HP CIFS Server 3.0h Release Notes version A.02.03.
© Copyright 2007 Hewlett-Packard Development Company, L.P. Confidential computer software. Valid license from HP required for possession, use or copying. Consistent with FAR 12.211 and 12.212, Commercial Computer Software, Computer Software Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government under vendor's standard commercial license. The information contained herein is subject to change without notice.
Table of Contents Announcement.......................................................................................................................................7 Summary of changes in HP CIFS Server A.02.03.02.........................................................................7 Product Revision Number ................................................................................................................7 Fixes in HP CIFS Server A.02.03.02 ..................................................
List of Tables 1 2 3 Required Patches on HP-UX 11i v1 for winbind..................................................................................9 Required Patches on HP-UX 11i v1 for Kerberos v5 Client...............................................................10 Required Patch on HP-UX 11i v2 for Kerberos v5 Client...................................................................
Announcement This document contains information about some changes and security fixes provided in HP CIFS Server A.02.03.02, as well as other helpful information. HP CIFS Server A.02.03.02 is supported on HP-UX release 11i v1, v2 and 11i v3. The following list is a summary of the changes in this release. Summary of changes in HP CIFS Server A.02.03.02 • • HP CIFS Server A.02.03.02 is based on Samba 3.0.22 with 3.0.25 selected fixes.
Fixes in HP CIFS Server A.02.03.02 HP CIFS Server A.02.03.02 provides the following defect fixes: • Security Defect CVE-2007–2447, SSRTO71424: Potential remote execution JAGag40622 Unfiltered user input could potentially permit remote command injection and execution when invoking external scripts or commands defined in smb.conf. This problem may occur on all Samba 3.0.x versions.
Installation and Patch Requirements for HP CIFS Server A.02.03.02 Operating System Requirements HP CIFS Server A.02.03.02 can install on the following operating systems: • • • HP-UX 11i v1 on HP 9000 computer systems.
Without these patches installed, you cannot change a user password using the HP-UX command passwd when the winbind entry is configured in /etc/nsswitch.conf. Kerberos Product and Patch Requirements Kerberos v5 Client with version 1.3.5 or later is required to support HP CIFS Server integration with a Windows 2003 ADS Domain Controller (DC). Kerberos Client version 1.0 was originally bundled on HP-UX 11i v1 and v2. Kerberos Client version 1.3.5.03 is bundled on HP-UX 11i v3.
Known Problems and Workarounds The following is a list of known problems and, where possible, the appropriate workarounds for the HP CIFS Server A.02.03.02: Problem Share mode security does not work with POSIX ACLs. Workaound Microsoft servers do not support share mode security and Windows NT ACLs. No workaround currently exists.
Workaround The current version of smbstatus disallows a normal user to initialize tdb files. A normal user must preform smbstatus after CIFS Server is started by root, or tdb files have been initialized. Problem Changing the password stored in the smbpasswd file from a Windows XP machine without the sign and seal patch will fail and corrupt the password for the user. Workaround The password must then be reset by the administrator if this occurs.
Problem Because of increased Windows security requirements, profile storing may fail if adequate authority has not been configured for roaming profiles. Workaround Set profile acls = yes for the profile share used for the user profile files. Do not set profile acls = yes on normal shares as this will result in incorrect ownership of the files created on those shares. Problem 64 bit Windows XP clients cannot connect to the CIFS Server when it is configured with smb.conf parameter "security=server".
The user will be added correctly and the misleading messages will only be displayed with the first occurrence of adding a new Samba user. Workaround Verify that the user has been added correctly and ignore the misleading messages. Problem 64 bit Windows XP clients are unable to add a new ACE.
Workaround Use the "-m" option with useradd when adding a POSIX machine account. The home directory will be created for the new account if it does not exist. Problem The delete operation on a large number of files from a directory takes a long time to complete. Workaround One workaround is to close the Windows Explorer after the delete process is started. Beginning with A.02.03.01, another workaround is to set the "change notify timeout" smb.conf parameter to zero.
