GridServer 7.1.0 Hotfix08 has been released

GridServer 7.1.0 Hotfix08 has been released

book

Article ID: KB0138440

calendar_today

Updated On:

Products Versions
TIBCO DataSynapse GridServer 7.1.0

Description

GridServer 7.1.0 Hotfix08 has been released. Here are the release notes:
================================================================================
Introduction
 
Hotfixes are cumulative.
 
================================================================================
Affected Components for 7.1.0_hotfix08

The following components are updated by this hotfix:
.NET Specific
Admin Interface
Batch
C++ Specific
Database    
Driver
Drivers-All
Engine
Engine Daemon
Examples
Java Core
Java Specific
Manager
Python
REST API
Security
Services
Tomcat

================================================================================
Closed Issues in 7.1.0_hotfix08 (This Release)

.NET Specific    
GS-19663    
The two thread-safety related defects in BrokerSpanningServiceImpl are fixed. These defects triggered during
MakeDirectRequestServiceEx operations causing grid sessions to fail.

GS-19501    
The System.NullReferenceException, which occurred when the .NET 8 driver lost its connection to the Broker Spanning Service, has been resolved.

GS-19289/GS-17783    
Microsoft .NET Core Runtime version is upgraded to .NET 8 to maintain system security and compliance. The artifacts with naming convention .NET5 refer to .NET8.

GS-19223/GS-19222    
When migrating from .NET Framework 4.8 to .NET 8.0, an intermittent System.Reflection.TargetException error is
encountered. This exception occurs when switching services on the engine utilizing the .NET 8 bridge leading to
task failures. The resolution for this issue prevents task failures during service switching.

Admin Interface    
GS-18961    
A new global action, "Cancel all tasks on the page," to the Task Admin Page has been introduced. This bulk operation cancels 
all uncompleted tasks on the current view simultaneously.

Batch    
GS-15227
Support for the pipe symbol (|) within batch commands has been added. The system now passes commands as a string array to the Java Process Exec command. 
Commands with pipe symbols must be specified in a string array format and prefixed with /bin/sh;-c; for shell commands.
Example: '/bin/sh;-c;df -Pl . | tail -n1'

C++ Specific    
GS-19521
C++ Driver crash caused by a lack of robust exception handling is resolved. Implemented improved logic for onUnknownException 
to ensure graceful failure rather than cascading unknown exceptions and driver termination.

GS-19486    
C++ zlib 1.2.11 DLLs on Windows are recompiled and re-linked to properly embed the MSVC runtime. This statically links 
the Visual C++ runtime, removing the external dependency on MSVCR90.dll and addressing buggy inline assembly implementation.

GS-19363    
An issue where Grid Cache drivers froze on syscalls causing 100% CPU utilization is fixed.

GS-19267    
Support for GCC 11.5 for 64-bit systems is being added.

GS-19173    
The Intermittent Task Deserialization failure for the encrypted payload is resolved.

GS-18797    
Fixed a C++ driver crash caused by providing an incorrect username or password in the driver.properties file. 

Database    
GS-19419    
Migrated the functionality to update reporting database user credentials and connection strings from the SOAP API to a dedicated REST API.

GS-19763
Support has been added for PostgreSQL 17 as a platform for the Reporting Database.

Driver    
GS-18921    
Added Netty-based HTTP File Server support for JAVA Driver.
Edit your application driver.properties file and set the following value to use Netty-based HTTP File Server:                   
DSWebserverType=netty
Note:
1)Make sure to call DriverManager.disconnect() to release your resources. If you skip this, the Netty HTTP File Server won't be 
able to shut down properly.
2)TLSEnabled is not supported for Netty File Server.

GS-18807    
Implemented Internal File Server to have HTTP(S) protocol with Server side and Client side authentication, File Server URL can be formed using Hostname or IP address.
This is configurable at both Driver and Engine end.

Supported Drivers - Java.

To Use this Functionality :
The steps to configure Internal File Server with HTTPS (SSL) remain the same.(Setting the property DSDDTTLSEnabled - refer GS-18202 jira fixed in GS 7.1.0_hotfix05).

A new property DSDDTTLSHostnameURL controls whether the URL uses a hostname (True) or an IP address (False). This only applies when launched using HTTPS (SSL). 
Default is True (Hostname).

A. Driver End (Using API):

Java:

DriverManager.setProperty(DriverManager.FILESERVER_TLS_ENABLED_URL, "true"); // or "false"

B. Driver End (Using driver.properties):

Properties:

DSDDTTLSHostnameURL=true

C. Engine End: Configured via Grid Components > Engines > Engine Configuration > File Server > File Server TLSEnabled URL.

Note:
1) Although the HTTPS File Server is supported by the Engine and the Java, C++, and .NET drivers, the generation of URLs using an IP address is exclusively implemented
for the Java driver and 64-bit Engines, while the Hostname is utilized for all other supported drivers, 32-bit Engines, and the Linpack Test.
2) Certificates placed at Engine and Driver machines must have the respective machine's Private IP address included in SAN.

The following tables illustrate the behavior of the Internal File Server based on the DSDDTTLSEnabled and DSDDTTLSHostnameURL property set at both the Driver and Engine end.
+-------------------------+----------------------------+------------------------------------------------+
| DSDDTTLSEnabled         | DSDDTTLSHostnameURL        | Internal File Server launched                  |
+-------------------------+----------------------------+------------------------------------------------+
| False                      | False                        | Using HTTP                                     |
+-------------------------+----------------------------+------------------------------------------------+
| False                   | True                       | Using HTTP                                     |
+-------------------------+----------------------------+------------------------------------------------+
| True                    | False                         | Using HTTPS with URL launched using IP address |
+-------------------------+----------------------------+------------------------------------------------+
| True                    | True                         | Using HTTPS with URL launched using Hostname   |
+-------------------------+-----------------------------------------------------------------------------+


Upgrade Considerations :
If you upgrade TIBCO GridServer, you must manually perform the following steps to update the configuration files:
> Update the configuration files Config.xml.unix and Config.xml.win32 located in DS_DATA/conf. Add the following entry within the <FILE_SERVER> section:
<DDTTLSHostnameURL VALUE="true" TYPE="boolean" JVM_ARG="DSDDTTLSHostnameURL" />
> Manually update the driver.properties file found under DS_DATA/driverInstall to include the property details if necessary.

GS-17346    
GridServer now supports GCC 93, exclusively for 64-bit environments.

Drivers-All    
GS-18661    
The Java Driver will now stop initialization (rather than continuing) if the Internal File Server fails to launch. This ensures reliable 
startup behavior and prevents the driver from proceeding with an uninitialized File Server.

Few scenarios for Internal FileServer failure with ssl Manager :
+-----------------+------------------+-----------------+-----------------------------------------------------+
| Manager         | File Server      | Certs           | Explanation                                         |
+-----------------+------------------+-----------------+-----------------------------------------------------+
| ssl              | HTTP              | ssl.keystore    | if certificate is missing/incorrect                 |
|                 |                  |                 | Driver attempts to login and fails with below error |
|                  |                     |                   |                                                     |
|                  |                     |                   | [LoginPlugin] Can't login to PrivateBrokerConnection|
|                  |                     |                   | :javax.net.ssl.SSLHandshakeException: sun.security. |
|                  |                     |                   | validator.ValidatorException                        |
+-----------------+------------------+-----------------+-----------------------------------------------------+
| ssl             | HTTPS            | ssl.keystore    | - if both certificates not present, File Server     |
|                 |                  |                 |   fails to launch, and Driver stops ( i.e. not      |
|                 |                  | server.keystore |   continue )                                        |
|                 |                  |                 |                                                     |
|                 |                  |                 | - if incorrect certs placed, pointing to incorrect  |
|                  |                     |                 |   CA or server cert, this cannot be determined      |
|                  |                     |                   |   during File Server launch, hence the Driver       |
|                  |                     |                   |   attempts to login.                                |
+-----------------+------------------+-----------------+-----------------------------------------------------+

Engine    
GS-19472    
An issue where the engine is generating multiple notifications to the broker for a single event is fixed.

GS-19466    
Removed an erroneous/misleading log message concerning NUMA processor nodes appearing on non-NUMA machines during engine invocation.

GS-19464    
Optimized the Grid Library scanning process. It no longer traverses sub-directories within Grid Libraries, significantly speeding up the startup process.

GS-19199    
Added org.apache.commons.lang3 to DSEngine.jar to resolve a java.lang.ClassNotFoundException for StringUtils during recursive service calls.

GS-19037 / GS-18422    
The GRIDLIB_LOAD_DELAY property is now fully functional for Linux engines. This enables proper management of
grid library loading, ensuring that engines do not begin task processing until all the necessary grid libraries
are extracted and loaded.

GS-18913    
Introduced the allowedMissingHeartbeat property. This allows the system to skip missing heartbeat messages for
a configurable number of times, preventing premature task termination during temporary network glitches.

GS-18539    
The parked state of an engine is now persisted in the database. Engines will retain their parked status even after restarting or reconnecting.

Engine Daemon    
GS-19495    
Improved the netmask field description in the UI and enhanced log messages for IP selection to provide more precise information.

GS-19369    
Fixed an issue in the external Engine Daemon admin tool failing to handle curly brackets in URLs. Note: You must encode URL macros using UTF-8.

GS-19365    
Fixed a decryption issue causing "Authentication failed" errors for RunAs users with 16-character passwords.

GS-18639    
Packaged openSSL 1.1.1w with the product to fix missing libssl.so.10 errors during engine installation on RHEL 8.8.

Engine Daemon-Windows    
GS-19476    
Added command-line installation directly to a secondary director via msiexec using the SDURL parameter.

Engine,Manager    
GS-18777    
GridServer now supports Rocky Linux 9.

Examples    
GS-19470    
Fixed an UnsatisfiedLinkError causing the Python example to fail in Win64 environments.

Java Core    
GS-19506    
To address security vulnerabilities and ensure compliance, the following Java versions are now supported:  
* Oracle JDK 1.8.0.481 
* Oracle JDK 11.0.30 
* Oracle JDK 17.0.18 
* Azul Open JDK 17.0.18

Java Specific    
GS-19548    
Updated service.bat to properly evaluate the Java version and configure the PATH environment variable to use JAVA_HOME.

GS-18929    
Added support for Oracle JDK 21.0.6 across all core components.

Manager    
GS-19631    
Removed several deprecated UI files and folders as listed below:  
* public/manager/index.html 
* public/index.html 
* public/gear.html 
* \\manager\\webapps\\livecluster\\public\\manager 
* \\manager\\webapps\\livecluster\\public\\bootstrap-3.3.7\\docs 
* \\manager\\webapps\\livecluster\\public\\bootstrap-3.3.7\\docs\\examples  
Note: You must manually delete the \\manager\\webapps\\livecluster\\public\\bootstrap-3.3.7\\docs folder.

GS-19601
Enabled TLS 1.3 support for all grid components, including the .NET 8 Driver, for both inbound and outbound connections.

GS-19484    
Fixed an issue where disabled Manager Hooks (e.g., HPCCA hook) continued to incorrectly apply upon startup.

GS-19052    
Added support for RHEL 10 and to ensure proper functionality and compatibility, you must perform the following installations:  
* For installing ifconfig support, run the following command:        
sudo dnf install -y net-tools  
* For installing libcrypt.so.1 compatibility, run the following command:         
sudo dnf install -y libxcrypt-compat

GS-18930    
Added support for Windows Server 2025.

GS-18292    
Fixed the Engine discriminator feature to correctly route tasks based on the Tier property.

GS-18269    
When an engine VM running a task is unexpectedly destroyed (for example, due to cloud instance termination or a
host crash), the GridServer Manager incorrectly interpreted this event as a task failure. To resolve this, the Manager now performs a TCP
liveness check against the Engine Daemon's file server port. A new service type property, incrementRetryOnDaemonUnreachable, is added. 
When you set this property to false, the Manager checks for Daemon reachability before incrementing the retry counter. If the daemon is
unreachable, the retry counter does not increment. The default value true preserves the original behavior.

Python    
GS-19474    
Fixed engine crashes when running Python examples in Linux64 environments by properly setting the ds.PYTH_MODULE_PATH environment variable.

GS-19468    
Fixed an issue with the DSWebserverPortRange property in the Python-example driver. It is now correctly handled 
as a string type and must be configured using the byte string format.

REST API    
GS-19386    
Added REST APIs for adding, removing, and fetching a list of Run-As Credentials.

Security    
GS-19554    
The following files have been remove which might flag the vulnerability related to default files on an Apache Tomcat server ,
* manager\BUILDING.txt
* manager\CONTRIBUTING.md

GS-19446    
Upgraded Apache Commons FileUpload/IO libraries to version 2.18.0.

GS-19377    
Hostname verification is now enabled by default for the Java Driver and Engine when TLS is enabled.

GS-19048    
Apache ZooKeeper is upgraded to version 3.9.1 to address a security vulnerability.

GS-19046    
The Python version is upgraded to 3.10.6 to address the security vulnerability. 

GS-19045    
The snappy-java library is upgraded from  1.1.8.4 to 1.1.10.1 to address the security vulnerability. 

GS-19044    
Kafka client is upgraded to 3.4.0 to address the security vulnerability. 

GS-19043    
The jose4j library is upgraded to version 0.9.6 to address the security vulnerability. 

GS-19042    
The json version is upgraded to 20231013 to address the security vulnerability.

GS-19041    
The jackson-core library is upgraded to version 2.15.0 to address the security vulnerability.  

GS-19033    
The jackson-databind library is upgraded to 2.15.0 to address the security vulnerability. 

GS-19032    
The com.google.guava library has been upgraded to version 32.0.1-jre to address the security vulnerability. 

GS-19031    
The woodstox-core version is upgraded to 6.4.0 to address the security vulnerability. 

GS-18944    
The libsolv package  is upgraded to version, 1:0.7.20-6.el8sat to address the security vulnerability. 

GS-18367    
Improved Manager's ability to find the gridLibrary when "Synchronize Resources to Engines" is set to false. 
You must manually place the gridlibrary and signature file (.#extracted file) under <Engine_directory>/resources/gridlib/ (default
location) or the custom gridlibrary path.

Tomcat    
GS-19000    
Apache Tomcat is updated to version 9.0.115.

GS-18996    
The system property "-Xrs -Dds.logToSystem=true" is removed to prevent the catalina.out file from exhibiting excessive growth.

================================================================================
To download this hotfix, login to the Support Portal and navigate to Downloads > Hotfixes > AvailableDownloads > DataSynapse > GridServer > 7.1.0.

Issue/Introduction

GridServer 7.1.0 Hotfix08 Release Announcement

Attachments

TIB_gridserver_7.1.0_hotfix08_readme.txt get_app