Recent Posts

11

MP Server / ARSXML Export Application group along with Applications

« Last post by galina raychuk on April 03, 2024, 08:22:27 AM »

Need to export an application group with applications attached to App group.
Looking for some examples. Thank you

I have this to export application group:
#This function will export all existing appgroups from ags.list, update appgroup name to $grpname-ANEX and Account Number to length of 9
function exportappgroupARSXML {
PWD=$(pwd)
appgrps=`cat ${WDIR}/ags.list`
for grpname in ${appgrps}
  do
 cp ${WDIR}/xmlheader ${XMLFILE}
echo $grpname
echo "   <applicationGroup name=\"${grpname}\">" >>${XMLFILE}
echo "  </applicationGroup>" >>$XMLFILE
echo "  </onDemand>" >>$XMLFILE
${ARSXML} export -h ${HOST} -u ${ADM} -p ${PW} -i ${XMLFILE} -r pl -v >${tempout}

12

Announcements & News / ALERT: GSKit 8.0.55.26+ & Post-Quantum Cryptography

« Last post by Justin Derrick on April 01, 2024, 07:09:00 AM »

IBM Global Security Kit is a library that is used by many IBM products to provide cryptographic functions - encrypting data, hashing passwords, etc.  It is generally a good security practise to keep your GSKit at the latest release version, to ensure the highest level of protection for your data and communications.

In one of the most recent FixPacks of GSKit (8.0.55.26+), IBM added 'post quantum cryptography' support to key databases.  "Post-Quantum Cryptography" ('PQC') refers to cryptographic methods that are resistant to factoring attacks against standard cryptographic methods that are quickly becoming feasible due to advances in quantum computing.  This change breaks CMOD v10.5.0.7 (and likely all lower versions).

With the latest GSKit Fixpack, there was no notification, no included README file, and no updated documentation released to describe the change.  It is considered bad software development practise to introduce a change that breaks upstream products, and enable that change by default in minor or 'fix' releases.

CMOD bears some of the responsibility for this issue, as it currently ignores the unreadable key database, didn't produce any error messages (or pass through the GSKit errors), and arssockd starts up, exposing an unresponsive SSL/TLS port on the server's network interface.  Only through extensive server tracing can a cryptic and uninformative GSKit error message be found.

This issue affects both server and client software.  Key Databases must be re-created for both using an undocumented option in order to work with the latest Content Manager OnDemand FixPacks.

Other products may experience similar issues if key databases are created with the latest versions of GSKit.

More information and a solution can be found here:

https://cmod.wiki/index.php?title=IBM_Content_Manager_OnDemand_v10.5.0.7_and_GSKit_support_for_Post-Quantum_Cryptography

-JD.

13

MP Server / Re: Spectrum Protect(TSM) expired certificate problem with database backups

« Last post by jsquizz on March 28, 2024, 08:59:05 AM »

Just as an FYI - I have also seen this scenario when loading into S3/EMC, we had to add the .cer provided by the storage folks for it to work.

14

MP Server / Re: Spectrum Protect(TSM) expired certificate problem with database backups

« Last post by zeus1996 on March 28, 2024, 02:49:50 AM »

Thanks Justin, yes imported cert256.arm to nodename keybase, problem solved

15

Content Navigator / Re: Combine documents, view as one

« Last post by rjrussel on March 27, 2024, 11:28:29 AM »

https://www.ibm.com/docs/en/content-navigator/3.0.15?topic=navigator-whats-new-in-content-3015

16

Content Navigator / Re: Issue connecting to ICN Repository

« Last post by jsquizz on March 27, 2024, 10:45:08 AM »

This issue was very weird. Here's what I did.

1) Verified ALL classpaths/paths at the OS level, and the websphere level -> Including pointing to the new version of log4j/gson
2) Uninstalled CMOD V10.5
3) Reinstalled CMOD V10.5 + FixPack 7
4) Redeployed the ICN ear file
5) Repository successfully added.

Essentially, a reinstall of the base CMOD, fixed us up.

I am seeing this error above again. I compared this system, to a working existing system, and they are the identical as far as settings goes. I tried the same, uninstall/reinstall/redeploy.. no luck. Has anyone else seen this?

17

Content Navigator / Combine documents, view as one

« Last post by jsquizz on March 27, 2024, 09:47:01 AM »

In the current thick client that my customer is using, in the thick client, they would select numerous reports/hits in the hitlist.

Options - > View Combined documents, view all. So now all documents open as expected in a "bundle". They can then export them to their desktop. It creates a single text file that the user can then open with notepad and do all of their work.

Is there a simple way to do this in ICN or am I overlooking something?

18

Other / Re: "arsdoc get" Retrieves a larger document than what was originally ingsted.

« Last post by Mehmet S Yersel on March 27, 2024, 05:11:30 AM »

Thank you RJ, for the feedback.

I think, this should be a potential enhancement to how arsdoc get should operate when this unique condition is encountered.

In the meantime, I shall retrieve all such objects for all involved reports using arsdoc get and create generic indexer files as well to mimic what arsdoc get should have done in the first place.
 
Thanks again,
-Mehmet

19

MP Server / Re: Disable users ability to change passwords

« Last post by rjrussel on March 26, 2024, 04:09:47 PM »

Off the top of my head, not sure.

20

MP Server / Re: Operations issue with LDAP

« Last post by rjrussel on March 26, 2024, 04:08:54 PM »

Probably a config error. Double check all required LDAP attributes are defined in the ars.cfg correctly. You can also enable LDAP trace on the server. There is likely another error somewhere else you might have missed. I would enable trace, stop the server, remove existing trace file, start the server and then test. This way you have a clean trace. L2 will need that anyway if you open a case.