HP-UX Secure Resource Partitions (SRP) A.02.00.001 Release Notes

such. See the HP-UX System Administrator's Guide: Security Management, available
at http://docs.fc.hp.com/en/oshpux11iv3.html#System%20Administration for
information on how to configure compartment rules.
• Long running connections between a remote client and a process running in a
SRP may be periodically reset or dropped.
An active gateway may occasionally be marked as non-responsive and temporarily
dropped from the internal routing tables, resulting in connection loss or reset. The
problem may occur more frequently when symmetric network options are enabled
for the system. In symmetric routing, the same network interface is used for both
inbound and outbound traffic for a given destination. SRP configures the system
to use symmetric network routing to ensure messages are routed for each SRP
compartment's network interface.
Workaround
Disable gateway probing as follows:
1. Disable gateway probing at system startup time by adding the following
entries to the /etc/rc.config.d/nddconf file. Change the index entry
[0] as instructed in the nddconf file:
TRANSPORT_NAME[0]=ip
NDD_NAME[0]=ip_ire_gw_probe
NDD_VALUE[0]=0
2. Disable gateway probing immediately, as follows:
# ndd -set /dev/ip ip_ire_gw_probe 0
NOTE: Disabling gateway probing will limit the server’s ability to failover
to a secondary route in networks containing redundant gateways.
• SRP does not work with the March 2009 Operating Environments Update Release
(or B.11.31.0903 as reported by swlist | grep HPUX11i).
When you execute srp, the following error is displayed:
Can't locate ActiveState/Prompt.pm in @INC (@INC contains: /opt/hpcmgr/lib
/opt/perl_32/lib/5.8.8/IA64.ARCHREV_0-thread-multi /opt/perl_32/lib/5.8.8
/opt/perl_32/lib/site_perl/5.8.8/IA64.ARCHREV_0-thread-multi /opt/perl_32/lib/site_perl/5.8.8
/opt/perl_32/lib/site_perl
/opt/perl_32/lib/vendor_perl/5.8.8/IA64.ARCHREV_0-thread-multi /opt/perl_32/lib/vendor_perl/5.8.8
/opt/perl_32/lib/vendor_perl)
at /sbin/srp line 16.
BEGIN failed--compilation aborted at /sbin/srp line 16.
A similar error is displayed when you execute srp_setup. This problem occurs
because the version of Perl delivered with HP-UX 11i Version 3, March 2009 is
missing libraries required by SRP.
Solution
Install patches PHSS_39653 and PHSS_39693.
1.6 Known Problems in HP-UX SRP A.02.00.001 11