Table Of Contents
Release Notes for Cisco Secure
User Registration Tool Release 2.0.8Clarification about Auto-Install
Collecting Troubleshooting Data from the VLAN Policy Server
Changes to AdminServerAttributes
Upgrading URT from Release 2.0.7 to Release 2.0.8
Upgrading the URT Administrative Server
Upgrading the VLAN Policy Server 1100
Verifying the VLAN Policy Server 1100 Upgrade
Installing the URT Logon Script
Installing the VPS 1100 from the VPS Recovery CD
Obtaining Technical Assistance
Release Notes for Cisco Secure
User Registration Tool Release 2.0.8
These release notes are for use with Cisco Secure User Registration Tool (URT) Release 2.0.8.
These release notes contain:
•
Upgrading URT from Release 2.0.7 to Release 2.0.8
•
•
Changes in Release 2.0.8
URT Release 2.0.8 contains the following changes:
•
•
•
Platforms Supported
URT Release 2.0.8 has been tested on the following platforms:
•
•
Clarification about Auto-Install
For the auto-install feature to work properly, the PC domain membership must match the domain of the domain\domain_user logging into the PC.
Collecting Troubleshooting Data from the VLAN Policy Server
You can collect data from VLAN Policy Server (VPS) log files and XML files to provide troubleshooting information to the Cisco Technical Assistance Center (TAC). The log files (UrtVmpsServer.log) and XML files reside in the /opt/CSCOpx/objects/urt/data directory on the VPS.
Step 1
Step 2
http://VPS_address:1741
where VPS_address is the IP address of the active VPS.
Step 3
Step 4
Step 5
Step 6
The following message is displayed:
URT VPS Server has been restarted and debug trace mode is now enabled.Step 7
Step 8
Step 9
Step 10
Step 11
The diagnostic information is saved (in compressed format) to the location you specified in Step 10. You can send this file to the Cisco TAC for troubleshooting assistance.
Step 12
Step 13
Step 14
Disabling the URT Event Bus
In the Options dialog box of the Administrative tab, the Disable URT Event Bus feature allows you to disable the TIBCO event bus to suppress the display of exception messages during client logon and logoff.
Changes to AdminServerAttributes
Three of the administrative options previously saved in UrtOptions.xml are now saved in UrtAttributes.xml.
These options, available from the URT Administrative interface by selecting View > Options, then clicking the Admin tab, are:
•
•
•
A new administrative option, Disable URT Event Bus, is also saved in UrtAttributes.xml.
Support for Netscape 7.0
The CiscoWorks front end to the VPS web interface now supports Netscape 7.0; although Netscape 6.2 is still supported, Netscape 7.0 is recommended.
Upgrading URT from Release 2.0.7 to Release 2.0.8
As part of the upgrade, you must perform some reconfiguration tasks to activate URT Release 2.0.8 in the network.
•
•
•
Upgrading the URT Administrative Server
Note
Step 1
Step 2
http://www.cisco.com/pcgi-bin/tablebuild.pl/urt
Step 3
Step 4
The installation program starts.
Step 5
Step 6
The uninstallation program begins. When uninstallation is complete, a dialog box opens.
Step 7
The installation program begins.
Step 8
Step 9
The installation program displays the destination location.
Step 10
Step 11
Note
Step 12
The installation program begins copying files to your system.
Step 13
After you restart the system, the URT Administrative Server begins to run, the URT Administrative Client Interface is installed, and URT is added to the program list in the Start > Programs menu.
Upgrading the VLAN Policy Server 1100
Note
Step 1
Step 2
Step 3
Note
Step 4
The Setup dialog box is displayed.
Step 5
Step 6
Step 7
Step 8
Step 9
Step 10
The installation process begins.
After installation has completed, you are asked if you wish to upgrade another VPS.
Step 11
Verifying the VLAN Policy Server 1100 Upgrade
After upgrading the VPS, you should verify the upgrade.
Step 1
Step 2
http://VPS_IP_address:1741/index.html.CiscoWorks2000 starts.
Step 3
Step 4
Appliance Management > Appliance Status > Software Update History.Step 5
URT Documentation
Note
The following documents are provided in PDF on your product CD:
•
•
•
Note
Use these documents to learn how to install and use URT:
•
•
•
To access online help, click the Help button while running the URT Administrative Client Interface.
Additional Information Online
For information about URT supported devices, refer to the following URL, or check the documentation on Cisco.com for the correct location:
http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/cw2000/fam_prod/user_reg/index.htm
Installation Issues
Installing the URT Logon Script
To verify that the correct Client Module version is detected, you must install the URT Logon Script.
Step 1
Step 2
Step 3
The urt.bat file is pushed to all domain controllers and the correct Client Module version is detected (and updated if required).
Installing the VPS 1100 from the VPS Recovery CD
Use the command-line interface to install the VPS from the VPS Recovery CD.
Note
•
Step 1
Step 2
Step 3
Step 4
Step 5
reimage http://192.168.1.150:9851/UrtImages/URT
Note
Step 6
Step 7
This script will re-initialize the system disk.Step 8
•
•
•
•
Note
•
Step 9
Do you wish to reload and start the install?The screen continues to refresh during this process. Reimaging is complete when the system has rebooted.
]Known and Resolved Problems
Known problems (bugs) in URT are graded according to severity level. These release notes contain descriptions of:
•
•
•
Table 1 describes the problems known to exist in this release; Table 2 describes the problems resolved since the last release of URT.
You can search for problems using the Cisco Software Bug Toolkit. To access the Software Bug Toolkit:
Step 1
Step 2
Tool Index.Step 3
Software Bug Toolkit.You can also access the Software Bug Toolkit by entering the following URL in your web browser:
http://www.cisco.com/pcgi-bin/Support/Bugtool/home.pl.
Table 1 Known Problems in URT Release 2.0.8
(Severity)CSCdw92625
(4)After performing the recovery process, the Software Update Status window erroneously reports that the URT release is 2.0 and not 2.0.8.
This occurs after using the VPS Recovery CD to reinstall the URT VPS. When using CiscoWorks2000 to check the software update status, the URT release is erroneously reported to be release 2.0 and not 2.0.8.
To work around this problem, after adding this VPS again to the URT Administrative interface, double-click the VPS IP address to display the URT VPS Server Configuration window where the server version is displayed correctly.
CSCdw84858
(3)Cannot use the NET USE command to map a drive to a Windows NT server from a Windows 95/98 system.
This is a known Novell issue; refer to Novell document ID 10024207 on the Novell web site.
For Windows 95/98ME Novell Clients, the appropriate drive mapping command to include in a DOS batch file that is run from the NetWare Server volume is:
MAP [drive_letter:] =server_name\volume\ directory\subdirectory
For Windows NT/2000, the drive mapping command within the DOS batch file is:
NET USE [drive_letter:] \\systemname\ sharename\
CSCdw46686 (3)
The client is not assigned to a user VLAN when using a Catalyst 1900 or 2820 as the access layer switch.
When using a Cisco Catalyst 1900 (v 9.00.05) or Cisco Catalyst 2820 (v 9.00.05) as an access layer switch, the client is not assigned to a user VLAN. This occurs when the client system uses any port from 1 through 9.
The logon user is assigned to a logon VLAN, but was not assigned to a user VLAN.
This problem has been resolved in Catalyst Release v 9.00.06.
CSCdw65436 (4)
Event times are not sorted chronologically in the Administrative Interface.
When you select View > History > Select All in the Administrative Interface, the Time Of Event column displays the times in nonchronological order.
There is no workaround.
CSCdw67479 (4)
Cannot check the CiscoWorks2000 Systems Status information.
When logged on to the CiscoWorks2000 Logon Manager, selecting Server Configuration > Application Management >
Software Management > Application Status >
Systems Status results in the following error:An error was encountered while processing the request. Information regarding the error is as follows: Description java.net.ConnectException: Connection refused Code 112 Additional Information Cannot process PerfMon response.To work around this problem, start the PerfMon process (which is disabled by default) using the CiscoWorks2000 interface. This process will run until the system is restarted. (See also bug ID CSCdw48789.)
CSCdw67827 (4)
More than one instance of the Administrative Interface can be opened.
Multiple instances of the URT Administrative Interface (as many as the host system memory can manage) can be opened simultaneously without triggering a warning message.
To work around this problem, do not open more than one Administrative Interface at a time.
CSCdw68416(4)
The Administrative Interface accepts invalid MAC addresses.
The Administrative Interface accepts invalid MAC addresses.
To work around this problem, you must enter the MAC address in the format 00-00-00-00-00-00.
CSCdw79430 (4)
The Group Refresh Order >
Install Script dialog box is misleading.The installation script dialog box displayed when you select a specific Windows Domain Controller (DC) in the same domain states that the URT Logon Script (URT.bat) is installed on the DC you have selected. The script is also installed on all selected DC peers in the same domain.
The install script should state:
The Logon Script will be installed on [domain_controller_name] and all of its domain peers.CSCdw81489 (3)
UrtVmpsServerAttributes.xml should be written to a subfolder.
In the VPS Servers data directory, UrtVmpsServerAttributes.xml is a critical file; if it is removed, the VPS cannot receive updated data files from the Administrative Server.
To recover, you must remove, then add the IP address of the VPS again within the
URT Administrative Interface > URT VPS folder.CSCdx60072 (3)
Switch sends out an incorrect VQP message when using a hub.
When a client is connected to a hub, the switch caches the client information (the switch port to which the hub is connected):
1.
2.
3.
There is no workaround.
CSCdx53561 (2)
The VQP sends trunking port MAC address requests.
These requests occur when the client system is connected to a dynamic switch port and another switch port is set to trunking mode.
The VQP sends a request for two MAC addresses on the switch port:
•
•
The switch behaves as if there are two MAC addresses on the switch port, causing the client to be switched back to the logon VLAN.
This behavior has been observed on Cisco Catalyst 2900XL, 2950, and 3500XL switches.
There is no workaround.
CSCin03687 (2)
The VPS goes down when installing from the VpsServerRecovery CD.
When installing the VPS Server image using the web browser from the VPS Recovery CD, the VPS goes down.
When installing the VPS from the VPS Recovery CD, you must use the command-line interface only. (See the "Installing the VPS 1100 from the VPS Recovery CD" section.)
Table 2 Resolved Problems in URT Release 2.0.8
(Severity)CSCdy00232
(2)Windows 95 client IP address was not changed dynamically during login and logout.
To resolve this problem, you must download an updated version of the Microsoft Windows Sockets 2 (Winsock 2.0) run-time components for Windows 95 from the Microsoft web site:
http://support.microsoft.com/default.aspx?scid=KB;EN-US;Q177719
Note
At this location, you can obtain msvcrt.dll and a working version of winicpfg (4.10.0.x or later) for URT.
CSCdy10491
(3)History Logging by date wrote one event to an earlier file.
This problem has been resolved.
CSCdy10901
(2)XML data files were not synchronized on the VPS.
The XML data files were not properly synchronizing on the URT VPS. Some files had the correct version number but incorrect data; other XML files had incorrect version numbers. Therefore, the data was not synchronizing properly with the URT Administrative Server.
This problem has been resolved.
CSCdy11117
(3)Windows 95 and Windows 98 systems only supported 22 VPSs from the command line.
Entering more than 22 VPSs resulted in an error message.
This problem has been resolved.
CSCdy12691
(2)Apache Web Server vulnerability.
URT uses the Apache web server for the VPS administrative interface and to upgrade the VPS.
This patch release resolves the security vulnerability described in:
http://httpd.apache.org/info/security_bulletin_20020617.txt
Note
and
http://www.cert.org/advisories/CA-2002-17.html
Note
CSCdy15341
(3)After a GroupUpdate, user no longer displayed in the UrtGroupMemberships.
This problem has been resolved.
CSCdy25989
(3)Reconfirm of switch should also set VMPS Server settings.
The URT VPS now sets the VMPS Server settings before issuing the SNMP reconfirm.
CSCdy27258
(3)TibrvException error displayed during client logon and logoff.
This problem has been resolved.
CSCdy33847
(3)Could not add task item to ClientScheduler queue because the queue limit had been reached.
Users were not being switched from the logon VLAN to the user VLAN.
This problem has been resolved.
CSCdy37123
(3)Java exception when loading users for a domain.
When double-clicking a domain, a Java exception displayed in the DOS window; the error was captured in a log file.
This problem has been resolved.
CSCdy38114
(3)Client sent out 300 ping packets to verify that the link was up.
The ping interval has been significantly shortened.
CSCdy47395
(2)Space embedded in the system variable was not recognized.
On some clients, the %TEMP% system variable is defined as:
C:\DOCUME~1\ADMINI~1\LOCAL SETTINGS\TempThe space between LOCAL and SETTINGS caused the remainder of the command to be truncated.
The URT.BAT script has been changed so that all occurrences of the %TEMP% variable are enclosed in quotation marks, as in the following example:
"%TEMP%\OnOffHandler" -domaindomain_name -trace -logoffDelay 7 -exec "y:\posturt.bat"CSCdy49007
(4)URT client file system needed domain access rights.
If the client file system is locked, the domain controller, which requires write access to the files, cannot update the client files upon logon. In these situations:
•
•
•
To work around this problem, you must grant Domain Controller rights to the client.
CSCdy50233
(5)Need more information about resynchronizing mobile clients.
URT allows a client to disconnect from one port and move to another port without logging off. If users disconnect their systems by unplugging a cable, logoff takes approximately 10 minutes (the time it takes for two synchronizing messages to be generated).
When connecting to a new port, it takes the VPS approximately 4 to 5 minutes to reinitialize the client on the new port.
To work around this problem, log off, then logon again.
CSCdy50527
(3)No online help associated with Disable Event Bus feature.
At the bottom of the Customize > Options > Administrative window is a check box to enable or disable the "Disable URT Event Bus feature." If you click Help, no help topic is available.
The following information should be associated with the Help button:
"Use this option to enable or disable the TIBCO event bus."
CSCdy61171
(2)Auto-install failed on some Windows clients.
This problem has been resolved.
Obtaining Documentation
These sections explain how to obtain documentation from Cisco Systems.
World Wide Web
You can access the most current Cisco documentation on the World Wide Web at this URL:
Translated documentation is available at this URL:
http://www.cisco.com/public/countries_languages.shtml
Documentation CD-ROM
Cisco documentation and additional literature are available in a Cisco Documentation CD-ROM package, which is shipped with your product. The Documentation CD-ROM is updated monthly and may be more current than printed documentation. The CD-ROM package is available as a single unit or through an annual subscription.
Ordering Documentation
You can order Cisco documentation in these ways:
•
http://www.cisco.com/public/ordsum.html
•
http://www.cisco.com/go/subscription
•
Documentation Feedback
You can submit comments electronically on Cisco.com. In the Cisco Documentation home page, click the Fax or Email option in the "Leave Feedback" section at the bottom of the page.
You can e-mail your comments to bug-doc@cisco.com.
You can submit your comments by mail by using the response card behind the front cover of your document or by writing to the following address:
Cisco Systems
Attn: Document Resource Connection
170 West Tasman Drive
San Jose, CA 95134-9883We appreciate your comments.
Obtaining Technical Assistance
Cisco provides Cisco.com as a starting point for all technical assistance. Customers and partners can obtain online documentation, troubleshooting tips, and sample configurations from online tools by using the Cisco Technical Assistance Center (TAC) Web Site. Cisco.com registered users have complete access to the technical support resources on the Cisco TAC Web Site.
Cisco.com
Cisco.com is the foundation of a suite of interactive, networked services that provides immediate, open access to Cisco information, networking solutions, services, programs, and resources at any time, from anywhere in the world.
Cisco.com is a highly integrated Internet application and a powerful, easy-to-use tool that provides a broad range of features and services to help you with these tasks:
•
•
•
•
•
If you want to obtain customized information and service, you can self-register on Cisco.com. To access Cisco.com, go to this URL:
Technical Assistance Center
The Cisco Technical Assistance Center (TAC) is available to all customers who need technical assistance with a Cisco product, technology, or solution. Two levels of support are available: the Cisco TAC Web Site and the Cisco TAC Escalation Center.
Cisco TAC inquiries are categorized according to the urgency of the issue:
•
•
•
•
The Cisco TAC resource that you choose is based on the priority of the problem and the conditions of service contracts, when applicable.
Cisco TAC Web Site
You can use the Cisco TAC Web Site to resolve P3 and P4 issues yourself, saving both cost and time. The site provides around-the-clock access to online tools, knowledge bases, and software. To access the Cisco TAC Web Site, go to this URL:
All customers, partners, and resellers who have a valid Cisco service contract have complete access to the technical support resources on the Cisco TAC Web Site. The Cisco TAC Web Site requires a Cisco.com login ID and password. If you have a valid service contract but do not have a login ID or password, go to this URL to register:
http://www.cisco.com/register/
If you are a Cisco.com registered user, and you cannot resolve your technical issues by using the Cisco TAC Web Site, you can open a case online by using the TAC Case Open tool at this URL:
http://www.cisco.com/tac/caseopen
If you have Internet access, we recommend that you open P3 and P4 cases through the Cisco TAC Web Site.
Cisco TAC Escalation Center
The Cisco TAC Escalation Center addresses priority level 1 or priority level 2 issues. These classifications are assigned when severe network degradation significantly impacts business operations. When you contact the TAC Escalation Center with a P1 or P2 problem, a Cisco TAC engineer automatically opens a case.
To obtain a directory of toll-free Cisco TAC telephone numbers for your country, go to this URL:
http://www.cisco.com/warp/public/687/Directory/DirTAC.shtml
Before calling, please check with your network operations center to determine the level of Cisco support services to which your company is entitled: for example, SMARTnet, SMARTnet Onsite, or Network Supported Accounts (NSA). When you call the center, please have available your service agreement number and your product serial number.
This document is to be used in conjunction with the documents listed in the "URT Documentation" section.
Copyright © 2002, Cisco Systems, Inc.
All rights reserved.
