CIFS/9000 Client Release Note, March 2002

CIFS/9000 Client A.01.07
Features and Fixes in Recent Releases
Chapter 1 7
Troubleshooting Information for PAM-NTLM
• If you are having difficulty accessing the password server configured
in smb.conf, PAM-NTLM can utilize an lmhosts file on the local
system to look up its address. To utilize this functionality, create the
file, /etc/opt/samba/lmhosts, containing entries, one per line, in the
following format where netbios_name is the password server used by
PAM-NTLM.
ip_address <one or more tabs or spaces> netbios_name
• If you are going to remove the PAM-NTLM fileset (or the entire
CIFS/9000 Client) from your system, ensure that all references to the
libpam_ntlm.1 library have been removed from /etc/pam.conf. Your
system can become inaccessible if PAM-NTLM is configured in
/etc/pam.conf but the PAM-NTLM libraries are removed from the
system.
• Use caution when editing /etc/pam.conf. You should have a good
understanding of the PAM framework before modifying this file. A
misconfigured /etc/pam.conf can make the system inaccessible or
cause a serious security breach, such as allowing root access to
anyone,without a password. See the reference to pam.conf in section
4 of the HP-UX manpages and in the PAM-NTLM Configuration
section in Installing and Administering the CIFS/9000 Client.
Recommended Configuration Values
HP recommends changing the value of the following three configuration
parameters to their new default values:
• runAsUser
• requestTimeout
• nfsAttributeCaching (you will need to add this one)
The following is a description of each of the new configuration values:
IMPORTANT Even if you do not upgrade to A.01.05 of the CIFS/9000 client, HP
recommends you use these new configuration values with your current
version of the CIFS/9000 client.