...
This page summarizes the changes introduced in each component maintenance release for Universal Agent 67.91.x.
For a list of all component changes included in the maintenance release for each platform, see:
Universal Agent Server
Anchor | ||
---|---|---|
|
...
|
...
|
...
5 -
...
July 31,
...
2023
Universal Command
...
Change ID | Platforms | Component | Description |
---|
D- |
11137 |
Windows | UAGSRV |
UFTP
Add explicit FTPS (FTPES) support to UFTP.
Enables transfers using TLS/SSL over connection to standard FTP port 21, provided the FTP server supports it.
To request TLS/SSL from a Remote File Transfer or Remote File Monitor task, select the FTP protocol and prepend ftpes:// to the FTP server host name or IP address (e.g., ftpes://somehost). If the FTP server has enabled TLS/SSL support, the connection will proceed using encrypted communication. If TLS/SSL support is NOT enabled, a plain text session/transfer is done.
The UFTP ENABLE_SSL configuration option (default:no) is provided to always request a TLS/SSL session, eliminating the need to specify the ftpes:// prefix.
The UFTP AUTHENTICATE_PEER configuration option (default: no) is provided to control FTP server certificate authentication. When set to “yes”, the UFTP CA_CERTIFICATES configuration option must specify a CA certificate that can authenticate the FTP server’s certificate.
B-13282
z/OS
UAGSRV
Add automatic failover support for Agents configured to execute in a sysplex environment.
The following items were delivered for UA 7.1.0.0 to support this feature:
- B-13184: Allow a secondary agent to become a primary agent upon failover.
- B-13186: Allow a primary agent to become a secondary agent upon failover.
- B-13283: Provide the ability to configure a failover hierarchy, to determine the order in which secondary agents are chosen to become the new primary agent.
- B-13284: Provide the ability to stop a Universal Broker started task WITHOUT initiating a failover.
- B-13285: Provide the ability to stop a Universal Broker started task AND initiate a failover.
- B-13291: Allow a new primary agent to receive tracking data for jobs submitted or executed by the previous primary agent.
- B-13964: Ensure that licenses obtained from Universal Controller are handled properly within the updated primary and secondary agents whenever a failover occurs
Note | ||
---|---|---|
| ||
To ensure proper accounting for z/OS licenses, we recommend that all UAG Servers configured to run in a sysplex environment use the same value for the UAG Server’s NETNAME configuration option. |
B-13768
Unix
UAGSRV
Improve response and performance when several file monitor tasks that check file stability run concurrently.
B-13819
Unix
Windows
UEXT
Provide the UAGSRV EXTENSION_PYTHON_LIST configuration option to extend the list of locations searched for Python instances that may be used by Universal Extension tasks.
Note | ||
---|---|---|
| ||
The HP-UX and z/OS agents do not provide the Universal Extension. |
B-13820
Unix
Windows
UAGSRV
UBROKER
PKG
Allow the following Universal Extension config options to be set at install time or via Broker startup:
- EXTENSION_ACCEPT_LIST
- EXTENSION_DEPLOY_ON_REGISTRATION
- EXTENSION_PYTHON_LIST
Note | ||
---|---|---|
| ||
The HP-UX and z/OS agents do not provide the Universal Extension. |
B-14049
Unix
Windows
UAGSRV
UEXT
Ensure that any instances of a password exposed by a Universal Extension task are scrubbed from the UAG Server cache files.
D-07313
Unix
Windows
UAGSRV
Improve message handling and separation to prevent possible message loss.
D-09666
Windows
UAGSRV
Fixes a problem when the -uagstdio option is specified for additional UCMD Options and one or more of that option’s values contains double quotes that must be preserved.
D-10171
Windows
UAGSRV
Prevent the agent.log from being inherited by tasks spawned by the Agent. This fixes a problem that caused the agent.log’s scheduled rollover at midnight to fail if Agent tasks were running.
D-10346
z/OS
UAGSRV
Fixes a problem that prevented a zOS CHANGE File Monitor task from storing a renamed dataset’s new name in Universal Control variables.
D-10415
Windows
UAGSRV
Fixes an issue introduced in UA 7.0.0.0 that caused incorrect translation of UTF8 characters in Windows scripts.
D-10470
Linux PPC
All
Prevent a crash during OpenSSL random number generation seeding observed on RHEL8 on a PowerPC system.
Universal Broker
...
Change ID
...
Platforms
...
Component
...
Description
...
B-13820
...
Unix
Windows
...
UAGSRV
UBROKER
PKG
Allow the following Universal Extension config options to be set at install time or via Broker startup:
- EXTENSION_ACCEPT_LIST
- EXTENSION_DEPLOY_ON_REGISTRATION
- EXTENSION_PYTHON_LIST
Note | ||
---|---|---|
| ||
The HP-UX and z/OS agents do not provide the Universal Extension. |
...
B-13885
...
z/OS
...
UBROKER
...
Suppress ICH408I messages in the RACF log when running the Broker with a user without BPX.SUPERUSER access.
This message is an expected response to a check of authority level, but repeated checks result in several instances of the ICH408I message appear in the log.
...
D-10426
...
z/OS
...
UBROKER
...
Fixes a problem that prevented UBROKER startup while loading the UNVACTRT SMF exit.
...
D-10470
...
Linux PPC
...
All
...
Prevent a crash during OpenSSL random number generation seeding observed on RHEL8 on a PowerPC system.
Restore the ability for Windows file monitor tasks to correctly interpret file paths that contain a double backslash (i.e., \\). | |||
D-11156 | Unix | UAGSRV | Ensure that all file descriptors are properly closed when a task fails because credentials were specified for a user account that does not exist. |
D-11178 | Unix | UAGSRV | Fixes an issue that could result in excessive CPU consumption when UAG Server launches and/or executes several different task types concurrently. |
D-11335 | Windows | UAGSRV | Fixes an issue that prevents successful completion of a Change file monitor instance when the file path contains double backslashes (i.e., \\) or a single forward slash (i.e., /). Prior to this fix, the task instance remains in a Running status. |
D-11424 | z/OS | UAGU83 | Fixes a problem where an ABEND within the UAGU83 SMF exit module could cause RMF to terminate with an S0C1. |
Anchor | ||||
---|---|---|---|---|
|
Change ID | Platforms | Component | Description |
---|---|---|---|
D-09964 | Unix | UAGSRV | Ensure that all file descriptors are closed when an attempt to execute an Agent File Monitor task using credentials for a non-existent user is specified. |
D-10897 | Unix Windows | UAGSRV | Fix a situation in which a create or change file monitor task using a stability check may fail to detect the creation of or change to intended files. |
D-11003 | z/OS | UAGSRV | Fix a situation in which a z/OS File Monitor task could be triggered more than once for the same dataset or file |
D-11059 | z/OS | UAGSRV | Fix a situation in which the step that executes the UAGRERUN utility is inserted into a z/OS task's JCL at an unexpected/unsupported location |
D-11084 | Unix (except HP-UX) | UAGSRV UEXT | Fix a performance issue that may occur when a Universal Extension task's output is returned via EXTENTION OUTPUT. |
D-11108 | Unix (except HP-UX) Windows | UAGSRV UEXT | Correct the spelling of a credential's passphrase when referenced by a Universal Extension task. The previous spelling pasphrase is now corrected to passphrase. For backward compatibility, pasphrase is still accepted, but new extensions should use the correct spelling as this backward compatibility could be lost in future releases. |
D-11118 | All | UAGSRV | Fix a situation in which tasks could end with a Start Failure or say in a Queued status if the Agent's hostname is longer than 62 characters. |
Anchor | ||||
---|---|---|---|---|
|
Change ID | Platforms | Component | Description |
---|---|---|---|
D-10916 | Unix | UAGSRV | Resolve a memory leak observed when executing a tasks from UAG Server. |
D-10942 | Unix | UAGSRV | Prevent a situation in which several concurrent UCMD, UDM, or USAP tasks will fail with the following error: Error in caller provided UUID |
Anchor | ||||
---|---|---|---|---|
|
Change ID | Platforms | Component | Description | |||||
---|---|---|---|---|---|---|---|---|
D-10705 | Unix | UAGSRV | Fix a problem where File Monitor tasks do not honor a specified stable period if there are multiple file monitor instances running with the same credentials.
| |||||
D-10707 | All | UAGSRV | Prevent a deadlock that may occur when a CHANGE File Monitor instance detects new matching files.
| |||||
D-10709 | Windows | UAGSRV | Fix an issue where a File Monitor task running on a Windows Agent fails to recognize Unicode characters.
| |||||
D-10710 | Unix | UAGSRV | When an SAP task instance is cancelled, ensure that the associated Universal Connector for SAP (USAP) process is cancelled as well.
| |||||
D-10728 | Unix | UAGSRV | Fix a problem where multiple Universal Extension or Universal Task instances may eventually exceed the FIFO ulimit. | |||||
D-10733 | All | UAGSRV | Prevent a CHANGE File Monitor that specifies a stable period from incorrectly generating multiple events.
|
Anchor | ||||
---|---|---|---|---|
|
...
October 4, 2021
Change ID | Platforms | Component | Description |
---|---|---|---|
DB-1043510691 | WindowsAll | UCMDUAGSRV | Issue a configuration error when the DES-CBC-SHA cipher is specified from a Windows component. This cipher was deprecated in a previous release and since then, Agent server components would fail to negotiate a session with a manager component that only requested the DES-CBC-SHA cipher. However, the value itself should have been flagged during configuration processing and not presented to the server. |
D-10470 | Linux PPC | All | Prevent a crash during OpenSSL random number generation seeding observed on RHEL8 on a PowerPC system. | D-10474 | z/OS | UCMD
|
Universal Connector for SAP
...
Change ID
...
Platforms
...
Component
...
Description
...
B-12809
...
All
(except HP-UX and Solaris Intel)
...
USAP
...
Update USAP to support the RSPARAMSL_255 data type for variants. The following USAP operations may now take advantage of this change:
- SUBMIT variant using a variant definition file
- MODIFY variant using a variant definition file
- DISPLAY variant
- GENERATE variant definition
- SUBMIT job from job definition file with inline temporary variant. SAP LOW and HIGH data types to support up to 255 chars
These changes are supported for XBP 2.0 and XBP 3.0, but full 255-character support ultimately depends on the SAP function module implementation.
Note | ||
---|---|---|
| ||
For the most consistent RSPARAMSL_255 support, Stonebranch recommends using SAP NW RFC library version 7.5.x and XBP 3.0 (controlled via the USAP XBP_MAX configuration option). |
Universal Control
...
Change ID
...
Platforms
...
Component
...
Description
...
D-10435
...
Windows
...
UCMD
UCTL
UDM
UFTP
...
Issue a configuration error when the DES-CBC-SHA cipher is specified from a Windows component.
This cipher was deprecated in a previous release and since then, Agent server components would fail to negotiate a session with a manager component that only requested the DES-CBC-SHA cipher. However, the value itself should have been flagged during configuration processing and not presented to the server.
...
D-10470
...
Linux PPC
...
All
...
Prevent a crash during OpenSSL random number generation seeding observed on RHEL8 on a PowerPC system.
...
D-10474
...
z/OS
...
UCMD
UCTL
UDM
UEM
UFTP
Prevent a situation in which command line parameters provided via a SYSIN statement were ignored if they followed a password on the same line.
For example, given the following:
//SYSIN DD *
-userid uid -pwd password -level info
/*
...
Universal Data Mover
...
Change ID
...
Platforms
...
Component
...
Description
...
D-08997
...
z/OS
...
UDM
UDMSRV
...
Prevent a S0C4 when executing transfers of UTF16-encoded datasets.
...
D-09852
...
Unix
z/OS
...
UDM
UDMSRV
...
Ensure that the message that shows the result of the CD command displays correctly.
This issue was most visible on zOS, but could occur on any Linux/Unix system whose default locale is not UTF8.
...
D-10210
...
All
...
UDM
UDMSRV
...
Scrubs any password specified with the OPEN statement from trace file output.
...
D-10256
...
All
...
UDM
...
Fixes a crash that could occur if the UDM Manager message level was set to “trace” from the command line.
...
D-10435
...
Windows
...
UCMD
UCTL
UDM
UFTP
...
Issue a configuration error when the DES-CBC-SHA cipher is specified from a Windows component.
This cipher was deprecated in a previous release and since then, Agent server components would fail to negotiate a session with a manager component that only requested the DES-CBC-SHA cipher. However, the value itself should have been flagged during configuration processing and not presented to the server.
...
D-10470
...
Linux PPC
...
All
...
Prevent a crash during OpenSSL random number generation seeding observed on RHEL8 on a PowerPC system.
...
D-10474
...
z/OS
...
UCMD
UCTL
UDM
UEM
UFTP
Prevent a situation in which command line parameters provided via a SYSIN statement were ignored if they followed a password on the same line.
For example, given the following:
//SYSIN DD *
-userid uid -pwd password -level info
/*
...
Universal Event Monitor
...
Add explicit FTPS (FTPES) support to UFTP. Enables transfers using TLS/SSL over connection to standard FTP port 21, provided the FTP server supports it. To request TLS/SSL from a Remote File Transfer or Remote File Monitor task, select the FTP protocol and prepend ftpes:// to the FTP server host name or IP address (e.g., ftpes://somehost). If the FTP server has enabled TLS/SSL support, the connection will proceed using encrypted communication. If TLS/SSL support is NOT enabled, a plain text session/transfer is done. The UFTP ENABLE_SSL configuration option (default:no) is provided to always request a TLS/SSL session, eliminating the need to specify the ftpes:// prefix. The UFTP AUTHENTICATE_PEER configuration option (default: no) is provided to control FTP server certificate authentication. When set to “yes”, the UFTP CA_CERTIFICATES configuration option must specify a CA certificate that can authenticate the FTP server’s certificate. | ||||||||
B-13282 | z/OS | UAGSRV | Add automatic failover support for Agents configured to execute in a sysplex environment. The following items were delivered for UA 7.1.0.0 to support this feature:
| |||||
B-13768 | Unix | UAGSRV | Improve response and performance when several file monitor tasks that check file stability run concurrently. | |||||
B-13819 | Unix | UEXT | Provide the UAGSRV EXTENSION_PYTHON_LIST configuration option to extend the list of locations searched for Python instances that may be used by Universal Extension tasks.
| |||||
B-13820 | Unix | UAGSRV | Allow the following Universal Extension config options to be set at install time or via Broker startup:
| |||||
B-13831 | Unix | UAGSRV | Provide the ability for Universal Extensions to detect and respond to Cancel commands issued from Universal Controller. This option provides the new UAG Server configuration option, EXTENSION_CANCEL_TIMEOUT. The ability to configure that value at install time and/or Universal Broker startup is also provided.
| |||||
B-14049 | Unix | UAGSRV | Ensure that any instances of a password exposed by a Universal Extension task are scrubbed from the UAG Server cache files. | |||||
D-07313 | Unix | UAGSRV | Improve message handling and separation to prevent possible message loss. | |||||
D-09666 | Windows | UAGSRV | Fixes a problem when the -uagstdio option is specified for additional UCMD Options and one or more of that option’s values contains double quotes that must be preserved. | |||||
D-10171 | Windows | UAGSRV | Prevent the agent.log from being inherited by tasks spawned by the Agent. This fixes a problem that caused the agent.log’s scheduled rollover at midnight to fail if Agent tasks were running. | |||||
D-10346 | z/OS | UAGSRV | Fixes a problem that prevented a zOS CHANGE File Monitor task from storing a renamed dataset’s new name in Universal Control variables. | |||||
D-10415 | Windows | UAGSRV | Fixes an issue introduced in UA 7.0.0.0 that caused incorrect translation of UTF8 characters in Windows scripts. | |||||
D-10432 | Unix | UEXT | Fixes an issue that prevented collection of STDOUT when a Universal Extension task is cancelled.
| |||||
D-10470 | Linux PPC | All | Prevent a crash during OpenSSL random number generation seeding observed on RHEL8 on a PowerPC system. |
Universal Broker
Anchor | ||||
---|---|---|---|---|
|
Change ID | Platforms | Component | Description |
---|---|---|---|
D-10910 | All | UBROKER | Fix a memory leak that, if left unchecked, could require frequent Universal Broker restarts. |
D-10934 | All | UBROKER | Fix a memory leak that could occur within the Universal Broker Memory when responding to a UAG Server configuration refresh request |
Anchor | ||||
---|---|---|---|---|
|
Change ID | Platforms | Component | Description | |||||
---|---|---|---|---|---|---|---|---|
D-10711 | Unix | UBROKER | When the Universal Broker daemon encounters an EPIPE when attempting to log a message to
|
Anchor | ||||
---|---|---|---|---|
|
...
October 4, 2021
Create a VisualStudio Code plugin to interact with the new uip command line utility delivered by B-13991.
Note | ||
---|---|---|
| ||
The HP-UX and z/OS agents do not provide the Universal Extension. |
...
B-14049
...
Unix
Windows
...
UAGSRV
UEXT
...
Ensure that any instances of a password exposed by a Universal Extension task are scrubbed from the UAG Server cache files.
...
B-14255
...
Windows
...
UEXT
...
Extend the uip utility delivered by B-13989 with an init command that can be used to initialize a working directory (e.g., a local Git repository) for Universal Extension development.
Please see the Universal Extension development documentation for information on the new “uip” utility.
Note | ||
---|---|---|
| ||
The HP-UX and z/OS agents do not provide the Universal Extension. |
Universal FTP Client
...
Change ID | Platforms | Component | Description |
---|
B- |
13820 |
Unix |
Windows |
Prevent a crash during OpenSSL random number generation seeding observed on RHEL8 on a PowerPC system.
D-10474
z/OS
UCMD
UCTL
UDM
UEM
UFTP
Prevent a situation in which command line parameters provided via a SYSIN statement were ignored if they followed a password on the same line.
For example, given the following:
//SYSIN DD *
-userid uid -pwd password -level info
/*
//SYSIN DD *
-userid uid -pwd password
-level info
/*
Universal Extension
...
Change ID
...
Platforms
...
Component
...
Description
...
B-13819
...
Unix
Windows
...
UEXT
...
Provide the UAGSRV EXTENSION_PYTHON_LIST configuration option to extend the list of locations searched for Python instances that may be used by Universal Extension tasks.
Note | ||
---|---|---|
| ||
The HP-UX and z/OS agents do not provide the Universal Extension. |
...
B-13821
...
Unix
Windows
...
UEXT
Update the values supported via the requires_python declaration of a Universal Extension implementation as follows:
- Support wildcards in the version specification (for example, “==2.7.*”).
- Support an exclusive range of versions via the > and < operators (for example, “> 2.6, < 4”).
- Support an inclusive range of versions via the >= and <= operator (for example, “> 3.7.6”).
Note | ||
---|---|---|
| ||
The HP-UX and z/OS agents do not provide the Universal Extension. |
...
B-13822
...
Windows
...
UEXT
Allow usermode installs to discover the Python distribution provided by a system mode-installed Agent.
Note | ||
---|---|---|
| ||
The HP-UX and z/OS agents do not provide the Universal Extension. |
...
B-13831
...
Unix
Windows
UAGSRV
UBROKER
UEXT
PKG
Provide the ability for Universal Extensions to detect and respond to Cancel commands issued from Universal Controller.
This option provides the new UAG Server configuration option, EXTENSION_CANCEL_TIMEOUT.
The ability to configure that value at install time and/or Universal Broker startup is also provided.
Note | ||
---|---|---|
| ||
The HP-UX and z/OS agents do not provide the Universal Extension. |
...
B-13846
...
Unix
Windows
...
UEXT
Allow Universal Extension tasks to accept authentication tokens (e.g., used for Web or cloud-based service authentication) from a Universal Controller resolvable credential object.
Note | ||
---|---|---|
| ||
The HP-UX and z/OS agents do not provide the Universal Extension. |
...
B-13860
...
Unix
Windows
...
UEXT
Refactor the Universal Extension logging API so that it is no longer necessary to instantiate an ExtensionLogger object. Logging methods can now be accessed using the following import:
from universal_extension import logger
Logging methods can be invoked using calls like logger.info(‘msg’) or logger.error(‘msg’).
Note | ||
---|---|---|
| ||
The HP-UX and z/OS agents do not provide the Universal Extension. |
...
B-13908
...
Unix
Windows
...
UEXT
Add the ability to execute Dynamic Commands within a Universal Extension task without launching a separate process (i.e., support “in-process” Dynamic Command execution).
Note | ||
---|---|---|
| ||
The HP-UX and z/OS agents do not provide the Universal Extension. |
...
B-13989
...
Windows
...
UEXT
Provide a new utility to assist with Universal Extension development that provides a command line interface to Universal Extension task APIs offered by Universal Controller.
...
Note | ||
---|---|---|
| ||
The HP-UX and z/OS agents do not provide the Universal Extension. |
...
B-13991
...
Windows
...
UEXT
UAGSRV | Allow the following Universal Extension config options to be set at install time or via Broker startup:
| |||||||
B-13831 | Unix | UAGSRV | Provide the ability for Universal Extensions to detect and respond to Cancel commands issued from Universal Controller. This option provides the new UAG Server configuration option, EXTENSION_CANCEL_TIMEOUT. The ability to configure that value at install time and/or Universal Broker startup is also provided.
| |||||
B-13885 | z/OS | UBROKER | Suppress ICH408I messages in the RACF log when running the Broker with a user without BPX.SUPERUSER access. This message is an expected response to a check of authority level, but repeated checks result in several instances of the ICH408I message appear in the log. | |||||
D-10426 | z/OS | UBROKER | Fixes a problem that prevented UBROKER startup while loading the UNVACTRT SMF exit. | |||||
D-10470 | Linux PPC | All | Prevent a crash during OpenSSL random number generation seeding observed on RHEL8 on a PowerPC system. |
Universal Command
Anchor | ||||
---|---|---|---|---|
|
Change ID | Platforms | Component | Description |
---|---|---|---|
D-10727 | z/OS | UCMD | Fix an issue that prevented a z/OS UCMD Manager from performing a success network fault tolerant (NFT) recovery when SystemSSL was used. |
Anchor | ||||
---|---|---|---|---|
|
Change ID | Platforms | Component | Description |
---|---|---|---|
D-10726 | z/OS | UCMD | Fix a problem in which passwords that contain spaces are not parsed correctly. |
Anchor | ||||
---|---|---|---|---|
|
Change ID | Platforms | Component | Description | |||||
---|---|---|---|---|---|---|---|---|
D-10794 | Unix (Solaris Only) | UCMD | Improve support for Unicode characters in passwords that reside in a Universal Encrypted file.
|
Anchor | ||||
---|---|---|---|---|
|
Change ID | Platforms | Component | Description |
---|---|---|---|
D-10435 | Windows | UCMD | Issue a configuration error when the DES-CBC-SHA cipher is specified from a Windows component. This cipher was deprecated in a previous release and since then, Agent server components would fail to negotiate a session with a manager component that only requested the DES-CBC-SHA cipher. However, the value itself should have been flagged during configuration processing and not presented to the server. |
D-10470 | Linux PPC | All | Prevent a crash during OpenSSL random number generation seeding observed on RHEL8 on a PowerPC system. |
D-10474 | z/OS | UCMD
| Prevent a situation in which command line parameters provided via a SYSIN statement were ignored if they followed a password on the same line. For example, given the following:
The -level option would be ignored unless moved to a separate line: |
Universal Connector for PeopleSoft
Anchor | ||||
---|---|---|---|---|
|
Change ID | Platforms | Component | Description |
---|
D- |
11238 |
Unix |
Windows | UFTP |
Add explicit FTPS (FTPES) support to UFTP.
Enables transfers using TLS/SSL over connection to standard FTP port 21, provided the FTP server supports it.
To request TLS/SSL from a Remote File Transfer or Remote File Monitor task, select the FTP protocol and prepend ftpes:// to the FTP server host name or IP address (e.g., ftpes://somehost). If the FTP server has enabled TLS/SSL support, the connection will proceed using encrypted communication. If TLS/SSL support is NOT enabled, a plain text session/transfer is done.
The UFTP ENABLE_SSL configuration option (default:no) is provided to always request a TLS/SSL session, eliminating the need to specify the ftpes:// prefix.
The UFTP AUTHENTICATE_PEER configuration option (default: no) is provided to control FTP server certificate authentication. When set to “yes”, the UFTP CA_CERTIFICATES configuration option must specify a CA certificate that can authenticate the FTP server’s certificate.
B-13316
Unix (except HP-UX)
Windows
UFTP
Update SSH Key Exchange and Cipher support for SFTP transfers.
Provides better compatibility with default OpenSSH configurations, by making the following changes to supported key exchange methods:
Added:
- ecdh-sha2-nistp521
- ecdh-sha2-nistp384
- ecdh-sha2-nistp256
- curve25519-sha26
Removed:
- diffie-helman-group-exchange-sha
- diffie-helman-group14-sha1
- diffie-helman-group1-sha1
The diffie-helman-group-exchange-sha256 key exchange method was left unchanged.
Support for the following ciphers was added:
- AES-256-CTR
- AES-192-CTR
- AES-128-CTR
Support for the following ciphers was left unchanged:
- AES-256-GCM
- AES-128-GCM
- AES-256-CBC
- AES-192-CBC
- AES-128-CBC
D-10435
Windows
UCMD
UCTL
UDM
UFTP
Issue a configuration error when the DES-CBC-SHA cipher is specified from a Windows component.
This cipher was deprecated in a previous release and since then, Agent server components would fail to negotiate a session with a manager component that only requested the DES-CBC-SHA cipher. However, the value itself should have been flagged during configuration processing and not presented to the server.
D-10470
Linux PPC
All
Prevent a crash during OpenSSL random number generation seeding observed on RHEL8 on a PowerPC system.
D-10474
z/OS
UCMD
UCTL
UDM
UEM
UFTP
Prevent a situation in which command line parameters provided via a SYSIN statement were ignored if they followed a password on the same line.
For example, given the following:
//SYSIN DD *
-userid uid -pwd password -level info
/*
//SYSIN DD *
-userid uid -pwd password
-level info
/*
Installation Changes
...
Change ID
Platforms
Component
Description
B-13820
Unix
Windows
UAGSRV
UBROKER
PKG
Allow the following Universal Extension config options to be set at install time or via Broker startup:
- EXTENSION_ACCEPT_LIST
- EXTENSION_DEPLOY_ON_REGISTRATION
- EXTENSION_PYTHON_LIST
Note | ||
---|---|---|
| ||
The HP-UX and z/OS agents do not provide the Universal Extension. |
D-10189
z/OS
PKG
UPPS | Update the libssh2 library used by Universal Agent components from 1.9.0 to 1.10.0. |
Universal Connector for SAP
Anchor | ||||
---|---|---|---|---|
|
Change ID | Platforms | Component | Description |
---|---|---|---|
D-10316 | Unix (except Solaris Intel) Windows | USAP | Fix an issue that requires SAP credentials to be specified when using X.509 certificate authentication. It is now possible to execute USAP using only an X.509 certificate. |
Anchor | ||||
---|---|---|---|---|
|
Change ID | Platforms | Component | Description |
---|---|---|---|
D-10862 | Unix (except Solaris Intel) | USAP | Fixes a problem introduced in the UA 7.1.0.1 release by D-10828, where model jobs whose jobnames were less than 32 characters would fail upon execution. With this fix, model jobs with jobnames less than or equal to 32 characters will execute successfully. |
Anchor | ||||
---|---|---|---|---|
|
Change ID | Platforms | Component | Description | |||||
---|---|---|---|---|---|---|---|---|
D-10795 | Unix (except HP-UX and Solaris Intel) | USAP | Prevent a failure for the Display Event History command when the timestamp exceeds 8 characters.
| |||||
D-10828 | Unix (except HP-UX and Solaris Intel) | USAP | Prevent a failure when a model job uses a jobname of exactly 32 characters in length.
|
Anchor | ||||
---|---|---|---|---|
|
Change ID | Platforms | Component | Description | |||||
---|---|---|---|---|---|---|---|---|
B-12809 | All | USAP | Update USAP to support the RSPARAMSL_255 data type for variants. The following USAP operations may now take advantage of this change:
These changes are supported for XBP 2.0 and XBP 3.0, but full 255-character support ultimately depends on the SAP function module implementation.
|
Universal Control
Anchor | ||||
---|---|---|---|---|
|
Change ID | Platforms | Component | Description | |||||
---|---|---|---|---|---|---|---|---|
D-10794 | Unix (Solaris Only) | UCMD | Improve support for Unicode characters in passwords that reside in a Universal Encrypted file.
|
Anchor | ||||
---|---|---|---|---|
|
Change ID | Platforms | Component | Description |
---|---|---|---|
D-10435 | Windows | UCMD | Issue a configuration error when the DES-CBC-SHA cipher is specified from a Windows component. This cipher was deprecated in a previous release and since then, Agent server components would fail to negotiate a session with a manager component that only requested the DES-CBC-SHA cipher. However, the value itself should have been flagged during configuration processing and not presented to the server. |
D-10470 | Linux PPC | All | Prevent a crash during OpenSSL random number generation seeding observed on RHEL8 on a PowerPC system. |
D-10474 | z/OS | UCMD
| Prevent a situation in which command line parameters provided via a SYSIN statement were ignored if they followed a password on the same line. For example, given the following:
The -level option would be ignored unless moved to a separate line: |
Universal Data Mover
Anchor | ||||
---|---|---|---|---|
|
Change ID | Platforms | Component | Description |
---|---|---|---|
D-10510 | z/OS | UDM UDMSRV | Eliminate all "benign" ICH408I message occurrences from the RACF log. These messages would sometimes appear during UDM's processing, when checking for access to resources it required. UDM would silently ignore the situation that caused these messages, using an alternate execution path. This change will ensure that UDM takes no action that could result in these messages. |
Anchor | ||||
---|---|---|---|---|
|
Change ID | Platforms | Component | Description | ||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
D-10718 | All | UDM | Prevent an authentication error for a File Transfer task when the following conditions exist:
For example:
Starting with UA 7.0.0.0, this will cause the resolved $(ops_primary_cred_pwd) value in the
| ||||||||||||
D-10794 | Unix (Solaris Only) | UCMD | Improve support for Unicode characters in passwords that reside in a Universal Encrypted file.
|
Anchor | ||||
---|---|---|---|---|
|
Change ID | Platforms | Component | Description |
---|---|---|---|
D-08997 | z/OS | UDM | Prevent a S0C4 when executing transfers of UTF16-encoded datasets. |
D-09852 | Unix | UDM | Ensure that the message that shows the result of the CD command displays correctly. This issue was most visible on zOS, but could occur on any Linux/Unix system whose default locale is not UTF8. |
D-10210 | All | UDM | Scrubs any password specified with the OPEN statement from trace file output. |
D-10256 | All | UDM | Fixes a crash that could occur if the UDM Manager message level was set to “trace” from the command line. |
D-10435 | Windows | UCMD | Issue a configuration error when the DES-CBC-SHA cipher is specified from a Windows component. This cipher was deprecated in a previous release and since then, Agent server components would fail to negotiate a session with a manager component that only requested the DES-CBC-SHA cipher. However, the value itself should have been flagged during configuration processing and not presented to the server. |
D-10470 | Linux PPC | All | Prevent a crash during OpenSSL random number generation seeding observed on RHEL8 on a PowerPC system. |
D-10474 | z/OS | UCMD
| Prevent a situation in which command line parameters provided via a SYSIN statement were ignored if they followed a password on the same line. For example, given the following:
The -level option would be ignored unless moved to a separate line: |
Universal Event Monitor
Anchor | ||||
---|---|---|---|---|
|
Change ID | Platforms | Component | Description | |||||
---|---|---|---|---|---|---|---|---|
D-10794 | Unix (Solaris Only) | UCMD | Improve support for Unicode characters in passwords that reside in a Universal Encrypted file.
|
Anchor | ||||
---|---|---|---|---|
|
Change ID | Platforms | Component | Description |
---|---|---|---|
D-10470 | Linux PPC | All | Prevent a crash during OpenSSL random number generation seeding observed on RHEL8 on a PowerPC system. |
D-10474 | z/OS | UCMD
| Prevent a situation in which command line parameters provided via a SYSIN statement were ignored if they followed a password on the same line. For example, given the following:
The -level option would be ignored unless moved to a separate line: |
Universal Extension
Anchor | ||||
---|---|---|---|---|
|
Change ID | Platforms | Component | Description |
---|---|---|---|
D-11084 | Unix (except HP-UX) | UAGSRV UEXT | Fix a performance issue that may occur when a Universal Extension task's output is returned via EXTENTION OUTPUT. |
D-11108 | Unix (except HP-UX) Windows | UAGSRV UEXT | Correct the spelling of a credential's passphrase when referenced by a Universal Extension task. The previous spelling pasphrase is now corrected to passphrase. For backward compatibility, pasphrase is still accepted, but new extensions should use the correct spelling as this backward compatibility could be lost in future releases. |
Anchor | ||||
---|---|---|---|---|
|
Change ID | Platforms | Component | Description | |||||
---|---|---|---|---|---|---|---|---|
B-13819 | Unix | UEXT | Provide the UAGSRV EXTENSION_PYTHON_LIST configuration option to extend the list of locations searched for Python instances that may be used by Universal Extension tasks.
| |||||
B-13821 | Unix | UEXT | Update the values supported via the requires_python declaration of a Universal Extension implementation as follows:
| |||||
B-13822 | Windows | UEXT | Allow usermode installs to discover the Python distribution provided by a system mode-installed Agent.
| |||||
B-13831 | Unix | UAGSRV | Provide the ability for Universal Extensions to detect and respond to Cancel commands issued from Universal Controller. This option provides the new UAG Server configuration option, EXTENSION_CANCEL_TIMEOUT. The ability to configure that value at install time and/or Universal Broker startup is also provided.
| |||||
B-13846 | Unix | UEXT | Allow Universal Extension tasks to accept authentication tokens (e.g., used for Web or cloud-based service authentication) from a Universal Controller resolvable credential object.
| |||||
B-13860 | Unix | UEXT | Refactor the Universal Extension logging API so that it is no longer necessary to instantiate an ExtensionLogger object. Logging methods can now be accessed using the following import:
Logging methods can be invoked using calls such as either:
| |||||
B-13908 | Unix | UEXT | Add the ability to execute Dynamic Commands within a Universal Extension task without launching a separate process (i.e., support “in-process” Dynamic Command execution).
| |||||
B-13989 | Windows | UEXT | Provide a new utility to assist with Universal Extension development that provides a command line interface to Universal Extension task APIs offered by Universal Controller. Please see the Universal Extension development documentation for information on this new “uip” utility.
| |||||
B-14049 | Unix | UAGSRV | Ensure that any instances of a password exposed by a Universal Extension task are scrubbed from the UAG Server cache files. | |||||
B-14255 | Windows | UEXT | Extend the uip utility delivered by B-13989 with an init command that can be used to initialize a working directory (e.g., a local Git repository) for Universal Extension development. Please see the Universal Extension development documentation for information on the new “uip” utility.
|
Universal FTP Client
Anchor | ||||
---|---|---|---|---|
|
Change ID | Platforms | Component | Description |
---|---|---|---|
D-11166 | All | UFTP | Fixes an issue that causes UFTP to fail when multiple files are transferred to a remote directory path that contains spaces. |
D-11238 | Unix | UFTP UPPS | Update the libssh2 library used by Universal Agent components from 1.9.0 to 1.10.0. |
Anchor | ||||
---|---|---|---|---|
|
Change ID | Platforms | Component | Description | |||||
---|---|---|---|---|---|---|---|---|
D-10794 | Unix (Solaris Only) | UCMD | Improve support for Unicode characters in passwords that reside in a Universal Encrypted file.
|
Anchor | ||||
---|---|---|---|---|
|
Change ID | Platforms | Component | Description |
---|---|---|---|
B-10691 | All | UAGSRV | Add explicit FTPS (FTPES) support to UFTP. Enables transfers using TLS/SSL over connection to standard FTP port 21, provided the FTP server supports it. To request TLS/SSL from a Remote File Transfer or Remote File Monitor task, select the FTP protocol and prepend ftpes:// to the FTP server host name or IP address (e.g., ftpes://somehost). If the FTP server has enabled TLS/SSL support, the connection will proceed using encrypted communication. If TLS/SSL support is NOT enabled, a plain text session/transfer is done. The UFTP ENABLE_SSL configuration option (default:no) is provided to always request a TLS/SSL session, eliminating the need to specify the ftpes:// prefix. The UFTP AUTHENTICATE_PEER configuration option (default: no) is provided to control FTP server certificate authentication. When set to “yes”, the UFTP CA_CERTIFICATES configuration option must specify a CA certificate that can authenticate the FTP server’s certificate. |
B-13316 | Unix (except HP-UX) | UFTP | Update SSH Key Exchange and Cipher support for SFTP transfers. Provides better compatibility with default OpenSSH configurations, by making the following changes to supported key exchange methods: Added:
Removed:
The diffie-helman-group-exchange-sha256 key exchange method was left unchanged. Support for the following ciphers was added:
Support for the following ciphers was left unchanged:
|
D-10435 | Windows | UCMD | Issue a configuration error when the DES-CBC-SHA cipher is specified from a Windows component. This cipher was deprecated in a previous release and since then, Agent server components would fail to negotiate a session with a manager component that only requested the DES-CBC-SHA cipher. However, the value itself should have been flagged during configuration processing and not presented to the server. |
D-10470 | Linux PPC | All | Prevent a crash during OpenSSL random number generation seeding observed on RHEL8 on a PowerPC system. |
D-10474 | z/OS | UCMD
| Prevent a situation in which command line parameters provided via a SYSIN statement were ignored if they followed a password on the same line. For example, given the following:
The -level option would be ignored unless moved to a separate line: |
Universal Message Service (OMS)
Anchor | ||||
---|---|---|---|---|
|
Change ID | Platforms | Component | Description | |||||
---|---|---|---|---|---|---|---|---|
B-13931 | Unix | OMS | Add a service timeout implementation to the OMS Java Client to enable detection of connection issues without waiting for a TCP keepalive interval to elapse.
| |||||
D-10371 | Unix | OMSSRV | Prevents re-delivery of OMS messages following automatic recovery executed against a corrupted, truncated data file. |
Installation Changes
Anchor | ||||
---|---|---|---|---|
|
Change ID | Platforms | Component | Description | |||||
---|---|---|---|---|---|---|---|---|
B-13820 | Unix | UAGSRV | Allow the following Universal Extension config options to be set at install time or via Broker startup:
| |||||
B-13831 | Unix | UAGSRV | Provide the ability for Universal Extensions to detect and respond to Cancel commands issued from Universal Controller. This option provides the new UAG Server configuration option, EXTENSION_CANCEL_TIMEOUT. The ability to configure that value at install time and/or Universal Broker startup is also provided.
| |||||
D-10189 | z/OS | PKG | Fix a problem that prevented the installation of hlq.SUNVSAMP(UBRDBSPZ). |
Python Distribution for Universal Agent
Anchor | ||||
---|---|---|---|---|
|
Change ID | Platforms | Component | Description |
---|---|---|---|
D-11212 | Unix | Python | Update the version of Python distributed with Universal Agent from 3.7.6 to 3.7.16. |
Anchor | ||||
---|---|---|---|---|
|
Change ID | Platforms | Component | Description |
---|---|---|---|
D-10918 | Unix (AIX, Linux Ubuntu, Linux PPC, Linux s390x) | Python | Update the Universal Agent Python distributions to provide the built-in _sqlite3 Python module. |