IBM Support

SI72357 - MSGMCH3601 Removing last managed CRG in Active container sen

PTF Cover Letter


PTF ( Program Temporary Fixes ) Cover letter


Order this fix

Abstract

MSGMCH3601 Removing last managed CRG in Active container sen


Pre/Co-Requisite PTF / Fix List

REQ  LICENSED           PTF/FIX  LEVEL

TYPE PROGRAM  RELEASE   NUMBER   MIN/MAX  OPTION
---- -------- --------- -------  -------  ------
NONE



NOTICE:
-------
Application of this PTF may disable or render ineffective programs that
use system memory addresses not generated by the IBM translator,
including programs that circumvent control technology designed to limit
interactive capacity to purchased levels.  This PTF may be a prerequisite
for future PTFs.  By applying this PTF you authorize and agree to the
foregoing.

This PTF is subject to the terms of the license agreement which
accompanied, or was contained in, the Program for which you are obtaining
the PTF.  You are not authorized to install or use the PTF except as part
of a Program for which you have a valid Proof of Entitlement.

SUBJECT TO ANY WARRANTIES WHICH CAN NOT BE EXCLUDED OR EXCEPT AS EXPLICITLY
AGREED TO IN THE APPLICABLE LICENSE AGREEMENT OR AN APPLICABLE SUPPORT
AGREEMENT, IBM MAKES NO WARRANTIES OR CONDITIONS EITHER EXPRESS OR IMPLIED,
INCLUDING BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OR CONDITIONS OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON INFRINGEMENT,
REGARDING THE PTF.

The applicable license agreement may have been provided to you in printed
form and/or may be viewed using the Work with Software Agreements (WRKSFWAGR)
CL command.





APAR Error Description / Circumvention

-----------------------------------------------
If removing the last managed CRG in a container CRG while the
container CRG is Active, then the remove fails with MCH3601 but
the remove actually occurred.

CORRECTION FOR APAR SE73114 :
-----------------------------
The MCH3601 is corrected and the remove of the last managed CRG
functions correctly.

CIRCUMVENTION FOR APAR SE73114 :
--------------------------------
None.


Activation Instructions


None.




Special Instructions


On each node in the cluster, end clustering, apply the fix, and then
start clustering.  It is not necessary to update all nodes at the same
time, however, any node without the fix will continue to be a potential
source of the problem.

********************************************************************
THE FOLLOWING ARE SUPERSEDED SPECIAL INSTRUCTIONS. IF THE SUPERSEDED
PTF HAS ALREADY BEEN APPLIED AND ITS SPECIAL INSTRUCTION FOLLOWED,
IT IS NOT NECESSARY TO FOLLOW THAT SPECIAL INSTRUCTION AGAIN.
********************************************************************

SPECIAL INSTRUCTIONS FOR SUPERSEDED PTF SI72194 :
=================================================

Program QSYS/QCSTADFIX has been enhanced to correct cluster
administrative domain inconsistent global status of user
profiles when upgrading from cluster modification level 2
to 3 which resulted in encrypted password conversion.

Restrictions:
- The program is not allowed to run while cluster resource
services is active
- The caller must have *ALLOBJ authority

It is recommended to:
1. Apply this PTF to all nodes in the cluster.
2. End all CRGs to prevent a failover.
3. End clustering on all nodes in the cluster.
4. Call the program: CALL PGM(QCSTADFIX) PARM(*FIXENCPWD)
on each node in the cluster administrative domain.
Note that the program may take several minutes to complete.
When the program has completed, a summary will be given
indicating how many password attributes were successfully
converted, skipped, or failed. If any warnings or failures
occurred, these will be logged to the joblog of the caller.
5. You may see a CPF9898 message warning "*USRPRF &1 GLOBAL
VALUE FOR PASSWORD ATTRIBUTE IS INCOMPATIBLE FOR ENCRYPTED
PASSWORD CONVERSION". This means that the monitored
resource entry for that user profile was inconsistent
before the cluster modification level increased or there
is a pending change to the user profile.
6. Choose the node with the largest number of successful
password conversions. Start this cluster node first. If
all cluster administrative domain nodes ran the QCSTADFIX
program and reported all successes (no failures or
warnings), then it does not matter which node you choose
to start first.
7. Start all other nodes in the cluster.
8. Start the cluster administrative domain from any node.
9. If no warning or failure messages were present on any
cluster administrative domain nodes after calling the
QCSTADFIX program, then all *USRPRF monitored resource
entries should be consistent after the cluster
administrative domain has completely started.
10. Any user profiles for which a warning or failure message
was sent may still be inconsistent. This can be corrected
by either changing the password of the user profile or
removing the monitored resource entry from the cluster
administrative domain and then adding the monitored
resource entry for this user profile.

SPECIAL INSTRUCTIONS FOR SUPERSEDED PTF SI71253 :
=================================================

Before applying this PTF, if the node that this PTF is being installed
on is a member of a cluster administrative domain, ensure that all
nodes in your cluster administrative domain have compatible password
levels.  Password levels 0 and 1 are compatible.  Passwords level 2 and
3 are compatible.  To see the password level for a node display the
QPWDLVL system value.  If this PTF is installed on all nodes in the
cluster administrative domain and the password levels on nodes in the
administrative domain are not compatible, all user profiles in the
cluster administrative domain will be marked as inconsistent.  If this
happens the user profiles cannot be made consistent until all nodes in
the cluster administrative domain are at compatible password levels.

SPECIAL INSTRUCTIONS FOR SUPERSEDED PTF SI70313 :
=================================================

Clustering must be ended and restarted on any Cluster node with a REST
Cluster Monitor for the PTF code to be activated.

SPECIAL INSTRUCTIONS FOR SUPERSEDED PTF SI69207 :
=================================================

1. On each node in the cluster, end clustering, apply the fix, and then
start clustering.  It is not necessary to update all nodes at the same
time, however, any node without the fix will continue to be a potential
source of the problem.

2. It is recommended to sign off or end any user job that issued any
cluster command or API. After the fix is applied, the job can be
started or can sign on again.

SPECIAL INSTRUCTIONS FOR SUPERSEDED PTF SI70357 :
=================================================

1. On each node in the cluster, end clustering, apply the fix, and then
start clustering.  It is not necessary to update all nodes at the same
time, however, any node without the fix will continue to be a potential
source of the problem.

2. It is recommended to sign off or end any user job that issued any
cluster command or API. After the fix is applied, the job can be
started or can sign on again.

3. After the PTF has been applied, you should also restart the
QPRFSYNCH job on every node in your cluster.  You can restart the
QPRFSYNCH job with the following commands:

CALL PGM(QSYS/QFPAPRFJ) PARM(END)
CALL PGM(QSYS/QFPAPRFJ) PARM(START)


Default Instructions

THIS PTF CAN BE APPLIED IMMEDIATE OR DELAYED.



Supersedes

PTF/FIX NO(S).  APAR TITLE LINE
--------------  ------------------------------------------------------------
   SI72313      OSP-OTHER-UNPRED PARTIAL PASSWORD ENTRY CONVERSION NOT COMPL
   SI72313      OSP-OTHER-WAIT CLUSTER HANG CONDITION WHEN ENDING A CRG WHEN
   SI72229      OSP-INCORROUT Cluster may hang when changing cluster modific
   SI72194      OSP-OTHER-UNPRED PARTIAL PASSWORD ENTRY CONVERSION NOT COMPL
   SI71872      OSP-INCORROUT Incorrect cluster node status when using CHGCL
   SI71827      OSP-OTHER-WAIT CLUSTER HANG CAUSED BY MISMATCHED ADMINISTRAT
   SI71253      OSP-INCORROUT Add logging to administrative domain
   SI71253      OSP-INCORROUT CRG Container miscellaneous fixes
   SI71253      Add support for IP address configuration objects in device c
   SI71253      OSP-Increase Administrative Domain maximum MRE limit from 45
   SI71253      OSP-Support for replicating Encrypted Password in Cluster Ad
   SI71253      Allow valid IP addresses ending in 255 to be used in the IBM
   SI70313      OSP-INCORROUT HMC REST Cluster Monitor retry if logon fails
   SI70103      Potential security issue
   SI69207      OSP-INCORROUT CHGCRGPRI may fail with hyperswap and global m
   SI70357      OSP-OTHER-F/QHACMN-RC1-MSGCPDBB01 MSGCPDBB01 ENCOUNTERED DUR
   SI70276      OSP-OTHER-F/STRINGHIGHUSE4K-T/QCSTADCMN-MSGMCH0601 MSGMCH060
   SI70045      HASM-HA-F/CSTADCHGS-T/CSTADCHGS-MSGCPF1059 QAUDLVL SET WITH
   SI70047      Remove support for *TRNLIN resource type and obsolete *ETHLI
   SI69699      Cluster related fixes for 7.4
   SI69372      Cluster related fixes for 7.4

Summary Information

System..............................i
Models..............................
Release.............................V7R4M0
Licensed Program...............5770SS1
APAR Fixed..........................View details for APAR SE73114
Superseded by:......................View fix details for PTF SI75925
Recompile...........................N
Library.............................QSYS
MRI Feature ........................NONE
Cum Level...........................C0303740


IBM i Support

IBM disclaims all warranties, whether express or implied, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose. By furnishing this document, IBM grants no licenses to any related patents or copyrights. Copyright © 1996,1997,1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 2012, 2013, 2014, 2015, 2016, 2017, 2018, 2019, 2020, 2021 IBM Corporation. Any trademarks and product or brand names referenced in this document are the property of their respective owners. Consult the Terms of use link for trademark information.

[{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Platform":[{"code":"PF012","label":"IBM i"}],"Version":"7.4","Product":{"code":"SG15V","label":"PTF Cover Letters - IBM i General"},"Component":"5770SS1","Edition":""},{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Platform":[{"code":"PF012","label":"IBM i"}],"Version":"7.4","Product":{"code":"SS9QQS","label":"IBM i 7.4"},"Component":"5770SS1","Edition":""}]

Document Information

Modified date:
15 April 2021