Common: iSee Live from St Louis – Keeping Passwords Secret within SQL

During the Fall Navigate Conference Scott and Tim did a full length iSee session. Multiple topics were covered, this is the recording of one of these topics.

Passwords are a vital part of security, and there are often interfaces within SQL that require a password to be used. But, if the world can see your password… not very secure. This session will explore a technique that can hide your password from the view of watchful eyes.

Tim Rowe

Business Architect Application Development & Systems Management for IBM i

Tim Rowe is the Business Architect for IBM i responsible for System Management and Application Development. He has a passion for modernization on IBM i and how we can continue to move IBM i into the world of ‘Normal’ . In his spare time he is a certified Soccer referee and enjoys refereeing games with his youngest son.

$i++ ?>

Scott Forstie

Db2 for i Business Architect

Scott Forstie is a Senior Technical Staff Member within IBM i development and spends most of his time working as the Db2 for i Business Architect. He has worked on IBM operating system development since joining IBM in 1989.

Scott is a frequently published author, speaker at industry events around the globe and can be found @Forstie_IBMi and [email protected]. Scott is an avid runner and enjoys cooking.

$i++ ?>

Key:

Complete

Next

Failed

Available

Locked

Video

Open to view video.

SQL Script

Open to download resource.

Open to download resource.

SAP on IBM i: SAP Support Required PTF Lists have been updated

On December 2nd, 2022, IBM i 7.5 TR1 was released along with Db2 for i PTF Group SF99950 Level 3, as well as IBM i 7.4 TR 7 along with Db2 for i PTF Group SF99704 Level 23. You can get a quick overview over the enhancements for IBM i 7.5 at https://www.ibm.com/support/pages/ibm-i-75-tr1-enhancements and for IBM i 7.4 at https://www.ibm.com/support/pages/ibm-i-74-tr7-enhancements. A general entry point for the various Technology Refreshes with their enhancements can be found at https://www.ibm.com/support/pages/node/1119129. If you use the online mode of the command RGZPFM, you may be especially interested in the Online reorganize physical file member (RGZPFM) enhancement.

The SAP Support Required PTF Lists, formerly known as Information APARs, have been updated to include these new levels. Together with the Technology Refreshes and the Db2 for i PTF groups, the cumulative PTF packages and the High Impact/Pervasive PTF groups were updated. For IBM i 7.3, the PTF groups were also updated with mainly bug fixes, and for IBM i 7.2, the Hiper PTF group was updated to include the latest security fixes.

The PTF lists can be found at the following links:

IBM i 7.2: https://www.ibm.com/support/pages/sap-support-required-ptf-list-ibm-i-72
IBM i 7.3: https://www.ibm.com/support/pages/sap-support-required-ptf-list-ibm-i-73
IBM i 7.4: https://www.ibm.com/support/pages/sap-support-required-ptf-list-ibm-i-74
IBM i 7.5: https://www.ibm.com/support/pages/sap-support-required-ptf-list-ibm-i-75

If you want to download the PTF lists to your SAP systems with the help of a program, take a look at our sample program and blog entry from July 18th, 2022.

We recommend that you apply the current PTF levels for preventive maintenance whenever you are performing your next scheduled maintenance.

IBM Welcomes COMMON Advisory Councils to Rochester – IT Jungle

IBM Welcomes COMMON Advisory Councils to Rochester

December 7, 2022

Alex Woodie

One of the hallmarks of a good company is listening to customers. A company may not do everything that its customers wish, but it must show that it’s listening to maintain the relationship. This dynamic was in play during an IBM i meeting that took place last month in Rochester, Minnesota, between IBM and the advisory councils for both COMMON North America and COMMON Europe.

The three-day meeting that took place November 14 through 16 involved a handful of members from the COMMON Americas Advisory Council (CAAC) as well as the COMMON Europe Advisory Council (CEAC). Both advisory councils had about a dozen members attending, with some CEAC members coming in via Zoom. From the IBM side were Dave Nelson, director of IBM i development; IBM i CTO and Distinguished Engineer Steve Will; IBM i Product Manager Alison Butterill, and other product owners.

While the meeting was not open to the press and the specific discussions were confidential, IBM was kind enough to provide IT Jungle with a rough summary of what was talked about at the CAAC/CEAC meeting, which is the first joint meeting involving these two advisory groups since 2019.

There are basically two orders of business at meetings like this. First, IBM gives an update on the state of IBM i today and the roadmap. Then, the advisory councils provide input to IBM on the types of things they would like to see in the operating system or the platform. The advisory councils also share information about IBM i functionality that COMMON members would like to see implemented by IBM into the platform. These used to be called requests for enhancements (RFEs) and are now formally called “Ideas” by IBM.

At this particular meeting, after providing the roadmap to the CAA/CEAC members, IBM drilled down on specific areas of the platform. It talked about systems management, including the future of Navigator for i (“New Nav”) and Access Client Solutions (ACS). It also talked about how IBM i can work with third-party tools, according to a summary provided by Will.

The database is the beating heart of the IBM i platform, so it’s no surprise that Db2 for i was brought up. There was a specific focus on the new Watson geospatial capabilities that IBM recently released with IBM i 7.5 TR1 and 7.4 TR7. Db2 Mirror, the continuous availability solution that runs off Db2, was also discussed.

Application development was another topic of discussion, according to IBM, with both traditional (i.e., ILE) and open source (i.e., PASE runtimes) being discussed. IBM i Merlin, the new containerized vehicle for Web-based development and DevOps on IBM i, also made an appearance.

Last but definitely not least was security, which has been a focus of IBM in recent releases, particularly in IBM i 7.5. Members of the COMMON councils were given a preview of an enhancement that is in the works for the next major release of the operating system. What exactly is it? Well, IBM isn’t telling.

But the hush-hush security update definitely got the attention of CEAC board member Steve Bradshaw, the IBM i Champion from the UK who was in attendance at the snowy Southern Minnesota shindig on behalf of the CEAC.

COMMON Europe director Steve Bradshaw talks with IBM i CTO Steve Will at the IBM Lab in Rochester, Minnesota in November 2022. (Source: YouTube)

“I can’t tell you what we’ve been talking about,” Bradshaw affirmed in a video posted to the YouTube. “I think I am allowed to say we’ve been focusing more on security. And I didn’t think I was going to be able to say that, because we put so much in 7.5 for security. But if security is your thing, then you’re going to be delighted with what’s coming next.”

Security has become something of a thing for many an IBM i shop, who have been living with deteriorating cybersecurity conditions for years, even before the ransomware epidemic hit critical new heights in 2021. For five straight years, security was the chief concern among respondents to HelpSystems IBM i Marketplace Study (HelpSystems recently changed its name to Fortra).

That security message is bubbling up the chain to IBM i brass, like Ian Jarman, the former IBM i product manager who is now the CTO of Technology Services (formerly Lab Services), who declared nearly two years ago that he was “alarmed” by the poor security postures of IBM i systems.

What exactly the IBM i engineers in Rochester, Austin, Toronto, and Shanghai have up their security sleeves will have to wait until IBM is ready to spill the beans (possibly in a version eight of the ohh-ess, and possibly early next year). In any case, this whole case of give-and-take between IBM decision makers and IBM i customers is a working example of how Big Blue likes to do business: Customers share their concerns, IBM listens, and a solution is hammered out.

This new-feature engine has been running well the past few years. IBM says that, between the delivery of IBM i 7.4 in the spring of 2019 GA and the delivery of IBM i 7.5 in the spring of 2022, 499 Ideas (formerly RFEs) were implemented in IBM i. “And the Advisory Councils saw every one of them,” IBM says. Since 7.5 shipped earlier this year, IBM has delivered 128 more Ideas, and the councils were again heavily involved. In fact, it championed many of them, according to IBM.

IBM and the COMMON organizations (Europe and NA) are hoping to boost the visibility of the advisory role of that the CAAC and the CEAC play in determining the future of the platform. If this role in coming up with Ideas was more clearly visible to the general IBM i public, the thinking goes, then perhaps more members of the IBM i community will get involved.

If this were to happen, it would benefit everyone in the IBM i community. But there’s a certain sector of the IBM i market that is especially important to represent: small and midsized businesses. SMBs make up the vast bulk of the individual members of the worldwide IBM i community, but they don’t often speak with a united voice.

The community of large IBM i users already has a sponsor: the Large User Group. IBM hosts LUG members in Rochester and collects their thoughts and concerns in much the same way that it does for CAAC and CEAC. But the concerns of large IBM i shops don’t always jibe with those of the SMB community, which is one reason why IBM and the COMMON organizations are looking to shine the light on the role that CAAC and CEAC play (for what it’s worth, the LUG is also looking to expand its reach, too.)

The best part of the recent Rochester meeting was having both advisory councils there, according to Will, who was named a distinguished engineer earlier this year.

“It was amazing how they fed off each other,” Will said in the video that Bradshaw posted to YouTube. “The partners who were in the room from the U.S. and Europe have similar things but different things, so they have that feedback that feeds off one another . . . . It’s been great to have that synergy together across the advisory councils.”

RELATED STORIES

Inside IBM i’s New Geospatial Functions For Db2

IBM Unveils Fall 2022 Tech Refreshes for IBM i

IBM Delivers More Out-of-the-Box Security with IBM i 7.5

Why Steve Will’s Promotions Are A Big Deal For IBM i

LUG Looks to Grow Membership

‘Alarming’ Security Gaps Exposed in IBM i Marketplace Report

Security Still the Top Concern as Privacy Regs Loom

IBM Publishes Power10 Performance Optimize Guide – IT Jungle

IBM Publishes Power10 Performance Optimize Guide

December 7, 2022

Alex Woodie

IBM i shops looking to squeeze the most performance out of their Power10 servers have a lot of options available at their disposal. IBM covers many, if not all, of them in its latest performance paper, titled “IBM Power10 performance optimization for IBM i,” which it released last week.

The Power10 is the most powerful processor IBM ever built. Compared to the Power9 processor, the Power10 delivers 20 percent to 30 percent higher performance per core. And with 25 percent more cores per socket, that means oodles of more processing power to do useful work.

At a system level, the Power E1080 offers 1.5 to 1.6 times more capacity than a Power E980 that’s comparably equipped (except for those speedy new Power10 processors, of course). With so much raw processing power on tap, the Power10 processor is ready to gobble up customer workloads.

Not all workloads are equal, of course. Greenscreen 5250 applications are notoriously skimpy when it comes to demands on the system, and a new Power10 server, even an entry-level system, may be overkill for some customers. However, enterprises that are adopting Java or the latest Web languages that run in PASE – or are training machine learning models – may find themselves hitting performance limits, leading to a need to optimize application performance.

IBM covers a wide array of IBM i optimization techniques for Power10 in its 21-page report, which is available as a PDF here.

For example, there is program profiling, an advanced optimization technique to reorder procedures or code within procedures, and advanced argument optimization, which can make procedure calls run faster. Interprocedural analysis is another option available to some, as well as converting 16-byte pointers to 8-byte pointers when compiling C and C++ code.

IBM also discusses adaptive code generation (ACG), which is a technology that allows users to take advantage of all the processor features on their systems, “regardless of whether those features are present on other system models that are supported by the same release,” IBM says.

All ILE programs are activated under what’s called an “activation group,” which is a substructure of jobs that contains the resources needed to run the programs. There are differences in the type of activation groups, including ones that can run either in single-level storage or teraspace storage (which varies the degree of program isolation and protection from accidental access for those programs.)

IBM says users should create new activation groups only when “absolutely required.” If a new activation group is not absolutely required, IBM recommends using an existing named activation group, which “allows the program to reuse the resources that are already allocated instead of rebuilding the environment.”

IBM’s paper also includes a section on optimizing applications for PASE, the AIX runtime that is increasingly used to run applications written in languages like Node.js, PHP, and Python, as well as Java. The main options facing the intrepid PASE user is whether to use the AIX compilers, as supplied by IBM, or to use the GCC compilers from the open source community.

Java is notorious for having a hefty runtime and for slow application performance, on IBM i and just about every other operating system it runs under. IBM has a few tips and techniques ready for improving Java performance on IBM i, including using a just-in-time compiler and being really, really careful about garbage collection.

The Db2 for i database can also be tuned to improve application performance (or rather, the applications can be tweaked to get the most out of Db2). IBM has several suggestions, including using the Db2 for IBM i Health Center to capture information about a user’s database, such as the total number of objects, the size limits of selected objects, the design limits of selected objects, environmental limits, and activity level.

IBM i users can also gather data using the Database Monitor, which collects data about individual queries in real time and stores it in an output table. This information can help the user determine if the queries are performing well or if they need some fine-tuning. If there is a Db2 performance issue, the user might want to fire up the SQL Performance Center to get more detailed information about the queries.

The Db2 database comes with a bunch of self-optimization built in. One of those is the Index Advisor, which will analyze how queries are running and automatically determine if a performance index would improvement performance. The SQL Plan Cache can also provide information about the SQL Query Engine (SQE), and is available through IBM i Access Client Solutions (ACS).

Another ACS-resident tool is Visual Explain, a tool that lets you see information about both static and dynamic SQL statements. The Query Supervisor is another fixture in the database, and can detect when queries executed by the SQE are running well. If performance thresholds are exceeded, it can trigger an exit program (such as for automatically killing the query). There’s also the Predictive Query Governor, which can stop a query even before it gets going if it estimates it’s going to take too long or consume too many resources.

Some database queries may benefit from parallelization, while others will just consume more resources that way (which is why IBM recommends using these features selectively). Parallel I/O and Db2 Symmetric Multiprocessing (SMP) are both available at no charge.

IBM shares a variety of tips for optimizing database performance, such as avoiding use of “live” data (as opposed to using data copied from the database) and minimizing use of open data path (ODP) operations. Use of the “optimize” clause can also help in some situations, including using specific “fetch” and “insert” statements.

Have object names that are more than 30 characters? Consider shrinking them beneath that limit to improve performance, IBM says. Also, learn to use IBM i Wait Accounting, which can help IBM i users understand what tasks or threads are responsible for those long, uncomfortable waits.

Finally, IBM recommends using Performance Data Investigator (PDI), which is a part of IBM Navigator for i and provides a GUI for tracking long-term trends among the various data collection mechanisms, including Collection Services, IBM i Job Watcher, IBM i Disk Watcher, and Performance Explorer.

There is also iDoctor, which is a Windows-based suite of performance tools that can be used with the above-mentioned data collection mechanisms in addition to a few others, including PEX, SQL Plan Cache Snapshots as well as data from HMC, VIOS, AIX, and Linux.

“IBM i is an industry leader in performance management and has many qualities that are not found in other systems, including unparalleled performance metrics, always on collection services, and graphical viewing of performance data,” IBM states in its report. “While understanding all the different processes that affect system performance can be challenging and resolving performance problems requires the effective use of a large suite of tools, the functions offered by IBM i are intended to make this job easier for users.”

RELATED STORIES

A Few More Power Systems Updates Before 2022 Ends

The Power10 Machines That Will Take IBM i To 2025

Watson-Inspired Pattern Matching Drives IBM i Performance Breakthrough

GiAPA Tackles IBM i Performance Bottlenecks

IBM i Performance Secrets Revealed

Verified by MonsterInsights