IBM i Global

IBM i 

A space for professionals working with IBM’s integrated OS for Power systems to exchange ideas, ask questions, and share expertise on topics like RPG and COBOL development, application modernization, open source integration, system administration, and business continuity.


#Power


#IBMi
#Power
 View Only
  • 1.  PTFs vs Domino

    Posted Sat October 07, 2023 09:55 AM

    Domino users:

    Do NOT put these PTFs on:

    Security Bulletin: IBM i is vulnerable to a local privilege escalation due to a flaw in IBM Directory Server for i (CVE-2023-40378).
    https://www.ibm.com/support/pages/node/7047240?myns=swgother&mynp=OCSWG60&mynp=OCSSTS2D&mynp=OCSSB23CE&mynp=OCSS9QQS&mynp=OCSSC5L9&mync=E&cm_sp=swgother-_-OCSWG60-OCSSTS2D-OCSSB23CE-OCSS9QQS-OCSSC5L9-_-E
    I tried them on IBM i 7.5
    PTF Group             Level
    SF99959                  36
    SF99958                  20
    SF99957                   2
    SF99956                   1
    SF99955                   6
    SF99954                  10
    SF99953                   2
    SF99952                  10
    SF99951                   4
    SF99950                   4
    SF99751                   4
    SF99750               23110
    When I dropped my Domino servers for maintenance and tried to bring them back up again 
    LNT0928
    Error 2 occurred while running the Domino server. 
    2 -- The Domino server stopped running because an exception occurred.
    2 -- Check the job log of the Domino server for possible errors. (nothing but this)
    Nothing on the Domino console.
    "What changed?"
    Those PTF's.
    RMVPTF LICPGM(5770SS1) SELECT(SI84231 SI84569 SI84578) RMV(*PERM)
    STRDOMSVR ...
    success!
    HCL Domino (r) Server (Release 12.0.2 for i5/OS)
    Not sure if the following applies.
    **Domino 12.0.2 Fix Pack 2 or higher recommended but not required.
    I may open a case on Monday but why bother now because if it's not a system supporting a power grid for the eastern seaboard and a bank of life support machines I will catch endless grief trying to get them to work on it over a weekend.  Especially since I have a workaround.


    ------------------------------
    Robert Berendt IBMChampion
    ------------------------------


  • 2.  RE: PTFs vs Domino

    Posted Tue October 10, 2023 02:30 AM
    Edited by Kim Clausen Tue October 10, 2023 02:30 AM

    Hi,

    IBM have updated the security bulletin and stated that the ptf's should not be installed due to issues:

    https://www.ibm.com/support/pages/node/7047240?myns=swgother&mynp=OCSWG60&mynp=OCSSTS2D&mynp=OCSSB23CE&mynp=OCSS9QQS&mynp=OCSSC5L9&mync=E&cm_sp=swgother-_-OCSWG60-OCSSTS2D-OCSSB23CE-OCSS9QQS-OCSSC5L9-_-E



    ------------------------------
    Kim Clausen
    ------------------------------



  • 3.  RE: PTFs vs Domino

    Posted Thu October 19, 2023 10:34 AM

    IBM has put new PTF's on the link at https://www.ibm.com/support/pages/node/7047240?myns=swgother&mynp=OCSWG60&mynp=OCSSTS2D&mynp=OCSSB23CE&mynp=OCSS9QQS&mynp=OCSSC5L9&mync=E&cm_sp=swgother-_-OCSWG60-OCSSTS2D-OCSSB23CE-OCSS9QQS-OCSSC5L9-_-E
    I put this on one of my Domino lpars and this time the Domino server could be restarted successfully. 



    ------------------------------
    Robert Berendt IBMChampion
    ------------------------------