HP CIFS Server 3.0g Release Notes version A.02.03.01

• Unable to map a drive when the smb.conf parameter, change notify timeout, is set

to 0

JAGag24440

The HP CIFS Server checks directory changes once every “change notify timeout”

seconds and notifies the CIFS clients when the directory status has changed.

The changes have been made to resolve a problem where the change notify timeout

parameter is set to 0, a Windows XP client is unable to map a drive to a CIFS Server share.

This parameter is also changed to add share level capability and can be configured on a

per-share basis or global basis. With these fixes, you can set the change notify timeout

value to 0 to disable this feature. Once you disable the change notify feature, the Windows

client must manually perform a refresh to get an update of the screen.

• Net rpc trustdom failed with a core dump

JAGag29226

This fix resolves a problem where the net rpc trustdom establish command in PDC

trusts can result in a core dump in rare cases.

• Winbind and net ads join should have warned users that netbios names are limited to

no more than 15 characters

CR JAGag29470

Testparm, net ads join, and documentation have been updated to warn users that

netbios names greater than 15 characters are not permitted.

• Document through Samba_setup and elsewhere that security=server is being

deprecated.

CR JAGag27916

HP CIFS Server A.02.03.01 is the last release which supports security=server.

Samba_setup has been updated to reflect this fact.

• Documentation updates with default value of password server

JAGag29414

The SWAT and man pages are updated to show that the default setting of the password

server parameter is *. This parameter specifies the name or IP address of the Windows or

Samba PDC machine that performs the user name authentication and validation. If set to

the character *, then CIFS Server attempts to automatically locate the PDC to be used.

• Delays may occur when one of ldap servers does not respond

JAGag27576

If multiple ldap servers are configured with the smb.conf parameter, passdb backend,

there are significant delays for logging in users, or doing any operation that requires reading

the smb.conf file if one of the ldap servers is not responding.

• Security defect CVE-2007-0452: Potential Denial of Service

JAGag30658

There is a low risk that an authenticated user (only) can trigger memory exhaustion during

a special circumstance.

• Security defect CVE-2007-0453: Possible Buffer Overrun

JAGag30660

There is a low risk that a buffer overrun could affect NSS clients with "ipnodes" and "hosts"

services configured to use the nss_winbind.so.1 library.