Patch Name: PHSS_20548 Patch Description: s700_800 10.X OV ITO4.0X Windows NT ANSE Agt Patch A.04.18 Creation Date: 99/12/09 Post Date: 99/12/10 Hardware Platforms - OS Releases: s700: 10.01 10.10 10.20 s800: 10.01 10.10 10.20 Products: OpenView IT/Operations 4.0 ANSE Filesets: OVOPC-CLT.OVOPC-NT-CLT Automatic Reboot?: No Status: General Release Critical: No Path Name: /hp-ux_patches/s700_800/10.X/PHSS_20548 Symptoms: PHSS_20548: - When the NT Logfile Encapsulator aborts, the 'ITO agent stopped' message isn't written into the EventLog. At the next startup of the agent, duplicate EventLog entries are reported. - The Action Agent might abort when an application call was made with a wrong password. - Scheduled actions are sometimes executed twice at the same time. - The ITO Monitor agent sometimes aborts. - Using the itodiag.exe tool very often might cause the NT system to become unusable and require a reboot. - The ITO Event interceptor aborts when receiving a trap with a variable of the SNMPv2 type 'counter64'. - The ITO Action agent executed a switch user even if the requested user is the 'HP ITO account'. - The ITO Event interceptor might abort. - On systems that have the McAfee virusscanner installed, after reboot sometimes the agent has problems reading the opcinfo file and will fail. Later startups of the agent succeed. - The ITO Event interceptor aborts after receiving a trap with the ASN variable type 'null'. - The ITO Transfer Manager (opctranm) fails to transfer a request to an NT node that has a mgrconf file installed. PHSS_19988: - fixed various Problems with ITO Schedule templates/actions - if the time gets set backwards no monitors are executed until the inital time is reached again. - in automatic actions some multibyte strings were truncated. PHSS_17348: - In the ITO A.04.11 NT agent patch new functionality was introduced to send ICMP alive packages. When this new functionality was not configured to be used, ICMP packages were sent every second. - After installing Servicepack 4 for NT 4, the agent could not execute actions any more. This was because an NT API had changed. After installation of the new ITO agent to an NT system, a reboot is required before executing actions, schedules and applications. - On NT the DISPLAY variable was not set. This now holds the name of the operator's display to use a redirection mechanism. - Actions could not access network resources. Now applications from the application bank can be given a user with password and access network resources. The user must exist on the local NT system. - The message 'Not enough quota is available to process this command.' was sometimes written to the opcerror file when actions were executed. - Sometimes the action or monitor agent aborts while executing parallel actions. - Sometimes the action agent aborted when the OpenAgent functionality to transfer binary data was used. - Sometimes errors were produced when installing OpenAgent subagents. - When a duration is set in a monitor condition, the '-option' and '-object' parameters of opcmon didn't work for this condition. - Using the duration in monitor conditions changes the behaviour of the reset setting. - The Logfile Encapsulator aborts right after startup on NT 4 systems with ServicePack 3 and the hotfix lsa2fix. - The Logfile Encapsulator might abort during reconfiguration when templates were removed. - On some systems the Logfile Encapsulator aborts during shutdown and the message gets queued until the reboot. Then it gets sent to the server confusing the operator. - The trap interceptor was growing. - After installation of the NT agents, the directories had non-standard access rights. - Starting the agent after removing the queue files from the tmp directory caused problems in the action agent. The same happend after installation to a new system or after removal of the agent. - The setup program might abort. - In ITO 3 a message was sent to the server when the agent detected a namechange of the local system. This functionality was lost in ITO 4. - On multi homed hosts, the ITO agent used the wrong IP address when sending matched messages. - Setting 'OPC_TRACE_TRUNC FALSE' didn't work for suppressed messages. PHSS_16398: - The 'opcdcode.exe' tool requires full path of file to be decoded. - Return values of some NT instrumentation progs are wrong. - The 'itoreg.exe' command can't read NT 4.0 current config registry. - Monitor programs are not found if there is a variable in the path location. - The <$MSG_ID> variable is not set correctly in monitor conditions. - The NT agent was missing the 'Agents Sends Alive Packets' functionality. This is now supported on NT 4.0. - Scheduled actions are scheduled for the following month if weekday is specified. - The Monitor agent cannot handle multiple identical objects in perflib (corrupted NT registry). - Tracing of performance monitoring was not very useful. - The Monitor agent returns problem for '.cmd' batch files. - The 'itouser.exe /local' tool sometimes loops. - The Logfile encapsulator aborts during agent stop when no eventlogs are configured. - Every time the agent starts and the trap template is assigned, there is a message coming to the browser. - Usage of the opcmsg() API may cause the application to abort. - Message agent sometimes stays in the buffering state forever. - The logfile encapsulator might coredump when tracing is turned on and very long messages are generated. - The logfile encapsulator suddenly starts growing to the kernel limit and coredumps. PHSS_16115: - Lookup of Backup Domain Controllers during installation causes additional network traffic. - Setup program has problems with NetServerEnum API in some environments. - Installation on Domain Controllers causes problems with password policy. - Installation server installation to multi homed host does not send the IP address. - Standalone system tries to find its Domain Controller. - Agent must be restarted to enable security settings. - Monitor agent cannot monitor NTPerfMon\System\System Up Time. - Scheduled actions are not executed at 00:xx in April. - Opcle aborts for SAP event 23334. - Opcle sets exec path with wrong path delimiters. - At system boot, agent reports some error messages about EventLog and opcle aborts when agent is started before the EventLog service. - Suppression of identical messages does not work for failed logins. - Truncated Messages are handled by the Logfile Encapsulator before the line is finished. - Logfile encapsulator aborts when eventlog refers to nonexistent variable. Defect Description: PHSS_20548: check the list of the symptoms PHSS_19988: check the list of the symptoms PHSS_17348: check the list of the symptoms PHSS_16398: check the list of the symptoms PHSS_16115: check the list of the symptoms SR: R555004826 B555000231 B555000254 B555000256 B555000302 B555000303 B555001661 R555005015 Patch Files: /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.18/RPC_DCE_TCP/monitor/sms_chk.bat.Z /opt/OV/bin/OpC/utils/nthost.exe /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.18/RPC_DCE_TCP/opc_pkg.Z /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.18/RPC_DCE_TCP/unzip.exe /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.18/RPC_DCE_TCP/unzip.txt /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.18/RPC_DCE_TCP/opc_inst.bat /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.18/RPC_DCE_TCP/opc_pre.bat /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.18/RPC_DCE_TCP/opcsetup.inf /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.18/RPC_DCE_TCP/monitor/itoprocs.exe.Z /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.18/RPC_DCE_TCP/cmds/itodiag.exe.Z /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.18/RPC_DCE_TCP/cmds/itokill.exe.Z /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.18/RPC_DCE_TCP/cmds/itomserv.exe.Z /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.18/RPC_DCE_TCP/cmds/itoreg.cfg.Z /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.18/RPC_DCE_TCP/cmds/itoreg.exe.Z /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.18/RPC_DCE_TCP/cmds/itosdown.exe.Z /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.18/RPC_DCE_TCP/cmds/itouser.exe.Z /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.18/RPC_DCE_TCP/cmds/opcprfls.exe.Z /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.18/RPC_DCE_TCP/cmds/opcdf.bat.Z /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.18/RPC_DCE_TCP/cmds/opcps.bat.Z /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ AgentPlatform what(1) Output: /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.18/RPC_DCE_TCP/monitor/sms_chk.bat.Z: None /opt/OV/bin/OpC/utils/nthost.exe: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.18/RPC_DCE_TCP/opc_pkg.Z: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.18/RPC_DCE_TCP/unzip.exe: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.18/RPC_DCE_TCP/unzip.txt: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.18/RPC_DCE_TCP/opc_inst.bat: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.18/RPC_DCE_TCP/opc_pre.bat: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.18/RPC_DCE_TCP/opcsetup.inf: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.18/RPC_DCE_TCP/monitor/itoprocs.exe.Z: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.18/RPC_DCE_TCP/cmds/itodiag.exe.Z: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.18/RPC_DCE_TCP/cmds/itokill.exe.Z: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.18/RPC_DCE_TCP/cmds/itomserv.exe.Z: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.18/RPC_DCE_TCP/cmds/itoreg.cfg.Z: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.18/RPC_DCE_TCP/cmds/itoreg.exe.Z: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.18/RPC_DCE_TCP/cmds/itosdown.exe.Z: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.18/RPC_DCE_TCP/cmds/itouser.exe.Z: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.18/RPC_DCE_TCP/cmds/opcprfls.exe.Z: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.18/RPC_DCE_TCP/cmds/opcdf.bat.Z: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.18/RPC_DCE_TCP/cmds/opcps.bat.Z: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ AgentPlatform: None cksum(1) Output: 2091150204 151 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.04.18/RPC_DCE_TCP/monitor/ sms_chk.bat.Z 1311885918 55588 /opt/OV/bin/OpC/utils/nthost.exe 316237062 3204996 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.04.18/RPC_DCE_TCP/opc_pkg.Z 3162183940 113152 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.04.18/RPC_DCE_TCP/unzip.exe 1939298735 508 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.04.18/RPC_DCE_TCP/unzip.txt 1875006408 1233 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.04.18/RPC_DCE_TCP/opc_inst.bat 1679475308 1131 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.04.18/RPC_DCE_TCP/opc_pre.bat 3629174438 133 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.04.18/RPC_DCE_TCP/opcsetup.inf 3379043793 54003 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.04.18/RPC_DCE_TCP/monitor/ itoprocs.exe.Z 840392053 84631 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.04.18/RPC_DCE_TCP/cmds/ itodiag.exe.Z 1990681888 43273 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.04.18/RPC_DCE_TCP/cmds/ itokill.exe.Z 964718524 41280 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.04.18/RPC_DCE_TCP/cmds/ itomserv.exe.Z 1586237090 188 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.04.18/RPC_DCE_TCP/cmds/ itoreg.cfg.Z 485029865 58687 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.04.18/RPC_DCE_TCP/cmds/ itoreg.exe.Z 3549645597 38522 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.04.18/RPC_DCE_TCP/cmds/ itosdown.exe.Z 4092145391 44799 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.04.18/RPC_DCE_TCP/cmds/ itouser.exe.Z 4070192562 48455 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.04.18/RPC_DCE_TCP/cmds/ opcprfls.exe.Z 2003580432 38 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.04.18/RPC_DCE_TCP/cmds/ opcdf.bat.Z 849569434 41 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.04.18/RPC_DCE_TCP/cmds/ opcps.bat.Z 2807285266 4911 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/AgentPlatform Patch Conflicts: PHSS_20547 Patch Dependencies: None Hardware Dependencies: None Other Dependencies: OVOPC-SEC.OVOPC-SEC-CLT Supersedes: PHSS_16115 PHSS_16398 PHSS_17348 PHSS_19988 Equivalent Patches: None Patch Package Size: 3810 KBytes Installation Instructions: Please review all instructions and the Hewlett-Packard SupportLine User Guide or your Hewlett-Packard support terms and conditions for precautions, scope of license, restrictions, and, limitation of liability and warranties, before installing this patch. ------------------------------------------------------------ 1. Back up your system before installing a patch. 2. Login as root. 3. Copy the patch to the /tmp directory. 4. Move to the /tmp directory and unshar the patch: cd /tmp sh PHSS_20548 5a. For a standalone system, run swinstall to install the patch: swinstall -x autoreboot=true -x match_target=true \ -s /tmp/PHSS_20548.depot By default swinstall will archive the original software in /var/adm/sw/patch/PHSS_20548. If you do not wish to retain a copy of the original software, you can create an empty file named /var/adm/sw/patch/PATCH_NOSAVE. WARNING: If this file exists when a patch is installed, the patch cannot be deinstalled. Please be careful when using this feature. It is recommended that you move the PHSS_20548.text file to /var/adm/sw/patch for future reference. To put this patch on a magnetic tape and install from the tape drive, use the command: dd if=/tmp/PHSS_20548.depot of=/dev/rmt/0m bs=2k Special Installation Instructions: BEFORE LOADING THIS PATCH... o You may use this patch with the following official ITO-ANSE releases: A.04.0x o This patch can't be installed on an ITO server without the ITO-ANSE bundle installed. If you don't have it, use the equivalent non-ANSE patch. o DO NOT use this patch with older releases of OpC or ITO, for example versions A.01.X, A.02.X or A.03.X or with newer releases like A.05.X o This patch provides the HP OV IT/Operations Intelligent Agent to be used with a ITO 4.0x Management Server system, English and Japanese version. (A) Patch Installation Instructions ------------------------------- (A1) Install the patch, following the standard installation instructions. Please review all instructions and the Hewlett-Packard SupportLine User Guide or your Hewlett-Packard support terms and conditions for precautions, scope of license restrictions and limitation of liability and warranties, before installing this patch. ------------------------------------------------------ 1. Back up your system before installing a patch. (you may use opc_backup) 2. Login as root. 3. Copy the patch to your /tmp directory and unshar it: # cd /tmp # sh PHSS_20548 4. For a standalone system, run swinstall to install the patch: NOTE: MAKE SURE THAT NO AGENT OF THE PLATFORM ADDRESSED BY THIS PATCH IS DISTRIBUTED (either from the ITO Administrator's GUI or from command line using inst.sh) WHILE RUNNING SWINSTALL. # swinstall -x match_target=true \ -s /tmp/PHSS_20548.depot It is recommended that you move the PHSS_20548.text file to /var/adm/sw/patch for future reference. To put this patch on a magnetic tape and install from the tape drive, use the command: # dd if=/tmp/PHSS_20548.depot of=/dev/rmt/0m bs=2k (A2) To update the ITO database with the change for local trap interception (introduced in PHSS_13398), you need to execute the command: # /opt/OV/bin/OpC/opcagtdbcfg -p ms/intel/nt -d -f (A3) After installation of PHSS_17347 a reboot of the NT system is required before actions, schedules and applications can be executed. NOTE: This patch must be installed on the ITO Management Server system, NOT on an ITO Managed Node directly. Changes will take effect on managed nodes by means of ITO Software Distribution (using 'Force Update' if there is already an agent installed on the managed node). See chapter 2 of the ITO Administrator's Reference manual for more information. (B) Patch Deinstallation Instructions --------------------------------- (B1) To deinstall the patch PHSS_20548 run swremove: NOTE: MAKE SURE THAT NO AGENT OF THE PLATFORM ADDRESSED BY THIS PATCH IS DISTRIBUTED (either from the ITO Administrator's GUI or from command line using inst.sh) WHILE RUNNING SWREMOVE. # swremove PHSS_20548