SI57302 - HASM-HA-UNPRED AUTHORIZATION LIST ENTRIES ARE CHANGED TO *EX

TYPE PROGRAM  RELEASE   NUMBER   MIN/MAX  OPTION
---- -------- --------- -------  -------  ------
PRE  5770SS1  V7R2M0    SI55306   00/00    0000



NOTICE:
-------
Application of this PTF may disable or render ineffective programs that
use system memory addresses not generated by the IBM translator,
including programs that circumvent control technology designed to limit
interactive capacity to purchased levels.  This PTF may be a prerequisite
for future PTFs.  By applying this PTF you authorize and agree to the
foregoing.

This PTF is subject to the terms of the license agreement which
accompanied, or was contained in, the Program for which you are obtaining
the PTF.  You are not authorized to install or use the PTF except as part
of a Program for which you have a valid Proof of Entitlement.

SUBJECT TO ANY WARRANTIES WHICH CAN NOT BE EXCLUDED OR EXCEPT AS EXPLICITLY
AGREED TO IN THE APPLICABLE LICENSE AGREEMENT OR AN APPLICABLE SUPPORT
AGREEMENT, IBM MAKES NO WARRANTIES OR CONDITIONS EITHER EXPRESS OR IMPLIED,
INCLUDING BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OR CONDITIONS OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON INFRINGEMENT,
REGARDING THE PTF.

The applicable license agreement may have been provided to you in printed
form and/or may be viewed using the Work with Software Agreements (WRKSFWAGR)
CL command.





APAR Error Description / Circumvention

-----------------------------------------------
In an existing cluster/admin domain (at a release lower than
R720), if a node within the admin domain is upgraded to R720 and
then is started via STRCLUNODE, the node will "join" back into
the admin domain and will change all authorization list entries
to *EXCLUDE for all *AUTLs that are being monitored.

Likewise, if an existing cluster with admin domain (at a release
lower than R720) is active and a user builds a brand new R720
node and adds it into the cluster then follows that with an
ADDCADNODE, it will have the same impact as stated above. As the
new R720 node is added and "joins" into the admin domain, it
will change all authorization list entries to *EXCLUDE for all
*AUTLs that are being monitored.

Work Around:
1. End the admin domain (ENDCAD) and do not restart until all
nodes in the admin domain are at R720.

2. Do not have any nodes of R720 as an admin domain member until
a PTF is available.

3. Do not monitor for AUTLs until a PTF is available.

4. If and only if there are a few MREs being monitored, consider
deleting the admin domain and then recreating after all nodes in
the cluster are at R720.

CORRECTION FOR APAR SE61886 :
-----------------------------
The compatibility problem for authorization list entries in the
Cluster Administrative Domain is fixed in R720.

CIRCUMVENTION FOR APAR SE61886 :
--------------------------------
None.


Activation Instructions


None.




Special Instructions


In order to fix the problems described by this PTF, the PTF must be
applied on every node in the cluster. You do not have to end the
cluster to do this. However, you should end the CRG jobs associated
with the cluster administrative domain on every cluster node before
you apply the PTF. You can do this one node at a time.

Note, you must end the cluster administrative domain CRG jobs on each
cluster node, apply the PTF, and restart the CRG job before the fix
is available.

The cluster administrative domain CRG jobs will be ended if you end
Cluster Resource Services for each node in your cluster. Cluster
Resource Services can be ended using the End Cluster Node API or CL
command. Optionally, you can end just the cluster administrative
domain jobs without ending your cluster nodes by calling the Change
Cluster Recovery CL command.

To determine if any cluster administrative domain jobs are active on
your system, use the WRKACTJOB command from the command line of your
system. Look for any system jobs which have the same name as any
cluster administrative domains which you have created in your cluster.
If there are any cluster administrative domain jobs on your system,
they must be ended. You can end just the cluster administrative domain
jobs on every node with this command:

CHGCLURCY CLUSTER(<cluster>) CRG(<admin_domain>) NODE(*ALL)
ACTION(*END)

where <cluster> is the name of your cluster and <admin_domain> is the
name of a cluster administrative domain. You should call this command
once for each cluster administrative domain in your cluster.

You must sign off all sessions where any cluster administrative domain
commands or APIs were used before the PTF can be applied.

After the PTF has been applied on a system, you can restart the cluster
jobs that were ended before the PTF was applied. If Cluster Resource
Services was ended, you can use the Start Cluster Node API or CL
command to start Cluster Resource Services for each cluster node. If
you used the Change Cluster Recovery CL command to end just the cluster
administrative domain jobs, they can be restarted on each cluster node
using the Change Cluster Recovery command as follows:

CHGCLURCY CLUSTER(<cluster>) CRG(<admin_domain>) NODE(<node>)
ACTION(*STRCRGJOB)

where <cluster> is the name of your cluster, <admin_domain> is the name
of the cluster administrative domain, and <node> is the cluster node
name for the system. You should call this command once for each cluster
administrative domain in your cluster.

After the PTF has been applied, you should also restart the QPRFSYNCH
job on every node in your cluster.  You can restart the QPRFSYNCH job
with the following commands:

CALL PGM(QSYS/QFPAPRFJ) PARM(END)
CALL PGM(QSYS/QFPAPRFJ) PARM(START)

********************************************************************
THE FOLLOWING ARE SUPERSEDED SPECIAL INSTRUCTIONS. IF THE SUPERSEDED
PTF HAS ALREADY BEEN APPLIED AND ITS SPECIAL INSTRUCTION FOLLOWED,
IT IS NOT NECESSARY TO FOLLOW THAT SPECIAL INSTRUCTION AGAIN.
********************************************************************

SPECIAL INSTRUCTIONS FOR SUPERSEDED PTF SI57177 :
=================================================

On each node in the cluster, end clustering, apply the fix, and then
start clustering.  It is not necessary to update all nodes at the same
time, however, any node without the fix will continue to be a potential
source of the problem.

SPECIAL INSTRUCTIONS FOR SUPERSEDED PTF SI54321 :
=================================================

In order to fix the problems described by this PTF, the PTF must be
applied on all nodes (on the same release as this PTF) in the cluster.
However,the entire cluster does not have to be ended to do this.  One
node at a time can be ended, the PTF applied, and the node restarted to
join the cluster.

Note, you must end Cluster Resource Services on the node, apply the
PTF,and then restart Cluster Resource Services before the fix is
available.

SPECIAL INSTRUCTIONS FOR SUPERSEDED PTF SI52665 :
=================================================

On each node in the cluster, end clustering, apply the fix, and then
start clustering. It is not necessary to update all nodes at the same
time, however, any node without the fix will continue to be a potential
source of the problem.

Step #1:
In order for this PTF to be fully activated, you must end and restart
the QHASVR job.  You can do this by ending and starting the cluster
node using the commands:

ENDCLUNOD CLUSTER(<cluster-name>) NODE(<node-id>)
STRCLUNOD CLUSTER(<cluster-name>) NODE(<node-id>)

Or, you can end the QHASVR job under QSYSWRK subsystem:

ENDJOB JOB(<job-num>/QHAUSRPRF/QHASVR) OPTION(*IMMED)

where <job-num> is the job number.

Issue the WRKCLU command to restart the QHASVR job.

Step #2:
In order for this PTF to be fully activated, you must restart
the ADMIN2 instance of the *HTTP server.  Do this with the
following commands:

ENDTCPSVR  SERVER(*IAS) INSTANCE(ADMIN2)
STRTCPSVR  SERVER(*IAS) INSTANCE(ADMIN2)

Step #3:
Users must sign off any active sessions which may be using,
PowerHA and sign back on after the PTF has been applied.

SPECIAL INSTRUCTIONS FOR SUPERSEDED PTF SI51113 :
=================================================

Step #1:
In order for this PTF to be fully activated, you must end the cluster
and HTTP server.  You can do this by ending the cluster node and server
using the commands:
node using the commands:

ENDCLUNOD CLUSTER(<cluster-name>) NODE(<node-id>)
ENDSBS SBS(QHTTPSVR) OPTION(*IMMED)

Step #2:
Users must sign off any active sessions which may be using,
PowerHA and sign back on after the PTF has been applied.

Step #3:
Start the server and cluster using the commands:

STRTCPSVR SERVER(*HTTP) HTTPSVR(*ADMIN)
STRCLUNOD CLUSTER(<cluster-name>) NODE(<node-id>)


Default Instructions

THIS PTF CAN BE APPLIED IMMEDIATE OR DELAYED.



Supersedes

PTF/FIX NO(S).  APAR TITLE LINE
--------------  ------------------------------------------------------------
   SI57177      OSP-INCORROUT Correct minor PowerHA license problems
   SI56917      PowerHA GUI - Support of Liberty infrastructure
   SI55982      Fixed a problem on PowerHA GUI that extra messages will pop
   SI55603      HASM-INCORROUT MCH3601 RECEIVED ON STRASPSSN AT HA VER 2.2
   SI55303      INCORROUT GUI problems - Multiple GUI fixes for PowerHA GUI
   SI54321      HASM-INCORROUT INCONSISTENT DEVICE DOMAIN DATA
   SI54321      HASM-HA-F/QHACMN-T/QYASPSSN-MSGCPF22E6/MSGCPF22E7 ENCOUNTERE
   SI53938      HASM-HA-UNPRED straspssn command parameters not working
   SI53938      HASM-HA-LOOP RUNNING ENDSVCSSN RESULTS IN LOOPING CONDITION
   SI53638      HASM-WAIT ENDSVCSSN hangs when SVC volume status is degraded
   SI53631      HASM-INCORROUT REATTACH of ASP Session inquiry instead of co
   SI53608      HASM-HA MULTIPLE LUNS IN 1 VOLUME GROUP AT POWERHA VERSION 1
   SI53608      HASM-HA CPFAF02 INTERNAL APPLICATION ERROR. DIAGNOSTIC CODE
   SI53480      HASM-HA-INCORROUT CHGCRGPRI GLOBAL MIRROR POWERHA
   SI53476      New function to support SVC and Storwize Global Mirror with
   SI53476      MSGCPIB711-HLIC-94XXDISK IN MULTIPATH ENVIRONMENT, ENDSVCSSN
   SI53003      INCORROUT No target flash copy not allowed when source node
   SI52665      INCORROUT - Fixes of the bugs found in PowerHA in 7.2 releas
   SI51113      PowerHA 7.2 TVT
   SI51913      OSP-INCORROUT PowerHA pre-GA fixes
   SI51913      HA-INCORROUT Node Fails to Join Recovery Group when Cluster

Summary Information
System..............................  i
Models..............................  
Release.............................  V7R2M0
Licensed Program....................  5770HAS
APAR Fixed..........................  View details for APAR SE61886
Superseded by:......................  View fix details for PTF SI80112
Recompile...........................  N
Library.............................  QHASM
MRI Feature ........................  NONE
Cum Level...........................  C6085730

IBM i Support