HP CIFS Server 3.0f Release Notes version A.02.
© Copyright 2006 Hewlett-Packard Development Company, L.P. Confidential computer software. Valid license from HP required for possession, use or copying. Consistent with FAR 12.211 and 12.212, Commercial Computer Software, Computer Software Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government under vendor's standard commercial license. The information contained herein is subject to change without notice.
Table of Contents Announcement..........................................................................................................................................7 Summary of changes in HP-UX CIFS Server A.02.03...............................................................................7 Product Revision Number ....................................................................................................................7 New and Changed Features in Version A.02.03.............................
List of Tables 1 2 3 4 5 Changed Parameters................................................................................................................................9 New Parameters ......................................................................................................................................9 Required Patches on HP-UX 11i v1..........................................................................................................12 Required Patches on HP-UX 11i v1..............
Announcement HP CIFS provides HP-UX with a distributed file system based on the Microsoft Common Internet File System (CIFS) protocols. This document contains information about some enhancements and defect fixes provided in the A.02.03 release of the HP CIFS Server, as well as other helpful information. HP CIFS Server A.02.03 is supported on HP-UX release 11i v1 and v2. The following list is a summary of the changes included in this release. Summary of changes in HP-UX CIFS Server A.02.
New and Changed Features in Version A.02.03 This release contains the following new enhancements and changes: Winbind Supports Non-blocking, Asynchronous Functionality This release of winbind supports an almost completely non-blocking, asynchronous request/reply implementation (with the exception of user and group enumeration). With this new enhancement, winbind provides better scalability in large domain environments and on high latency networks.
Configuration Parameter Changes This section contains a list of removed parameters, new parameters and changed parameters in HP CIFS Server A.02.03. Removed Parameters The following is a list of the smb.conf configuration parameters which are no longer used in the HP CIFS Server A.02.03: • • • • winbind enable local accounts template primary group min password length ldap filter Changed Parameters Table 1 shows a list of the changed configuration parameters in HP CIFS Server A.02.03.
Table 2 New Parameters (continued) enable asu support Hosts running the Advanced Server for Unix (ASU) product require some special accomodations such as creating a [ADMIN$] share that only supports IPC connections. Enabling this parameter allows the user to create the [ADMIN$] file share in smb.conf.
New Fixes in HP CIFS Server A.02.03 HP CIFS Server A.02.03 provides the following defect fixes: • Security Defect – Security Bulletin: HPSBUX02155 SSRT061235 rev.2 JAGag15603 A potential security vulnerability has been identified with HP-UX running CIFS Server (Samba). This vulnerability may permit unauthorized access or local authenticated user to gain elevated privileges.
Installation and Patch Requirements for HP CIFS Server A.02.03 Operating System Requirements HP CIFS Server A.02.03 can install on the following operating systems: • • HP-UX 11i v1 on HP 9000 system computers HP-UX 11i v2 on HP 9000 or HP Integrity computer systems HP CIFS Server Installation Requirements The HP CIFS Server requires approximately 78 MB of disk space for installation on the HP-UX 11i v1 machine and 146 MB of disk space on the HP-UX 11i v2 machine.
HP-UX Patch Requirements For HP-UX 11i v1, the Kerberos v5 Client product requires that you install the patches listed in Table 3. For HP-UX 11i v2, you must install the patch listed in Table 4. You can download patches from the IT Resource Center (ITRC) patch and firmware database available at: http://itrc.hp.com Table 4 Required Patches on HP-UX 11i v1 Patch Number Description PHCO_24400 libc cumulative patch. PHCO_24402 libc cumulative header file patch. PHNE_27796 libnsss_dns DNS backend patch.
Known Problems and Workarounds The following is a list of known problems and, where possible, the appropriate workarounds for the HP CIFS Server A.02.03 Problem Share mode security does not work with POSIX ACLs. Workaound Microsoft servers do not support share mode security and Windows NT ACLs. No workaround currently exists.
"/var/opt/samba/locks/connections.tdb not initialized. This is normal if an SMB client has never connected to your server." Workaround The current version of smbstatus requires the write access permission for /var/opt/samba/locks/connections.tdb, /var/opt/samba/locks/locking.tdb and /var/opt/samba/locks/brlock.tdb files. For a workaround, ensure that any users attempting to run smbstatus are given the write access to these files.
Problem The error message "The file may have been changed" occurs when you save an excel file to Samba. The error message also provides choices to either "save a copy" or "overwrite changes". Workaround When prompted, answer "overwrite changes" otherwise the file must be saved under a different name. To avoid the error altogether, a registry change can resolve the problem as described in the MS knowledge base article found at http://support.microsoft.com/default.
(minimum password age), returning 0 account_policy_get: tdb_fetch_uint32 failed (lockout duration), returning 0 account_policy_get: tdb_fetch_uint32 failed (reset count minutes), returning 0 account_policy_get: tdb_fetch_uint32 failed (bad lockout attempt), returning 0 account_policy_get: tdb_fetch_uint32 failed (disconnect time), returning 0 account_policy_get: tdb_fetch_uint32 failed (refuse machine password change), returning Added user user1 for field 6 for field 7 for field 8 for field 9 for field 10
Problem 64 bit Windows XP clients are unable to add a new ACE. Adding an ACE through Windows Explorer File->Properties->Security interface to a file or directory from a Windows XP Professional 64-bit edition results in an error that reads: This program cannot open the required dialog box because the specified computer cannot be determined to belong to a domain. Try again. Workaround There is no known workaround at this time.
