Readme File for IBM^® Spectrum Symphony 7.3.1 RFE SPCS-I-938

Readme file for: IBM Spectrum Symphony

Product release: 7.3.1

Fix ID: sym-7.3.1-build601490-jpmc

Publication date: March 13, 2023

Enhancement to support verifying a peer hostname against the server certificate’s DNS (defined in the Subject Alternative Name) or CN. This project adds a new SERVER_AUTH configuration value to enable this feature.

Contents

1. Scope

2. Installation

3. Configuration

4. Uninstallation

5. List of files

6. Product notifications

7. Copyright and trademark information

1.    Scope

Before you install this enhancement to your cluster, note the following requirements:

2.    Installation

Follow these instructions to download and install this enhancement on hosts in your cluster.

Packages

To install this enhancement, download the following packages for your hosts:

egomgmt-3.9.0.0_noarch_build601490.tar.gz

symclnt-7.3.1.0_x86_64_build601490.tar.gz

Pre-Installation

a.     Log on to the primary host as the cluster administrator and source your environment:

(BASH) . $EGO_TOP/profile.platform

(CSH) source $EGO_TOP/cshrc.platform

b.   Log on as the cluster administrator, disable all applications, stop all EGO services, and shut down your cluster:

> egosh user logon -u Admin -x password

> soamcontrol app disable all -f

> egosh service stop all

> egosh ego shutdown all

Installing on management hosts

a.    Download the egomgmt-3.9.0.0_noarch_build601490.tar.gz, egocore-3.9.0.0_x86_64_build601490.tar.gz and soamcore-7.3.1.0_x86_64_build601490.tar.gz to each of your management hosts (or to just one host if you are using a shared file system) for example, to a /symfixes directory.

b.    Run the egoinstallfixes command to install the egomgmt-3.9.0.0_noarch_build601490.tar.gz, egocore-3.9.0.0_x86_64_build601490.tar.gz and soamcore-7.3.1.0_x86_64_build601490.tar.gz files:

> egoinstallfixes /symfixes/egomgmt-3.9.0.0_noarch_build601490.tar.gz

> egoinstallfixes /symfixes/egocore-3.9.0.0_x86_64_build601490.tar.gz

> egoinstallfixes /symfixes/soamcore-7.3.1.0_x86_64_build601490.tar.gz

Note: Running the egoinstallfixes command automatically backs up the current binary files to a fix backup directory for recovery purposes. Do not delete this backup directory; you will need it if you want to recover the original files. For more information on using this command, see the egoinstallfixes command reference.

Installing on compute hosts

a.    Download the egocore-3.9.0.0_x86_64_build601490.tar.gz and soamcore-7.3.1.0_x86_64_build601490.tar.gz to each of your compute hosts (or to just one host if you are using a shared file system) for example, to a /symfixes directory.

b.    Run the egoinstallfixes command to install the egocore-3.9.0.0_x86_64_build601490.tar.gz and soamcore-7.3.1.0_x86_64_build601490.tar.gz files:

> egoinstallfixes /symfixes/egocore-3.9.0.0_x86_64_build601490.tar.gz

> egoinstallfixes /symfixes/soamcore-7.3.1.0_x86_64_build601490.tar.gz

Note: Running the egoinstallfixes command automatically backs up the current binary files to a fix backup directory for recovery purposes. Do not delete this backup directory; you will need it if you want to recover the original files. For more information on using this command, see the egoinstallfixes command reference.

Installing on client hosts

a.     Log on to the IBM Spectrum Symphony client host and stop the running client.

b.     On each Linux client host, back up the following files:

$SOAM_HOME/lib64/libsoambase.so

$SOAM_HOME/lib/libsoambase.so

$SOAM_HOME/lib64/libvem.so.3.9.0

$SOAM_HOME/lib/libvem.so.3.9.0

$SOAM_HOME/lib64/libsoamdeploy.so.7.3.1

$SOAM_HOME/lib/libsoamdeploy.so.7.3.1

c.     On each IBM Spectrum Symphony client host, download the symclnt-7.3.1.0_x86_64_build601490.tar.gz package and decompress it to the $SOAM_HOME directory:

> tar zxfo symclnt-7.3.1.0_x86_64_build601490.tar.gz -C $SOAM_HOME

3.    Configuration

Modify the configuration files to enable this feature:

a.     Change the SERVER_AUTH parameter in the ego.conf file on all client hosts from SERVER_AUTH=HOST to SERVER_AUTH=HOST_CN_DNS.

b.     Change the SERVER_AUTH parameter in the ego.conf file on all management and compute hosts from SERVER_AUTH=HOST to SERVER_AUTH=HOST_CN_DNS.

Change the SERVER_AUTH parameter in the sd.xml and rs.xml file on the management hosts from SERVER_AUTH=HOST to SERVER_AUTH=HOST_CN_DNS.

Modify each application profile to enable this feature:

a.     Start the cluster.

> egosh ego start

b.     Change the SERVER_AUTH parameter in each application profile from SERVER_AUTH=HOST to SERVER_AUTH=HOST_CN_DNS.

c.     Register the application profile and enable your applications:

> soamreg application_profile

> soamcontrol app enable application_name

4.    Uninstallation

If required, uninstall this enhancement from each host hosts in your cluster.

Uninstalling from management and compute hosts

a.     Log on to the primary host as the cluster administrator and source your environment:

(BASH) . $EGO_TOP/profile.platform

(CSH) source $EGO_TOP/cshrc.platform

b.     Log on as the cluster administrator, disable all applications, stop all EGO services, and shut down your cluster:

> egosh user logon -u Admin -x password

> soamcontrol app disable all -f

> egosh service stop all

> egosh ego shutdown all

c.     From each of your management and compute host (or just one host if you are using a shared file system), roll back this fix:

> egoinstallfixes -r 601490

d.     On each of the management and compute host, roll back the configuration SERVER_AUTH=HOST in the ego.conf file.

e.     On each of the management host, roll back the configuration SERVER_AUTH=HOST in the sd.xml and rs.xml files.

f.       From the primary host, start the cluster:

> egosh ego start all

g.     Roll back the configuration SERVER_AUTH=HOST in each application profile and register the application profile, and enable your applications:

> soamreg application_profile

> soamcontrol app enable application_name

Uninstalling from client hosts

a.     Log on to the IBM Spectrum Symphony client host and stop the running client.

b.     Recover the following files that you previously backed up in the installation section:

$SOAM_HOME/lib64/libsoambase.so

$SOAM_HOME/lib/libsoambase.so

$SOAM_HOME/lib64/libvem.so.3.9.0

$SOAM_HOME/lib/libvem.so.3.9.0

$SOAM_HOME/lib64/libsoamdeploy.so.7.3.1

$SOAM_HOME/lib/libsoamdeploy.so.7.3.1

c.     Roll back the configuration SERVER_AUTH=HOST in the ego.conf file.

5.    List of files

egocore-3.9.0.0_x86_64_build601490.tar.gz

egomgmt-3.9.0.0_noarch_build601490.tar.gz

soamcore-7.3.1.0_x86_64_build601490.tar.gz

symclnt-7.3.1.0_x86_64_build601490.tar.gz

6.    Product notifications

To receive information about product solution and patch updates automatically, subscribe to product notifications on the My Notifications page http://www.ibm.com/support/mynotifications/ on the IBM Support website (http://support.ibm.com). You can edit your subscription settings to choose the types of information you want to get notification about, for example, security bulletins, fixes, troubleshooting, and product enhancements or documentation changes. 

7.    Copyright and trademark information

© Copyright IBM Corporation 2023

U.S. Government Users Restricted Rights - Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp.

IBM®, the IBM logo and ibm.com® are trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the Web at "Copyright and trademark information" at www.ibm.com/legal/copytrade.shtml.