聚沙成塔-小哈的记事薄

This note contains links to WebSphere Application Server technical support documents and information that can help you obtain value from your software. It is intended to help you to be proactive in your support and administration of WebSphere Application Server.

In the spotlight
1. Possible security exposure with XML digital signature with IBM WebSphere Application Server (PK80596 and PK80627)
Possible security exposure with XML digital signature
http://www.ibm.com/support/docview.wss?acss=was091709&rs=180&uid=swg21384925
2. Security Exposure: WebSphere Application Server with JAX-RPC WS-Security may improperly validate UsernameTokens (PK75992)
JAX-RPC WS-Security may improperly validate UsernameTokens (PK75992)
http://www.ibm.com/support/docview.wss?acss=was091709&rs=180&uid=swg21367223
3. Researching Known Vulnerabilities Resulting from a Scan for IBM HTTP Server
Concerns over security vulnerabilities for web servers. The concern may be the result of a recent security scan or PCI scan.
http://www.ibm.com/support/docview.wss?acss=was091709&rs=180&uid=swg21358695
4. Webcast replay: Response Time Analysis for Databases and Web Services in WebSphere Application Server
Through experience working with customer performance problems with databases and web services, this WebSphere Support Technical Exchange session provides a method of analysis of the response times for database statement execution and for web services calls from the consumer to the provider.
http://www.ibm.com/support/docview.wss?acss=was091709&rs=180&uid=swg27016472
5. Webcast replay: Introduction to the Java Consumability Tools and Java Guided Troubleshooting
Over the last 18 months a number of tools and capabilities have been released to simplify the process of monitoring and debugging Java applications. This WebSphere Support Technical Exchange is designed to introduce the tools, as well as the Java Guided Troubleshooting information which tells the users when and how to use them.
http://www.ibm.com/support/docview.wss?acss=was091709&rs=180&uid=swg27016328
6. The Support Authority: Introducing the new IBM Support Portal
The IBM® Support Portal is the latest addition to the portfolio of self-help tools for IBM software. With its new look and feel, you get an unprecedented and consistent support interface for all IBM products — which you can customize to suit your specific support needs. This article introduces you to all its new features, plus gives you the latest IBM Support news.
http://www.ibm.com/developerworks/websphere/techjournal/0907_supauth/0907_supauth.html?acss=was091709
7. The Support Authority: What’s new in IBM Support Assistant V4.1
IBM Support Assistant is a free serviceability workbench provided by IBM to facilitate self-help diagnostics for software problems. This article provides an overview of the newest features included in the IBM Support Assistant Workbench and Agent V4.1 software offerings.
http://www.ibm.com/developerworks/websphere/techjournal/0906_supauth/0906_supauth.html?acss=was091709
8. Common questions about the web server Plug-in
In the web server Plug-in, what do the following options mean and what are the recommended settings for these options? LoadBalanceWeight; MaxConnections; ConnectTimeout; ServerIOTimeout
What affect does Session Affinity have?
How are connections handled during Plug-in Fail-over?
Are more than one instance of the plugin loaded by the web server? If so, do the plugin instances share information with each other?
http://www.ibm.com/support/docview.wss?acss=was091709&rs=180&uid=swg21318463
9. Configuring the WebSphere Application Server Web server plug-in for multiple Web sites
Internet Information Services 6.0 (IIS), which ships with Microsoft Windows 2003, allows multiple Web sites to be run within a single IIS server. Given this ability, can the WebSphere Application Server Web server plug-in be used with multiple IIS Web sites?
http://www.ibm.com/support/docview.wss?acss=was091709&rs=180&uid=swg21328944
10. PK90452: Session affinity fails when using URL rewrite and HTTP plug-in
Session affinity using URL rewrite fails when plug-in fails to correctly extract cloneID from the URL.
http://www.ibm.com/support/docview.wss?acss=was091709&rs=180&uid=swg1PK90452
11. Tuning IBM HTTP Server to maximize the number of client connections to WebSphere Application Server
Out of the box, IBM HTTP Server supports a maximum of 600 concurrent connections. Performance will suffer if load dictates more concurrent connections, as incoming requests will be queued up by the host operating system. You can increase the number of maximum connections allowed by IBM HTTP Server by editing the httpd.conf file.
http://www.ibm.com/support/docview.wss?acss=was091709&rs=177&uid=swg21167658
12. Intermittent delay returning response to a client request when ServerIOTimeout is set to non-zero value
When customer uses a non-zero value for the ServerIOTimeout option, responses to client requests are intermittently taking an excessive amout of time to be returned to the client. In fact the responses are being returned when the ServerIOTimeout value pops.
• PK89949 (Multi-platforms):
  http://www.ibm.com/support/docview.wss?acss=was091709&rs=180&uid=swg1PK89949
• PK82147 (z/OS):
  http://www.ibm.com/support/docview.wss?acss=was091709&rs=180&uid=swg1PK82147

Plan

1. Recommended fixes for WebSphere Application server
A comprehensive list of recommended, generally available (GA) fixes for IBM WebSphere Application Server releases.
http://www.ibm.com/support/docview.wss?acss=was091709&rs=180&uid=swg27004980
2. Latest fix packs for WebSphere Application Server
A list of the latest available fix packs for IBM WebSphere Application Server releases (Base, Express, Network Deployment).
http://www.ibm.com/support/docview.wss?acss=was091709&rs=180&uid=swg27009661
3. Detailed system requirements for WebSphere Application Server
Identifies the supported software options by operating system for the WebSphere Application Server product.
http://www.ibm.com/support/docview.wss?acss=was091709&rs=180&uid=swg27006921

Education

1. Technical Exchange Webcasts
Take full advantage of your product. Join us as technical experts share their knowledge and then answer your questions. Visit this site often to see upcoming topics.
http://www.ibm.com/software/websphere/support/supp_tech.html?acss=was091709
2. Self-Assist Resources and Tools
Find out how online software support tools and resources can save you time, keep you informed, provide training, and help streamline your support experience!
http://www.ibm.com/software/websphere/support/d2w.html?acss=was091709
3. developerWorks WebSphere Application Server zone
Access the developerWorks page for downloads, learning resources and more.
http://www.ibm.com/developerworks/websphere/zones/was/?ca=dnb-was091709

        上篇文章中安装了Websphere单机环境，那么接下来第一件事不是配置WAS，不是发布应用，而是要打上补丁（特别是新环境）。如果是老系统迁移的话，可以不用打最新的补丁，只要让现在的平台版本和之前运行正常平台版本一致即可，以免引入新的问题。

         首先去http://www-933.ibm.com/support/fixcentral/找到自己需要的补丁，Production Group为Websphere，Product为WAS，指定版本号和平台，搜索出Fixpack。

         这里以6.1.0.23: WebSphere Application Server V6.1 Fix Pack 23 for Windows为例讲述打补丁步骤。

         首先看到一个Update Installer 7.0 for WebSphere Software for Windows，这个是补丁升级程序，从6.1之后所有的补丁（包括7.0）都要考它来升级。安装CD2中会带有这个程序，但是那个版本太低对6.1.0.6之后的补丁无法直接使用。所以先要安装这个打补丁程序。

          Websphere的补丁有WAS—IHS—PlugIn和SDK，根据你的安装拓扑和需要可以分别打，但是一般全都保持一致的版本。下载的pak文件放到Update Installer安装后的maintenance目录下。

          之后运行update installer即可，选定安装补丁的目录：AppServer对应WAS补丁，Http目录对于ihs补丁，plugins目录对应plugins补丁。每次都会自动找到相应的两个pak文件（一个程序的，一个JDK的）。全部安装完，那就OK了，在bin目录下执行versioninfo看看吧。

          WAS6.0的时候打补丁没有那么方便，先要打6.0.2的补丁，顺序为WAS—IHS—PlugIn，然后再打6.0.2之后的小补丁，也是按照WAS—IHS—PlugIn的顺序来。而且那时候还没有UpdateInstaller，每个补丁都需要各自独立安装。不过你可以把对应的PAK文件找出来，拷贝到UpdateInstaller的maintenance下去，节省一点体力活。