AIX 7.3 Expansion Pack Release Notes

You can list the available software products, packages, and filesets on AIX media, which can be a DVD or directory. The output shows the available packages and filesets on the media. The descriptions are provided at the fileset level.

You can perform a preview installation before performing the actual installation. A preview installation provides the preinstallation information that occurs during a regular installation, except that no software is installed.

When you select a package or fileset to be installed with the preview installation process, you can view a list that contains all of the requisite packages and filesets needed for the successful installation of the selected package or fileset.

Other information generated during the preinstallation process are required for the file system-size checking. The file systems are checked to ensure that there is enough free space available to install the selected package or fileset.

You can list the software and use the previewing software functions from the command line or the SMIT interface.

1. Log in as the root user.
2. To list the software on the first DVD of the base media, insert the DVD into the media drive, and type the following command:

   installp -ld/dev/cd0 | pg

   A list similar to the following is displayed:

     fileset Name                Level                     I/U Q Content
     ====================================================================
     ICU4C.adt                   2.8.0.0                    I  N usr
   #   ICU Application Developer's Toolkit
   
     ICU4C.man.en_US             2.8.0.0                    I  N usr
   #   ICU Manual Pages - U.S. English
   

3. To perform a preview installation at the command line, use the -p flag with the installp command. For example, to preview the installation of the ICU4C.adt fileset, enter the following command from the command line:

   installp -aXgq -p -d/dev/cd0 ICU4C.adt

   The preview option displays the requisite filesets, that are to be installed and the system resources that are being used.

1. Log in as the root user.
2. From the command line, enter smitty install_update.
3. Select Install Software.
4. Press F4 (List) to list the available input devices and select the appropriate device, or type the input device name in the blank field. Press Enter to continue.
5. In the SOFTWARE to Install field, press F4 (List) to list all available software on the selected media.
6. Scroll through the list of software by using the arrow keys or the Page Up and Page Down keys.
   Note: The following listing shows the available software packages and filesets for that software product.

   If the fileset is preceded by a plus sign (+), it is available to be installed. If the fileset is preceded by an at sign (@), the fileset is already installed.

   In the following example output, the software product is ICU4C:

        ICU4C.adt                                                          ALL
         + 2.8.0.0  ICU Application Developer's Toolkit
   
        ICU4C.man.en_US                                                    ALL
         + 2.8.0.0  ICU Manual Pages - U.S. English
   
        ICU4C.rte                                                          ALL
         + 2.8.0.0  International Components for Unicode

   The three packages are ICU4C.adt, ICU4C.man.en_US, and ICU4C.rte. The fileset in the ICU4C.adt package is the ICU Application Developer's Toolkit at level 2.8.0.0. The descriptions for the software product are provided at the fileset level. A package often consist of more than one fileset.
7. Select the package or fileset you want to install and press the F7 (Edit). Press Enter to continue.
8. To preview the installation of the package or fileset that you selected, press the Tab key and select yes in the PREVIEW only? field. Press Enter to continue.
   Note: To obtain detailed information about the installation, select yes in the DETAILED output? field. The filesets that are being installed are displayed in parentheses.

OpenSSL 0.9.8 shared objects (libcrypto.so.0.9.8 and libssl.so.0.9.8) are also included in the OpenSSL 1.0.2.2102 fileset libraries for compatibility with earlier versions of OpenSSL.

OpenSSL versions 0.9.8 and 1.0.1 are no longer supported by IBM. The OpenSSL 0.9.8 shared objects are retained in the libraries as is. You should update your applications to use the newer version of the OpenSSL libraries.

Applications must use OpenSSL version 1.0.2 shared objects (libcrypto.so or libcrypto.so.1.0.0, and libssl.so or libssl.so.1.0.0) that are included in libraries of OpenSSL 1.0.2.2102 fileset to continue using the supported version of OpenSSL.

To download the latest version of the OpenSSL fileset, go to the AIX Web Download Pack Programs website.

You can now ues 64-bit kernels with the Data Encryption Standard (DES) kernel extension, nfs_kdes_full.ext. This extension uses secure Network File System (NFS) by encrypting time stamps sent between the client and the server, which allows each Remote Procedure Call (RPC) message to be authenticated.

For more information about the DES extension, see the Network File Systems security topic.

The DES encryption kernel extension is available from the des fileset on the AIX Expansion Pack.

TCP Wrapper is a simple open source tool to monitor and control incoming network traffic. For more information about the TCP Wrapper, see the Wietse's tools and papers website.

The AIX Network Data Administration Facility (AIX NDAF) for AIX 7.3 is not available on the Expansion Pack media. It is available on the base media.

IBM Security Directory Server is no longer available on the AIX expansion pack media.

IBM Security Directory Server Version 6.4 is available on the AIX 7.3 base media. To upgrade to Security Directory Server Version 6.4, you must upgrade from Security Directory Server Version 6.3. For instructions about upgrading to Security Directory Server Version 6.4, see the Upgrade an instance of IBM Security Directory Server topic.

The Modern Cryptographic Library is updated from version 6.1.0.3 to version 6.1.0.4.

The modcrypt filesets are required if the ACF and PKCS11 device driver version 7.1.3.30 (security.acf fileset) is installed on your system and if you are using a Network File System (NFS) with Kerberos 5 authentication. If your system does not meet these requirements, the system fails when the NFS gssd daemon starts.

The modcrypt fileset is compatible with Kerberos NAS 1.6.0.x, which is available in Expansion Pack and AIX Web Download Program web page, and the latest Kerberos version 1.16.1.x, which is available in the AIX Web Download Program.

The README.lang file for the AIX environment is located in the /usr/lpp/krb5 directory after the krb5.client.rte fileset is installed from the krb5.client client installation package. The README.lang file can also be viewed by using the SMIT list_media_info command to list supplemental fileset information about the installation media for the krb5.client.rte fileset.

The documentation is available in both HTML and PDF formats. Install the krb5.doc.lang.html fileset to access HTML documents and the krb5.doc.lang.pdf fileset to access PDF documents.

As mentioned in the ADMINGD.pdf, which is provided in the krb5.doc.en_US.pdf fileset, the config.krb5 command is used to configure secondary server with the LDAP backend server. However, in Network Authentication Service 1.16.1.5 version, arguments that are specified with the -L flag are not accepted and hence you do not need to specify these arguments.

Additional commands, like the kdb5_ldap_util command, is provided in Network Authentication Service 1.16.1.5 version, which can be used to configure NAS server with the LDAP backend server. The usage of the kdb5_ldap_util command is available in MIT admin command document.