About the Mac OS X Server 10.4.3 Update

This software updates Mac OS X Server 10.4.2 to version 10.4.3.

Important: Please Read Before Installing

• You must have an administrator account password that does not contain spaces or Option-keyed characters to install this update. The password may not be left blank (you can change your password if needed).
  
  
• You may experience unexpected results if you've installed third-party system software modifications, or if you have modified the operating system through other means. This doesn't apply to normal software installation.
  
  
• The installation process should not be interrupted. Monitor progress by clicking the Detailed Progress disclosure triangle. If a power outage or other interruption occurs during installation, use the standalone installer (see below) from Apple Downloads to install.
  
  
• This update can be installed on non-startup volumes, but you should only do this if the current startup volume has already been updated to Mac OS X Server 10.4.3. The simplest way to avoid issues from an improper installation is to start up from the volume that you wish to update.

Installation

There are two ways to update to Mac OS X Server 10.4.3: Use Software Update or install from a standalone installer.

Software Update Installation

Software Update may have referred you to this document. For more information on this feature, see "How to Update Your Software."

Because some updates are prerequisites for others, you may need to use Software Update more than once to get all available updates.

Standalone Installer

A standalone installer is also available from Apple Downloads. The Mac OS X Server 10.4.3 Update specifically updates version 10.4.2 to version 10.4.3. There is also a "Combo Update" installer available, which will update any version of Mac OS X Server 10.4 to 10.4.3.

Remote Installation

If you need to install the update on a remote computer, you can do so using the "softwareupdate" command-line tool.

Improvements

The following items are some of the improvements in Mac OS X Server 10.4.3 Update:

Apple File Services

• Improves AppleFileServer scalability and stability.
• Better performance when connected AFP clients go to sleep.
• Improved resharing when using identically-named NFS mounts over AFP.
• Improves compatibility with third-party AFP client software for Windows.
• Addresses a potential issue with long filenames.
• Fixes an issue involving use of Active Directory groups with POSIX permissions.
• Improves file locks between AFP and SMB.
• Any Mac OS X client or Server will see the following changes to its behavior as an AFP client when connecting to another AFP server:
  • Resource forks are no longer lost when renaming files stored on an Xsan volume while connected over AFP.
  • Clients copying to or from third-party AFP Servers experience better performance.
  • Improves sleep and wake-from-sleep reliability when using an AFP-based, networked home directory, or when connected to an AFP Server from the "Connect to Server" dialog.
  • Files changed over AFP now have expected modification times.
  • Characters used in filenames now correctly count towards their respective 31 (AFP 2.x) and 255 (AFP 3.x) filename character limits.
  • Japanese file names are no longer garbled when connecting to Microsoft Windows 2003 Server through AFP.

Directory Access Plug-ins

• NIS now honors group memberships beyond the user's primary group.
• Improves system performance when bound to an NIS network.
• Improves LDAP reliability when hosting Windows Domain Member services.
• Addresses an issue in which admin privileges were lost when "BSD Flat File and NIS" authentication was configured in Directory Access.
• Changes to an NIS map now take effect immediately for bound clients.
• Now allows some OIDs to properly view extended schema attributes in Active Directory.
• LDAPv3 plug-in has improved stability.
• Addresses an issue in which clients may stop responding during startup if bound to multiple directory nodes.
• Mac OS X Server is now compatible with a wider range of Active Directory configurations.

DNS

• Addresses an issue with DNS zone controls to allow easier configuration for reverse zones.
• Addresses an issue with DNS Admin support for IP addresses which point to a domain (example.com -> 192.168.0.10).

FTP

• FTP now correctly displays 2-byte character filenames.

Mail Services

• Improves Mail service performance and reliability.
• Now prevents IMAP-only users from accessing mail using POP.
• Addresses authentication issues with applications that are editing SIEVE configurations.
• Addresses an issue that prevented shared mailboxes for users who are members of a nested group.
• Addresses an issue in which mail forwarding configured in Workgroup Manager may not have been correctly delivered; account shortnames must use fully qualified domain names.

Managed Users

• Managed login items now use relative paths for items that reside inside a user's home directory.
• An Active Directory user with a mobile account can now log in after an administrator has reset the user's password and enabled "user must change password at next login."
• Mobile Accounts are now created properly when defined at the Group level in Active Directory with Extended schema.
• Addresses an issue in which an Active Directory Mobile Account may have been locked out due to excessive SMB password queries.
• Managed Preferences configured as "Often" in the Preference Editor (Details view) now apply at every login.
• Local users logging into a managed computer that does not belong to a managed computer list will no longer see the workgroup picker.
• Holding the Option key during local user login now reliably shows the workgroup picker.
• Restricted access to shared printers now behaves correctly.
• Simultaneous login will now be prevented in all instances for Managed Clients. (Note: this does not apply to mobile user accounts.)
• Improves integration of Single Sign On's passing 802.1X credentials to Active Directory environments from the login window.

MySQL

• Upgrades MySQL to version 4.1.13a.
• MySQL starts more reliably during system startup.

NetBoot, NetInstall, and System Imaging

• Improved support in System Image Utility for creation of images from systems with certain interim updates installed.
• Allows NetBoot to be configured on a link aggregate port.
• Now properly prevents the display of invisible files in images created with System Image Utility, as well as on NetBoot clients.

NFS

• Allows for improved handling of unresolved host names.
• A new NFS export option (-32bitclients) that provides better interoperability for some NFS clients that may display only partial contents of exported HFS directories.

Open Directory

• Improves DirectoryService performance and stability.
• Faster group membership updates and faster re-evaluation of group memberships during login.
• Addresses an issue in which changing a user's password type from Open Directory Password to Crypt Password may have unexpected results.
• Addresses an issue in which Active Directory binding may have failed due to Kerberos domain names that weren't mapped to full DNS names.

Password Server

• Password Server now reuses free Database file space rather than growing the size of the Database.
• Improves Password Server stability.
• Addresses an issue in which a global password reset may have had unexpected results.

Portable Home Directories

• Addresses issues with syncing portable home directories with a user's ~/Library folder.
• Addresses issues in which Active Directory users creating an initial mobile account dropped to Console or encountered home directory creation issues.
• Addresses an issue in which portable home directory configurations may have mounted multiple instances of the same home directory.
• When logging in and creating a Mobile user account, choosing "Never" now prevents the dialog from appearing again on that computer.
• A portable home directory now properly syncs after changing the location of the network home directory.
• Improved messages when logging users into portable home directories from multiple clients.
• Background syncing will now work when the user's network home directory is unavailable while logging in.
• A new computer on which a mobile user is logging in for the first time will no longer pause for up to 20 seconds.
• Documents stored as packages (such as Keynote and Pages documents) will no longer report a conflict when the file is modified locally.

Print Services

• Improves the restart performance of print services.

QTSS

• Resolves an issue in which a client could cause an abnormally large load on the server.
• Resolves an issue that caused some RTSP clients to fail.
• Resolves an issue that occurred when using Instant-On with Fast Start.

RAID

• Improves Software RAID reliability during creation and rebuilding.

Server Admin

• Improves experience when joining Kerberos realms—Kerberos realm information populates automatically.

Server Assistant

• Addresses serial number issues encountered when configuring multiple servers at once.

SMB

• Improves file and byte range locking support for AFP, SMB/CIFS, and NFS file sharing protocols.

Software Update Server

• Improves Software Update Server performance.
• Delivers more reliable notifications and synchronization of package downloads.
• Corrected default status view in the Overview pane of Server Admin.
• Improved sorting in the Updates pane of Server Admin.
• The Updates pane of Server Admin will now reliably indicate which updates would require a restart of the client after install.

Web Services

• Updates Apache 2 to version 2.0.54.
• Lifts the 64 Kilobyte limitation on file downloads in Apache 2.

Weblog

• Update to Blojsom version 2.25, including RSS2 compatibility in Weblog server.
• Improves handling of podcast links, filenames, and attachments.
• Improved authentication to the Weblog server now allows either a full name or alternate short name.
• Now prevents data loss when the session expires.
• Improves handling of international text.

Workgroup Manager

• Faster directory enumeration when searching or applying changes to multiple records.
• Improved batch editing when applying group memberships or updating Open Directory Passwords.
• Improved experience when creating custom home directory paths within subfolders.
• Improved support for adding international phone numbers to a record's Info pane.
• Addresses an issue in which propagating file system permissions from Workgroup Manager may have unexpectedly cleared the Executable bit.
• Addresses an issue that caused an error when creating User accounts within the DefaultLocalNode.
• Group memberships now display correctly in certain situations in which they didn't previously.
• Addresses an issue that caused computers moved from one list to another in Workgroup Manager to appear in both lists.
• Addresses an issue in which users dragged from Workgroup Manager into the Macintosh Manager application may not have behaved correctly.
• Addresses an issue in which the Preference Editor (Details view) may have deleted merged preferences.
• Addresses an issue in which the Preference Editor (Details view) may not have allowed the addition of .GlobalPreferences.
• Preference Editor (Details view) now automatically removes the MAC address when adding a ByHost preference.
• Improved Preference Editor (Details view) behavior when encountering unknown or incorrect Preference Manifest keys.

Xgrid Admin

• Addresses a memory handling issue in the Xgrid agent.
• Corrects inconsistencies in the Xgrid man page.