OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: system PRIVILEGED account (rootstage1.cxo.cpqcorp.net)
Date: Tue Dec 11 2001 - 02:30:10 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    *******************************************************************************
    * *
    * This is an update to an existing patch... *
    * *
    * Online links can be found at *
    * http://ftp.support.compaq.com/patches/public/vms/axp/v6.2/dce/1.5/dec-axpvms-dceeco_015_2-v0100--4.README
    *******************************************************************************

    TITLE: DCE-VMS DCEECO_015_2-V0100 DCE V1.5 for OpenVMS Alpha ECO Summary

    New Kit Date: 07-DEC-2001
    Modification Date: 11-DEC-2001
    Modification Type: FIXED THE TYPO IN TITLE

    NOTE: An OpenVMS saveset or PCSI installation file is stored
           on the Internet in a self-expanding compressed file.
     
           For OpenVMS savesets, the name of the compressed saveset
           file will be kit_name.a-dcx_vaxexe for OpenVMS VAX or
           kit_name.a-dcx_axpexe for OpenVMS Alpha. Once the OpenVMS
           saveset is copied to your system, expand the compressed
           saveset by typing RUN kitname.dcx_vaxexe or kitname.dcx_alpexe.
     
           For PCSI files, once the PCSI file is copied to your system,
           rename the PCSI file to kitname-dcx_axpexe.pcsi, then it can
           be expanded by typing RUN kitname-dcx_axpexe.pcsi. The resultant
           file will be the PCSI installation file which can be used to install
           the ECO.
     

     
     
    Copyright (c) Compaq Computer Corporation 2000, 2001. All rights reserved.

    PRODUCT: DCE V1.5 for OpenVMS Alpha

    OP/SYS: OpenVMS Alpha

    SOURCE: Compaq Computer Corporation

    ECO INFORMATION:

         ECO Kit Name: DCEECO_015_2-V0100
                        DEC-AXPVMS-DCEECO_015_2-V0100--4.PCSI
         ECO Kits Superseded by This ECO Kit: DCEECO_015_1-V0100
         ECO Kit Approximate Size: 31472 Blocks
         Kit Applies To: OpenVMS Alpha 6.2, V7.1, V7.1-2, V7.2,
                                        V7.2-1 and V7.2-1H1.
                          DCE V1.5 for OpenVMS Alpha
         System/Cluster Reboot Necessary: No
         Rolling Re-boot Supported: Not Applicable
         Installation Rating: INSTALL_2
                               2 - To be installed on all systems running
                                   the listed version(s) of OpenVMS and
                                   using the following feature(s):

                                     Compaq DCE V1.5 for OpenVMS Alpha

                               INSTALL_3
                               3 - The kit should be installed on systems
                                   using the following feature if the
                                   problems fixed are occurring:

                                     Compaq COM for OpenVMS

         Kit Dependencies:

           The following remedial kit(s), or later, must be installed BEFORE
           installation of this kit:

             VMS62TO71_PCSI-V0200

           In order to receive all the corrections listed in this
           kit, the following remedial kits, or later should also be installed:

             None

    ECO KIT SUMMARY:

    An ECO kit exists for DCE V1.5 on OpenVMS Alpha V6.2 through V7.2-1H1.
    This kit addresses the following problems:

    PROBLEMS ADDRESSED IN DCEECO_015_2 KIT:

      o DCE server processes such as DCE$SECD and DCE$CDSD, as well as
         user written DCE servers sporadically abort with SS$_ACCVIO
         when hit with a fast burst of client request activity.

              Images Affected: [SYSLIB]DCE$LIB_SHR.EXE

      o The DCE$RPCD daemon generated thousands of error messages and
         logged them into the DCE$RPCD.OUT file as:
         (rpc) *** FATAL ERROR (receive_dispatch) Unexpected exception

            raised at CNRCVR.C;2\587 ***

            (rpc) *** FATAL ERROR (rpc__cn_network_receiver) Unexpected

            exception is raised at CNRCVR.C;2\398 ***

              Images Affected: [SYSLIB]DCE$LIB_SHR.EXE

      o A process using DCE RPC services aborts with a bugcheck
         similar to the one below:

         DECthreads bugcheck (version V3.15-262), terminating execution.
         % Reason: mutex 0x00000000005DD868 :0 ref. overflow on lock

              Images Affected: [SYSLIB]DCE$LIB_SHR.EXE

      o After the installation of DCE V1.5 the IDENT, IDL, and RPCLM
         commands are missing from the system command tables.

              Images Affected: [syslib]DCLTABLES.EXE

      o After the installation of DCE V1.5 ECO 1 on systems without
         the DCE-SECURITY license loaded, dce_setup fails with the
         following error:
         **************************** ERROR ****************************
           *** Images required for running the DCE V1.5 ECO 1 for OpenVMS Alpha
           *** product were not found on this system. These images should have
           *** have been placed on the system during the installation of this
           *** product.
           ***
           *** Please install the DCE V1.5 ECO 1 for OpenVMS Alpha product
           *** to ensure that the required images are properly
           *** installed on the system.

      o The DCE$DTSD process aborts with the error CMA-F-EXCOPLOS and
         a message of thread has been canceled.

               Images Affected: [SYSMGR]DCE$SETUP.COM

      o A new logical has been defined to allow customers to have the
         DCE daemon files produce process dumps. The logical name
         DCE$DUMP_DAEMONS can be defined prior to dce startup to add
         the /DUMP qualifier to the daemon process. Process dumps can
         only be reliably produced and read on Alpha V7.2-1 systems.
         You must install special debugger kit ADB073 on your V7.2-1
         for the DCE dumps to be usable. Please contact your Compaq
         support representative to a copy of the ADB073 kit.

              Images Affected: [SYSMGR]DCE$RPC_STARTUP.COM
                                [SYSMGR]DCE$SETUP.COM

    PROBLEMS ADDRESSED IN DCEECO_015_1 KIT:

      o RPC authentication calls from NT DCE 2.2 clients fail with
         Principal Unknown errors although the principal is listed in
         the registry. The failures occur for principals and accounts
         created from OpenVMS DCE.

           Images Affected: [SYSEXE]DCE$RGY_EDIT.EXE

      o Upon reboot of the system, startup hangs when one of the DCE
         CDS daemon processes fails to start. Examination of the .OUT
         file shows the start fails with a messages stating the daemon
         is already running.

           Images Affected:
             - [SYSEXE]DCE$CDSADV.EXE
             - [SYSEXE]DCE$CDSD.EXE
             - [SYSEXE]DCE$GDAD.EXE

      o Directory of sys$manager or sys$scratch lists many
         DCE_OUT*.tmp files.

           Images Affected:
             - [SYSMGR]DCE$SETUP.COM
             - [SYSMGR]DCE$RPC_STARTUP.COM

      o When starting DCE on a system running Multinet, the following
         DCL message is displayed.

           %DCL-W-UNDFIL, file has not been opened by DCL - check logical name

           Images Affected: [SYSMGR]DCE$SETUP.COM

      o Eliminate zero block files left in the credentials cache directory.
         When a dce_login is performed, six files are created in the
         credentials cache directory, DCE$SPECIFIC:[VAR.SECURITY.CREDS]. An
         example is the following files:

           16 029D9101.;2 1-OCT-1998 15:28:18.37
           17 029D9101.;1 1-OCT-1998 15:28:17.76
           18 029D9102.;1 1-OCT-1998 15:28:19.27
           19 029D9200.;1 1-OCT-1998 15:28:19.02
           20 029D9200.DATA;1 1-OCT-1998 15:28:19.38
           21 029D9200.NC;1 1-OCT-1998 15:28:19.18

         After a kdestroy, two files remain from the original login.
         In the login example above, the following files are left:

           16 029D9101.;1 1-OCT-1998 15:28:17.76
           17 029D9102.;1 1-OCT-1998 15:28:19.27

           Images Affected: [SYSLIB]DCE$LIB_SHR.EXE

      o DCE login fails when the input for the password is not obtained
         from a terminal. The login fails with the following error:

           $ rgy_edit
           Current site is: registry server at /.../the_cell/subsys/dce/sec/master
           l princ_name
           -dce-
           login: Credentials cache I/O operation failed XXX Error in input
                  password. Login failed.

           exit
           bye

           Images Affected: [SYSLIB]DCE$LIB_SHR.EXE

      o Every one hour, the sec_clientd daemons delete stale credentials
         files out of the DCE credentials cache directory. If run in
         debug mode, the daemon deletes the files every five minutes. The
         interval is not adjustable. Changes were made to make the interval
         adjustable between 5 minutes and one hour. The interval cannot
         be greater than 60 minutes or less than 5 minutes.

         To set the interval, define the logical FCC_CCACHE_CLEANUP_INTERVAL,
         to the number of minutes between cache cleanups. The logical may be
         defined at the system level, or may be defined in the sec_clientd
         startup command procedure. If the interval is changed while the
         security client daemon is running, the new interval will be effective
         after the next credentials cache cleanup.

           Images Affected: [SYSEXE]DCE$SEC_CLIENTD.EXE

      o After the installation of Multinet 4.1 B-X, DCE will not
         configure.

           Images Affected: [SYSMGR]DCE$SETUP_MULTINET.COM

      o When a DCE server system failed or was shutdown, the security
         client daemon on client systems would not fail over to replica
         server systems. DCE applications running on the client
         systems would be unable to refresh security credentials or
         have tickets validated.

           Images Affected: [SYSMGR]DCE$SETUP.COM

      o When DEC C compiler version 6.2 is installed, compilation of
         the IDL-generated C code may result in the following error(s)
         being displayed. Some DCE images were updated to fix extern
         model mismatches detected by the new C compiler.

           ........................^
               %CC-W-DIFFEXMODEL, This redeclaration of "xxxxxxxxxxxxxxxx_ifdef"
               specifies

           Images Affected:
             - [SYSEXE]DCE$IDL.EXE
             - [SYSEXE]DCE$RPCD.EXE
             - [SYSEXE]DCE$SECD.EXE
             - [SYSEXE]DCE$SEC_CREATE_DB.EXE
             - [SYSEXE]DCE$SX.EXE

      o The HOPF time provider provides year data in a 2 digit format.
         DCE interface to the provider had to be updated to use a
         sliding window to calculate the correct year.

           Images Affected:
             - [SYSHLP.EXAMPLES.DCE.DTSS]DCE$DTS_PROVIDER.C
             - [SYSHLP.EXAMPLES.DCE.DTSS]DCE$DTS_PROVIDER_HOPF.EXE

      o DECnet RPC routines did not correctly update RPC memory ousage
         statistics used for troubleshooting.

           Images Affected:
             - [SYSLIB]DCE$LIB_SHR.EXE
             - [SYSLIB]DCE$SOCSHR_DNET_OSI.EXE

      o After running for some time, the CDS clerk process terminates
         with the following error:

           %SYSTEM-F-ACCVIO, access violation, reason mask=00, virtual
           address=00000001005BA96A, PC=0000000000051A94, PS=0000001B

           Images Affected: [SYSEXE]DCE$CDSCLERK.EXE

      o DCE applications which use the rpc_inq_stats function
         encounter random Accvios. There is no pattern apparent
         to the ACCVIOs encountered.

           Images Affected:
             - [SYSLIB]DCE$LIB_SHR.EXE
             - [DCE$LIBRARY]RPCTYPES.H
             - [DCE$LIBRARY]RPCTYPES.IDL

      o The is_local call did not work on DECnet OSI interface.

           Images Affected: [SYSLIB]DCE$SOCKSHR_DNET_OSI.EXE

      o OpenVMS DCOM client to NT component fails with RPC "Unknown
         reject" error.

         Applicable to OpenVMS V7.2 and V7.2-1 systems.

           Images Affected: [SYSLIB]DCE$LIB_SHR.EXE

      o Attempting to start a DCE server with a well-known endpoint,
         such as RPCD (port 135) or PERF server (port 2001) fails with
         "unable to bind socket" error, when TCP shows there is no
         process using the port.

           Images Affected: [SYSLIB]DCE$LIB_SHR.EXE [image affected]...

      o Fix spurious ACCVIOs occuring when using NTLM authentication
         over TCP. The following error will be observed by processes
         encountering this problem:

           1999-11-07-11:08:00.919+00:00I----- PID#1076 FATAL rpc recv
                                               CNRCVR.C;1 563
           0x01b0fb80
           (rpc__cn_network_receiver) Unexpected exception was raised

         Applicable to OpenVMS V7.2 and V7.2-1.

           Images Affected: [SYSLIB]DCE$LIB_SHR.EXE

      o Virtual memory usage of DCE processes is higher after the
         install of V1.5.

         Applicable to OpenVMS V7.2 and V7.2-1.

           Images Affected: [SYSLIB]DCE$LIB_SHR.EXE

      o When many clients attempt to connect to one server, the server
         may not be able to accept the connections as fast as the
         clients are requesting.

           Images Affected: [SYSLIB]DCE$LIB_SHR.EXE

      o DCOM client apps receive "who are you" failures caused by rpc
         protocol errors over UDP.

         Applicable to OpenVMS V7.2 and V7.2-1.

           Images Affected: [SYSLIB]DCE$LIB_SHR.EXE

      o Only uppercase "I" is allowed for inaccuracy token input from
         DTSCP. Only the lowercase string "inf" was valid for infinite
         inaccuracy. These inputs should not be case sensitive.

           Images Affected:
             - [SYSLIB]DTSS$SHR.EXE
             - [SYSEXE]DTSD.EXE

    KNOWN PROBLEMS IN ALL PATCH LEVELS OF DCE V1.5:

      o Configuring a server from the DCE setup and configuration menu
         on systems where DECNET OSI is a supported protocol fails with
         the error below when attempting to modify an acl on a cds
         namespace entry:
         **************************** ERROR ****************************
         *** Could not configure ACL info. Failed command:
         *** $ Dce$Acl_Edit -e /.:/
         *** %CMA-F-NOMSG, Message number 10408014
              %CMA-F-EXCCOP, exception raised; VMS condition code follows
              -SYSTEM-F-ACCVIO, access violation, reason mask=00,
              virtual address=00000000004E6000, PC=FFFFFFFF8089EEFC, PS=0000001B

    INSTALLATION NOTES:

    Install this kit with the POLYCENTER Software installation utility
    by logging into the SYSTEM account. After the installation you
    must stop and restart DCE. On OpenVMS V7.2 systems, you must stop
    and restart the DCE$RPCD process using
    SYS$MANAGER:DCE$RPC_SHTUDOWN.COM and
    SYS$MANAGER:DCE$RPC_STARTUP.COM.

    You may ignore any/all of the following messages if they are
    displayed during the installation process:

    %PCSI-I-OBJSKP, file [DCE$LIBRARY]RPCTYPES.H pertains to an option that ...
    %PCSI-I-OBJSKP, file [DCE$LIBRARY]RPCTYPES.IDL pertains to an option ...
    %PCSI-I-OBJSKP, file [SYSHLP.EXAMPLES.DCE.DTSS]DCE$DTS_PROVIDER.C ...
    %PCSI-I-OBJSKP, file [SYSHLP.EXAMPLES.DCE.SX]DCESX.C pertains to an ...
    %PCSI-I-RETAIN, file [SYSLIB]DTSS$SHR.EXE was not replaced because file ...

    No reboot is necessary after successful installation of the kit.
                      ...

    All trademarks are the property of their respective owners.

    ---