HELIOS UB2 Release Notes  

1 HELIOS UB2 Release Notes

This document does not cover all features of the HELIOS products. It explains changes to the existing UB+ product generation. Please visit the HELIOS website for the complete product information. The new product family is called HELIOS UB2. The main goal was to stay compatible, to allow easy upgrades and to keep existing sites working. The new features mainly focus on introducing newer protocol features, tuning the software for additional performance gains, and making the software most reliable. Additional capabilities like Spotlight and remote proofing support will make the products even more productive for many clients.

1.1 Installation & prerequisites

Visit the HELIOS Platforms web page to check the different supported OS versions. See the requirements for Mac OS X in 1.4 “HELIOS Base UB2”. The requirements for Linux are:

A fresh installation or an over install will work as documented in the HELIOS Base manual.

Important:

If you use Windows AD/PDC user authentication, please read 1.4.1 “New PDC authentication in UB2” before installing UB2!

1.1.1 Migration from UB+ to UB2

Read the notes on the migration to the UB2 product generation on the HELIOS website:
www.helios.de Go to Support > Product Specific Support.

1.1.2 Newly supported OS in HELIOS UB2

1.1.3 Virtualization with Solaris zones

UB2 installs and runs (without AppleTalk) within a Solaris 11 zone. However, Solaris 11 zones have received limited testing and there are still kernel panics which need to be investigated. Therefore, we cannot recommend deploying on zones at present.

1.2 Updated UB2 manuals

HTML versions of all UB2 manuals are available at:
www.helios.de/web/EN/support/manuals.html

The manuals received a lot of fine tuning, and all UB+ and UB2 introduced features as well as new preferences are documented. The Spotlight documentation is a separate online document (Index Server UB2).

The documentation is now based on an entirely new HTML and PDF production. The HTML versions have been optimized for easy reading and navigation within a web browser. We are confident that the HTML versions now have the same quality as the PDF version. Navigation in HTML is even better.

1.3 AppleTalk is optional in HELIOS UB2

For many environments there is no need for AppleTalk anymore. In Mac OS X 10.6, AppleTalk has been removed entirely by Apple. On Linux, AppleTalk support depends on the kernel configuration (see the HELIOS Support website for details). All HELIOS EtherShare services are supported over TCP/IP, including HELIOS printer drivers for Mac OS X and Mac OS 9.

Therefore we decided to make the AppleTalk support optional in HELIOS UB2. The legacy services “atalkd”, “admsrv”, “mailsrv”, “termsrv” and “timesrv”, which are only needed for Mac OS 9 or older clients, are also optional.

New HELIOS UB2 installations

AppleTalk support is off by default. The AppleTalk kernel modules are not loaded, and the legacy services are not started. The EtherShare file server, print server etc. run using TCP/IP only. If AppleTalk support is required, it can be enabled after the UB2 installation (see below).

Upgrade existing installations

Upgrading to HELIOS UB2 does NOT remove AppleTalk support. The kernel modules and all services continue running. But you can remove AppleTalk support and the legacy services after the installation of HELIOS UB2.

hsymInstruction

To remove AppleTalk support, enter the following commands as superuser:

# cd /usr/local/helios
# bin/stop-helios
# sbin/atsupport uninstall
# bin/start-helios

This unloads the AppleTalk kernel modules from the system, and also disables the services “atalkd”, “admsrv”, “mailsrv”, “termsrv”, and “timesrv”.

hsymInstruction

To enable AppleTalk support, enter the following commands as superuser:

# cd /usr/local/helios
# bin/stop-helios
# sbin/atsupport install
# bin/start-helios

This installs the AppleTalk kernel modules and also enables the services “atalkd”, “admsrv”, “mailsrv”, “termsrv”, and “timesrv”.

hsymInstruction

If you need AppleTalk support (e.g. for printing via PAP), but not the legacy services, execute the following commands as superuser:

# cd /usr/local/helios
# bin/stop-helios
# sbin/atsupport driver-only
# bin/start-helios

This installs the AppleTalk kernel modules (and “atalkd”), but disables the services “admsrv”, “mailsrv”, “termsrv”, and “timesrv”.

AppleTalk on Mac OS X

On Mac OS X 10.4/10.5, AppleTalk must be activated or deactivated in “System Preferences > Network > Advanced … > AppleTalk”. The “atsupport” script (in “HELIOSDIR/sbin”) is only used to enable or disable the services “admsrv”, “mailsrv”, “termsrv”, and “timesrv”.

Mac OS X 10.6 does not support AppleTalk at all. The services “admsrv”, “mailsrv”, “termsrv”, and “timesrv” are disabled automatically.

1.4 HELIOS Base UB2

1.4.1 New PDC authentication in UB2

UB2 offers a new PDC authentication which has several advantages over the previous version:

Requirements

The new PDC authentication requires the HELIOS PDC Logon service to be installed on the Windows host that should act as the PDC to the HELIOS installation. This host does not have to be a Primary or Backup Domain Controller; any Windows host that is part of the desired domain will do.

HELIOS PDC Logon is installed by running “setup.exe” in “HELIOS_APPS\​Windows\​AuthServer Tools\​HELIOS PDC Logon”.

Migration from UB+

The new PDC authentication is active by default. The following steps are necessary for a successful migration:

hsymInstruction

Install UB2.

hsymInstruction

On the Windows host install the HELIOS PDC Logon service.

hsymInstruction

On the Windows host optionally remove the network share including contents created by the previous HELIOS PDC configuration. By default, this share resides at “C:\​Windows\​heliosauth”. This share is not used by the new PDC authentication.

hsymInstruction

If PDC user or group names are already listed in the “HELIOSDIR/​var/​conf/​authsrv.cache” cache file from a previous UB+ installation, the new “authsrv” will keep these mappings to UNIX user and group IDs. Thus, the consistency of ID mappings is kept also for old users and groups.

PDC related “authsrv” preference keys

Programs/authsrv/PDCCompat (Bool)
Off by default. Setting this preference to TRUE activates the old UB+ PDC authentication mechanism which uses the “heliosauth” share.

Programs/authsrv/PDCCompatIDMap (Bool)
On by default. If set, the new PDC authentication looks into the “HELIOSDIR/​var/​conf/​authsrv.cache” file to map PDC user and group names to UNIX user and group IDs of previous HELIOS installations. If this file does not exist or this preference is switched off, all PDC users and groups get a PDC domain specific and unique UNIX ID. This new ID will be different to the ID set in the “authsrv.cache” file.

1.4.2 HELIOS PDC Logon

HELIOS PDC Logon is installed as a Windows service. The service can be stopped or started using the Windows “Services” utility, or the command: net stop/start heliospdclogon.

Group inclusion and exclusion

On Windows, domain users can be members of many groups. In contrast, some UNIX variants only allow a very limited number of groups per user. To overcome this hurdle, HELIOS PDC Logon can report to the “authsrv” only a subset of the groups PDC users are members of.

At startup HELIOS PDC Logon tries to read in two files “group-include.txt” and “group-exclude.txt”. These files reside where HELIOS PDC Logon is installed. In a default installation this would be “C:\​Program Files\​HELIOS PDC Logon”.

As its name suggest, “group-include.txt” specifies allowed group names, i.e. any PDC group not mentioned there is ignored. Likewise, “group-exclude.txt” specifies group names that are ignored, i.e. all PDC groups not mentioned there are allowed. The exclude list takes precedence over the include list, i.e. a group name that is in both files is filtered out nonetheless.

Group filter file format

The group files must be UTF-8 encoded. The files have to start with the magic line: # heliospdclogon filter file. The groups must be listed line-separated.

HELIOS PDC Logon needs to be restarted if the group filter files were changed.

1.4.3 Mapping of Windows SIDs to UNIX user and group IDs

Windows uses SIDs (Security Identifiers) to identify users and groups. HELIOS PDC Logon uses a consistent mapping from SIDs to UNIX user and group IDs:

The old UB+ preferences PDCUserFirstId, PDCUserLastId, PDCGroupFirstId and PDCGroupLastId (HELIOS Admin options First User ID, Last User ID, First Group ID and Last Group ID) are no longer used.

1.4.4 Troubleshooting

Authentication does not work
Group inclusion/exclusion does not work

1.5 HELIOS Base UB2 for Windows

1.6 HELIOS EtherShare UB2

1.7 HELIOS PCShare UB2

1.8 HELIOS WebShare UB2

1.9 HELIOS ImageServer UB2

1.10 HELIOS PDF HandShake UB2

1.11 HELIOS PrintPreview UB2

Existing PrintPreview queue based soft and hard proofing, as well as “psrip” features are still fully supported, basically all proofing/reviewing capabilities are moved to PrintPreview UB2.

1.12 HELIOS Script Server UB2

1.13 HELIOS Tool Server UB2


HELIOS Website © 2011 HELIOS Software GmbH  
HELIOS Manuals October 6, 2011