Readme File for IBM® Spectrum Symphony 7.2.0.2 Interim Fix 600439
Readme File for: IBM Spectrum Symphony
Product Release: 7.2.0.2
Update Name: Interim Fix 600439
Fix ID: sym-7.2.0.2-build600439-ms
Publication Date: June 3, 2021
Interim fix to
address a security issue when the GSS-Kerberos security plug-in is used in an
IBM Spectrum Symphony 7.2.0.2 cluster. This fix prevents a WSDL client from sending
requests to SD with empty credentials.
Contents
1. List of fixes
2. Download location
3. Product and components affected
4. Installation and configuration
5. Uninstallation
6. List of files
7. Product notifications
8. Copyright and trademark information
1.
List
of fixes
APAR:
P104229
2.
Download
location
Download interim fix 600439 from the following location: https://www.ibm.com/eserver/support/fixes/
3.
Product
and components affected
Component name, Platform, Fix ID:
EGO/SOAM,
Linux 64-bit, sym-7.2.0.2-build600439-ms
4.
Installation
and configuration
Follow
the instructions in this section to download and install this interim fix in
your cluster.
System requirements
Linux
x86_64
Installing
on IBM Spectrum Symphony client hosts
Install
this interim fix on all IBM Spectrum Symphony client hosts in the cluster
before installing on other hosts:
a.
Log on to
each client host in your cluster as the cluster administrator. Ensure that no
client processes are running, and back up the following files for recovery
purposes:
$SOAM_HOME/lib64/libsoambase.so
$SOAM_HOME/lib/libsoambase.so
b.
Download
the symclnt-7.2.0.2.x86_64_build600439.tar.gz package and extract its contents to the $SOAM_HOME installation directory:
> tar zxfo symclnt-7.2.0.2.x86_64_build600439.tar.gz
-C $SOAM_HOME
c.
Check the
modified time of the following files to verify that the fix was correctly installed:
$SOAM_HOME/lib64/libsoambase.so
$SOAM_HOME/lib/libsoambase.so
Installing
on other (primary, management, and compute) IBM Spectrum Symphony hosts
After
you have installed this interim fix on client hosts, you can install it all IBM
Spectrum Symphony primary, primary candidate, management, and compute hosts in
the cluster:
a.
Log on to
the primary host as the cluster administrator, disable all applications, stop
all EGO services, and shut down all the primary candidate hosts in your
cluster:
> egosh user logon -u Admin -x password
> soamcontrol app disable all
> egosh service stop all
> egosh ego shutdown hostname
b.
On each management
and compute host (or just one host if you are using a shared file system) in
the cluster, backup the following files:
$EGO_TOP/3.6/linux-x86_64/lib/sec_ego_gsskrb.so
$EGO_TOP/soam/7.2/linux-x86_64/lib/libsoambase.so
$EGO_TOP/soam/7.2/linux-x86_64/lib64/libsoambase.so
c.
On each management
and compute host (or just one host if you are using a shared file system), copy
the sym-7.2.0.2_x86_64_build600439.tar.gz package and decompress it to the $EGO_TOP installation directory:
> tar zxof sym-7.2.0.2_x86_64_build600439.tar.gz
-C $EGO_TOP
d.
Log on to
the primary host as the cluster administrator, start your cluster, and enable
your applications:
> egosh ego start hostname
> soamcontrol app enable application_name
5.
Uninstallation
If required, follow the instructions in this section to uninstall
this interim fix from your cluster. Ensure that no client or services
processes are running on the current hosts.
Uninstalling from other (primary,
management, and compute) IBM Spectrum Symphony hosts
Uninstall this interim fix from other (IBM Spectrum Symphony primary,
primary candidate, management, and compute) hosts in the cluster before
uninstalling from client hosts in the cluster:
a.
Log on to
the primary host as the cluster administrator, disable all applications, stop
all EGO services, and shut down all the primary candidate hosts in your
cluster:
> egosh user logon -u Admin -x password
> soamcontrol app disable all
> egosh service stop all
> egosh ego shutdown hostname
b.
On each
management and compute host (or just one host if you are using a shared file
system) in the cluster, restore the following files from your backup:
$EGO_TOP/3.6/linux-x86_64/lib/sec_ego_gsskrb.so
$EGO_TOP/soam/7.2/linux-x86_64/lib/libsoambase.so
$EGO_TOP/soam/7.2/linux-x86_64/lib64/libsoambase.so
c.
Log on to
the primary host as the cluster administrator, start your cluster, and enable
your applications:
> egosh ego start hostname
> soamcontrol app enable application_name
Uninstalling from IBM
Spectrum Symphony client hosts
After
you have uninstalled this interim fix from all primary, primary candidate,
management, and compute hosts in the cluster, you can uninstall it from the IBM
Spectrum Symphony client hosts.
Log on to each client host as the cluster
administrator, ensure that no client or services processes are
running, and restore the
following files from your backup:
$SOAM_HOME/lib64/libsoambase.so
$SOAM_HOME/lib/libsoambase.so
6.
List
of files
d094aa90cb34b76f44d9ab3c47cf8d86
sym-7.2.0.2_x86_64_build600439.tar.gz
1a49d6494be88f549c7d973a19714af1
3.6/linux-x86_64/lib/sec_ego_gsskrb.so
22d4efefab2a28493d38cd23d1126762
soam/7.2/linux-x86_64/lib64/libsoambase.so
db54199ff9db4498b052def70a3a1596
soam/7.2/linux-x86_64/lib/libsoambase.so
0d3e1ed6034729817bd95d462d2fee7a
symclnt-7.2.0.2.x86_64_build600439.tar.gz
22d4efefab2a28493d38cd23d1126762
lib64/libsoambase.so
db54199ff9db4498b052def70a3a1596
lib/libsoambase.so
7.
Product
notifications
To receive information about product solution and patch updates automatically, subscribe to product notifications on the My Notifications page http://www.ibm.com/support/mynotifications/ on the IBM Support website (http://support.ibm.com). You can edit your subscription settings to choose the types of information you want to get notification about, for example, security bulletins, fixes, troubleshooting, and product enhancements or documentation changes.
8.
Copyright
and trademark information
© Copyright IBM Corporation 2021
U.S. Government Users Restricted Rights - Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp.
IBM®, the IBM logo, and ibm.com® are trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the Web at "Copyright and trademark information" at www.ibm.com/legal/copytrade.shtml.