HP CIFS Client A.01.09.01 Release Notes, January 2004

HP CIFS Client A.01.09.01
Features and Fixes in Recent Releases
Chapter 116
Troubleshooting Information for PAM-NTLM
• If you are having difficulty accessing the password server configured
in smb.conf, PAM-NTLM can utilize an lmhosts file on the local
system to look up its address. To utilize this functionality, create the
file, /etc/opt/samba/lmhosts, containing entries, one per line, in the
following format where netbios_name is the password server used by
PAM-NTLM.
ip_address <one or more tabs or spaces> netbios_name
• If you are going to remove the PAM-NTLM fileset (or the entire HP
CIFS Client) from your system, ensure that all references to the
libpam_ntlm.1 library have been removed from /etc/pam.conf. Your
system can become inaccessible if PAM-NTLM is configured in
/etc/pam.conf but the PAM-NTLM libraries are removed from the
system.
• Use caution when editing /etc/pam.conf. You should have a good
understanding of the PAM framework before modifying this file. A
misconfigured /etc/pam.conf can make the system inaccessible or
cause a serious security breach, such as allowing root access to
anyone, without a password. See the reference to pam.conf in section
4 of the HP-UX manpages and in the PAM-NTLM Configuration
section in Installing and Administering the HP CIFS Client.
Recommended Configuration Values
HP recommends changing the value of the following three configuration
parameters to their new default values:
• runAsUser
• requestTimeout
• nfsAttributeCaching (you will need to add this one)
You can either compare the new default file,
/etc/opt/cifsclient.cfg.default, to your existing cifsclient.cfg, or make the
modifications manually. Leave the cifsclient.cfg.default file unchanged
and use it as a reference.