ECO NUMBER: ASU 5.1B-2 ECO1 ----------- PRODUCT: Advanced Server for UNIX -------- PATCH ID: ASUV51B2_ECO1_380 --------- UPDATED PRODUCT: Advanced Server for UNIX Version 5.1B-2 ---------------- RELEASE DATE: January 2005 -------------- The Advanced Server for UNIX (ASU) Version ASU 5.1B-2 ECO1 kit provides enhancements and corrections for problems found in the ASU Version 5.1B-2 software, including earlier versions of the ASU software. This release note document has the following sections: - ASU General Changes - ASU General Problem Descriptions and Solutions - ASU and TruCluster Server Version 5.x Problem Descriptions and Solutions - ASU and Windows 2000 and Windows 2003 Related Problem Descriptions and Solutions - Known Problems - ASU Installation Instructions -------------------- ASU General Changes -------------------- Change: The 'acladm' command has two new options for deleting ACLs. The new -D option deletes explicit ACLs for files under a specified parent directory. The files then inherit ACLs from the nearest parent directory. The new -d option is used with -D to delete explicit ACLs for both files and directories under a specified parent directory. Note that the ACL for the specified parent directory itself is not deleted. Change: The 'acladm' command has been extended so that a parent directory can be specified with the -C, -E, -P, -S, -T, or -U options. This allows you to check, enumerate, or synchronize ACLs for a subset of files and directories under a specified parent directory. Changes: The lanman.ini file has two new parameters -- the iconv parameter and the malchecktag parameter under the [lmxserver] section. The [lmxserver]iconv parameter specifies whether the ASU server uses the iconv library routine for codeset conversion between Unicode and the server codeset (such as ISO8859-1 or ISO8859-15). The default value is yes (use iconv). Do not set the value to no unless directed to do so by HP field service. The [lmxserver]malchecktag parameter is used in debug kits to help find memory leaks. Every allocated block of memory will have the source of the allocation appended to it. If a suspected memory leak exists, the process can be killed to generate a core dump, which can then be searched with the 'strings' command to find all allocated memory blocks. This parameter has a default value of yes. It has no effect in production (non-debug) kits. Change: The ASU server has been enhanced to detect and report certain unusual events and conditions. These reports, which will help the HP ASU engineering group improve ASU, provide information about different types of events and conditions, and are not limited to problems. The reports are written to the /usr/net/servers/lanman/debug directory, with a file name beginning with "Unusual-". If you see such files being created, report them to HP field service. ---------------------------------------------- ASU General Problem Descriptions and Solutions ---------------------------------------------- Problem Addressed: The error "Access is denied." occurred when accessing a file, even though the user had been granted permission to the file through a non-primary UNIX login group. This problem has been corrected. Problem Addressed: The ASU server had a problem with split groups in the NIS group database. A split group is a UNIX group that has been split into multiple lines in the group file, such that each line has a unique group name but the same group ID. A split group is used to work around limitations of line length in the group file. The error "Access is denied." occurred when accessing a file or directory, even though the user had been granted permission to the file or directory through a NIS split group, the UseNIS registry parameter was set to 1, and more than 'GroupUpdateTime' seconds had elapsed since the NIS group file was modified. ('GroupUpdateTime' is a registry parameter that specifies the interval, in seconds, at which the ASU server checks the group file for changes.) This problem has been corrected. Problem Addressed: When the ASUSIA subset was installed and the UNIX passwd command was used from root to change an ASU user's password, the command would fail with the message "Invalid password". This problem has been corrected. Problem Addressed: A system file table overflow condition would sometimes cause the ASU processes lmx.srv and lmx.cluster to consume 100 percent of CPU time. This problem has been corrected. Problem Addressed: The lmx.dmn process would crash if a client attempted to authenticate a user name that is longer than 20 characters. This problem has been corrected. Problem Addressed: A small memory leak in the server would occur if the FileChangeNotify registry parameter was set to 1 (file change notification enabled). This problem has been corrected. Problem Addressed: The 'net start' command could not restart an ASU service that was terminated by a 'kill -9' command. This problem has been corrected. Problem Addressed: ASU would sometimes send responses to Transaction II SMBs that differed slightly from Windows NT in the amount of data padding. Although this did not affect client operations, it did confuse the SMB decoder in some network monitor programs, such as Ethereal. This problem has been corrected. ASU now pads the responses to Transaction II SMBs in exactly the same way as Windows NT. Problem Addressed: Specifying a non-Latin-1 locale for the [lmxserver]lang parameter in lanman.ini would sometimes cause the server to convert all characters in file names to underscores and give authentication failures to new clients. This occurred when a PC erroneously sent a byte-order mark (BOM) character in Unicode data, preventing the server from correctly decoding Unicode user names and file names from then on. This problem has been corrected. The server now detects BOM characters in Unicode data, and replaces them with underscores. Problem Addressed: On rare occasions, the ASU server would hang when waiting for a session setup response from a trusted domain controller. When this occurred, the 'lmstat -t' command would show many Smbwork tasks "waiting for ClientSession to clear in SMB session setup", and one Smbwork task in poll(), "running processing a request in SMB session setup". This problem has been corrected. The server will now limit the amount of time it waits for a session setup response from a domain controller. Problem Addressed: The ASU server did not fill in an unused response parameter of Transaction II SMBs that is reserved for an extended attributes error offset. Although this did not affect client operations, the parameter was decoded as an invalid error offset by some network monitor programs such as Ethereal. This problem has been corrected. The ASU server now fills in zero for the unused parameter. Problem Addressed: If the NetLogon service was paused on the PDC, an ASU member server would not try to use an available BDC to authenticate connections. This problem has been corrected. Problem Addressed: The ASU server would crash if a client sent an invalid transaction SMB for a share that was no longer connected. This problem has been corrected. Problem Addressed: Under rare conditions, such as a master browser election on a busy network, the lmx.browser process would run out of memory and crash. This problem has been corrected. Problem Addressed: On rare occasions, ASU would reject a valid SMB, and log event 6280 (illegal SMB received) to the system event log, due to memory corruption in an ASU server process. One common symptom was that clients could no longer connect to the ASU server. This problem would persist for all clients assigned to the same corrupted ASU server process until the ASU server was restarted. This problem has been corrected. ------------------------------------------------------------------------- ASU and TruCluster Server Version 5.x Problem Descriptions and Solutions ------------------------------------------------------------------------ Change: The amount of time required to copy a tree of files from a non-master cluster member to a Windows XP client has been significantly reduced. Change: The transports.ini file has a new parameter -- [tcpip]listenallaliases. When set to yes, this parameter allows the ASU server to accept connections from clients on any cluster alias, instead of just the configured cluster alias specified by [tcpip]clusteraddr. The default value of [tcpip]listenallaliases is no. Problem Addressed: The knblink process terminated unexpectedly when it was unable to reply to a message sent to port 137 (the NetBIOS name service) on the cluster alias IP address. This condition prevented new connections over TCP/IP to the ASU server. This problem has been corrected. Problem Addressed: The knblink process ignored an invalid value for [tcpip]clusteraddr. This problem has been corrected. The knblink process now validates the cluster alias address specified by the transports.ini parameter [tcpip]clusteraddr. If the server is a cluster member, and the address is invalid, knblink logs an error message, and exits. Problem Addressed: The lmx.srv process would sometimes crash if IPC messages were received at the same time from the lmx.ctrl and lmx.cluster processes. This problem has been corrected. Problem Addressed: When adding or deleting a local group on an ASU Primary Domain Controller (PDC) on a multi-instance cluster from the UNIX root account, the net localgroup command displayed the following message: Error 5 has occurred. Access is denied. This problem has been corrected. ------------------------------------------------------ ASU and Windows 2000 and Windows 2003 Related Problem Descriptions and Solutions ------------------------------------------------------ Problem Addressed: The pccheck utility did not recognize the Windows 2003 operating system and instead listed the operating system as "unknown Windows NT variant". This problem has been corrected. Problem Addressed: The 'lmstat -c' command did not display the operating system type correctly for clients running Windows XP Service Pack 2. This problem has been corrected. -------------- Known Problems -------------- Known problem: The 'lmstat -c' command sometimes displays more client connections than are actually active if the client has multiple network interface cards (NICs) installed. The workaround is to enable only one NIC on the client. ----------------------------- ASU Installation Instructions ----------------------------- This ECO kit is a complete software kit that includes the features and functionality of previous ASU software releases, and provides corrections for the problems described in this document. If you are installing the ASU software for the first time, change to the directory where the ECO software was downloaded, enter the following command, and follow the instructions on the screen: # setld -l . If you have ASU, ASDU, or PATHWORKS for DIGITAL UNIX subsets installed, you must use the Tru64 UNIX setld command to deinstall those subsets before you install the subsets in this ECO kit. Follow these steps to use the setld command to deinstall ASU, ASDU, or PATHWORKS subsets and install the ECO software: 1. Display the installed ASU, ASDU, or PATHWORKS subsets. Enter one of the following commands depending on the software installed: # /usr/sbin/setld -i | grep ASU | grep installed # /usr/sbin/setld -i | grep ASDU | grep installed # /usr/sbin/setld -i | grep PATHWORKS | grep installed 2. Deinstall the ASU, ASDU, or PATHWORKS subsets. Enter the /usr/sbin/setld -d command followed by the name of each subset. For example, to deinstall the ASU Version 5.0 base, transport, and reference page subsets enter: # /usr/sbin/setld -d ASUBASE500 ASUTRAN500 ASUMANPAGE500 While subsets are being deinstalled, you are prompted to save configuration files and the user account and share databases. Save these files and databases if you want to reuse them with the ASU Version 5.1B-2 ECO1 software. 3. Install the ASU Version 5.1B-2 ECO1 software. Change to the directory where the ASU Version 5.1B-2 ECO1 software was downloaded, enter the following command, and follow the instructions on the screen: # setld -l . See the ASU Installation and Administration guide for more information on installing the ASU software. =============================================================== Copyright 2005 Hewlett-Packard Company. All Rights Reserved. Unpublished rights reserved under the copyright laws of the United States. The software contained on this media is proprietary to and embodies the confidential technology of Hewlett-Packard Company. Possession, use, duplication, or dissemination of the software and media is authorized only pursuant to a valid written license from Hewlett-Packard Company.