PATCH ID: ASUV51B4_ECO1_511 ECO NUMBER: ASU 5.1B-4 ECO1 ----------- PRODUCT: Advanced Server for UNIX -------- UPDATED PRODUCT: Advanced Server for UNIX Version 5.1B-4 ---------------- RELEASE DATE: March 2007 -------------- The Advanced Server for UNIX (ASU) Version 5.1B-4 ECO1 kit provides enhancements and corrections for problems found in the ASU Version 5.1B-4 software, including earlier versions of the ASU software. This release note document has the following sections: - New lanman.ini and transports.ini Parameters - ASU Command Changes - ASU General Changes - ASU Problem Descriptions and Solutions - ASU Known Problems - ASU Installation Instructions -------------------------------------------- New lanman.ini and transports.ini Parameters -------------------------------------------- New lanman.ini Parameter: A new parameter, filepreallocsize, has been added to the [lmxserver] section of lanman.ini. This parameter specifies, in kilobytes, an additional amount of disk space that is reported to Windows clients as allocated to every file. This improves the write performance from Windows XP clients to ASU shares. The default value for this parameter is 1024 (kilobytes). To revert to the behavior of previous versions of ASU, set the value of this parameter to 0. New lanman.ini Parameter: A new parameter, rc4encryption, has been added to the [netlogon] section of lanman.ini. This parameter specifies whether ASU supports using RC4 encryption to encrypt password information during a SAM database sync operation or network logon. The default value of the parameter is "no". If the parameter is set to "yes", and the client or server requests RC4 encryption, ASU will use RC4 encryption to encrypt the password information. New transports.ini Parameter: A new parameter, lnbcheck, has been added under the [tcpip] section in transports.ini to control extra checking of listener name blocks for validity. Setting lnbcheck to "yes" enables extra checking in the knblink process, which will produce an unusual event log in /usr/net/servers/lanman/debug if it detects a problem with a listener name block. The default value of the lnbcheck parameter is "no". It should only be set to "yes" under the direction of HP Customer Services. ------------------- ASU Command Changes ------------------- Change: The "acladm" command has a new option, -W, which you can use to write ACLs in the ACL database to file system metadata. This is particularly useful if the number of files with explicit ACLs has caused the ACL database to grow extremely large (more than a million ACLs). This option can only be used when the StoreAclAsMetadata registry parameter is set to 1. Change: The "knbmon" utility has been enhanced to indicate which sessions are listening for new connections. Change: The "lmstat -n" command has been enhanced to display the count of message types received by the lmx.browser process. These counts are displayed following the count of message types received by lmx.ctrl, lmx.cluster, and lmx.dmn processes. Change: The "lmstat -n" command now displays the following information for each lmx.srv process: o The current number of sessions connected o The total number of sessions that have been started. ------------------- ASU General Changes ------------------- Change: The StackTrace file generated by transport link processes during a process crash has been enhanced to include the following: o ASU release information o UNIX version o Time of the crash o The relevant file and line number, if known. -------------------------------------- ASU Problem Descriptions and Solutions -------------------------------------- Problem addressed: A small memory leak in the knblink process occurred each time the ASU server was stopped and restarted. This problem has been corrected. Problem addressed: If "net rpc vampire" was used to migrate users from an ASU PDC to a Samba BDC, and the Samba BDC was then promoted to a PDC, network logons from Windows clients in the domain would fail with the following error: System error 1326 has occurred. Logon failure: unknown user name or bad password. This problem has been corrected. ASU now supports using RC4 encryption to correctly send password information to the Samba BDC. Set the following parameter in lanman.ini to enable RC4 encryption, and restart the ASU server: [netlogon] rc4encryption=yes Problem addressed: If the ASU debug kit was installed, the "acladm -T" command would crash with an ASSERT error if the directory path of one of the files in the ACL database was more than 993 characters long. This problem has been corrected. Problem addressed: Under rare conditions, the lmx.browser process would consume all available NetBEUI or knb sessions, thereby preventing new connections to the ASU server. The problem was most likely to happen if ASU was configured to use both NetBEUI and TCP/IP. Restarting the browser process would free up the sessions. This problem has been corrected. Problem addressed: If two or more logged-in users had restricted logon hours that expired at the same time, the lmx.srv process would sometimes crash (in versions prior to V5.1B-4), or would generate an unusual "ucallout" event log in the /usr/net/servers/lanman/debug directory. This problem has been corrected. Problem addressed: Copying or writing files from a Windows XP client to an ASU share would take an excessive amount of time. The Windows client would perform hundreds of small writes to the ASU server, instead of one large write. This problem has been corrected. By reporting an additional amount of disk space as allocated to every file, Windows XP clients now perform large writes. See the description of the new filepreallocsize lanman.ini parameter. Problem addressed: If the ASU debug kit was installed, and ASU was configured as the Primary Domain Controller, the lmx.dmn process would sometimes crash with an ASSERT error at line 176 in file pulse.c, while periodically announcing SAM database changes to Backup Domain Controllers. This problem has been corrected. Problem addressed: If an ASU share was mapped to an NFS-mounted directory, creating a file on that share would sometimes fail with the error "Access is denied". This problem has been corrected. -------------- Known Problems -------------- Known problem: While attempting to join a Windows Vista workstation to an ASU domain, the workstation displays the following error message: Logon Failure: unknown user name or bad password To work around this problem, create a machine account for the Windows Vista workstation on the ASU Primary Domain Controller (PDC) using the following command: # net computer \\\\ /add Known problem: If a user attempts to log on to a Windows Vista workstation using an account from an ASU domain, the workstation displays the following error message: The trust relationship between this workstation and the primary domain failed. This problem also exists when attempting to log on to a Windows XP workstation using an account from an ASU domain. In this case the following error message is displayed: Windows cannot connect to the domain, either because the domain controller is down or otherwise unavailable, or because your computer account was not found. Please try again later. If this message continues to appear, contact your system administrator for assistance. To correct this problem for either operating system, make the following changes on the workstation: 1. Set the registry entry "requiresignorseal" to 0: a. From the start menu, click "Run" and enter "regedt32". b. Select HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ Netlogon\Parameters\requiresignorseal and choose "Modify" from the pulldown menu. c. From the "Edit DWORD Value" window, set the value data field to 0 and select OK. 2. Reboot the workstation. ----------------------------- ASU Installation Instructions ----------------------------- This ECO kit is a complete software kit that includes the features and functionality of previous ASU software releases, and provides corrections for the problems described in this document. If you are installing the ASU software for the first time, change to the directory where the ECO software was downloaded, enter the following command, and follow the instructions on the screen: # setld -l . If you have ASU, ASDU, or PATHWORKS for DIGITAL UNIX subsets installed, you must use the Tru64 UNIX setld command to deinstall those subsets before you install the subsets in this ECO kit. The following steps show you how to use the setld command to deinstall ASU, ASDU, or PATHWORKS subsets and install the ECO software. HP recommends that you back up your "/usr/net/servers/lanman" directory before beginning this process: 1. Display the installed ASU, ASDU, or PATHWORKS subsets. Enter one of the following commands depending on the software installed: # /usr/sbin/setld -i | grep ASU | grep -v not # /usr/sbin/setld -i | grep ASDU | grep -v not # /usr/sbin/setld -i | grep PATHWORKS | grep -v not 2. Deinstall the ASU, ASDU, or PATHWORKS subsets. Enter the /usr/sbin/setld -d command followed by the name of each subset. For example, to deinstall the ASU Version 5.0 base, transport, and reference page subsets enter: # /usr/sbin/setld -d ASUBASE500 ASUTRAN500 ASUMANPAGE500 While subsets are being deinstalled, you are prompted to save configuration files and the user account and share databases. Save these files and databases if you want to reuse them with the ASU Version 5.1B-4 ECO1 software. 3. Install the ASU Version 5.1B-4 ECO1 software. Change to the directory where the ASU Version 5.1B-4 ECO1 software was downloaded, enter the following command, and follow the instructions on the screen: # setld -l . See the ASU Installation and Administration guide for more information on installing the ASU software. =============================================================== Copyright 2007 Hewlett-Packard Development Company, L.P. Confidential computer software. Valid license from HP required for possession, use or copying. Consistent with FAR 12.211 and 12.212, Commercial Computer Software, Computer Software Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government under vendor's standard commercial license. The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein. UNIX is a registered trademark of The Open Group. Microsoft and Windows are U.S. registered trademarks of Microsoft Corporation.