ONCplus B.11.31.
© Copyright 2009, 2014 Hewlett-Packard Development Company, L.P. Legal Notices Confidential computer software. Valid license required from Hewlett-Packard for possession, use or copying. Consistent with FAR 12.211 and 12.212, Commercial Computer Software, Computer Software Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government under vendor’s standard commercial license. The information contained herein is subject to change without notice.
Contents HP secure development lifecycle......................................................................5 1 ONCplus Overview....................................................................................6 Overview................................................................................................................................6 Availability of ONCplus as an ISU..............................................................................................6 NIS+ obsolescence notice.....
New CacheFS features in ONCplus B.11.31_LR ......................................................................37 New NIS features in ONCplus B.11.31_LR.............................................................................38 Software availability in native languages...................................................................................39 4 Documentation feedback...........................................................................
HP secure development lifecycle Starting with HP-UX 11i v3 March 2013 update release, HP secure development lifecycle provides the ability to authenticate HP-UX software. Software delivered through this release has been digitally signed using HP's private key. You can now verify the authenticity of the software before installing the products, delivered through this release. To verify the software signatures in signed depot, the following products must be installed on your system: • B.11.31.
1 ONCplus Overview This chapter addresses the following topics: • “Overview” (page 6) • “Availability of ONCplus as an ISU” (page 6) • “NIS+ obsolescence notice” (page 7) • “NIS protocol version 1 obsolescence notice” (page 7) • “Related information” (page 7) Overview Open Network Computing (ONC) comprises core services that enable administrators to implement distributed applications in a heterogeneous distributed computing environment. It also includes tools to administer clients and servers.
NIS+ obsolescence notice Network Information Service Plus (NIS+) is a distributed database system that enables the maintenance of commonly used configuration information on a master server and propagates the information to all the hosts in the network. Starting with HP-UX 11i v3, NIS+ is no longer supported. HP recommends that users migrate to LDAP. NOTE: For information on how to migrate from NIS+ to LDAP, see the NIS+ to LDAP Migration Guide.
2 ONCplus B.11.31.18 This chapter contains the most recent product information pertaining to the Open Networking Computing (ONC) product, version B.11.31.18, which is supported on the HP-UX 11i v3 operating system. This chapter addresses the following topics: • “Announcement” (page 8) • “What's new in ONCplus B.11.31.18” (page 8) • “Enhancements and fixes in ONCplus to date” (page 8) • “Installation Information ” (page 18) Announcement This version of ONCplus (B.11.31.
Table 1 ONCplus enhancements and software defect fixes (continued) CR ID Description ONCplus Version QXCR1001280930 11.31 nfs svc queue memory utilization B.11.31.18 QXCR1001262324 10 minutes delay during HANFS failover. B.11.31.18 QXCR1001297843 11.31 memory leak in nfs4read B.11.31.18 QXCR1001349084 Panic in lock manager(debug version) while executing Connectathon tests B.11.31.18 QXCR1001238441 nfslog_records_flush_to_disk can cause self deadlock. B.11.31.
Table 1 ONCplus enhancements and software defect fixes (continued) 10 CR ID Description ONCplus Version QXCR1001209448 rpc.pcnfsd forked many defunct processes. B.11.31.16 QXCR1001201569 11.31 NFSv4 random gid assigned when create file with O_EXCL set. B.11.31.16 QXCR1001219901 11.31 with large access list, unshare failed to update /etc/dfs/sharetab. B.11.31.16 QXCR1001219186 /usr/sbin/rpc.lockd[1332]: t_accept(file descriptor 7/transport tcp) TLI error 0. B.11.31.
Table 1 ONCplus enhancements and software defect fixes (continued) CR ID Description ONCplus Version QXCR1001145872 11.31 concurrent share(1M), may cause double filesystem entries in sharetab. B.11.31.15 QXCR1001146284 11.31 inconsistent unshare(1M) behavior similar to QXCR1001099945. B.11.31.15 QXCR1001190907 11.31 nfs.coreX-ipv6 may modify /etc/inetd.conf if swlist(1M) fails. B.11.31.15 QXCR1001172991 11.31 pcnfsd auth fails if server is trusted and password is >8 characters. B.11.31.
Table 1 ONCplus enhancements and software defect fixes (continued) 12 CR ID Description ONCplus Version QXCR1001052992 The statd and automountd daemons incorrectly accept requests sent from a non-loopback address. B.11.31.13 QXCR1001090660 The gssd daemon may run into a loop under certain conditions. B.11.31.13 QXCR1001092363 Attempting a forced unmount may result in NFS client system to hang when many write requests are in progress on the system. B.11.31.
Table 1 ONCplus enhancements and software defect fixes (continued) CR ID Description ONCplus Version QXCR1001055571 Support for reverse name lookup in NFS. B.11.31.11 QXCR1001058072 NFS server panics when a write request is performed on a file on read-only mount. B.11.31.11 QXCR1001067886 After an NFS package restart, the NFS client may not be able to access the NFS mount due to stale file handle error (ESTALE). B.11.31.11 QXCR1001055572 NFS access call returns incorrect ETXTBUSY error. B.11.
Table 1 ONCplus enhancements and software defect fixes (continued) 14 CR ID Description ONCplus Version QXCR1001008786 NFS v4 server panics during RESTOREFH operation. B.11.31.09.02 QXCR1001013426 HP-UX 11i v3 NFS PV4 server panics due to double free of pv4 vnode. B.11.31.09.02 QXCR1001014714 Contention on hpnfs_fsidmap_lock causes significant idle time in SPECsfs. B.11.31.09.02 QXCR1001014716 Contention on cotsdupreq_lock causes significant idle time in SPECsfs. B.11.31.09.
Table 1 ONCplus enhancements and software defect fixes (continued) CR ID Description ONCplus Version QXCR1000930420 Increased GETATTR calls when nfs_enable_write_behind is enabled. B.11.31.09 QXCR1000846123 Asynchronous NFS Direct I/O performance improvement. B.11.31.08 QXCR1000892130 The NFS mount structure nfs_args is made public. B.11.31.08 QXCR1000909967 File locking on NFSv4 client fails with EIO. B.11.31.
Table 1 ONCplus enhancements and software defect fixes (continued) 16 CR ID Description ONCplus Version QXCR1000828306 Compatibility issue with HP-UX 11i v2 xdr_callmsg(), xdr_callhdr(), and xdr_replymsg(). B.11.31.06 QXCR1000864699 NFS client data corruption due to out-of-order write replies. B.11.31.06 QXCR1000852442 Under certain circumstances, there is a possibility of a memory leak in NFS. B.11.31.06 QXCR1000886293 System panics in clnt_clts_dispatch_notify(). B.11.31.
Table 1 ONCplus enhancements and software defect fixes (continued) CR ID Description ONCplus Version QXCR1000763503 An AutoFS UDP NFS mount fails with the error message "Couldn't B.11.31.03 bind to reserved port". QXCR1000764069 Added support for SecureNFS in a Serviceguard environment. QXCR1000764257 An NFS server panics when using a public filehandle for a lookup. B.11.31.03 QXCR1000771618 There is a potential race condition on an NFSv4 client using direct B.11.31.
Table 1 ONCplus enhancements and software defect fixes (continued) CR ID Description ONCplus Version QXCR1000583678 CacheFS panics when issuing simultaneous mount requests with a full front file system. B.11.31.01 QXCR1000585325 The nfstat.h header file incorrectly defines MAX_RFS4_PROC_NO as 40. B.11.31.01 QXCR1000585353 An NFS server panics due to a data page fault. B.11.31.01 QXCR1000585618 Added a new private kctune parameter "klm_log_level" to enable B.11.31.
ONCplus ONCplus ONCplus ONCplus ONCplus ONCplus ONCplus ONCplus ONCplus ONCplus ONCplus ONCplus ONCplus ONCplus ONCplus ONCplus ONCplus 3. B.11.31.12 B.11.31.11 B.11.31.10 B.11.31.09.02 B.11.31.09.01 B.11.31.09 B.11.31.08 B.11.31.07.01 B.11.31.07 B.11.31.06.01 B.11.31.06 B.11.31.05 B.11.31.04 B.11.31.03 B.11.31.02 B.11.31.01 B.11.31 ONC+ 2.3 ONC+ 2.3 ONC+ 2.3 ONC+ 2.3 ONC+ 2.3 ONC+ 2.3 ONC+ 2.3 ONC+ 2.3 ONC+ 2.3 ONC+ 2.3 ONC+ 2.3 ONC+ 2.3 ONC+ 2.3 ONC+ 2.3 ONC+ 2.3 ONC+ 2.3 ONC+ 2.
Reverting to a earlier version of ONCplus You cannot remove the current version of ONCplus with the swremove command. However, you can revert to a earlier version of ONCplus. The following section describes how to revert to a earlier version of ONCplus. 1. Download the desired ONCplus depot from the ONCplus web page http://software.hp.com, or from the media you originally used to install your system. 2. Login as root. 3. Copy the downloaded ONCplus version of the depot (B.11.31_LR, B.11.31.01, B.11.31.
4. To revert to the previous version of ONCplus enter the following command: swinstall -x allow_downdate=true -x autoreboot=true \ -s /tmp/ONCplus_B.11.31.depot ONCplus NOTE: ONCplus contains kernel filesets. Thus swinstalling the product results in a system reboot after the installation is complete.
WARNING! 1. Problem There is a possibility for an NFS client to experience a system hang if you revert to one of the below ONCplus versions: • ONCplus B.11.31.09 • ONCplus B.11.31.09.01 • ONCplus B.11.31.09.02 Cause The NFS client could hang under below conditions/configurations: • Severe file cache memory pressure due to low file cache configuration. For example, filecache_min = filecache_max =1% • When the nfs3_max_threads tunable is set to “0”.
3. 4. 5. On an HP-UX server with ONCplus B.11.31.07.01 installed, NFSv3 does not fully support large files. Directory related operations on an NFS client with ONCplus B.11.31.06 or B.11.31.07 versions installed along with mounted file systems with read/write permissions that are greater than 8192 bytes in size may result in system panic or data corruption. If your system has ONCplus B.11.31.06 or B.11.31.07 version installed, HP recommends that you install ONCplus B.11.31.07.01 version.
7. ONCplus B.11.31.02 may cause a boot panic situation if you are installing on an HP 9000 rp3410 or rp3440 system with the September 2007 release of HP-UX already installed. If your system has this configuration, Hewlett-Packard recommends that you install the March 2008 release of HP-UX, which includes ONCplus B.11.31.02, or install ONCplus B.11.31.06. You can use the "model" command to print the hardware model information.
8. Problem • The write operation may be interrupted when very large files are copied over NFS. • System crash may occur under heavy load conditions. Solution This problem has been fixed in ONCplus B.11.31.14. Workaround For ONCplus B.11.31.13, the workaround is to use the forcedirectio option for the NFS mount in case of loopback mount or cross mounts with very less UFC cache (say 1%) configured on NFS client systems.
On ONCplus B.11.31.14 version, Fix was implemented only for NFSv3 client version only. To enable this fix on this version, following tunables must be set to the below values: kctune nfs_enable_write_behind = 1 • kctune nfs_enable_ufc_threshold = 1 • kctune nfs3_ufc_threshold_percentage = 50 NOTE: All NFS v3 filesystems have to be unmounted if there is any change in these tunables or UFC filecache_max. Workaround For ONCplus B.11.31.
NOTE: Doing a force unmount may cause data loss for open files. After the unmount is complete, if a program tries to access files from an unmounted filesystem, it will get an EIO error. For information on HP-UX SRP commands and HP-UX Containers, see the HP-UX Containers (SRP) Administrator's Guide. To locate this document, go to the following location on the HP Business Support Center: www.hp.com/go/virtualization-manuals. On this page, select HP-UX Containers (SRP) Software.
3 Features introduced in previous versions of ONCplus This chapter describes the features introduced and defect fixes in all the previous versions of ONCplus B.11.31. • “Features introduced in ONCplus B.11.31.17” (page 28) • “Features introduced in ONCplus B.11.31.16” (page 28) • “Features introduced in ONCplus B.11.31.15” (page 29) • “Features introduced in ONCplus B.11.31.14” (page 29) • “Features introduced in ONCplus B.11.31.13” (page 29) • “Features introduced in ONCplus B.11.31.
Features introduced in ONCplus B.11.31.15 ONCplus B.11.31.15 is a defect fix release and does not include any new features. All features introduced in previous ONCplus versions are supported in ONCplus B.11.31.15 For information on the defects fixed, see “Enhancements and fixes in ONCplus to date” (page 8). Features introduced in ONCplus B.11.31.14 ONCplus B.11.31.14 is a defect fix release and does not include any new features.
For information on the defects fixed, see “Enhancements and fixes in ONCplus to date” (page 8). Features introduced in ONCplus B.11.31.11 For information on the defects fixed, see “Enhancements and fixes in ONCplus to date” (page 8). Features introduced in ONCplus B.11.31.10 ONCplus B.11.31.10 is a defect fix release and does not include any new features. All features introduced in previous ONCplus versions are supported in ONCplus B.11.31.10.
For more information about this feature, see the patch documentation for patch PHCO_40590 and the web page for the NCF Bundle. Features introduced in ONCplus B.11.31.08 ONCplus B.11.31.08 includes both defect fixes and new features. All features introduced in previous ONCplus versions are supported in ONCplus B.11.31.08. The following features were introduced in ONCplus B.11.31.08: New NFS features in ONCplus B.11.31.
Features introduced in ONCplus B.11.31.06 ONCplus B.11.31.06 includes both defect fixes and new features. This version of ONCplus supports all features included in previous ONCplus versions. In addition, the following new features are introduced in ONCplus B.11.31.06: New NIS features in ONCplus B.11.31.06 NIS introduces the following feature: • IPv6 support for RPC commands and daemons Phase II ONCplus B.11.31.06 delivers IPv6 support for rpc.rquotad, rpc.rstatd, rpc.
For more information on the NGROUPS expansion enhancement to HP-UX 11i v3, refer to the Group membership expansion: guidelines for deployment white paper. To locate this document, go to the HP-UX Core docs page at: www.hp.com/go/hpux-core-docs. On this page, select HP-UX 11i v3. Features introduced in ONCplus B.11.31.03 ONCplus B.11.31.03 includes both defect fixes and new features. All fixes and features introduced in previous ONCplus versions are supported in ONCplus B.11.31.03.
HPUX_ACLS and SYSV_ACLS. HPUX_ACLS are non-POSIX compliant. SYSV_ACLS are POSIX compliant. This version of CacheFS supports caching for only SYSV_ACLS. Thus, this version of CacheFS on HP-UX supports ACLs with VxFS and NFS and not with HFS. • Support for Logging A new command, cachefslog enables or disables logging for a CacheFS mount-point. If logging functionality is enabled, details about the operations performed on the CacheFS mount-point are stored in a logfile.
New NFS features in ONCplus B.11.31_LR • NFS Version 4 Protocol (NFSv4) NFSv4 is an IETF standard protocol that provides the following features: ◦ COMPOUND Procedure In NFSv4, related RPC requests are grouped into a single RPC procedure known as the COMPOUND procedure. The COMPOUND procedure decreases transport and security overhead because of fewer over-the-wire trips between the client and the server. This feature is transparent to the user.
• Secure NFS With Secure NFS security can be implemented at the Remote Procedure Call (RPC) level. This standard authentication system is known as Secure RPC. When NFS uses the facilities provided by Secure RPC, it is known as Secure NFS. RPC authentication enables you to use a variety of authentication systems, such as DH, UNIX, and KERB, and is not dependent on the version of NFS used.
• Backend Support AutoFS supports the storage and distribution of AutoFS maps in the following: • ◦ Files ◦ Network Information Service (NIS) ◦ Lightweight Data Access Protocol (LDAP) Filesystem Support AutoFS supports the automatic mounting and unmounting of the following filesystems: • ◦ NFS (All versions including NFSv4) ◦ CacheFS ◦ HFS ◦ VxFS ◦ CIFS ◦ AutoFS Secure NFS Support If the NFS client supports mounting of secure directories, AutoFS supports Secure NFS filesystems.
• Cache Consistency Checking CacheFS checks the files that are stored in the cache to ensure that the files are kept up to date. With this version of CacheFS, the default behavior is that the consistency checking used can impact CacheFS performance. Following are mount options that can be used to change the type of consistency checking performed by CacheFS: ◦ noconst Disable consistency checking. ◦ demandconst Consistency checking is performed on demand.
• Ipnodes Support Ipnodes is the new map that stores IPv6 information. Ipnodes acts as the new hosts database for IPv6 information. NIS provides support for ipnodes using the /etc/nsswitch.conf file. • Alternate Directory for passwd File Users can now specify a directory other than the default /etc directory where NIS must look for the passwd file. This feature enhances the security of the system, as information regarding this alternate directory is known only to the administrator.
4 Documentation feedback HP is committed to providing documentation that meets your needs. To help us improve the documentation, send any errors, suggestions, or comments to Documentation Feedback (docsfeedback@hp.com). Include the document title and part number, version number, or the URL when submitting your feedback.
