OS/2 Shareware BBS: 29 Fixes

home *** CD-ROM | disk | FTP | other *** search

/ OS/2 Shareware BBS: 29 Fixes_o / 29-Fixes_o.zip / ub10971.zip / UB10971A.AVL < prev next >

Wrap

Text File | 1994-10-12 | 35KB | 1,009 lines

UB10971 - README _________________ This readme file contains some hints for problems found during our testing and updated information that did not make our printed publications. It is divided into the following topics: o Configuring the APPC Communications More Easily o Deinstalling DCAF Version 1.0 Automatically o Deinstalling DCAF 1.1 Automatically o Enhancements for DCAF Security o Installing the CSD Fixes on a DOS Target o Installing DCAF CSD with Corrective Service Facility o Installing DCAF Components Directly and Using the Packager on the Same Workstation o Personalization for Secure Gateways o Personalization Utilities o Listing Fixes Included in this CSD CONFIGURING THE APPC COMMUNICATIONS MORE EASILY You do not have to define the CNOS entry in the .NDF configuration file for the Communications Manager. Therefore, the paragraph "Updating the CNOS Definitions Profile" on page 108 of the DCAF Installing and Using manual (S68G-6824) is superfluous. DEINSTALLING THE DCAF VERSION 1.0 AUTOMATICALLY o When you use the DCAF Packager to upgrade from DCAF Version 1.0 to DCAF 1.1 remotely, you must first deinstall DCAF Version 1.0 from the workstation. To optimize this process, this CSD enables you to deinstall DCAF 1.0 automatically with two OS/2 executable files, EQNDST10.EXE and EQNINDST.EXE. Note: This program does NOT deinstall the DCAF Version 1.1. To start deinstallation, do the following: 1. Copy the two OS/2 executable files, EQNDST10.EXE and EQNINDST.EXE, onto the workstation where you want to deinstall DCAF. 2. At the command prompt or in a command file (.cmd), type: EQNDST10.EXE. Note: If you have the DCAF 1.03 French version installed, type: EQNDST10.EXE /F 3. When the program stops running, restart the workstation. 4. To erase all trace of DCAF, delete the EQNINDST.EXE file from the boot drive of the workstation and restart the workstation again. EQNDST10.EXE detects DCAF Version 1.0, deletes the DCAF group, updates the CONFIG.SYS file and deletes all the DCAF files except the ones in use. It also installs EQNINDST.EXE on the workstation. EQNINDST.EXE, which runs automatically when the workstation is restarted, deletes the remaining DCAF files. DEINSTALLING DCAF 1.1 AUTOMATICALLY o The DCAF 1.1 deinstallation component has been improved so that it can be run remotely without requiring any user intervention. The new deinstallation procedure must be started with parameter /n to run without prompting the user for confirmation. If no parameter is specified, the deinstallation requires user intervention to proceed. ENHANCEMENTS FOR DCAF SECURITY o Some utilities are provided for the security components: 1. Key-encrypting Key Update Utility --------------------------------- This utility allows to update one or more Authenticators' Key-encrypting keys at the Administrator and the Authenticators workstations from the command line. The utility consists of two modules: one is run on the Administrator workstation, the another on the Authenticator workstation. Administrator module: EQNUTAD1.EXE This utility takes as parameters the name of a text file which maps authenticator names to new KEKs specified as 32 hexadecimal characters (default eqnutad1.txt) , the column position of an authenticator name in each line of the file (1-9999, default 1), the size of the authenticator name (1-9999, default 12), and the column position of a new KEK in each line of the file (1-9999, default 13). The length of the new KEK must be 32 characters. If a longer key is specified in the file, only the first 32 chars are taken into account, the others being ignored. If the keys specified are shorter than 32 chars, an error will be displayed. The utility reads the information in the file, searches for the authenticator name in the administrators authenticator's database, and if found updates the KEK for the authenticator to the specified new KEK. Authenticator workstation (for workstations with an IBM 4755 cryptographic card): When executed at the authenticator, this part of the utility indicates to the authenticator that the KEK has been changed and that it can be found in the 4755 crypto card key label DCAFKEK.NEW. This needs to be executed at the authenticator's workstation AFTER the KEK has been stored in the DCAFKEK.NEW label by the customer through whatever means he chooses. 2. Change Retry Limit for Password ------------------------------- This utility EQNUTAU2.EXE updates the retry limit on a security Authenticator from the command line. The retry limit is the maximum number of attempts to be authenticated with an invalid pass phrase before the UserID is revoked. The utility takes the new retry limit as a parameter, the valid range is 1-255. No default is provided. INSTALLING DCAF CSD WITH CORRECTIVE SERVICE FACILITY The Corrective Service Facility can be installed one of two ways. For the customer who wants to install the CSD using the standard defaults, a default response file has been created allowing the customer to boot diskette one and install the CSD. For the customer who wants to change the default set of products or the default set of directories, insert CSD diskette one in the A: drive and type A:\SERVICE from an OS/2 command prompt. The main window contains a list of products that are found on the system which are eligible for service. Select those products you want to be serviced by highlighting the appropriate entries in the Products list. All eligible products are initially selected. NOTE: Prior to service the DCAF, the user MUST close the existing processes of it in order to avoid that some files will remain locked by them(i.e. LAN Directory, etc.). To view the currect level(s) of the products on your system, select CURRENT from the LEVELS menu. To view the new level(s) of the products on the corrective service diskettes, select NEW from the LEVELS menu. The service utility updates files in a set of directories associated with each selected product. To view and/or change the set of directories, choose SELECT DIRECTORIES from the OPTIONS menu. Once all selections have been made, select SERVICE to start the service process. You WILL NOT be able to terminate the service process after it is started. After Service process terminate, reboot the workstation. A service log is provided for installation verification: <BOOTDRIVE>:\OS2\INSTALL\SERVICE.LOG where <BOOTDRIVE> is the partition from which you IPLed Subsequent installs will be appended to the service log. LIMITATIONS: IBM model 9557, 9556 and Thinkpad are serviceable only via command line with the command A:\SERVICE INSTALLING THE CORRECTIVE SERVICE DISKETTE FIXES ON A DOS TARGET o The CSD diskettes update all DCAF modules installed on any OS/2 workstation automatically. To update a DOS workstation, do the following: 1. Run the CSD on the OS/2 workstation where the DCAF packager component is installed. 2. Make a package for a DOS Target. 3. Install the package on a DOS workstation. INSTALLING DCAF COMPONENTS DIRECTLY AND USING THE PACKAGER ON THE SAME WORKSTATION o When you install DCAF directly and, subsequently, install DCAF components using the packager on the same workstation, any original DCAF personalization options can be substituted by the personalization options in the DCAF package. This problem most likely occurs when you install a security authenticator directly and, subsequently, other components using the packager on the same workstation. To avoid this problem, install the components in the following order: 1. Create a DCAF package with all the desired components. 2. Unpack the package on the workstation. 3. Restart the workstation. 4. Install the Authenticator component from the DCAF diskettes. 5. Restart the workstation. 6. Apply the DCAF CSD to the workstation. PERSONALIZATION FOR SECURE GATEWAYS o The Authenticator name in the personalization for a secure Gateway is now case insensitive, while the DCAF Installing and Using manual (S68G-6824) says it is case sensitive. PERSONALIZATION UTILITIES o The new DCAF contains some utilities to update some personalization parameters from the command line. The utilities are the following: 1. Utility for updating the Authenticator name ------------------------------------------- This utility EQNRPLAN.EXE updates the Authenticator name for the following DCAF components: - Secure Gateway - Authenticator Since the Authenticator name cannot be longer than 12 chars, if a longer name is specified, it is truncated to 12 chars. The string is case sensitive. Invoke this program from the directory where the DCAF is installed. When complete, remember to restart the workstation. Example: ======== to change the Authenticator name to AUTHNEW, type: <drive>:\<directory>\EQNRPLAN AUTHNEW 2. Utility for updating the LAN Directory name ------------------------------------------- This utility EQNRPLLD.EXE updates the LAN Directory name for the following components: - Gateway - Target for OS2 - LAN Directory Since the LAN Directory name cannot be longer than 12 chars, if a longer string is passed to the program, it is truncated to 12 chars. The string is case sensitive. Invoke this utility from the directory where the DCAF is installed. When complete, remember to restart the workstation. Example: ======== to change the LAN Directory name to LANNEW, type: <drive>:\<directory>\EQNRPLLD LANNEW 3. Utility for updating the Authenticator Adapter Addresses on a secure OS2 target workstation -------------------------------------------------------- This utility EQNRPLAA.EXE updates the Authenticator UAA for a secure OS2 Target workstation. This program updates two parameters, the primary and secondary UAA on the secure Target. The first parameter is required, the second is optional; if you specify only the first parameter, then the program assumes that the second parameter matches the first. If you include more than two parameters, the program takes only the first two. Parameters must be exactly 12 hexadecimal characters long. if you enter a longer string, the program truncates it to the 12th character. The string(s) must be valid UAA(s). In order to be able to run this utility successfully, you must type "***" for both the primary and secondary authenticator UAA when installing the Target or when creating the package for it. Notes: ====== - Make sure that the Target component is not running when you run the utility - Invoke the utility from the directory where the DCAF is installed - This utility can be successfully run on the same target only once. Example: ======== to change the Authenticator UAA to: Primary AA: 10005AAE9167 Secondary AA: 10005AAE4355 type: <drive>:\<directory>\EQNRPLAA 10005AAE9167 10005AAE4355 LISTING OF FIXES INCLUDED IN THIS CSD (UB10971) o This CSD contains fixes for the following APARs: #IC05591 EXTERNAL SYMPTOM: Incorrect Processing. COMPONENT: EQNCM01.DLL PROBLEM SUMMARY: EQN0156 Error: APPC Command 100, Primary Return Code 0003, Secondary Return Code 00000004, intermittently occur when you start a DCAF session for the first time even after the CNOS Definition Profile is added to the .NDF file. #IC05616 EXTERNAL SYMPTOM: Abnormal End. COMPONENT: EQNGWDD.EXE PROBLEM SUMMARY: When using the Gateway "List NetBIOS names on the Target" function a TRAP D or SYS3175 error occurs on the Gateway workstation for the DCAF Gateway Device Driver EQNGWDD.EXE. This problem occurs only if the Gateway workstation has NetBIOS Version 3 (contained in OS/2 1.3 EE Communications Manager) installed and the Target workstation has NetBIOS Version 4 (contained in ES/2 Communications Manager or in NTS/2) installed. #IC05628 EXTERNAL SYMPTOM: Incorrect Processing. COMPONENT: EQNTGMAI.DLL PROBLEM SUMMARY: EQN0205 error message occurs when you reinstall DCAF over an existing installation. #IC05632 EXTERNAL SYMPTOM: Abnormal End. COMPONENT: EQNINGWU.DLL PROBLEM SUMMARY: When you use the DCAF Gateway Personalization to change the number of sessions, an access violation error occurs in the EQNINCON.DLL module. #IC05642 EXTERNAL SYMPTOM: Abnormal End. COMPONENT: EQNSERV.EXE, EQNSVGRE.DLL PROBLEM SUMMARY: SYS3175 access violation error may occur on the DCAF Controlling workstation under the following conditions: - If you first start a DCAF session with a DOS target, terminate the session, and start a new session with an OS/2 target, an access violation error occurs in EQNSVGRE.DLL. - If you start a DCAF session with an OS/2 target showing an OS/2 full screen in foreground, then terminate and start the session again with the same machine and send a remote Ctrl+Esc to switch to Presentation Manager, you get an access violation error in EQNCD.DLL. #IC05692 EXTERNAL SYMPTOM: Abnormal End. COMPONENT: EQNTGMAI.DLL, EQTGUI.EXE PROBLEM SUMMARY: Hang on a DCAF Target during a DCAF "ACTIVE" session when the termination is invoked from the DCAF Controlling while screen is being refreshed. #IC05787 EXTERNAL SYMPTOM: Abnormal End. COMPONENT: EQNSVGRE.DLL PROBLEM SUMMARY: Hang on the DCAF controlling workstation may occur under intensive use of the mouse on a slow connection. #IC05940 EXTERNAL SYMPTOM: Incorrect Output. COMPONENT: EQNRCSH.EXE PROBLEM SUMMARY: Full-screen sessions are displayed incorrectly on the controlling workstation when the target workstation has a monochrome display. This problem occurs only if the DCAF target workstation has a monochrome display and only if the video mode on the target is set to BW80. #IC05804 EXTERNAL SYMPTOM: Incorrect Output. COMPONENT: EQNSERV.EXE, EQNSVGRE.DLL PROBLEM SUMMARY: Shift+Esc and Alt+F11 hot keys do not work from DCAF controlling to DCAF target workstations. #IC05848 EXTERNAL SYMPTOM: Incorrect Output. COMPONENT: EQNSERV.EXE, EQNSVGRE.DLL PROBLEM SUMMARY: The controlling workstation hangs, or displays target desktop incorrectly, when passing from a VGA to an XGA target or vice versa. #IC05856 EXTERNAL SYMPTOM: Abnormal End. COMPONENT: EQNINST.EXE, EQNINSLD.EXE PROBLEM SUMMARY: If you install a DCAF package on a workstation where NDM/2 is running, the following error occurs: "DCAFDEF.CMD A program caused an integer divide by zero exception." #IC05870 EXTERNAL SYMPTOM: Abnormal End. COMPONENT: EQNGWTS.DLL PROBLEM SUMMARY: The problem occurs when a DCAF session is active from a DCAF controller through a DCAF asynchronous gateway to a DOS target workstation. If the DOS target is remotely restarted from the DCAF controller, the asynchronous gateway hangs. A similar problem on the asynchronous DCAF gateway can also occur when you terminate a DCAF session on a NetBIOS target workstation. #IC05950 EXTERNAL SYMPTOM: Abnormal End. COMPONENT: EQNSCATH.DLL PROBLEM SUMMARY: SYS3175 error message for the EQNSCATH.DLL module occurs when assigning secure targets to an Authenticator using the "Nickname listfile" option. #IC05986 EXTERNAL SYMPTOM: Incorrect Output. COMPONENT: EQNDD.EXE PROBLEM SUMMARY: If you install the DCAF DOS target code on a LAN server, redirect the DOS target to a shared drive to access the DCAF target code, and start the DCAF target code, the following problem occurs: DCAF DOS attempts to write the error log to the A drive. If a diskette is placed in the A drive, the DCAF target starts correctly, and writes the error log to the A drive on the local machine. #IC05999 EXTERNAL SYMPTOM: Abnormal End. COMPONENT: EQNCM01.DLL PROBLEM SUMMARY: The second time you attempt to start a DCAF direct APPC session from a controlling DCAF Version 1.1 to a target DCAF Version 1.03, the following error occurs: "EQN0516E: An APPC error occurred. APPC command text=100. APPC return codes text= 0003 00000004." #IC06035 EXTERNAL SYMPTOM: Abnormal End. COMPONENT: EQNPR00.DLL PROBLEM SUMMARY: The DCAF packager does not add a section in the DCAF.INI file properly, thus causing a trap in the EQNGWAUD module. #IC05990 EXTERNAL SYMPTOM: Incorrect Output. COMPONENT: EQNTGUI.EXE, EQNTGAUT.EXE PROBLEM SUMMARY: This is an enhancement to the way the DCAF target window is displayed when the EQNTGAUT is called. You can now start the DCAF target window minimized by specifying /m as second parameter for the EQNTGAUT.EXE command. #IC06082 EXTERNAL SYMPTOM: Incorrect Output. COMPONENT: EQNINCON.DLL PROBLEM SUMMARY: The DCAF Version 1.1 installation procedure does not recognize the IFS= statement if the file following the = is not HPFS.IFS. If you specify a different file, the DCAF installation copies the target driver statements into the wrong place (before the IFS statement). IMPORTANT: Replace the EQNINCON.DLL module on the DCAF installation diskette. #IC06090 EXTERNAL SYMPTOM: Abnormal End. COMPONENT: EQNSERV.EXE, EQNSVGRE.DLL, EQNRCUT.DLL, EQNTGMAI.DLL PROBLEM SUMMARY: From a DCAF Controlling start a DCAF session with an OS2 DCAF Target and terminate it. Repeat this operation up to 10 times. On controlling and target an error message (cannot open log file) appears and the target hangs. #IC06103 EXTERNAL SYMPTOM: Incorrect Output. COMPONENT: EQNDD.EXE PROBLEM SUMMARY: During a DCAF session if an Alt+Esc or Ctrl+Esc keystroke is issued remotely from the controlling workstation, the keystroke is not effective on the DOS target. #IC06123 EXTERNAL SYMPTOM: Incorrect Output. COMPONENT: EQNMSG.DLL PROBLEM SUMMARY: The display time parameter for DCAF messages, selected during the initialization, was ineffective for the controlling and Target workstations in the OS/2 2.1 environment. #IC06150 EXTERNAL SYMPTOM: Incorrect Output. COMPONENT: EQNINGRP.DLL PROBLEM SUMMARY: When you install the packager, the EQNPMGRE.DLL that is copied onto the workstation is always the one for 16 bits. The installation does not check which level of the operating system is installed on the workstation IMPORTANT: To make the fix effective, replace the EQNINGRP.DLL module on the DCAF installation diskette. #IC06162 EXTERNAL SYMPTOM: Abnormal End. COMPONENT: EQNINST.EXE, EQNINSSV.EXE PROBLEM SUMMARY: SYS3184 (divide by zero) error occurs on the DCAF packager component, running on an OS/2 workstation with NDM/2 on. The trapping module is EQNINSSV.EXE. #IC06282 EXTERNAL SYMPTOM: Incorrect Output. COMPONENT: EQNMAIN.EXE PROBLEM SUMMARY: If you select a secure gateway link record on your controlling workstation and push the Cancel button on the Logon panel that is displayed you get an error message. #IC06353 EXTERNAL SYMPTOM: Incorrect Output. COMPONENT: EQNSERV.EXE, EQNDISP.DLL PROBLEM SUMMARY: From a DCAF Administrator transfer the security files to the remote Authenticators. If these data include an incorrect address for the corresponding target, the following data transfer causes the 673 (rc=7) error message to come up on the Controlling/Administrator workstation, then the file trasfer hangs. #IC06363 EXTERNAL SYMPTOM: Abnormal End. COMPONENT: EQNGWDIR.EXE PROBLEM SUMMARY: The DCAF Lan Directory component traps while reading a nickname file. The same DCAF component causes a random SYS2175 trap on OS/2 2.1 workstations. #IC06388 EXTERNAL SYMPTOM: Incorrect Output. COMPONENT: EQNTGUI.EXE PROBLEM SUMMARY: This is an enhancement to the way the DCAF ACDI target acts when the Async. link drops. Now the target goes back to the OPEN state, instead of closing the communication. #IC06426 EXTERNAL SYMPTOM: Incorrect Output. COMPONENT: EQNDD.EXE PROBLEM SUMMARY: Force a remote reboot of a DOS target workstation from the DCAF controlling component ("Restart target wks" option): sometimes the DOS target does not return available in the list of the available targets. IMPORTANT: If the DOS target was installed with the secure option, the EQNDD.EXE file must be replaced on #IC06521 EXTERNAL SYMPTOM: Incorrect Output. COMPONENT: EQNSERV.EXE PROBLEM SUMMARY: By an application using the DCAF APIs, establish a DCAF session, then start a file transfer from the "File transfer" option of the command line. The file transfer completes OK, but no message comes up, and the buttons don't get reactivated. #IC06583 EXTERNAL SYMPTOM: Abnormal end. COMPONENT: EQNSF00.DLL, EQNSFPAR.EXE PROBLEM SUMMARY: "280" Error message logged in the EQNCOMM.LOG file if the link record file includes more than 1000 link record items. #IC06637 EXTERNAL SYMPTOM: Incorrect Output. COMPONENT: EQNINST.EXE, EQNINCPY.DLL PROBLEM SUMMARY: On a workstation having the DCAF target and the packager installed, start both the components and then try packaging a OS/2 target package: about at the end of the packaging process, the error message: "EQN0156: Internal processing error. Call: DosOpen, rc:32" pops up. The package gets created OK, but there might be impacts on the security environment. #IC06696 EXTERNAL SYMPTOM: Incorrect Output. COMPONENT: EQNRCKB.EXE PROBLEM SUMMARY: Interference problems between DCAF and DEC PathWorks. #IC06808 EXTERNAL SYMPTOM: Incorrect Output. COMPONENT: EQNTGUI.EXE PROBLEM SUMMARY: When you use a tool to change the attributes of the DCAF target entry in the task list, the changes disappear when a DCAF session starts. #IC06823 EXTERNAL SYMPTOM: Incorrect Output. COMPONENT: EQNTGUI.EXE PROBLEM SUMMARY: If you maximize, then minimize the DCAF window on the controlling workstation during an active session, you can not restore it again from the task list. #IC06867 EXTERNAL SYMPTOM: Incorrect Output. COMPONENT: EQNMAIN.EXE PROBLEM SUMMARY: If you close the DCAF controlling component without terminating the DCAF session, the DCAF controlling icon in the DCAF folder appears as if the component were still running. #IC06900 EXTERNAL SYMPTOM: Incorrect Output. COMPONENT: EQNGWDIR.EXE PROBLEM SUMMARY: The EQNGWDIR.DAT file on the LAN Directory component loses target nickname information. #IC06958 EXTERNAL SYMPTOM: Incorrect Output. COMPONENT: EQNDD.EXE PROBLEM SUMMARY: If you transfer a file from a DOS target to your controlling workstation during a DCAF session, the file on the target remains open. #IC07043 EXTERNAL SYMPTOM: Abnormal end. COMPONENT: EQNTGMAI.DLL PROBLEM SUMMARY: The DCAF target file remains in use after you close the target, if it is secure and an attempt to start a DCAF session with that target has been made through an illegal authenticator. #IC07052 EXTERNAL SYMPTOM: Incorrect Output. COMPONENT: EQNTGMAI.DLL PROBLEM SUMMARY: A file transfer from controlling to OS/2 target fails with error message "EQN0617E: Insufficient disk space on the target workstation. Correct it and retry." when there is enough space on the specified destination drive but not enough on the C: drive. #IC07054 EXTERNAL SYMPTOM: Abnormal end. COMPONENT: EQNCD.DLL PROBLEM SUMMARY: During a DCAF session, a SYS3175 error occurs on the Controlling workstation during a refresh of the target screen. #IC07369 EXTERNAL SYMPTOM: Incorrect Output. COMPONENT: EQNCM00.DLL PROBLEM SUMMARY: During an ACDI session, you receive the message "Invalid Device Handle". #IC07391 EXTERNAL SYMPTOM: Abnormal End. COMPONENT: EQNINNEW.EXE PROBLEM SUMMARY: The workstation ends abnormally at boot time after you install any level of DCAF 1.2. #IC07397 EXTERNAL SYMPTOM: Incorrect Output. COMPONENT: EQNSCADM.EXE PROBLEM SUMMARY: The DCAF Administrator does not update the expiration date when controlling users change their pass phrases. #IC07430 EXTERNAL SYMPTOM: Incorrect Output. COMPONENT: EQNPROO.DLL PROBLEM SUMMARY: In the access levels table of a non-secure OS/2 target, selections for the options "Controlling user sends file" and "Controlling user receives files" are swapped. #IC07439 EXTERNAL SYMPTOM: Incorrect Output. COMPONENT: EQNSERV.EXE, EQNSVGRE.DLL PROBLEM SUMMARY: The OS/2 2.1 Screen Lock appears while the controlling user is working on the target session window. #IC07442 EXTERNAL SYMPTOM: Abnormal end. COMPONENT: EQNSERV.EXE PROBLEM SUMMARY: If an user who is not authorized to transfer files to or from the target uses the DCAF APIs DCAFXFer for a secure target, the file transfer starts but then stops. The controlling user receives abnormal end SYS3175. #IC07444 EXTERNAL SYMPTOM: Incorrect Output. COMPONENT: EQNGWDIR.EXE EQNGWOPN.EXE PROBLEM SUMMARY: On some 66 Megahertz workstations the DCAF personalization parameters are lost everytime the worsktation is booted if either the LAN directory or the gateway are installed. #IC07458 EXTERNAL SYMPTOM: Incorrect Output. COMPONENT: EQNSCADM.EXE EQNSCLOG.DLL PROBLEM SUMMARY: If the Security administrator is running on a workstation that has an IBM 4755 cryptographic card you receive processing error message "EQN0306E: Error returned from Transaction Security System. Return code=8. Reason code=12." when the Controlling user requests a pass phrase change. #IC07460 EXTERNAL SYMPTOM: Abnormal end. COMPONENT: EQNINST.EXE PROBLEM SUMMARY: If there is not enough memory available, the DCAF installation process terminates with a SYS3175 error. #IC07463 EXTERNAL SYMPTOM: Abnormal end. COMPONENT: EQNSCNBG.DLL PROBLEM SUMMARY: The Authenticator fails with NetBIOS error after it rejects many consecutive attempts to start secure DCAF sessions.