ECO NUMBER: ASUV51AECO002 ----------- PRODUCT: Advanced Server for UNIX -------- UPDATED PRODUCT: Advanced Server for UNIX Version 5.1A ---------------- RELEASE DATE: November 2001 -------------- Cover letter for Advanced Server for UNIX Version 5.1A ECO kit #002. This ECO kit provides ASU command enhancements and fixes problems found in the ASU Version 5.1A software or earlier versions. This cover letter has three sections: - ASU General Problem Descriptions and Solutions - ASU Command Fixes and Enhancements - ASU Installation Instructions ---------------------------------------------- ASU General Problem Descriptions and Solutions ---------------------------------------------- Problem Addressed: A name conflict error occurred if a system running Windows 2000 Professional had to resolve a cluster alias by broadcast. This problem has been fixed. Problem Addressed: Syntax errors in the /etc/printcap file will no longer cause the lmx.srv process to crash; however, you must use a text editor to correct syntax errors before the ASU server can correctly update the file. Problem Addressed: When using the asusetup command, you can specify domainname\username for the administrative account when joining an existing domain as a backup domain controller (BDC) or as a member server. Problem Addressed: To run the ASDU Password utility on a system running Windows NT or Windows 2000 Server or Professional, the SyncUnixPassword registry entry must be disabled, which it is by default. Problem Addressed: If you enabled the SyncUnixPassword registry parameter and installed Enhanced Security, the ASU server will correctly synchronize passwords that are longer than eight characters. Problem Addressed: You can set default Tru64 UNIX permissions in octal format for newly created files and directories in a share. To do so, you must use the lmshare command to create or modify the share. To create a share using the lmshare command, enter: # lmshare -a The lmshare command prompts you for the following information about the share. Press Enter for those fields that you do not want to change the value of. Sharename? test1 Type (d|p|c|i)? [d] d Local path? /home/test1 Remark? test1 Permissions(rwcxdaps)? [rwcxda] Per share Unix file permissions? [0] 664 Per share Unix directory permissions? [0] 777 Per share ignore Unix permissions? [0] Maximum users? [unlimited] Password? Existing shares and shares not created by the lmshare command will get a default value of zero (0) for the per share Unix file and directory permissions. Newly created files in shares with a zero value for the per share Unix file permissions will get the Tru64 UNIX file permissions as defined by the value of the UnixFilePerms registry entry. Newly created directories in shares with a zero value for the per share Unix directory permissions will get the Tru64 UNIX directory permissions as defined by the value of the UnixDirectoryPerms registry entry. To display the current per share Unix file and directory permissions for a share, enter: # lmshare -L share_name To set the default Tru64 UNIX file permissions for newly created files in a share, enter: # lmshare -F share_name file_permissions where share_name is the name of the share, and file_permissions are the Tru64 UNIX file permissions in octal format. To set the default Tru64 UNIX directory permissions for newly created directories in a share, enter: # lmshare -D share_name directory_permissions where share_name is the name of the share, and directory_permissions are the Tru64 UNIX directory permissions in octal format. Problem Addressed: You can configure whether or not the ASU server enforces Tru64 UNIX permissions checking on a share. To do so, you must make sure that the IgnoreUnixPermissions registry entry is disabled and use the lmshare command to create or modify a share. Existing shares and shares not created by the lmshare command will have Tru64 UNIX permissions checking enabled by default. Note that if Tru64 UNIX quota checking is enabled, the Tru64 UNIX permissions will be enforced regardless of the IgnoreUnixPermission registry entry settting, or the per share ignore Unix permissions settings. Follow these steps to configure the ASU server to disable Tru64 UNIX permission checking on a per share basis: 1. Disable the IgnoreUnixPermissions registry entry if it was enabled. By default, the IgnoreUnixPermissions registry entry is disabled. # regconfig SYSTEM/CurrentControlSet/Services/AdvancedServer/\ FileServiceParameters IgnoreUnixPermissions REG_DWORD 0 2. If you disabled the IgnoreUnixPermissions registry entry, restart the ASU server: # net stop server # net start server To create a share using the lmshare command, enter: # lmshare -a The lmshare command prompts you for the following information about the share. Press Enter for those fields that you do not want to change the value of. Sharename? test2 Type (d|p|c|i)? [d] d Local path? /home/test2 Remark? ASU test share Permissions(rwcxdaps)? [rwcxda] Per share Unix file permissions ? [0] 664 Per share Unix directory permissions ? [0] 777 Per share ignore Unix permissions? [0] 1 Maximum users? [unlimited] Password? To display whether or not the per share Unix permissions are ignored, enter: # lmshare -L share_name To disable Tru64 UNIX permissions checking on a share, enter: # lmshare -I share_name 1 To enable Tru64 UNIX permissions checking on a share, enter: # lmshare -I share_name 0 Connected users must reconnect to the share for the new setting to take effect. Note: If you enable the IgnoreUnixPermissions registry entry, the ASU server will ignore Tru64 UNIX permission checking on all disk shares, regardless of the per share ignore Unix permissions setting on a share. ---------------------------------- ASU Command Fixes and Enhancements ---------------------------------- The net browser command sometimes failed with a seg fault. This problem has been corrected. The samcheck command no longer requires that the Administrator account be a member of the Domain Admins or Domain Users groups. While not recommended, you can remove the Administrator account from these groups on a system running Windows NT. The acladm -T command trims redundant access control lists (ACLs) on files and directories. The acladm -C command detects and repairs a wider range of invalid ACL path names and displays a more detailed report on any invalid security descriptors that it finds. The aclload command only accepts input path names that are absolute path names because the ACL Manager only works with absolute path names. The rmacl command can be used to remove orphaned ACLs for files and directories that were deleted through Tru64 UNIX instead of through Windows. The blobadm -s command has an improved display of blob file statistics, particularly for large blob files. The lmshare command supports share names that contain spaces; however, a share name that contains spaces must be enclosed in double quotes. The lmshare command has the following new options: - The lmshare -C command checks the share file for problems. - The lmshare -D command sets the default Tru64 UNIX directory permissions in octal format for newly created directories in a share. - The lmshare -F command sets the default Tru64 UNIX file permissions in octal format for newly created files in a share. - The lmshare -I command sets or clears ignore Tru64 UNIX permissions checking for the share. - The lmshare -L command displays detailed information about a share, including the new per-share UNIX file and directory permissions and ignore UNIX permissions fields. - The lmshare -R command checks the share file and repairs any problems. ----------------------------- ASU Installation Instructions ----------------------------- This ECO kit is a complete software kit that includes the features and functionality of previous ASU software releases, and provides fixes for the problems described in this document. If you are installing the ASU software for the first time, change to the directory where the ECO software was downloaded, enter the following command, and follow the instructions on the screen: # setld -l . If you have ASU, ASDU, or PATHWORKS for DIGITAL UNIX subsets installed, then you must use the Tru64 UNIX setld command to deinstall those subsets before you install the subsets in this ECO kit. Follow these steps to use the setld command to deinstall ASU, ASDU, or PATHWORKS subsets and install the ECO software: 1. Display the installed ASU, ASDU, or PATHWORKS subsets. Enter one of the following commands depending on the software installed: # /usr/sbin/setld -i | grep ASU | grep installed # /usr/sbin/setld -i | grep ASDU | grep installed # /usr/sbin/setld -i | grep PATHWORKS | grep installed 2. Deinstall the ASU, ASDU, or PATHWORKS subsets. Enter the /usr/sbin/setld -d command followed by the name of each subset. For example, to deinstall the ASU Version 5.0 base, transport, and reference page subsets, enter: # /usr/sbin/setld -d ASUBASE500 ASUTRAN500 ASUMANPAGE500 While subsets are being deinstalled, you are prompted to save configuration files and the user account and share databases. Save these files and databases if you want to reuse them with the ASU Version 5.1A ECO2 software. 3. Install the ASU Version 5.1A ECO2 software. Change to the directory where the ASU Version 5.1A ECO2 software was downloaded, enter the following command, and follow the instructions on the screen: # setld -l . See the ASU Installation and Administration guide for more information on installing the ASU software. =============================================================== Copyright Compaq Computer Corporation, 2001. All Rights Reserved. Unpublished rights reserved under the copyright laws of the United States. The software contained on this media is proprietary to and embodies the confidential technology of Compaq Computer Corporation. Possession, use, duplication, or dissemination of the software and media is authorized only pursuant to a valid written license from Compaq Computer Corporation.