Download
Abstract
This is a General Availability (GA) patch containing all the fixes since the release of the IBM Tivoli Access Manager for e-Business 5.1.0 (WebSEAL).
Download Description
1.0 ABOUT THIS PATCH
--------------------
This patch package contains fixes for problems in the various components that
comprise the Tivoli Access Manager WebSEAL software.
1.1 Patch Contents
This patch package contains:
- This README file
- Update patch packaging
1.2 Architectures
This patch package applies to the following architectures:
- IBM AIX(R) 5.1 and 5.2
- IBM AIX(R) 5.3 with
1.xlC.rte (6.0.0.0 C Set ++ Runtime)
2.xlC.aix50.rte (6.0.0.13 C Set ++ Runtime for AIX 5.0)
3.bos.rte.libc (5.3.0.0 libc Library)
- Sun Solaris Operating Environment 2.8, 2.9, and 10
- HP-UX 11 and 11i
- Red Hat Enterprise Linux 3.0 update 3 Intel
- SuSE SLES8 for IA32
- SuSE SLES8 for zSeries(R) (31-bit systems) with SP 2
- Microsoft Windows 2000 Server and Advanced Server with SP 3
- Microsoft Windows 2003 Standard Server and Enterprise Server
NOTE: SuSE Linux is one of four partner companies whose products are
based on UnitedLinux 1.0; other companies being the SCO Group,
Turbolinux, and Conectiva. When SuSe Linux Enterprise Server (SLES)
is listed as supported, other partner companies' products based on
UnitedLinux 1.0 support is implied as well. For more information,
consult the UnitedLinux Web site at:
http://www.unitedlinux.com
1.3 Patches Superseded
All patches are cumulative unless otherwise explicitly stated.
Patches superseded by this patch:
5.1.0-TIV-AWS-FP0038
5.1.0-TIV-AWS-FP0036
5.1.0-TIV-AWS-FP0034
5.1.0-TIV-AWS-FP0032
5.1.0-TIV-AWS-FP0030
5.1.0-TIM-AWS-FP0026
5.1.0-TIM-AWS-FP0024
5.1.0-TIM-AWS-FP0022
5.1.0-TIM-AWS-FP0020
5.1.0-TIM-AWS-FP0017
5.1.0-TIM-AWS-FP0015
5.1.0-TIV-AWS-FP0013
5.1.0-TIV-AWS-FP0009
5.1.0-TIV-AWS-FP0006
5.1-AWS-FP04
5.1-AWS-FP02
5.1-AWS-0001
1.4 Dependencies
IBM Tivoli Access Manager Base, Version 5.1 with patch 5.1.0-TIV-TAM-FP0039
IBM Tivoli Access Manager WebSEAL, Version 5.1
GSKit Version 7.0.4.11
NOTE: IBM Tivoli Access Manager Base, Version 5.1 patch 5.1.0-TIV-TAM-FP0039
needed to be installed in the same system where this patch will
be installed as well as the above mentioned GSKit Version.
Please follow the 5.1.0-TIV-TAM-FP0039.README about how to install that
patch.
2.0 APARS AND DEFECTS FIXED
---------------------------
Because patches are cumulative, this patch corrects all the problems
outlined in the following sections.
2.1 Problems Fixed by Patch 5.1.0-TIV-AWS-FP0039
APAR IZ25866
SYMPTOM: files greater than 2 Gb in size may be truncated when downloaded
APAR IZ28161
SYMPTOM: improve reporting of failed junction connections in tracing
APAR IZ31748
SYMPTOM: SUBJECTKEYID and AUTHORITYKEYID of 10 or more octets returns
GSK_ERROR_BAD_CERT.
APAR IZ34712
SYMPTOM: number of worker threads does not decrease under some conditions
APAR IZ35150
SYMPTOM: garbled failover authentication log entries during LDAP shutdown
with certain language settings
APAR IY48111
Symptom: WebSEAL accepts non RFC 2068-compliant host headers.
When the host-header-in-request-log option is set, WebSEAL
also logs this host header into the request.log file.
APAR IZ50238
SYMPTOM: WEBSEAL process inherits root user group membership
APAR IZ55503
SYMPTOM: If a junction is defined with -K and not -D, a warning is
reported every time a connection is opened to that junction.
This fills up logs with messages.
Prerequisites
IBM Global Security Toolkit (GSKit) version 7.0.4.28
Installation Instructions
3.0 BEFORE INSTALLING THIS PATCH
--------------------------------
Before installing this patch, review the following prerequisites and
dependencies.
3.1 Back up Tivoli Access Manager data
Before applying any maintenance, be sure to back up your system. Use
the pdbackup command provided with the Tivoli Access Manager product
to back up Tivoli Access Manager-specific data. Documentation for the
pdbackup command is located in the "IBM Tivoli Access Manager Command
Reference, Version 5.1."
3.2 Upgrade GSKit to Version 7.0.4.28
Upgrade the IBM Global Security Toolkit (GSKit) to version 7.0.4.28
BEFORE installing the Tivoli Access Manager packages in this patch.
The updated GSKit installation packages may be downloaded at the URL:
https://www14.software.ibm.com/webapp/iwm/web/reg/download.do?source=gskitupdt&S_PKG=GSKit_7.0.4.28
After downloading the updated GSKit installation packages, use the
instructions located in the 5.1.0-TIV-TAM-FP0039.README to install the upgraded
GSKit packages.
4.0 INSTALLING THIS PATCH
-------------------------
Before installing this patch, be sure that you have reviewed the
prerequisites and have completed the back up procedure in section 3.0,
"BEFORE INSTALLING THIS PATCH".
If the Tivoli Access Manager product is distributed over multiple machines,
this patch must be applied to all WebSEAL systems within a secure domain.
This README assumes that $PATCH (or %PATCH% for Windows) is the path to
your temporary directory.
4.1 Installing this patch on AIX systems
1. Log in to the system as root.
2. Extract the archive into a temporary directory. For the
purpose of this README, assume that the symbol $PATCH
points to this temporary directory.
3. Stop the Tivoli Access Manager processes:
/opt/pdweb/bin/pdweb_start stop
4. At the command prompt, enter the following:
installp -a -g -X -d $PATCH <package>
where <package> is one of the following:
PDWeb.RTE Specifies the Access Manager Web Security Runtime
PDWeb.Web Specifies the Access Manager WebSEAL Server
PDWeb.ADK Specifies the Access Manager Web Services ADK
PDWeb.ARS Specifies the Access Manager Attribute Retrieval Service
5. Restart the Tivoli Access Manager processes:
/opt/pdweb/bin/pdweb_start start
4.2 Installing this patch on HP-UX systems
1. Log in to the system as root.
2. Extract the archive into a temporary directory. For the
purpose of this README, assume that the symbol $PATCH
points to this temporary directory.
3. Stop the Tivoli Access Manager processes:
/opt/pdweb/bin/pdweb_start stop
4. At the command prompt, enter the following:
swinstall -s $PATCH/<package> <patch>
where <package> and <patch> are one of the pairs
from the following table:
<package> <patch>
--------------------------------- -------------
PDWEBRTE000510-39.depot PDWebRTE
PDWEB000510-39.depot PDWeb
PDWEBADK000510-39.depot PDWebADK
PDWEBARS000510-39.depot PDWebARS
5. Restart the Tivoli Access Manager processes:
/opt/pdweb/bin/pdweb_start start
4.3 Installing this patch on Linux systems
1. Log in to the system as root.
2. Extract the archive into a temporary directory. For the
purpose of this README, assume that the symbol $PATCH
points to this temporary directory.
3. Stop the Access Manager processes.
/opt/pdweb/bin/pdweb_start stop
4. At the command prompt, enter the following:
rpm -U <patchname>
where <patchname> is one of the following:
Linux on xSeries(R)
PDWebRTE-PD-5.1.0-39.i386.rpm
PDWeb-PD-5.1.0-39.i386.rpm
PDWebADK-PD-5.1.0-39.i386.rpm
PDWebARS-PD-5.1.0-39.i386.rpm
Linux on zSeries
PDWebRTE-PD-5.1.0-39.s390.rpm
PDWeb-PD-5.1.0-39.s390.rpm
PDWebADK-PD-5.1.0-39.s390.rpm
PDWebARS-PD-5.1.0-39.s390.rpm
Linux on pSeries(R) and iSeries
PDWebRTE-PD-5.1.0-39.ppc.rpm
PDWeb-PD-5.1.0-39.ppc.rpm
PDWebADK-PD-5.1.0-39.ppc.rpm
PDWebARS-PD-5.1.0-39.ppc.rpm
Note:
If Tivoli Access Manager is already configured, you
might need to install with the --noscripts flag:
rpm -U --noscripts <patchname>
5. Restart the Tivoli Access Manager processes:
/opt/pdweb/bin/pdweb_start start
4.4 Installing this patch on Solaris Operating Environment systems
1. Log in to the system as root.
2. Extract the archive into a temporary directory. For the
purpose of this README, assume that the symbol $PATCH
points to this temporary directory.
3. Stop the Tivoli Access Manager processes:
/opt/pdweb/bin/pdweb_start stop
4. At the command prompt, enter the following:
cd $PATCH
patchadd <package>
where <package> is one of the following:
PDWEBRTE000510-39 Specifies the TAM Web Security Runtime
PDWEB000510-39 Specifies the TAM WebSEAL Server
PDWEBADK000510-39 Specifies the TAM Web Services ADK
PDWEBARS000510-39 Specifies the TAM Attribute Retrieval Service
5. Restart the Tivoli Access Manager processes:
/opt/pdweb/bin/pdweb_start start
4.5 Installing this patch on Windows systems
1. Log in to the Windows system as the Administrator.
2. Shut down the Tivoli Access Manager WebSEAL server:
a. From Control Panel -> Services click Access Manager
WebSEAL Server and then click Stop.
b. To confirm this action, click Yes.
3. Unpack the self-extracting archive into a temporary
directory. For the purpose of this README, assume that
%PATCH% points to this temporary directory.
4. Change to the patch directory and run the install command:
cd %PATCH%
5.1.0-TIV-AWS-FP0039-WIN.exe
Note: If, for any reason, you have to reboot your system to
complete this installation (for example, to overcome a
shared DLLs problem), you might subsequently encounter a
problem running the Web Portal Manager to access the console.
If this happens, confirm that the WebSphere service is
running. The WebSphere service is installed in manual startup
mode and might not be running after a reboot.
5. Restart the Tivoli Access Manager WebSEAL server:
From the Windows Start menu, click:
a. Settings -> Control Panel -> Administrative Tools -> Services
b. Click Access Manager WebSEAL Server -> Start
c. Click IBM WS AdminServer -> Start
5.0 UNINSTALLING THIS PATCH
---------------------------
NOTE: Uninstallation is not available on Microsoft Windows systems.
If the Tivoli Access Manager product is distributed over multiple machines,
uninstall this patch on those systems in the reverse order as it was applied.
To remove the patch on UNIX systems, perform the following steps.
1. Log in to the system as root.
2. Stop the Tivoli Access Manager processes:
/opt/pdweb/bin/pdweb_start stop
3. At the command prompt, enter the following:
On AIX, reject the applied patch:
installp -r <package>
where <package> is one of the following:
PDWeb.RTE
PDWeb.ADK
PDWeb.Web
PDWeb.ARS
On HP-UX, remove the patch:
swremove <patch>
where <patch> is one of the following:
PDWebRTE
PDWeb
PDWebADK
PDWebARS
On Linux, apply the previous patch level:
rpm -U --oldpackage <old_package>
where <old_package> is one of the following:
Linux on xSeries
PDWebRTE-PD-5.1.0-0.i386.rpm
PDWeb-PD-5.1.0-0.i386.rpm
PDWebADK-PD-5.1.0-0.i386.rpm
PDWebARS-PD-5.1.0-0.i386.rpm
Linux on zSeries
PDWebRTE-PD-5.1.0-0.s390.rpm
PDWeb-PD-5.1.0-0.s390.rpm
PDWebADK-PD-5.1.0-0.s390.rpm
PDWebARS-PD-5.1.0-0.s390.rpm
Linux on pSeries and iSeries
PDWebRTE-PD-5.1.0-0.ppc.rpm
PDWeb-PD-5.1.0-0.ppc.rpm
PDWebADK-PD-5.1.0-0.ppc.rpm
PDWebARS-PD-5.1.0-0.ppc.rpm
On Solaris, remove the patch:
patchrm <package>
where <package> is one of the following:
PDWEBRTE000510-39
PDWEB000510-39
PDWEBADK000510-39
PDWEBARS000510-39
4. Restart the Tivoli Access Manager processes:
/opt/pdweb/bin/pdweb_start start
Problems (APARS) fixed
Problems (APARS) fixed
Was this topic helpful?
Document Information
Modified date:
15 June 2018
UID
swg24021081