Patch-ID# 106198-01
Keywords: point patch NT Win95 solstice 3.1 pcnfsd authentication timeout 
Synopsis: Solstice Network Client (SNC) 3.1: may timeout when using security software on server
Date: Mar/12/98

Solaris Release:  

SunOS Release: 

Unbundled Product: Solstice Network Client (SNC)

Unbundled Release: 3.1

Relevant Architectures: i386

BugId's fixed with this patch: 4116348

Changes incorporated in this version: 

Patches accumulated and obsoleted by this patch:  

Patches which conflict with this patch:  

Patches required with this patch: 

Obsoleted by: 

Files included with this patch: 

 readme.txt
 sunwnp.dll
 sunwnpnt.dll

Problem Description: 

4116348

	The SSM version of rpc.pcnfsd when it recieves a request from a PC via
an rpc then goes an contacts an SSMI server creates a secuure encrypted link
and performs the authenification of the users password, if the password
matches it returns the UID GID etc. This process take much longer than the
"getpasswdent" call that normal rpc.pcnfsd does. The result of this is that
the SNC client retries the rpc request a number of time before it gets the
first response. Because the SSM version of rpc.pcnfsd is stateless, much like
the normal version, when it recieves the retries it agian contacts the SSMI
server. The net result is that the SSMI servers gets swamped buy these
requests and is unable to keep up which leads to the PCs not being able to
authenticate and therefore not being able to be used.


users must edit their regedit file in the following way in order for
this change to have any effect.

 This fix can configure 3 different timeouts
        AuthPingTimeout
        AuthRpcRetransmitTimeout
        AuthRetryCount

        In order to make these changes they must edit the NT registry
        in the following way.

        HKEY_LOCAL_MACHINE
           \Software
                \SUNW
                   \CC
                     \1.0
                        \sunwnfs
                            \authentication

        Here they must Edit->New->DWORD value for the following entries

                                AuthPingTimeout
                                        Timeout value for the initial call to
                                        the pcnfsd server to see if pcnfsd is
                                        alive. minimum = 3, max = 45, default 6

                                AuthRpcRetransmitTimeout
                                        This will set the
                                        retransmit timeout on the actual
                                        authentication call, min = 3, max 60,
                                        default = 3.

                                AuthRetryCount
                                        Number of times we try to contact pcnfsd
                                        server min 1 max 4 default 2.

Patch Installation Instructions:

    Note: Please note that this is a point patch done just to address
          this customer's situation--this means that it will not be carried
          over into any future releases.
 
 This patch is packaged as a self-extracting compressed file (10619801.exe).  
 It must be installed from Windows95/NT.  The setup program backs up the original 
 file(s).  It then installs the new file(s) and a patch uninstall utility. 

 To install, download 10619801.exe to a temporary directory on the PC.  
 
 In Windows95 or NT, select "Run" from the "Start" menu.  Enter the path and 
 patch filename (Example: c:\temp\10619801) then select "OK".  

 The patch will uncompress and start the setup program automatically.  
 Follow the setup program prompts to complete the patch installation.  
 
 Restart Windows95 or NT.


Patch Removal Instructions:

 In Windows95 or NT, click "Start".  Then select "Programs", "Patch 10619801"
 and click on "uninstallSHIELD".  

 WARNING - The patch uninstall program restarts Windows at the end
           of the uninstall process.
 

Installation Notes:

 All drive letter and directory name references are Solstice Network Client
 defaults. If you have installed Solstice Network Client or the patch file on 
 a different drive, or in a different directory, substitute your 
 drive and directory names in the example commands above.