Versions Compared

Old Version 2

changes.mady.by.user Former user

Saved on

compared with

New Version 3

changes.mady.by.user Former user

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Anchor
Release 7.2.0.0
Release 7.2.0.0
Release 7.2.0.0 - March 31, 2022

Change ID

Platforms

Component

Description

B-
10691 All 
13286z/OSUAGSRV
 
UFTP 

Add explicit FTPS (FTPES) support to UFTP. 

Enables transfers using TLS/SSL over connection to standard FTP port 21, provided the FTP server supports it. 

To request TLS/SSL from a Remote File Transfer or Remote File Monitor task, select the FTP protocol and prepend ftpes:// to the FTP server host name or IP address (e.g., ftpes://somehost). If the FTP server has enabled TLS/SSL support, the connection will proceed using encrypted communication. If TLS/SSL support is NOT enabled, a plain text session/transfer is done. 

The UFTP ENABLE_SSL configuration option (default:no) is provided to always request a TLS/SSL session, eliminating the need to specify the ftpes:// prefix. 

The UFTP AUTHENTICATE_PEER configuration option (default: no) is provided to control FTP server certificate authentication. When set to “yes”, the UFTP CA_CERTIFICATES configuration option must specify a CA certificate that can authenticate the FTP server’s certificate. 

B-12809 

All
(except HP-UX and Solaris Intel) 

USAP 

Update USAP to support the RSPARAMSL_255 data type for variants. The following USAP operations may now take advantage of this change: 

  • SUBMIT variant using a variant definition file 
  • MODIFY variant using a variant definition file 
  • DISPLAY variant 
  • GENERATE variant definition 
  • SUBMIT job from job definition file with inline temporary variant. SAP LOW and HIGH data types to support up to 255 chars

These changes are supported for XBP 2.0 and XBP 3.0, but full 255-character support ultimately depends on the SAP function module implementation.  

Note
titleNote

For the most consistent RSPARAMSL_255 support, Stonebranch recommends using SAP NW RFC library version 7.5.x and XBP 3.0 (controlled via the USAP XBP_MAX configuration option). 

B-13282 

z/OS 

UAGSRV 

Add automatic failover support for Agents configured to execute in a sysplex environment.  

The following items were delivered for UA 7.1.0.0 to support this feature: 

  • B-13184: Allow a secondary agent to become a primary agent upon failover. 
  • B-13186: Allow a primary agent to become a secondary agent upon failover. 
  • B-13283: Provide the ability to configure a failover hierarchy, to determine the order in which secondary agents are chosen to become the new primary agent. 
  • B-13284: Provide the ability to stop a Universal Broker started task WITHOUT initiating a failover. 
  • B-13285: Provide the ability to stop a Universal Broker started task AND initiate a failover.  
  • B-13291: Allow a new primary agent to receive tracking data for jobs submitted or executed by the previous primary agent. 
  • B-13964: Ensure that licenses obtained from Universal Controller are handled properly within the updated primary and secondary agents whenever a failover occurs
Note
titleNote

To ensure proper accounting for z/OS licenses, we recommend that all UAG Servers configured to run in a sysplex environment use the same value for the UAG Server’s NETNAME configuration option.

B-13316 

Unix (except HP-UX) 
Windows 

UFTP 

Update SSH Key Exchange and Cipher support for SFTP transfers.  

Provides better compatibility with default OpenSSH configurations, by making the following changes to supported key exchange methods: 

Added: 

  • ecdh-sha2-nistp521 
  • ecdh-sha2-nistp384 
  • ecdh-sha2-nistp256 
  • curve25519-sha26

Removed: 

  • diffie-helman-group-exchange-sha 
  • diffie-helman-group14-sha1 
  • diffie-helman-group1-sha1

The diffie-helman-group-exchange-sha256 key exchange method was left unchanged. 

Support for the following ciphers was added: 

  • AES-256-CTR 
  • AES-192-CTR 
  • AES-128-CTR

Support for the following ciphers was left unchanged: 

  • AES-256-GCM 
  • AES-128-GCM 
  • AES-256-CBC 
  • AES-192-CBC 
  • AES-128-CBC 

B-13768 

Unix 

UAGSRV 

Improve response and performance when several file monitor tasks that check file stability run concurrently.  

B-13819 

Unix 
Windows 

UEXT 

Provide the UAGSRV EXTENSION_PYTHON_LIST configuration option to extend the list of locations searched for Python instances that may be used by Universal Extension tasks.

Note
titleNote

The HP-UX and z/OS agents do not provide the Universal Extension. 

B-13820 

Unix 
Windows 

UAGSRV 
UBROKER 
PKG 

Allow the following Universal Extension config options to be set at install time or via Broker startup: 

  • EXTENSION_ACCEPT_LIST 
  • EXTENSION_DEPLOY_ON_REGISTRATION 
  • EXTENSION_PYTHON_LIST 

Extend the AUTOMATIC_FAILOVER option to support the primary_secondary value, which will instruct a Universal Agent configured with a SYSPLEX_ROLE of primary to start as a secondary Agent if another primary Agent is already running.

Info
titleNote

The AUTOMATIC_FAILOVER option continues to support a default value of never, which will disable automatic failover and will require failovers to be managed manually via a Universal Broker MODIFY command. 

B-13287z/OSUAGSRV

Extend the AUTOMATIC_FAILOVER option to support the secondary_primary[n] value, where n is an optional numeric value that sets a priority to determine which secondary Agent (among several active secondary Agents) will take over as primary.

Info
titleNote

The AUTOMATIC_FAILOVER option continues to support a default value of never, which will disable automatic failover and will require failovers to be managed manually via a Universal Broker MODIFY command. 

B-13288z/OSUAGSRVAdded the (mutually-exclusive) ZOS_JOB_SYSAFF and ZOS_JOB_SYSTEM configuration options that can manage a zOS task's execution via a SYSAFF or SYSTEM JOB card parameter, respectively.
B-13292z/OSUAGSRV

Extend the AUTOMATIC_FAILOVER option to support the always_primary value, which will force an Agent whose SYSPLEX_ROLE is primary to always start as a Primary Agent. Any other Agent running as a Primary Agent will become a Secondary Agent when this Agent starts.

Info
titleNote

The AUTOMATIC_FAILOVER option continues to support a default value of never, which will disable automatic failover and will require failovers to be managed manually via a Universal Broker MODIFY command. 

B-14036AllUFTP

Establish a connection to the (S)FTP Server before attempting the requested transfer operation. This will allow connection-specific failures to be isolated and reported.

To support this change, the following message:

UNV3707E cURL reports could not connect.

was replaced with:

UNV6955E Unable to establish an FTP server connection (curl_rc): curl_msg

where curl_rc and curl_msg are the return code and error message, respectively, that identify the problem.

In addition, UFTP now displays the entire connection conversation between it and the Server without requiring the -verbose option. 

B-14071

Unix

UAGSRV

Add the KILL_PROCESS_TREE option to control how UAG Server responds to a Cancel task command from Universal Controller. When yes, the entire process tree is terminated via SIGTERM. Any process within the tree that is still running after 10 seconds is terminated with a SIGKILL. UAG Server will confirm that all processes in the process tree are terminated before it notifies the Controller of the termination.

To preserve compatibility with existing behavior, the default value for this option is no, which can prevent the termination of a process in the tree that ignores the SIGTERM signal. This may cause the task's status in the Universal Controller to show Cancelled although the (now orphaned) process continues to run.

Info
titleNote

This new option has no effect on tasks running with sudo authority. Such tasks will not receive a SIGTERM signal and are always terminated immediately with a SIGKILL. 

B-14270

Unix
Windows

UEXT

Remove internal DEBUG-level messages that are generated by the Universal Extension base class when the extension task's log level is DEBUG.

Only DEBUG messages issued by the extension developer should be shown.

Note
titleNote

The HP-UX and z/OS

agents

Agents do not provide the Universal Extension. 

B-
13821
14271

Unix
Windows

 

UEXT
 

B-13822 

Windows 

UEXT 

Allow usermode installs to discover the Python distribution provided by a system mode-installed Agent. 

Update the values supported via the requires_python declaration of a Universal Extension implementation as follows: 

  • Support wildcards in the version specification (for example, “==2.7.*”). 
  • Support an exclusive range of versions via the > and < operators (for example, “> 2.6, < 4”).
  • Support an inclusive range of versions via the >= and <= operator (for example, “> 3.7.6”). 
Note
titleNote

The HP-UX and z/OS agents do not provide the Universal Extension.

Add the following commands/options to the UIP-CLI utility:

  • task launch - launch a Universal Extension task
  • task status - obtain the status of a Universal Extension task
  • task output - obtain the output generated by a Universal Extension task


Note
titleNote

The HP-UX and z/OS agents do not provide the Universal Extension. 

B-
13831 
14544

Unix

 


Windows

 

UEXT
 

Provide the ability for Universal Extensions to detect and respond to Cancel commands issued from Universal Controller. 

This option provides the new UAG Server configuration option, EXTENSION_CANCEL_TIMEOUT.  

The ability to configure that value at install time and/or Universal Broker startup is also provided. 

Note
titleNote

The HP-UX and z/OS agents do not provide the Universal Extension.

B-13846 

Unix 
Windows 

UEXT 

Allow Universal Extension tasks to accept authentication tokens (e.g., used for Web or cloud-based service authentication) from a Universal Controller resolvable credential object. 

Make all all Task Instance variables set by the Controller for a Universal Extension task available to the Extension.

An extension can access these variables via the self.uip.task_variables dictionary property (e.g., self.uip_task_variables['ops_task_id']).

Note
titleNote

The HP-UX and z/OS agents do not provide the Universal Extension. 

B-
13860 
14630

Unix

 


Windows

 

UAGSRV

UEXT 

Refactor the Universal Extension logging API so that it is no longer necessary to instantiate an ExtensionLogger object. Logging methods can now be accessed using the following import: 

from universal_extension import logger 

Logging methods can be invoked using calls such as either:

logger.info(‘msg’)
  • logger.error(‘msg’)
    • Note
    titleNote

    The HP-UX and z/OS agents do not provide the Universal Extension.

    B-13885 

    z/OS 

    UBROKER 

    Suppress ICH408I messages in the RACF log when running the Broker with a user without BPX.SUPERUSER access.  

    This message is an expected response to a check of authority level, but repeated checks result in several instances of the ICH408I message appear in the log. 

    B-13908 

    Unix 
    Windows 

    UEXT 

    Add the ability to execute Dynamic Commands within a Universal Extension task without launching a separate process (that is, support “in-process” Dynamic Command execution). 

    UFTP

    Add the ability to retrieve values from the Universal Controller File Transfer Task form that support transfers using explicit FTPS (that is, FTP with SSL). 

    Info
    titleNote

    Explicit FTPS (FTPES) support was added to the Agent in the 7.1.0.0 release with B-10691. The change delivered in Universal Agent 7.2.0.0 provides full support and integration with the File Transfer Task.

    B-14720WindowsUEXT

    Add Visual Studio Code Plugin support for the UIP-CLI task commands provided by B-14271 (see above).

    Note
    titleNote

    The HP-UX and z/OS agents do not provide the Universal Extension. 

    B-
    13931 
    14724

    Unix

     


    Windows

     

    OMS

    Add a service timeout implementation to the OMS Java Client to enable detection of connection issues without waiting for a TCP keepalive interval to elapse.  

    Note
    titleNote

    The ability to configure this value is provided via the Universal Controller with B-13967. 

    B-13989 

    Windows 

    UEXT 

    Provide a new utility to assist with Universal Extension development that provides a command line interface to Universal Extension task APIs offered by Universal Controller. 

    Please see the Universal Extension development documentation for information on this new “uip” utility
    UEXT

    To support integration with Universal Monitor tasks, receive information from the Controller that can by used to identify an Extension task launched via a Universal Monitor Trigger. 

    Values received from the Controller are saved in the following properties:

    • self.uip.trigger_id - the Trigger UUID value set by the Controller that uniquely identifies the trigger instance. This will be undefined if the extension task was not launched by a Universal Monitor Trigger.
    • self.uip.instance_id - the EXECID set by the Controller than uniquely identifies the Extension task instance
    • self.uip.monitor_id - the Universal Monitor UUID that uniquely identifies the Universal Monitor instance. This will be undefined if the extension task was not launched by a Universal Monitor.

    The Universal Extension base class sets the following property when a Trigger ID is received:

    • self.uip.is_triggered
      • If the Extension task was executed via a Universal Monitor Trigger, this property will be True. Otherwise, it is False.


    Note
    titleNote

    The HP-UX and z/OS agents do not provide the Universal Extension. 

    B-
    14049 
    14725

    Unix
    Windows

     

    UAGSRV

     

    UEXT

     

    Ensure that any instances of a password exposed by a Universal Extension task are scrubbed from the UAG Server cache files. 

    B-14255 

    Windows 

    UEXT 

    Extend the uip utility delivered by B-13989 with an init command that can be used to initialize a working directory (e.g., a local Git repository) for Universal Extension development. 

    Please see the Universal Extension development documentation for information on the new “uip” utility. 

    Add full support for Universal Monitor tasks, including the ability to reconnect to Universal Extension tasks (executed on behalf of the Monitor task) that continue to run when an Agent is restarted.

    Note
    titleNote

    The HP-UX and z/OS agents do not provide the Universal Extension. 

    D-
    07313 Unix 
    10379Windows
     
    UAGSRV
     

    Improve message handling and separation to prevent possible message loss. 

    D-08997 

    z/OS 

    UDM 
    UDMSRV 

    Prevent a S0C4 when executing transfers of UTF16-encoded datasets. 

    D-09666 

    Windows 

    UAGSRV 

    Fixes a problem when the -uagstdio option is specified for additional UCMD Options and one or more of that option’s values contains double quotes that must be preserved. 

    D-09852 

    Unix 
    z/OS 

    UDM 
    UDMSRV 

    Ensure that the message that shows the result of the CD command displays correctly. 

    This issue was most visible on zOS, but could occur on any Linux/Unix system whose default locale is not UTF8.  

    D-10171 

    Windows 

    UAGSRV 

    Prevent the agent.log from being inherited by tasks spawned by the Agent. This fixes a problem that caused the agent.log’s scheduled rollover at midnight to fail if Agent tasks were running. 

    D-10189 

    z/OS 

    PKG 

    Fix a problem that prevented the installation of hlq.SUNVSAMP(UBRDBSPZ). 

    D-10210 

    All 

    UDM 
    UDMSRV 

    Scrubs any password specified with the OPEN statement from trace file output. 

    D-10256 

    All 

    UDM 

    Fixes a crash that could occur if the UDM Manager message level was set to “trace” from the command line. 

    D-10346 

    z/OS 

    UAGSRV 

     

    Fixes a problem that prevented a zOS CHANGE File Monitor task from storing a renamed dataset’s new name in Universal Control variables. 

    D-10371 

    Unix 
    Windows 

    OMSSRV 

    Prevents re-delivery of OMS messages following automatic recovery executed against a corrupted, truncated data file. 

    D-10415 

    Windows 

    UAGSRV 

    Fixes an issue introduced in UA 7.0.0.0 that caused incorrect translation of UTF8 characters in Windows scripts. 

    D-10426 

    z/OS 

    UBROKER 

    Fixes a problem that prevented UBROKER startup while loading the UNVACTRT SMF exit. 

    D-10432

    Unix 
    Windows 

    UEXTFixes an issue that prevented collection of STDOUT when a Universal Extension task is cancelled
    Fix an issue where a File Monitor task running on a Windows Agent fails to recognize Unicode characters.
    D-10417

    Unix
    Windows

    		OMSSRVFix an issue that prevents a zOS Agent using IBM System SSL (i.e., RACF-based keyrings) from connecting to an OMS Server.
    D-10430

    Unix
    Windows

    		UAGSRVWhen an SAP task instance is cancelled, ensure that the associated Universal Connector for SAP (USAP) process is cancelled as well.
    D-10523

    Unix
    Windows

    UDM

    UDMSRV

    Prevent an authentication error for a File Transfer task when the following conditions exist:

    • File Transfer task uses Universal Data Mover (UDM)

    • UDM script is used by the task

    • UDM script issues the exec or execsap command

    • exec or execsap command uses the pwd parameter
    • One of the built-in credential variables – $(ops_primary_cred_pwd) or $(ops_secondary_cred_pwd) -- is used for the pwd parameter's value

    For example:

    Code Block
    titleUDM Script Statements
    collapsetrue
    open src=local dst=rmthost.ipaddr user=$(ops_secondary_cred_user) pwd=$(ops_secondary_cred_pwd)
exec src cmd="dir" user=$(ops_primary_cred_user) pwd=$(ops_primary_cred_pwd)

    Starting with UA 7.0.0.0, this will cause the resolved $(ops_primary_cred_pwd) value in the exec statement to be enclosed in double quotes ("). The double quotes are retained when passed to UCMD Manager (or USAP for an execsap statement). The double quotes will prevent successful password authentication.

    D-10530UnixUBROKERWhen the Universal Broker daemon encounters an EPIPE when attempting to log a message to unv.log, close the existing log file and resume logging to a new file.
    D-10531z/OS

    UDM

    UDMSRV

    Fix an issue where an attempt to transfer PDS members from z/OS using UDM may result in an S0C4 ABEND.

    When this occurs, the following error is reported:

    CEE3204S The system detected a protection exception (System Completion Code=0C4).
    From entry point UPdsRead at compile unit offset +00000398 at entry offset +00000398 at address 0A5B5030.

    Info
    titleNote

    This problem was introduced by D-08997, delivered in UA 7.1.0.0.

    D-10534

    Unix
    Windows

    UAGSRV

    UEXT

    UAG Server may crash when a Universal Extension task references a credential token greater than 3000 characters in length.

    Note
    titleNote

    The HP-UX and z/OS agents do not provide the Universal Extension. 

    D-
    10435 

    Windows 

    UCMD 
    UCTL 
    UDM 
    UFTP 

    Issue a configuration error when the DES-CBC-SHA cipher is specified from a Windows component. 

     This cipher was deprecated in a previous release and since then, Agent server components would fail to negotiate a session with a manager component that only requested the DES-CBC-SHA cipher. However, the value itself should have been flagged during configuration processing and not presented to the server. 

    D-10470 

    Linux PPC 

    All 

    Prevent a crash during OpenSSL random number generation seeding observed on RHEL8 on a PowerPC system. 

    D-10474 

    z/OS 

    UCMD 
    UCTL 
    UDM 
    UEM 
    UFTP 

     

    Prevent a situation in which command line parameters provided via a SYSIN statement were ignored if they followed a password on the same line. 

    For example, given the following: 

     //SYSIN DD * 
    -userid uid -pwd password -level info 
    /* 

     The -level option would be ignored unless moved to a separate line:
    //SYSIN DD * 
    -userid uid -pwd password 
    -level info 
    /* 
    10556z/OSUAGSRV

    Fix an issue that prevented a file monitor task from locating datasets when a wildcard is used as the first character in the dataset pattern.

    This restores behavior that existed prior to Universal Agent 7.0.0.0.

    D-10559

    Unix
    Windows

    		UAGSRV

    Fix an issue introduced in UA 7.1.0.0, where a Universal Task fails to properly resolve resolvable credentials when the credential variable is enclosed in double quotes.


    D-10567

    Unix
    Windows

    		OMSSRVWhen OMS Server's AUTHENTICATE_PEER option is no, fix an issue that will cause OMS to accept an SSL connection when no client certificate is presented, even when an OMS_ACCESS UACL rule exists to reject such connections.
    D-10676AllUFTPEnsures that UFTP will not crash when used to transfer a comma-separated list of files from z/OS using the MGET command.
    D-10687z/OSUAGSRV

    When running a File Transfer Task via a z/OS Agent, if the Local and/or Remote Filename values exceeded 72 characters, UAG Server failed to properly format the SYSIN DD statement in the JCL used to execute UFTP.

    The z/OS Agent now ensures that such values are properly terminated at column 72 and continued to the next line.