Patch Name: PHSS_10337 Patch Description: s700_800 10.16 VirtualVault Performance Cumulative Patch Creation Date: 97/03/10 Post Date: 97/03/26 Hardware Platforms - OS Releases: s700: 10.16 s800: 10.16 Products: VirtualVault Transaction Server A.01.01 International VirtualVault Transaction Server A.01.01 US/Canada Filesets: Netscape-NCS.VAULTTS-NCS,A.01.12.01 VaultTS.VAULT-CORE-CMN,A.01.01 Automatic Reboot?: Yes Status: General Release Critical: Yes PHSS_10337: CORRUPTION Path Name: /hp-ux_patches/s700_800/10.X/PHSS_10337 Symptoms: PHSS_10337: This patch replaces the previous performance patch, PHSS_8274, in which corrupted data could be sent to the CGI. This data corruption could result in user requests being refused by the CGIs. PHSS_8274: VirtualVault Transaction Server A.01.00 and A.01.01 customers may experience intermittent delays and/or slow performance when connecting from the Internet to an application on the VirtualVault. Factors which effect Web Server performance are varied and may occur from User-to-Internet Service Provider (ISP), ISP-to-HTTPD Web Server (VirtualVault OUTSIDE environment), Web Server-to-application (VirtualVault Trusted Gateway Agent), and the application itself (CGI and back-end process) components. In addition, the host operating system underlying the Web Server further impacts performance. This patch, PHSS_8274, addresses performance issues between the Web Server and TGA and within the TGA. Defect Description: PHSS_10337: Fixed the NSAPI interface in dealing with POSTed data. Binary POSTed data containing a '0' or '0xff' previously caused the TGA Client NSAPI module to prematurely terminate. Also, errant CGI programs could cause data corruption which would be visible in subsequent CGI invocations. Sites which have the earlier performance patch PHSS_8274 should replace PHSS_8274 with this version, PHSS_10337, in order to address possible data corruption issues. PHSS_8274: This patch implements an alternative model for the Trusted Gateway Agent which uses an NSAPI shared object for the Trusted Gateway Agent client. The original VirtualVault Trusted Gateway Agent client (tga) and daemon (tgad) are replaced on installation of this patch. For each server process using the new TGA Client NSAPI module, a persistent connection is created to a TGAD daemon process. While the TGA client functions are now resident in an NSAPI module, it is still necessary to create application CGI links to the replacement "tga" executable. This is essential for proper operation of the Netscape Server in accessing application CGI programs. SR: 4701335091 4701348862 Patch Files: /var/opt/vaultTS/outside/nsbase/bin/tga.so /opt/vaultTS/root/tcb/lib/tgad /opt/vaultTS/root/tcb/bin/tga /etc/auth/system/files.fcdb/25.patches/PHSS10337.fcdb what(1) Output: /var/opt/vaultTS/outside/nsbase/bin/tga.so: None /opt/vaultTS/root/tcb/lib/tgad: None /opt/vaultTS/root/tcb/bin/tga: None /etc/auth/system/files.fcdb/25.patches/PHSS10337.fcdb: None cksum(1) Output: 725941924 45181 /var/opt/vaultTS/outside/nsbase/bin/tga.so 4190222295 357572 /opt/vaultTS/root/tcb/lib/tgad 3652230520 304120 /opt/vaultTS/root/tcb/bin/tga 2284124383 2395 /etc/auth/system/files.fcdb/25.patches/ PHSS10337.fcdb Patch Conflicts: None Patch Dependencies: None Hardware Dependencies: None Other Dependencies: None Supersedes: PHSS_8274 Equivalent Patches: None Patch Package Size: 760 Kbytes Installation Instructions: Please review all instructions and the Hewlett-Packard SupportLine User Guide or your Hewlett-Packard support terms and conditions for precautions, scope of license, restrictions, and, limitation of liability and warranties, before installing this patch. ------------------------------------------------------------ 1. Back up your system before installing a patch. 2. Login as root. 3. Copy the patch to the /tmp directory. 4. Move to the /tmp directory and unshar the patch: cd /tmp sh PHSS_10337 5a. For a standalone system, run swinstall to install the patch: swinstall -x autoreboot=true -x match_target=true \ -s /tmp/PHSS_10337.depot 5b. For a homogeneous NFS Diskless cluster run swcluster on the server to install the patch on the server and the clients: swcluster -i -b This will invoke swcluster in the interactive mode and force all clients to be shut down. WARNING: All cluster clients must be shut down prior to the patch installation. Installing the patch while the clients are booted is unsupported and can lead to serious problems. The swcluster command will invoke an swinstall session in which you must specify: alternate root path - default is /export/shared_root/OS_700 source depot path - /tmp/PHSS_10337.depot To complete the installation, select the patch by choosing "Actions -> Match What Target Has" and then "Actions -> Install" from the Menubar. 5c. For a heterogeneous NFS Diskless cluster: - run swinstall on the server as in step 5a to install the patch on the cluster server. - run swcluster on the server as in step 5b to install the patch on the cluster clients. By default swinstall will archive the original software in /var/adm/sw/patch/PHSS_10337. If you do not wish to retain a copy of the original software, you can create an empty file named /var/adm/sw/patch/PATCH_NOSAVE. Warning: If this file exists when a patch is installed, the patch cannot be deinstalled. Please be careful when using this feature. It is recommended that you move the PHSS_10337.text file to /var/adm/sw/patch for future reference. To put this patch on a magnetic tape and install from the tape drive, use the command: dd if=/tmp/PHSS_10337.depot of=/dev/rmt/0m bs=2k Special Installation Instructions: Disregard the above installation instructions. They are automatically generated and are not specific to the VirtualVault environment. The correct procedure for installing the VirtualVault Performance Patch (PHSS_10337) is as follows : 1. Backup your system before installing a patch. 2. Login as root; open an xterm window at the SYSTEM level. 3. Copy the patch to the /patches directory. Create /patches using : mkdir -p /patches 4. Move to the /patches directory and unshar the patch: cd /patches sh PHSS_10337 5. Run swinstall to install the patch: swinstall -x autoreboot=true -x match_target=true \ -s /patches/PHSS_10337.depot Patch PHSS_10337 requires VirtualVault Transaction Server version A.01.01 or later. Although not required, for best performance this patch should be installed in conjunction with the following other performance-related patches: * PHCO_8449 CMW performance patch for VirtualVault (Part I, command set, must be used in conjunction with either PHNE_9988 or PHNE_9989) * PHNE_9988 S800 CMW performance patch for VirtualVault (Part II, kernel patch for S800, must be installed immediately after PHCO_8449) * PHNE_9987 S700 CMW performance patch for VirtualVault (Part II, kernel patch for S700, must be installed immediately after PHCO_8449) (Patches PHNE_8070 and PHNE_8071 have been superceded by PHNE_9988 and PHNE_9987)