HP System Management Homepage Version 3.2.2 Release Notes (466303-404; March 2011)

2 Issues and workarounds
HP SMH undergoes rigorous testing before releasing any given version of the product. From HP test activities
to date, the following items have been uncovered that you should keep in mind. Also, refer to the HP System
Management Homepage Installation Guide and HP System Management Homepage Online Help for known
issues.
HP SMH 3.2.2 release for HP-UX 11.31/ HP SMH 3.2.0 release for HP-UX
11.23
• Issue: Users not defined on the local system, but defined only on an Active Directory, cannot login to
HP SMH in an environment where Kerberos authentication via PAM on HP-UX is implemented. This
problem occurs in HP-UX 11i v2 and 11i v3 on Integrity systems.
Description: A 64 bit libnss.winbind.so is necessary for the authentication. The 64-bit shared
library, /usr/lib/hpux64/libnss_winbind.so.1 that is required for SMH authentication is
currently not available.
Workaround: This problem currently does not have any known workaround. The problem is planned
to be resolved in a future release of HP SMH.
• Issue/Description: When HP SMH is installed, the user hpsmh and group hpsmh is automatically
added to the /etc/passwd file. If you are using LDAP or any other network service to manage user
and group accounts, there might be a possibility that the user ID (UID) and the group ID (GID) is already
in use by the LDAP users, which can be confusing. The problem occurs in HP-UX 11i v3 on Integrity
systems.
Workaround: To overcome this, add a local hpsmh user and group using unique UID and GID (IDs
not in use by LDAP or the other network services) manually before installing the HP SMH.
Complete the following steps to manually add the local hpsmh user and group IDs:
1. Determine the available reserved IDs for the group (for example, 130) and the user (for example,
125).
2. Add the group using the command /usr/sbin/groupadd -g 130 hpsmh.
3. Add the user using the command /usr/sbin/useradd -u 125 -g hpsmh
-d/var/opt/hpsmh \ -c "System Management Homepage" hpsmh.
NOTE: If you do not manually add the group and the user before installing the HP SMH, the group
and user is automatically created during HP SMH installation using locally available IDs, which may
already be in use on the network.
• Issue: Active Directory users cannot login to SMH in an environment where Kerberos authentication via
PAM on HP-UX, and Active Directory for Unix users and groups is implemented.
Description: HP SMH on HP-UX currently does not support Kerberos-based authentication.
Workaround: The workaround is to configure the sysmgthp service in the pam.conf file. To configure
the pam.conf file, open the pam.conf file and add the following:
sysmgthp auth required libpam_hpsec.so.1
NOTE: The libpam_hpsec.so.1 shared library is not available on HP-UX 11i v1.
sysmgthp auth sufficient libpam_krb5.so.1
sysmgthp auth required libpam_unix.so.1 try_first_pass
sysmgthp account required libpam_hpsec.so.1
sysmgthp account sufficient libpam_krb5.so.1
sysmgthp account required libpam_unix.so.1
HP SMH 3.2.2 release for HP-UX 11.31/ HP SMH 3.2.0 release for HP-UX 11.23 11