Topics

1

MP Server / ARSLSYNC Issues

« on: April 23, 2024, 09:10:38 AM »

I'm attempting to run ARSLSYNC on my RHEL7 CMOD 10.5 development box. It's been giving me fits. No matter what I do the only way I'm getting any output is with these settings in ars.cfg
ARS_LDAP_SERVER_TYPE=AD
#ARS_LDAP_USER_FILTER=(&(objectClass=user)(memberOf=CN=CMOD_XXX_Business_dev,"OU=XXXX Groups,DC=xxx,DC=xxxx,DC=xxxxx,DC=com"))
ARS_LDAP_GROUP_USER_FILTER_USE_DN=FALSE
ARS_LDAP_USER_FILTER=(objectClass=user)
ARS_LDAP_GROUP_FILTER=(objectClass=group)
ARS_LDAP_GROUP_MAPPED_ATTRIBUTE=CN
ARS_LDAP_IGN_GROUPS=Security,CMOD_Admin,CMOD_Operations
The above gives me EVERYBODY in AD except CMOD_XXX_Business_dev. I can't get the filters to work to bring in the only group with 4 users into my Dev environment. According to my identity people the group exists in AD and has 4 users defined.
If I attempt to use the USER_FILTER code ARSLSYNC doesn't find the users or group running with the just -t -v options.
Has anyone been successful using ARSLSYNC to provision users in CMOD that are part of Group?
I am in consultation with IBM Lab Services as part of a work effort to authenticate a small group of users accessing documents via the Thick Client via AD and SSL, which is working fine. Lab Services is also looking at the issue as I've sent them the trace and output.
I'm running CMOD MP 10.5.0.5 on a RHEL7 server with DB2 11
I know next to nothing about AD or LDAP.

2

MP Server / User Object Count Discrepancy Between Admin GUI and ARSXML Export

« on: March 26, 2024, 06:45:57 AM »

I had to export our users in production yesterday for our annual SOC Audit (Sarbanes Oxley) and the export ended up with 24 MORE ID's than what was displayed in the Admin GUI.
I went through ID by ID to figure out which ID's were missing from the GUI.
Has anybody ever experienced this?
I have a ticket open with IBM.
CMOD Ver 10.5.0.5
OS RHEL7
Library/Object server are the same server.
I am the admin and exported the User objects under my ID.

3

MP Server / How Can I Optimize ARSDOC GET

« on: January 23, 2024, 09:11:46 AM »

I've got to extract a little over 170K pdf documents (or more) from my CMOD instance to give to the external entity that bought one of our subsidiaries. I had intended to use ARSDOC GET with the LOAD ID (-X ) and -c -g -N parameters to get the documents but my tests last week on a large load (4182 pdf documents) took almost 4 hours to run. I don't know if I'll have to do -c but I haven't yet heard from the external entity on how they need the pdf documents (they don't use CM or CMOD). TSM seems to be the sticking point since all of the documents have migrated out of cache and are now in TSM. IBM indicates that TSM is the problem. I'm open to suggestions of ways to speed this up without affecting my internal and external users. I'm on CMOD 10.5.0.5 with DB2 and TSM on a RHEL7 server. TIA

4

General / CMOD in the Cloud

« on: October 19, 2023, 07:51:33 AM »

Anybody in the group using CMOD in the Cloud yet?
We're running OD Multi-Platforms in a RHEL7 environment and the Unix/Linux engineers are informing us that the servers will be going into extended support next year until June 2025.
The question we're wrestling with is whether to stay on prem or go to the cloud. IBM documentation seems a little thin in the area of things like feature comparison between the cloud and on prem solutions, unless there is none.
CMOD is considered a Tier 1 mission critical application in my organization so remaining on RHEL7 past June of 2024 is considered 'not suitable' so I guess I have my goal for next year.
Input from the group would be appreciated.

5

MP Server / Question Setting Up LDAP & SSL Authentication for Windows Clients on CMOD V10.5

« on: April 20, 2023, 06:07:40 AM »

Has anyone set up LDAP/AD authentication through SSL for the Windows Client only on a MultiPlatorm installation?
I'm a mainframer with 17 years experience supporting CMOD in our environment and I'm tasked with authenticating the few users, less than 1k, that retrieve documents using the Windows (Thick) Client. (It was never intended but....)
I have to run the GSKit commands to set up the Key DB and Stash files. I assume I'll have to run them as root but root does not own CMOD. We changed that years ago. Will the resulting files have to be owned by the CMOD owner OR will I have to change permissions? If so what should I look for.
I open a case with IBM but they say that they can't answer that type of question (which I consider a how-to question but okay)  and I have to likely pay for Lab Services help. Not going to happen.
Any suggestions would be helpful.
Also I found that I am missing ARSLDAP.INI in my installation, likely because this server has been upgraded from the original install of 9.5 to 10.1 and now 10.5. I'm waiting to see what IBM says about this missing INI file. Does anyone know if I really need this INI?

6

MP Server / TSM Error:ANS1035S (RC406) Options file '*' could not be found...CMOD Down

« on: November 21, 2022, 10:38:28 AM »

On Friday one of my customers attempted to load 2 small AFP document files from the mainframe to my QA environments and both files took 88 load failed errors.
The system log provided this information:
429 TSM Error: ANS1035S (RC406)  Options file '*' could not be found, or it cannot be read., Return Code=406, Reason=0, File=arssmsms.cpp, Line=1603  Srvr->
I sent the error to my storage guy and he ended up requesting a server reboot. When the reboot occurred arssockd failed to start. I cannot start it manually. I'm wondering if anybody has run across this while I wait for IBM support to figure out the problem.
CMOD V10.5.0.4 running on a RHEL 7 server
DB2 V11.01.0406
Spectrum Protect (TSM) V8.1.12

7

MP Server / ARSJESD Issue in 10.5.0.4

« on: March 03, 2022, 12:08:20 PM »

I've upgraded my non-production servers to CMOD 10.5.0.4 for multi-platforms and have run into an issue with arsjesd stopping itself for no apparent reason. It's fine and stable in 10.1.0.5
In opening a ticket with IBM apparently arsjesd is a Print Services Facility module and not support by IBM CMOD Support. I'm getting nowhere with IBM because I have no idea about licensing PSF (the ticket has been escalated)
I'm on RHEL7 servers using arsjesd to 'listen' for AFP files from our mainframe LPAR being sent using MVSDOWNLOAD utility. We've been doing this for 16 years and this is the first time I've seen arsjesd just stop. I did find a couple of core dumps in my 2 filesystems defined for loading on my DEV server.
This issue has appeared since upgrading the servers from 10.1.0.5 to 10.5.0.4. We are running CMOD for Multi-Platforms using the standard install parameters provided by IBM.
This is the startup command issued:
/opt/ibm/ondemand/V10.5/bin/arsjesd -p 6001 -d /app/arsacif/acif2 -d /app/arsacif/acif3
Has anybody had a similar issue?
**UPDATE** I've been running 3 weeks in non-production with the 10.5.0.1 version of arsjesd and it appears stable. I will be upgrading my production server this weekend and using the 10.5.0.1 version as the temporary fix until 10.5.0.5 is released.

8

OD/WEK & JAVA API / ODWEK 9.0/Server 10.1

« on: April 22, 2020, 08:36:18 AM »

Is anybody successfully using ODWEK 9.0 with a CMOD 10.1 Server install? Yes I know it's not on the compatibility matrix but the web guys are slow in upgrading and I'm not. TIA