HP System Management Homepage Release Notes HP-UX, Linux, and Windows Operating Systems (5900-3101, April 2013)
3 Issues and workarounds
HP SMH undergoes rigorous testing before releasing any given version of the product. From HP
test activities to date, the following items have been uncovered that you should keep in mind. Also,
see the HP System Management Homepage Installation and Configuration Guide and HP System
Management Homepage Online Help for known issues.
HP SMH 3.2.6 release for HP-UX 11.31/ HP SMH 3.2.2 release for HP-UX
11.23
• Issue: Users not defined on the local system, but defined only on an Active Directory, cannot
login to HP SMH in an environment where Kerberos authentication via PAM on HP-UX is
implemented. This problem occurs in HP-UX 11i v2 and 11i v3 on Integrity systems.
Description: A 64 bit libnss.winbind.so is necessary for the authentication. The 64-bit
shared library, /usr/lib/hpux64/libnss_winbind.so.1 that is required for SMH
authentication is currently not available.
Workaround: This problem currently does not have any known workaround. The problem is
planned to be resolved in a future release of HP SMH.
• Issue/Description: When HP SMH is installed, the user hpsmh and group hpsmh is automatically
added to the /etc/passwd file. If you are using LDAP or any other network service to manage
user and group accounts, there might be a possibility that the user ID (UID) and the group ID
(GID) is already in use by the LDAP users, which can be confusing. The problem occurs in
HP-UX 11i v3 on Integrity systems.
Workaround: To overcome this, add a local hpsmh user and group using unique UID and
GID (IDs not in use by LDAP or the other network services) manually before installing the HP
SMH.
Complete the following steps to manually add the local hpsmh user and group IDs:
1. Determine the available reserved IDs for the group (for example, 130) and the user (for
example, 125).
2. Add the group using the command /usr/sbin/groupadd -g 130 hpsmh.
3. Add the user using the command /usr/sbin/useradd -u 125 -g hpsmh
-d/var/opt/hpsmh \ -c "System Management Homepage" hpsmh.
NOTE: If you do not manually add the group and the user before installing the HP SMH,
the group and user is automatically created during HP SMH installation using locally available
IDs, which may already be in use on the network.
• Issue: Active Directory users cannot login to SMH in an environment where Kerberos
authentication via PAM on HP-UX, and Active Directory for Unix users and groups is
implemented.
Description: HP SMH on HP-UX currently does not support Kerberos-based authentication.
Workaround: The workaround is to configure the sysmgthp service in the pam.conf file. To
configure the pam.conf file, open the pam.conf file and add the following:
sysmgthp auth required libpam_hpsec.so.1
NOTE: The libpam_hpsec.so.1 shared library is not available on HP-UX 11i v1.
sysmgthp auth sufficient libpam_krb5.so.1
sysmgthp auth required libpam_unix.so.1 try_first_pass
sysmgthp account required libpam_hpsec.so.1
10 Issues and workarounds