Product Notes for Solaris Systems

• Different location for 64-bit Solaris 7 kernel extensions

  As noted in Upgrading Server and Client Machines to AFS 3.6, the 64-bit version of Solaris 7 uses a different location for kernel extension library files than previous versions of Solaris: /kernel/fs/sparcv9/afs. The 32-bit version of Solaris 7 uses the same location as Solaris 2.6, /kernel/fs/afs.

• SunSoft Patch 106541 for Solaris 7 replaces the /sbin/mountall script

  As part of replacing the standard fsck program on an AFS file server machine that runs Solaris, you make two changes in the /sbin/mountall script. If you use Solaris 7 and apply SunSoft Patch 10654, it replaces the /sbin/mountall script. This has two implications:

  • If you apply the patch on an existing file server machine, the changes you already made in the /sbin/mountall script are overwritten. You must make the changes again in the new (replacement) script.

  • In the replacement script, the appearance of one of the sections of code that you must alter is different than in the original script and as specified in OpenAFS Quick Beginnings.

  For more details, see Documentation Notes.

• PAM can succeed inappropriately when pam_dial_auth module is optional

  For AFS authentication to work correctly for a service, all entries for the service in the Solaris PAM configuration file (/etc/pam.conf by convention) must have the value optional in the third field, as specified in OpenAFS Quick Beginnings. However, when you make the login entry that invokes the pam_dial_auth module optional in this way, it can mean that PAM succeeds (the user can login) even when the user does not meet all of the pam_dial_auth module's required conditions. This is not usually considered desirable. If you do not use dial-up authentication, comment out or remove the entry for the login service that invokes the pam_dial_auth module. If you do use dial-up authentication, you must develop a configuration that meets your needs; consult the Solaris documentation for PAM and the pam_dial_auth module. The AFS Development group has filed a Request for Enhancement (RFE #4122186) with SunSoft for a design change that eliminates this problem with the pam_dial_auth module. There is no projected solution date. For further information, contact your AFS product support representative.

• Solaris 2.6 patches are required for CDE

  There were several defects in the initial release of the Solaris 2.6 implementation of the Common Desktop Environment (CDE). They prevented integrated AFS login from working consistently under CDE. SunSoft now provides patches that correct the problems. You must install them in order to obtain support for use of CDE from your AFS product support representative.

  • If using version 1.2 of the Solaris CDE, install SunSoft patches 105703-03 and 106027-01 (or later revisions).

  • If using version 1.3 of the Solaris CDE, which is included on the SDE CD-ROM, install SunSoft patch 106661-04 (or a later revision).

  Use the following command to determine which version of CDE you are running:

  % pkginfo -l SUNWdtdte