========================================================================== The checksum's (found through sum -r) of the files that you have received (other than this README) are as follows: 41854 8 patchSG0002680 38241 74 patchSG0002680.DCE_hdr 15573 21331 patchSG0002680.DCE_sw 53311 5838 patchSG0002680.DCE_sw32 08341 6318 patchSG0002680.DCE_sw64 60299 10516 patchSG0002680.DFS_sw 21012 19 patchSG0002680.idb ========================================================================== - 1 - 1. Patch_SG0002680_Release_Note This release note describes patch SG0002680 to DCE/DFS on IRIX 6.3. ** REQUIREMENT ** If DFS is installed, the December 1997 recommended patch set or later is required to link the DFS fixes contained in this patch. (Requirement on IRIX 6.3 only.) 1.1 Supported_Hardware_Platforms This patch contains bug fixes for all SGI platforms which are supported by the IRIX 6.3 operating system. The software cannot be installed on other configurations. 1.2 Supported_Software_Platforms This patch contains bug fixes for dce.sw and dfs.sw (DCE1.1C September 8, 1997 release) on a system running IRIX 6.3. The software cannot be installed on other configurations. 1.3 Bugs_Fixed_by_Patch_SG0002680 This patch contains fixes for the following bugs. Bug numbers from Silicon Graphics bug tracking system are included for reference. o 525030 - /usr/include/dce/pthread.h is linked wrong from 1.1C package o 525749 - Data corruption via DFS o 527850 - Critical security (CERT) problem with secd o 527916 - cds and security servers are not instable with domestic pkg o 528319 - IRIX LOCKOUT and login/scheme Buffer Overrun o 537753 - DCE/xlock problem o 538257 - dcestat does not display all running dce/dfs daemons o 539860 - Problems in the DCE/DFS unconfigure scripts o 540108 - Data corruption on Onyx2 and O2 to AIX DFS server - 2 - o 543509 - Accessing a SGI DFS directory with a large number of files hangs the SGI client. (Partial fix, see section 1.7 for further information.) o 551782 - DFS panics if AFS is running on the same system 1.4 Subsystems_Included_in_Patch_SG0002680 This patch release includes these subsystems: o patchSG0002680.DCE_hdr.lib o patchSG0002680.DCE_sw.base o patchSG0002680.DCE_sw.cds o patchSG0002680.DCE_sw.gda o patchSG0002680.DCE_sw.gda o patchSG0002680.DCE_sw.idl o patchSG0002680.DCE_sw.ilogin o patchSG0002680.DCE_sw.lib o patchSG0002680.DCE_sw.security o patchSG0002680.DCE_sw32.lib o patchSG0002680.DCE_sw64.lib o patchSG0002680.DFS_sw.base o patchSG0002680.DFS_sw.kernel o patchSG0002680.DFS_sw.server 1.5 Installation_Instructions Because you want to install only the patches for problems you have encountered, patch software is not installed by default. After reading the descriptions of the bugs fixed in this patch (see Section 1.3), determine the patches that meet your specific needs. If, after reading Sections 1.1 and 1.2 of these release notes, you are unsure whether your hardware and software meet the requirements for installing a particular patch, run - 3 - inst. The inst program does not allow you to install patches that are incompatible with your hardware or software. Patch software is installed like any other Silicon Graphics software product. Follow the instructions in your Software Installation Administrator's Guide to bring up the miniroot form of the software installation tools. Follow these steps to select a patch for installation: 1. At the Inst> prompt, type install patchSGxxxxxxx where xxxxxxx is the patch number. 2. Initiate the installation sequence. Type Inst> go 3. You may find that two patches have been marked as incompatible. (The installation tools reject an installation request if an incompatibility is detected.) If this occurs, you must deselect one of the patches. Inst> keep patchSGxxxxxxx where xxxxxxx is the patch number. 4. After completing the installation process, exit the inst program by typing Inst> quit 1.6 Patch_Removal_Instructions To remove a patch, use the versions remove command as you would for any other software subsystem. The removal process reinstates the original version of software unless you have specifically removed the patch history from your system. versions remove patchSGxxxxxxx where xxxxxxx is the patch number. To keep a patch but increase your disk space, use the versions removehist command to remove the patch history. - 4 - versions removehist patchSGxxxxxxx where xxxxxxx is the patch number. 1.7 Known_Problems o 514434 - DFS client never realizes that a DFS server has come out of Token State Recovery (TSR) mode. This problem when a DFS server is not accessible and the s a replicated DFS root file system. It only on 64 bit systems. o 543509 - Accessing a SGI DFS directory with a large number of files hangs the SGI dfs client. Modifications were made to the DFS client in this patch to detect the conditions causing the hang and prevent the hang. When these potential hang conditions are detected the DFS client will send the following message to the system console: warning: cm_readdir, stopped reading dir, server offsets looping. The user's command (ls/find/etc.) may not contain all the information from the directory or may not complete successfully. The threshold for the number of files it takes to trigger this problem varies depending on the size of the file names. This partial fix to the problem prevents the DFS client from hanging so that it no longer requires a reboot. o 544349 - klist and other functionality as hosts/self is slow. Expired tickets in the machine credential file, /opt/dcelocal/var/security/creds/dcecred_ffffffff, are not cleaned up. This causes the file to get unusually large and some functions involving this file to become slow. A work around for this problem is to periodically kill the dced daemon and immediately restart it. This procedure will clean up the machine context credential file, but will not affect current users. o 549120 - Credential problem after access is lost and re-established with the DFS server. After the SGI client lost and regained access to the DFS server the user received "Permission denied" when trying to access files they had access to before the connection was lost. They need to do a new dce_login to regain their correct credentials. - 5 - o 544349 - klist and other functionality as hosts/self is slow. Expired tickets in the machine credential file, /opt/dcelocal/var/security/creds/dcecred_ffffffff, are not cleaned up. This causes the file to get unusually large and some functions involving this file to become slow. A work around for this problem is to periodically kill the dced daemon and immediately restart it. # ps -ef | egrep dced root 2030 1 0 15:13:24 ? 0:05 /opt/dcelocal/bin/dced # kill -9 2030 # /opt/dcelocal/bin/dced This procedure will clean up the machine context credential file, but will not affect current users. Sites should also consult the "Known problems" section of the DCE/DFS 1.1C Release Notes. 1.8 Miscellaneous o SGI DCE/DFS mailing list. SGI has a DCE/DFS mailing to provide information on new releases, patches, critical problems, and other related announcements. This mailing list is not in place of other SGI communication methods, but rather an additional way to get this information to interested people. If you would like to subscribe this mailing list send mail to: external-majordomo@postofc.corp.sgi.com with the following line in the _body_ of the message: subscribe sgidce_announce _email_address_here_