Changes from LAN Manager/X to Advanced Server/9000

This section describes LAN Manager Version 1.x functionality that is implemented differently or not supported in Advanced Server/9000.

Administering the Server

The xlmadmin utility used to administer local and remote servers is not available with Advanced Server/9000. The Advanced Server/9000 server can be administered from NT workstations using the supplied server tools or from the client or server using net commands. Unlike LAN Manager 1.x, Advanced Server/9000 does not require root access to use net commands except: net start/stop server. Many of the net commands require ADMINISTRATOR capabilities or one of the OPERATOR capabilities. See the section on "Managing Users, Groups, and Security Policies" in the Advanced Server/9000 Administrator's Guide for more information.
Automatic shares (default shares based on each user's HP-UX home directory) are not available in Advanced Server/9000. All shares must be explicitly created by an administrator.
The net share command does not support the -case option. Use symbolic links to reference uppercase filenames.
The LAN Manager 1.x net save and net load commands are not supported in Advanced Server/9000.
LAN Manager 1.x has man pages: man net. For on-line help in Advanced Server/9000 execute the command: net help.

Security

LAN Manager 1.x utilized HP-UX file permissions to govern access to resources. In Advanced Server/9000, NT-style access permissions become the primary method for controlling access to resources. HP-UX file permissions are still observed in Advanced Server/9000, but migration to the NT-style access permissions model offers many advantages and should be used instead.
There are significant differences in how Advanced Server/9000 access permissions and HP-UX file permissions are managed. In particular, access permissions assigned to a file directory also applies to all subdirectories and files, if no other access permissions exist for them. Thus, access permissions should first be assigned to top-level directories, then to lower-level directories, and lastly to files (only if necessary). A large number of access permissions can be difficult to manage, and can affect performance.
File interlocking: LAN Manager version 1.x has four file locking modes: yes, no, readonly, and exclusive. Advanced Server/9000 has two locking modes: yes and no.
User names and passwords in version 1.x were the same in LAN Manager and HP-UX. In Advanced Server/9000, they can be different.
Advanced Server/9000 uses the HP-UX groupid differently than version 1.x. You can no longer use HP-UX groups by default to manage file access permissions for Advanced Server/9000 users. AS/U honors the HP-UX setgid bit on a file or directory's parent directory when the keyword [hpparms]keepunixgroups is set to yes. This allows a group of users to access files and directories based on group memberships Refer to the appendix on the lanman.ini file in the Advanced Server/9000 Administrator's Guide for details.

Changes to net Commands

In Advanced Server/9000, there are some minor syntax changes that apply to all net commands:

Option parameters are specified using a forward-slash (/) instead of the dash (-) used in version 1.x.
Directory path parameters begin with the drive letter prefix: c:, but otherwise adhere to the UNIX pathname syntax with forward slashes.
Example on HP-UX 10.x systems:
net share newshare=c:/home/xyz
The drive letter prefix was not required in version 1.x.
Computername parameters must begin with a double backslash (\\). Version 1.x accepted either a double forward-slash (//) or a double backslash (\\).

Changes to the net commands from LAN Manager/X to Advanced Server/9000 are shown in the following table.

LAN Manager/X Net Commands	Advanced Server/9000 Changes
net admin	The MS-DOS command shell is not supported (-dos). The [username: [password]] parameters are not supported. The username and password are set by the net logon command.
net audit	Not available.
net autostart	Not available. Administrators must manually modify the appropriate start-up file if they wish to automatically start Advanced Server/9000 upon system start-up.
net config	unchanged
net device	unchanged
net error	Not available. Use the elfread command to view system event logs. Refer to Appendix C: HP-UX System Commands in the Administrator's Guide.
net file	unchanged
net help	The [parameter] parameter is not supported. Use the /options parameter to obtain further information on available options and parameters.
net iniconfig	Not available. Use the srvconfig utility. Refer to chapter 1, "Net Command," in the Advanced Server/9000 Administrator's Guide for more information.
net load	Not available. The current set of shared resources is preserved between Advanced Server/9000 invocations. There are no provisions for maintaining different share profiles as in LAN Manager 1.x.
net password	Password restrictions are different. This command is significantly different in Advanced Server/9000.
net print	The [-parms] parameter is not supported. Use the /parms:types=" " command.
net save	Not available. The current set of shared resources is preserved between Advanced Server/9000 invocations.
net send	Text files cannot be sent using the = parameter. The message must fit on the command line.
net share	The [-case] parameter is not available.
net start server	The [-parameters:value] parameter is not available. Use the srvconfig command to display or change keywords in the server's lanman.ini file.
net statistics	unchanged
net status	unchanged
net stop server	unchanged
net user	The [-homedir:path] parameter is not applicable. The [-remark:text] parameter is not applicable. This command is significantly different in Advanced Server/9000.
net view	The [username:[password]] parameters are not supported.

New net Commands in Advanced Server/9000

The new net commands for Advanced Server/9000 are shown in table 2. For more information about net commands in Advanced Server/9000, see the Advanced Server/9000 Administrator's Guide.

New net Commands	Description
net access	Displays or modifies resource permissions and audit options on servers with user-level security.
net accounts	Displays or sets the role of servers in a domain and displays or modifies password and logon requirements for the user accounts on a server.
net continue	Reactivates suspended services when entered at a server, and reactivates paused shared printers when entered at a client.
net group	Adds, displays, or modifies groups on servers (global groups only)
net helpmsg	Provides help for a Advanced Server/9000 error message.
net logoff	Logs off a username from the network.
net logon	Logs on a username to Advanced Server/9000 and sets the username and password for the user's client.
net pause	Suspends services or printers at a server
net start alerter	Starts the Alerter service which sends alert messages.
net start netlogon	Starts the Netlogon service which verifies logon requests and controls replication of the user accounts database on a domain-wide basis.
net time	Synchronizes the client's clock with that of a server or domain, or displays the time for a server or domain.
net version	Displays the version of the Advanced Server/9000 software currently running.

File Interlocking

The Advanced Server/9000 server supports shared file access with other servers running on the same HP-UX system when file interlocking is enabled. File interlocking will propagate client file range locks to HP-UX file system range locks. If other servers also respect HP-UX file range locks then files can be safely accessed by multiple servers. Advanced Server/9000 does not support the extended interlocking options that LAN Manager 1.x provides to support PacerShare servers.

LAN Manager 1.x has the following lanmanx.ini entry:

[ server ] interlock=yes|no|readonly|exclusive (default is no)

Advanced Server/9000 replaces LAN Manager 1.x's lanmanx.ini entry with the UseUnixLocks registry value in the AdvancedServer\FileServiceParameters key name. The UseUnixLocks registry value specifies whether record locks created by clients are reflected in the UNIX file system. The default is 0 (locks are not reflected in UNIX file system). Refer to the appendix on Advanced Server Registry in the Advanced Server/9000 Administrator's Guide for more details on use of the registry.

LAN Manager 1.x has interlock=exclusive and interlock=readonly modes to support the PacerShare product. Advanced Server/9000 does not have equivalent locking functionality.

Note also that the net file command on the server does not list locks taken out on files due to OPEN calls. The command only shows locks taken out on files due to explicit LOCK calls by clients.

Changes from LAN Manager/X to Advanced Server/9000

Technical documentation

» Table of Contents

» Index

Administering the Server

Security

Changes to net Commands

New net Commands in Advanced Server/9000

File Interlocking