Naming Service Support for Lightweight Directory Access Protocol (LDAP)

Naming service support has been enhanced in the Solaris 9 release. Changes include the following:

• Simplified configuration for setup of the Sun ONE Directory Server 5.1 (formerly iPlanet Directory Server 5.1) by using idsconfig.

• A more robust security model - Supports strong authentication and TLS-encrypted sessions. A client's proxy credentials are no longer stored in a client's profile on the directory server.

• ldapaddent command - Enables you to populate and dump data onto the server.

• Service search descriptors and attribute mapping.

• New profile schemas.

For information on security features in the Solaris 9 release, including the Secure LDAP Client, see Security Enhancements. For further information, see the System Administration Guide: Naming and Directory Services (DNS, NIS, and LDAP).

NIS+-to-LDAP Migration Tools

The Solaris 9 release announces end-of-software support for NIS+ and the move to the LDAP-based naming environment. This release includes migration tools to use for migrating from NIS+ to LDAP. For more information on the NIS+ announcement, refer to the following Web site:

http://www.sun.com/directory/nisplus/transition.html

A detailed discussion of how to migrate from the NIS+ naming service to LDAP is included in the System Administration Guide: Naming and Directory Services (FNS and NIS+).

Note - In the Solaris 9 9/02 Update release, this "Transitioning From NIS+ to LDAP" appendix moved to the System Administration Guide: Naming and Directory Services (DNS, NIS, and LDAP).

IP Security Architecture for IPv6

The IPsec security framework has been enhanced in the Solaris 9 release to enable secure IPv6 datagrams between machines. For the Solaris 9 release, only the use of manual keys is supported when using IPsec for IPv6.

Note - The IPsec security framework for IPv4 was introduced in the Solaris 8 release. The Internet Key Exchange (IKE) Protocol is available for IPv4.

For further information, see "IPsec (Overview)" in System Administration Guide: IP Services.

Enhanced inetd Command

The inetd networking command has been enhanced to support the monitoring and filtering of incoming requests for network services. The server can be configured to log the client host name of incoming requests and thus enhance network security. The inetd command uses the same mechanism that is used by the Tcp-wrappers 7.6 utility. For information about Tcp-wrappers 7.6, see Freeware Enhancements.

For further information, see the inetd(1M), hosts_access(4), and hosts_options(4) man pages.

Solaris FTP Client

The Solaris FTP client has been enhanced to include support for the following:

• Using passive mode to connect to a remote host from behind a firewall

• Restarting a failed transfer from the beginning of the transfer or from a certain offset

• Setting the TCP window size to enhance the performance of file transfers

• Detecting that the remote system is another UNIX system and setting the default transfer mode appropriately for optimized performance

For information on the ftp command, see the ftp(1) man page.

Trivial File Transfer Protocols (TFTP) Enhancements

The Solaris TFTP client and server have been enhanced to support TFTP option extensions, negotiations of the blocksize, time-out interval, and transfer size.

For further information, see the tftp(1) and in.tftpd(1M) man pages. See also the RFCs 2347, 2348, and 2349.

Support for IPv6 Over ATM

Support for using IPv6 over asynchronous transfer mode (ATM) networks as specified by RFC 2492 has been introduced in the Solaris 9 release.

For further information, see the System Administration Guide: IP Services.

Enhanced snoop Packet Capture

The snoop packet capture and display tool has been enhanced to decode and filter both AppleTalk and SCTP packets.

See the snoop(1M) man page for further information on this command.

Solaris PPP 4.0

Solaris PPP 4.0 enables a system in one location to communicate over telephone lines or leased communications media with a system at a remote location. This implementation of the Point-to-Point Protocol (PPP) is based on the widely used Australian National University (ANU) PPP. Solaris PPP 4.0 is entirely new for the Solaris operating environment. PPP 4.0 is easily configured through a set of files. PPP 4.0 supports synchronous communications and asynchronous communications. PPP 4.0 provides Password Authentication Protocol (PAP) and Challenge-Handshake Authentication Protocol (CHAP) authentication. Because Solaris PPP 4.0 is highly configurable, customers can easily tailor PPP to fit their remote communications needs. Also provided is the asppp2pppd conversion script for migrating from the earlier Solaris PPP (asppp) to Solaris PPP 4.0.

PPP 4.0 now includes the PPPoE feature, which enables the use of tunneling with PPP. Support for PPPoE was introduced in the Solaris 8 10/01 release.

For further information, see the PPP section in the System Administration Guide: Resource Management and Network Services and the pppd(1M) man page.

For information on licensing terms, refer to the incorporated material at the following locations:

/var/sadm/pkg/SUNWpppd/install/copyright

/var/sadm/pkg/SUNWpppdu/install/copyright

/var/sadm/pkg/SUNWpppg/install/copyright

Sun Internet FTP Server

Sun Internet FTP Server™ is fully compatible with the Solaris 8 FTP software. The FTP Server offers new capabilities and new performance improvements for Solaris 9 users.

The Solaris 9 FTP Server is based on WU-ftpd. Originally developed by Washington University, WU-ftpd is widely used for the distribution of bulk data over the Internet. WU-ftpd is the preferred standard for large FTP sites.

Extensions to the Sun RPC Library

The RPC library extensions project extends the Sun ONC+™ RPC library with an asynchronous protocol. Programming interfaces have been added to the Transport Independent Remote Procedure Calls to provide one-way asynchronous messaging and nonblocking I/O.

For further information on ONC+ development, see the ONC+ Developer's Guide.

Enhancements to sendmail

The following new features are available in sendmail version 8.12, which is included in the Solaris 9 operating environment:

• A new configuration file, submit.cf

• New command-line options

• New and revised configuration file options

• New defined macros

• New macros that are used to build the configuration file

• New and revised m4 configuration macros

• New compile flags

• New delivery agent flags

• New queue features

• New uses for LDAP

• A method for identifying IPv6 addresses in configuration

• Changes to mail.local(1M)

• Changes to mailstats(1)

• Changes to makemap(1M)

• A new maintenance utility, editmap(1M)