Patch Name: PHSS_29090 Patch Description: s700_800 11.X SGeSAP B.03.08 cumulative patch Creation Date: 03/06/16 Post Date: 03/07/03 Hardware Platforms - OS Releases: s700: 11.00 11.11 s800: 11.00 11.11 Products: MC/ServiceGuard Extension for SAP B.03.08 Filesets: SG-Ext-SAP-R3.SG-SAP-COR,fr=B.03.08,fa=HP-UX_B.11.00_32/64,v=HP Automatic Reboot?: No Status: General Release Critical: No Category Tags: defect_repair enhancement general_release Path Name: /hp-ux_patches/s700_800/11.X/PHSS_29090 Symptoms: PHSS_29090: 1. SGeSAP relied on remsh for remote command execution, making it necessary to configure .rhosts entries on all cluster nodes and systems outside the cluster controlled by SGeSAP. This also allowed remote log in without password. 2. This problem is applicable for clusters using additional SAP Application Server packages (appxx) only. In this configuration, the DB package did not wait for the Application Server package. Instead, it only waited for the completion of cmmodpkg. 3. This problem is applicable for clusters using additional Application Server packages (appxx) only. If Application Server packages appxx and the (DB)CI package start simultanously there are rare conditions under which the packages are waiting for each other to start thus preventing both patckages from starting up. 4. This problem is only applicable for clusters which do not follow the default naming conventions for the package directories (/etc/cmcluster/). Trying to start a package placed in a directory not compliant to the naming in debug mode will come up normally Defect Description: PHSS_29090: 1. Remote shell communication based on .rhosts entries to grant access to the systems without password as root und adm user. Resolution: Introducing a new parameter REM_COMM to sap.conf allowing SGeSAP to use ssh as an alternative to remsh. Details are available in the special instructions section and in the file /opt/cmcluster/sap/README_PHSS_29090.txt. 2. Application Server handling was not consistent for all configured instances. There was a difference in semantics if an Application Server is part of a package or not. Resolution: Existing config parameters AS_PSTART, WAIT_OWN_AS, SERVER_CONSOLIDATION and ASTREAT[] have been enhanced to also apply to Application Server packages . 3. The instance availability test was based on the ServiceGuard package status instead of more applicable instance polling mechanisms. Resolution: SAP RFC is used to determine instance availability. All RFC calls get monitored by timeout scripts that prevent potential indefinite waits on the return of rfc calls. 4. Packages not following the default naming convention can not be started in debug mode. Resolution: The code has been enhanced to find the debug switch file in package directories even if they don't follow the standard naming convention. Enhancement: Yes PHSS_29090: SGeSAP now automatically detects which SAP kernel version is used and how the instance startup syntax should look like. It is no longer necessary to create startup wrapper files in the home directory of SAP ADM users if SAP kernel 6.x versions are used. The sap.conf configuration file has been enhanced. New parameters are CINAME, ASNAME[], RMNAME[] and RMDEPNAME[]. They allow the specification of instance names that differ from the default values. Defaults are DVEBMGS in case of a Central Instance and D (Dialogue Instance) in case of any other SAP Application Server. The values can be changed to e.g. identify Gateway or Batch Instances for which a different name had been chosen. The new parameters are utilized for installations with SAP kernel release 6.x. Corresponding sap.conf sections explain the usage of these settings in more detail. Secure encrypted communication based on secure shell is now available for SGeSAP handling remote execution between SAP nodes via a newly introduced REM_COMM parameter. AS_PSTART, WAIT_OWN_AS, SERVER_CONSOLIDATION and ASTREAT[] parameters now have consistent meanings for both Application Server packages and non-packaged SAP application servers that are specified in sap.conf configuration of the (DB)CI package. All of these parameters apply to both Application Server types. The instance availability test is now based on instance polling instead of any ServiceGuard package status. Dependent package states still get reported in the package startup log files for reference, but they no longer influence any package startup behaviour immediately. There is a choice now, whether Application Server packages should be stopped after failover of (DB)CI or kept up running. In order to achieve the original behaviour - which is stopping of an Application Server that is part of an Application Server package is automatically stopped if the(DB)CI fails over to the same node, SERVER_CONSOLIDATION should be set to 0. The whole Application Server package will be halted. Details are available in the special instructions section and in the file /opt/cmcluster/sap/README_PHSS_29090.txt SR: 8606304173 8606294370 8606294368 8606259707 Patch Files: SG-Ext-SAP-R3.SG-SAP-COR,fr=B.03.08,fa=HP-UX_B.11.00_32/64, v=HP: /opt/cmcluster/sap/LC/sap.conf.delta /opt/cmcluster/sap/LC/saplc.cntl.delta /opt/cmcluster/sap/LC/saplc.mon.delta /opt/cmcluster/sap/README_PHSS_29090.txt /opt/cmcluster/sap/SID/sap.conf.delta /opt/cmcluster/sap/SID/sapap.cntl.delta /opt/cmcluster/sap/customer.functions.delta /opt/cmcluster/sap/sap.functions.delta what(1) Output: SG-Ext-SAP-R3.SG-SAP-COR,fr=B.03.08,fa=HP-UX_B.11.00_32/64, v=HP: /opt/cmcluster/sap/LC/sap.conf.delta: B.03.08 SGeSAP - PHSS_29090 - Last modified 06/06/0 3 /opt/cmcluster/sap/LC/saplc.cntl.delta: B.03.08 SGeSAP - PHSS_29090 - Last modified 06/06/0 3 /opt/cmcluster/sap/LC/saplc.mon.delta: B.03.08 SGeSAP - PHSS_29090 - Last modified 06/06/0 3 /opt/cmcluster/sap/README_PHSS_29090.txt: B.03.08 SGeSAP - PHSS_29090 - README Last modified 06/06/03 /opt/cmcluster/sap/SID/sap.conf.delta: B.03.08 SGeSAP - PHSS_29090 - Last modified 06/06/0 3 /opt/cmcluster/sap/SID/sapap.cntl.delta: B.03.08 SGeSAP - PHSS_29090 - Last modified 06/06/0 3 /opt/cmcluster/sap/customer.functions.delta: B.03.08 SGeSAP - PHSS_29090 - Last modified 06/06/0 3 /opt/cmcluster/sap/sap.functions.delta: B.03.08 SGeSAP - PHSS_29090 - Last modified 06/06/0 3 cksum(1) Output: SG-Ext-SAP-R3.SG-SAP-COR,fr=B.03.08,fa=HP-UX_B.11.00_32/64, v=HP: 438382658 2542 /opt/cmcluster/sap/LC/sap.conf.delta 3810711307 241 /opt/cmcluster/sap/LC/saplc.cntl.delta 57744756 335 /opt/cmcluster/sap/LC/saplc.mon.delta 1833392326 20622 /opt/cmcluster/sap/README_PHSS_29090.txt 156183227 6653 /opt/cmcluster/sap/SID/sap.conf.delta 1713313390 489 /opt/cmcluster/sap/SID/sapap.cntl.delta 360929841 2986 /opt/cmcluster/sap/customer.functions.delta 2152415010 25212 /opt/cmcluster/sap/sap.functions.delta Patch Conflicts: None Patch Dependencies: None Hardware Dependencies: None Other Dependencies: None Supersedes: None Equivalent Patches: None Patch Package Size: 70 KBytes Installation Instructions: Please review all instructions and the Hewlett-Packard SupportLine User Guide or your Hewlett-Packard support terms and conditions for precautions, scope of license, restrictions, and, limitation of liability and warranties, before installing this patch. ------------------------------------------------------------ 1. Back up your system before installing a patch. 2. Login as root. 3. Copy the patch to the /tmp directory. 4. Move to the /tmp directory and unshar the patch: cd /tmp sh PHSS_29090 5. Run swinstall to install the patch: swinstall -x autoreboot=true -x patch_match_target=true \ -s /tmp/PHSS_29090.depot By default swinstall will archive the original software in /var/adm/sw/save/PHSS_29090. If you do not wish to retain a copy of the original software, include the patch_save_files option in the swinstall command above: -x patch_save_files=false WARNING: If patch_save_files is false when a patch is installed, the patch cannot be deinstalled. Please be careful when using this feature. For future reference, the contents of the PHSS_29090.text file is available in the product readme: swlist -l product -a readme -d @ /tmp/PHSS_29090.depot To put this patch on a magnetic tape and install from the tape drive, use the command: dd if=/tmp/PHSS_29090.depot of=/dev/rmt/0m bs=2k Special Installation Instructions: The patch will correct the templates in /opt/cmcluster/sap. After the installation, they need to be copied from /opt/cmcluster/sap to /etc/cmcluster: - sap.functions - customer.functions - LC/sap.conf -> /sap.conf (merge) - LC/saplc.cntl -> /saplc.cntl - LC/saplc.mon -> /saplc.mon - SID/sap.conf -> /sap.conf (merge) - SID/sapap.cntl -> /sapap.cntl Customizations of /etc/cmcluster//sap.conf and /etc/cmcluster//sap.conf need to be preserved and merged into the new sap.conf file. For information on how to use secure encrypted communication refer to the README_PHSS_29090.txt in file /opt/cmcluster/sap.