Abhi2271/tech-qa huggingface dataset:
IBM WSDL Cache Policy not refreshing from WSDL in local:/// directory - United States datapower; wsdl cache refresh; wsdl; cache; refresh TECHNOTE (TROUBLESHOOTING)

PROBLEM(ABSTRACT)
 You created a Web Service Proxy (WS Proxy) based on a .wsdl file and want to refresh when there are changes in the .wsdl file. The file is located on the DataPower appliance under the "local" directory. You created a WSDL Cache Policy to specify the local .wsdl file for the URL Match expression, but the web service proxy state is not being refreshed when there are changes in the file. 

SYMPTOM
The WSDL Cache Policy is not refreshing from a WSDL in the local:/// directory.


RESOLVING THE PROBLEM
In a WS Proxy, you can refresh WSDL from an URL using WSDL Cache policy. However, if the WSDL is hosted on the DataPower appliance, such as in local:///, rather than on an external URL, the WSDL Cache Policy does not apply. 

For instance, changes made to local:///test.wsdl are not picked up by WS Proxy although there is a WSDL Cache policy setting the URL Match expression to local:///test.wsdl. 

This issue was reported to Quality Engineering but it was determined that the DataPower device is working as designed. The device will not poll WSDL files on the local store.

The WSDL Cache policy works with WSDL files hosted on an external URL.

To refresh a WSDL in the local:/// directory, disable and re-enable the service.

Question: How to refresh a DataPower WebService Proxy which WSDL got changed? I have made changes to a WSDL stored in DP local filesystem.

How can I make the WSP reflect this change since DataPower Gateway 7.1.0 WebService Proxy WebGUI doesn't offer the "Refresh" button anymore?

Is there a best practice to refresh the WSP if I modified my WSDL?

Answer: In a WS Proxy, you can refresh WSDL from an URL using WSDL Cache policy. However, if the WSDL is hosted on the DataPower appliance, such as in local:///, rather than on an external URL, the WSDL Cache Policy does not apply. 

For instance, changes made to local:///test.wsdl are not picked up by WS Proxy although there is a WSDL Cache policy setting the URL Match expression to local:///test.wsdl. 

This issue was reported to Quality Engineering but it was determined that the DataPower device is working as designed. The device will not poll WSDL files on the local store.

The WSDL Cache policy works with WSDL files hosted on an external URL.

To refresh a WSDL in the local:/// directory, disable and re-enable the service.
IBM Upgrade Rational Application Developer 9.6 to use Websphere Application Server ILAN - United States  TECHNOTE (TROUBLESHOOTING)

PROBLEM(ABSTRACT)
 Customers see different content in the Rational Application Developer (RAD) Websphere Application Server (WAS) download compared to prior RAD releases.

During install of this new WAS ILAN version, customers now see explicit wording saying this a no cost, non-supported and non-warranted version of WebSphere Application Server traditional. While this has always been the case for this developer version, refer to evaluation software page & FAQ below, seeing these words during install may be a new information for some users.


CAUSE
New WAS packaged in RAD: 

Rational Application Developer for WebSphere packages WebSphere Application Server for development and test purposes. WAS recently renamed WAS for Developers (WAS4D) to WAS ILAN (see here [https://developer.ibm.com/wasdev/downloads/#asset/WAS_traditional_for_Developers]). In response to this change, RAD 9.6 now packages WAS ILAN available in the RAD_WS_9.6_WASTE_9.0.zip file. It has the same capabilities and updates that RAD users expect. 

Support for this new WAS packaged in RAD:
New message during installation has worried users, however, users with an active support contract for their production WebSphere Application Server are entitled for support on the developer machine as long as an active support contract is in place for the production server.


 * Evaluation software page: https://www.ibm.com/developerworks/downloads/ws/wasdevelopers/index.html [https://www.ibm.com/developerworks/downloads/ws/wasdevelopers/index.html] 
 * FAQ: https://www.ibm.com/developerworks/downloads/ws/wasdevelopers/faq-wasdevelopers.html [https://www.ibm.com/developerworks/downloads/ws/wasdevelopers/faq-wasdevelopers.html]


RESOLVING THE PROBLEM
To change/upgrade RAD 9.6 WAS4D to WAS ILAN. 

Add the following repository to Installation Manager: https://www.ibm.com/software/repositorymanager/com.ibm.websphere.ILAN.v90/ [https://www.ibm.com/software/repositorymanager/com.ibm.websphere.ILAN.v90/]

Question: where is the websphere application server 9.0.0.4 fix for developers I am using the was 9.0.0.0 in rad/rsa 9.6.1 for Windows. I cannot upgrade to the 9.0.0.4 fixpack, because there is no developer edition. On the downloadpage there are Base, Network Deployment, DMZ Secure Proxy Server and IBM Web Enablement for IBM i, but no Developers! See link text For was 8.5.5.10 there exists a developers edition. Where can I download the Websphere Application Server fix pack 9.0.0.4 Developers?

Answer: WAS recently renamed WAS for Developers (WAS4D) to WAS ILAN (see here [https://developer.ibm.com/wasdev/downloads/#asset/WAS_traditional_for_Developers]). In response to this change, RAD 9.6 now packages WAS ILAN available in the RAD_WS_9.6_WASTE_9.0.zip file. It has the same capabilities and updates that RAD users expect.
IBM Importing a Certificate for the ITCAM Agent for Data Power (BN Agent) - United States CAMDPALL CAMDPSEC Certification Import Importing TECHNOTE (FAQ)

THIS DOCUMENT APPLIES ONLY TO THE FOLLOWING LANGUAGE VERSION(S):
 US English 

QUESTION
 How to import a Certificate for the TCAM Agent for Data Power (BN Agent) ? 

CAUSE
Certification is missing. 
Trouble shooting Hint - The trace log will show an error that looks like this:
[2015-05-28T05:58:45.248-0430] - ERROR - BODAPPS57 - pool-1-thread-2 - 
com.ibm.management.soa.dp.monitor.agent.server.KBNSomaCPUUsage.getCPUUsa 
ge - [subnode=DPPROD02; hostname=10.0.49.25;] occured exception 
javax.net.ssl.SSLHandshakeException: Received fatal alert: 
handshake_failure 


ANSWER
 

Import the certification file into the agent by doing the following command:

Note : You can use either .cer or .pem. 
Make sure the file is in ASCII not binary. 
Where the /usr/ITM/JRE is your Java location and <fileName> is your file name.

ex: 
/usr/ITM/JRE/aix526/jre/bin/keytool -import -trustcacerts -alias 
ligitalsso -keystore /usr/ITM/JRE/aix526/jre/bin/lib/security/cacerts 
-storepass <fileName> -file /NEWSSL-sscert.cer 



PRODUCT ALIAS/SYNONYM
 ITCAM Agent for Data Power

Question: How to import a certificate in ITCAM for Data Power ? How can I import a certificate in ITCAM for Data Power?

Answer: Import the certification file into the agent by doing the following command:

Note : You can use either .cer or .pem. 
Make sure the file is in ASCII not binary. 
Where the /usr/ITM/JRE is your Java location and <fileName> is your file name.
IBM Batches left in running state by Rulerunner with IBM Datacap Taskmaster Capture - United States rule runner; batches; multiple; running TECHNOTE (TROUBLESHOOTING)

PROBLEM(ABSTRACT)
 When running batch creation tasks, such as VScan, with Rulerunner, multiple batches may be created and/or left in the running state. 

CAUSE
Rulerunner is a very efficient service and will overdrive the Rulerunner Server if too many tasks or threads are assigned.

RESOLVING THE PROBLEM
Turn off Mixed Queuing 

 1. Run Rulerunner Manager. 
 2. On the Rulerunner tab, stop the service. 
 3. On the Rulerunner Login tab, click Connect. 
 4. Select the Workflow tab. 
 5. On the Rulerunner Settings subtab, uncheck Mixed Queuing. 
 6. Click Save, then go back to the Rulerunner tab and start the service.


Set skipsamebatch for VScan tasks  1. Run Rulerunner Manager. 
 2. On the Rulerunner tab, stop the service. 
 3. On the Rulerunner Login tab, click Connect. 
 4. On the Workflow tab, expand the hierarchy on the right and highlight VScan. 
 5. In the Settings section in the lower right, set skipsamebatch to 1. 
 6. Highlight the line labeled <dbs> above VScan in the thread hierarchy. 
 7. Set skipsamebatch to 1 there also. 
 8. Click Save, then go back to the Rulerunner tab and start the service.


For Datacap Taskmaster 8.0.1, the procedures are the same but some tabs will have different names. 

If you are still experiencing this issue the problem may be with your DataCap Object (DCO). Correcting DCO issues will resolve batches left in running state. RELATED INFORMATION
 VScan Intermittently Aborts [http://www.ibm.com/support/docview.wss?uid=swg21573034 ]

Question: How to create batches for bulk upload 

I am new in datacap 9.0 .I just started developing with datacap studio and currently I have learned  to recognize, capture and export the data into filenet.

Now I want to Create batches of image or pdf files so that I can process images and pdf .

 

As per requirement client is sharing document at one shared location.I need to pickup all the documnets from shared location. For creating batches which tool I should use? how it works?

 

Can anyone help how I proceed with this.

 

Regards,

Chhaya Sahu


Answer: Set skipsamebatch for VScan tasks  1. Run Rulerunner Manager. 
 2. On the Rulerunner tab, stop the service. 
 3. On the Rulerunner Login tab, click Connect. 
 4. On the Workflow tab, expand the hierarchy on the right and highlight VScan. 
 5. In the Settings section in the lower right, set skipsamebatch to 1. 
 6. Highlight the line labeled <dbs> above VScan in the thread hierarchy. 
 7. Set skipsamebatch to 1 there also. 
 8. Click Save, then go back to the Rulerunner tab and start the service.
IBM Writing Verbose GC To A Specified Log In Solaris and HP-UX - United States verbosegc log rotation HP Solaris JVM rotate file TECHNOTE (FAQ)

QUESTION
 How can I write verbose gc output to a log file other than the native_stdout? 

CAUSE
By default, Solaris and HP-UX do not write verbose GC to a log file. This must be configured.

ANSWER
 

WAS 8.5.0.2 (and higher), WAS 8.0.0.6 (and higher), WAS 7.0.0.27 (and higher):

Solaris:
Add the following parameters to the generic JVM arguments:

-XX:+PrintGCDetails 
-XX:+PrintGCDateStamps 
-XX:+PrintHeapAtGC 
-Xloggc:/tmp/gc.log

To enable log file rotation:
-XX:+UseGCLogFileRotation
-XX:NumberOfGCLogFiles=10
-XX:GCLogFileSize=10M


notes:
-Xloggc:<fileName> 

 * ex: -Xloggc:/tmp/gc.log 

-XX:+UseGCLogFileRotati o n  * Enabled GC log rotation, requires -Xloggc 

-XX:NumberOfGClogFiles= <num_of_files>  * Set the number of files to use when rotating logs, must be >= 1. The rotated log files will use the following naming scheme, <filename>.0, <filename>.1, ..., <filename>.n-1. 

-XX:GCLogFileSize=<number>K (or M)  * The size of the log file at which point the log will be rotated, must be >= 8K. 


HP: 
Add the following parameters to the generic JVM arguments: 
-XX:+PrintGCDetails 
-XX:+PrintGCDateStamps 
-XX:+PrintHeapAtGC 
-Xverbosegc:file= /tmp/gc_pid$$.vgc 

To enable log file rotation: 
-XX:+UseGCLogFileRotation 
-XX:NumberOfGCLogFiles=10
-XX:GCLogFileSize=10M 

note : $$ maps to the PID of the java process RELATED INFORMATION
 6941923 : RFE: Handling large log files produced by lon [http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=6941923]
Enabling verbose garbage collection (verbosegc) in WebS [http://www.ibm.com/support/docview.wss?rs=180&uid=swg21114927]
Where to set generic JVM arguments in WebSphere Applica [http://www.ibm.com/support/docview.wss?rs=180&uid=swg21417365]
Verify Java SDK version shipped with IBM WebSphere Appl [http://www-01.ibm.com/support/docview.wss?rs=180&uid=swg27005002]
HP-UX Java 6.0.18 - Handling large GC log files [http://h20000.www2.hp.com/bc/docs/support/SupportManual/c03119431/c03119431.pdf]
HP-UX Java 7.0.05 - Handling large GC log files [http://h20000.www2.hp.com/bc/docs/support/SupportManual/c03123467/c03123467.pdf]
Oracle - Java HotSpot VM Options [http://www.oracle.com/technetwork/java/javase/tech/vmoptions-jsp-140102.html]

Question: For HP-UX how to write verbose gc output to a log file other than the native_stdout? A customer asked why no gc logs generated even if they use the -Xverbosegc option. So How can I write verbose gc output to a log file other than the native_stdout for HP-UX? 

Answer: Add the following parameters to the generic JVM arguments: 
-XX:+PrintGCDetails 
-XX:+PrintGCDateStamps 
-XX:+PrintHeapAtGC 
-Xverbosegc:file= /tmp/gc_pid$$.vgc
IBM Content Navigator v2.0.3 is adding a .dat extension to a CSV file during Download action on a document. - United States icn; csv; download; mimetype; mime type TECHNOTE (TROUBLESHOOTING)

PROBLEM(ABSTRACT)
 IBM Content Navigator v2.0.3 is adding a .dat extension to a CSV document during Download action on the document. 

SYMPTOM
A .dat extension is added to the CSV document upon download.


CAUSE
A CSV document is basically a plain text file. If the mime type of the document as shown in system properties in ICN is not text/csv, then Navigator cannot recognize the document and a .dat extension will be added upon download. The correct mime type for a CSV file is text/csv. 

RESOLVING THE PROBLEM
If there are CSV document already in the content repository with a mime type that is not text/csv, then in order to view them in a text editor (ex. Notepad), you may use the following workaround:
- save the document to the local machine with .dat extension
- right click on the .dat file and click Open With... 
- click 'Choose your default program...'
- then select Notepad or another text editor of your choice
- select the checkbox 'Always use the selected program to open this type of file'

The other alternative is to change the mimetype of the document in the content repository using a custom solution written using the repository's client APIs.

Question: IBM Content Navigator v2.0.3 is adding a .dat extension to a CSV file during Download action on a document. IBM Content Navigator v2.0.3 is adding a .dat extension to a CSV file during Download action on a document. Why is this the case?

Answer: If the mime type of the document as shown in system properties in ICN is not text/csv, then Navigator cannot recognize the document and a .dat extension will be added upon download.
IBM Deleting Box folders and content from IBM Case Manager 5.3.0 - United States  TECHNOTE (FAQ)

QUESTION
 After configuring Box as a repository for Case Manager, Case Client users would like to delete documents and/or folders created under the Box collaboration folder. There does not appear to be any mechanism to perform this deletion. 

ANSWER
There is no support for deleting documents and/or folders from a Box Collaboration folder created via Case Manager at this time. Case workers who created the Box collaboration folder will have Viewer/Uploader permission on the Box Collaboration folder, and therefore, will not be able to delete content within a Box collaboration folder as this may result in missing data in the associated cases. Users who are invited to collaborate on the Box collaboration folder have the same restriction. 

Here is a link to Box collaboration permissions to clarify what permissions a Viewer/Uploader has
https://community.box.com/t5/How-To-Guides-for-Sharing/What-Are-The-Different-Access-Levels-For-Collaborators/ta-p/144 [https://community.box.com/t5/How-To-Guides-for-Sharing/What-Are-The-Different-Access-Levels-For-Collaborators/ta-p/144]

Question: Cannot delete folder in Box collab folder 

In an ICM 5.3.0 environment integrated with Box, after setting up Box Collaboration, case worker can create Box collaboration folder, and can create folders and files under Box collaboration folder, however, they cannot delete the their folders and files.

Case worker's default permission is 'Viewer Uploader' and case worker cannot add permission more than editor (Editor/Co-owner/Owner). So case worker can add new folder/file and edit file, but cannot delete folder/file.

The question is, why cannot case worker have permission more than editor?

Answer: There is no support for deleting documents and/or folders from a Box Collaboration folder created via Case Manager at this time.
IBM Access and download SPSS software - United States entitlements; software; download TECHNOTE (FAQ)

QUESTION
 Can I download the software without active Subscription and Maintenance? 

CAUSE
expired entitlements

ANSWER
 

Official statement by IBM eCustomer Care Team (Passport Advantage Online help desk):

We would like to inform you that you can only access and download software that has active Subscription and Maintenance from Passport Advantage Online.
If the Software Subscription and Maintenance has expired you will not be able to download the software from Passport Advantage Online.
In this case, you would need to renew your software Subscription and Maintenance.

You can order the Media CD copy of the software your company purchased. The software version is the one up to the time your subscription has expired.
The sales department will be able to advise you if the Media CD is available.
You can find your local contact for the IBM Sales Department at: https://www.ibm.com/planetwide/ [https://www.ibm.com/planetwide/]

Question: I need to move my perpetual license of SPSS v24 to my new machine. I have my authorization code first given to me, but since we did not renew our support contract we can't seem to download the software. I was originally told that I could download the trial version and it would have the authorization wizard where I could input the code and move forward. But the only downloadable version is subscription version with no authorization wizard. How do I move forward? 

Answer: If the Software Subscription and Maintenance has expired you will not be able to download the software from Passport Advantage Online.
In this case, you would need to renew your software Subscription and Maintenance.

You can order the Media CD copy of the software your company purchased. The software version is the one up to the time your subscription has expired.
IBM NUM_IOSERVERS=AUTOMATIC behaviour is changed from 10.5FP7 - United States  TECHNOTE (FAQ)

QUESTION
 After updating to 10.5FP7 from an older fixpack level, I noticed that AUTOMATIC value for NUM_IOSERVERS is changed even though any settings are not changed. Is it expected bahavior? 

ANSWER
Yes, it is expected. Due to IT09990, we changed the fomula for calculating the number of prefetchers to start at database activation time.
Until 10.5FP6, we use following fomula:
number of prefetchers =
max( max( max over all table spaces( parallelism setting ),
number of cores * number of SMT threads ), 16 )

Starting from 10.5FP7, we use following fomula:
number of prefetchers =
max( max( max over all table spaces( parallelism setting ),
number of cores * number of SMT threads ), 12 )

So you can see the following output in 10.5FP6 and FP7:

FP6:
$ db2 get db cfg | grep NUM_IOSERVERS
Number of I/O servers (NUM_IOSERVERS) = AUTOMATIC(16)

FP7
$ db2 get db cfg | grep NUM_IOSERVERS
Number of I/O servers (NUM_IOSERVERS) = AUTOMATIC(12)

RELATED INFORMATION
 num_ioservers - Number of I/O servers configuration par [http://www.ibm.com/support/knowledgecenter/SSEPGG_10.5.0/com.ibm.db2.luw.admin.config.doc/doc/r0000333.html]

Question: Why AUTOMATIC value for NUM_IOSERVERS is changed after applying 10.5FP7? Why AUTOMATIC value for NUM_IOSERVERS is changed after applying 10.5FP7?

Answer: Yes, it is expected. Due to IT09990, we changed the fomula for calculating the number of prefetchers to start at database activation time.
IBM FileNet Workplace XT NullPointerException when bootstrapping the object store or accessing Site Preferences/Access Role - United States java.lang.NullPointerException; workplacext bootstrap; user display name TECHNOTE (TROUBLESHOOTING)

PROBLEM(ABSTRACT)
 After logging into FileNet Workplace XT, a java.lang.NullPointerException error is logged when bootstrapping the object store or when accessing Site Preferences/Access Role. 

SYMPTOM
Error Stack Trace extracted from the J2EE Application Server error log: 

java.lang.NullPointerException 

 at org.apache.jasper.runtime.JspWriterImpl.write(JspWriterImpl.java:421) 

 at com.filenet.wcm.apps.server.ui.info.prefs.PrefAccessRolesInfoPage.renderRoleMembers(PrefAccessRolesInfoPage.java:254) 

 at com.filenet.wcm.apps.server.ui.info.prefs.PrefAccessRolesInfoPage.renderRole(PrefAccessRolesInfoPage.java:220) 

 at com.filenet.wcm.apps.server.ui.info.prefs.PrefBootstrapInfoPage.renderAdminRole(PrefBootstrapInfoPage.java:131) 

 at com.filenet.wcm.apps.server.ui.info.prefs.PrefBootstrapInfoPage.render(PrefBootstrapInfoPage.java:303)


CAUSE
This behavior may occur if an invalid entry has been specified in the User Display Name Attribute or Group Display Name Attribute setting in the Directory Services Configuration in FileNet Enterprise Manager (FEM). 

Workplace XT attempts to resolve the user names and groups defined within the Access Roles based on the Directory Service configuration defined in FEM. If the user name query resolves to null or if there is an invalid entry a NullPointerException error may occur. 


RESOLVING THE PROBLEM
 In FEM, change the User Display Name Attribute or Group Display Name Attribute to a valid LDAP entry such as cn, displayName or uid and restart the FileNet Content Engine and Workplace XT instances.

Question: We got a NullPointerException when bootstrapping the object store or accessing Site Preferences/Access Role on WorkplaceXT 

After logging into FileNet Workplace XT, a java.lang.NullPointerException error is logged when bootstrapping the object store or when accessing Site Preferences/Access Role.

Here's the error stack,

Error Stack Trace extracted from the J2EE Application Server error log:

java.lang.NullPointerException

at org.apache.jasper.runtime.JspWriterImpl.write(JspWriterImpl.java:421)

at com.filenet.wcm.apps.server.ui.info.prefs.PrefAccessRolesInfoPage.renderRoleMembers(PrefAccessRolesInfoPage.java:254)

at com.filenet.wcm.apps.server.ui.info.prefs.PrefAccessRolesInfoPage.renderRole(PrefAccessRolesInfoPage.java:220)

at com.filenet.wcm.apps.server.ui.info.prefs.PrefBootstrapInfoPage.renderAdminRole(PrefBootstrapInfoPage.java:131)

at com.filenet.wcm.apps.server.ui.info.prefs.PrefBootstrapInfoPage.render(PrefBootstrapInfoPage.java:303)

Answer: In FEM, change the User Display Name Attribute or Group Display Name Attribute to a valid LDAP entry such as cn, displayName or uid and restart the FileNet Content Engine and Workplace XT instances.
IBM How to delete a document hierarchy node in IBM Datacap Taskmaster Capture - United States dco document hierarchy node delete remove hide blank page TECHNOTE (FAQ)

QUESTION
 How do I delete a document hierarchy node, such as a blank page, so that it no longer processes rules or appears in a batchview listing? 

CAUSE
It is sometimes desired to remove pages or documents from a batch, as they are no longer needed or to simplify processing for a Verify operator.

ANSWER
The DeleteChildType from the Validations library can be used by running it from the parent of the object to be deleted and specifying the specific child. 

For example, to remove blank pages from a batch: 

 1. Create a special page type attached at the batch level called something like DeleteMe. 
 2. Use an action like BlankPagesIDBySize to identify the blank page:  * BlankPagesIDBySize (1000,DeleteMe)
    
    
 3. Create a rule with the action DeleteChildType(DeleteMe) and attach it at the batch level to have it remove all pages with page type DeleteMe.


If building a custom action, the DeleteChild API method is invoked from the parent object. 

 * 
 *

Question: Hide a page in dotedit step  I am working on datacap 8.1 version. I have 2 pages in a batch. Page 1 with status as 1, Page 2 with status as 20. Both are of same page type. In verification step (dotedit) I want to hide the page which is with status 20. I have given status 20 in ignored page status in web administrator for verify. But still when I navigate through pages in dotedit batch view the respective panel is loading. I am able to submit the batch even if I have one page in a batch with 20 as status.

Is there any way to delete the page (we have multiple same type of pages in a batch) from dotedit based on the page status? 

Answer: The DeleteChildType from the Validations library can be used by running it from the parent of the object to be deleted and specifying the specific child.
IBM Action required for IBM Integration Bus Hypervisor Edition V9.0 and WebSphere Message Broker Hypervisor Edition V8.0 for security vulnerabilities in Red Hat Linux - United States  FLASH (ALERT)

ABSTRACT
 IBM Integration Bus Hypervisor Edition V9.0 and WebSphere Message Broker Hypervisor Edition V8.0 require customer action for security vulnerabilities in Red Hat Linux. 

CONTENT
IBM Integration Bus Hypervisor Edition V9.0 and WebSphere Message Broker Hypervisor Edition V8.0 ship with versions of Red Hat Enterprise Linux (RHEL) Server that are vulnerable to CVE-2016-8677, CVE-2016-8678 CVE-2016-9298, CVE-2014-9915, CVE-2016-10046, CVE-2016-10047, CVE-2016-10048, CVE-2016-10049, CVE-2016-10050, CVE-2016-10051, CVE-2016-10052, CVE-2016-10053, CVE-2016-10054, CVE-2016-10055, CVE-2016-10056, CVE-2016-10057, CVE-2016-10058, CVE-2016-10059, CVE-2016-10060, CVE-2016-10061, CVE-2016-10062, CVE-2016-10063, CVE-2016-10064, CVE-2016-10065, CVE-2016-10066, CVE-2016-10067, CVE-2016-10068, CVE-2016-10069, CVE-2016-10070, CVE-2016-10071, CVE-2016-10144, CVE-2016-10145, CVE-2016-10146, CVE-2017-5506, CVE-2017-5507, CVE-2017-5508, CVE-2017-5511, CVE-2017-6498, CVE-2017-6499, CVE-2017-6500, CVE-2017-6501, CVE-2017-6502, CVE-2016-10252 and CVE-2017-6497 

IBM Integration Bus Hypervisor Edition V9.0 and WebSphere Message Broker Hypervisor Edition V8.0 ship with Red Hat Enterprise Linux (RHEL) Server 6.2.

Remediation: 

IBM strongly recommends that you contact Red Hat to obtain and install fixes for Red Hat Enterprise Linux (RHEL) Server 6.2, as applicable.




Cross reference information Segment Product Component Platform Version Edition Business Integration WebSphere Message Broker Hypervisor Edition Linux 8.0 
PRODUCT ALIAS/SYNONYM
 WMB HVE IIB HVE

Question: Help with Action required for IIIB V9 and WMB V8 Hypervisor Editions for security vulnerabilities in Red Hat Linux I need to understand details regarding Action required for IBM Integration Bus Hypervisor Edition V9.0 and WebSphere Message Broker Hypervisor Edition V8.0 for security vulnerabilities in Red Hat Linux. Where can I find this information? 

Answer: IBM Integration Bus Hypervisor Edition V9.0 and WebSphere Message Broker Hypervisor Edition V8.0 ship with versions of Red Hat Enterprise Linux (RHEL) Server that are vulnerable to CVE-2016-8677, CVE-2016-8678 CVE-2016-9298, CVE-2014-9915, CVE-2016-10046, CVE-2016-10047, CVE-2016-10048, CVE-2016-10049, CVE-2016-10050, CVE-2016-10051, CVE-2016-10052, CVE-2016-10053, CVE-2016-10054, CVE-2016-10055, CVE-2016-10056, CVE-2016-10057, CVE-2016-10058, CVE-2016-10059, CVE-2016-10060, CVE-2016-10061, CVE-2016-10062, CVE-2016-10063, CVE-2016-10064, CVE-2016-10065, CVE-2016-10066, CVE-2016-10067, CVE-2016-10068, CVE-2016-10069, CVE-2016-10070, CVE-2016-10071, CVE-2016-10144, CVE-2016-10145, CVE-2016-10146, CVE-2017-5506, CVE-2017-5507, CVE-2017-5508, CVE-2017-5511, CVE-2017-6498, CVE-2017-6499, CVE-2017-6500, CVE-2017-6501, CVE-2017-6502, CVE-2016-10252 and CVE-2017-6497 

IBM Integration Bus Hypervisor Edition V9.0 and WebSphere Message Broker Hypervisor Edition V8.0 ship with Red Hat Enterprise Linux (RHEL) Server 6.2.
IBM ITCAM Data Collector connection to the Managing Server fails with Connection Refused. - United States  TECHNOTE (TROUBLESHOOTING)

PROBLEM(ABSTRACT)
 The Data Collector (DC) connection may fail with “Connection Refused” if the Managing Server’s(MS) host name can resolve to an IP address that cannot reach the MS. 

CAUSE
The DC obtains the MS kernel’s network address from the MS. If a host name is specified for the kernel, and any of it’s resolved IP addresses cannot reach the MS from the DC, ITCAM’s connection attempt will fail if one of these "invalid” IP’s is used.

RESOLVING THE PROBLEM
Instead of host name, specify a “valid” IP address for the MS in the <MS_HOME>/bin/setenv.sh file, and in ITCAM 6.1, the ms.properties file. This solution usually works except when there is a firewall with Network Address Translation (NAT) enabled. In that case, you must make network changes so that all the resolved IPs can reach the MS. 

Change as directed:

ITCAM 6.0 ( or earlier )
In MS_home/bin/setenv.sh:
KERNEL_HOST01=<ip addr of MS>
KERNEL_HOST02=<ip addr of MS>

ITCAM 6.1
In MS_home/bin/setenv.sh:
KERNEL_HOST01=<ip addr of MS>
am_socket_bindip=<ip addr of MS>
am_socket_exportip=<ip addr of MS>
In MS_HOME/etc/ms.properties, modify “kernel.hosts” specifying MS IP address:
kernel.hosts=<ip addr of MS>CBSPort:RFSPort:RMIPort - usually -
kernel.hosts=<ip addr of MS>9122:9120:9118

Example:
kernel.hosts=9.12.20.220:9122:9120:9118

Example of the error message:
This example is from z/OS, but the problem can occur on any platform.

<PPECONTROLLER, 60014b53-f7e9-db01-4272-2a9f50388c89.511, 
9.12.20.161> Unable to join Kernel WSRT7.pdl.pok.ibm.com:9120 - 
java.net.ConnectException: EDC8128I Connection refused. 
(errno2=0x76630291); nested exception is: 
java.net.ConnectException: EDC8128I Connection refused. 
(errno2=0x76630291) 

To determine IP addresses for a given MS host name [issue on the DC]:
nslookup <MS_host_name> 

To test basic connectivity, for each IP address listed by NSLOOKUP, issue:
ping <ip_address>

Question: Why is Connection Refused on the ITCAM Managing Server? ITCAM Data Collector connection to the Managing Server fails with Connection Refused. 

Answer: Instead of host name, specify a “valid” IP address for the MS in the <MS_HOME>/bin/setenv.sh file, and in ITCAM 6.1, the ms.properties file.
IBM SPSS Student Version and Graduate Pack Resources - United States SPSS Support Acquisition Statistics Stats Grad Pack Student TECHNOTE (FAQ)

QUESTION
 Where do I get support for IBM SPSS Student Version or Graduate Pack software? 

ANSWER
Step 1: 
For installation & licensing issues on Student version and Graduate pack, contact your vendor. 

 * Hearne [http://www.hearne.software/Software/SPSS-Grad-Packs-for-Students-by-IBM/FAQ] 
 * On the Hub [http://onthehub.com/] 
 * StudentDiscounts.com [http://studentdiscounts.com/contact-us.aspx] 
 * JourneyEd [https://www.journeyed.com/contact] 
 * thinkEDU [https://thinkedu.desk.com/] 
 * Studica [http://www.studica.com/technical-support]





Cross reference information Segment Product Component Platform Version Edition Business Analytics SPSS Amos Windows Not Applicable Grad Pack, Shrinkwrap, Campus Business Analytics SPSS Modeler Platform Independent Not Applicable Business Analytics SPSS Text Analytics for Surveys Windows Not Applicable Business Analytics SPSS Statistics Platform Independent Not Applicable Campus Edition, Grad Pack, Student Version

Question: I need to transfer my SPSS 24 licence to a new computer I need to transfer my SPSS 24 license to a new machine. I have only used my activation code on one computer so far, and that computer was found to be defective which has led me to get a new computer. I was able to download SPSS 24 Gradpack onto the new computer, but every time I put in the activation code, the program gives me an error message saying that I am not allowed to generate any new licenses.

Answer: For installation & licensing issues on Student version and Graduate pack, contact your vendor.
IBM ERROR: Default DB path is not set, when adding database set on RHEL 5 - United States 1320206; ClearQuest; Command Line Tools; CQ; cqreg; add_dbset; initialize; CQ_DATABASES; CQDB_rgys; registry; db set; db_set; Default DB path is not set; Use cqreg initialize first; linux; RHEL; RHEL5 TECHNOTE (TROUBLESHOOTING)

PROBLEM(ABSTRACT)
 This technote explains why the error, "Default DB path is not set", occurs when adding a connection with IBM® Rational® ClearQuest® on RedHat Enterprise Linux® (RHEL) 5. 

SYMPTOM
When running the command cqreg add_dbset, this error occurs:

"Default DB path is not set"
"Default version is 7.0.0"
/opt/rational/clearquest/CQDB_rgys/cqdb_registry/7.0.0 does not exist. Use cqreg initialize first. 

CAUSE
Normally, at the end of a ClearQuest installation on UNIX® based platforms, the cqreg initialize command runs automatically. The command creates the registry structure for database sets. During the installation, the command did not run successfully.

DIAGNOSING THE PROBLEM
Verify that the CQDB_rgys directory exists, as defined in the installation options. The following is the default registry location: 


/opt/rational/clearquest/CQDB_rgys/cqdb_registry/

If not present, then the cqreg initialize command was not successful.


RESOLVING THE PROBLEM
Run cqreg initialize. The add_dbset command will run successfully afterwards. However, should the same error persist, make sure the command is run as the root user. 



Also make sure that the CQ_DATABASES environment variable is set to the desired registry path. If it is not, set the variable accordingly, then run the previously mentioned commands again.

Question: CQWEB  can\'t retrieve repository dropdown list options in RedHat Linux, how to deal with it ? I setup a cq demo env in redhat linux with oracle database, CQ 7.1.2, LRKS 8.1.3,  Linux CQ client can login CQ as the following picture 1, but CQWEB login page can't retrieve the repository dropdown list options as the following picture 2.  I used cqreg to register CQ database:

cqreg add_dbset -v ORACLE -s 192.168.0.84 -d ESBDB -u cqadmin -p cqadmin -dbset CQ_DEMO_ORACLE -co LOB_TYPE=CLOB -force

What's matter for this happen? 

Answer: Normally, at the end of a ClearQuest installation on UNIX® based platforms, the cqreg initialize command runs automatically. The command creates the registry structure for database sets. During the installation, the command did not run successfully.
IBM JAZZ 1.1.0.3 for WebGUI (Pre-Req) not installing. - United States TIPL2INST; DASHL2INST; CRIMA1217E; prereq_checker.bat; prereq_checker.bat TECHNOTE (TROUBLESHOOTING)

PROBLEM(ABSTRACT)
 Installation of Dashboard Application Service Hub (DASH) and Jazz for Service Management (JazzSM) components is failing even though the installation prerequisite scan apparently passed. 

CAUSE
Upon further investigation, it was discovered the customer had only used the product code for DASH during prerequisite scan. 

DIAGNOSING THE PROBLEM
During installation the following error is seen in the GUI installation window and logs: 

 * 
 * 
 * 
 * 
 * 
 * 
 * 
 * 
 * 
 * 
 * 
 * 
 * 
 * 
 * 
 * 
 * 
 * 
 * 
 * 
 * 
 * 
 * 
 * 
 * 
 * 
 * 
 * 
 * 
 * 
 * 
 * 
 * 
 * 
 * 
 * 
 * 
 * 
 * 
 * 
 * 
 * 


The above error typically means there is not enough room on the system for software to deploy and the installation to complete successfully. 
RESOLVING THE PROBLEM
In order to accurately determine if the installation prerequisites have been met, the user must pass both product codes to the prerequisite scanner. In this case, the user must pass the codes for DASH and Jazz simultaneously to the prerequisite scanner script. 

The following table contains the product codes for the various integration services:
[/support/docview.wss?uid=swg21696179&aid=1] [/support/docview.wss?uid=swg21696179&aid=1] 

In this particular case, in order to properly run the prerequisite scanner, the codes for DASH and JazzSM should be passed like this: 

 * 
 * 
 * 


The above will provide a detailed listing of the prerequisites for both products along with which items have passed and which items have failed and need to be addressed before the installation will succeed.

Question: How do I run the prerequisite scan for jazzSM? How do I run the prerequisite scan? 

Answer: In this particular case, in order to properly run the prerequisite scanner, the codes for DASH and JazzSM should be passed like this: 

 * 
 * 
 * 


The above will provide a detailed
IBM Supported Upgrade and Downgrade paths for DataPower Virtual Edition - United States  TECHNOTE (FAQ)

QUESTION
 Which WebSphere DataPower virtual edition fix pack can I upgrade to and downgrade from? 

CAUSE
Not all scrypt4 fix packs are compatible with the 5.0.0.0 OVA files that were released in November 2012 and March 2013. If you upgrade or downgrade with an incompatible fix pack, unexpected errors might occur.

ANSWER
 Use the following links to determine which fix packs are compatible with your virtual deployment.




 * 5.0.0.0 from 30 November 2012 (build 220750)
 * 5.0.0.0 from 29 March 2013 (build 227007)
 * 5.0.0.5
 * 5.0.0.6
 * 5.0.0.8 or later
 * 6.0.0.0 or later











5.0.0.0 from 30 November 2012 (build 220750) 
When your virtual deployment is the OVA file from 30 November 2012, you can install any fix pack from Fix Central, except for the 5.0.0.0 fix pack. On Fix Central, the 5.0.0.0 fix pack is for the 5.0.0.0 OVA release from 29 March 2013. 

Back to top










5.0.0.0 from 29 March 2013 (build 227007) 
When your virtual deployment is the OVA file from 29 March 2013, you can install only the 5.0.0.0 fix pack and 5.0.0.8 or later fix packs from Fix Central. On Fix Central, the 5.0.0.5 and 5.0.0.6 fix packs are for the 5.0.0.0 OVA release from 30 November 2013. 

Back to top










5.0.0.5 
When your virtual deployment is 5.0.0.5, you can install any fix pack from Fix Central, except for the 5.0.0.0 fix pack. On Fix Central, the 5.0.0.0 fix pack is for the 5.0.0.0 OVA release from 29 March 2013. 

Back to top










5.0.0.6 
When your virtual deployment is 5.0.0.6, you can install any fix pack from Fix Central, except for the 5.0.0.0 fix pack. On Fix Central, the 5.0.0.0 fix pack is for the 5.0.0.0 OVA release from 29 March 2013. 

Back to top










5.0.0.8 or later 
When your virtual deployment is 5.0.0.8 or later, do not install any fix pack from Fix Cental that is earlier than the 5.0.0.8 fix pack. The 5.0.0.8 fix pack has critical fixes. For more information, see Critical Updates [http://www-01.ibm.com/support/docview.wss?uid=swg21390112#part2]. 

Note: You must install the 5.0.0.8 or later fix pack to upgrade to 6.0.0.0 or later. The 5.0.0.8 fix pack contains a required fix to allow the larger sized firmware image to fit. 

Back to top










6.0.0.0 or later 
When your virtual deployment is the 6.0.0.0 OVA file or a firmware upgrade through a 6.0.0.0 or later fix pack, do not install any fix pack from Fix Cental that is earlier than the 5.0.0.8 fix pack. The 5.0.0.8 fix pack has critical fixes. For more information, see Critical Updates [http://www-01.ibm.com/support/docview.wss?uid=swg21390112#part2]. 

Back to top

 


Cross reference information Segment Product Component Platform Version Edition Business Integration WebSphere DataPower Service Gateway XG45 Virtual Edition VMware ESXi, VMware ESX 5.0.0, 6.0.0 Edition Independent

Question: How do I upgrade my virtual DataPower Appliance from 5.0 firmware to 6.0+ firmware? When attempting to upgrade my Virtual DataPower Appliance from 5.0.0.0 firmware version to 6.0+ firmware versions, I receive a failure message.
IBM QRadar: Enabling On Event and Flow Hashing integrity checks with HMAC - United States Hashing; QRadar; HMAC; integrity; hashed message authentication code; authentication TECHNOTE (FAQ)

QUESTION
 What is the performance impact of using HMAC, and how does QRadar handle key management?



ANSWER
The overhead of writing these files is negligible, regardless of the hashing method selected. HMAC is no more expensive than the default options supported by QRadar previously. Once enabled the 
HMAC keys are added to new Events and Flows as they are written. When attempting to run the integrity check, it will take some time depending on the amount of data being validated. It will not cause performance issues, assuming the system is not at maximum load for disk input. 

From more information on HMAC please refer to the section Checking the Integrity of Event and Flow Logs in the QRadar Administration Guide.

QRadar 7.3.0 Administration Guide [http://public.dhe.ibm.com/software/security/products/qradar/documents/7.3.0/en/b_qradar_admin_guide.pdf] 

QRadar 7.2.8 Administration Guide [http://public.dhe.ibm.com/software/security/products/qradar/documents/7.2.8/en/b_qradar_admin_guide.pdf] 

 

 

Where do you find more information? 




[/support/docview.wss?uid=swg21965783&aid=1] [http://ibm.biz/QRadar-KC] [/support/docview.wss?uid=swg21965783&aid=2] [https://ibm.biz/qradarforums] [/support/docview.wss?uid=swg21965783&aid=3] [http://ibm.biz/qradarknowledge] [/support/docview.wss?uid=swg21965783&aid=4] [http://ibm.biz/SecSuptUTube] [/support/docview.wss?uid=swg21965783&aid=5] [http://ibm.biz/qradarsoftware] [/support/docview.wss?uid=swg21965783&aid=6] [http://ibm.biz/MyNotification] [/support/docview.wss?uid=swg21965783&aid=7] [http://ibm.biz/SuptRegQuikStart]

Question: Event Log Hashing - Performance? I'm curious how much performance is affected by hashing events and flows. I don't see that information in the admin guide for 7.3.1. Can someone list that out by algorithm?

Answer: The overhead of writing these files is negligible, regardless of the hashing method selected.
IBM WebSphere DataPower spikes with high CPU when WebSphere MQ connection is unavailable - United States retries; high CPU; MQ queue manager; Retry Interval; Retry Attempts; Long Retry Interval TECHNOTE (FAQ)

QUESTION
 Why does WebSphere DataPower spike with a high CPU rate when a WebSphere MQ connection is unavailable? Is there a solution to this issue? 

CAUSE
If the value of Retry Attempts is set to 0 on the DataPower MQ Queue Manager object, this negates the benefits of the Long Retry Interval since it will not be used. DataPower will retry forever using the specified Retry Interval. The default setting of Retry Attempts as 0 and Retry Interval as 1 second is provided to preserve backward compatibility. However, these default values should be changed to take advantage of Long Retry Interval feature available in firmware.

ANSWER
The solution to the issue of having DataPower vulnerable to the MQ Queue Manager being inaccessible is to change the Retry Attempts parameter on the Configure MQ Queue Manager window from 0 to some number. As an example, change the parameters as follows: 

 *  Retry Attempts - change the default of 0 to 6 Retry Interval - change the default of 1 to 10 seconds Long Retry Interval - change the default of 1800 to 600 seconds (10 minutes) 


In the event that the Queue Manager is down or a connection is not established, the above example configuration will allow the MQ QM Object to retry 6 times with 10 second intervals. After 6 attempts, the MQ QM object will retry every 10 minutes.  


Cross reference information Segment Product Component Platform Version Edition Business Integration WebSphere DataPower Integration Appliance XI50 Firmware 3.8 Business Integration WebSphere DataPower Low Latency Appliance XM70 Firmware 3.8

Question: Why does WebSphere DataPower spike with a high CPU rate when a WebSphere MQ connection is unavailable? I have noticed when my MQ backends go down unexpectedly it can result in a high CPU rate on DataPower. And how can I resolve this? 

Answer: The solution to the issue of having DataPower vulnerable to the MQ Queue Manager being inaccessible is to change the Retry Attempts parameter on the Configure MQ Queue Manager window from 0 to some number.
IBM Netcool conf pack command - United States tool; menu; not found; confpack TECHNOTE (TROUBLESHOOTING)

PROBLEM(ABSTRACT)
 Migrating to a new version of Omnibus, running nco_confpack:

$OMNIHOME/bin/nco_confpack -list -server NCOMS -user ncadmin -file /tmp/nco_confpack.list 

Received this error: Tool in menu but not found, menu: AlertsMenu, tool: CLEAR_LWY. 

SYMPTOM
The command fails and the following error is received: Tool in menu but not found, menu: AlertsMenu, tool: CLEAR_LWY.


CAUSE
The menu AlertsMenu has a tool in it called CLEAR_LWY, however the tool no longer exists.

RESOLVING THE PROBLEM
Recreate the tool and associate it with the menu and try to run the command again.

Question: Why does nco_confpack -export fail with the message "Tool in menu but not found"? I tried to export OMNIbus configuration using nco_confpack command and I get the following message:
Tool in menu but not found, menu: AlertsMenu, tool: Close
I've also tried using it with -list command and I get the same error. 

Answer: Recreate the tool and associate it with the menu and try to run the command again.
IBM DB2 LUW precompile, prep may write different code to DB2 z/OS - United States  TECHNOTE (FAQ)

QUESTION
 Why does DB2 LUW precompile, prep write different code to DB2 z/OS? 

CAUSE
It is an expected current DB2 LUW behavior.

ANSWER
Here is an example. 

------------------------------ 
<Before PRECOMPILE> 
01 BLOB1 USAGE ID SQL TYPE IS BLOB(10485760). 

<PRECOMPILE on z/OS> 
01 BLOB1. 
02 BLOB1-LENGTH PIC S9(9) COMP. 
02 BLOB1-DATA. 
49 FILLER PIC(10485760). 

<PRECOMPILE on LUW> 
01 BLOB1. 
02 BLOB1-LENGTH PIC S9(9) COMP. 
02 BLOB1-DATA PIC(10485760). 
------------------------------ 

As above, we see DB2 z/OS has below two lines:
------------------------------ 
02 BLOB1-DATA. 
49 FILLER PIC(10485760). 
------------------------------ 
but DB2 LUW writes only one line as below for above two lines part.
------------------------------ 
02 BLOB1-DATA PIC(10485760). 
------------------------------ 

It is an expected current DB2 LUW behavior and we don't have any hidden 
option to generate the cobol declarations similar to z/OS precompiler.

Note:
This behavior might be changed without notice in the future. We can confirm whether this technote
is valid or not by following above scenario.
Please contact your Sales Rep to submit a potential design change towards a future release.
Or please open a ticket, Request For Enhancement at https://www.ibm.com/developerworks/rfe/ [https://www.ibm.com/developerworks/rfe/]

RELATED INFORMATION
 PRECOMPILE command [http://www.ibm.com/support/knowledgecenter/SSEPGG_10.5.0/com.ibm.db2.luw.admin.cmd.doc/doc/r0001964.html]
COBOL compiler configurations [http://www.ibm.com/support/knowledgecenter/SSEPGG_10.5.0/com.ibm.db2.luw.apdv.embed.doc/com.ibm.db2.luw.apdv.embed.doc-gentopic3.html]

Question: Any difference between DB2 z/OS V9.1 + IBM Cobol and DB2 LUW V10.5 FP7 + MF Cobol? We are planning below migration.

[Current]
DB2 z/OS V9.1 + IBM Cobol
[New]
DB2 AESE V10.5 FP7 / AIX V7.1 + Micro Focus Cobol (MF Cobol)

Any known limitation or things what we need to concern?


Answer: DB2 LUW precompile, prep write different code to DB2 z/OS?
IBM Dataserver services changing from Healthy to Vulnerable - United States SIQ TECHNOTE (FAQ)

QUESTION
 Why does the Dataserver service change from healthy to Vulnerable after logging into appstack? 

CAUSE
Memory allocated was not the supported number

ANSWER
 

This could be due to amount of Memory allocated to the dataserver. 

 1. Login to the Dataserver 
 2. Click on Administration > Dashboard tab 
 3. Review the Application status and make sure it is green 
 4. Click on Controller Link 
 5. Review and confirm that all services are running fine 
 6. If needed, make changes to memory

Question: Why does the Dataserver service change from Healthy to Vulnerable after logging into StoredIQ Application Stack? Why does the Dataserver service change from Healthy to Vulnerable after logging into StoredIQ Application Stack? 

Answer: This could be due to amount of Memory allocated to the dataserver.
IBM Server Error Message when running BIRT Reports after upgrading to Atlas 6.0.3.3 - United States  TECHNOTE (FAQ)

QUESTION
 Why do we get server error message when running BIRT reports after upgrading to Atlas 6.0.3.3? 

CAUSE
This happens when the BIRT Reports is running in Standalone mode and happens due to a new configuration - report.standalone.userid

ANSWER
 

 1. Navigate to Atlas Properties Folder 
 2. Edit AtlasReportConfig.properties 
 3. Uncomment the property #report.standalone.userid=1 
 4. Save the change 
 5. Restart both Atlas and Atlas Reports application server instances

Question: Why do we get server error message when running BIRT reports after upgrading to Atlas 6.0.3.3? Why do we get server error message when running BIRT reports after upgrading to Atlas 6.0.3.3? 

Answer: This happens when the BIRT Reports is running in Standalone mode and happens due to a new configuration - report.standalone.userid