README. Readme P/N REV 01. EMC Smarts Network Configuration Manager Version Patch 7. March, 2017

Transcription

1 README EMC Smarts Network Configuration Manager Version Readme P/N REV 01 March, 2017 This document contains supplemental information about EMC Smarts Network Configuration Manager Version Topics include: Revision history... 2 Patch description... 2 New features and changes... 3 Fixed problems... 4 Environment and system requirements... 6 Known problems and limitations... 6 Technical notes... 7 Documentation errata... 8 Installing NCM Uninstalling NCM Troubleshooting and getting help... 15

2 Revision history Revision history The following table presents the revision history of this document: Product versioning and naming Revision Date Description 01 March, 2017 First release of EMC Smarts Network Configuration Manager Version The EMC Smarts Network Configuration Manager Version is the seventh patch release after Version The Network Configuration Manager patch numbering is consistent with entire Smarts portfolio. The Network Configuration Manager is part of Smarts product portfolio that also contains IP, SAM, MPLS, VoIP, ESM, OTM, and NPM products, and has a separate patch Readme document. Patch description A patch provides one or more fixes to an EMC Smarts product. A patch can only be applied to the specific major or minor release and Service Pack of the particular product for which it is intended; this is called the product s baseline. 2 EMC Smarts Network Configuration Manager Version Readme

3 New features and changes New features and changes New features and changes in This release includes important new features and changes to the existing features. New features and changes in on page 3 The release contains no new features and changes. EMC Smarts Network Configuration Manager Version Readme 3

4 Fixed problems Fixed problems This section describes the fixed problems addressed by the patch. Table 1 Fixed problems Issue number Symptom Fix description Version fixed IS-7366/ SR IS-7367 The issue occurs when the getalloperationaldevices API call is used to get a filtered list of devices. The information leaks through the fingerprint.jsp file. The code has been modified to handle the same. Unused JSP and HTML pages are removed. IS-7368 Various issues occur with ncm_monitor.sh script. The ncm_monitor.sh tool is modified to collect all the debugging information correctly. Note: The ncm_monitor.sh script no longer supports the -s tomcat option. This has been combined with -s ncmas, which collects hibernate statistics as well (inside the folder named jmx). IS-7291 Setting keywords for standards, policies, and data files that are longer than 256 characters throws an exception. The data type for keywords is changed to text, which accepts more than 256 characters. IS-7359 The time displayed in the last attempted communication and last successful communication fields is not correct. The code has been modified to update the last communication field using the UI client time. PSRC-3746 / SND-3331 Java RMI remote code executes without authentication. The authentication has been enabled for the vulnerable port. PSRC-3745 / SND-3330 Firewall restrictions implemented in NCM are bypassed. The authentication has been enabled for the vulnerable port. IS-7440/ SR The NCM API call fails at MD5. The data type for hash code is changed to string, to accept the alphanumeric characters. IS-7441/ SR The vlan.dat file cannot be restored from NCM to new switch. The code has been modified to resolve the issues with push of binary files. IS-7445 Cache encryption doesn't encrypt all the required files. The code has been modified to encrypt all the files which store device configuration data in plain text. IS-7298 NCM cancels the jobs that were started after a device server restart. The code has been modified to wait for the device services to come up before returning success to the user. IS-7321/ SR The report advisor link is missing on the GUI dashboard. The report advisor link has been added to the NCM GUI dashboard. 4 EMC Smarts Network Configuration Manager Version Readme

5 Fixed problems Table 1 Fixed problems Issue number Symptom Fix description Version fixed IS-7598 Device mapped to multiple sites has mapping issues via API. The API code has been modified to return the devices from secondary site along with the primary site. Note: Device to site relationship is corrected via API. This does not resolve site based reporting in M&R for which SASP-1278 (site with device that is already mapped to another site is not appearing in M&R front-end) exists. IS-7519/ SR The SAML based authentication communication does not work properly. The code has been modified to enable SAML based authentication. For more information, refer to the technical note section Enabling SAML authentication in NCM on page 7. IS-7432/ SR On logging into the NCM client, users are unable to see data in the jobs/tasks summary in schedule manager. The scheduled job summary panel was not updating the count for each category of the job because the panel view was not updated with the calculated count. The code has been modified to update the panel view with the count information. EMC Smarts Network Configuration Manager Version Readme 5

6 Environment and system requirements Environment and system requirements EMC Smarts Network Configuration Manager Installation Guide provides information on environment and system requirements. Prerequisites for installing the patch on Windows platform 1. Install the following Microsoft Visual Studio libraries on Windows platform: Microsoft Visual C SP1 Redistributable Package MFC Security Update Microsoft Visual C SP1 Redistributable Package (x64) 2. Install the patch software. Both, Network Configuration Manager and Report Advisor must be running and accessible when the patch is being installed. Known problems and limitations This patch release does not include any known issues. 6 EMC Smarts Network Configuration Manager Version Readme

7 Technical notes Technical notes Technical notes for Enabling SAML authentication in NCM Technical notes for on page 7 The release contains the following technical note. You can login to Network Configuration Manager using Security Assertion Markup Language (SAML) authentication after it is enabled. To enable SAML authentication in Network Configuration Manager, follow these steps: Step Action 1 Log into the server as the root user. 2 Navigate to the VOYENCE_HOME/tools/saml-util directory. 3 Type perl enablesaml.pl to run the enable SAML utility and press Enter. 4 After successful execution of the preceding script, the samlsysadmin user is created in NCM under System Administration > User management > System Users. For reference, the sample SamlAssertion.xml file has been provided with this technical note. 5 Modify the sample SamlAssertion.xml file as follows to add the user name that exists in NCM: <saml:nameid SPNameQualifier=" Format="urn:oasis:names:tc:SAML:2.0:nameidformat:transient">samlsysadmin</saml:NameID> 6 Modify the sample SamlAssertion.xml file as follows to add NotBefore, NotOnOrAfter dates, so that NCM allows the user to log in if the date is between a valid range: <saml:conditions NotBefore=" T15:41:54.000Z" NotOnOrAfter= " T15:41:54.000Z"> 7 Encode to base64 format, and then perform urlencode the SamlAssertion.xml content. For reference, the sample SamlAssertion.xml file has been provided with this technical note. 8 Modify the IP address to point to the NCM AS and generate the powerup.jnlp file using the encoded string. Execute the following command from any Linux server or from command prompt if you have curl: curl -k -X POST AS IP address>:8880/voyence/launchclient?samlassertion=encoded-string > powerup.jnlp 9 Copy the powerup.jnlp file to your client machine from where you want to launch NCM, and then launch NCM. 10 NCM is launched successfully without asking a user to enter credentials. EMC Smarts Network Configuration Manager Version Readme 7

8 Documentation errata Following is the sample SamlAssertion.xml file. Documentation errata The release contains no documentation errata. 8 EMC Smarts Network Configuration Manager Version Readme

9 Installing NCM Installing NCM Installation instructions included in this section are for the Linux and Windows Server 2012 R2 operating environments. This patch must be installed on all distributed Network Configuration Manager servers. In the examples in both the Install and Uninstall instructions, [Product Directory] is used; however you must substitute [Product Directory] with your actual installation directory path. For Linux, you can determine your product installation directory by examining /etc/voyence.conf, and look for the text VOYENCE_HOME. For Windows, you can determine your product installation directory by accessing the Registry key at: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Voyence\Control\Configuration\ VOYENCE_HOME. Installation instructions for a cluster environment Use the following steps to install this patch for a cluster environment on an application or device server. On an application server (Linux) Table 2 Steps for installing on an application server Linux 1 Stop the cluster. clusvcadm -d vc_cluster 2 Mount the disk. mount /dev/sdc1 [Product Directory] /dev/sdc1 is an example 3 Source /etc/voyence.conf. /etc/voyence.conf 4 Run the NCM installer. bash NETWORK_CONFIGURATION_MANAGER_9_4_2_7_X X_Linux.bin Follow the prompts to install. Notice: Where XX represents the build number. 5 Stop the vcmaster service. service vcmaster stop 6 Unmount the disk. umount [Product Directory] (Isof [Product Directory] and kill processes if the drive is busy.) 7 Start the cluster. clusvcadm -e vc_cluster EMC Smarts Network Configuration Manager Version Readme 9

10 Installing NCM On a device server (Linux) Table 3 Steps for installing on a device server Linux 1 Stop services Stop: service sysadmin stop service voyence stop 2 Source /etc/voyence.conf../etc/voyence.conf 3 Run the NCM installer. bash NETWORK_CONFIGURATION_MANAGER_9_4_2_7_X X_Linux.bin Follow the prompts to install. Unlock the lockbox: $VOYENCE_HOME/bin/cstdriver -lockbox $VOYENCE_HOME/data/lockb.clb -passphrase <passphrase> Notice: Where XX represents the build number. Installation instructions for a non-clustered environment Use the following steps to install this patch for a non-clustered environment on Linux and Windows. On an application, device, database, or combination server (Linux) Table 4 Steps for installing on an application, device, or combination server Linux 1 Run the NCM Installer for Linux. For Linux: bash NETWORK_CONFIGURATION_MANAGER_9_4_2_7_X X_Linux.bin Follow the prompts to install. Notice: Where XX represents the build number. 10 EMC Smarts Network Configuration Manager Version Readme

11 Installing NCM On an application, device, or combination server (Windows) Table 5 Steps for installing on an application, device or combination server Windows 1 Start the.exe file. Double-click the NETWORK_CONFIGURATION_MANAGER_9_4_2_7_XX_ Windows.exe file. Notice: Where XX represents the build number. 2 The installer will load. Follow the prompts by clicking Next. 3 The installation is complete. Click Done when the install completes. On a remote or stand alone Report Advisor (Linux) Table 6 Steps for installing on a remote or stand alone Report Advisor Linux 1 Run the NCM Installer for Linux. For Linux: bash NETWORK_CONFIGURATION_MANAGER_9_4_2_7_X X_Linux.bin Follow the prompts to install. Unlock the lockbox (Linux):. /etc/voyence.conf $VOYENCE_HOME/cstbin/cstdriver -lockbox $VOYENCE_HOME/data/lockb.clb -passphrase <passphrase> Notice: Where XX represents the build number. On a remote or stand alone Report Advisor (Windows) Table 7 Steps for installing on a remote or stand alone Report Advisor Windows 1 Start the.exe file. Double-click the NETWORK_CONFIGURATION_MANAGER_9_4_2_7_XX_ Windows.exe file. Notice: Where XX represents the build number. 2 The installer will load. Follow the prompts by clicking Next. 3 The installation is complete. Click Done when the install completes. 4 Unlock the lockbox. perl unlocklockbox.pl EMC Smarts Network Configuration Manager Version Readme 11

12 Uninstalling NCM Verifying the installation To verify the Network Configuration Manager installation, follow these steps. Table 8 Steps for verifying the installation 1 Open the Help menu. Click the Help option on the Network Configuration Manager menu bar. 2 Open the About window. Select About. The About Network Configuration Manager window opens. 3 Verify the version of this release. In Linux and Windows 2012 R2 platforms: The version of this release is [Platform]. Uninstalling NCM The following sections provide details regarding uninstalling the patch from different environments. Uninstallation instructions for a cluster environment Linux only on page 12 Uninstallation instructions for a non-clustered environment Linux on page 13 Uninstallation instructions for a non-clustered environment Windows on page 13 Verifying the uninstallation on page 14 Uninstallation instructions for a cluster environment Linux only On an application server Table 9 Steps for uninstalling on an application server 1 Stop the cluster. clusvcadm -d vc_cluster 2 Mount the disk. mount /dev/sdc1 [Product Directory] For example: /dev/sdc1 3 Navigate to the patch directory. cd [Product Directory]/Hotfix/NETWORK_CONFIGURATION_ MANAGER_9_4_2_7/ 4 Run the patch rollback script. perl rollbackhotfix.pl 5 Stop the vcmaster service. service vcmaster stop 12 EMC Smarts Network Configuration Manager Version Readme

13 Uninstalling NCM Table 9 Steps for uninstalling on an application server 6 Navigate from the patch directory. cd / 7 Unmount the disk. umount [Product Directory] (lsof [Product Directory] and kill processes if the drive is busy.) 8 Start the cluster. clusvcadm -e vc_cluster On a device server Table 10 Steps for uninstalling on a device server 1 Navigate to the patch directory. cd [Product Directory]/Hotfix/NETWORK_CONFIGURATION_ MANAGER_9_4_2_7/ 2 Run the patch rollback script. perl rollbackhotfix.pl Uninstallation instructions for a non-clustered environment Linux On an application, device, or combination server Table 11 Steps for uninstalling on an application, device, or combination server Linux 1 Navigate to the patch directory. 2 Run the patch uninstall script. cd [Product Directory]/Hotfix/NETWORK_CONFIGURATION_ MANAGER_9_4_2_7/ perl rollbackhotfix.pl Uninstallation instructions for a non-clustered environment Windows On an application, device, or combination server Table 12 Steps for uninstalling on an application, device, or combination server Windows 1 Navigate to the patch directory. Open a command prompt. Enter: cd [Product Directory]\Hotfix\NETWORK_CONFIGURATION_ MANAGER_9_4_2_7\ 2 Run the patch rollback script. perl rollbackhotfix.pl EMC Smarts Network Configuration Manager Version Readme 13

14 Uninstalling NCM Verifying the uninstallation To verify that Network Configuration Manager is uninstalled, do the following:. Table 13 Steps for verifying the uninstall 1 Open the Help menu. Click the Help option on the Network Configuration Manager menu bar. 2 Open the About window. Select About. The About Network Configuration Manager window opens. 3 Verify the version of the previous release. In Linux and Windows 2012 R2 platforms, the version of the previous release is [Platform] [patch release number if previously installed]. 14 EMC Smarts Network Configuration Manager Version Readme

15 Troubleshooting and getting help Troubleshooting and getting help EMC support, product, and licensing information can be obtained as follows: Product information For documentation, release notes, software updates, or information about EMC products, go to EMC Online Support at: Technical support Go to EMC Online Support and click Service Center. You will see several options for contacting EMC Technical Support. Note that to open a service request, you must have a valid support agreement. Contact your EMC sales representative for details about obtaining a valid support agreement or with questions about your account. Copyright Dell Inc. or its subsidiaries. All rights reserved. Published in the USA. Published March, 2017 Dell believes the information in this publication is accurate as of its publication date. The information is subject to change without notice. The information in this publication is provided as is. Dell makes no representations or warranties of any kind with respect to the information in this publication, and specifically disclaims implied warranties of merchantability or fitness for a particular purpose. Use, copying, and distribution of any Dell software described in this publication requires an applicable software license. Dell, EMC, and other trademarks are trademarks of Dell Inc. or its subsidiaries in the United States and other countries. All other trademarks used herein are the property of their respective owners. For the most up-to-date regulatory document for your product line, go to EMC Online Support ( EMC Smarts Network Configuration Manager Version Readme 15