PATCH ID: ASUV51B3_ECO2_440 ECO NUMBER: ASU 5.1B-3 ECO2 ----------- PRODUCT: Advanced Server for UNIX -------- UPDATED PRODUCT: Advanced Server for UNIX Version 5.1B-3 ---------------- RELEASE DATE: June 2006 ------------- The Advanced Server for UNIX (ASU) Version 5.1B-3 ECO2 kit provides enhancements and corrections for problems found in the ASU Version 5.1B-3 software, including ECO1 and in earlier versions of the ASU software. This release note document has the following sections: - ASU General Changes - ASU General Problem Descriptions and Solutions - ASU and Windows 2000 Related Problem Descriptions and Solutions - ASU Installation Instructions -------------------- ASU General Changes -------------------- Change: The "lmshare" command has a new option, -O, for setting or clearing a per-share disable oplocks parameter. When set to 1, oplocks are disabled for any file opened on the share. The per-share parameter will take effect the next time the client establishes a completely new session with the ASU server. When set to 0 (the default), the value of the UseOplocks registry parameter is used. The value of the disable oplocks parameter can be displayed with the "lmshare -L" command. Change: The "lmstat -f" command has been enhanced to show the type of opportunistic lock (if any) currently granted on a file -- exclusive, multiple read, or II. Change: A new parameter, logfileopens, under the [lmxserver] section in the lanman.ini file enables the logging of file names opened by clients. The default value of the parameter is "no". When enabled ("yes"), the file names are logged to the file "FileOpens-" in the /usr/net/servers/lanman/debug directory (where is the name of the node). Change: A new parameter, smbperf, under the [lmxserver] section in the lanman.ini file enables measurement of the elapsed time of each SMB, API, and RPC. The default value of the parameter is "no". The "lmstat -n" command can then display the average elapsed time (if non-zero), and the relative percentage of elapsed time (if at least 1%) for each SMB, API, and RPC. Change: The "listcache -S" command has been enhanced to display the number of times contact with the WINS server was lost or established since the last time the ASU server was started. This information is displayed under the "WINS Client Statistics" section. Change: The "knbmon" command has been enhanced to display the count of kernel NetBIOS names and sessions currently in use. Change: A new transports.ini parameter is available to disable the logging of unusual events from knblink. To disable logging, set "unusual=no" under the [tcpip] section of transports.ini, and restart both knblink and the server. For example: # net stop server # /sbin/init.d/asutcp stop # /sbin/init.d/asutcp start # net start server The default value of the parameter is "yes". ---------------------------------------------- ASU General Problem Descriptions and Solutions ---------------------------------------------- Problem Addressed: Under certain rare circumstances, a remote UNIX user could gain unauthorized access. This problem has been corrected. Problem Addressed: The "joindomain" command used to warn that all data in the user accounts database and related files would be re-initialized. However, this is not true for a member server if the server remains a member (even if the domain name is changed). The warning messages have been corrected. Problem Addressed: If the PDC was unavailable, the "mapuname -p" command on a member server would purge mappings for accounts from the primary domain or from trusted domains, even though the accounts were still valid. This problem has been corrected. The "mapuname -p" command now distinguishes between accounts that cannot be resolved because the PDC is unavailable, and accounts that cannot be resolved because they are from untrusted domains. It will only purge mappings for deleted accounts or accounts from untrusted domains. Problem Addressed: The "usermod" command would mistakenly invalidate the ASU user password. This would cause a bad-password error for that user for any further ASU operations. For example: # usermod -G tape,news testuser # su - testuser $ net logon testuser Type your password: Error 1326 has occurred. Logon failure: unknown user name or bad password. This problem has been corrected. Problem Addressed: The "net logon" command from a non-root process would not validate the user's password, but would instead display the following warning message: You were logged on, but have not been validated by a server. Therefore, you may not have permission to use some network resources. This problem has been corrected. Problem Addressed: When the registry parameters UnixQuotas and StoreAttributesAsMetadata were enabled (set to "1"), ASU would give an "Access is Denied" error when copying Windows special folders such as "Favorites" and "Briefcase" to an ASU share. This also resulted in these folders appearing like normal folders without using icons like "star" and "briefcase". This problem has been corrected. Problem Addressed: If ASU was acting as the Master Browser for the domain, and if the browse list contained more than 100 or so servers (fewer if the server comments were long), the "net view" command on a Windows system would not display the entire browse list. This problem has been corrected. Problem Addressed: The ASU server would drop the virtual circuit to an inactive client that had no logged-in sessions before the expiration of the AutoDisconnectNullSessions interval. The main effect of this problem was to cause BDCs and member servers to reconnect to an ASU PDC more often than necessary. This problem has been corrected. Problem Addressed: If Samba V3 was configured as a BDC to an ASU PDC, the "net rpc vampire" command on the BDC used to fail with the following error: cli_pipe: return critical error. Error was Call returned zero bytes (EOF) Failed to fetch domain database: NT_STATUS_UNSUCCESSFUL This problem has been corrected. Problem Addressed: If WinZip 9.0 is installed on a Windows client, clicking the right mouse button in the windows Explorer on an EXE file would take much longer to display the context menu than a right mouse click on other file types. Several workarounds to the problem are available: Workaround 1 ------------ Keep WinZip from checking for CAB files on network drives. 1) Start WinZip. 2) Select the Options pull-down menu and select Configuration. 3) At the Configuration dialog, click on the Explorer Enhancements tab. 4) Locate the section "Check for self-extracting CAB file" and uncheck the option "On other drives (e.g. network drives)". 5) Click on OK to save your settings. 6) Check whether this speeds up the context menu display. If this does not help, try the following workaround: Workaround 2 ------------ Turn off the WinZip extension to the Windows Explorer shell altogether. 1) Start WinZip. 2) Select the Options pull-down menu. Then, select Configuration. 3) At the Configuration dialog, click on the Explorer Enhancements tab. 4) At the Explorer Enhancements panel, uncheck the "Enable Explorer enhancements (including additional Drag and Drop features)". 5) Click on OK to save your settings. If neither of these workarounds solves the problem, install an older version of WinZip that does not have the problem: Workaround 3 ------------ 1) From the Start button, click Settings -> Control Panel 2) Select Add or Remove Programs. 3) Scroll down to the WinZip program 4) Uninstall WinZip version 9.0 5) Exit the Control Panel 2) Install WinZip version 6.3 Problem Addressed: If ASU was configured as a member server and the ASU SIA subset was installed and configured, the UNIX "passwd" command could not be used from root to change the domain user account password. This problem has been corrected. The UNIX "passwd" command will now prompt for the old domain user account password. Problem Addressed: If an ASU member server is configured to use WINS, and the Primary Domain Controller (PDC) was not available, the ASU member server would fail to use an available Backup Domain Controller (BDC) for authentication of connections. This problem has been corrected. --------------------------------------------------------------- ASU and Windows 2000 Related Problem Descriptions and Solutions --------------------------------------------------------------- Problem Addressed: If Windows 2000 Single Sign-On (SSO) is installed, a right mouse click in the Windows Explorer on a file that is located in the top-level directory of a share would take a much longer time to display the context menu than a file that is located in a subdirectory of the share. This problem has been corrected. ----------------------------- ASU Installation Instructions ----------------------------- This ECO kit is a complete software kit that includes the features and functionality of previous ASU software releases, and provides corrections for the problems described in this document. If you are installing the ASU software for the first time, change to the directory where the ECO software was downloaded, enter the following command, and follow the instructions on the screen: # setld -l . If you have ASU, ASDU, or PATHWORKS for DIGITAL UNIX subsets installed, you must use the Tru64 UNIX setld command to deinstall those subsets before you install the subsets in this ECO kit. Follow these steps to use the setld command to deinstall ASU, ASDU, or PATHWORKS subsets and install the ECO software: 1. Display the installed ASU, ASDU, or PATHWORKS subsets. Enter one of the following commands depending on the software installed: # /usr/sbin/setld -i | grep ASU | grep -v not # /usr/sbin/setld -i | grep ASDU | grep -v not # /usr/sbin/setld -i | grep PATHWORKS | grep -v not 2. Deinstall the ASU, ASDU, or PATHWORKS subsets. Enter the /usr/sbin/setld -d command followed by the name of each subset. For example, to deinstall the ASU Version 5.0 base, transport, and reference page subsets enter: # /usr/sbin/setld -d ASUBASE500 ASUTRAN500 ASUMANPAGE500 While subsets are being deinstalled, you are prompted to save configuration files and the user account and share databases. Save these files and databases if you want to reuse them with the ASU Version 5.1B-3 ECO2 software. 3. Install the ASU Version 5.1B-3 ECO2 software. Change to the directory where the ASU Version 5.1B-3 ECO2 software was downloaded, enter the following command, and follow the instructions on the screen: # setld -l . See the ASU Installation and Administration guide for more information on installing the ASU software. =============================================================== © 2006 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein. UNIX® is a registered trademark of The Open Group. Microsoft® and Windows® are U.S. registered trademarks of Microsoft Corporation.