Patch Name: PHSS_21009 Patch Description: s700_800 10.X OV ITO4.0X Windows NT Agt Patch A.04.19 Creation Date: 00/03/01 Post Date: 00/03/02 Hardware Platforms - OS Releases: s700: 10.01 10.10 10.20 s800: 10.01 10.10 10.20 Products: OpenView IT/Operations 4.0 Filesets: OVOPC-CLT.OVOPC-NT-CLT Automatic Reboot?: No Status: General Release Critical: No Path Name: /hp-ux_patches/s700_800/10.X/PHSS_21009 Symptoms: PHSS_21009: - the previous patch PHSS_20547 contained a fix for opctranm problems in MoM environments (where you have an mgrconf file installed) which caused authentication problems to action execution and the 'opcragt -primmgr' functionality. - memory leaks in opcacta when executing auto actions PHSS_20547: - When the NT Logfile Encapsulator aborts, the 'ITO agent stopped' message isn't written into the EventLog. At the next startup of the agent, duplicate EventLog entries are reported. - The Action Agent might abort when an application call was made with a wrong password. - Scheduled actions are sometimes executed twice at the same time. - The ITO Monitor agent sometimes aborts. - Using the itodiag.exe tool very often might cause the NT system to become unusable and require a reboot. - The ITO Event interceptor aborts when receiving a trap with a variable of the SNMPv2 type 'counter64'. - The ITO Action agent executed a switch user even if the requested user is the 'HP ITO account'. - The ITO Event interceptor might abort. - On systems that have the McAfee virusscanner installed, after reboot sometimes the agent has problems reading the opcinfo file and will fail. Later startups of the agent succeed. - The ITO Event interceptor aborts after receiving a trap with the ASN variable type 'null'. - The ITO Transfer Manager (opctranm) fails to transfer a request to an NT node that has a mgrconf file installed. PHSS_19503: - fixed various Problems with ITO Schedule templates/actions - if the time gets set backwards no monitors are executed until the inital time is reached again. - in automatic actions some multibyte strings were truncated. PHSS_17347: - In the ITO A.04.11 NT agent patch new functionality was introduced to send ICMP alive packages. When this new functionality was not configured to be used, ICMP packages were sent every second. - After installing Servicepack 4 for NT 4, the agent could not execute actions any more. This was because an NT API had changed. After installation of the new ITO agent to an NT system, a reboot is required before executing actions, schedules and applications. - On NT the DISPLAY variable was not set. This now holds the name of the operator's display to use a redirection mechanism. - Actions could not access network resources. Now applications from the application bank can be given a user with password and access network resources. The user must exist on the local NT system. - The message 'Not enough quota is available to process this command.' was sometimes written to the opcerror file when actions were executed. - Sometimes the action or monitor agent aborts while executing parallel actions. - Sometimes the action agent aborted when the OpenAgent functionality to transfer binary data was used. - Sometimes errors were produced when installing OpenAgent subagents. - When a duration is set in a monitor condition, the '-option' and '-object' parameters of opcmon didn't work for this condition. - Using the duration in monitor conditions changes the behaviour of the reset setting. - The Logfile Encapsulator aborts right after startup on NT 4 systems with ServicePack 3 and the hotfix lsa2fix. - The Logfile Encapsulator might abort during reconfiguration when templates were removed. - On some systems the Logfile Encapsulator aborts during shutdown and the message gets queued until the reboot. Then it gets sent to the server confusing the operator. - The trap interceptor was growing. - After installation of the NT agents, the directories had non-standard access rights. - Starting the agent after removing the queue files from the tmp directory caused problems in the action agent. The same happend after installation to a new system or after removal of the agent. - The setup program might abort. - In ITO 3 a message was sent to the server when the agent detected a namechange of the local system. This functionality was lost in ITO 4. - On multi homed hosts, the ITO agent used the wrong IP address when sending matched messages. - Setting 'OPC_TRACE_TRUNC FALSE' didn't work for suppressed messages. PHSS_16397: - The 'opcdcode.exe' tool requires full path of file to be decoded. - Return values of some NT instrumentation progs are wrong. - The 'itoreg.exe' command can't read NT 4.0 current config registry. - Monitor programs are not found if there is a variable in the path location. - The <$MSG_ID> variable is not set correctly in monitor conditions. - The NT agent was missing the 'Agents Sends Alive Packets' functionality. This is now supported on NT 4.0. - Scheduled actions are scheduled for the following month if weekday is specified. - The Monitor agent cannot handle multiple identical objects in perflib (corrupted NT registry). - Tracing of performance monitoring was not very useful. - The Monitor agent returns problem for '.cmd' batch files. - The 'itouser.exe /local' tool sometimes loops. - The Logfile encapsulator aborts during agent stop when no eventlogs are configured. - Every time the agent starts and the trap template is assigned, there is a message coming to the browser. - Usage of the opcmsg() API may cause the application to abort. - Message agent sometimes stays in the buffering state forever. - The logfile encapsulator might coredump when tracing is turned on and very long messages are generated. - The logfile encapsulator suddenly starts growing to the kernel limit and coredumps. PHSS_15970: - Installation of PHSS_14870 on NT 4.0 caused the control agent to abort immediately. PHSS_14870: - Lookup of Backup Domain Controllers during installation causes additional network traffic. - Setup program has problems with NetServerEnum API in some environments. - Installation on Domain Controllers causes problems with password policy. - Installation server installation to multi homed host does not send the IP address. - Standalone system tries to find its Domain Controller. - Agent must be restarted to enable security settings. - Monitor agent cannot monitor NTPerfMon\System\System Up Time. - Scheduled actions are not executed at 00:xx in April. - Opcle aborts for SAP event 23334. - Opcle sets exec path with wrong path delimiters. - At system boot, agent reports some error messages about EventLog and opcle aborts when agent is started before the EventLog service. - Suppression of identical messages does not work for failed logins. - Truncated Messages are handled by the Logfile Encapsulator before the line is finished. - Logfile encapsulator aborts when eventlog refers to nonexistent variable. PHSS_14131: - Multiple message (opcmsg) templates get intermixed condition processing. This happens when an agent has multiple opcmsg templates assigned. In this case the contents of matched messages can resemble messages that should actually get supressed. Other symptoms of this bug can be a core dumping message interceptor (opcmsgi) or message agent (opcmsga). - The installation aborts saying that it cannot get domain information - before it says that the machine is member of the 'WORKGROUP' domain and gives a primary domain controller's name - in fact the machine is standalone in the 'WORKGROUP' workgroup. - HP ITO account had all the NT user rights. This version of the NT agent restricts the user rights to the minimum needed for the agent to be fully functional. - The opcmsg command can not be used by the opc_op user on NT. The command will output errors about not being able to open the trace files and error logfiles. - Installation fails when a space is given as password. - When a matching message from the NT event log is mapped to an ITO browser message, the time stamp of the ITO browser has the current system time when the message was created by the ITO agent on the managed node and not the time stamp when the NT eventlog message was actually created. This may confuse when the agent has not been running for some hours. - ITO NT agent floods NT system eventlog with Message ID 6: "The NT Eventlog SYSTEM was changed (cleared) and the current position is no longer reacheable...". This problem occurs if the system is permanently under heavy load, many logfile messages are produced by the system and the logfile is configured to "Overwrite as needed". - NT Logfile Encapsulator aborts directly after startup. This happens when EventLogs and ASCII logfiles are assigned. - Trace and error files on NT are not readable by everybody. PHSS_13398: - Local event interception on NT was formerly not supported: This version of the ITO NT agent introduces an event interceptor that adds the ability to intercept events (e.g. traps) locally on the NT system and generate corresponding ITO messages. - Memory leaks in agent processes. - De-installation of NT agent on a PDC removes HP ITO agent account. This causes problems when the ITO agent is removed on the PDC while there are still ITO agents installed on BDCs in this domain. After the HP ITO domain account on the PDC is removed, the other BDC agents are unstartable. - If the NT agent is installed on a BDC using an installation server, the setup routine aborts with the error messages: "OpenSCManager() Access denied", "NetUserChangePassword Access denied" - The logfile encapsulator aborts when events from the SAP server are generated (i.e. for any event containing more than 32 insertion strings) PHSS_12684: - The installation program aborts because it cannot lookup the domain admins group name. - If respmgr file contains the short hostname of the managment server or the OPC_RESOLVE_IP switch is enabled in the opcinfo file, a send_data from the management server fails. This will for example cause a failure of opctranm and thus result in a failure when trying a subagent installation. - Monitor agent may abort for customers monitoring own NT perfmon objects. Defect Description: PHSS_21009: check the list of the symptoms PHSS_20547: check the list of the symptoms PHSS_19503: check the list of the symptoms PHSS_17347: check the list of the symptoms PHSS_16397: check the list of the symptoms PHSS_15970: check the list of the symptoms PHSS_14870: check the list of the symptoms PHSS_14131: check the list of the symptoms PHSS_13398: check the list of the symptoms PHSS_12684: check the list of the symptoms SR: R555004826 B555000231 B555000254 B555000256 B555000302 B555000303 B555001661 R555005015 8606128487 R555001942 B555001830 Patch Files: /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.19/RPC_DCE_TCP/monitor/sms_chk.bat.Z /opt/OV/bin/OpC/utils/nthost.exe /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.19/RPC_DCE_TCP/opc_pkg.Z /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.19/RPC_DCE_TCP/unzip.exe /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.19/RPC_DCE_TCP/unzip.txt /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.19/RPC_DCE_TCP/opc_inst.bat /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.19/RPC_DCE_TCP/opc_pre.bat /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.19/RPC_DCE_TCP/opcsetup.inf /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.19/RPC_DCE_TCP/monitor/itoprocs.exe.Z /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.19/RPC_DCE_TCP/cmds/itodiag.exe.Z /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.19/RPC_DCE_TCP/cmds/itokill.exe.Z /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.19/RPC_DCE_TCP/cmds/itomserv.exe.Z /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.19/RPC_DCE_TCP/cmds/itoreg.cfg.Z /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.19/RPC_DCE_TCP/cmds/itoreg.exe.Z /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.19/RPC_DCE_TCP/cmds/itosdown.exe.Z /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.19/RPC_DCE_TCP/cmds/itouser.exe.Z /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.19/RPC_DCE_TCP/cmds/opcprfls.exe.Z /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.19/RPC_DCE_TCP/cmds/opcdf.bat.Z /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.19/RPC_DCE_TCP/cmds/opcps.bat.Z /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ AgentPlatform what(1) Output: /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.19/RPC_DCE_TCP/monitor/sms_chk.bat.Z: None /opt/OV/bin/OpC/utils/nthost.exe: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.19/RPC_DCE_TCP/opc_pkg.Z: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.19/RPC_DCE_TCP/unzip.exe: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.19/RPC_DCE_TCP/unzip.txt: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.19/RPC_DCE_TCP/opc_inst.bat: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.19/RPC_DCE_TCP/opc_pre.bat: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.19/RPC_DCE_TCP/opcsetup.inf: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.19/RPC_DCE_TCP/monitor/itoprocs.exe.Z: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.19/RPC_DCE_TCP/cmds/itodiag.exe.Z: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.19/RPC_DCE_TCP/cmds/itokill.exe.Z: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.19/RPC_DCE_TCP/cmds/itomserv.exe.Z: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.19/RPC_DCE_TCP/cmds/itoreg.cfg.Z: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.19/RPC_DCE_TCP/cmds/itoreg.exe.Z: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.19/RPC_DCE_TCP/cmds/itosdown.exe.Z: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.19/RPC_DCE_TCP/cmds/itouser.exe.Z: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.19/RPC_DCE_TCP/cmds/opcprfls.exe.Z: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.19/RPC_DCE_TCP/cmds/opcdf.bat.Z: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ A.04.19/RPC_DCE_TCP/cmds/opcps.bat.Z: None /var/opt/OV/share/databases/OpC/mgd_node/vendor/ms/intel/nt/ AgentPlatform: None cksum(1) Output: 2091150204 151 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.04.19/RPC_DCE_TCP/monitor/ sms_chk.bat.Z 1063038874 55588 /opt/OV/bin/OpC/utils/nthost.exe 1454033555 3204643 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.04.19/RPC_DCE_TCP/opc_pkg.Z 3162183940 113152 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.04.19/RPC_DCE_TCP/unzip.exe 1939298735 508 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.04.19/RPC_DCE_TCP/unzip.txt 1875006408 1233 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.04.19/RPC_DCE_TCP/opc_inst.bat 1679475308 1131 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.04.19/RPC_DCE_TCP/opc_pre.bat 1462693316 133 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.04.19/RPC_DCE_TCP/opcsetup.inf 1213371464 54022 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.04.19/RPC_DCE_TCP/monitor/ itoprocs.exe.Z 3837896761 84595 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.04.19/RPC_DCE_TCP/cmds/ itodiag.exe.Z 3762102901 43292 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.04.19/RPC_DCE_TCP/cmds/ itokill.exe.Z 453745520 41268 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.04.19/RPC_DCE_TCP/cmds/ itomserv.exe.Z 1586237090 188 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.04.19/RPC_DCE_TCP/cmds/ itoreg.cfg.Z 2172812355 58687 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.04.19/RPC_DCE_TCP/cmds/ itoreg.exe.Z 758564002 38518 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.04.19/RPC_DCE_TCP/cmds/ itosdown.exe.Z 614743384 44784 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.04.19/RPC_DCE_TCP/cmds/ itouser.exe.Z 504145233 48459 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.04.19/RPC_DCE_TCP/cmds/ opcprfls.exe.Z 2003580432 38 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.04.19/RPC_DCE_TCP/cmds/ opcdf.bat.Z 849569434 41 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/A.04.19/RPC_DCE_TCP/cmds/ opcps.bat.Z 1150551752 4911 /var/opt/OV/share/databases/OpC/mgd_node/ vendor/ms/intel/nt/AgentPlatform Patch Conflicts: PHSS_20548 Patch Dependencies: None Hardware Dependencies: None Other Dependencies: None Supersedes: PHSS_12684 PHSS_13398 PHSS_14131 PHSS_14870 PHSS_15970 PHSS_16397 PHSS_17347 PHSS_19503 PHSS_20547 Equivalent Patches: None Patch Package Size: 3810 KBytes Installation Instructions: Please review all instructions and the Hewlett-Packard SupportLine User Guide or your Hewlett-Packard support terms and conditions for precautions, scope of license, restrictions, and, limitation of liability and warranties, before installing this patch. ------------------------------------------------------------ 1. Back up your system before installing a patch. 2. Login as root. 3. Copy the patch to the /tmp directory. 4. Move to the /tmp directory and unshar the patch: cd /tmp sh PHSS_21009 5a. For a standalone system, run swinstall to install the patch: swinstall -x autoreboot=true -x match_target=true \ -s /tmp/PHSS_21009.depot By default swinstall will archive the original software in /var/adm/sw/patch/PHSS_21009. If you do not wish to retain a copy of the original software, you can create an empty file named /var/adm/sw/patch/PATCH_NOSAVE. WARNING: If this file exists when a patch is installed, the patch cannot be deinstalled. Please be careful when using this feature. It is recommended that you move the PHSS_21009.text file to /var/adm/sw/patch for future reference. To put this patch on a magnetic tape and install from the tape drive, use the command: dd if=/tmp/PHSS_21009.depot of=/dev/rmt/0m bs=2k Special Installation Instructions: BEFORE LOADING THIS PATCH... o You may use this patch with the following official ITO releases: A.04.0x o DO NOT use this patch with older releases of ITO like A.03.X. or with newer releases like A.05.X o This patch provides the HP OV IT/Operations Intelligent Agent to be used with an ITO 4.X Management Server system. (A) Patch Installation Instructions ------------------------------- (A1) Install the patch, following the standard installation instructions. Please review all instructions and the Hewlett-Packard SupportLine User Guide or your Hewlett-Packard support terms and conditions for precautions, scope of license restrictions and limitation of liability and warranties, before installing this patch. ------------------------------------------------------ 1. Back up your system before installing a patch. (you may use opc_backup) 2. Login as root. 3. Copy the patch to your /tmp directory and unshar it: # cd /tmp # sh PHSS_21009 4. For a standalone system, run swinstall to install the patch: NOTE: MAKE SURE THAT NO AGENT OF THE PLATFORM ADDRESSED BY THIS PATCH IS DISTRIBUTED (either from the ITO Administrator's GUI or from command line using inst.sh) WHILE RUNNING SWINSTALL. # swinstall -x match_target=true \ -s /tmp/PHSS_21009.depot It is recommended that you move the PHSS_21009.text file to /var/adm/sw/patch for future reference. To put this patch on a magnetic tape and install from the tape drive, use the command: # dd if=/tmp/PHSS_21009.depot of=/dev/rmt/0m bs=2k (A2) To update the ITO database with the change for local trap interception (introduced in phss_13398), you need to execute the command: # /opt/OV/bin/OpC/opcagtdbcfg -p ms/intel/nt -d -f (A3) After installation of PHSS_21009 a reboot of the NT system is required before actions, schedules and applications can be executed. NOTE: This patch must be installed on the ITO Management Server system, NOT on an ITO Managed Node directly. Changes will take effect on managed nodes by means of ITO Software Distribution (using 'Force Update' if there is already an agent installed on the managed node). See chapter 2 of the ITO Administrator's Reference manual for more information. (B) Patch Deinstallation Instructions --------------------------------- (B1) To deinstall the patch PHSS_21009 run swremove: NOTE: MAKE SURE THAT NO AGENT OF THE PLATFORM ADDRESSED BY THIS PATCH IS DISTRIBUTED (either from the ITO Administrator's GUI or from command line using inst.sh) WHILE RUNNING SWREMOVE. # swremove PHSS_21009