HP CIFS Server 3.0f Release Notes version A.02.03 for HP-UX 11i v3 (December 2006)

Fixes in HP CIFS Server A.02.03

HP CIFS Server A.02.03 provides the following defect fixes:

• Security Defect – Security Bulletin: HPSBUX02155 SSRT061235 rev.2

JAGag15603

A potential security vulnerability has been identified with HP-UX running CIFS Server (Samba). This

vulnerability may permit unauthorized access or local authenticated user to gain elevated privileges.

• Memory Depletion

JAGag12260

The smbd daemon maintains internal data structures used track active connections to file and printer

shares. In certain circumstances, the memory usage of an smbd process may increase by issuing a

large number of share connection requests.

• CIFS-LIB is not automatically marked when selecting CIFS-RUN

(JAGaf96010)

This fix resolves a problem where if the CIFS-RUN fileset is marked for installation, the CIFS-LIB fileset

is not automatically selected. The CIFS-RUN and CIFS-LIB filesets depend on each other. Therefore, if

one fileset is marked for installation, the other fileset must be automatically marked.

• The smbd option -l override the desired "log file" smb.conf parameter location

(JAGag07160)

The smbd option -l can be used to override the default CIFS log file location. However, once the

smb.conf parameter "log file" is read by the daemon, it had been expected that the smb.conf

log file specification would be used for during of the logging. This fix changes the precedence, so that

if (and only if) a log file name is specified with the smb.conf parameter "log file" then it will override

the smbd -l option once the smb.conf file is read during the daemon's initialization.

• wbinfo -u and -g commands performed poorly with large numbers of users or groups

JAGag14944

Wbinfo has been improved to return results even with very large numbers of users or groups. Also,

when the security model is ADS, wbinfo will return with the results of the query faster than with previous

versions.

• Incorrect ownership in large directory search priority

JAGag15603

This fix resolves a problem that may result in incorrect ownership of Windows logon user during file

creation with "large directory search priority" enabled.

• Test HP CIFS Server with Red Hat Directory Server

JAGag13489

Red Hat Directory Server v7 has been proven to work compatibly with HP CIFS Server A.02.03 and

will be supported.