AIX 5L DIFFERENCES GUIDE
CONTENTS CHAPTER 1 INTRODUCTION TO THE ENHANCEMENTS 1 1 AIX 5L VERSION 5 2 ENHANCEMENTS 1 2 AIX 5L VERSION 5 1 ENHANCEMENTS CHAPTER 2 APPLICATION DEVELOPMENT 2 1 LARGE DATA TYPE SUPPORT - BINARY COMPATIBILITY 2 2 VERY LARGE PROGRAM SUPPORT (5 2 0) 2 2 1 THE VERY LARGE ADDRESS SPACE MODEL 2 2 2 ENABLING THE VERY LARGE ADDRESS SPACE MODEL (5 2 0) 2 3 MALLOC ENHANCEMENTS 2 3 1 MALLOC MULTIHEAP 2 3 2 MALLOC BUCKETS 2 3 3 MALLOC ENHANCEMENT (5 2 0) 2 4 PTHREAD DIFFERENCES AND ENHANCEMENTS 2 4 1 DEBUG LIBRARY 2 4 2 UNREGISTER ATFORK HANDLER 2 4 3 ATFORK AND CANCELLATION CLEANUP HANDLER SUPPORT (5 1 0) 2 4 4 WAIT LIST AND PTHREAD STATE INFORMATION ENHANCEMENTS (5 1 0) 2 4 5 SIGNAL CONTEXT SUPPORT ENHANCEMENTS (5 1 0) 2 4 6 DEADLOCK DETECTION (5 1 0) 2 4 7 RESOURCE QUERY SUPPORT (5 1 0) 2 4 8 MULTIPLE READ/WRITE LOCK READ OWNERS 2 4 9 THREAD LEVEL RESOURCE COLLECTION (5 1 0) 2 5 POSIX-COMPLIANT AIO (5 2 0) 2 6 CONTEXT SWITCH AVOIDANCE 2 7 DEFUNCT PROCESS HARVESTING (5 2 0) 2 7 1 ZOMBIE HARVESTING 2 7 2 ZOMBIE HARVESTING IN VERSIONS PRIOR TO VERSION 5 2 2 7 3 ZOMBIE HARVESTING IN VERSION 5 2 2 8 SOFTWARE-VITAL PRODUCT DATA (5 1 0) 2 9 KORNSHELL ENHANCEMENTS 2 9 1 KSH93 2 9 2 NEW VALUE FOR SHELL ATTRIBUTE 2 10 PERL 5 6 (5 1 0) 2 10 1 INSTALLING MORE THAN ONE PERL VERSION 2 10 2 SECURITY CONSIDERATIONS 2 11 JAVA CURRENCY 2 12 COMMON INFORMATION MODEL 2 12 1 CIM BASE SUPPORT (5 1 0) 2 12 2 COMMON INFORMATION MODEL (5 2 0) 2 13 OPENGL 64-BIT SUPPORT IN DWA MODE (5 1 0) CHAPTER 3 RESOURCE MANAGEMENT 3 1 WORKLOAD MANAGER (WLM) 3 1 1 WORKLOAD MANAGER ENHANCEMENTS HISTORY 3 1 2 CONCEPTS AND ARCHITECTURAL ENHANCEMENTS 3 1 3 AUTOMATIC ASSIGNMENT 3 1 4 MANUAL ASSIGNMENT 3 1 5 RESOURCE SETS 3 1 6 WLM CONFIGURATION ENHANCEMENTS 3 1 7 MONITORING WLM WITH WLMMON AND WLMPERF (5 1 0) 3 1 8 WORKLOAD MANAGER ENHANCEMENTS (5 2 0) 3 2 LOGICAL PARTITIONING 3 2 1 HARDWARE MANAGEMENT CONSOLE (HMC) 3 2 2 LPAR MINIMUM REQUIREMENTS 3 2 3 MEMORY GUIDELINES FOR LPAR 3 2 4 DYNAMIC LPAR (5 2 0) 3 2 5 USING THE AIX DLPAR FRAMEWORK 3 3 CAPACITY UPGRADE ON DEMAND 3 3 1 THE CHCOD COMMAND (5 1 0) 3 3 2 ENHANCEMENT TO THE LSVPD COMMAND (5 2 0) 3 4 DYNAMIC CPU SPARING AND CPU GUARD (5 2 0) 3 4 1 CHANGE CPU GUARD DEFAULT (5 2 0) 3 5 UE-GARD (5 2 0) 3 6 RESOURCE SET SCHEDULING AND AFFINITY SERVICES 3 6 1 MEMORY AFFINITY 3 6 2 LARGE PAGE SUPPORT 3 7 RESOURCE MONITORING AND CONTROL 3 7 1 PACKAGING AND INSTALLATION 3 7 2 CONCEPTS OF RMC 3 7 3 HOW TO SET UP AN EFFICIENT MONITORING SYSTEM 3 7 4 WEB-BASED SYSTEM MANAGER ENHANCEMENTS (5 1 0) 3 7 5 RESOURCES 3 7 6 COMMAND LINE INTERFACE (5 1 0) 3 7 7 RSCT NLS ENABLEMENT (5 2 0) 3 8 CLUSTER SYSTEM MANAGEMENT 3 8 1 OVERVIEW 3 8 2 HARDWARE CONTROL AND INTEGRATION 3 8 3 AIX CONSUMABILITY 3 8 4 INTEROPERABILITY BETWEEN AIX AND LINUX CHAPTER 4 STORAGE MANAGEMENT 4 1 MULTIPATH I/O (5 2 0) 4 1 1 MPIO DEVICE DRIVER OVERVIEW 4 1 2 MPIO CONCEPTS 4 1 3 DETECTING AN MPIO-CAPABLE DEVICE 4 1 4 ODM CHANGES FOR MPIO DEVICE 4 1 5 PATH MANAGEMENT 4 1 6 THE RMPATH COMMAND 4 1 7 THE LSPATH COMMAND 4 1 8 THE CHPATH COMMAND 4 1 9 DEVICE MANAGEMENT 4 1 10 THE IOSTAT COMMAND ENHANCEMENTS 4 2 LVM ENHANCEMENTS 4 2 1 THE REDEFINEVG COMMAND 4 2 2 READ-ONLY VARYONVG 4 2 3 LVM HOT SPARE DISK IN A VOLUME GROUP 4 2 4 SUPPORT FOR DIFFERENT LOGICAL TRACK GROUP SIZES 4 2 5 LVM HOT-SPOT MANAGEMENT 4 2 6 THE MIGRATELP COMMAND 4 2 7 THE RECREATEVG COMMAND 4 2 8 THE MKVG COMMAND (5 1 0) 4 2 9 PASSIVE MIRROR WRITE CONSISTENCY CHECK 4 2 10 THREAD-SAFE LIBLVM A 4 2 11 ADVANCED RAID SUPPORT (5 2 0) 4 2 12 BAD BLOCK CONFIGURATION 4 2 13 SNAPSHOT SUPPORT FOR MIRRORED VGS (5 2 0) 4 2 14 PERFORMANCE IMPROVEMENT OF LVM COMMANDS (5 2 0) 4 2 15 UNALIGNED I/O SUPPORT IN LVM (5 2 0) 4 2 16 LOGICAL VOLUME SERIALIZATION (5 2 0) 4 2 17 THE MKLV AND EXTENDLV COMMANDS (5 1 0) 4 3 JFS ENHANCEMENTS 4 3 1 THE ROOT FILE SYSTEM OWNERSHIP (5 1 0) 4 3 2 DIRECTORY NAME LOOKUP CACHE (5 2 0) 4 3 3 THE INDIRECT FOR JFS (5 1 0) 4 3 4 COMPLEX INODE LOCK (5 1 0) 4 3 5 THE DEFRAGFS COMMAND ENHANCEMENT (5 2 0) 4 3 6 DU AND DF COMMAND ENHANCEMENTS (5 2 0) 4 3 7 RMFS COMMAND ENHANCEMENT (5 2 0) 4 3 8 INCREASED FILE DESCRIPTOR LIMIT (5 2 0) 4 3 9 FILE SIZE ENHANCEMENT (5 2 0) 4 3 10 IMPORTVG COMMAND ENHANCEMENT (5 2 0) 4 3 11 RAM DISK ENHANCEMENT (5 2 0) 4 3 12 MEGABYTE AND GIGABYTE FILE SYSTEMS (5 2 0) 4 4 THE ENHANCED JOURNALED FILE SYSTEM 4 4 1 NEW IN JFS2 4 4 2 COMPATIBILITY 4 4 3 COMMANDS AND UTILITIES CHANGES 4 4 4 JFS2 ROOTVG SUPPORT FOR 64-BIT SYSTEMS (5 1 0) 4 4 5 JFS2 PERFORMANCE ENHANCEMENTS (5 1 0) 4 4 6 JFS2 SUPPORT FOR FILEMON AND FILEPLACE (5 2 0) 4 4 7 JFS2 LARGE FILE SYSTEM (5 2 0) 4 4 8 JFS AND JFS2 FILE SYSTEM SIZES (5 2 0) 4 4 9 JFS2 LOG SIZES (5 2 0) 4 4 10 JFS2 PERFORMANCE ENHANCEMENTS (5 2 0) 4 4 11 JFS2 SNAPSHOT IMAGE (5 2 0) 4 5 VERITAS FOUNDATION SUITE FOR AIX (5 1 0) 4 5 1 VERITAS FOUNDATION SUITE ON THE AIX BONUS PACK 4 5 2 WHY USE VERITAS FOUNDATION SUITE ON AIX 4 5 3 SUPPORT FOR LVM AND JFS FOR AIX 4 6 AIX ISCSI INITIATOR VERSION 1 0 (5 2 0) 4 7 NFS ENHANCEMENTS 4 7 1 NFS STATD MULTITHREADING 4 7 2 MULTITHREADED AUTOFS 4 7 3 CACHE FILE SYSTEM ENHANCEMENTS 4 7 4 THE CACHEFSLOG COMMAND (5 1 0) 4 7 5 NFS CACHE ENHANCEMENT 4 7 6 NETGROUPS FOR NFS EXPORT (5 1 0) 4 7 7 UNMOUNT COMMAND ENHANCEMENT (5 2 0) 4 8 CD-ROM/DVD-RAM AUTOMOUNT FACILITY (5 2 0) 4 8 1 THE CDROMD DAEMON 4 8 2 USER COMMANDS FOR THE AUTOMOUNT FACILITY 4 9 UPPERCASE MAPPING FOR ISO CD-ROM (5 1 0) 4 10 COMMON HBA API SUPPORT (5 2 0) CHAPTER 5 RELIABILITY, AVAILABILITY, AND SERVICEABILITY 5 1 ERROR LOG ENHANCEMENTS 5 1 1 ELIMINATION OF DUPLICATE ERRORS 5 1 2 THE ERRPT COMMAND ENHANCEMENTS 5 1 3 LINK BETWEEN ERROR LOG AND DIAGNOSTICS 5 1 4 ERROR LOG ENHANCEMENTS (5 2 0) 5 2 TRACE FACILITY (5 1 0) 5 2 1 THE TRACE COMMAND ENHANCEMENTS 5 2 2 THE TRCRPT COMMAND ENHANCEMENTS 5 2 3 TRACE EVENT GROUPS 5 3 TRACE REPORT GUI (5 2 0) 5 4 LOADER TRACE HOOKS (5 2 0) 5 5 SYSTEM DUMP ENHANCEMENTS 5 5 1 THE DUMPCHECK COMMAND 5 5 2 THE COREDUMP() SYSTEM CALL 5 5 3 THE SNAP COMMAND ENHANCEMENTS 5 5 4 DEDICATED DUMP DEVICE (5 1 0) 5 5 5 SYSTEM DUMP FACILITY ENHANCEMENTS (5 2 0) 5 6 THE ADUMP COMMAND ENHANCEMENT (5 2 0) 5 7 SYSTEM HANG DETECTION 5 7 1 PRIORITY MANAGEMENT (5 2 0) 5 7 2 LOST I/O MANAGEMENT (5 2 0) 5 8 FAST DEVICE CONFIGURATION ENHANCEMENT 5 9 BOOT LED DISPLAYS (5 2 0) 5 10 IMPROVED PCI FRU ISOLATION (5 2 0) 5 10 1 EEH OVERVIEW 5 10 2 DETAILED DESCRIPTION OF EEH 5 10 3 EEH-SUPPORTED ADAPTERS 5 10 4 AIX ERROR LOGGING 5 10 5 ERROR LOG ENTRIES 5 11 DBX ENHANCEMENTS 5 11 1 THE DBX COMMAND ENHANCEMENTS (5 2 0) 5 12 KDB KERNEL AND KDB COMMAND ENHANCEMENTS 5 12 1 KERNEL DEBUGGER INTRODUCTION 5 12 2 NEW FUNCTIONS AND ENHANCEMENTS (5 1 0) 5 12 3 NEW FUNCTIONS AND ENHANCEMENTS (5 2 0) 5 13 LIGHTWEIGHT CORE FILE SUPPORT 5 14 CORE FILE NAMING ENHANCEMENTS (5 1 0) 5 14 1 FILE NAMING 5 14 2 ERROR LOG ENTRY (5 2 0) 5 15 GATHERING CORE FILES (5 1 0) 5 15 1 USING THE SNAPCORE COMMAND 5 15 2 USING THE CHECK_CORE UTILITY 5 16 NON-SPARSENESS SUPPORT FOR THE RESTORE COMMAND 5 17 THE PAX COMMAND ENHANCEMENTS 5 18 THE SNAP COMMAND ENHANCEMENTS (5 1 0) 5 18 1 FLAG ENHANCEMENTS 5 18 2 THE -T FLAG 5 19 THE TAR COMMAND ENHANCEMENTS (5 2 0) CHAPTER 6 SYSTEM MANAGEMENT 6 1 INSTALLATION AND MIGRATION 6 1 1 ALTERNATE DISK INSTALL ENHANCEMENT (5 2 0) 6 1 2 NIM ENHANCEMENT (5 2 0) 6 1 3 VERSION 5 2 AIX MIGRATION (5 2 0) 6 2 WEB-BASED SYSTEM MANAGER 6 2 1 WEB-BASED SYSTEM MANAGER ARCHITECTURE 6 2 2 WEB-BASED SYSTEM MANAGER ENHANCEMENTS FOR AIX 5L 6 2 3 WEB-BASED SYSTEM MANAGER PC CLIENT (5 1 0) 6 2 4 WEB-BASED SYSTEM MANAGER CLIENT FOR LINUX (5 2 0) 6 2 5 ACCESSIBILITY FOR WEB-BASED SYSTEM MANAGER 6 3 DOCUMENTATION SEARCH-ENGINE ENHANCEMENT 6 4 INFORMATION CENTER (5 2 0) 6 4 1 AIX ONLINE MESSAGE DATABASE 6 5 SOFTWARE LICENSE AGREEMENT ENHANCEMENTS (5 1 0) 6 5 1 THE INULAG COMMAND 6 5 2 THE INSTALLP COMMAND ENHANCEMENTS 6 5 3 THE LSLPP COMMAND ENHANCEMENTS 6 5 4 ADDITIONAL INFORMATION IN THE BOSINST DATA FILE 6 5 5 SYSTEM INSTALLATION (BOS INSTALL) 6 5 6 ACCEPTING LICENSES AFTER REBOOT 6 5 7 SMIT FUNCTION ENHANCED 6 5 8 LSLICENSE AND CHLICENSE ENHANCEMENT (5 2 0) 6 6 THE BFFCREATE AND LPPMGR ENHANCEMENT (5 2 0) 6 7 COMPARISON REPORTS FOR LPPS (5 2 0) 6 8 MKSYSB ON CD OR DVD (5 1 0) 6 8 1 PERSONAL SYSTEM BACKUP 6 8 2 GENERIC BACKUP 6 8 3 NON-BOOTABLE VOLUME GROUP BACKUP 6 8 4 TESTED SOFTWARE AND HARDWARE 6 9 THE MKCD COMMAND ENHANCEMENT (5 2 0) 6 9 1 ISO9660 FORMAT 6 9 2 UDF FORMAT 6 9 3 ADDITIONAL FLAGS FOR THE MKCD COMMAND 6 10 ENHANCED RESTORE COMMAND (5 2 0) 6 10 1 OVERVIEW 6 11 PAGING SPACE ENHANCEMENTS 6 11 1 DEACTIVATING A PAGING SPACE 6 11 2 DECREASING THE SIZE OF A PAGING SPACE 6 12 THE DD COMMAND ENHANCEMENT (5 1 0) 6 13 SHUTDOWN ENHANCEMENTS 6 14 CRONTAB ENHANCEMENTS (5 1 0) 6 15 SENDMAIL UPGRADE ENHANCEMENTS (5 1 0) 6 15 1 SENDMAIL 8 11 0 SUPPORTS THE BERKELEY DB 6 16 NCARGS VALUE CONFIGURATION (5 1 0) 6 17 EXTENDED HOST NAME SUPPORT (5 1 0) 6 18 OPENTYPE FONT SUPPORT (5 1 0) 6 18 1 TRUETYPE RASTERIZER 6 18 2 AGFA RASTERIZER ENHANCEMENT (5 2 0) 6 19 TERMINAL SUPPORT ENHANCEMENTS (5 1 0) 6 19 1 ANSI TERMINAL SUPPORT 6 20 NEW UTMPD DAEMON (5 2 0) 6 21 SYSTEM INFORMATION COMMAND (5 2 0) CHAPTER 7 PERFORMANCE MANAGEMENT 7 1 PERFORMANCE TOOLS 7 1 1 PERFORMANCE TOOLS REPACKAGING (5 1 0) 7 1 2 EMULATION AND ALIGNMENT DETECTION 7 1 3 PERFORMANCE MONITOR API 7 1 4 THE LOCKTRACE COMMAND (5 1 0) 7 1 5 CMDSTAT TOOLS ENHANCEMENT (5 1 0) 7 1 6 THE VMSTAT COMMAND ENHANCEMENTS 7 1 7 THE IOSTAT COMMAND ENHANCEMENTS 7 1 8 THE NETPMON AND FILEMON COMMAND ENHANCEMENTS 7 1 9 THE GENNAMES COMMAND (5 1 0) 7 1 10 THE SVMON COMMAND ENHANCEMENTS 7 1 11 THE SVMON COMMAND ENHANCEMENTS (5 2 0) 7 1 12 THE TOPAS COMMAND ENHANCEMENTS 7 1 13 FDPR BINARY OPTIMIZER 7 1 14 THE TPROF COMMAND 7 1 15 THE GENSYMS COMMAND (5 2 0) 7 1 16 THE PSTAT COMMAND (5 2 0) 7 1 17 CPU UTILIZATION REPORTING TOOL (CURT) (5 2 0) 7 1 18 SIMPLE PERFORMANCE LOCK ANALYSIS TOOL (SPLAT) (5 2 0) 7 1 19 PERFSTAT API LIBRARY (5 1 0 AND 5 2 0) 7 1 20 XPROFILER ANALYSIS TOOL (5 2 0) 7 2 AIX TUNING FRAMEWORK (5 2 0) 7 2 1 THE /ETC/TUNABLES COMMANDS 7 2 2 TUNING COMMANDS ENHANCEMENT 7 2 3 WEB-BASED SYSTEM MANAGER ACCESS 7 2 4 SMIT ACCESS CHAPTER 8 NETWORKING 8 1 QUALITY OF SERVICE SUPPORT 8 1 1 QOS MANAGER OVERLAPPING POLICIES 8 1 2 QOS MANAGER COMMAND LINE SUPPORT 8 1 3 QUALITY OF SERVICE ENHANCEMENTS (5 2 0) 8 2 BIND 9 ENHANCEMENTS (5 2 0) 8 3 TCP/IP ROUTING SUBSYSTEM ENHANCEMENTS 8 3 1 MULTIPATH ROUTING 8 3 2 DEAD GATEWAY DETECTION 8 3 3 USER INTERFACE FOR MULTIPATH ROUTING AND DGD 8 4 TCP/IP GENERAL ENHANCEMENTS 8 4 1 SPLIT-CONNECTION PROXY SYSTEMS (5 1 0) 8 4 2 TCP SPLICING (5 1 0) 8 4 3 UDP FRAGMENTATION (5 1 0) 8 4 4 TCB HEADLOCK (5 1 0) 8 4 5 EXPLICIT CONGESTION NOTIFICATION (5 1 0) 8 4 6 IPV6 API UPGRADE (5 1 0) 8 4 7 PERFORMANCE ENHANCEMENTS (5 2 0) 8 4 8 TCP/UDP INPCB HASH TABLE TUNABLE ENHANCEMENTS (5 2 0) 8 4 9 TCP KEEP ALIVE ENHANCEMENTS (5 2 0) 8 4 10 ASYNCHRONOUS ACCEPT() ROUTINE SUPPORTED (5 2 0) 8 4 11 IPV6 FUNCTIONAL UPDATE (5 2 0) 8 5 TCP/IP RAS ENHANCEMENTS (5 1 0) 8 5 1 SNAP ENHANCEMENT 8 5 2 NETWORK OPTION ENHANCEMENTS 8 5 3 THE IPTRACE COMMAND ENHANCEMENT 8 5 4 TRACE ENHANCEMENT 8 6 VIRTUAL IP ADDRESS SUPPORT 8 6 1 VIRTUAL IP ADDRESS ENHANCEMENT (5 2 0) 8 7 MOBILE IPV6 (5 2 0) 8 8 DHCP ENHANCEMENTS (5 2 0) 8 9 FTP SERVER ENHANCEMENTS (5 2 0) 8 10 NETWORK BUFFER CACHE DYNAMIC DATA SUPPORT 8 10 1 DYNAMIC DATA BUFFER CACHE 8 10 2 CACHE OBJECT-SPECIFIC EXPIRATION TIME 8 11 DIRECT I/O AND CALLBACKS FOR NBC (5 2 0) 8 11 1 CALLBACK FOR NBC 8 11 2 DIRECT I/O FOR NBC 8 12 HTTP GET KERNEL EXTENSION ENHANCEMENTS 8 12 1 HTTP 1 1 PERSISTENT CONNECTIONS SUPPORT 8 12 2 EXTERNAL 64-BIT FRCA API 8 12 3 MEMORY-BASED HTTP ENTITIES CACHING 8 13 PACKET CAPTURE LIBRARY 8 14 FIREWALL HOOKS ENHANCEMENTS 8 15 FAST CONNECT ENHANCEMENTS 8 15 1 LOCKING ENHANCEMENTS 8 15 2 PER-SHARE OPTIONS 8 15 3 PC USER NAME TO AIX USER NAME MAPPING 8 15 4 WINDOWS TERMINAL SERVER SUPPORT 8 15 5 SEARCH CACHING 8 15 6 MEMORY-MAPPED I/O (5 1 0) 8 15 7 SEND_FILE API 8 16 SMB FILE SYSTEM SUPPORT (5 2 0) 8 16 1 INSTALLING SMBFS 8 16 2 MOUNTING A FILE SYSTEM 8 17 SNMPV3 (5 2 0) 8 17 1 AIX SNMP SUBAGENT FOR ENTERPRISE MIB 8 18 INTERNET KEY EXCHANGE ENHANCEMENTS (5 1 0) 8 18 1 SECURITY ENHANCEMENTS 8 18 2 NEW SERVICEABILITY FEATURES 8 18 3 SYSTEM MANAGEMENT ENHANCEMENTS 8 18 4 NOTIFY MESSAGES 8 18 5 THE SYSLOG ENHANCEMENTS 8 19 DYNAMIC FEEDBACK PROTOCOL (5 1 0) 8 19 1 THE DFPD AGENT 8 19 2 CONFIGURATION FILE 8 19 3 REPORTS 8 20 ATM LANE AND MPOA ENHANCEMENTS 8 20 1 DEBUG OPTION (5 1 0) 8 20 2 IP FRAGMENTATION (5 1 0) 8 20 3 TOKEN-RING SUPPORT FOR MPOA 8 20 4 ATM COMMUNICATIONS SUPPORT FOR UNI AND ILMI V4 0 (5 2 0) 8 21 ATM NETWORK PERFORMANCE ENHANCEMENTS (5 2 0) 8 21 1 CHANGES TO LANE2 TIMERS DESIGN 8 21 2 CHANGES TO CHECKSUM OFFLOAD DESIGN 8 21 3 CHANGES TO DYNAMIC MTU DESIGN 8 22 ETHERCHANNEL ENHANCEMENTS (5 1 0) 8 22 1 NETWORK INTERFACE BACKUP MODE 8 23 ETHERCHANNEL BACKUP (5 2 0) 8 23 1 ETHERCHANNEL OVERVIEW 8 23 2 ETHERCHANNEL BACKUP ADAPTER 8 23 3 NETIF_BACKUP MODE 8 23 4 CONFIGURATION 8 24 VIRTUAL LOCAL AREA NETWORK (5 1 0) 8 25 AIX WEB BROWSER SUPPORT (5 2 0) CHAPTER 9 SECURITY, AUTHENTICATION, AND AUTHORIZATION 9 1 JAVA SECURITY ENHANCEMENTS (5 1 0) 9 1 1 CERTIFICATE MANAGEMENT PROTOCOL 9 1 2 JAVA CRYPTOGRAPHY EXTENSION 9 1 3 JAVA SECURE SOCKETS EXTENSION 9 1 4 PUBLIC-KEY CRYPTOGRAPHY STANDARDS 9 2 USER AND GROUP INTEGRATION 9 2 1 EXISTING AUTHENTICATION METHODS 9 2 2 IDENTIFICATION AND AUTHENTICATION ARCHITECTURE 9 2 3 NATIVE KERBEROS VERSION 5 SUPPORT 9 3 CONCURRENT GROUPS ENHANCEMENT (5 1 0) 9 4 IBM SECUREWAY DIRECTORY VERSION 3 2 9 4 1 LDAP OVERVIEW 9 5 IBM DIRECTORY SERVER VERSION 4 1 (5 2 0) 9 5 1 LDAP 64-BIT CLIENT AND C API (5 2 0) 9 6 LDAP NAME RESOLUTION ENHANCEMENT 9 6 1 IBM SECUREWAY DIRECTORY SCHEMA FOR LDAP NAME RESOLUTION 9 6 2 LDIF FILE FOR LDAP HOST DATABASE 9 6 3 LDAP CONFIGURATION FILE FOR LOCAL RESOLVER SUBROUTINES 9 6 4 LDAP-BASED NAME RESOLUTION CONFIGURATION 9 6 5 PERFORMANCE AND LIMITATIONS 9 7 LDAP SECURITY AUDIT PLUG-IN (5 1 0) 9 7 1 IMPLEMENTATION 9 7 2 CONFIGURATION FILES 9 7 3 AUDIT INFORMATION 9 8 OVERALL AIX DIRECTORY INTEGRATION (5 2 0) 9 9 DIRECTORY-ENABLED PRINTING (5 2 0) 9 10 AIX SECURITY LDAP INTEGRATION (5 2 0) 9 10 1 HOST LOGIN RESTRICTIONS FOR LDAP USERS 9 11 UPDATING PASSWORD MAPS IN NIS (5 1 0) 9 12 NIS/NIS+ INTEGRATION INTO LDAP (5 2 0) 9 13 PLUGGABLE AUTHENTICATION MODULE SUPPORT 9 13 1 PAM SERVICES (5 1 0) 9 13 2 PAM ENHANCEMENTS (5 2 0) 9 14 PUBLIC KEY INFRASTRUCTURE ENHANCEMENTS (5 2 0) 9 14 1 OVERVIEW OF PKI AND CERTIFICATE AUTHENTICATION SERVICE 9 14 2 LDAP SERVER INSTALLATION AND CONFIGURATION 9 14 3 CERTIFICATE AUTHENTICATION SERVICE CONFIGURATION 9 14 4 COMMON USER AND ADMINISTRATOR TASKS USING PKI 9 14 5 PROCESS AUTHENTICATION GROUP COMMANDS 9 15 CAPP AND EAL4+ SECURITY INSTALL (5 2 0) 9 15 1 PACKAGING SUMMARY 9 15 2 INSTALLATION STEPS 9 16 TIVOLI READINESS 9 17 TCB INTEGRATION WITH TIVOLI RISK MANAGER (5 2 0) 9 18 ENTERPRISE IDENTITY MAPPING (5 2 0) 9 19 ENHANCED LOGIN PRIVACY (5 2 0) 9 20 CRYPTOGRAPHICALLY SECURE PSEUDO-RANDOM NUMBERS 9 21 IP SECURITY ENHANCEMENTS (5 2 0) 9 21 1 IKE COMPONENTS USING /DEV/RANDOM 9 21 2 DIFFIE-HELLMAN GROUP 5 SUPPORTED 9 21 3 GENERIC DATA MANAGEMENT TUNNEL SUPPORT 9 21 4 SMIT IKE SUPPORT (5 2 0) 9 21 5 WEB-BASED SYSTEM MANAGER FOR IP SECURITY ENHANCEMENTS 9 21 6 IP SECURITY STATIC FILTER DESCRIPTION 9 21 7 CRYPTOGRAPHIC LIBRARY 9 22 SECURE RCMDS ENHANCEMENTS (5 2 0) CHAPTER 10 SYSTEM V AFFINITY 10 1 WEAK SYMBOL SUPPORT (5 2 0) 10 1 1 AIX C++ COMPILER 10 1 2 GNU C++ COMPILER AND TEMPLATES 10 1 3 DIFFERENCES BETWEEN WEAK AND GLOBAL LINKS 10 2 SYSTEM V COMMANDS (5 2 0) 10 2 1 ATRM 10 2 2 CPIO 10 2 3 DATE 10 2 4 DF 10 2 5 DFSHARES 10 2 6 DFMOUNTS 10 2 7 DIRCMP 10 2 8 DISPGID 10 2 9 DISPUID 10 2 10 GETCONF 10 2 11 GETDEV 10 2 12 GETDGRP 10 2 13 GROUPS 10 2 14 LAST 10 2 15 LDD 10 2 16 LISTDGRP 10 2 17 LN 10 2 18 LOGINS 10 2 19 MACH 10 2 20 PS 10 2 21 PWCK 10 2 22 QUOT 10 2 23 SETTIME 10 2 24 SETUNAME 10 2 25 SWAP 10 2 26 UMOUNTALL 10 2 27 WALL 10 2 28 WHODO 10 2 29 ZDUMP 10 2 30 ZIC 10 3 THE /PROC FILE SYSTEM 10 3 1 THE /PROC FILE SYSTEM ENHANCEMENTS (5 2 0) 10 3 2 /PROC/PID#/CWD 10 3 3 /PROC/PID#/FD 10 4 NEW PROCTOOLS (5 2 0) 10 4 1 PROCWDX 10 4 2 PROCFILES 10 4 3 PROCFLAGS 10 4 4 PROCCRED 10 4 5 PROCMAP 10 4 6 PROCLDD 10 4 7 PROCSIG 10 4 8 PROCSTACK 10 4 9 PROCSTOP 10 4 10 PROCRUN 10 4 11 PROCWAIT 10 4 12 PROCTREE 10 5 PROCESS SYSTEM CALL TRACING WITH TRUSS 10 5 1 TRUSS ENHANCEMENTS (5 2 0) 10 6 USER API FOR SUN THREADED APPLICATIONS (5 2 0) 10 6 1 APPLICATION BINARY INTERFACE (ABI) 10 6 2 AIX LPP PACKAGING 10 7 SYSTEM V RELEASE 4 PRINT SUBSYSTEM 10 7 1 UNDERSTANDING THE SYSTEM V PRINT SERVICE 10 7 2 PACKAGING AND INSTALLATION 10 7 3 SYSTEM V PRINT SUBSYSTEM MANAGEMENT 10 7 4 USER INTERFACE SPECIFICATIONS 10 7 5 USER INTERFACE FOR AIX AND SYSTEM V PRINT SUBSYSTEMS 10 7 6 TERMINFO AND SUPPORTED PRINTERS 10 7 7 SWITCHING BETWEEN AIX AND SYSTEM V PRINT SUBSYSTEMS 10 7 8 ENABLE DEBUGGING FOR QDAEMON 10 7 9 ENABLE DEBUGGING FOR JETDIRECT BACKEND 10 8 SMIT SYSTEM V PRINT (5 2 0) 10 8 1 INSTALLATION 10 8 2 SMIT INTEGRATION CHAPTER 11 LINUX AFFINITY 11 1 THE GENINSTALL COMMAND (5 1 0) 11 1 1 INSTALL RPM PACKAGES 11 1 2 INSTALL AIX LPPS 11 2 THE GENCOPY COMMAND (5 1 0) 11 2 1 EXAMPLES 11 3 INSTALL WIZARD FOR APPLICATIONS (5 1 0) 11 3 1 INVOKING THE WIZARD 11 3 2 EXAMPLE OF THE INSTALL WIZARD 11 4 THE DEVINSTALL COMMAND ENHANCEMENT (5 1 0) 11 4 1 THE PREVIOUS STRUCTURE OF DEVINSTALL 11 4 2 STRUCTURE OF THE NEW VERSION OF DEVINSTALL 11 5 BOS INSTALLATION ALLOWS DIFFERENT DESKTOPS (5 1 0) 11 5 1 USING A TTY CONSOLE 11 5 2 USING A LFT CONSOLE 11 5 3 USING NIM FOR BOS INSTALLATION 11 6 AIX TOOLBOX FOR LINUX APPLICATIONS 11 6 1 BASIC LINUX COMMANDS 11 6 2 SYSTEM MANAGEMENT TOOLS 11 6 3 RED HAT PACKAGE MANAGER 11 6 4 GRAPHICAL FRAMEWORK 11 7 AIX SOURCE AFFINITY FOR LINUX APPLICATIONS (5 1 0) 11 7 1 COMPILING OPEN SOURCE SOFTWARE CHAPTER 12 HARDWARE SUPPORT 12 1 AIX 5L 64-BIT KERNEL OVERVIEW 12 1 1 WHY A 64-BIT KERNEL IS NEEDED 12 1 2 64-BIT KERNEL CONSIDERATIONS 12 1 3 EXTERNAL PAGE TABLE SCALING FOR 64-BIT KERNEL (5 2 0) 12 2 INTERRUPT SATURATION AVOIDANCE (5 2 0) 12 3 HARDWARE MULTITHREADING ENABLING (5 1 0) 12 4 DVD-ROM SUPPORT (5 2 0) 12 5 KERNEL SCALABILITY FOR SMP MACHINES (5 1 0) 12 5 1 PROCH CALLOUTS IMPLEMENTATION 12 6 AUDIO SUPPORT FOR THE 64-BIT KERNEL (5 1 0) 12 7 THE MILLICODE FUNCTIONS (5 2 0) 12 8 ULTIMEDIA AND PCMCIA DEVICE RESTRICTIONS 12 9 DIAGNOSTICS ENHANCEMENTS 12 9 1 TURBOWAYS PCI ATM ADAPTER DIAGNOSTIC ENHANCEMENTS (5 1 0) 12 9 2 LS-120 FLOPPY DRIVE DIAGNOSTIC SUPPORT (5 1 0) 12 9 3 PHYSICAL LOCATION CODES (5 2 0) 12 10 COMMON CHARACTER MODE SUPPORT FOR AIX (5 1 0) 12 10 1 PCI COMMON CHARACTER MODE 12 10 2 DEVICE DRIVER CONFIGURATION 12 11 AIX CONFIGURATION COMMANDS (5 2 0) 12 11 1 THE PRTFCONF COMMAND 12 11 2 THE LSCONF COMMAND 12 12 HARDWARE SUPPORT (5 2 0) CHAPTER 13 NATIONAL LANGUAGE SUPPORT 13 1 INPUT METHODS FOR CHINESE LOCALES (5 1 0) 13 1 1 INPUT METHODS WINDOW 13 1 2 INTELLIGENT ABC INPUT METHOD 13 1 3 BIAOXING MA INPUT METHOD 13 1 4 ZHENG MA INPUT METHOD 13 1 5 PINYIN INPUT METHOD 13 1 6 INTERNAL CODE INPUT METHOD 13 2 EURO SUPPORT FOR NON-EUROPEAN COUNTRIES (5 1 0) 13 2 1 TESTING THE EURO GLYPH 13 3 NATIONAL LANGUAGE SUPPORT EURO (5 2 0) 13 4 KOREAN KEYBOARD ENABLEMENT (5 1 0) 13 5 NLS: UNICODE EXTENSION B ENHANCEMENT (5 2 0) 13 5 1 ENHANCEMENTS TO VERSION 5 2 13 6 UNICODE XOM ENHANCEMENT (5 2 0) 13 7 ADDITIONAL LOCALE SUPPORT (5 2 0) 13 8 REMOVAL OF OBSOLETE LOCALES (5 2 0) 13 9 UNICODE 3 1 SUPPORT (5 2 0) 13 10 NLS JISX0213 COMPLIANCE (5 2 0) ABBREVIATIONS AND ACRONYMS RELATED PUBLICATIONS IBM REDBOOKS OTHER RESOURCES REFERENCED WEB SITES HOW TO GET IBM REDBOOKS IBM REDBOOKS COLLECTIONS