Patch Name: PHSS_29123

Patch Description: s700_800 11.X Cluster Object Manager B.01.04.01

Creation Date: 04/07/08

Post Date: 04/07/16

Hardware Platforms - OS Releases:
	s700: 11.00 11.11
	s800: 11.00 11.11

Products:
	Cluster Object Manager B.01.04.01

Filesets:
	Cluster-OM.CM-DEN-MOF,fr=B.01.04,fa=HP-UX_B.11.00_32/64,v=HP
	Cluster-OM.CM-DEN-PROV,fr=B.01.04,fa=HP-UX_B.11.00_32/64,v=HP
	Cluster-OM.CM-OM,fr=B.01.04,fa=HP-UX_B.11.00_32/64,v=HP
	Cluster-OM.CM-OM-AUTH,fr=B.01.04,fa=HP-UX_B.11.00_32/64,v=HP
	Cluster-OM.CM-OM-MAN,fr=B.01.04,fa=HP-UX_B.11.00_32/64,v=HP
	Cluster-OM.CM-OM-TOOLS,fr=B.01.04,fa=HP-UX_B.11.00_32/64,v=HP
	CM-Provider-MOF.CM-MOF,fr=B.01.04,fa=HP-UX_B.11.00_32/64,v=HP
	CM-Provider-MOF.CM-PROVIDER,fr=B.01.04,fa=HP-UX_B.11.00_32/64,v=HP

Automatic Reboot?: No

Status: General Release

Critical:
	Yes
	PHSS_29123: ABORT
		When running CVM using the VxVM-CVM-pkg,
	        vxclustd may abort during cluster reformation
	        while trying to query the heartbeat network
	        information.  ServiceGuard A.11.14 Patch PHSS_29122
	        or later will also be needed to complete this fix
	        (for the commands part), but the change in this COM
	        patch can stand alone without harm.
	PHSS_27991: ABORT
		This is critical because cmomd core dumps if a port
		scanning tool like nmap talks to it.

Category Tags:
	defect_repair enhancement general_release critical
	halts_system

Path Name: /hp-ux_patches/s700_800/11.X/PHSS_29123

Symptoms:
	PHSS_29123:

	1. When running CVM using the VxVM-CVM-pkg,
	   vxclustd may abort during cluster reformation
	   while trying to query the heartbeat network
	   information:

	   /etc/cmcluster/cvm/VxVM-CVM-pkg.sh.log will show:

	   ERROR: Cluster volume manager is inactive
	          after 60 secs

	2. When Continentalcluster users connect to Cluster Object
	   Manager using local host authentication, we see the
	   message "The id of the user requesting the connection is
	   not available in the authentication session" logged in
	   /var/opt/cmom/cmomd.log and syslog.

	PHSS_28852:

	1. (no symptoms - internal changes for enhanced patch
	    testing)

	2. When a service configured with SERVICE_FAIL_FAST_ENABLED
	   set to "YES" fails, ServiceGuard Manager may display the
	   node on which the service was running as down while
	   displaying the package as up, until the cluster reforms.

	PHSS_27991:

	1. Admin functions executed through ServiceGuard
	   Manager are not logged in syslog on a cluster
	   node where operation takes place.

	2. cmomd core dumps if a port scanning tool like
	   nmap talks to it.

	PHSS_26057:

	1. When any unused node (i.e. node not part of a cluster)
	   is included in the scope of a ServiceGuard-related
	   query for the Object Manager, we would get incorrect
	   results. For example, an error may be encountered on
	   ServiceGuard Manager while trying to save a
	   configuration involving an unused node.
	   To reproduce this defect in ServiceGuard Manager:
	   1) Check the "include unused nodes" option in the
	   startup screen.
	   2) Connect to the Object Manager and view the current
	   configuration.
	   3) Save the current configuration.  It will fail with the
	   error message:
	   "Error 0011 : Failed to save file <file name>
	   Cause : Server Schema Error."

	2. Attempting to run a node (using a SGAPI client, notably
	   ServiceGuard Manager), when the node is powered off or
	   is in the process of shutdown or reboot resulted in a
	   confusing internal error message:
	   "unable to obtain cluster membership with
	    instance id SGClusterNodeContainment:<instance-id>"

	3. In a trusted hpux system Object Manager failed to
	   authenticate if the password was greater than
	   eight characters in length.

Defect Description:
	PHSS_29123:

	1. The API to get the cluster configuration information has
	   a check to see if the configuration version has changed
	   since the lookups occurred.  It is possible on an SGeRAC
	   cluster that cmgmsd transactions could slip in and
	   increase the version, causing the API call to fail.

	   Resolution:
	   The fix is to turn off this checking for realtime API
	   clients (which is only vxclustd).  This is ok because
	   vxclustd does not care if the cmgmsd part of the CDB
	   tree is modified.  ServiceGuard A.11.14 Patch PHSS_29122
	   or later will also be needed to complete this fix (for
	   the commands part), but the change in this COM patch can
	   stand alone without harm.

	2. The problem occurred due to non testing of local host
	   clients during the coding when an extra check for local
	   host authentication was added.  A message was logged
	   every time the user name was not available.

	   Resolution:
	   The fix is to change the log level at which the message
	   is logged so at normal log levels it does not appear in
	   syslog.

	PHSS_28852:

	1. Changes were made to support a new internal testing
	   infrastructure.

	2. Node information is often obtained in a different way
	   than package information, so inconsistent data may be
	   displayed.

	   Resolution:
	   Do extra checking to make sure the information displayed
	   is consistent between nodes and packages.

	PHSS_27991:

	1. This is an enhancement request. Remote admin requests
	   executed through Object Manager were not tracked
	   through syslog on a cluster node where operation
	   takes place.

	   Resolution:
	   Enhanced admin code paths in config
	   library and ServiceGuard daemons to log more
	   information about the user requesting the request,
	   where the request being issued and how is it issued.

	2. We prematurely deallocate a configuration object,
	   that is needed later.

	   Resolution:
	   Deallocate the configuration object only when it
	   is no longer needed.

	PHSS_26057:

	1. Unused nodes are searched for in the cmprovider's
	   cluster-related cache, but they are not present in the
	   cache.

	   Resolution:
	   When looking up an individual node in the cmprovider's
	   cluster-related cache, skip if the node is an unused
	   node.

	2. This is an expected error when the node is in the process
	    of reboot or shutdown.  However we want to have better
	    customer readable error message.

	    Resolution:
	    Changed the error message to the following:
	    "Unable to obtain the cluster membership; "
	    "Node <node-name> may be unreachable."

	3. As part of authentication logic, we used the crypt()
	   function, which can handle only eight characters.

	   Resolution:
	   Used the bigcrypt() method, if the system is in
	   "trusted system" mode.

Enhancement:
	No (superseded patches contained enhancements)
	PHSS_27991:
	This patch delivers new functionality for logging the
	audit messages into the syslog.log for the admin
	operations.

SR:
	8606220084 8606208524 8606244429 8606257589 8606214892
	8606286661 8606294079 8606307795 8606278273

Patch Files:
	
	Cluster-OM.CM-DEN-MOF,fr=B.01.04,fa=HP-UX_B.11.00_32/64,
		v=HP:
	/opt/cmom/mof/CMlogicalconsumer.mof
	/opt/cmom/mof/OMevent.mof

	Cluster-OM.CM-DEN-PROV,fr=B.01.04,fa=HP-UX_B.11.00_32/64,
		v=HP:
	/opt/cmom/providers/lcprovider.omp

	Cluster-OM.CM-OM,fr=B.01.04,fa=HP-UX_B.11.00_32/64,v=HP:
	/opt/cmom/lbin/cmomd
	/opt/cmom/lib/libcmom.1
	/opt/cmom/lib/libcmom.sl
	/opt/cmom/lib/libcmutil.1
	/opt/cmom/lib/libcmutil.sl
	/opt/cmom/mof/OMcore.mof

	Cluster-OM.CM-OM-AUTH,fr=B.01.04,fa=HP-UX_B.11.00_32/64,
		v=HP:
	/opt/cmom/authenproviders/sehostbasedprovider.omp
	/opt/cmom/authenproviders/selocalhostprovider.omp
	/opt/cmom/authenproviders/seuserpasswdprovider.omp

	Cluster-OM.CM-OM-MAN,fr=B.01.04,fa=HP-UX_B.11.00_32/64,v=HP:
	/opt/cmom/man/man1m/cmreadlog.1m

	Cluster-OM.CM-OM-TOOLS,fr=B.01.04,fa=HP-UX_B.11.00_32/64,
		v=HP:
	/opt/cmom/tools/bin/cmreadlog

	CM-Provider-MOF.CM-MOF,fr=B.01.04,fa=HP-UX_B.11.00_32/64,
		v=HP:
	/opt/cmom/mof/CMcluster.mof
	/opt/cmom/mof/CMnetwork.mof
	/opt/cmom/mof/EMScore.mof
	/opt/cmom/mof/QSquorumserver.mof
	/opt/cmom/mof/SGcluster.mof
	/opt/cmom/mof/SGincarnationevent.mof
	/opt/cmom/mof/SGnetwork.mof
	/opt/cmom/mof/SGpackage.mof
	/opt/cmom/mof/SGquorumserver.mof

	CM-Provider-MOF.CM-PROVIDER,fr=B.01.04,
		fa=HP-UX_B.11.00_32/64,v=HP:
	/opt/cmom/providers/cmprovider.omp
	/opt/cmom/providers/qsprovider.omp

what(1) Output:
	
	Cluster-OM.CM-DEN-MOF,fr=B.01.04,fa=HP-UX_B.11.00_32/64,
		v=HP:
	/opt/cmom/mof/CMlogicalconsumer.mof:
		ServiceGuard Schema 1.3.1
	/opt/cmom/mof/OMevent.mof:
		Schema Name:   Object Manager
		Version:        1.3.1

	Cluster-OM.CM-DEN-PROV,fr=B.01.04,fa=HP-UX_B.11.00_32/64,
		v=HP:
	/opt/cmom/providers/lcprovider.omp:
		Build date:     Fri Jun 25 10:41:56 PDT 2004
		Build id:       ibld_api_a0104_patch_makefile
		Build platform: hpux
		Product Name: HP Cluster Object Manager
		Version:      B.01.04.01
		Patch Name:   PHSS_29123

	Cluster-OM.CM-OM,fr=B.01.04,fa=HP-UX_B.11.00_32/64,v=HP:
	/opt/cmom/lbin/cmomd:
		HP92453-02A.10.20 HP-UX SYMBOLIC DEBUGGER (END.O) $R
			evision: 74.03 $
		Build date:     Fri Jun 25 10:39:39 PDT 2004
		Build id:       ibld_api_a0104_patch_makefile
		Build platform: hpux
		Product Name: HP Cluster Object Manager
		Version:      B.01.04.01
		Patch Name:   PHSS_29123
	/opt/cmom/lib/libcmom.1:
		Build date:     Fri Jun 25 10:40:45 PDT 2004
		Build id:       ibld_api_a0104_patch_makefile
		Build platform: hpux
		Product Name: HP Cluster Object Manager
		Version:      B.01.04.01
		Patch Name:   PHSS_29123
	/opt/cmom/lib/libcmom.sl:
		Build date:     Fri Jun 25 10:40:45 PDT 2004
		Build id:       ibld_api_a0104_patch_makefile
		Build platform: hpux
		Product Name: HP Cluster Object Manager
		Version:      B.01.04.01
		Patch Name:   PHSS_29123
	/opt/cmom/lib/libcmutil.1:
		Cluster Monitor Product   $Revision: 82.2 $
		MC/ServiceGuard Product   $Revision: 82.2 $
		Build date:     Fri Jun 25 10:46:59 PDT 2004
		Build id:       ibld_api_a0104_patch_makefile
		Build platform: hpux
		Product Name: HP Cluster Object Manager
		Version:      B.01.04.01
		Patch Name:   PHSS_29123
	/opt/cmom/lib/libcmutil.sl:
		Cluster Monitor Product   $Revision: 82.2 $
		MC/ServiceGuard Product   $Revision: 82.2 $
		Build date:     Fri Jun 25 10:46:59 PDT 2004
		Build id:       ibld_api_a0104_patch_makefile
		Build platform: hpux
		Product Name: HP Cluster Object Manager
		Version:      B.01.04.01
		Patch Name:   PHSS_29123
	/opt/cmom/mof/OMcore.mof:
		Schema Name:   Object Manager
		Version:        1.3.1

	Cluster-OM.CM-OM-AUTH,fr=B.01.04,fa=HP-UX_B.11.00_32/64,
		v=HP:
	/opt/cmom/authenproviders/sehostbasedprovider.omp:
		Build date:     Fri Jun 25 10:42:03 PDT 2004
		Build id:       ibld_api_a0104_patch_makefile
		Build platform: hpux
		Product Name: HP Cluster Object Manager
		Version:      B.01.04.01
		Patch Name:   PHSS_29123
	/opt/cmom/authenproviders/selocalhostprovider.omp:
		Build date:     Fri Jun 25 10:42:08 PDT 2004
		Build id:       ibld_api_a0104_patch_makefile
		Build platform: hpux
		Product Name: HP Cluster Object Manager
		Version:      B.01.04.01
		Patch Name:   PHSS_29123
	/opt/cmom/authenproviders/seuserpasswdprovider.omp:
		Product Name: HP Cluster Object Manager
		Version:      B.01.04.01
		Patch Name:   PHSS_29123
		Build date:     Fri Jun 25 10:42:13 PDT 2004
		Build id:       ibld_api_a0104_patch_makefile
		Build platform: hpux

	Cluster-OM.CM-OM-MAN,fr=B.01.04,fa=HP-UX_B.11.00_32/64,v=HP:
	/opt/cmom/man/man1m/cmreadlog.1m:
		None

	Cluster-OM.CM-OM-TOOLS,fr=B.01.04,fa=HP-UX_B.11.00_32/64,
		v=HP:
	/opt/cmom/tools/bin/cmreadlog:
		HP92453-02A.10.20 HP-UX SYMBOLIC DEBUGGER (END.O) $R
			evision: 74.03 $
		Build date:     Fri Jun 25 10:40:52 PDT 2004
		Build id:       ibld_api_a0104_patch_makefile
		Build platform: hpux
		Product Name: HP Cluster Object Manager
		Version:      B.01.04.01
		Patch Name:   PHSS_29123

	CM-Provider-MOF.CM-MOF,fr=B.01.04,fa=HP-UX_B.11.00_32/64,
		v=HP:
	/opt/cmom/mof/CMcluster.mof:
		ServiceGuard Schema 1.3.1
	/opt/cmom/mof/CMnetwork.mof:
		ServiceGuard Schema 1.3.1
	/opt/cmom/mof/EMScore.mof:
		ServiceGuard Schema 1.3.1
	/opt/cmom/mof/QSquorumserver.mof:
		None
	/opt/cmom/mof/SGcluster.mof:
		ServiceGuard Schema 1.3.1
	/opt/cmom/mof/SGincarnationevent.mof:
		ServiceGuard Schema 1.3.1
	/opt/cmom/mof/SGnetwork.mof:
		ServiceGuard Schema 1.3.1
	/opt/cmom/mof/SGpackage.mof:
		ServiceGuard Schema 1.3.1
	/opt/cmom/mof/SGquorumserver.mof:
		ServiceGuard Schema 1.3.1

	CM-Provider-MOF.CM-PROVIDER,fr=B.01.04,
		fa=HP-UX_B.11.00_32/64,v=HP:
	/opt/cmom/providers/cmprovider.omp:
		Cluster Management Provider Library
		Serviceguard Schema 1.3.1
		Build date:     Fri Jun 25 10:47:05 PDT 2004
		Build id:       ibld_api_a0104_patch_makefile
		Build platform: hpux
		Product Name: HP Cluster Object Manager
		Version:      B.01.04.01
		Patch Name:   PHSS_29123
	/opt/cmom/providers/qsprovider.omp:
		Build date:     Fri Jun 25 10:47:12 PDT 2004
		Build id:       ibld_api_a0104_patch_makefile
		Build platform: hpux
		Product Name: HP Cluster Object Manager
		Version:      B.01.04.01
		Patch Name:   PHSS_29123

cksum(1) Output:
	
	Cluster-OM.CM-DEN-MOF,fr=B.01.04,fa=HP-UX_B.11.00_32/64,
		v=HP:
	2419401695 1321 /opt/cmom/mof/CMlogicalconsumer.mof
	2205947407 3070 /opt/cmom/mof/OMevent.mof

	Cluster-OM.CM-DEN-PROV,fr=B.01.04,fa=HP-UX_B.11.00_32/64,
		v=HP:
	887776909 77824 /opt/cmom/providers/lcprovider.omp

	Cluster-OM.CM-OM,fr=B.01.04,fa=HP-UX_B.11.00_32/64,v=HP:
	74400355 354000 /opt/cmom/lbin/cmomd
	1649994114 1400832 /opt/cmom/lib/libcmom.1
	1649994114 1400832 /opt/cmom/lib/libcmom.sl
	1022936824 2637824 /opt/cmom/lib/libcmutil.1
	1022936824 2637824 /opt/cmom/lib/libcmutil.sl
	3115965923 18850 /opt/cmom/mof/OMcore.mof

	Cluster-OM.CM-OM-AUTH,fr=B.01.04,fa=HP-UX_B.11.00_32/64,
		v=HP:
	4057445564 77824 /opt/cmom/authenproviders/
		sehostbasedprovider.omp
	627717704 45056 /opt/cmom/authenproviders/
		selocalhostprovider.omp
	67502207 32768 /opt/cmom/authenproviders/
		seuserpasswdprovider.omp

	Cluster-OM.CM-OM-MAN,fr=B.01.04,fa=HP-UX_B.11.00_32/64,v=HP:
	1297428164 1230 /opt/cmom/man/man1m/cmreadlog.1m

	Cluster-OM.CM-OM-TOOLS,fr=B.01.04,fa=HP-UX_B.11.00_32/64,
		v=HP:
	824992841 59088 /opt/cmom/tools/bin/cmreadlog

	CM-Provider-MOF.CM-MOF,fr=B.01.04,fa=HP-UX_B.11.00_32/64,
		v=HP:
	3151552603 16681 /opt/cmom/mof/CMcluster.mof
	3180290089 10790 /opt/cmom/mof/CMnetwork.mof
	452118744 685 /opt/cmom/mof/EMScore.mof
	3920192188 738 /opt/cmom/mof/QSquorumserver.mof
	385207907 11821 /opt/cmom/mof/SGcluster.mof
	3347974820 4882 /opt/cmom/mof/SGincarnationevent.mof
	1220999373 2473 /opt/cmom/mof/SGnetwork.mof
	881627924 21084 /opt/cmom/mof/SGpackage.mof
	2974940332 3219 /opt/cmom/mof/SGquorumserver.mof

	CM-Provider-MOF.CM-PROVIDER,fr=B.01.04,
		fa=HP-UX_B.11.00_32/64,v=HP:
	1952931901 1146880 /opt/cmom/providers/cmprovider.omp
	3750432823 32768 /opt/cmom/providers/qsprovider.omp

Patch Conflicts: None

Patch Dependencies: None

Hardware Dependencies: None

Other Dependencies: None

Supersedes:
	PHSS_26057 PHSS_27991 PHSS_28852

Equivalent Patches: None

Patch Package Size: 1620 KBytes

Installation Instructions:
	Please review all instructions and the Hewlett-Packard
	SupportLine User Guide or your Hewlett-Packard support terms
	and conditions for precautions, scope of license,
	restrictions, and, limitation of liability and warranties,
	before installing this patch.
	------------------------------------------------------------
	1. Back up your system before installing a patch.

	2. Login as root.

	3. Copy the patch to the /tmp directory.

	4. Move to the /tmp directory and unshar the patch:

		cd /tmp
		sh PHSS_29123

	5. Run swinstall to install the patch:

		swinstall -x autoreboot=true -x patch_match_target=true \
			  -s /tmp/PHSS_29123.depot

	By default swinstall will archive the original software in 
	/var/adm/sw/save/PHSS_29123.  If you do not wish to retain a
	copy of the original software, include the patch_save_files
	option in the swinstall command above:

		-x patch_save_files=false

	WARNING: If patch_save_files is false when a patch is installed,
		 the patch cannot be deinstalled.  Please be careful
		 when using this feature.

	For future reference, the contents of the PHSS_29123.text file is 
	available in the product readme:

		swlist -l product -a readme -d @ /tmp/PHSS_29123.depot

	To put this patch on a magnetic tape and install from the
	tape drive, use the command:

		dd if=/tmp/PHSS_29123.depot of=/dev/rmt/0m bs=2k

Special Installation Instructions: None