Patch Name: PHSS_25228 Patch Description: s700_800 10.20 OV ITO5.3X NT Agent Patch A.05.38 Creation Date: 01/11/06 Post Date: 01/11/08 Hardware Platforms - OS Releases: s700: 10.20 s800: 10.20 Products: OpenView IT/Operations 5.3 Filesets: OVOPC-CLT.OVOPC-NT-CLT,A.05.30 Automatic Reboot?: No Status: General Release Critical: No Path Name: /hp-ux_patches/s700_800/10.X/PHSS_25228 Symptoms: PHSS_25228: - SR: 8606171814 itodiag.exe causes NT security event log messages on remote PC when checking for diskspace on network drives where the HP ITO account has no permissions to. - SR: 8606180891 The template default for the service name is not used. - SR: 8606181988 the event interceptor doesn't forward on "forward unmatched" if a "supress unmatched" condition is used in a second template - SR: 8606182275 need a possibility to disable the sending of an icmp packet before commuicating with ITO 5.3 manager. - SR: 8606183491 itodiag reports wrong values for diskspace - SR: 8606208283 The NT user privilege "Increase Quota" needs to be assigned to the 'HP ITO account', which is not done during the agent installation. If this is missing, the agent may not be able to perform a full user switch with password to a different account. This could result in problems when executing tools or scheduled commands on the managed node that require full network access. - SR: B555007966 Agent installation might fail with 'Error from InformManager' when the Management Server is a multi homed host. - SR: B555007980 Local automatic actions are started immediately, even though agent MSI is enabled in divert mode and Immediate Local Automatic Action box is not checked. - SR: B555009155 The event correlation process opceca (agent) / opcecm (server) might crash after processing several annotation nodes - SR: B555009543 NT agent installation fails, when the nodename has more than 16 characters - SR: B555009740 When using the agent message logging with multibyte character messages you might get wrong formats. - SR: B555009745 The template default of the object field of a monitor template is not used. - SR: B555009850 opcvterm.exe might crash with DrWatson. - SR: B555010038 After installing SPI templates (e.g. DB SPI) and then after reinstalling the agent, the agent may not find commands. - SR: B555010620 Some messages are missing in the Japanese message catalog. You get a Cannot generate message error. - SR: B555010791 When using MIB monitoring on a NT node with installed NNM the process opcmona.exe might crash during agent startup. - SR: B555010948 Nested alternatives were not handled correctly in the pattern matching algorithm, e.g. the pattern '[a|b]c|d' was handled like '[a|b|d]c'. - SR: B555010980 Traps without a SNMP variable are not matched because server patch adds an extra attribute to the template. - SR: B555011256 The agent process opcle.exe may crash on Windows 2000 nodes while monitoring the new event logs coming with Windows 2000. - SR: B555011422 opcragt/opcagt -stop and opcagt -kill might fail when a subagent process can't be killed or stopped - SR: B555011497 Trap interceptor aborts after reboot - can't open SNMP session - SR: B555011594 The original message text of a logfile encapsulator message is wrong if <$LOGPATH> or <$LOGFILE> is used. - SR: B555011979 Pattern matching hangs if only single byte Japanese HANKAKU KANA characters are used. - SR: B555011990 ECS event log (ecevilg) has invalid time difference to the next message which can cause the ECS simulator to hang or appear to hang when loading an event log file with such values. PHSS_22575: - Automatic Actions can't start applications that display a user interface. - Event Interceptor aborts after getting traps with unresolvable IP address. - Event Interceptor aborts when running on an NNM system and an invalid trap is received. - The Event Interceptor might get into a looping state when running on an NNM system and the ovtrapd is stopped. - Multiple issues with the agent on MS Terminal Server systems running on NT 4.0. - Perl script might show strange behavior when called as monitor. - Agent has to run as 'HP ITO account' user. PHSS_22002: - ITO requires the setting of all IP addresses in opc.hosts for NT multi homed hosts. - When calling an application as non-administrative user, there is a window coming up: Initialization of dynamic load library c:\winnt\system32\user32. dll failed. the nthost. exe tool help, but it is required after each start of the system. - When using the application opcprfls. exe to list the available performance monitoring objects on an NT system not all objects are enumerated. - Setting up a logfile template that uses a dynamic path definition, like: <`echo "/tmp/path with spaces/logfile1.txt"`> This path will be handled as three logfiles: - /tmp/path - with - spaces/logfile1.txt - In NAT environments the distribution does not work when an IP address is set for the system that does not physically exists on any of its network cards. - In NAT environments it might make sense to set the OPC_IP_ADDRESS to an address which does not exists on any of the system's netword cards. This causes some problems: - control agent immediatly aborts - 'opcagt -status' claims the agent is down even if it's running - RPC template distribution fails if too many ( > ~70) templates are distributed. - The monitor agent might abort when checking the queuesize of the message agent queue. - Some NT EventLog entries are incompletly reported to the Management Server. - The control agent aborts when the /usr/OV/tmp/OpC/bin directory does not exist. - The installation aborts with the NetGetDCName API failing: network path not found. - The event correlation agent might abort. - In some situations the the source IP address of an incoming trap has the wrong byte ordering. - When there are many quickly incoming traps, the Event Interceptor does not handle them but instead buffers until there are new traps arriving. - After distributing of templates to NT system, sometimes there is a message in the errorlog about failures while suspending threads. PHSS_21007: - ITO NT agent does not support MS Windows 2000 - There are no default templates for MS Terminal Server / Citrix MetaFrame. - The ITO setup process might run into problems when the installation takes place from a write protected media. - The ITO Action agent might grow in memory usage when many automatic actions are running. - On systems with more than 2GB of physical memory, the itodiag tool does not report the correct memory size, but only showed 2GB. This is only fixed on Windows 2000, because Microsoft didn't fix the API call on Windows NT. - The ITO Event Correlation agent might get into a state of queuing messages instead of processing them. - The ITO Transfer Manager (opctranm) fails to transfer a request to an NT node that has a mgrconf file installed. PHSS_20485: - MS Terminal Server / Citrix MetaFrame was not supported. - The ITO Monitor agent sometimes aborts. - During the ITO agent installation using the opc_inst.bat scripts, unwanted output is printed when unpacking libnsp. - Using the itodiag.exe tool very often might cause the NT system to become unusable and require a reboot. - The ITO Event interceptor aborts when receiving a trap with a variable of the SNMPv2 type 'counter64'. - The ITO Event interceptor aborts after receiving a trap with the ASN variable type 'null'. - The ITO Event interceptor might abort. - The ITO Action agent executed a switch user even if the requested user is the 'HP ITO account'. - The tool itouser.exe might abort while printing the userlist when more than 19 users/services are logged on to the system. - On systems that have the McAfee virusscanner installed, after reboot sometimes the agent has problems reading the opcinfo file and will fail. Later startups of the agent succeed. - Pattern matching does not work correctly on a Japanese system. - The trap interceptor opctrapi does not correctly handle the reconfig signal. - The trap interceptor opctrapi tries name resolution on segment names. - The trap interceptor opctrapi dies on some large traps. Defect Description: PHSS_25228: - SR: 8606171814 A new command line option "/nonwdrives" is added for itodiag.exe. When sepcifying this option for itodiag.exe it doesn't collect information about name, file system and total and free disk space of any mapped network drive. - SR: 8606182275 need a possibility to disable the sending of an icmp packet before commuicating with ITO 5.3 manager. In order to avoid any communication beside RPC the opcinfo variable: OPC_RPC_ONLY can be used. That's a boolean value where the default is set to FALSE. - SR: 8606208283 When the user 'HP ITO Account' (or any other user set that the agent runs as) does not have the privilege "Increase Quotas" and also the group does not have, the agent can't perform a full switch user with password check. The privilege is now assigned to the agent user during agent installation time. - SR: B555010038 When SPIs change the environment variable PATH in the way that by adding (for example) \usr\OV\bin\OpC\test or similar this path is changed/removed during the (de)installation of the agent. Now the set-up program searches for the complete path correctly ended so that it doesn't overwrite or remove the wrong paths. - SR: B555010948 The grammar was changed to allow nested alternatives and process it correctly. - SR: B555011497 The trap interceptor may abort during a reboot of a Windows NT/Windows 2000 node with the message "can't open SNMP session". The reason is that the SNMP service just takes to long to start. Now the agent waits at maximum 30 seconds for the SNMP service to start till this error message is generated. for SR's not listed in this section please see the list of symptoms PHSS_22575: - The ITO agent can now run as non 'HP ITO account' user. This also includes the 'SYSTEM' account. Installation instruction: Use the manual installation. Before calling the 'opc_inst.bat' script, an additional entry can be added to the 'opcsetup.inf' file to specify the run user for the agent: [Agent User] SYSTEM Instead of 'SYSTEM', any other name could be specified. In this case the user account is created. If 'SYSTEM' is given, no user account is created (no 'opc_op' either). NOTE: User names may not contain space characters. If a user name is specified in 'opcsetup.inf', the agent will be installed using this account name, no matter if there was already an agent installed using another account. If a different user is specified in 'opcsetup.inf', the account created by the existing agent is not removed but left on the system. It has to be removed manually. If no user name is specified in 'opcsetup.inf', the installation will check if there is already an agent installed. If it finds one, the same user will be used. If a user is specified or found to be used by an old agent, and the password specified was not correct for this account, the user is removed and re-created. It has the same name afterwards but a different internal user ID. Applications: ------------- - All applications configured to run as 'opc_op' or 'HP ITO account' have to be changed to specify a user that exists on the system. - All monitoring executables will be run as the specified account. This might restrict some of the access rights to monitored applications. - The 'SYSTEM' account does not have any network access capabilities. Remote installation: -------------------- - On Domain Controllers there is the Installation Server service that executes the installation on remote systems in this domain. If this service is modified to run as 'SYSTEM', the remote installation is not possible at all (the 'SYSTEM' account does not have any access rights for remote systems). - If remote execution is wanted, the Installation Server service can be configured to run as a domain user that has Domain Admin user rights. PHSS_22002: check the list of the symptoms PHSS_21007: check the list of the symptoms Resolution: - The ITO agent is now supported on MS Windows 2000. The following versions are supported: MS Windows 2000 Professional 5.0 MS Windows 2000 Server 5.0 Also supported on MS Windows 2000: MS Terminal Server Citrix MetaFrame 1.8 English (Refer to documentation below: PHSS_20485/6) The same character sets are supported as documented for MS Windows NT: English Management Server: OEM Code page 850 OEM Code page 437 ANSI Code page 1252 ASCII Japanese Management Server: ANSI Code page 932 ASCII Notes: - To install the default templates for MS Windows 2000, the following command has to be executed on the ITO management server after installation of this patch: opccfgupld -add -subentity Win2000 Note: The templates can be uploaded to a Japanese management server, but they are not localized. The template group 'Default' contains the new group 'Windows 2000'. This group contains the following templates: opcmsg(1|3) dflt_ApplEvLog (NT) dflt_SecEvLog (NT) dflt_SysEvLog (NT) dflt_cpu_util_NT The templates listed above are linked to the templates in the 'Windows NT' template group. dflt_DNSEvLog (2000) dflt_DirectoryEvLog (2000) dflt_FileReplicationEvLog (2000) These three templates are new default templates for the additional EventLogs that exist on the Windows 2000 Server system. - If you want to assign the monitor template 'dflt_disk_util_NT' of the 'Windows NT' group to a Windows 2000 system, execute the following command on the system. The system must then be rebooted to activate disk performance montoring of the operating system: diskperf -y - When removing the ITO agent from a Windows 2000 Domain Controller the setup program might report an error message: The call to the NT API function 'NetUserDel (1)' for 'HP ITO account' failed with the following system error: Access is denied. This is caused by a Windows 2000 specific setup of the access-control list in Active Directory. As a workaround, manually remove the user account. - To install the default templates for MS Terminal Server / Citrix MetaFrame, the following command has to be executed on the ITO management server after installation of this patch: opccfgupld -add -subentity TS_MF Note: The templates can be uploaded to a Japanese management server, but they are not localized. The template group 'Default' contains the new group 'Terminal Server/MetaFrame'. This group contains the following template groups: MetaFrame Terminal Server Assign the 'Terminal Server' template group to systems running the MS Terminal Server. Assign the 'MetaFram' template group to systems running MS Terminal Server and Citrix MetaFrame. The new templates are: TS_Licensing Checks if the Terminal Server licensing service is running TS_Service Checks if the Terminal Server service is running System log (Terminal Server) Template for Terminal Server events in the System EventLog MF_ICA_Browser Checks if the MetaFrame ICA browser service is running MF_Prog_Neighborhood Checks if the MetaFrame ICA Program Neighborhood service is running System Log (MetaFrame) Template for MetaFrame events in the System EventLog There is a new application group 'MetaFrame Tools'. It contains the following applications: Sessions Lists open MF sessions Users Lists connected users on MF Server Servers Lists available MF Servers Auditlog Generates logon/logoff report ACL Info Shows information about user rights Disconnect Disconnects a terminal session Flush Synchronizes disk data Send Message Sends message to ICA client users Processes Lists processes on MF server License Shows information about license PHSS_20485: - The ITO agent is now supported on Terminal Server/ MetaFrame servers: The following versions are supported: MS Terminal Server NT 4.0 ServicePack 4 English Citrix MetaFrame 1.8 English Only the server part is supported. The ITO agent on Terminal Server/ MetaFrame clients is not supported. After the installation of an ITO agent on a Terminal Server / MetaFrame system, the ITO installation logfile is located in c:\temp, if c:\temp actually exists. If it doesn't exist, the inst.log file is located in the directory from where the installation was started. The standard diskspace monitor may cause problems, if the c: drive does not exist. - Fixed bug in the multi byte character set handling. - Check for reconfig each time a trap comes in. - No name resolution is performed on segment names. They are handled as if name service returned not resolvable. - Increased buffer size for trap formatting. SR: R555005015 R555004838 R555004827 R555004826 R555004825 R555003313 R555002528 R555001968 R555001626 H555002671 B555011990 B555011979 B555011594 B555011497 B555011422 B555011256 B555010980 B555010948 B555010791 B555010620 B555010282 B555010038 B555009850 B555009745 B555009740 B555009543 B555009388 B555009155 B555008912 B555008754 B555008729 B555008526 B555008314 B555008309 B555007980 B555007966 B555007883 B555007847 B555007840 B555007549 B555007478 B555007439 B555007386 B555007282 B555007233 B555007201 B555007187 B555006726 B555006165 B555005951 B555005922 B555005125 B555004854 B555004798 B555001830 B555001661 B555000303 B555000302 B555000293 B555000256 B555000254 B555000231 B555000202 8606208283 8606183491 8606182275 8606181988 8606180891 8606171814 8606161695 8606140211 Patch Files: /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.38/RPC_DCE_TCP/opc_pkg.Z /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.38/RPC_DCE_TCP/unzip.exe /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.38/RPC_DCE_TCP/unzip.txt /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.38/RPC_DCE_TCP/opc_inst.bat /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.38/RPC_DCE_TCP/opc_pre.bat /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.38/RPC_DCE_TCP/opcsetup.inf /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.38/RPC_DCE_TCP/monitor/itoprocs.exe.Z /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.38/RPC_DCE_TCP/monitor/sms_chk.bat.Z /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.38/RPC_DCE_TCP/monitor/mf_chk.bat.Z /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.38/RPC_DCE_TCP/monitor/mf_service.bat.Z /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.38/RPC_DCE_TCP/monitor/MFluse.exe.Z /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.38/RPC_DCE_TCP/cmds/itodiag.exe.Z /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.38/RPC_DCE_TCP/cmds/itokill.exe.Z /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.38/RPC_DCE_TCP/cmds/itomserv.exe.Z /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.38/RPC_DCE_TCP/cmds/itoreg.cfg.Z /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.38/RPC_DCE_TCP/cmds/itoreg.exe.Z /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.38/RPC_DCE_TCP/cmds/itosdown.exe.Z /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.38/RPC_DCE_TCP/cmds/itouser.exe.Z /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.38/RPC_DCE_TCP/cmds/opcprfls.exe.Z /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.38/RPC_DCE_TCP/cmds/opcdf.bat.Z /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.38/RPC_DCE_TCP/cmds/opcps.bat.Z /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.38/RPC_DCE_TCP/actions/mf_app.bat.Z /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ AgentPlatform /var/opt/OV/share/tmp/OpC_appl/Win2000/C/Win2000.idx /var/opt/OV/share/tmp/OpC_appl/Win2000/C/TEMPLATES/LOGFILE/ logfile.dat /var/opt/OV/share/tmp/OpC_appl/Win2000/C/TEMPLATES/ TEMPLGROUP/templgroup.dat /var/opt/OV/share/tmp/OpC_appl/Win2000/ja_JP.SJIS/ Win2000.idx /var/opt/OV/share/tmp/OpC_appl/Win2000/ja_JP.SJIS/TEMPLATES/ LOGFILE/logfile.dat /var/opt/OV/share/tmp/OpC_appl/Win2000/ja_JP.SJIS/TEMPLATES/ TEMPLGROUP/templgroup.dat /var/opt/OV/share/tmp/OpC_appl/TS_MF/C/TS_MF.idx /var/opt/OV/share/tmp/OpC_appl/TS_MF/C/TEMPLATES/LOGFILE/ logfile.dat /var/opt/OV/share/tmp/OpC_appl/TS_MF/C/TEMPLATES/MONITOR/ monitor.dat /var/opt/OV/share/tmp/OpC_appl/TS_MF/C/TEMPLATES/TEMPLGROUP/ templgroup.dat /var/opt/OV/share/tmp/OpC_appl/TS_MF/C/APPLICATIONS/ applications.dat /var/opt/OV/share/tmp/OpC_appl/TS_MF/ja_JP.SJIS/TS_MF.idx /var/opt/OV/share/tmp/OpC_appl/TS_MF/ja_JP.SJIS/TEMPLATES/ LOGFILE/logfile.dat /var/opt/OV/share/tmp/OpC_appl/TS_MF/ja_JP.SJIS/TEMPLATES/ MONITOR/monitor.dat /var/opt/OV/share/tmp/OpC_appl/TS_MF/ja_JP.SJIS/TEMPLATES/ TEMPLGROUP/templgroup.dat /var/opt/OV/share/tmp/OpC_appl/TS_MF/ja_JP.SJIS/ APPLICATIONS/applications.dat what(1) Output: /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.38/RPC_DCE_TCP/opc_pkg.Z: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.38/RPC_DCE_TCP/unzip.exe: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.38/RPC_DCE_TCP/unzip.txt: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.38/RPC_DCE_TCP/opc_inst.bat: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.38/RPC_DCE_TCP/opc_pre.bat: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.38/RPC_DCE_TCP/opcsetup.inf: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.38/RPC_DCE_TCP/monitor/itoprocs.exe.Z: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.38/RPC_DCE_TCP/monitor/sms_chk.bat.Z: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.38/RPC_DCE_TCP/monitor/mf_chk.bat.Z: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.38/RPC_DCE_TCP/monitor/mf_service.bat.Z: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.38/RPC_DCE_TCP/monitor/MFluse.exe.Z: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.38/RPC_DCE_TCP/cmds/itodiag.exe.Z: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.38/RPC_DCE_TCP/cmds/itokill.exe.Z: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.38/RPC_DCE_TCP/cmds/itomserv.exe.Z: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.38/RPC_DCE_TCP/cmds/itoreg.cfg.Z: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.38/RPC_DCE_TCP/cmds/itoreg.exe.Z: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.38/RPC_DCE_TCP/cmds/itosdown.exe.Z: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.38/RPC_DCE_TCP/cmds/itouser.exe.Z: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.38/RPC_DCE_TCP/cmds/opcprfls.exe.Z: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.38/RPC_DCE_TCP/cmds/opcdf.bat.Z: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.38/RPC_DCE_TCP/cmds/opcps.bat.Z: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.38/RPC_DCE_TCP/actions/mf_app.bat.Z: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ AgentPlatform: None /var/opt/OV/share/tmp/OpC_appl/Win2000/C/Win2000.idx: None /var/opt/OV/share/tmp/OpC_appl/Win2000/C/TEMPLATES/LOGFILE/ logfile.dat: None /var/opt/OV/share/tmp/OpC_appl/Win2000/C/TEMPLATES/ TEMPLGROUP/templgroup.dat: None /var/opt/OV/share/tmp/OpC_appl/Win2000/ja_JP.SJIS/ Win2000.idx: None /var/opt/OV/share/tmp/OpC_appl/Win2000/ja_JP.SJIS/TEMPLATES/ LOGFILE/logfile.dat: None /var/opt/OV/share/tmp/OpC_appl/Win2000/ja_JP.SJIS/TEMPLATES/ TEMPLGROUP/templgroup.dat: None /var/opt/OV/share/tmp/OpC_appl/TS_MF/C/TS_MF.idx: None /var/opt/OV/share/tmp/OpC_appl/TS_MF/C/TEMPLATES/LOGFILE/ logfile.dat: None /var/opt/OV/share/tmp/OpC_appl/TS_MF/C/TEMPLATES/MONITOR/ monitor.dat: None /var/opt/OV/share/tmp/OpC_appl/TS_MF/C/TEMPLATES/TEMPLGROUP/ templgroup.dat: None /var/opt/OV/share/tmp/OpC_appl/TS_MF/C/APPLICATIONS/ applications.dat: None /var/opt/OV/share/tmp/OpC_appl/TS_MF/ja_JP.SJIS/TS_MF.idx: None /var/opt/OV/share/tmp/OpC_appl/TS_MF/ja_JP.SJIS/TEMPLATES/ LOGFILE/logfile.dat: None /var/opt/OV/share/tmp/OpC_appl/TS_MF/ja_JP.SJIS/TEMPLATES/ MONITOR/monitor.dat: None /var/opt/OV/share/tmp/OpC_appl/TS_MF/ja_JP.SJIS/TEMPLATES/ TEMPLGROUP/templgroup.dat: None /var/opt/OV/share/tmp/OpC_appl/TS_MF/ja_JP.SJIS/ APPLICATIONS/applications.dat: None cksum(1) Output: 2527404915 2537797 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.05.38/RPC_DCE_TCP/opc_pkg.Z 3162183940 113152 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.05.38/RPC_DCE_TCP/unzip.exe 1939298735 508 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.05.38/RPC_DCE_TCP/unzip.txt 4317250 1706 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.05.38/RPC_DCE_TCP/opc_inst.bat 1264246275 1716 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.05.38/RPC_DCE_TCP/opc_pre.bat 2286058905 133 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.05.38/RPC_DCE_TCP/opcsetup.inf 666848341 11370 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.05.38/RPC_DCE_TCP/monitor/ itoprocs.exe.Z 2091150204 151 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.05.38/RPC_DCE_TCP/monitor/ sms_chk.bat.Z 1293146252 173 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.05.38/RPC_DCE_TCP/monitor/ mf_chk.bat.Z 3616292193 160 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.05.38/RPC_DCE_TCP/monitor/ mf_service.bat.Z 629949354 3808 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.05.38/RPC_DCE_TCP/monitor/ MFluse.exe.Z 1503335199 26255 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.05.38/RPC_DCE_TCP/cmds/ itodiag.exe.Z 3576356939 8416 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.05.38/RPC_DCE_TCP/cmds/ itokill.exe.Z 2608404117 8772 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.05.38/RPC_DCE_TCP/cmds/ itomserv.exe.Z 1586237090 188 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.05.38/RPC_DCE_TCP/cmds/ itoreg.cfg.Z 3790352327 17506 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.05.38/RPC_DCE_TCP/cmds/ itoreg.exe.Z 2797836801 6619 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.05.38/RPC_DCE_TCP/cmds/ itosdown.exe.Z 1627841397 8671 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.05.38/RPC_DCE_TCP/cmds/ itouser.exe.Z 2788280992 10919 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.05.38/RPC_DCE_TCP/cmds/ opcprfls.exe.Z 2003580432 38 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.05.38/RPC_DCE_TCP/cmds/ opcdf.bat.Z 849569434 41 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.05.38/RPC_DCE_TCP/cmds/ opcps.bat.Z 1588307382 751 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.05.38/RPC_DCE_TCP/actions/ mf_app.bat.Z 2424974644 6458 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/AgentPlatform 2485068413 104 /var/opt/OV/share/tmp/OpC_appl/Win2000/C/ Win2000.idx 2007600330 1998 /var/opt/OV/share/tmp/OpC_appl/Win2000/C/ TEMPLATES/LOGFILE/logfile.dat 1029602005 568 /var/opt/OV/share/tmp/OpC_appl/Win2000/C/ TEMPLATES/TEMPLGROUP/templgroup.dat 2682770904 100 /var/opt/OV/share/tmp/OpC_appl/Win2000/ ja_JP.SJIS/Win2000.idx 1090092847 1995 /var/opt/OV/share/tmp/OpC_appl/Win2000/ ja_JP.SJIS/TEMPLATES/LOGFILE/logfile.dat 1029602005 568 /var/opt/OV/share/tmp/OpC_appl/Win2000/ ja_JP.SJIS/TEMPLATES/TEMPLGROUP/templgroup.dat 937413291 175 /var/opt/OV/share/tmp/OpC_appl/TS_MF/C/ TS_MF.idx 2876017979 4230 /var/opt/OV/share/tmp/OpC_appl/TS_MF/C/ TEMPLATES/LOGFILE/logfile.dat 3051757784 3987 /var/opt/OV/share/tmp/OpC_appl/TS_MF/C/ TEMPLATES/MONITOR/monitor.dat 838892340 829 /var/opt/OV/share/tmp/OpC_appl/TS_MF/C/ TEMPLATES/TEMPLGROUP/templgroup.dat 2273364777 5204 /var/opt/OV/share/tmp/OpC_appl/TS_MF/C/ APPLICATIONS/applications.dat 3009823702 171 /var/opt/OV/share/tmp/OpC_appl/TS_MF/ ja_JP.SJIS/TS_MF.idx 2070958483 4228 /var/opt/OV/share/tmp/OpC_appl/TS_MF/ ja_JP.SJIS/TEMPLATES/LOGFILE/logfile.dat 3051757784 3987 /var/opt/OV/share/tmp/OpC_appl/TS_MF/ ja_JP.SJIS/TEMPLATES/MONITOR/monitor.dat 838892340 829 /var/opt/OV/share/tmp/OpC_appl/TS_MF/ ja_JP.SJIS/TEMPLATES/TEMPLGROUP/templgroup.dat 2273364777 5204 /var/opt/OV/share/tmp/OpC_appl/TS_MF/ ja_JP.SJIS/APPLICATIONS/applications.dat Patch Conflicts: None Patch Dependencies: None Hardware Dependencies: None Other Dependencies: None Supersedes: PHSS_20485 PHSS_21007 PHSS_22002 PHSS_22575 Equivalent Patches: ITOSOL_00116: sparcSOL: 2.6 2.7 PHSS_25229: s700: 11.00 s800: 11.00 Patch Package Size: 2870 KBytes Installation Instructions: Please review all instructions and the Hewlett-Packard SupportLine User Guide or your Hewlett-Packard support terms and conditions for precautions, scope of license, restrictions, and, limitation of liability and warranties, before installing this patch. ------------------------------------------------------------ 1. Back up your system before installing a patch. 2. Login as root. 3. Copy the patch to the /tmp directory. 4. Move to the /tmp directory and unshar the patch: cd /tmp sh PHSS_25228 5a. For a standalone system, run swinstall to install the patch: swinstall -x autoreboot=true -x match_target=true \ -s /tmp/PHSS_25228.depot By default swinstall will archive the original software in /var/adm/sw/patch/PHSS_25228. If you do not wish to retain a copy of the original software, you can create an empty file named /var/adm/sw/patch/PATCH_NOSAVE. WARNING: If this file exists when a patch is installed, the patch cannot be deinstalled. Please be careful when using this feature. It is recommended that you move the PHSS_25228.text file to /var/adm/sw/patch for future reference. To put this patch on a magnetic tape and install from the tape drive, use the command: dd if=/tmp/PHSS_25228.depot of=/dev/rmt/0m bs=2k Special Installation Instructions: BEFORE LOADING THIS PATCH... o You may use this patch with the following official ITO release: A.05.30 o DO NOT use this patch with older releases of ITO, for example versions A.05.00 or A.05.11. o This patch provides the HP OV IT/Operations Intelligent Agent to be used with a ITO A.05.30 Management Server system. (A) Patch Installation Instructions ------------------------------- (A1) Install the patch, following the standard installation instructions. ------------------------------------------------------ NOTE: For backing up the system before installing a patch, you may use opc_backup(1m). NOTE: MAKE SURE THAT NO AGENT OF THE PLATFORM ADDRESSED BY THIS PATCH IS DISTRIBUTED (either from the ITO Administrator's GUI or from command line using inst.sh) WHILE RUNNING SWINSTALL. NOTE: Don't be afraid of the '-x autoreboot=true' option above. There won't be a reboot due to this ITO patch. You can skip this option if you like. NOTE: This patch must be installed on the ITO Management Server system, NOT on an ITO Managed Node directly. Changes will take effect on managed nodes by means of ITO Software Distribution (using 'Force Update' if there is already an agent installed on the managed node). See chapter 2 of the ITO Administrator's Reference manual for more information. - The ITO agent can now run as non 'HP ITO account' user. This also includes the 'SYSTEM' account. Installation instruction: Use the manual installation. Before calling the 'opc_inst.bat' script, an additional entry can be added to the 'opcsetup.inf' file to specify the run user for the agent: [Agent User] SYSTEM Instead of 'SYSTEM', any other name could be specified. In this case the user account is created. If 'SYSTEM' is given, no user account is created (no 'opc_op' either). NOTE: User names may not contain space characters. If a user name is specified in 'opcsetup.inf', the agent will be installed using this account name, no matter if there was already an agent installed using another account. If a different user is specified in 'opcsetup.inf', the account created by the existing agent is not removed but left on the system. It has to be removed manually. If no user name is specified in 'opcsetup.inf', the installation will check if there is already an agent installed. If it finds one, the same user will be used. If a user is specified or found to be used by an old agent, and the password specified was not correct for this account, the user is removed and re-created. It has the same name afterwards but a different internal user ID. Applications: ------------- - All applications configured to run as 'opc_op' or 'HP ITO account' have to be changed to specify a user that exists on the system. - All monitoring executables will be run as the specified account. This might restrict some of the access rights to monitored applications. - The 'SYSTEM' account does not have any network access capabilities. Remote installation: -------------------- - On Domain Controllers there is the Installation Server service that executes the installation on remote systems in this domain. If this service is modified to run as 'SYSTEM', the remote installation is not possible at all (the 'SYSTEM' account does not have any access rights for remote systems). - If remote execution is wanted, the Installation Server service can be configured to run as a domain user that has Domain Admin user rights. - To install the default templates for MS Windows 2000, the following command has to be executed on the ITO management server after installation of this patch: opccfgupld -add -subentity Win2000 The templates can be uploaded to a Japanese management server, but they are not localized. - If you want to assign the monitor template 'dflt_disk_util_NT' of the 'Windows NT' group to a Windows 2000 system, execute the following command on the system. The system must then be rebooted to activate disk performance montoring of the operating system: diskperf -y - To install the default templates for MS Terminal Server / Citrix MetaFrame, the following command has to be executed on the ITO management server after installation of this patch: opccfgupld -add -subentity TS_MF The templates can be uploaded to a Japanese management server, but they are not localized. (B) Patch Deinstallation Instructions --------------------------------- (B1) To deinstall the patch PHSS_25228 run swremove: NOTE: MAKE SURE THAT NO AGENT OF THE PLATFORM ADDRESSED BY THIS PATCH IS DISTRIBUTED (either from the ITO Administrator's GUI or from command line using inst.sh) WHILE RUNNING SWREMOVE. # swremove PHSS_25228