Recent Posts

Pages: 1 2 [3] 4 5 6 7 8 ... 10
21
We are about to upgrade our CMOD environment running under RHEL 7.9, to RHEL 9

The following components are running on this Linux RHEL 7.9 server:
  • IBM Content Navigator 3.0.11
  • IBM Content Manager OnDemand 10.5.0.5
  • IBM Websphere Application Server 9.0.5.13 ND

Does IBM software (ICN, WAS and CMOD) support in-place OS upgrade from RHEL7.9 to RHEL9 or should we make a new installations on a new Linux RHEL 9 server and make switch-over from old RHEL 7.9 server to new RHEL 9 server?
22
MP Server / Re: Globally disable Annotations?
« Last post by jsquizz on April 10, 2024, 02:19:10 PM »
Figured this out and verified with our end users.

Right click system parameters, uncheck all boxes, top right
23
MP Server / Globally disable Annotations?
« Last post by jsquizz on April 05, 2024, 07:22:44 AM »
2600 AG's
100 Groups
100-some users

All have access to annotations. The customer does NOT want this.

Is there a way to globally disable this? Or should I get started on my script.

Thanks!
24
MP Server / Re: ARSXML Export Application group along with Applications
« Last post by galina raychuk on April 04, 2024, 07:10:21 AM »
Thanks a lot. I did have -r but needed a (for application).
25
MP Server / Re: ARSXML Export Application group along with Applications
« Last post by Mehmet S Yersel on April 03, 2024, 01:24:16 PM »
You need to add the -r a option for exporting applications contained within the application group. This part should be:

${ARSXML} export -h ${HOST} -u ${ADM} -p ${PW} -i ${XMLFILE} -r apl -v >${tempout}
26
MP Server / ARSXML Export Application group along with Applications
« Last post by galina raychuk on April 03, 2024, 08:22:27 AM »
Need to export an application group with applications attached to App group.
Looking for some examples. Thank you

I have this to export application group:
#This function will export all existing appgroups from ags.list, update appgroup name to $grpname-ANEX and Account Number to length of 9
function exportappgroupARSXML {
PWD=$(pwd)
appgrps=`cat ${WDIR}/ags.list`
for grpname in ${appgrps}
  do
 cp ${WDIR}/xmlheader ${XMLFILE}
echo $grpname
echo "   <applicationGroup name=\"${grpname}\">" >>${XMLFILE}
echo "  </applicationGroup>" >>$XMLFILE
echo "  </onDemand>" >>$XMLFILE
${ARSXML} export -h ${HOST} -u ${ADM} -p ${PW} -i ${XMLFILE} -r pl -v >${tempout}
27
Announcements & News / ALERT: GSKit 8.0.55.26+ & Post-Quantum Cryptography
« Last post by Justin Derrick on April 01, 2024, 07:09:00 AM »
IBM Global Security Kit is a library that is used by many IBM products to provide cryptographic functions - encrypting data, hashing passwords, etc.  It is generally a good security practise to keep your GSKit at the latest release version, to ensure the highest level of protection for your data and communications.

In one of the most recent FixPacks of GSKit (8.0.55.26+), IBM added 'post quantum cryptography' support to key databases.  "Post-Quantum Cryptography" ('PQC') refers to cryptographic methods that are resistant to factoring attacks against standard cryptographic methods that are quickly becoming feasible due to advances in quantum computing.  This change breaks CMOD v10.5.0.7 (and likely all lower versions).

With the latest GSKit Fixpack, there was no notification, no included README file, and no updated documentation released to describe the change.  It is considered bad software development practise to introduce a change that breaks upstream products, and enable that change by default in minor or 'fix' releases.

CMOD bears some of the responsibility for this issue, as it currently ignores the unreadable key database, didn't produce any error messages (or pass through the GSKit errors), and arssockd starts up, exposing an unresponsive SSL/TLS port on the server's network interface.  Only through extensive server tracing can a cryptic and uninformative GSKit error message be found.

This issue affects both server and client software.  Key Databases must be re-created for both using an undocumented option in order to work with the latest Content Manager OnDemand FixPacks.

Other products may experience similar issues if key databases are created with the latest versions of GSKit.

More information and a solution can be found here:

https://cmod.wiki/index.php?title=IBM_Content_Manager_OnDemand_v10.5.0.7_and_GSKit_support_for_Post-Quantum_Cryptography

-JD.
28
Just as an FYI - I have also seen this scenario when loading into S3/EMC, we had to add the .cer provided by the storage folks for it to work.
29
Thanks Justin, yes imported cert256.arm to nodename keybase, problem solved
Pages: 1 2 [3] 4 5 6 7 8 ... 10