Enabling query and result sharing with Guardium if updating to 11.2.1.7

Learn how to enable query and result sharing with Guardium from Guardium enabled docker container on your Netezza Performance Server if you are updating to 11.2.1.7.

Procedure

  1. Upgrade the container image. For example, to 11.2.1.7.
    /opt/ibm/appliance/storage/ips/ips1_deployment/v11.2.1.X/nzdeploy -u

    Replace v11.2.1.X with your release number.

    Example:
    /opt/ibm/appliance/storage/ips/ips1_deployment/v11.2.1.7/nzdeploy -u
  2. Edit the guardium.env file:
    1. Open the file.
      vi /opt/ibm/appliance/storage/ips/ipshost1/guardium.env
    2. Edit the guardium.env file.
      STAP_CONFIG_TAP_PRIVATE_TAP_IP=127.0.0.1
      STAP_CONFIG_TAP_TAP_IP= NPS host name (example.customer.com)
      STAP_CONFIG_TAP_FORCE_SERVER_IP=1
      GUARDIUM_INFO=Guardium collector IP address
  3. Upgrade the container again.
    /opt/ibm/appliance/storage/ips/ips1_deployment/v11.2.1.X/nzdeploy -u
    Example:
    /opt/ibm/appliance/storage/ips/ips1_deployment/v11.2.1.7/nzdeploy -u
  4. Redeploy the container to other control plane nodes.
    /opt/ibm/appliance/storage/ips/ips1_deployment/v11.2.1.X/nzdeploy-remote -n CONTROL PLANE NODE -n CONTROL PLANE NODE
    Example:
    /opt/ibm/appliance/storage/ips/ips1_deployment/v11.2.1.7/nzdeploy-remote -n node2 -n node3 -n connectornode
  5. Edit the postgresql.conf file to enable sharing/query result with Guardium.
    1. Add the session variable.
      enable_guardium_share_info = yes
    2. Add the libguard_netezza_exit_64.so Guardium library path.
      guardium_exit_lib='PATH TO libguard_netezza_exit_64.so'
      Example:
      guardium_exit_lib='/usr/lib64/libguard_netezza_exit_64.so'
  6. Restart the ipshost1 container.
    1. docker stop ipshost1
    2. docker start ipshost1