README VERSION : 1 README Creation Date : 2011-09-17 PATCH-ID : PHCO_42093 PATCH NAME : VRTSdbed 5.1SP1RP1 BASE PACKAGE NAME : VRTSdbed BASE PACKAGE VERSION : 5.1SP1 OBSOLETE PATCHES : NONE SUPERSEDED PATCHES : NONE REQUIRED PATCHES : NONE INCOMPATIBLE PATCHES : NONE SUPPORTED PADV : hpux1131 (P-Platform , A-Architecture , D-Distribution , V-Version) PATCH CATEGORY : REBOOT REQUIRED : NO PATCH INSTALLATION INSTRUCTIONS: -------------------------------- Please refer release notes for install/uninstall instructions. FIXED INCIDENTS: ---------------- Patch Id::PHCO_42093 * Incident no::2361363 Tracking ID ::2361361 Symptom::The qio scripts are not present in the DBED package Description::The scripts /opt/VRTSdbed/bin/qio_convertdbfiles ,/opt/VRTSdbed/bin/qio_convertdbfiles_ora ,/opt/VRTSdbed/bin/qio_getdbfiles ,/opt/VRTSdbed/bin/qio_getdbfiles_ora ,/opt/VRTSdbed/bin/qio_recreate ,/opt/VRTSdbed/bin/qio_recreate_ora are missing in the VRTSdbed package Resolution::The files have been added. * Incident no::2395173 Tracking ID ::2395171 Symptom::The vxdbd daemon uses Medium or Low ciphers Description::The vxdbd daemon and its client traditionally do not use any ciphering to communicate. This is not favorable in certain situations and hence there is a need to provide communication using configurable ciphers. Resolution::The latest VRTSat libraries are used which set a configurable parameter in the profile file /opt/VRTSdbed/eat/root/.VRTSat/profile/VRTSatlocal.conf. Specifically the "SSLCipherSuite" parameter needs to be set to appropriate ciphers to be used. To make use of this feature 1. The "SSLCipherSuite" should be set to the appropriate cipher strings in the /opt/VRTSdbed/eat/root/.VRTSat/profile/VRTSatlocal.conf file 2. The daemon should be restarted after setting the environment variable VXDBD_USE_ENCRYP=1 3. All the client side scripts/binaries need to be run with the environment variable VXDBD_USE_ENCRYP=1 set. Note: By default LOW ciphers are not supported once this feature is used. The default SSLCipherSuite string is SSLCipherSuite"="HIGH:MEDIUM:!eNULL:!aNULL:!SSLv2". An example for a SSLCipherSuite strings is , "SSLCipherSuite"="ALL:!aNULL:!SSLv2:!ADH:!eNULL:!LOW:!EXP:!MEDIUM:+HIGH" * Incident no::2395194 Tracking ID ::2395192 Symptom::The vxdbd daemon consumes excessive CPU. Description::The vxdbd daemon listens on TCP port 3233 for client connections. When a client connects, the server loops by design in vxdbd_handle_connection(). However, this looping is eventually supposed to end. In this case, for some connections and under some unknown conditions, it doesn't. For whatever reason, vxdbd threads are stuck in this loop continuing to read and write to these sockets while the number of looping threads grows over time. Meanwhile, the sockets are in an IDLE state which means the client is no longer active on the connection. Resolution::The read_n function was incorrectly returning a positive value in case of error, which caused its caller to loop indefinitely. The function was fixed to correctly return a negative value on error. INCIDENTS FROM OLD PATCHES: --------------------------- NONE