HP Tru64 UNIX and TruCluster Server Version 5.1.B-4 Patch Summary and Release Notes (13156)

3.2.2.10 Reboot May Resolve Problem with Smart Array Controller
If a problem with your Smart Array controller generates the following message, try rebooting
your system:
Smart Array at ciss(1) not responding - disabled.
If the reboot does not re-enable the hardware, you will need to call your HP support representative
to have the unit repaired.
3.2.2.11 Additional Steps for IPsec Connections
This kit fixes a potential security vulnerability in IP security (IPsec). If you have one or more
IPsec connections configured on your system, you need to ensure that you have restricted access
to each IPsec connection based on the identity of the remote hosts. You can accomplish this after
installing this kit by starting the IPsec SysMan configuration tool from the command line:
# sysman ipsec
Once you have started SysMan, you will need to modify the configuration of each IPsec and IKE
connection to add the identity of the remote hosts that are allowed to connect.
You enter this information on the third dialog box you see during the connection configuration
wizard; the dialog box is titled “Manage IPsec: Add/Modify Connection: IKE Proposal.” Although
you can leave the “Restrict To The Following Remote IDs” list empty, doing so will mean that
any identity given to the local machine by the remote hosts will be considered valid as long as
they send the correct certificate or preshared key.
3.2.2.12 Potential NFS Duplicate Request Cache Scalability Limitation with High Loads and
Uncharacteristic File Access Behavior on Clustered NFS Servers
Repeated simultaneous overwriting of many files can cause retransmitted writes to be processed
after recent writes of a file to the same location. This problem occurs more often on systems
configured with a LAN cluster interconnect than on those configured with Memory Channel.
This behavior is inherent in the "stateless" design of NFS. Although the behavior has been
mitigated via a "duplicate request cache" that replays old replies instead of reexecuting
retransmitted requests, extremely heavy loads on large systems can overwhelm the cache when
requests are stalled. Customers are unlikely to see problems because applications rarely rewrite
files almost immediately.
If the problem occurs, the NFS server displays the following message several times a minute on
the system console, indicating that the NFS server is being overwhelmed with requests :
"NFS server xxx not responding"
When an "overwhelmed duplicate request cache" condition has occurred, the NFS client will
display multiple occurrences of either of the following messages:
NFS3 server xxx not responding still trying
NFS3 server xxx ok
NFS2 server xxx not responding still trying
NFS2 server xxx ok
This indicates that the client is observing transient unresponsive periods at the server. This is
the only notification that the client will display if the server's duplicate request cache becomes
overwhelmed. When the client detects this behavior, it increases the retransmission interval until
it gets a response from the server. This behavior is generally undistinguishable from the server
going up and down, except that the messages are displayed with such frequency that the server
system/member cannot have gone down and then come back up in that short an interval.
52 Tru64 UNIX Patches