute hosts:
> egosh ego start hostname
3.8/linux-x86_64/lib/sec_ego_pam_default.so
To receive information about product solution and patch updates automatically, subscribe to product notifications on the My Notifications page http://www.ibm.com/support/mynotifications/ on the IBM Support website (http://support.ibm.com). You can edit your subscription settings to choose the types of information you want to get notification about, for example, security bulletins, fixes, troubleshooting, and product enhancements or documentation changes.
© Copyright IBM Corporation 2021
U.S. Government Users Restricted Rights - Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp.
IBM®, the IBM logo, and ibm.com® are trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the Web at "Copyright and trademark information" at www.ibm.com/legal/copytrade.shtml.