home
***
CD-ROM
|
disk
|
FTP
|
other
***
search
/
OS/2 Shareware BBS: 8 Other
/
08-Other.zip
/
ntplc424.zip
/
readme.fix
< prev
next >
Wrap
Text File
|
1999-03-15
|
20KB
|
431 lines
IBM Networks Client for Microsoft Windows NT (README.FIX)
________________________________________________________________________
Version 4.2.4 Jan 1, 1999
------------
Introduction
------------
This file (README.FIX) contains descriptions of new features, things
that have been improved and APARs that have been fixed in this version
of the IBM Networks Primary Logon Client (PLC) and the IBM Networks
Coordinated Logon Client (CLC).
------------------------
What's New And Important
------------------------
This section describes what is new and important in this release. To
see a cumulative list of changes, see the Release History section.
* Added support for parsing of autoexec.bat
To set the environment variable in memory GINA will parse
autoexec.bat for environment variable in the same way pure
NT does.
See the entry under "Version 4.2.3" of the "Release History"
section below for details.
* Added support for using %logonserver% environment variable
The %logonserver% enviroment variable can be used in the
logonscript.
See the entry under "Version 4.2.3" of the "Release History"
section below for details.
* Added support for group mapping
Our number one enhancement request for the PLC has been to add
support to allow IBM OS/2 Warp Server domain administrators to
administer local workstations. Group mapping allows you to
specify that members of a particular domain group will be added
to a specified local group during logon.
Example: You want administrators from domain WSDOM to have
administrator authority over your NT workstations.
With group mapping, you can configure your workstations
to add users that are members of the "ADMINS" group in
WSDOM to the "Administrators" group on the local NT
workstation.
See the bullet for group mapping under "Version 4.2.1" of the
"Release History" section below for details.
-------------
Helpful Hints
-------------
Many of the "problems" reported to IBM can be fixed by changing
settings in NT's registry:
* How do I disable the "A slow link has been detected..." message I
get sometimes when logging on?
In the NT registry, set the following value:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\WinLogon
Value: SlowLinkDetectEnabled
Type: REG_DWORD
Data: 0
* Every time I logon to my workstation, I get a new profile directory
directory that takes up space on my drive.
c:\winnt\profiles\user_id
c:\winnt\profiles\user_id.000
c:\winnt\profiles\user_id.001
...
The easiest fix for this problem is to change the PLC logoff policy
from Delete to Keep or Disable. See "Managing dynamic user accounts"
in the on-line user's guide for instructions. This also has the
added benefit of speeding up your logons!
If you need to keep the logoff policy as Delete, then you can change
how NT manages cached roaming profiles.
In the NT registry, set the following value:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\WinLogon
Value: DeleteRoamingCache
Type: REG_DWORD
Data: 1
This does not clean up previously cached roaming profiles. Previously
cached profiles must be deleted manually.
---------------------------
How To Get The Latest Fixes
---------------------------
Fixes and updates for the IBM Networks Clients will be distributed
on the World-Wide Web. Periodically, the clients that you download
from the IBM OS/2 Warp Server home page or from IBM Software Choice
will be refreshed with the latest level of code.
IBM OS/2 Warp Server
http://www.software.ibm.com/os/warp-server/
IBM Software Choice
http://www.software.ibm.com/os/warp/swchoice/
---------------
Release History
---------------
Version 4.2.4+
* APAR IC23186 - NET USE with IP names gives syntax error.
* DEFECT 50893 - Booting to LKGC no longer works.
Now the gina dll triggers NT to update the LastKnownGood
configuration.
Version 4.2.4
* APAR IC22557 - Wrong message in case of same correct old and new password.
Return code was modified to popup correct messages.
* APAR IC22368 - ntuser.dat was not being updated on users home directory.
* APAR IC22031 - The PLC doesn't update the environment variable from autoexec.bat
Now this feature has been added for IBMGINA.
* APAR IC21984 - The CLC hangs if try to start any service with automatic startup using
a userid and password. A new function has been written to overcome this problem.
* APAR IC22139 - The environment variable LOGONSERVER is not set for use in logon script.
The user environment is updated with the varibale LOGONSERVER pointing to the value of
currently logged on server.
* APAR IC21899 - Net WHO on smb server still shows the logged off users from PLC.
Fixed the problem by calling 16 bit logoff API to smb server with proper user
credentials.
* APAR IC21596 - A new registrykey 'TimerDependency' is added under
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\IBMNeTNT\networkprovider
This key can be used configure the wait time for network information.
This is done to prevent the Quick logon failure on CLC after the system boots up .
* APAR IC20941 - PLC NET VIEW command does not parse correctly
Fixed the problem where the NET VIEW will work as same as NETNT VIEW does.
* APAR IC20751 - NET ADMIN with NET SESS fails with pipe MORE command
on CLC and PLC.
In fact this problem was with MORE command of NT which could not handle
some special characters. Fixed the problen by filtering the characters
before displaying.
* APAR IC21359 - PLC doesn't set the %errorlevel% correctly for NET USE
command. It occurs with CLC also.
Fixed the problem by returning the exitcode to the Operating System. It
sets the errorlevel environment variable.
e.g.
NET USE X: \\non-existentserver\alias
will set errorlevel 2.
Can be seen by typing ECHO %ERRORLEVEL% from the command prompt.
* APAR IC21162 - IBMNetNT service cannot start due to the logon failure
Fixed the problem where the new random password generated for IBMGINA
service account is complying to the Windows NT's password rules.
* APAR IC21133 - Incompatibility with Client Access.
The problem is when PLC and Client Access are both installed on NT
workstation and PLC is listed before Client Access in Network Provider
order, the PLC intercepts all the AS/400 network type requests.
Both PLC and CLC has been updated to allow the AS/400 network type
requests going to the Client Access Network provider.
Version 4.2.3
* APAR IC20914 - NT domain not found when the Browser Service is disabled.
Fixed problem in NT domain logon process where, if the Browser service is
disabled then the logon process will take some more extra times to allow
the NT domain discovery process completed.
* APAR IC20668 - NET ADMIN command fails with usercomment containing
hyphen (-) character on PLC and CLC.
The problem has been fixed by letting the user to put hyphen (-)
inside the usercomment. eg.
NET ADMIN \\PDC /C NET USER username /USERCOMMENT:\"This - will work\"
* APAR IC20658 - Net Command fails with server name containing &.
This problem is fixed to allow the Net command with server name
having & (AMPERSAND) character.
eg.
NET USE X: "\\HUMNR&D1\C$"
will work now.
Fixed for both CLC and PLC.
* DEFECT 45779 - Null password can't be changed.
This problem is fixed by letting the user to change the null password
to any password and vice versa.
* APAR IC20583 - NT PLC does not blank password field after entering
wrong password.
This problem has been fixed in the logon information dialog box
and Workstation locked dialog box. The focus is set on the
password field.
* APAR IC20614 - CLC was not logging on to BDC if Primary Domain
Controller is down. This problem was also existing with PLC.
The logon broadcast was failed because Backup domain controller
was unable to keep track of the number of broadcast retrial.
Fixed by updating the retrial count in the logon broadcast mailslot.
* APAR IC19666 - No LAN Server connection for CLC if system restarts.
If home directory is defined on NT machine , now if system is
restarted the user doesn't get the logon assignments defined
on the warp server.
This is fixed by calling the API which handles logon assignment
and profile.bat after the user shell starts.
This problem affects only the CLC.
* APAR IC18600 - Ctrl-Alt-Del being hit multiple times causes PLC hangs
Fixed problem where PLC hangs if Ctrl-Alt-Del is hit
multiple times during the logoff process.
* APAR IC19726 - User id containing a space will not get logon assignments
Fixed problem on both PLC and CLC.
Version 4.2.2
* Added support for disabling roaming profiles
A few customers requested the ability to disable roaming
profile support in order to reduce network bandwidth usage.
To disable roaming profile support:
1) Start REGEDT32.EXE
2) Select the HKEY_LOCAL_MACHINE window.
3) Double-click on SYSTEM
4) Double-click on CurrentControlSet
5) Double-click on Services
6) Double-click on IBMNeTNT
7) Click on Parameters
8) From the "Edit" menu, click on "Add Value"
Value Name: DisableRoamingProfiles
Data Type: REG_DWORD
9) Click on the "OK" button.
10) In the Data Editor dialog, set the value to 1.
11) Click on the "OK" button.
12) Close REGEDT32.
The change takes effect on the next logon (no need to reboot).
* APAR IC18348 - User environment variables not set
Fixed problem where only system environment variables were
being set during logon.
* APAR IC18472 - Connections made in PROFILE.BAT have no access
Fixed problem where NET USE statements executed in PROFILE.BAT
to a dynamically shared alias ("As requested by user") resulted
in connections being made within a null session.
* APAR IC18848 - Local users sometimes deleted or disabled
Fixed problem in PLC dynamic user account management where, if
you logged on to a non-NT domain as a roaming user, logged-off,
then logged on to the local workstation, the local user account
would be "managed" at logoff. Only roaming users should be
managed at logoff.
* APAR IC18895 - Quick logins after reboot sometimes causes failures
On some slower machines, trying to login too quickly after a
reboot could cause various failures (no roaming profile, logon
assignments fail, no home directory, etc.) due to some NT
services not being fully running. The CLC has been updated to
wait until the required services are available.
This problem affects only the CLC.
Version 4.2.1
* Added PLCUPDAT.BAT and README.FIX
PLCUPDAT.BAT allows you to update the version of the PLC that
you already have installed on your workstation to the latest
level without uninstalling, then reinstalling.
* Added support for group mapping
Group mapping allows you to configure the PLC to add members
of a domain group to a specified local group during logon.
To add a group mapping:
1) Add the "GroupMapping" key to the workstation's registry
if it is not already present.
a) Start REGEDT32.EXE
b) Select the HKEY_LOCAL_MACHINE window.
c) Double-click on SYSTEM
d) Double-click on CurrentControlSet
e) Double-click on Services
f) Double-click on IBMNeTNT
g) From the "Edit" menu, click on "Add Key"
h) Set the key name to "GroupMapping"
i) Click on the "OK" button.
2) Click on the "GroupMapping" key.
3) From the "Edit" menu, click on "Add Value"
4) Set the value name to the name of the domain group.
Example: WSDOM_ADMINS is the name of the "ADMINS" group
in domain "WSDOM".
5) Data type should be REG_SZ.
6) Click on the "OK" button.
7) In the String Editor dialog, enter the name of the local
group that you want members of the domain group to be
added to.
Example: "Administrators" would give members of the
"WSDOM_ADMINS" group local administrator rights.
8) Click on the "OK" button.
9) Close REGEDT32.
The next time someone performs a logon, ADMINS from the WSDOM
domain will have administrative rights on the local workstation
(based on our example). No reboot is required for changes to
the GroupMapping key to take effect.
Steps 2-8 can be followed to add new group mappings at any time.
* Optimized initial cursor placement in "Logon", "Change Password"
and "Unlock Workstation" dialogs.
* APAR IC17813 - Improve FIXNTACC performance / fix NTUSER.DAT growth
Fixed problem in FIXNTACC that was causing NTUSER.DAT to grow
by approximately 20K per logon.
NOTE: User's should run "FIXNTACC /FIX" once after installing
this version of PLC to cleanup redundant access control
entries.
This APAR also fixed performance problems during logon by
changing FIXNTACC to only run at the user's first logon for
their profile.
* APAR IC18049 - Limit shared apps displayed in the GUI
Updated the GUI to only display shared applications that the
user has access to.
* APAR IC18317 - Fix security hole in SMB/DCE domain drivers
Fixed a security hole in the SMB and DCE domain drivers that
could give users access to resources on the local workstation
that they are not authorized to access.
Version 4.2
* GA version of IBM Networks Primary Logon Client
--------------------
Cumulative APAR List
--------------------
PLC CLC APAR Description
--- --- ------- ----------------------------------------------------
x IC17813 Improve FIXNTACC performance / fix NTUSER.DAT growth
x x IC18049 Limit shared apps displayed in the GUI
x IC18317 Fix security hole in SMB/DCE domain drivers
x IC18348 User environment variables not set
x x IC18472 Connections made in PROFILE.BAT have no access
x IC18600 Ctrl-Alt-Del hit multiple times causes PLC hangs after reboot
x IC18848 Local users sometimes deleted or disabled
x IC18895 Quick logins after reboot sometimes causes failures
x x IC19726 User ID containing a space will not get logon assignments
x DF45779 Null password can't be changed.
x IC20583 PLC doesn't blank the password field after wrong password.
x x IC20614 PLC & CLC did not log on to BDC if DC is down.
x IC19666 No Logon assgn if homedir is defined on NT.
x x IC20658 Net command fails with server name containing &.
x x IC20668 NET ADMIN command fails with usercomment containing '-'.
x x IC21133 Incompatibility with Client Access.
x IC21162 The IBMNetNT service cannot start due the logon failure.
x x IC21359 PLC doesn't set the %errorlevel% correctly for NET USE.
x x IC20751 NET ADMIN with NET SESS fails with pipe MORE command.
x x IC20941 NET VIEW does not pasre correctly.
x IC21596 Quick logon on CLC after the system boots up results in failure.
x IC21899 Net WHO on smb server still shows the logged off users from PLC.
x IC22139 The environment variable LOGONSERVER is not set for use in logon script.
x IC21984 The CLC hangs if try to start any service with automatic startup using a userid and password.
x IC22031 The PLC doesn't update the environment variable from autoexec.bat
x IC22368 ntuser.dat was not being updated on users home directory.
x IC22557 Wrong message in case of same correct old and new password.
x IC23186 NET USE with IP names gives syntax error.
END OF DOCUMENT
