* * * READ ME * * * * * * Veritas Cluster Server Bundled Agents 7.1 * * * * * * Patch 100 * * * Patch Date: 2016-09-09 This document provides the following information: * PATCH NAME * OPERATING SYSTEMS SUPPORTED BY THE PATCH * PACKAGES AFFECTED BY THE PATCH * BASE PRODUCT VERSIONS FOR THE PATCH * SUMMARY OF INCIDENTS FIXED BY THE PATCH * DETAILS OF INCIDENTS FIXED BY THE PATCH * INSTALLATION PRE-REQUISITES * INSTALLING THE PATCH * REMOVING THE PATCH PATCH NAME ---------- Veritas Cluster Server Bundled Agents 7.1 Patch 100 OPERATING SYSTEMS SUPPORTED BY THE PATCH ---------------------------------------- SLES12 x86-64 PACKAGES AFFECTED BY THE PATCH ------------------------------ VRTSvcsag BASE PRODUCT VERSIONS FOR THE PATCH ----------------------------------- * InfoScale Availability 7.1 * InfoScale Enterprise 7.1 * InfoScale Storage 7.1 SUMMARY OF INCIDENTS FIXED BY THE PATCH --------------------------------------- Patch ID: 7.1.0.100 * 3897530 (3897531) Application agent type resource defaults to root user when running MonitorProgram irrespective of the user specified in the User attribute. DETAILS OF INCIDENTS FIXED BY THE PATCH --------------------------------------- This patch fixes the following incidents: Patch ID: 7.1.0.100 * 3897530 (Tracking ID: 3897531) SYMPTOM: Application agent type resource defaults to root user when running MonitorProgram even when non-root user is specified in the User attribute. DESCRIPTION: Application agent should execute MonitorProgram in the context of user specified in the User attribute of the Application agent type resource, but instead it defaults to root user even when non-root user is specified in the User attribute. Following is a sample configuration for Application agent type resource with 'vcsuser' specified in the User attribute: Application sampleapp ( User = vcsuser MonitorProgram = "/sample/monitorapp" UseSUDash = 1 StartProgram = "/sample/startapp" StopProgram = "/sample/stopapp" ) MonitorProgram for the resource should execute in the context of vcsuser, but instead it executes in the context of the root user. RESOLUTION: Application agent is modified to execute MonitorProgram in the context of non-root user specified in the User attribute of the Application agent type resource. INSTALLING THE PATCH -------------------- Run the Installer script to automatically install the patch: ----------------------------------------------------------- Please be noted that the installation of this P-Patch will cause downtime. To install the patch perform the following steps on at least one node in the cluster: 1. Copy the patch vcsag-sles12_x86_64-Patch-7.1.0.100.tar.gz to /tmp 2. Untar vcsag-sles12_x86_64-Patch-7.1.0.100.tar.gz to /tmp/hf # mkdir /tmp/hf # cd /tmp/hf # gunzip /tmp/vcsag-sles12_x86_64-Patch-7.1.0.100.tar.gz # tar xf /tmp/vcsag-sles12_x86_64-Patch-7.1.0.100.tar 3. Install the hotfix(Please be noted that the installation of this P-Patch will cause downtime.) # pwd /tmp/hf # ./installVRTSvcsag710P100 [ ...] You can also install this patch together with 7.1 base release using Install Bundles 1. Download this patch and extract it to a directory 2. Change to the Veritas InfoScale 7.1 directory and invoke the installer script with -patch_path option where -patch_path should point to the patch directory # ./installer -patch_path [] [ ...] Install the patch manually: -------------------------- Perform the following steps on all nodes in the Cluster Server (VCS) cluster: 1. Backup your configurations. 2. Stop VCS on the cluster node. 3. Install the patch. 4. Restart VCS on the node. Stopping VCS on the cluster node -------------------------------- Perform the following steps: 1. Ensure that the "/opt/VRTSvcs/bin" directory is included in your PATH environment variable so that you can execute all the VCS commands. Refer to the Veritas InfoScale Installation Guide for more information. 2. Ensure that the VRTSvcsag package version for Linux is 7.1. # rpm -q VRTSvcsag If the correct patch is installed, the following output is displayed: For SLES12: # VRTSvcsag-7.1.0.000-SLES12.x86_64 3. Freeze all the service groups persistently. # haconf -makerw # hagrp -freeze [group] -persistent 4. Stop the cluster on all nodes. If the cluster is writable, close the configuration before stopping the cluster. # haconf -dump -makero 5. From any node, execute one of the following commands: # hastop -all or # hastop -all -force 6. Verify whether you have stopped the cluster on all nodes: # hasys -state The following output must be displayed: VCS ERROR V-16-1-10600 Cannot connect to VCS engine 7. Ensure that you stop both had and hashadow processes on all nodes. 8. Stop the VCS CmdServer on all nodes: # CmdServer -stop Installing the Patch -------------------- Perform the following steps: 1. Un-compress the downloaded patch from Veritas. Change the directory to the uncompressed patch location. Install the VRTSvcsag patch: For SLES12: # rpm -Uvh VRTSvcsag-7.1.0.100-SLES12.x86_64.rpm 2. Verify whether the new patch has been installed: # rpm -q VRTSvcsag If the correct patch is installed, the following output is displayed: For SLES12: # VRTSvcsag-7.1.0.100-SLES12.x86_64 Restarting VCS on the cluster node ----------------------------------- 1. To start the cluster services on all cluster nodes, enter the following command first on one node: # hastart On all the other nodes, execute the hastart command to start VCS after the first node goes to LOCAL_BUILD or RUNNING state. 2. Make the VCS cluster writable: # haconf -makerw 3. Unfreeze all the groups: # hagrp -unfreeze [group] -persistent # haconf -dump -makero REMOVING THE PATCH ------------------ If you uninstall the patch, the whole package is uninstalled from the system/node. To go back to a previously installed version of the package, you may need to reinstall the package. Perform the following steps on all the VCS cluster nodes: To uninstall the patch from a cluster node: --------------------------------------------- 1. Freeze all the service groups persistently: # haconf -makerw # hagrp -freeze [group] -persistent 2. Stop VCS on the node by following the steps provided in the "Stopping VCS on the cluster node" section. 3. Uninstall the patch: # rpm -e VRTSvcsag 4. Verify that the patch has been uninstalled from the system: # rpm -qa | grep VRTSvcsag Ensure that the VRTSvcsag package is not displayed. This confirms that the package has been uninstalled. 5. Install the VRTSvcsag 7.1 package from the installation media. 6. To start the cluster services on all cluster nodes, enter the following command first on one node: # hastart On all the other nodes, execute the hastart command to start VCS after the first node goes to LOCAL_BUILD or RUNNING state. 7. Unfreeze all the groups: # hagrp -unfreeze [group] -persistent # haconf -dump -makero SPECIAL INSTRUCTIONS -------------------- NONE OTHERS ------ NONE