I just put on PTF's the weekend of 2015-09-18 and could not get into my
admin instance
http://myibmi:2001
This affected both my 7.1 and 7.2 lpars.
I remembered this recent thread (but couldn't search for it for the life
of me!) I ended up just going backwards through the archive website. I
knew it was very recent.
Thanks to Bryan Dietz for his posting of
http://www-01.ibm.com/support/docview.wss?uid=nas8N1020397
And thanks to Nadir Amra for the posting of the PTF's at that location.
SI57921 V6R1M0
SI57922 V7R1M0
SI57923 V7R2M0
I did one lpar by hand as per the instructions. That worked fine.
I did another lpar by following the cover letter for SI57923. That
worked. I even checked the stuff listed in the manual steps and it is
identical. The second lpar seemed to have some quirks first starting and
I was getting internal server error. Then again the first lpar is on an
824 with all SSD and adequate memory and processor. The second lpar is a
'sandbox' lpar on a 814 with spinning disks and much less memory and
processor. After awhile it worked fine.
I suspect that SI57923 may not make it to a cume or group just in case
people are using ancient browsers. Therefore you may have to continue to
order this separately. Then again, they had no problem issuing the PTF
which broke it for the new browsers (or was it a Windows patch roll out
which blew this out of the water?).
CORRECTION FOR APAR SE62802 :
-----------------------------
Need to automatically disable SSL Version 3 for
the HTTP ADMIN server, so that port 2005 will
only use TLS. This is to address concerns about
CVE-2014-3566 (POODLE).
SPECIAL INSTRUCTIONS :
----------------------
In order for the admin2 server to be
moved to the SSL TLS level, you will
need to end the HTTP ADMIN server and
then restart the server. This can be
done using the following command:
ENDTCPSVR *HTTP HTTPSVR(*ADMIN)
followed by the following command:
STRTCPSVR *HTTP HTTPSVR(*ADMIN)
Search words:
"IBM Navigator for i"
iNav
Port 2001
cume ptf
group ptfs
Port 2005
Rob Berendt
midrange.com
