Red Hat JBoss Operations Network 3.3 Update 06 (3.3.6) Release Notes
JBoss ON updates are cumulative. You only need to apply the latest update to receive all fixes from the previous updates for the same version.
A server update contains one or more updated server or agent or storage node components which can be applied to a JBoss ON server or agent directory.
If any agents have been configured, or will be configured, for secure socket (SSL/TLS) communication for server-to-agent communication, applying this update could result in the agent’s configuration becoming invalid and therefore the agent will no longer be able to start or update itself.
This issue will impact any agent that is configured to use sslsocket for server and agent communication which does not explicitly set the rhq.communications.connector.security.secure-socket-protocol configuration property to a valid value such as TLS.
If you have configured your JBoss ON system to use secure sockets for communication between JBoss ON servers and agents, or if you are planning to configure your system to use secure sockets, or if you are not certain that you are not using secure sockets, DO NOT APPLY this update. Instead, please wait for JBoss ON 3.3 Update 07.
For more information regarding this issue or to obtain a workaround that can be manually applied to each 3.3 Update 06 agent, see JBoss ON agent 3.3 Update-06 fails startup with SSLContext not available.
Changes and Fixes
This update includes all fixes and changes from Red Hat JBoss Operations Network 3.3 Update 05.
Security related issues
This update includes fixes for the following security related issues:
| ID | Component | Summary |
|---|---|---|
| CVE-2015-5220 | Server | httpserver: OOME from EAP 6 http management console [jon-3.3.x] |
| CVE-2016-0800 | Server | core server: SSL/TLS: Cross-protocol attack on TLS using SSLv2 (DROWN) [jon-3.3.x] |
General bug fixes or changes
This update includes the following bug fixes or changes:
| ID | Component | Summary |
|---|---|---|
| This content is not included.BZ-1312847 | Server | Report "Suspect Metrics" is empty for user in "All Resources" role |
| This content is not included.BZ-1218129 | Server | Calltime metrics sort does not work properly [details] |
| This content is not included.BZ-1299448 | Server | Storage node heap size cannot be changed using JBoss ON UI [details] |
| This content is not included.BZ-1297702 | Server | Deletion of partition events in JBoss ON results in OutOfMemoryError when there is a million or more partition events to be deleted [details] |
| This content is not included.BZ-1288455 | Server | The data aggregation job in JBoss ON stopped due to unreachable storage node [details] |
| This content is not included.BZ-1328316 | Server | Required fields in map-property does not prevent finishing the Resource Create Wizard |
| This content is not included.BZ-1272473 | Server | Confusing error shown in UI wizard when creating big bundle on oracle and hitting ORA-01691: unable to extend lob segment |
| This content is not included.BZ-1261890 | Server | Metrics are not properly updated/refreshed in JON UI |
| This content is not included.BZ-1317993 | Server | Application fails to deploy on EAP7 when the rt filter is installed |
| This content is not included.BZ-1298144 | Server | Missing "Event Detection" option from the drop down list when trying to create an alert using alert template [details] |
| This content is not included.BZ-1290436 | Server | Invalid properties PARTITION_EVENT_PURGE and RESOURCE_CONFIG_HISTORY_PURGE appear on system setting page and prevent config from being saved [details] |
| This content is not included.BZ-1264001 | Server | JON UI fails to load metrics with the message "Cannot load metrics" while plugin container is restarting |
| This content is not included.BZ-1308947 | Server | Group Operation sequential execution list limited to 50 members |
| This content is not included.BZ-1320478 | Server | NPE in server.log Error persisting trait data |
| This content is not included.BZ-1311140 | Server | EAP7 - missing rt filter modules for eap7 |
| This content is not included.BZ-1212495 | Server | Solaris10-Error in server log after Generate JDR Report operation |
| This content is not included.BZ-1257741 | Server | First attempt of saving SNMP alert configurations is failed if UDP transport protocol is used |
| This content is not included.BZ-1295863 | Server | The number of resources in All Groups/Compatible Groups page is not correct all the time |
| This content is not included.BZ-1206485 | Server | JON favicon is not used |
| This content is not included.BZ-1211341 | Server | Browser session timeouts on pages where autorefresh is enabled |
| This content is not included.BZ-1323325 | Server | rhqctl status can report storage node as ?running or ?down if locale does not support extended character sets [details] |
| This content is not included.BZ-1186300 | Server | java.lang.IllegalArgumentException:Invalid column widths (more widths than columns) [58%, *] error thrown in JBoss ON UI [details] |
| This content is not included.BZ-1207232 | Server | Search bar placed over the main menu on navigating to Dashboards |
| This content is not included.BZ-1302322 | Agent | Secure server-agent communication using sslsocket incorrectly requires a truststore password |
| This content is not included.BZ-1266356 | Plug-ins | Commons HttpClient can hang during SSLHandshake |
| This content is not included.BZ-1205429 | Plug-ins | Platform's file system resources are blacklisted and all other child resources take 5 minutes to discover if NFS mount exists to host that is blocking RPC port [details] |
| This content is not included.BZ-1213812 | Installer/Upgrade | After upgrade from JBoss ON 3.2 to 3.3, some rhq column families are unavailable and compaction operations fail [details] |
| This content is not included.BZ-1301575 | Installer/Upgrade | apply-updates.bat in jon-server-3.3-update-04.zip only works reliably in the USA |
| This content is not included.BZ-1341348 | Other | Remove Red Hat Access (RHA) integration from JBoss ON UI |
| This content is not included.BZ-1268329 | Provisioning/Bundles | The same user is able to upload bundle via 'Upload' but not via 'URL' |
| This content is not included.BZ-1306602 | Provisioning/Bundles | Uninventory of resource leaves orphaned content data in the database |
| This content is not included.BZ-1184000 | Provisioning/Bundles | Bundles missing from the left list / bundle navigation tree This content is not included.[details] |
| This content is not included.BZ-1232836 | Provisioning/Bundles | NoResultException in server.log when deploying from resource content for war type != File (Deployment:AS7) |
| This content is not included.BZ-1272358 | Provisioning/Bundles | When creating a big bundle via UI the wizard shows errors if user clicks Next button multiple times |
| This content is not included.BZ-1306231 | Remote Client API/CLI | Method SystemManager.setSystemSettings(settings) does not propagate LDAP changes into the RHQ Server's JAAS login modules [details] |
| This content is not included.BZ-1339301 | Remote Client API/CLI | REST fetch of groups doesn't scale [details] |
| This content is not included.BZ-1324828 | Remote Client API/CLI | pretty.print(null) fails |
| This content is not included.BZ-1309481 | Remote Client API/CLI | Remote API is missing ability to retrieve and revert historic plug-in and resource configuration [details] |
| This content is not included.BZ-1253647 | RPM | jboss-on-agent-init-ec2 requires old package |
Installation
The apply-updates utility included in the update archive will be used to update a JBoss ON server, agent, or storage node installation.
Updating a server and storage node
-
Shutdown the server and any other components controlled by the server's
rhqctlcommand. Other components would include the JBoss ON agent and storage node installed on the same host as the server. To shutdown all components, therhqctl stopcommand could be used. -
Make a backup of your existing server installation and your JBoss ON system's database.
-
Extract the server update archive to the host machine where the JBoss ON component to be updated is installed.
-
As the same user who starts the JBoss ON components being updated, execute the
apply-updatescommand passing in the path to RHQ_SERVER_HOME. For example:./apply-updates.sh /opt/jboss/on/jon-server-3.3.0.GAIf the target server directory includes a storage node installation, it will also be updated.
If the target server has an agent installed in the directory above RHQ_SERVER_HOME, the agent will also be updated. For example, the above command would have also applied an agent update to
/opt/jboss/on/rhq-agentif the agent was installed. -
Start the server and all of its components, such as the JBoss ON agent or storage node, normally.
If more than one server or storage node is running in a high availability (HA) configuration, repeat the above steps for each server and storage node.
NOTE: In some cases, the update may introduce property or configuration script file changes that cannot safely be applied to existing user modified property or configuration script files. In such cases a new base or default file is created, with a
.newfile name extension, alongside the existing or user modified file. For example:[jon-server-3.3.0.GA]$ ls bin/rhq-server.properties* rhq-server.properties rhq-server.properties.newIf the new or changed properties or configuration options are applicable to you, you will need to manually add or define them in their respective property or configuration file.
Updating a server or storage node that has not yet been installed
The update can be applied to a JBoss ON server or storage node prior to executing the rhqctl install or rhqctl upgrade command. This allows installer and upgrade specific fixes to be applied to the JBoss ON components prior to performing the installation.
-
Extract the JBoss ON server archive as instructed in the installation guide.
-
On the same host, extract the server update archive.
-
As the same user who will be starting the JBoss ON components, execute the
apply-updatescommand passing in the path to RHQ_SERVER_HOME. For example:./apply-updates.sh /opt/jboss/on/jon-server-3.3.0.GAIf the target server has an agent installed in the directory above RHQ_SERVER_HOME, the agent will also be updated. For example, the above command would have also applied an agent update to
/opt/jboss/on/rhq-agentif the agent had already been manually installed. -
Perform the server, storage node, or agent installation or upgrade as instructed in the installation guide.
NOTE: In some cases, the update may introduce property or configuration script file changes that cannot safely be applied to existing user modified property or configuration script files. In such cases a new base or default file is created, with a
.newfile name extension, alongside the existing or user modified file. For example:[jon-server-3.3.0.GA]$ ls bin/rhq-server.properties* rhq-server.properties rhq-server.properties.newIf the new or changed properties or configuration options are applicable to you, you will need to manually add or define them in their respective property or configuration file.
Updating an agent
NOTE: JBoss ON agents installed via RPM can not be updated using this process. Instead, update RPM based installations using your system's update manager.
These steps are only necessary if the agent's auto-update feature is disabled or if you want to manually update an existing agent.
Before proceeding, you should first apply the update to all servers in the JBoss ON system.
-
Shutdown the agent.
-
Make a backup of your existing agent installation.
-
Extract the server update archive to the host machine where the JBoss ON agent to be updated is installed.
-
As the same user who starts the JBoss ON agent being updated, execute the
apply-updatescommand passing in the path to RHQ_AGENT_HOME. For example:./apply-updates.sh /opt/jboss/on/rhq-agent -
Start the agent normally.
Repeat the above steps for any agent in the system that must be updated.
NOTE: In some cases, the update may introduce property or configuration script file changes that cannot safely be applied to existing user modified property or configuration script files. In such cases a new base or default file is created, with a
.newfile name extension, alongside the existing or user modified file. For example:[rhq-agent]$ ls bin/rhq-agent-env.* rhq-agent-env.sh rhq-agent-env.sh.newIf the new or changed properties or configuration options are applicable to you, you will need to manually add or define them in their respective property or configuration file.