7.1.1-TIV-TDI-LA0030

Download Description

+--------------------------------------------------------------------------------------------------------------------+
Interim Fix 7.1.1-TIV-TDI-LA0030 README
Tivoli Directory Integrator version 7.1.1
Tivoli Directory Integrator version 7.1
Security Directory Integrator version 7.2
LA Interim Fix 30
(All platforms)
Date: June 2016
+--------------------------------------------------------------------------------------------------------------------+

COPYRIGHT STATEMENT
====================
June 2016

References in this publication to IBM products, programs, or services do
not imply that IBM intends to make these available in all countries in
which IBM operates. Any reference to an IBM program product in this
publication is not intended to state or imply that only IBM's program
product may be used. Any functionally equivalent program may be used
instead.

IBM is a trademark of the International Business Machines Corporation.

Copyright International Business Machines Corporation 2016.
All rights reserved.

Fix For
========

APAR - IO24497
PMR - 44212,082,000

General Description:
====================
This Limited Availability Interim Fix contains jars for RXA version 2.3.0.14


Details:
========
IO24497 WEAK CIPHERS CAUSE CONNECTION PROBLEMS FOR COMPONENT USING RXA RESOURCES

The SSH.jar in RXA version 2.3.0.14 supports the following algorithms.

DEFAULT_KEX_ALGORITHMS = { "diffie-hellman-group-exchange-sha256", "diffie-hellman-group-exchange-sha1", "diffie-hellman-group14-sha1", "diffie-hellman-group1-sha1" };
DEFAULT_SERVER_HOST_KEY_ALGORITHMS = { "ssh-rsa", "ssh-dss" };
DEFAULT_ENCRYPTION_ALGORITHMS = { "aes128-ctr", "aes128-cbc", "3des-ctr", "3des-cbc", "arcfour", "blowfish-ctr", "blowfish-cbc" };
DEFAULT_MAC_ALGORITHMS = { "hmac-md5", "hmac-sha1", "hmac-sha2-256", "hmac-sha2-512", "hmac-md5-96", "hmac-sha1-96" };


Prerequisites:
==============
Tivoli Directory Integrator 7.1.1 Fixpack 5 is recommended to be installed.
Tivoli Directory intergator 7.1 Fixpack 8 is recommended to be installed.
Security Directory Integrator 7.2 Fixpack 3 is recommended to be installed.

Platforms:
==========
All supported Platforms.

Sizes of Files Included in this Fix:
============================

432,846 jlanclient.jar
863,589 remoteaccess.jar
195,624 ssh.jar
106,313 rxa-langpack.jar


Applying the Fix:
=================

- Unzip the fix package to a temporary directory. The zip file contains jlancleintjar, remoteaccess.jar, ssh.jar, rxa-langpack.jar and README file.
- Backup the older remoteaccess.jar, ssh.jar, rxa-langpack.jar from the TDI installed system (<TDI_Install_dir>\jars\3rdparty\IBM\).
- Backup the older jlanclient.jar from the TDI installed system (<TDI_Install_dir>\jars\3rdparty\others\).
- Replace the existing files which were backed up earlier with the fix files.


Confirming the Fix has been applied successfully:
=================================================
TDI solution will now work with strong ciphers for RXA components.


md5sum of Files Included in this Fix:
=====================================
f7fe0bd59923e1c6b81ce627e62a3540 jlanclient.jar
95b1ccb800ca17f2c804d058ee51edcd remoteaccess.jar
cea23f00af1dc32c603981cdadf6f7a3 ssh.jar
afe96ced8544a47799abd690b0205ccd rxa-langpack.jar