Readme File for IBM® Spectrum Symphony 7.2.0.2 Interim Fix 600439

Readme File for: IBM Spectrum Symphony

Product Release: 7.2.0.2

Update Name: Interim Fix 600439

Fix ID: sym-7.2.0.2-build600439-ms

Publication Date:  June 3, 2021

 

Interim fix to address a security issue when the GSS-Kerberos security plug-in is used in an IBM Spectrum Symphony 7.2.0.2 cluster. This fix prevents a WSDL client from sending requests to SD with empty credentials.

 

Contents

1. List of fixes

2. Download location

3. Product and components affected

4. Installation and configuration

5. Uninstallation

6. List of files

7. Product notifications

8. Copyright and trademark information

 

1.    List of fixes

APAR: P104229

2.    Download location

Download interim fix 600439 from the following location: https://www.ibm.com/eserver/support/fixes/

3.    Product and components affected

Component name, Platform, Fix ID:

EGO/SOAM, Linux 64-bit, sym-7.2.0.2-build600439-ms

4.    Installation and configuration

Follow the instructions in this section to download and install this interim fix in your cluster.

System requirements

Linux x86_64

Installing on IBM Spectrum Symphony client hosts

Install this interim fix on all IBM Spectrum Symphony client hosts in the cluster before installing on other hosts:

a.       Log on to each client host in your cluster as the cluster administrator. Ensure that no client processes are running, and back up the following files for recovery purposes:

$SOAM_HOME/lib64/libsoambase.so

$SOAM_HOME/lib/libsoambase.so

b.       Download the symclnt-7.2.0.2.x86_64_build600439.tar.gz package and extract its contents to the $SOAM_HOME installation directory:

> tar zxfo symclnt-7.2.0.2.x86_64_build600439.tar.gz -C $SOAM_HOME

c.       Check the modified time of the following files to verify that the fix was correctly installed:

$SOAM_HOME/lib64/libsoambase.so

$SOAM_HOME/lib/libsoambase.so

Installing on other (primary, management, and compute) IBM Spectrum Symphony hosts

After you have installed this interim fix on client hosts, you can install it all IBM Spectrum Symphony primary, primary candidate, management, and compute hosts in the cluster:

a.      Log on to the primary host as the cluster administrator, disable all applications, stop all EGO services, and shut down all the primary candidate hosts in your cluster:

> egosh user logon -u Admin -x password

> soamcontrol app disable all

> egosh service stop all

> egosh ego shutdown hostname

b.       On each management and compute host (or just one host if you are using a shared file system) in the cluster, backup the following files:

$EGO_TOP/3.6/linux-x86_64/lib/sec_ego_gsskrb.so

$EGO_TOP/soam/7.2/linux-x86_64/lib/libsoambase.so

$EGO_TOP/soam/7.2/linux-x86_64/lib64/libsoambase.so

c.       On each management and compute host (or just one host if you are using a shared file system), copy the sym-7.2.0.2_x86_64_build600439.tar.gz package and decompress it to the $EGO_TOP installation directory:

> tar zxof sym-7.2.0.2_x86_64_build600439.tar.gz -C $EGO_TOP

d.       Log on to the primary host as the cluster administrator, start your cluster, and enable your applications:

> egosh ego start hostname

> soamcontrol app enable application_name

5.    Uninstallation

If required, follow the instructions in this section to uninstall this interim fix from your cluster. Ensure that no client or services processes are running on the current hosts.

Uninstalling from other (primary, management, and compute) IBM Spectrum Symphony hosts 

Uninstall this interim fix from other (IBM Spectrum Symphony primary, primary candidate, management, and compute) hosts in the cluster before uninstalling from client hosts in the cluster:

a.       Log on to the primary host as the cluster administrator, disable all applications, stop all EGO services, and shut down all the primary candidate hosts in your cluster:

> egosh user logon -u Admin -x password

> soamcontrol app disable all

> egosh service stop all

> egosh ego shutdown hostname

b.      On each management and compute host (or just one host if you are using a shared file system) in the cluster, restore the following files from your backup:

$EGO_TOP/3.6/linux-x86_64/lib/sec_ego_gsskrb.so

$EGO_TOP/soam/7.2/linux-x86_64/lib/libsoambase.so

$EGO_TOP/soam/7.2/linux-x86_64/lib64/libsoambase.so

c.       Log on to the primary host as the cluster administrator, start your cluster, and enable your applications:

> egosh ego start hostname

> soamcontrol app enable application_name

Uninstalling from IBM Spectrum Symphony client hosts 

After you have uninstalled this interim fix from all primary, primary candidate, management, and compute hosts in the cluster, you can uninstall it from the IBM Spectrum Symphony client hosts.

Log on to each client host as the cluster administrator, ensure that no client or services processes are running, and restore the following files from your backup:

$SOAM_HOME/lib64/libsoambase.so

$SOAM_HOME/lib/libsoambase.so

6.    List of files

d094aa90cb34b76f44d9ab3c47cf8d86 sym-7.2.0.2_x86_64_build600439.tar.gz

1a49d6494be88f549c7d973a19714af1 3.6/linux-x86_64/lib/sec_ego_gsskrb.so

22d4efefab2a28493d38cd23d1126762 soam/7.2/linux-x86_64/lib64/libsoambase.so

db54199ff9db4498b052def70a3a1596 soam/7.2/linux-x86_64/lib/libsoambase.so

0d3e1ed6034729817bd95d462d2fee7a symclnt-7.2.0.2.x86_64_build600439.tar.gz

22d4efefab2a28493d38cd23d1126762 lib64/libsoambase.so

db54199ff9db4498b052def70a3a1596 lib/libsoambase.so

7.    Product notifications

To receive information about product solution and patch updates automatically, subscribe to product notifications on the My Notifications page http://www.ibm.com/support/mynotifications/ on the IBM Support website (http://support.ibm.com). You can edit your subscription settings to choose the types of information you want to get notification about, for example, security bulletins, fixes, troubleshooting, and product enhancements or documentation changes. 

8.    Copyright and trademark information

© Copyright IBM Corporation 2021

U.S. Government Users Restricted Rights - Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp.

IBM®, the IBM logo, and ibm.com® are trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the Web at "Copyright and trademark information" at www.ibm.com/legal/copytrade.shtml.