Quantcast
Channel: A Portal to a Portal
Viewing all 1851 articles
Browse latest View live
↧

java.security.cert.CertPathValidatorException: Certificate chaining error seen with IBM Business Process Manager v8

December 3, 2012, 4:54 am
$
0
0
In this post, I describe how we identified, and resolved, an issue with SSL certificates, seen IBM Business Process Manager (BPM) version 8 ( Standard ).

Having built out an IBM BPM environment, with a topology spanning two WAS cells ( Process Center and Process Server ), we were experiencing a strange issue when attempting to install a process from the Process Center cell to the Process Server cell.

Whilst the Process Server always appeared correctly within the Process Center environment ( Process Server - PS - broadcasts it's presence to Process Center - PS ), we saw: -

Caused by: com.lombardisoftware.core.TeamWorksException: com.ibm.jsse2.util.h: PKIX path building failed: java.security.cert.CertPathBuilderException: PKIXCertPathBuilderImpl could not build a valid CertPath.; internal cause is: 
java.security.cert.CertPathValidatorException: The certificate issued by OU=CustomerName CA, O=CustomerName CAs, O=1359.2.1, C=gb is not trusted; internal cause is: 
java.security.cert.CertPathValidatorException: Certificate chaining error
at com.lombardisoftware.core.TeamWorksException.asTeamWorksException(TeamWorksException.java:136)
at com.lombardisoftware.core.TWHttpClient.login(TWHttpClient.java:144)
at com.lombardisoftware.server.ejb.repositoryservices.DeployToServerSupport.deploySnapshot(DeployToServerSupport.java:223)
... 101 more
Caused by: javax.net.ssl.SSLHandshakeException: com.ibm.jsse2.util.h: PKIX path building failed: java.security.cert.CertPathBuilderException: PKIXCertPathBuilderImpl could not build a valid CertPath.; internal cause is: 
java.security.cert.CertPathValidatorException: The certificate issued by OU=CustomerName CA, O=CustomerName CAs, O=1359.2.1, C=gb is not trusted; internal cause is: 
java.security.cert.CertPathValidatorException: Certificate chaining error
at com.ibm.jsse2.o.a(o.java:22)

Having seen this kind of issue before, I was convinced that the solution was to ensure that the client's CA-generated root and intermediate certificates were present in the WAS cell-level trust store, and proceeded to use WAS' "Retrieve from Port" function to import the certificate chain ( from the load-balanced hostname of the IBM HTTP Servers into which these two certificates had already been installed ).

When this didn't fix the problem, I went one step further and, using openSSL to extract the "device-level" certificate from the IHS key store - keystore.kdb, I imported the certificate, as a plain ASCII file, again into the cell-level trust store.

Having gone around this loop over and over again, I was beginning to doubt my sanity.

Talking with a friend about the problem, he mentioned the key ( pardon the pun  ) phrase CACerts.

Having come across this before in the context of WAS, I asked him what he meant.

He directed me at a file - cacerts - located here : -

/opt/IBM/WebSphere80/AppServer/java/jre/lib/security

which contains the WAS JVM's default trust store.

Using the ikeycmd command that ships with IBM HTTP Server, we explorer this trust store: -

$ /opt/IBM/HTTPServer80/java/jre/bin/ikeycmd -cert -list -db /opt/IBM/WebSphere80/AppServer/java/jre/lib/security/cacerts -pw changeit -type jks

Whilst there were 77 individual labels within the store, all of which are provided by default with WAS, we did NOT have anything that tied back to the client's CA-generated certificates.

Once we imported ONLY the root and intermediate certificates, and restarted the Process Center and Process Server JVMs, our ability to publish processes improved 100% :-)

The moral of the story ?

If the error message about chaining suggests that you don't have the certificate chain within WAS, then you probably don't :-)

One more for the book ....
↧
Search

Using IBM Installation Manager to report on what's installed

December 3, 2012, 6:15 am
$
0
0
In this very brief post, I outline how I use IBM Installation Manager (IIM) to produce a brief listing of the packages and features installed on my server.

I used this for IBM Business Process Manager (BPM) version 8, but it'd be equally good for other IIM-based products, including WAS, Portal, Connections, WODM etc.

Here's the command: -

$ for i in `/opt/IBM/InstallationManager/eclipse/tools/imcl listInstalledPackages`; do echo "Package" $i "contains Feature(s): -"; /opt/IBM/InstallationManager/eclipse/tools/imcl listInstalledFeatures $i; done

and here's a full-on Bash script: -

#!/bin/bash
for i in `/opt/IBM/InstallationManager/eclipse/tools/imcl listInstalledPackages`
do
echo "Package" $i "contains Feature(s): -"
/opt/IBM/InstallationManager/eclipse/tools/imcl listInstalledFeatures $i
done


↧
↧

SQL20201N The install, replace or remove of "DB2INST1.UUIDUDFJAR" failed as the jar name is invalid. SQLSTATE=46002

December 4, 2012, 4:43 am
$
0
0
I kept seeing this: -

SQL20201N  The install, replace or remove of "DB2INST1.UUIDUDFJAR" failed as 
the jar name is invalid.  SQLSTATE=46002

when running this: -

$ db2 "call sqlj.install_jar('file:/home/db2inst1/UUIDUDF.jar', 'UUIDUDFJAR')"

when attempting to register a new Java user-defined-function in DB2 UDB 9.7.0.6.

Having checked the path, permissions etc. for my Java Jar file - /home/db2inst1/UUIDUDF.jar - I eventually Google'd the error :-)

I found this: -


which said, in part: -

SQL20201

The example for SQL20201 uses the same INSERT stored procedure used in the SQL4306 example above to illustrate a SQL20201 problem. SQL20201 can occur:

• When you attempt to drop and recreate the stored procedure, but did not remove the JAR file before calling sqlj.install_jar again.
• When you attempt to remove the JAR file with an invalid JAR ID.

Listing 30. SQL20201 example 1: Error occurs when installing the JAR file on Windows
                
D:\>db2 drop procedure INSERT
DB20000I  The SQL command completed successfully.

D:\>db2 call sqlj.install_jar("file:///D:\INSERT.jar", 'INSERTJAR')
SQL20201N  The install, replace or remove of "CWYLAW  .INSERTJAR" failed as
the jar name is invalid.  SQLSTATE=46002

For the first situation, you will have to call sqlj.remove_jar first before you call sqlj.install_jar to install the JAR file again. Or you can simply call sqlj.replace_jar if you want to replace the JAR file with updated class files.

I did as suggested: -

$ db2 "call sqlj.remove_jar('UUIDUDF.jar')"

and, voila, was then able to install the JAR.

Nice :-)

Thanks also to this developerWorks post - Generating universally unique identifiers (UUID) - which advised how to create the UDF in the first instance :-)
↧

IBM Business Process Manager Standard v8.0.0 - CWLDB9005W No topology is found in the cell

December 5, 2012, 1:37 pm
$
0
0
A brief post outlining a problem that I saw with IBM BPM earlier today.

It may sound obvious, but if you see this error: -

CWLDB9005W No topology is found in the cell

when attempting to import a Deployment Environment ( for Process Center or Process Server ) into your WAS cell, check that you don't already have a Deployment Environment present :-)

I was rebuilding an existing BPM Standard v8 environment, and had cleared down the servers, clusters, nodes, applications etc.

However, I kept seeing this error when I attempted to import the Deployment Environment back in ( having re-created and federated in my nodes ).

Can you guess what it was ?

Whilst I'd removed servers, clusters, nodes and applications, I had NOT removed the Deployment Environment.

When I checked, via the Integrated Solutions Console, I still had the old DE there.

Once I removed it, all was well :-)

For the record, here's some more DE-related information: -




↧

com.lombardisoftware.client.security.AuthorizationDeniedException: You are not authorized to make changes to items in this context

December 7, 2012, 12:19 pm
$
0
0
This one drove me to distraction for most of this week.

Whilst trying to populate my BPM databases using the bootstrap process: -

$ /opt/IBM/WebSphere80/AppServer/BPM/Lombardi/tools/bootstrapProcessServerData.sh -clusterName  E1PCSR01.AppTarget

but it kept failing with: -

...
TWImportAndActivate:
    [mkdir] Created dir: /opt/IBM/WebSphere80/AppServer/profiles/E1PCDMProfile/temp/saved-search-admin.twx
    [unzip] Expanding: /opt/IBM/WebSphere80/AppServer/BPM/Lombardi/imports/saved-search-admin.twx into /opt/IBM/WebSphere80/AppServer/profiles/E1PCDMProfile/temp/saved-search-admin.twx
   [delete] Deleting directory /opt/IBM/WebSphere80/AppServer/profiles/E1PCDMProfile/temp/saved-search-admin.twx

TWActivateWrapper:

importRBGs:
     [echo] bootstrapData: Importing Resource Bundle Groups...

BUILD FAILED
/opt/IBM/WebSphere80/AppServer/BPM/base/profile/actions/bootstrapData.ant:46: The following error occurred while executing this line:
/opt/IBM/WebSphere80/AppServer/BPM/base/profile/actions/bootstrapData.ant:53: The following error occurred while executing this line:
/opt/IBM/WebSphere80/AppServer/BPM/base/profile/actions/tw_init_bootstrap.ant:347: Java returned: 1

Total time: 1 minute 50 seconds

Bootstrap failed

and: -

...
INFO: Client code attempting to load security configuration
06-Dec-2012 13:40:49 com.ibm.ffdc.util.provider.FfdcOnDirProvider logIncident
INFO: FFDC1003I: FFDC Incident emitted on /opt/IBM/WebSphere80/AppServer/profiles/E1PCDMProfile/logs/ffdc/ffdc.6400587257559169791.txt com.ibm.ws.orbimpl.transport.WSTransport.getConnection 448
06-Dec-2012 13:40:49 com.ibm.ffdc.util.provider.FfdcOnDirProvider logIncident
INFO: FFDC1003I: FFDC Incident emitted on /opt/IBM/WebSphere80/AppServer/profiles/E1PCDMProfile/logs/ffdc/ffdc.8213873865726580924.txt com.ibm.ws.naming.util.WsnInitCtxFactory.mergeWsnNSProperties 1551
06-Dec-2012 13:40:49 com.ibm.ffdc.util.provider.FfdcOnDirProvider logIncident
INFO: FFDC1003I: FFDC Incident emitted on /opt/IBM/WebSphere80/AppServer/profiles/E1PCDMProfile/logs/ffdc/ffdc.296063757638535691.txt com.ibm.ws.naming.util.WsnInitCtxFactory.getRootJndiContext 965
06-Dec-2012 13:40:49 com.ibm.ffdc.util.provider.FfdcOnDirProvider logIncident
INFO: FFDC1003I: FFDC Incident emitted on /opt/IBM/WebSphere80/AppServer/profiles/E1PCDMProfile/logs/ffdc/ffdc.2968224156869316365.txt com.ibm.ws.naming.util.WsnInitCtxFactory.getRootJndiContext 886
06-Dec-2012 13:40:49 com.lombardisoftware.utility.db.QueryUtil findDatabaseType
WARNING: Could not find database from JNDI lookup in server. Defaulting to configuration file
06-Dec-2012 13:40:49 com.lombardisoftware.core.cache.LocalCache initializeSettingsFile
INFO: CWLLG2155I:  Cache settings read have been from file file:/opt/IBM/WebSphere80/AppServer/BPM/Lombardi/process-server/twinit/lib/basic_resources.jar!/LombardiTeamWorksCache.xml.
Exception in thread "P=248348:O=0:CT" com.lombardisoftware.client.security.AuthorizationDeniedException: You are not authorized to make changes to items in this context
at com.lombardisoftware.client.security.AuthorizationUtils.deny(AuthorizationUtils.java:120)
at com.lombardisoftware.client.security.PersistenceAuthorizationImpl.assertWrite(PersistenceAuthorizationImpl.java:25)
at com.lombardisoftware.server.ejb.persistence.PSDefaultHandler.save(PSDefaultHandler.java:80)
at com.lombardisoftware.server.ejb.persistence.PersistenceServicesCore.saveInternal(PersistenceServicesCore.java:306)
...

As per usual, I spent some time looking for the answer in a variety of places, including Google.

Eventually, I found this developerWorks forum post: -


which suggested that the problem really was one of authorization.

I checked my database: -

$ db2 connect to BPMDB
$ db2 "select propkey,propvalue from lsw_system where propvalue like '53c5c0a3-0d2b-4822-b94c-5722a59d5227'"

PROPKEYPROPVALUE
InstallationGUID53c5c0a3-0d2b-4822-b94c-5722a59d5227                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           

  1 record(s) selected.

Following Andrew Paier's response to the forum post, I then checked the LSW_ACL_ENTRY table: -

$ db2 "select * from DB2INST1.LSW_ACL_ENTRY"

ACL_ENTRY_ID   USER_ID        GROUP_ID       PO_TYPE    PO_ID                                MASK                 
-------------- -------------- -------------- ---------- ------------------------------------ ---------------------
            1.              -             3.      5000. d106db6a-393e-49b2-8ec9-3fd149438343                  127.
            2.              -             4.      5000. d106db6a-393e-49b2-8ec9-3fd149438343                   63.
            3.              -             3.      2066. 1b351583-e5cb-43b7-baee-340a63130ea7                   63.
            4.              -             4.      2066. 1b351583-e5cb-43b7-baee-340a63130ea7                   63.
            5.              -             3.      2066. bdf91468-0d01-4ae2-bb53-054b3b591f94                  127.
            6.              -             4.      2066. bdf91468-0d01-4ae2-bb53-054b3b591f94                  127.
            7.              -             3.      2066. dbecd816-afed-47b0-ba92-c13256fcb566                  127.
            8.              -             3.      2066. b691179d-e7a4-4a27-b89b-f2263d0280e7                   63.
            9.              -             4.      2066. b691179d-e7a4-4a27-b89b-f2263d0280e7                   63.
           10.              -             3.      2066. 4b3882d9-e886-4f08-9d0c-078ebda719b9                   63.
           11.              -             4.      2066. 4b3882d9-e886-4f08-9d0c-078ebda719b9                   63.
         1002.             9.              -      2066. 23d3ecec-6fdb-4033-9c57-e931aa13761f                  127.
         1052.             9.              -      2066. c8cc5ba4-0c95-41bd-8aac-8136bc86ae85                  127.
         1102.             9.              -      2066. 9ab0d0c6-d92c-4355-9ed5-d8a05acdc4b0                  127.

  15 record(s) selected.

As Andrew rightly said, I did not have the InstallationGUID propvalue - 53c5c0a3-0d2b-4822-b94c-5722a59d5227 - in the table.

I inserted the value: -

$ db2 "insert into db2inst1.lsw_acl_entry (acl_entry_id, po_id, mask, po_type, group_id) values (1404, '53c5c0a3-0d2b-4822-b94c-5722a59d5227', 127, 5000, 3)"

and validated the changed: -

$ db2 "select * from DB2INST1.LSW_ACL_ENTRY"

ACL_ENTRY_ID   USER_ID        GROUP_ID       PO_TYPE    PO_ID                                MASK                 
-------------- -------------- -------------- ---------- ------------------------------------ ---------------------
            1.              -             3.      5000. d106db6a-393e-49b2-8ec9-3fd149438343                  127.
            2.              -             4.      5000. d106db6a-393e-49b2-8ec9-3fd149438343                   63.
            3.              -             3.      2066. 1b351583-e5cb-43b7-baee-340a63130ea7                   63.
            4.              -             4.      2066. 1b351583-e5cb-43b7-baee-340a63130ea7                   63.
            5.              -             3.      2066. bdf91468-0d01-4ae2-bb53-054b3b591f94                  127.
            6.              -             4.      2066. bdf91468-0d01-4ae2-bb53-054b3b591f94                  127.
            7.              -             3.      2066. dbecd816-afed-47b0-ba92-c13256fcb566                  127.
            8.              -             3.      2066. b691179d-e7a4-4a27-b89b-f2263d0280e7                   63.
            9.              -             4.      2066. b691179d-e7a4-4a27-b89b-f2263d0280e7                   63.
           10.              -             3.      2066. 4b3882d9-e886-4f08-9d0c-078ebda719b9                   63.
           11.              -             4.      2066. 4b3882d9-e886-4f08-9d0c-078ebda719b9                   63.
         1002.             9.              -      2066. 23d3ecec-6fdb-4033-9c57-e931aa13761f                  127.
         1052.             9.              -      2066. c8cc5ba4-0c95-41bd-8aac-8136bc86ae85                  127.
         1404.              -             3.      5000. 53c5c0a3-0d2b-4822-b94c-5722a59d5227                  127.
         1102.             9.              -      2066. 9ab0d0c6-d92c-4355-9ed5-d8a05acdc4b0                  127.

  15 record(s) selected.


And then re-ran the bootstrap process: -

$ /opt/IBM/WebSphere80/AppServer/BPM/Lombardi/tools/bootstrapProcessServerData.sh -clusterName  E1PCSR01.AppTarget

and, this time around, it worked perfectly: -

...
amples:
   [delete] Deleting: /opt/IBM/WebSphere80/AppServer/profiles/E1PCDMProfile/config/cells/E1PCCELL/nodes/E1PCNODE1/servers/E1PCSR011.AppTarget/process-center/config/100Bootstrap.xml
   [delete] Deleting: /opt/IBM/WebSphere80/AppServer/profiles/E1PCDMProfile/config/cells/E1PCCELL/nodes/E1PCNODE1/servers/E1PCSR011.AppTarget/process-center/TeamWorksConfiguration.running.xml

BUILD SUCCESSFUL
Total time: 2 minutes 24 seconds
...

As they say, easy when you know how.

Now can I explain what went wrong ? Er, no ......

↧
↧

IBM BPM - A Few Good Links

December 13, 2012, 5:49 am
$
0
0
↧

IBM Business Monitor v8 - Linking Up

December 13, 2012, 6:10 am
↧

IBM Notes 9 on the Mac - it's lovely ….

December 13, 2012, 10:51 pm
$
0
0
Following many others in my network, I've taken the plunge and updated my Mac to run IBM Notes 9, replacing IBM Lotus Notes 8.5.4 CD5.
  • Activity streams: allow you to view and take action quickly on content and events
  • Embedded Experiences: allow you to access business critical actions from other applications without leaving your email. This brings collaboration in-context and results in tighter integration across iNotes, Connections, Notes, app dev (XPages), and 3rd-party products and services
  • Contemporary user interface, simpler navigation, easier to locate information both in Notes and iNotes
  • IBM Notes Browser Plug-in: allows rapid delivery of IBM Notes Social Edition applications to the web
  • Incorporation of a social application container, based on the OpenSocial standard, which provides for development of a reusable set of "gadgets" from both IBM and third parties
  • Inclusion of the XPages Extension Library which greatly improves developer productivity when building collaborative workflow driven applications for web, mobile web and Notes
  • Domino Designer provides a new home page, editor enhancements and a server-side JavaScript debugger for use with XPages
  • Enhancements to Domino REST services and new Calendaring and Scheduling APIs
  • Domino integration: SAML, OAuth
  • Notes Traveler: Windows Phone 7.5/8; BlackBerry 10 BES support; IBM i Server
It's early days, but it's looking very nice.





Here's the IBM Notes and Domino 9.0 Social Edition Public Beta Forum from where you can access the Public Beta site here: -

↧
Search

More on wsadmin, LDAP servers ( Bluepages ) and WebSphere Application Server

December 17, 2012, 3:25 am
$
0
0
This is an update to my previous post, and follows an interaction with an IBM colleague, who wasn't able to get this working, at least initially.

When I looked back at my steps, I'm not sure how I got it working - perhaps I made some changes that didn't make it into the original blog post :-(

Ah well, c'est la vie.

Anyway, here's an up-to-date set of instructions: -

Change to the WAS profile's binary directory

$ cd /opt/IBM/WebSphere80/AppServer/profiles/E1PCDMProfile/bin/

Start the wsadmin client
$ ./wsadmin.sh -lang jython -user e1wasadmin -password passw0rd

WASX7209I: Connected to process "dmgr" on node E1PCDMNODENode using SOAP connector;  The type of process is: DeploymentManager
WASX7031I: For help, enter: "print Help.help()"

List the existing repositories - to start with, we only have one - fileRegistry.xml

wsadmin>AdminTask.listIdMgrRepositories()

'{InternalFileRepository={repositoryType=File, host=LocalHost}}'

Start the process of configuring the WIM user registry

wsadmin>AdminTask.configureAdminWIMUserRegistry('[-realmName defaultWIMFileBasedRealm -verifyRegistry false ]')

''

Create a new LDAP repository

wsadmin>AdminTask.createIdMgrLDAPRepository('[-default true -id LDAP1 -adapterClassName com.ibm.ws.wim.adapter.ldap.LdapAdapter -ldapServerType IDS -sslConfiguration -certificateMapMode exactdn -supportChangeLog none -certificateFilter -loginProperties uid]') 

'CWWIM5046W Each configured repository must contain at least one base entry. Add a base entry before saving the configuration. For LDAP repository, add the LDAP server before adding the base entry.'

Now we have TWO repositories
wsadmin>AdminTask.listIdMgrRepositories()

'{InternalFileRepository={repositoryType=File, host=LocalHost}, LDAP1={repositoryType=LDAP, specificRepositoryType=IDS}}'

Add an LDAP server to the new repository

wsadmin>AdminTask.addIdMgrLDAPServer('[-id LDAP1 -host bluepages.ibm.com -port 389 -bindDN uid=7712663228,c=gb,ou=bluepages,o=ibm.com -bindPassword passw0rd! -referal ignore -sslEnabled false -ldapServerType IDS -sslConfiguration -certificateMapMode exactdn -certificateFilter]')

'CWWIM5027W The configuration is not complete. Saving an incomplete configuration can cause startup problems.'

Set the login properties

wsadmin>AdminTask.updateIdMgrLDAPRepository('[-id LDAP1 -adapterClassName com.ibm.ws.wim.adapter.ldap.LdapAdapter -ldapServerType IDS -sslConfiguration -certificateMapMode exactdn -certificateFilter -supportChangeLog none -loginProperties uid]')

'CWWIM5027W The configuration is not complete. Saving an incomplete configuration can cause startup problems.'

Set the base entry

wsadmin>AdminTask.addIdMgrRepositoryBaseEntry('[-id LDAP1 -name o=ibm.com -nameInRepository o=ibm.com]')

'CWWIM5028I  The configuration is saved in a temporary workspace. You must use the "$AdminConfig save" command to save it in the master repository.'

wsadmin>AdminTask.addIdMgrRealmBaseEntry('[-name defaultWIMFileBasedRealm -baseEntry o=ibm.com]') 

'CWWIM5028I  The configuration is saved in a temporary workspace. You must use the "$AdminConfig save" command to save it in the master repository.'

Validate the admin user - which remains in the fileRegistry repository, rather than in LDAP

wsadmin>AdminTask.validateAdminName('[-registryType WIMUserRegistry -adminUser e1wasadmin ]')

'true'

Enable global security - this allows us to secure the admin console by default

wsadmin>AdminTask.setAdminActiveSecuritySettings('[-activeUserRegistry WIMUserRegistry -enableGlobalSecurity true]')

''

Set the user search base

wsadmin>AdminTask.updateIdMgrLDAPEntityType('[-id LDAP1 -name PersonAccount -objectClasses ibmPerson;inetorgperson -searchBases c=us,ou=bluepages,o=ibm.com -searchFilter ]')

'CWWIM5028I  The configuration is saved in a temporary workspace. You must use the "$AdminConfig save" command to save it in the master repository.'

Set the group search base

wsadmin>AdminTask.updateIdMgrLDAPEntityType('[-id LDAP1 -name Group -objectClasses groupOfNames -searchBases ou=memberlist,ou=ibmgroups,o=ibm.com -searchFilter ]')

'CWWIM5028I  The configuration is saved in a temporary workspace. You must use the "$AdminConfig save" command to save it in the master repository.'
Save the configuration

wsadmin>AdminConfig.save()

''
Sync the nodes

wsadmin>AdminNodeManagement.syncActiveNodes()

---------------------------------------------------------------
 AdminNodeManagement:        Synchronize the active nodes
 Usage: AdminNodeManagement.syncActiveNodes()
 Return: If the command is successfully invoked, a value of 1 is returned. 
---------------------------------------------------------------
 
1

List the repositories ( again )

wsadmin>AdminTask.listIdMgrRepositories()

'{InternalFileRepository={repositoryType=File, host=LocalHost}, LDAP1={repositoryType=LDAP, specificRepositoryType=IDS, host=bluepages.ibm.com}}'

List the base entry for the newly added LDAP repository

wsadmin>AdminTask.listIdMgrRepositoryBaseEntries('[-id LDAP1]')

'{o=ibm.com=o=ibm.com}'

We're finished

wsadmin> quit

That's it, that's the lot.

This time, after restarting the WAS server ( in my case, it's a Deployment Manager ), I can search for, and find, "real" users and groups from LDAP.

Sweet .....

PS For the record, this time around, I'm using WebSphere Application Server 8.0.0.3
↧
↧

Kolban's Book on IBM BPM

December 20, 2012, 12:02 am
$
0
0
I found references to this book a few months ago, when I was looking for some help getting the IBM Unified Task List (UTL) portlet running inside WebSphere Portal v7 against IBM BPM v8.

http://www.neilkolban.com/IBM/Book%20Cover%20-%2012-2012%20-%20small.png

From Neil Kolban himself: -

I am an IBM employee who focuses on the IBM Business Process Manager and related products. Over time, I have built and collected information related to the use of this product which I have found to be of value to users, potential users and fellow IBMers. This page presents access to my personal notes, links and other related items that I feel may be of value.

Although I am an IBM employee, please note that any words, concepts or content may not necessarily represent the views of IBM. In addition, there are definetly inaccuracies in my content and thoughts. As such please use this information for what it is, an attempt to share information on IBM's BPM products from my mind to yours.

Enjoy!!

As I learn an IBM product, I take copious notes and jot down thoughts. I have bundled these together into book format and now make it available as a PDF document available for download. The book is released once a month (normally on the 1st day of the month) so it is a good idea to bookmark this page and check back regularly.


The October 2012 edition is now on the iPad, and I'm making my way through it's 1,300+ pages.

So imagine my pleasure to find that Neil has released the December 2012 version here: -


and that we're now up to 1453 pages :-)


↧

Random things to remember about my first IBM Business Process Manager Advanced v8 installation ...

December 28, 2012, 5:27 am
$
0
0



Create the databases

$ su - db2inst1
$ vi /home/db2inst1/create_BPMv8_databases.txt 

create database BPMDB automatic storage yes  using codeset UTF-8 territory US pagesize 32768;
connect to BPMDB;
grant dbadm on database to user DB2INST1;
UPDATE DB CFG FOR BPMDB USING LOGFILSIZ 4096 DEFERRED;
UPDATE DB CFG FOR BPMDB USING LOGSECOND 64 DEFERRED;
db2 "CREATE BUFFERPOOL bpmdbPool PAGESIZE 32 K"
db2 "CREATE BUFFERPOOL bpmdbPool1 PAGESIZE 32 K"
db2 "CREATE BUFFERPOOL bpmdbPool2 PAGESIZE 32 K"
db2 "CREATE REGULAR TABLESPACE BPMDBTS32 PAGESIZE 32 K MANAGED BY SYSTEM USING (' BPMDBTS32') BUFFERPOOL bpmdbPool1"
db2 "CREATE SYSTEM TEMPORARY TABLESPACE BPMDBTS32SYS PAGESIZE 32 K MANAGED BY SYSTEM USING ('BPMDBTS32SYS') BUFFERPOOL bpmdbPool2"
connect reset;

create database PDWDB automatic storage yes  using codeset UTF-8 territory US
pagesize 32768;
connect to PDWDB;
grant dbadm on database to user DB2INST1;
UPDATE DB CFG FOR PDWDB USING LOGFILSIZ 4096 DEFERRED;
UPDATE DB CFG FOR PDWDB USING LOGSECOND 64 DEFERRED;
db2 "CREATE BUFFERPOOL pdwdbPool PAGESIZE 32 K"
db2 "CREATE BUFFERPOOL pdwdbPool1 PAGESIZE 32 K"
db2 "CREATE BUFFERPOOL pdwdbPool2 PAGESIZE 32 K"
db2 "CREATE REGULAR TABLESPACE pdwdbTS32 PAGESIZE 32 K MANAGED BY SYSTEM USING ('pdwdbTS32') BUFFERPOOL pdwdbPool1"
db2 "CREATE SYSTEM TEMPORARY TABLESPACE pdwdbTS32SYS PAGESIZE 32 K MANAGED BY SYSTEM USING ('pdwdbTS32SYS') BUFFERPOOL pdwdbPool2"connect reset;

create database CMNDB automatic storage yes  using codeset UTF-8 territory US
pagesize 32768;
connect to CMNDB;
grant dbadm on database to user DB2INST1;
UPDATE DB CFG FOR CMNDB USING LOGFILSIZ 4096 DEFERRED;
UPDATE DB CFG FOR CMNDB USING LOGSECOND 64 DEFERRED;
db2 "CREATE BUFFERPOOL cmndbPool PAGESIZE 32 K"
db2 "CREATE BUFFERPOOL cmndbPool1 PAGESIZE 32 K"
db2 "CREATE BUFFERPOOL cmndbPool2 PAGESIZE 32 K"
db2 "CREATE REGULAR TABLESPACE CMNDBTS32 PAGESIZE 32 K MANAGED BY SYSTEM USING ('CMNDBTS32') BUFFERPOOL cmndbPool1"
db2 "CREATE SYSTEM TEMPORARY TABLESPACE CMNBTS32SYS PAGESIZE 32 K MANAGED BY SYSTEM USING ('CMNBTS32SYS') BUFFERPOOL cmndbPool2"
connect reset;

$ db2 -tvf home/db2inst1/create_BPMv8_databases.txt 

create database BPMDB automatic storage yes  using codeset UTF-8 territory US pagesize 32768
DB20000I  The CREATE DATABASE command completed successfully.

connect to BPMDB

   Database Connection Information

 Database server        = DB2/LINUXX8664 9.7.5
 SQL authorization ID   = DB2INST1
 Local database alias   = BPMDB


grant dbadm on database to user DB2INST1
DB21034E  The command was processed as an SQL statement because it was not a 
valid Command Line Processor command.  During SQL processing it returned:
SQL0554N  An authorization ID cannot grant a privilege or authority to itself. 
SQLSTATE=42502

UPDATE DB CFG FOR BPMDB USING LOGFILSIZ 4096 DEFERRED
DB20000I  The UPDATE DATABASE CONFIGURATION command completed successfully.

UPDATE DB CFG FOR BPMDB USING LOGSECOND 64 DEFERRED
DB20000I  The UPDATE DATABASE CONFIGURATION command completed successfully.

connect reset
DB20000I  The SQL command completed successfully.

create database PDWDB automatic storage yes  using codeset UTF-8 territory US pagesize 32768
DB20000I  The CREATE DATABASE command completed successfully.

connect to PDWDB

   Database Connection Information

 Database server        = DB2/LINUXX8664 9.7.5
 SQL authorization ID   = DB2INST1
 Local database alias   = PDWDB


grant dbadm on database to user DB2INST1
DB21034E  The command was processed as an SQL statement because it was not a 
valid Command Line Processor command.  During SQL processing it returned:
SQL0554N  An authorization ID cannot grant a privilege or authority to itself. 
SQLSTATE=42502

UPDATE DB CFG FOR PDWDB USING LOGFILSIZ 4096 DEFERRED
DB20000I  The UPDATE DATABASE CONFIGURATION command completed successfully.

UPDATE DB CFG FOR PDWDB USING LOGSECOND 64 DEFERRED
DB20000I  The UPDATE DATABASE CONFIGURATION command completed successfully.

connect reset
DB20000I  The SQL command completed successfully.

create database CMNDB automatic storage yes  using codeset UTF-8 territory US pagesize 32768
DB20000I  The CREATE DATABASE command completed successfully.

connect to CMNDB

   Database Connection Information

 Database server        = DB2/LINUXX8664 9.7.5
 SQL authorization ID   = DB2INST1
 Local database alias   = CMNDB


grant dbadm on database to user DB2INST1
DB21034E  The command was processed as an SQL statement because it was not a 
valid Command Line Processor command.  During SQL processing it returned:
SQL0554N  An authorization ID cannot grant a privilege or authority to itself. 
SQLSTATE=42502

UPDATE DB CFG FOR CMNDB USING LOGFILSIZ 4096 DEFERRED
DB20000I  The UPDATE DATABASE CONFIGURATION command completed successfully.

UPDATE DB CFG FOR CMNDB USING LOGSECOND 64 DEFERRED
DB20000I  The UPDATE DATABASE CONFIGURATION command completed successfully.

connect reset
DB20000I  The SQL command completed successfully.

Oops, didn't previously install IBM Installation Manager


$ cat /tmp/IBM_LaunchPad_BPM_1350053327740/bpm.offering.syserr 

/tmp/launchpad/content/scripts/runCommand.sh: line 9: /opt/IBM/InstallationManager/eclipse/tools/imcl: No such file or directory






Download the Unified Task List (UTL) Portlet









BPM URLs

Process Center


Process Portal


ISC


BPC Explorer


Process Admin




RESTful URLs





Misc URLs





↧

Mac OS X 10 - Two phews for the price of one ...

December 28, 2012, 6:40 am
$
0
0
So I've finally ( after six long months ) decided to take the plunge and update my Apple MacBook Pro ( with Retsina ) to OS X 10.8 Mountain Lion.

Now I downloaded Mountain Lion the day it was released, and blogged about it shortly afterwards.

However, for various reasons, mostly to do with too much work and too little "spare" time, I've only just got around to it.

I was partly motivated by having some time, and also by my company choosing to stop supporting Lion ( internally) from December 31 onwards.

So, having backed up my Mac to three different USB drives ( using Time Machine, SuperDuper and good ole fashioned tar/zip/cp ), I re-ran through my earlier blog post to create a bootable USB drive containing the Mountain Lion code, and got stuck into it.

So, the first hurdle that I came across was trying and failing to boot the Mac from the USB drive.

No matter what combination of keys I used, I kept ending up at the login screen, rather than booting from the drive itself.

Eventually, using [Alt][CMD], I got to a strange screen that I'd not seen before: -



After a quick Google search, I realised that I'd hit the firmware password prompt, for the first time ever.

Casting my mind back, I realised that I'd set a firmware password when I first acquired the new MacBook in June 2012.

So, having entered the right firmware password, things started to proceed as per usual.

I booted from the USB drive, started Disk Utility and attempted to delete the existing OS X Lion partition. This initially didn't work, because I'd not unlocked the existing partition ( which is encrypted, and thus locked, using FileVault 2 ). I clicked the icon to unlock the partition, entered my usual log on password, and deleted the partition .... or so I thought.

It turned out that I'd deleted one partition, but the second, also encrypted, partition was then hidden from me.

This left me in somewhat of a conundrum - I couldn't delete the "hidden" encrypted partition, I couldn't repartition the drive, I couldn't install Mountain Lion, I couldn't boot back into Lion.

So, before reaching for one of the backup drives, I instead reached for Google - again.

The search string that I used was: -

"The partition contains a locked disk and can not be resized until it is unlocked"

which appeared on the partition screen within Disk Utility.

This led me to this thread: -

External HDD Unlock

which, amongst other things, included a response from one Eddie Yam, who reported how he used the diskutil command in Terminal to list the Logical Volume Group and then delete it, leaving the drive nice n' clean.

I didn't capture screen shots from this, so here's Eddie's rather nice screen shots: -





In essence, he ( and ) used: -

$ diskutil corestorage list

and: -

$ diskutil corestorage delete <VOLUME GROUP ID>

Once done, I was able to quit the Terminal application, and launch the Reinstall OS X application, and the installation proceeds as I type.
↧

NSURLErrorDomain error using MacTubes - SOLVED

December 31, 2012, 2:01 am
$
0
0
I saw this exception: -

NSURLErrorDomain error -1102

using MacTubes v3.1.5 earlier today whilst downloading from YouTube.

I'd seen the same exception previously, before I upgraded my Mac from Lion ( OS X 10.7 ) to Mountain Lion ( OS X 10.8 ), so I assumed that the problem was with MacTubes rather than with OS X.

A quick Google search took me to this forum post: -


which recommended an update to MacTubes.

Now the original poster was using MacTubes 3.1.4, and fixed the problem by going to 3.1.5.

I thought I'd apply the same logic.

Here: -


at the MacTubes website, the developer reports that 3.1.6: -

• Fixed problem that failed downloading video file.(v3.1.6)

So I took the plunge, downloaded the new version, replacing that which I had in my Applications folder, started it up and … voila, it all works.

Nice one, MacTubes :-)
↧
↧

Packt Publishing - Seasonal eBook Offer - Buy 2 or more $5 each

December 31, 2012, 6:24 am
$
0
0

This from those nice people from Packt Publishing: -

To celebrate the festive season, Packt is pleased to announce a special eBook offer – stock your reader this Christmas.

All [yes, ALL] Packt eBooks are on offer now for $5 | €4 | £3 | AUS$5 each when you buy 2 or more. Just add the eBooks into your cart and when you have chosen 2 or more eBooks, you'll get each for $5 per copy when you checkout. This offer is available until Thursday 3rd Jan 2013.

Packt eBooks are flexible and easy to use on any reader: -

  • Download any version, any time, from your account on www.packtpub.com 
  •  Available PDF, ePub [Android, Kobo], Mobi [Kindle] - You can email it right onto your Kindle from your account 
  •  No DRM, meaning you can copy to any device, as often as you like  
  •  You can print, and copy and paste from the eBook directly.
Go, get shopping now



↧

More on 404 errors accessing WCM content through the POC Servlet (/wps/mypoc/…)

January 2, 2013, 8:00 am
$
0
0
A year or so back, I'd posted an article: -


making reference to a solution that one of my correspondents, Cody Burleson, had come up with to a problem that he'd seen with IBM Web Content Manager.

Well, more recently, I had an email from another US-based correspondent who was experiencing the same problem.

Sadly, Cody's original post has disappeared from his blog - I guess he's been doing some house-keeping.

Happily, however, my new correspondent ( Tim ) wrote back to me to say that he'd fixed the problem.

Here's his solution: -

<snip>
guess our issue was more related to the web server. After finding this in the log while tracing...

[Wed Dec 19 14:58:23 2012] [info] [client 10.129.38.3] found %2f (encoded '/') in URI (decoded='<URI removed to protect privacy>'), returning 404

...it was determined that we needed to set "AllowEncodedSlashes On" in the httpd.conf file. 

I've never needed that before but the way the "poc" servlet was being called (with the %2f) it is required in this case.
</snip>

This is a new one on me as I've never seen a requirement to use this parameter - AllowEncodedSlashes - but it's a useful thing to remember, in case I ever need it.

Hope this helps someone else out there ….

↧
Search

Want to know how and why Linux names its Ethernet adapters ?

January 7, 2013, 2:04 am
$
0
0
I picked this up from a Raspberry Pi forum, whilst trying to get a USB wireless adapter to work with my Pi.

…
I cannot tell for certain why your device gets renamed from wlan0 to wlan1 but it might be worth looking into "/etc/udev/rules.d/70-persistent-net.rules". This file is created by udev to store the names of network interfaces and keep them consistent throughout the system. Udev should automatically put a comment before each rule, saying which driver is responsible for the interface.
…

I'd not looked into this before, but had wondered why, on one of my Red Hat Enterprise Linux VMs, the Ethernet card always comes up as eth4 rather than eth0.

When I checked the file: -

$ cat /etc/udev/rules.d/70-persistent-net.rules

# This file was automatically generated by the /lib/udev/write_net_rules
# program, run by the persistent-net-generator.rules rules file.
#
# You can modify it, as long as you keep each rule on a single
# line, and change only the value of the NAME= key.

# PCI device 0x8086:0x100e (e1000)
SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="08:00:27:87:e2:dc", ATTR{type}=="1", KERNEL=="eth*", NAME="eth0"

# PCI device 0x8086:0x100f (e1000)
SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="00:0c:29:07:2f:73", ATTR{type}=="1", KERNEL=="eth*", NAME="eth1"

# PCI device 0x8086:0x100f (e1000)
SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="00:0c:29:d1:94:31", ATTR{type}=="1", KERNEL=="eth*", NAME="eth2"

# PCI device 0x8086:0x100f (e1000)
SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="00:0c:29:60:44:f2", ATTR{type}=="1", KERNEL=="eth*", NAME="eth3"

# PCI device 0x8086:0x100f (e1000)
SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="00:0c:29:9c:4a:af", ATTR{type}=="1", KERNEL=="eth*", NAME="eth4"

I'm guessing that the MAC ( Media Access Control ) address has changed since I first spun up the VM, perhaps meaning that Linux has kindly created a new interface - eth4 - for the "new" MAC address.

I imagine that, if I wanted to change it back to eth0, I could simply "hack" this file, perhaps removing the first four entries, and renaming eth4 to eth0 on the one remaining line.

Still, it's good to know why it happens ….
↧

Using IBM Installation Manager to report on what's available to install

January 7, 2013, 2:59 am
$
0
0
Following on from an earlier post: -


here's another potentially useful IBM Installation Manager (IIM) command.

This allows one to query an installation repository ( either created using Packaging Utility or by the expansion of a set of images downloaded from Passport Advantage etc. ) and report on the versions of software available.

Here's an example for IBM Business Process Manager 8.0.1: -

$ /opt/IBM/InstallationManager/eclipse/tools/imcl -silent -nosplash listAvailablePackages -repositories /mnt/hgfs/DaveHay/BPM/install/repository/repos_64bit/

com.ibm.bpm.ADV.V80_8.0.1000.20121102_2136
com.ibm.websphere.ND.v80_8.0.3.20120320_0536
com.ibm.ws.DB2EXP97.linuxia64_9.7.3.20120504_0255

and here's an example for the WebSphere Application Server 8.0 Supplements: -

$ /opt/IBM/InstallationManager/eclipse/tools/imcl -silent -nosplash listAvailablePackages -repositories /mnt/hgfs/DaveHay/BPM/supplements/

com.ibm.websphere.APPCLIENT.v80_8.0.0.20110503_0200
com.ibm.websphere.IHS.v80_8.0.0.20110503_0200
com.ibm.websphere.PLG.v80_8.0.0.20110503_0200
com.ibm.websphere.PLUGCLIENT.v80_8.0.0.20110503_0200
com.ibm.websphere.WCT.v80_8.0.0.20110503_0200

and here's one for the WebSphere Application Server 8.0.0.5 fix packs: -

$ /opt/IBM/InstallationManager/eclipse/tools/imcl -silent -nosplash listAvailablePackages -repositories /mnt/hgfs/DaveHay/BPM/fixes/Base/

com.ibm.websphere.BASE.v80_8.0.5.20121022_1902
com.ibm.websphere.BASETRIAL.v80_8.0.5.20121022_1902
com.ibm.websphere.DEVELOPERS.v80_8.0.5.20121022_1902
com.ibm.websphere.DEVELOPERSILAN.v80_8.0.5.20121022_1902
com.ibm.websphere.EXPRESS.v80_8.0.5.20121022_1902
com.ibm.websphere.EXPRESSTRIAL.v80_8.0.5.20121022_1902
com.ibm.websphere.ND.v80_8.0.5.20121022_1902
com.ibm.websphere.NDDMZ.v80_8.0.5.20121022_1902
com.ibm.websphere.NDDMZTRIAL.v80_8.0.5.20121022_1902
com.ibm.websphere.NDTRIAL.v80_8.0.5.20121022_1902

$ /opt/IBM/InstallationManager/eclipse/tools/imcl -silent -nosplash listAvailablePackages -repositories /mnt/hgfs/DaveHay/BPM/fixes/Supp/

com.ibm.websphere.APPCLIENT.v80_8.0.5.20121022_1902
com.ibm.websphere.APPCLIENTILAN.v80_8.0.5.20121022_1902
com.ibm.websphere.IHS.v80_8.0.5.20121022_1902
com.ibm.websphere.IHSILAN.v80_8.0.5.20121022_1902
com.ibm.websphere.PLG.v80_8.0.5.20121022_1902
com.ibm.websphere.PLGILAN.v80_8.0.5.20121022_1902
com.ibm.websphere.PLUGCLIENT.v80_8.0.5.20121022_1902
com.ibm.websphere.PLUGCLIENTILAN.v80_8.0.5.20121022_1902

In the latter two examples, I downloaded the WAS 8.0.0.5 fix packs: -

-rw-r--r--@  1 hayd  staff  1377925961  4 Jan 23:10 8.0.0-WS-WAS-FP0000005-part1.zip
-rw-r--r--@  1 hayd  staff  1113282861  4 Jan 20:59 8.0.0-WS-WAS-FP0000005-part2.zip
-rw-r--r--@  1 hayd  staff  1089748410  4 Jan 22:58 8.0.0-WS-WASSupplements-FP0000005-part1.zip
-rw-r--r--@  1 hayd  staff  1495994292  4 Jan 19:44 8.0.0-WS-WASSupplements-FP0000005-part2.zip

and expanded them into Base and Supp subdirectories on my USB drive.

↧
↧

SSH and X11 on OS X Mountain Lion - No longer OOTB

January 7, 2013, 6:25 am
$
0
0
I have a vague recollection of Stuart McIntyre Tweeting about this when OS X 10.8 Mountain Lion was released, but didn't really follow up at that point.

Having now finally got my act together and installed Mountain Lion, I can see what he means.

On the rare occasion that I want to connect to one of my Unix servers via X11, I'm used to typing the following command: -


which, after a short interval, starts a X11 server, and allows me to log in to the remote box as usual, with the X11 session being established back to the Mac.

Sadly, this is no longer an option.

According to this: -


Apple write: -

X11 is not included with Mountain Lion, but X11 server and client libraries for OS X Mountain Lion are available from the XQuartz project: http://xquartz.macosforge.org. You should use XQuartz version 2.7.2 or later.

So I've headed over to the XQuartz project on MacOSForge, and downloaded a 67 MB DMG file - XQuartz-2.7.4.dmg - and am giving it a try now.

I'll report back …. 
↧

IBM BPM - Using the SIBDDLGenerator command with DB2 LUW 9.7

January 8, 2013, 11:13 am
$
0
0
I'm writing this down for future reference, as I know that I'll need it in the future.

IBM Business Process Manager ( and IBM Business Monitor ) need a set of database tables for the messaging engines that both products make heavy use of. Actually, a number of other products, including WebSphere Portal, can also make use of these: -


The product includes a rather useful little tool, sibddlgenerator, which can be used to generate the database definition language (DDL) for the database product of your choice.

As an example, I'm using DB2 Enterprise Server Edition 9.7.0.5 on Red Hat Enterprise Linux 6.3. This is the database that hosts the tables etc. for my IBM Business Process Manager Advanced 8.0.1 installation.

So here's the syntax for the command: -

$ cd /opt/IBM/WebSphere/AppServer/profiles/PCDMProfile/bin
$ ./sibDDLGenerator.sh -help

CWSIS1539I: sibDDLGenerator [-system <DBMS name>] [-version <DBMS version>] [-platform <DBMS platform>] [-schema <schema>] [-user <user>] [-create|-drop] [-database <database> (z/OS only)][-createdbstmt <true|false> (z/OS only)][-tablespaceprefix <tablespace prefix, maximum 5 characters> (z/OS only)][-storagegroup <storage group> [-catalog <high-level qualifier>] (z/OS only)] [-bufferpool <buffer pool> (z/OS only)] [-statementend <terminator>] [-noblanklines] [-nolinebreaks] [-firstline <statements>] [-lastline <statements>] [-permanent <number of permanent tables>] [-temporary <number of temporary tables>]

So I wanted to create a set of tables, for the medbpe00 schema, so I executed the following command: -

$ ./sibDDLGenerator.sh -system db2 -version 9.7 -platform linux -statementend \; -schema medbpe00 -user db2inst1

but this failed with: -

CWSIS1595E: An invalid combination of parameters has been specified, Database: db2, version: 9.7, platform: linux . Refer to the documentation for the correct parameters for your database.

Thinking laterally … hmmmm, well Linux is kinda like Unix ( albeit it's GNU - Gnu (is) Not Unix ) so I tried this instead: -

$ ./sibDDLGenerator.sh -system db2 -version 9.7 -platform unix -statementend \; -schema medbpe00 -user db2inst1

which did the trick, and returned: -

CREATE SCHEMA medbpe00;

CREATE TABLE medbpe00.SIBOWNER (
  ME_UUID VARCHAR(16),
  INC_UUID VARCHAR(16),
  VERSION INTEGER,
  MIGRATION_VERSION INTEGER
);

CREATE TABLE medbpe00.SIBOWNERO (
   EMPTY_COLUMN INTEGER
);

CREATE TABLE medbpe00.SIBCLASSMAP (
  CLASSID INTEGER NOT NULL,
  URI VARCHAR(2048) NOT NULL,
  PRIMARY KEY(CLASSID)
);

CREATE TABLE medbpe00.SIBLISTING (
  ID INTEGER NOT NULL,
  SCHEMA_NAME VARCHAR(10),
  TABLE_NAME VARCHAR(10) NOT NULL,
  TABLE_TYPE CHAR(1) NOT NULL,
  PRIMARY KEY(ID)
);

CREATE TABLE medbpe00.SIB000 (
  ID BIGINT NOT NULL,
  STREAM_ID BIGINT NOT NULL,
  TYPE CHAR(2),
  EXPIRY_TIME BIGINT,
  STRATEGY INTEGER,
  REFERENCE BIGINT,
  CLASS_ID INTEGER NOT NULL,
  PRIORITY INTEGER,
  SEQUENCE BIGINT,
  PERMANENT_ID INTEGER,
  TEMPORARY_ID INTEGER,
  LOCK_ID BIGINT,
  DATA_SIZE INTEGER NOT NULL,
  DATA VARCHAR(3360) FOR BIT DATA,
  LONG_DATA BLOB(1G),
  XID VARCHAR(254),
  DELETED SMALLINT,
  PRIMARY KEY(ID)
);

CREATE INDEX medbpe00.SIB000STREAMIX ON
medbpe00.SIB000(STREAM_ID,SEQUENCE) ALLOW REVERSE SCANS;

ALTER TABLE medbpe00.SIB000 VOLATILE CARDINALITY;

CREATE TABLE medbpe00.SIB001 (
  ID BIGINT NOT NULL,
  STREAM_ID BIGINT NOT NULL,
  TYPE CHAR(2),
  EXPIRY_TIME BIGINT,
  STRATEGY INTEGER,
  REFERENCE BIGINT,
  CLASS_ID INTEGER NOT NULL,
  PRIORITY INTEGER,
  SEQUENCE BIGINT,
  PERMANENT_ID INTEGER,
  TEMPORARY_ID INTEGER,
  LOCK_ID BIGINT,
  DATA_SIZE INTEGER NOT NULL,
  DATA VARCHAR(3360) FOR BIT DATA,
  LONG_DATA BLOB(1G),
  XID VARCHAR(254),
  DELETED SMALLINT,
  PRIMARY KEY(ID)
);

CREATE INDEX medbpe00.SIB001STREAMIX ON
medbpe00.SIB001(STREAM_ID,SEQUENCE) ALLOW REVERSE SCANS;

ALTER TABLE medbpe00.SIB001 VOLATILE CARDINALITY;

CREATE TABLE medbpe00.SIB002 (
  ID BIGINT NOT NULL,
  STREAM_ID BIGINT NOT NULL,
  TYPE CHAR(2),
  EXPIRY_TIME BIGINT,
  STRATEGY INTEGER,
  REFERENCE BIGINT,
  CLASS_ID INTEGER NOT NULL,
  PRIORITY INTEGER,
  SEQUENCE BIGINT,
  PERMANENT_ID INTEGER,
  TEMPORARY_ID INTEGER,
  LOCK_ID BIGINT,
  DATA_SIZE INTEGER NOT NULL,
  DATA VARCHAR(3360) FOR BIT DATA,
  LONG_DATA BLOB(1G),
  XID VARCHAR(254),
  DELETED SMALLINT,
  PRIMARY KEY(ID)
);

CREATE INDEX medbpe00.SIB002STREAMIX ON
medbpe00.SIB002(STREAM_ID,SEQUENCE) ALLOW REVERSE SCANS;

ALTER TABLE medbpe00.SIB002 VOLATILE CARDINALITY;

CREATE TABLE medbpe00.SIBXACTS (
  XID VARCHAR(254) NOT NULL,
  STATE CHAR(1) NOT NULL,
  PRIMARY KEY(XID)
);

CREATE TABLE medbpe00.SIBKEYS (
  ID VARCHAR(50) NOT NULL,
  LAST_KEY BIGINT NOT NULL,
  PRIMARY KEY(ID)
);

GRANT SELECT,INSERT,UPDATE ON medbpe00.SIBOWNER TO db2inst1;

GRANT SELECT,INSERT,UPDATE ON medbpe00.SIBOWNERO TO db2inst1;

GRANT SELECT,INSERT ON medbpe00.SIBCLASSMAP TO db2inst1;

GRANT SELECT,INSERT ON medbpe00.SIBLISTING TO db2inst1;

GRANT SELECT,INSERT,DELETE,UPDATE ON medbpe00.SIB000 TO db2inst1;

GRANT SELECT,INSERT,DELETE,UPDATE ON medbpe00.SIB001 TO db2inst1;

GRANT SELECT,INSERT,DELETE,UPDATE ON medbpe00.SIB002 TO db2inst1;

GRANT SELECT,INSERT,UPDATE,DELETE ON medbpe00.SIBXACTS TO db2inst1;

GRANT SELECT,INSERT,UPDATE ON medbpe00.SIBKEYS TO db2inst1;

Now, for BPM, we need two sets of tables, one for schema MEDBPE00 and one for schema MEDBPS00, so I ran the commands twice, as follows: -

$ ./sibDDLGenerator.sh -system db2 -version 9.7 -platform unix -statementend \; -schema medbpe00 -user db2inst1 -database medb > ~/createMEDBPEtables.sql
$ ./sibDDLGenerator.sh -system db2 -version 9.7 -platform unix -statementend \; -schema medbps00 -user db2inst1 -database medb > ~/createMEDBPStables.sql

generating a .SQL file in each case.

Thanks to Bob for his inspiration with this post: -


*UPDATE* 10 January 2013

I made a slight typo above when I specified -schema medbpe00 and -schema medbps00. I did, of course, mean to write medpe00 and medps00 as per the following: -

$ ./sibDDLGenerator.sh -system db2 -version 9.7 -platform unix -statementend \; -schema medpe00 -user db2inst1 -database medb > ~/createMEDBPEtables.sql
$ ./sibDDLGenerator.sh -system db2 -version 9.7 -platform unix -statementend \; -schema medps00 -user db2inst1 -database medb > ~/createMEDBPStables.sql

With the wrong schema names, the Messaging cluster will not start, which is somewhat annoying.
↧

IBM Business Process Manager - customising the configuration

January 10, 2013, 6:05 am
$
0
0
Having become recently and intimately acquainted with IBM BPM, it's taken me a little while to become accustomed to the various configuration files that BPM uses.

Thankfully, this IBM Technote: -


has been of immense use, and has validated something that Neil Kolban also says with regard to which file to amend: -

Using the 100Custom.xml file to add new configuration values or replace existing values

The 100Custom.xml file is designed to hold the customization and changes that you want to make to any of the configuration files. The idea is that if you do a fresh installation of a new version, you can simply drop in your existing 100Custom.xml file and all the changes that you have made will be picked up and used instead of the default values. Ask yourself, if I have to reinstall the product, what would I need to change in the configuration files? Those changes are the things that you want to put in the 100Custom.xml file.

Neil puts it even more succinctly: -

It is strongly recommended not to edit the content of the 99Local.xml file. Instead, edit the 100Custom.xml file and add/replace all changes there. When Process Server starts, it will merge the 99Local.xml with the 100Custom.xml producing a combined result. Editing only 100Custom.xml keeps all the changes in one place and aids in maintainability. Changes made to these configuration files don't take effect until after the next restart of the Process Server.

Simple, 100Custom.xml is your friend.
↧
Viewing all 1851 articles
Browse latest View live
Search