Messages

31

General / Re: CMOD in the Cloud

« on: October 19, 2023, 06:43:36 PM »

"The cloud is just someone else's computer."

I've got several customers running CMOD in VMs, Cloud servers with dedicated hardware, cloud storage, and a mix of all of the above.

Migrations to the cloud are the overwhelming majority of my work now. 

-JD.

32

Announcements & News / UPDATE: Single Sign On ("SSO") on CMOD with ICN

« on: September 28, 2023, 04:57:21 AM »

The document describing how to implement SSO with CMOD and ICN has been updated:

https://www.ibm.com/support/pages/node/713479

-JD.

33

MP Server / Re: OnDemand on Linux fails with Higher Version (CMOD 9.5)

« on: September 26, 2023, 03:06:00 PM »

I just did a patch to v10.5.0.7 today, no issues.  Thanks for the details on the fix though. 

If you were patching an existing server, you might have issues with your Java Path...

-JD.

34

MP Server / Re: OnDemand on Linux fails with Higher Version (CMOD 9.5)

« on: September 25, 2023, 06:28:07 PM »

Just a quick note to thank Roberto and Alessandro for this thread...  Almost 10 years later, it helped me upgrade a client from v7 all the way to v10.5...

Another awesome display of the power of the forums. 

-JD.

35

MP Server / Re: Testmachine with TSM installed getting errors

« on: September 25, 2023, 06:33:26 AM »

Depends on the configuration -- if they're sequential volumes (like tapes) then you need to manually add volumes or might need to change your 'maxscratch' parameter. 

As for disabling TSM, it's just going to result in a lot of weird errors as CMOD tries to do retrievals and maintenance tasks since the App Groups are likely configured for it.  If that's not a concern, then carry on.

-JD.

36

MP Server / Re: Change the time of expiration affects old documents?

« on: September 22, 2023, 08:06:15 AM »

Hi Lair.

Yes, CMOD calculates which documents are eligible for expiration at the time that maintenance is run, using the value from 'Life of Data and Indexes'.

HOWEVER...  If you're using Tivoli Storage Manager, and you've set a specific retention period at the management class level, you ALSO have to change that setting, or data will be discarded by TSM based on it's own configuration.  As a result, if you have other App Groups that share the same TSM-enabled Storage Set in CMOD, they will need to be moved out of that Storage Set, because they will have their retention extended as a side effect.

-JD.

37

MP Server / Re: Testmachine with TSM installed getting errors

« on: September 22, 2023, 08:02:05 AM »

There's a section on the wiki that describes this and links to the IBM Documentation: 

https://cmod.wiki/index.php?title=Troubleshooting_Content_Manager_OnDemand#Return_Codes

Your error return code seems to imply that you dn't have any more storage space - you may need to assign any new volumes to a specific storagepool.

From the TSM API Docs:

Code: [Select]

#define DSM_RS_ABORT_NO_STOR_SPACE_STOP      29
-JD.

38

z/OS Server / Re: Arrange Fields

« on: September 06, 2023, 04:42:39 PM »

Do I smell an Enhancement Request?

-JD.

39

z/OS Server / Re: ARSRPT hold back Load report

« on: August 31, 2023, 06:55:40 AM »

Sounds like a bug - either you're exceeding the bounds of an INT, or there's a problem with the query that populates the field.

Best to open a ticket with IBM on this -- I don't think there's anything we can do to help with this one.

-JD.

40

MP Server / Re: S3 encryption with CMOD

« on: August 30, 2023, 01:30:23 AM »

If you're already using CMOD's Native encryption, there's no point is encrypting it a second time. it just adds overhead to all file operations...

If you're not using CMOD's Native Encryption...  You should!  It protects data from the moment it's loaded, and after that point, it shouldn't matter if it's accessible to the world as long as you can keep your encryption keys secret. 

Finally, if I understand you correctly, you're suggesting that you would provide the unencrypted documents, *and* the encryption key (which is also the decryption key!) to the S3 server for it to do the work?  That doesn't sound secure, since the key would leave your control on the CMOD server.

If you have any documentation or additional info on what you're trying to do, I'd love to read it.  The cloud is a very new and strange thing for those of us who have already been working in IT for nearly 30 years. 

41

MP Server / Re: S3 encryption with CMOD

« on: August 28, 2023, 09:38:40 AM »

Hi Norbert.

If you configure CMOD for Native Encryption, you should have the encryption keys on your CMOD server.

If you want your communications encrypted as well, you just need the certificate chain for your S3 storage and to configure it in your s3.cfg file.

Unless I'm missing something, it should be straightforward.

-JD.

42

Announcements & News / SECURITY: CMOD Fixpack v10.5.0.7 supports TLS v1.3

« on: August 28, 2023, 09:16:56 AM »

Just a quick note for anyone whose CIO/CISO team requires TLS v1.3 support for applications, this support has been added to FixPack v10.5.0.7 with GSKit v8.0.55.31.  You will also require a Client-side update for Windows Clients.

Visit Fix Central to download these packages, or direct links can be found here:  https://cmod.wiki/index.php?title=Main_Page#IBM_CMOD_Fixpacks_.26_Security_Bulletins

-JD.

43

z/OS Server / Re: DSNT408I SQLCODE = -804, ERROR

« on: August 17, 2023, 08:19:58 AM »

I should have mentioned that it will likely affect performance, but it should be minor as the DB2 optimizer on LUW is very, very good (and it's probably even better in z/OS).

-JD.

44

z/OS Server / Re: DSNT408I SQLCODE = -804, ERROR

« on: August 15, 2023, 12:05:35 PM »

Here's some total WAGs:

Check app group definitions to make sure AcctNo has the same definition in all App Groups

If you have database access, something like:

Code: [Select]

select * from arsagfld where name like 'acctNo' will make any differences a little more obvious.

Turn off parameter markers for queries

Ask your DBA to check their diagnostic logs (db2diag.log in the LUW world) for more info.

-JD.

45

Report Indexing / Re: Issues with PPDs + Resources

« on: August 09, 2023, 07:05:40 AM »

You've committed the cardinal sin of not posting your CMOD version and platform.  The behaviour of the PDF indexer has changed dramatically over the years, so version numbers in this case are important.

If the resources erroneously being bundled are images, you can remove them from the RESTYPE parameter with:

Code: [Select]

RESTYPE=FONT
-JD.