Recent Posts

Pages: [1] 2 3 4 5 6 ... 10
1
I can't speak for all of IBM -  8) - but it's fine.  I'd say our opinion is have a perfect backout strategy if the OS upgrade fails.

ok... This comment:

"The following components are running on this Linux RHEL 7.9 server:
IBM Content Navigator 3.0.11
IBM Content Manager OnDemand 10.5.0.5
IBM Websphere Application Server 9.0.5.13 ND?"

This led me to believe everything is on the same server.... Sounds like you have a good distribution, so all is well.   BTW: I just upgraded a server this week from 7.9 to 8.9. No issues. Your mileage may vary.

2
Thanks for your reply rjrussel,

While I think I understand what you are driving at, what does support mean to you in this case? Ideally, we always recommend new hardware/VMs. It is so much safer of a process.
Good question, I will try to list what I want to know(from top of my mind)
  • Is it OK to do so from IBM point of view, or are we performing something here that could lead us "out of support".
  • You say you recommend "new hardware/VMs", do you then have any experience where ICN / WebSphere / ODWEK would not function after upgrading the OS?


We also never recommend having all these components on the same server. ICN should be separate from the CMOD server.
We have ODWEK only on this server - bit unclear there yes.
CMOD / DB2 running on separate server.
3
While I think I understand what you are driving at, what does support mean to you in this case? Ideally, we always recommend new hardware/VMs. It is so much safer of a process. We also never recommend having all these components on the same server. ICN should be separate from the CMOD server.
4
We are about to upgrade our CMOD environment running under RHEL 7.9, to RHEL 9

The following components are running on this Linux RHEL 7.9 server:
  • IBM Content Navigator 3.0.11
  • IBM Content Manager OnDemand 10.5.0.5
  • IBM Websphere Application Server 9.0.5.13 ND

Does IBM software (ICN, WAS and CMOD) support in-place OS upgrade from RHEL7.9 to RHEL9 or should we make a new installations on a new Linux RHEL 9 server and make switch-over from old RHEL 7.9 server to new RHEL 9 server?
5
MP Server / Re: Globally disable Annotations?
« Last post by jsquizz on April 10, 2024, 02:19:10 PM »
Figured this out and verified with our end users.

Right click system parameters, uncheck all boxes, top right
6
MP Server / Globally disable Annotations?
« Last post by jsquizz on April 05, 2024, 07:22:44 AM »
2600 AG's
100 Groups
100-some users

All have access to annotations. The customer does NOT want this.

Is there a way to globally disable this? Or should I get started on my script.

Thanks!
7
MP Server / Re: ARSXML Export Application group along with Applications
« Last post by galina raychuk on April 04, 2024, 07:10:21 AM »
Thanks a lot. I did have -r but needed a (for application).
8
MP Server / Re: ARSXML Export Application group along with Applications
« Last post by Mehmet S Yersel on April 03, 2024, 01:24:16 PM »
You need to add the -r a option for exporting applications contained within the application group. This part should be:

${ARSXML} export -h ${HOST} -u ${ADM} -p ${PW} -i ${XMLFILE} -r apl -v >${tempout}
9
MP Server / ARSXML Export Application group along with Applications
« Last post by galina raychuk on April 03, 2024, 08:22:27 AM »
Need to export an application group with applications attached to App group.
Looking for some examples. Thank you

I have this to export application group:
#This function will export all existing appgroups from ags.list, update appgroup name to $grpname-ANEX and Account Number to length of 9
function exportappgroupARSXML {
PWD=$(pwd)
appgrps=`cat ${WDIR}/ags.list`
for grpname in ${appgrps}
  do
 cp ${WDIR}/xmlheader ${XMLFILE}
echo $grpname
echo "   <applicationGroup name=\"${grpname}\">" >>${XMLFILE}
echo "  </applicationGroup>" >>$XMLFILE
echo "  </onDemand>" >>$XMLFILE
${ARSXML} export -h ${HOST} -u ${ADM} -p ${PW} -i ${XMLFILE} -r pl -v >${tempout}
10
Announcements & News / ALERT: GSKit 8.0.55.26+ & Post-Quantum Cryptography
« Last post by Justin Derrick on April 01, 2024, 07:09:00 AM »
IBM Global Security Kit is a library that is used by many IBM products to provide cryptographic functions - encrypting data, hashing passwords, etc.  It is generally a good security practise to keep your GSKit at the latest release version, to ensure the highest level of protection for your data and communications.

In one of the most recent FixPacks of GSKit (8.0.55.26+), IBM added 'post quantum cryptography' support to key databases.  "Post-Quantum Cryptography" ('PQC') refers to cryptographic methods that are resistant to factoring attacks against standard cryptographic methods that are quickly becoming feasible due to advances in quantum computing.  This change breaks CMOD v10.5.0.7 (and likely all lower versions).

With the latest GSKit Fixpack, there was no notification, no included README file, and no updated documentation released to describe the change.  It is considered bad software development practise to introduce a change that breaks upstream products, and enable that change by default in minor or 'fix' releases.

CMOD bears some of the responsibility for this issue, as it currently ignores the unreadable key database, didn't produce any error messages (or pass through the GSKit errors), and arssockd starts up, exposing an unresponsive SSL/TLS port on the server's network interface.  Only through extensive server tracing can a cryptic and uninformative GSKit error message be found.

This issue affects both server and client software.  Key Databases must be re-created for both using an undocumented option in order to work with the latest Content Manager OnDemand FixPacks.

Other products may experience similar issues if key databases are created with the latest versions of GSKit.

More information and a solution can be found here:

https://cmod.wiki/index.php?title=IBM_Content_Manager_OnDemand_v10.5.0.7_and_GSKit_support_for_Post-Quantum_Cryptography

-JD.
Pages: [1] 2 3 4 5 6 ... 10