Patch Name: PHSS_22575 Patch Description: s700_800 10.20 OV ITO5.3X NT Agent Patch A.05.37 Creation Date: 01/01/24 Post Date: 01/01/25 Hardware Platforms - OS Releases: s700: 10.20 s800: 10.20 Products: OpenView IT/Operations 5.3 Filesets: OVOPC-CLT.OVOPC-NT-CLT,A.05.30 Automatic Reboot?: No Status: General Superseded Critical: No Path Name: /hp-ux_patches/s700_800/10.X/PHSS_22575 Symptoms: PHSS_22575: - Automatic Actions can't start applications that display a user interface. - Event Interceptor aborts after getting traps with unresolvable IP address. - Event Interceptor aborts when running on an NNM system and an invalid trap is received. - The Event Interceptor might get into a looping state when running on an NNM system and the ovtrapd is stopped. - Multiple issues with the agent on MS Terminal Server systems running on NT 4.0. - Perl script might show strange behavior when called as monitor. - Agent has to run as 'HP ITO account' user. PHSS_22002: - ITO requires the setting of all IP addresses in opc.hosts for NT multi homed hosts. - When calling an application as non-administrative user, there is a window coming up: Initialization of dynamic load library c:\winnt\system32\user32. dll failed. the nthost. exe tool help, but it is required after each start of the system. - When using the application opcprfls. exe to list the available performance monitoring objects on an NT system not all objects are enumerated. - Setting up a logfile template that uses a dynamic path definition, like: <`echo "/tmp/path with spaces/logfile1.txt"`> This path will be handled as three logfiles: - /tmp/path - with - spaces/logfile1.txt - In NAT environments the distribution does not work when an IP address is set for the system that does not physically exists on any of its network cards. - In NAT environments it might make sense to set the OPC_IP_ADDRESS to an address which does not exists on any of the system's netword cards. This causes some problems: - control agent immediatly aborts - 'opcagt -status' claims the agent is down even if it's running - RPC template distribution fails if too many ( > ~70) templates are distributed. - The monitor agent might abort when checking the queuesize of the message agent queue. - Some NT EventLog entries are incompletly reported to the Management Server. - The control agent aborts when the /usr/OV/tmp/OpC/bin directory does not exist. - The installation aborts with the NetGetDCName API failing: network path not found. - The event correlation agent might abort. - In some situations the the source IP address of an incoming trap has the wrong byte ordering. - When there are many quickly incoming traps, the Event Interceptor does not handle them but instead buffers until there are new traps arriving. - After distributing of templates to NT system, sometimes there is a message in the errorlog about failures while suspending threads. PHSS_21007: - ITO NT agent does not support MS Windows 2000 - There are no default templates for MS Terminal Server / Citrix MetaFrame. - The ITO setup process might run into problems when the installation takes place from a write protected media. - The ITO Action agent might grow in memory usage when many automatic actions are running. - On systems with more than 2GB of physical memory, the itodiag tool does not report the correct memory size, but only showed 2GB. This is only fixed on Windows 2000, because Microsoft didn't fix the API call on Windows NT. - The ITO Event Correlation agent might get into a state of queuing messages instead of processing them. - The ITO Transfer Manager (opctranm) fails to transfer a request to an NT node that has a mgrconf file installed. PHSS_20485: - MS Terminal Server / Citrix MetaFrame was not supported. - The ITO Monitor agent sometimes aborts. - During the ITO agent installation using the opc_inst.bat scripts, unwanted output is printed when unpacking libnsp. - Using the itodiag.exe tool very often might cause the NT system to become unusable and require a reboot. - The ITO Event interceptor aborts when receiving a trap with a variable of the SNMPv2 type 'counter64'. - The ITO Event interceptor aborts after receiving a trap with the ASN variable type 'null'. - The ITO Event interceptor might abort. - The ITO Action agent executed a switch user even if the requested user is the 'HP ITO account'. - The tool itouser.exe might abort while printing the userlist when more than 19 users/services are logged on to the system. - On systems that have the McAfee virusscanner installed, after reboot sometimes the agent has problems reading the opcinfo file and will fail. Later startups of the agent succeed. - Pattern matching does not work correctly on a Japanese system. - The trap interceptor opctrapi does not correctly handle the reconfig signal. - The trap interceptor opctrapi tries name resolution on segment names. - The trap interceptor opctrapi dies on some large traps. Defect Description: PHSS_22575: - The ITO agent can now run as non 'HP ITO account' user. This also includes the 'SYSTEM' account. Installation instruction: Use the manual installation. Before calling the 'opc_inst.bat' script, an additional entry can be added to the 'opcsetup.inf' file to specify the run user for the agent: [Agent User] SYSTEM Instead of 'SYSTEM', any other name could be specified. In this case the user account is created. If 'SYSTEM' is given, no user account is created (no 'opc_op' either). NOTE: User names may not contain space characters. If a user name is specified in 'opcsetup.inf', the agent will be installed using this account name, no matter if there was already an agent installed using another account. If a different user is specified in 'opcsetup.inf', the account created by the existing agent is not removed but left on the system. It has to be removed manually. If no user name is specified in 'opcsetup.inf', the installation will check if there is already an agent installed. If it finds one, the same user will be used. If a user is specified or found to be used by an old agent, and the password specified was not correct for this account, the user is removed and re-created. It has the same name afterwards but a different internal user ID. Applications: ------------- - All applications configured to run as 'opc_op' or 'HP ITO account' have to be changed to specify a user that exists on the system. - All monitoring executables will be run as the specified account. This might restrict some of the access rights to monitored applications. - The 'SYSTEM' account does not have any network access capabilities. Remote installation: -------------------- - On Domain Controllers there is the Installation Server service that executes the installation on remote systems in this domain. If this service is modified to run as 'SYSTEM', the remote installation is not possible at all (the 'SYSTEM' account does not have any access rights for remote systems). - If remote execution is wanted, the Installation Server service can be configured to run as a domain user that has Domain Admin user rights. PHSS_22002: check the list of the symptoms PHSS_21007: check the list of the symptoms Resolution: - The ITO agent is now supported on MS Windows 2000. The following versions are supported: MS Windows 2000 Professional 5.0 MS Windows 2000 Server 5.0 Also supported on MS Windows 2000: MS Terminal Server Citrix MetaFrame 1.8 English (Refer to documentation below: PHSS_20485/6) The same character sets are supported as documented for MS Windows NT: English Management Server: OEM Code page 850 OEM Code page 437 ANSI Code page 1252 ASCII Japanese Management Server: ANSI Code page 932 ASCII Notes: - To install the default templates for MS Windows 2000, the following command has to be executed on the ITO management server after installation of this patch: opccfgupld -add -subentity Win2000 Note: The templates can be uploaded to a Japanese management server, but they are not localized. The template group 'Default' contains the new group 'Windows 2000'. This group contains the following templates: opcmsg(1|3) dflt_ApplEvLog (NT) dflt_SecEvLog (NT) dflt_SysEvLog (NT) dflt_cpu_util_NT The templates listed above are linked to the templates in the 'Windows NT' template group. dflt_DNSEvLog (2000) dflt_DirectoryEvLog (2000) dflt_FileReplicationEvLog (2000) These three templates are new default templates for the additional EventLogs that exist on the Windows 2000 Server system. - If you want to assign the monitor template 'dflt_disk_util_NT' of the 'Windows NT' group to a Windows 2000 system, execute the following command on the system. The system must then be rebooted to activate disk performance montoring of the operating system: diskperf -y - When removing the ITO agent from a Windows 2000 Domain Controller the setup program might report an error message: The call to the NT API function 'NetUserDel (1)' for 'HP ITO account' failed with the following system error: Access is denied. This is caused by a Windows 2000 specific setup of the access-control list in Active Directory. As a workaround, manually remove the user account. - To install the default templates for MS Terminal Server / Citrix MetaFrame, the following command has to be executed on the ITO management server after installation of this patch: opccfgupld -add -subentity TS_MF Note: The templates can be uploaded to a Japanese management server, but they are not localized. The template group 'Default' contains the new group 'Terminal Server/MetaFrame'. This group contains the following template groups: MetaFrame Terminal Server Assign the 'Terminal Server' template group to systems running the MS Terminal Server. Assign the 'MetaFram' template group to systems running MS Terminal Server and Citrix MetaFrame. The new templates are: TS_Licensing Checks if the Terminal Server licensing service is running TS_Service Checks if the Terminal Server service is running System log (Terminal Server) Template for Terminal Server events in the System EventLog MF_ICA_Browser Checks if the MetaFrame ICA browser service is running MF_Prog_Neighborhood Checks if the MetaFrame ICA Program Neighborhood service is running System Log (MetaFrame) Template for MetaFrame events in the System EventLog There is a new application group 'MetaFrame Tools'. It contains the following applications: Sessions Lists open MF sessions Users Lists connected users on MF Server Servers Lists available MF Servers Auditlog Generates logon/logoff report ACL Info Shows information about user rights Disconnect Disconnects a terminal session Flush Synchronizes disk data Send Message Sends message to ICA client users Processes Lists processes on MF server License Shows information about license PHSS_20485: - The ITO agent is now supported on Terminal Server/ MetaFrame servers: The following versions are supported: MS Terminal Server NT 4.0 ServicePack 4 English Citrix MetaFrame 1.8 English Only the server part is supported. The ITO agent on Terminal Server/ MetaFrame clients is not supported. After the installation of an ITO agent on a Terminal Server / MetaFrame system, the ITO installation logfile is located in c:\temp, if c:\temp actually exists. If it doesn't exist, the inst.log file is located in the directory from where the installation was started. The standard diskspace monitor may cause problems, if the c: drive does not exist. - Fixed bug in the multi byte character set handling. - Check for reconfig each time a trap comes in. - No name resolution is performed on segment names. They are handled as if name service returned not resolvable. - Increased buffer size for trap formatting. SR: R555005015 R555004838 R555004827 R555004826 R555004825 R555003313 R555002528 R555001968 R555001626 H555002671 B555008912 B555008754 B555008729 B555008526 B555008314 B555008309 B555007883 B555007847 B555007840 B555007549 B555007478 B555007439 B555007386 B555007282 B555007233 B555007201 B555007187 B555006726 B555006165 B555005951 B555005922 B555005125 B555004854 B555004798 B555001830 B555001661 B555000303 B555000302 B555000293 B555000256 B555000254 B555000231 B555000202 8606161695 8606140211 Patch Files: /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.37/RPC_DCE_TCP/opc_pkg.Z /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.37/RPC_DCE_TCP/unzip.exe /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.37/RPC_DCE_TCP/unzip.txt /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.37/RPC_DCE_TCP/opc_inst.bat /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.37/RPC_DCE_TCP/opc_pre.bat /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.37/RPC_DCE_TCP/opcsetup.inf /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.37/RPC_DCE_TCP/monitor/itoprocs.exe.Z /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.37/RPC_DCE_TCP/monitor/sms_chk.bat.Z /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.37/RPC_DCE_TCP/monitor/mf_chk.bat.Z /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.37/RPC_DCE_TCP/monitor/mf_service.bat.Z /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.37/RPC_DCE_TCP/monitor/MFluse.exe.Z /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.37/RPC_DCE_TCP/cmds/itodiag.exe.Z /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.37/RPC_DCE_TCP/cmds/itokill.exe.Z /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.37/RPC_DCE_TCP/cmds/itomserv.exe.Z /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.37/RPC_DCE_TCP/cmds/itoreg.cfg.Z /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.37/RPC_DCE_TCP/cmds/itoreg.exe.Z /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.37/RPC_DCE_TCP/cmds/itosdown.exe.Z /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.37/RPC_DCE_TCP/cmds/itouser.exe.Z /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.37/RPC_DCE_TCP/cmds/opcprfls.exe.Z /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.37/RPC_DCE_TCP/cmds/opcdf.bat.Z /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.37/RPC_DCE_TCP/cmds/opcps.bat.Z /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.37/RPC_DCE_TCP/actions/mf_app.bat.Z /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ AgentPlatform /var/opt/OV/share/tmp/OpC_appl/Win2000/C/Win2000.idx /var/opt/OV/share/tmp/OpC_appl/Win2000/C/TEMPLATES/LOGFILE/ logfile.dat /var/opt/OV/share/tmp/OpC_appl/Win2000/C/TEMPLATES/ TEMPLGROUP/templgroup.dat /var/opt/OV/share/tmp/OpC_appl/Win2000/ja_JP.SJIS/ Win2000.idx /var/opt/OV/share/tmp/OpC_appl/Win2000/ja_JP.SJIS/TEMPLATES/ LOGFILE/logfile.dat /var/opt/OV/share/tmp/OpC_appl/Win2000/ja_JP.SJIS/TEMPLATES/ TEMPLGROUP/templgroup.dat /var/opt/OV/share/tmp/OpC_appl/TS_MF/C/TS_MF.idx /var/opt/OV/share/tmp/OpC_appl/TS_MF/C/TEMPLATES/LOGFILE/ logfile.dat /var/opt/OV/share/tmp/OpC_appl/TS_MF/C/TEMPLATES/MONITOR/ monitor.dat /var/opt/OV/share/tmp/OpC_appl/TS_MF/C/TEMPLATES/TEMPLGROUP/ templgroup.dat /var/opt/OV/share/tmp/OpC_appl/TS_MF/C/APPLICATIONS/ applications.dat /var/opt/OV/share/tmp/OpC_appl/TS_MF/ja_JP.SJIS/TS_MF.idx /var/opt/OV/share/tmp/OpC_appl/TS_MF/ja_JP.SJIS/TEMPLATES/ LOGFILE/logfile.dat /var/opt/OV/share/tmp/OpC_appl/TS_MF/ja_JP.SJIS/TEMPLATES/ MONITOR/monitor.dat /var/opt/OV/share/tmp/OpC_appl/TS_MF/ja_JP.SJIS/TEMPLATES/ TEMPLGROUP/templgroup.dat /var/opt/OV/share/tmp/OpC_appl/TS_MF/ja_JP.SJIS/ APPLICATIONS/applications.dat what(1) Output: /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.37/RPC_DCE_TCP/opc_pkg.Z: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.37/RPC_DCE_TCP/unzip.exe: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.37/RPC_DCE_TCP/unzip.txt: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.37/RPC_DCE_TCP/opc_inst.bat: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.37/RPC_DCE_TCP/opc_pre.bat: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.37/RPC_DCE_TCP/opcsetup.inf: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.37/RPC_DCE_TCP/monitor/itoprocs.exe.Z: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.37/RPC_DCE_TCP/monitor/sms_chk.bat.Z: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.37/RPC_DCE_TCP/monitor/mf_chk.bat.Z: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.37/RPC_DCE_TCP/monitor/mf_service.bat.Z: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.37/RPC_DCE_TCP/monitor/MFluse.exe.Z: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.37/RPC_DCE_TCP/cmds/itodiag.exe.Z: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.37/RPC_DCE_TCP/cmds/itokill.exe.Z: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.37/RPC_DCE_TCP/cmds/itomserv.exe.Z: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.37/RPC_DCE_TCP/cmds/itoreg.cfg.Z: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.37/RPC_DCE_TCP/cmds/itoreg.exe.Z: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.37/RPC_DCE_TCP/cmds/itosdown.exe.Z: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.37/RPC_DCE_TCP/cmds/itouser.exe.Z: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.37/RPC_DCE_TCP/cmds/opcprfls.exe.Z: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.37/RPC_DCE_TCP/cmds/opcdf.bat.Z: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.37/RPC_DCE_TCP/cmds/opcps.bat.Z: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.05.37/RPC_DCE_TCP/actions/mf_app.bat.Z: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ AgentPlatform: None /var/opt/OV/share/tmp/OpC_appl/Win2000/C/Win2000.idx: None /var/opt/OV/share/tmp/OpC_appl/Win2000/C/TEMPLATES/LOGFILE/ logfile.dat: None /var/opt/OV/share/tmp/OpC_appl/Win2000/C/TEMPLATES/ TEMPLGROUP/templgroup.dat: None /var/opt/OV/share/tmp/OpC_appl/Win2000/ja_JP.SJIS/ Win2000.idx: None /var/opt/OV/share/tmp/OpC_appl/Win2000/ja_JP.SJIS/TEMPLATES/ LOGFILE/logfile.dat: None /var/opt/OV/share/tmp/OpC_appl/Win2000/ja_JP.SJIS/TEMPLATES/ TEMPLGROUP/templgroup.dat: None /var/opt/OV/share/tmp/OpC_appl/TS_MF/C/TS_MF.idx: None /var/opt/OV/share/tmp/OpC_appl/TS_MF/C/TEMPLATES/LOGFILE/ logfile.dat: None /var/opt/OV/share/tmp/OpC_appl/TS_MF/C/TEMPLATES/MONITOR/ monitor.dat: None /var/opt/OV/share/tmp/OpC_appl/TS_MF/C/TEMPLATES/TEMPLGROUP/ templgroup.dat: None /var/opt/OV/share/tmp/OpC_appl/TS_MF/C/APPLICATIONS/ applications.dat: None /var/opt/OV/share/tmp/OpC_appl/TS_MF/ja_JP.SJIS/TS_MF.idx: None /var/opt/OV/share/tmp/OpC_appl/TS_MF/ja_JP.SJIS/TEMPLATES/ LOGFILE/logfile.dat: None /var/opt/OV/share/tmp/OpC_appl/TS_MF/ja_JP.SJIS/TEMPLATES/ MONITOR/monitor.dat: None /var/opt/OV/share/tmp/OpC_appl/TS_MF/ja_JP.SJIS/TEMPLATES/ TEMPLGROUP/templgroup.dat: None /var/opt/OV/share/tmp/OpC_appl/TS_MF/ja_JP.SJIS/ APPLICATIONS/applications.dat: None cksum(1) Output: 2952861734 3839427 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.05.37/RPC_DCE_TCP/opc_pkg.Z 3162183940 113152 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.05.37/RPC_DCE_TCP/unzip.exe 1939298735 508 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.05.37/RPC_DCE_TCP/unzip.txt 4317250 1706 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.05.37/RPC_DCE_TCP/opc_inst.bat 1264246275 1716 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.05.37/RPC_DCE_TCP/opc_pre.bat 1099882146 133 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.05.37/RPC_DCE_TCP/opcsetup.inf 581702335 54746 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.05.37/RPC_DCE_TCP/monitor/ itoprocs.exe.Z 2091150204 151 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.05.37/RPC_DCE_TCP/monitor/ sms_chk.bat.Z 1293146252 173 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.05.37/RPC_DCE_TCP/monitor/ mf_chk.bat.Z 3616292193 160 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.05.37/RPC_DCE_TCP/monitor/ mf_service.bat.Z 1854232465 11063 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.05.37/RPC_DCE_TCP/monitor/ MFluse.exe.Z 1386195807 87491 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.05.37/RPC_DCE_TCP/cmds/ itodiag.exe.Z 2795232722 43839 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.05.37/RPC_DCE_TCP/cmds/ itokill.exe.Z 2864261726 41321 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.05.37/RPC_DCE_TCP/cmds/ itomserv.exe.Z 1586237090 188 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.05.37/RPC_DCE_TCP/cmds/ itoreg.cfg.Z 1508878470 59301 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.05.37/RPC_DCE_TCP/cmds/ itoreg.exe.Z 678110679 38559 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.05.37/RPC_DCE_TCP/cmds/ itosdown.exe.Z 473490275 43976 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.05.37/RPC_DCE_TCP/cmds/ itouser.exe.Z 2574307340 49320 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.05.37/RPC_DCE_TCP/cmds/ opcprfls.exe.Z 2003580432 38 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.05.37/RPC_DCE_TCP/cmds/ opcdf.bat.Z 849569434 41 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.05.37/RPC_DCE_TCP/cmds/ opcps.bat.Z 1588307382 751 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.05.37/RPC_DCE_TCP/actions/ mf_app.bat.Z 2947316710 6458 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/AgentPlatform 2485068413 104 /var/opt/OV/share/tmp/OpC_appl/Win2000/C/ Win2000.idx 2007600330 1998 /var/opt/OV/share/tmp/OpC_appl/Win2000/C/ TEMPLATES/LOGFILE/logfile.dat 1029602005 568 /var/opt/OV/share/tmp/OpC_appl/Win2000/C/ TEMPLATES/TEMPLGROUP/templgroup.dat 2682770904 100 /var/opt/OV/share/tmp/OpC_appl/Win2000/ ja_JP.SJIS/Win2000.idx 1090092847 1995 /var/opt/OV/share/tmp/OpC_appl/Win2000/ ja_JP.SJIS/TEMPLATES/LOGFILE/logfile.dat 1029602005 568 /var/opt/OV/share/tmp/OpC_appl/Win2000/ ja_JP.SJIS/TEMPLATES/TEMPLGROUP/templgroup.dat 937413291 175 /var/opt/OV/share/tmp/OpC_appl/TS_MF/C/ TS_MF.idx 2876017979 4230 /var/opt/OV/share/tmp/OpC_appl/TS_MF/C/ TEMPLATES/LOGFILE/logfile.dat 3051757784 3987 /var/opt/OV/share/tmp/OpC_appl/TS_MF/C/ TEMPLATES/MONITOR/monitor.dat 838892340 829 /var/opt/OV/share/tmp/OpC_appl/TS_MF/C/ TEMPLATES/TEMPLGROUP/templgroup.dat 2273364777 5204 /var/opt/OV/share/tmp/OpC_appl/TS_MF/C/ APPLICATIONS/applications.dat 3009823702 171 /var/opt/OV/share/tmp/OpC_appl/TS_MF/ ja_JP.SJIS/TS_MF.idx 2070958483 4228 /var/opt/OV/share/tmp/OpC_appl/TS_MF/ ja_JP.SJIS/TEMPLATES/LOGFILE/logfile.dat 3051757784 3987 /var/opt/OV/share/tmp/OpC_appl/TS_MF/ ja_JP.SJIS/TEMPLATES/MONITOR/monitor.dat 838892340 829 /var/opt/OV/share/tmp/OpC_appl/TS_MF/ ja_JP.SJIS/TEMPLATES/TEMPLGROUP/templgroup.dat 2273364777 5204 /var/opt/OV/share/tmp/OpC_appl/TS_MF/ ja_JP.SJIS/APPLICATIONS/applications.dat Patch Conflicts: None Patch Dependencies: None Hardware Dependencies: None Other Dependencies: None Supersedes: PHSS_20485 PHSS_21007 PHSS_22002 Equivalent Patches: PHSS_22576: s700: 11.00 s800: 11.00 ITOSOL_00059: sparcSOL: 2.6 2.7 Patch Package Size: 4460 KBytes Installation Instructions: Please review all instructions and the Hewlett-Packard SupportLine User Guide or your Hewlett-Packard support terms and conditions for precautions, scope of license, restrictions, and, limitation of liability and warranties, before installing this patch. ------------------------------------------------------------ 1. Back up your system before installing a patch. 2. Login as root. 3. Copy the patch to the /tmp directory. 4. Move to the /tmp directory and unshar the patch: cd /tmp sh PHSS_22575 5a. For a standalone system, run swinstall to install the patch: swinstall -x autoreboot=true -x match_target=true \ -s /tmp/PHSS_22575.depot By default swinstall will archive the original software in /var/adm/sw/patch/PHSS_22575. If you do not wish to retain a copy of the original software, you can create an empty file named /var/adm/sw/patch/PATCH_NOSAVE. WARNING: If this file exists when a patch is installed, the patch cannot be deinstalled. Please be careful when using this feature. It is recommended that you move the PHSS_22575.text file to /var/adm/sw/patch for future reference. To put this patch on a magnetic tape and install from the tape drive, use the command: dd if=/tmp/PHSS_22575.depot of=/dev/rmt/0m bs=2k Special Installation Instructions: BEFORE LOADING THIS PATCH... o You may use this patch with the following official ITO release: A.05.30 o DO NOT use this patch with older releases of ITO, for example versions A.05.00 or A.05.11. o This patch provides the HP OV IT/Operations Intelligent Agent to be used with a ITO A.05.30 Management Server system. (A) Patch Installation Instructions ------------------------------- (A1) Install the patch, following the standard installation instructions. ------------------------------------------------------ NOTE: For backing up the system before installing a patch, you may use opc_backup(1m). NOTE: MAKE SURE THAT NO AGENT OF THE PLATFORM ADDRESSED BY THIS PATCH IS DISTRIBUTED (either from the ITO Administrator's GUI or from command line using inst.sh) WHILE RUNNING SWINSTALL. NOTE: Don't be afraid of the '-x autoreboot=true' option above. There won't be a reboot due to this ITO patch. You can skip this option if you like. NOTE: This patch must be installed on the ITO Management Server system, NOT on an ITO Managed Node directly. Changes will take effect on managed nodes by means of ITO Software Distribution (using 'Force Update' if there is already an agent installed on the managed node). See chapter 2 of the ITO Administrator's Reference manual for more information. - The ITO agent can now run as non 'HP ITO account' user. This also includes the 'SYSTEM' account. Installation instruction: Use the manual installation. Before calling the 'opc_inst.bat' script, an additional entry can be added to the 'opcsetup.inf' file to specify the run user for the agent: [Agent User] SYSTEM Instead of 'SYSTEM', any other name could be specified. In this case the user account is created. If 'SYSTEM' is given, no user account is created (no 'opc_op' either). NOTE: User names may not contain space characters. If a user name is specified in 'opcsetup.inf', the agent will be installed using this account name, no matter if there was already an agent installed using another account. If a different user is specified in 'opcsetup.inf', the account created by the existing agent is not removed but left on the system. It has to be removed manually. If no user name is specified in 'opcsetup.inf', the installation will check if there is already an agent installed. If it finds one, the same user will be used. If a user is specified or found to be used by an old agent, and the password specified was not correct for this account, the user is removed and re-created. It has the same name afterwards but a different internal user ID. Applications: ------------- - All applications configured to run as 'opc_op' or 'HP ITO account' have to be changed to specify a user that exists on the system. - All monitoring executables will be run as the specified account. This might restrict some of the access rights to monitored applications. - The 'SYSTEM' account does not have any network access capabilities. Remote installation: -------------------- - On Domain Controllers there is the Installation Server service that executes the installation on remote systems in this domain. If this service is modified to run as 'SYSTEM', the remote installation is not possible at all (the 'SYSTEM' account does not have any access rights for remote systems). - If remote execution is wanted, the Installation Server service can be configured to run as a domain user that has Domain Admin user rights. - To install the default templates for MS Windows 2000, the following command has to be executed on the ITO management server after installation of this patch: opccfgupld -add -subentity Win2000 The templates can be uploaded to a Japanese management server, but they are not localized. - If you want to assign the monitor template 'dflt_disk_util_NT' of the 'Windows NT' group to a Windows 2000 system, execute the following command on the system. The system must then be rebooted to activate disk performance montoring of the operating system: diskperf -y - To install the default templates for MS Terminal Server / Citrix MetaFrame, the following command has to be executed on the ITO management server after installation of this patch: opccfgupld -add -subentity TS_MF The templates can be uploaded to a Japanese management server, but they are not localized. (B) Patch Deinstallation Instructions --------------------------------- (B1) To deinstall the patch PHSS_22575 run swremove: NOTE: MAKE SURE THAT NO AGENT OF THE PLATFORM ADDRESSED BY THIS PATCH IS DISTRIBUTED (either from the ITO Administrator's GUI or from command line using inst.sh) WHILE RUNNING SWREMOVE. # swremove PHSS_22575