HP CIFS Server 3.0b Release Note version A.02.01.01 HP-UX 11i v1 and v2 Manufacturing Part Number : B8725-90080 E0105 U.S.A. © Copyright 2005 Hewlett-Packard Company.
Legal Notices The information in this document is subject to change without notice. Hewlett-Packard makes no warranty of any kind with regard to this manual, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose. Hewlett-Packard shall not be held liable for errors contained herein or direct, indirect, special, incidental or consequential damages in connection with the furnishing, performance, or use of this material.
HP CIFS Server Release Note Announcement 1 HP CIFS Server Release Note Announcement This document contains information about the bug fixes provided in the A.02.01.01 release of the HP CIFS Server, as well as other helpful information. The following list highlights the main changes. Common Internet File System (CIFS) Server A.02.01.01 NOTE • This version of HP CIFS Server is a fix release based on Samba 3.0.7. • Provide a fix for the potential integer overflow vulnerability.
HP CIFS Server Release Note Announcement Fix releases include only those changes required to resolve specific defects. The base product revision number (A.xx.xx) is unchanged; only the fix suffix number (A.xx.xx.
HP CIFS Server Release Note Fixes in the HP CIFS Server A.02.01.01 Fixes in the HP CIFS Server A.02.01.01 The HP CIFS Server A.02.01.01 provides the following fixes: • Potential Integer Overflow Vulnerability SSRT4885 (CR JAGaf50678) A security vulnerability, CAN-2004-1154, has been found in the MS RPC unmarshalling code of HP CIFS Server. This problem could potentially be exploited to gain root access remotely. HP has made the recommended fixes, according to Samba 3.0.
HP CIFS Server Release Note Fixes in the HP CIFS Server A.02.01.01 This fix corrects an invalid paramter of mmap() call in profiles.c so that profiles utility can function correctly. Configuration Parameters Changes in A.02.01.01 The default value of the strict locking parameter has been changed from Yes to No.
HP CIFS Server Release Note Features and Fixes in Recent Releases Features and Fixes in Recent Releases New Functionality in the HP CIFS Server A.02.01 Backup Domain Controller (BDC) Support HP CIFS Server A.02.01 provides the BDC features and supports BDCs in a domain in which it acts as a Primary Domain Controller (PDC).
HP CIFS Server Release Note Features and Fixes in Recent Releases Winbind Support UNIX and Microsoft Windows NT have different models to represent user and group information and use different technologies for implementing them. Winbind is a component of the Samba suite of programs that resolve Windows users and groups to HP-UX UIDs and GIDs. Winbind provides the NSS routine, /etc/lib/libnss_winbind.1, which interfaces to the winbind daemon, winbindd, to resolve ID mappings.
HP CIFS Server Release Note Features and Fixes in Recent Releases • ldapsam: Attribute rich account storage and retrieval backend utilizing an LDAP directory. This makes use of a different schema than what had been provided with A.01.* versions. • ldapsam_compat : An LDAP storage and retrieval backend utilizing an LDAP directory and is compatible with A.01.* versions.This backend makes use of the same schema provided with A.01.* versions. New Account Management Tools HP CIFS Server A.02.
HP CIFS Server Release Note HP CIFS Deployment Models HP CIFS Deployment Models HP CIFS Server provides many features and options which can be used effectively in a large variety of mixed Windows and UNIX environments. This extreme flexibility presents a dizzying array of deployment scenarios - too many to adequately cover in a practical set of documentation.
HP CIFS Server Release Note HP CIFS Deployment Models For more information on how to set up and configure the Samba domain model, refer to Chapter 11, “HP CIFS Deployment Model” in the HP CIFS Server A.02.01 Administrator’s Guide.
HP CIFS Server Release Note HP CIFS Deployment Models • Provides easy expansion capability. For more information on how to set up and configure the Unified domain model, refer to Chapter 11, “HP CIFS Deployment Model” in the HP CIFS Server A.02.01 Administrator’s Guide. NOTE 12 For more information on Windows Services for Unix (SFU), refer to Microsoft Services for Windows Home page at http://www/microsoft.
HP CIFS Server Release Note Behavior Differences Between HP CIFS Server A.01.* and A.02.* Behavior Differences Between HP CIFS Server A.01.* and A.02.* Many known changes in behavior between HP CIFS Server A.01.*, based on Samba 2.2, and HP CIFS Server A.02.*, based on Samba 3.0, might affect your HP CIFS Server operation. This section describes significant changes in behaviors for HP CIFS Server A.02.*. For additional changes and details, refer to /opt/samba/SAMBA_WHATSNEW.txt.
HP CIFS Server Release Note Behavior Differences Between HP CIFS Server A.01.* and A.02.* • The join domain command In A.02.*, the "smbpasswd -j domain_name -r PDC_hostname -U administrator%passwd"command used to join a domain has been replaced by net commands. The Windows NT domain or Windows 2000 mixed mode domain uses the "net join -j domain_name -U Administrator%passwd” command, or the "net join -U Administrator%passwd" command by specifying the domain name with the workgroup parameter in the smb.
HP CIFS Server Release Note Updating HP CIFS Server A.01.* to A.02.01 or later Updating HP CIFS Server A.01.* to A.02.01 or later The installation and configuration procedures in Chapter 2, "Installing and Configuring the HP CIFS Server" of HP CIFS Server A.02.01 Administrator’s Guide apply to HP CIFS Server A.02.* versions and to A.01.* versions. However, you must consider the following additional concerns and apply these procedures when updating from an A.01.* version to an A.02.
HP CIFS Server Release Note Updating HP CIFS Server A.01.* to A.02.01 or later — ldapsam: Attribute rich account storage and retrieval backend utilizing an LDAP directory. This provides an updated schema supported by Samba 3.0. — ldapsam_compat : An LDAP storage and retrieval backend utilizing an LDAP directory and is compatible with A.01.* versions.This backend makes use of the same schema provided with A.01.* versions. You might also specify a combination of passdb backends.
HP CIFS Server Release Note Known Problems and Workarounds Known Problems and Workarounds For HP CIFS Server The following is a list of known problems and, where possible, the appropriate workarounds for the HP CIFS Server A.02.01.01: Problem Share mode security does not work with POSIX ACLs. Workaround Microsoft servers do not support share mode security and Windows NT ACLs. No workaround currently exists. Problem CIFS clients cannot delete open files.
HP CIFS Server Release Note Known Problems and Workarounds Workaround Access the file directly from the Windows client instead of through Windows Terminal Services. Problem Creation of symlinks using UNIX extension fails if a full path is used to specify the symlink. Workaround Change to the directory where the symlink will reside and create the link using relative path. Problem Once the wins server option is set in the smb.conf file, it cannot be cleared using SWAT utility Workaround Edit the smb.
HP CIFS Server Release Note Known Problems and Workarounds Problem The HP CIFS Server creates a smbnull user for guest access, which does not have or require a home directory. However the password/group file checker tool, pwck, on HP-UX always assumes that each entry in the /etc/passwd file should have its own login directory.
HP CIFS Server Release Note Known Problems and Workarounds For detailed information on the hotfix, see the Microsoft Q818528 article at: http://support.microsoft.com/default.
HP CIFS Server Release Note Installation Requirements for the HP CIFS Server A.02.01.01 Installation Requirements for the HP CIFS Server A.02.01.01 HP CIFS Server Installation Requirements The HP CIFS Server requires approximately 123 MB of disk space for installation on the HP-UX 11i v1 and v2 machines.
HP CIFS Server Release Note Installation Requirements for the HP CIFS Server A.02.01.
