IRIX 6.4 Applications 1997 August

home *** CD-ROM | disk | FTP | other *** search

/ IRIX 6.4 Applications 1997 August / SGI IRIX 6.4 Applications 1997 August.iso / relnotes / license_eoe / ch7.z / ch7

Wrap

Text File | 1997-08-01 | 111.9 KB | 3,169 lines

- 1 - 5. _G_l_o_b_e_t_r_o_t_t_e_r__F_L_E_X_l_m__R_e_l_e_a_s_e__N_o_t_e_s Flexible License Manager Version 5.11 RELEASE NOTES February 5, 1997 These release notes describe the changes from FLEXlm v5.0 The release notes for FLEXlm v5.0 appear below. OVERVIEW ________ o lc_hostid() -- improved hostid interface. o LM_A_RETRY_CHECKOUT attribute -- improved checkout reliability o SUPERSEDE="feat1 ... featn" -- New license file option. Allows one feature to supersede any other previous feature lines. o PLATFORMS="plat1 ..." -- license can lock to particular hardware platforms. o Serial Number hostid (ID=nnnn) -- for licensing without requiring real end-user hostid. o lmdiag can checkout individual INCREMENT lines. o WARNING() -- improved status reporting for Lenient Licensing. o PERROR(), PWARN() -- easier Windows programming. o MAX -- New End-User option allows sysadmin to prioritize use amongst groups. o TIMEOUTALL -- Easier way to TIMEOUT all features via end-user options file. o lc_checkin(...LM_CI_ALL_FEATURES...) -- You can now checkin all features with one call. This gives a more accurate log in REPORTLOG than simply exiting. o LM_A_TCP_TIMEOUT -- Automatically retrieves licenses even when users turn off their computers (especially Windows). o CPU Usage is now logged to REPORTLOG file. Vendors can now charge based on process CPU Usage, and users can do internal billbacks also based on CPU Usage. o CPU_USAGE_INTERVAL, CPU_USAGE_DELTA -- Users can fine-tune how much CPU-Usage information is logged. - 2 - o Improved security for expiration dates. o makekey is improved -- easier to use for more flexible. o lmswitchr -- improved command-line interface. o End-User Options file now supports PACKAGE names. o lmdiag -- REPORTLOG now ignores lmdiag checkouts. Important Note ______________ The ENCRYPTION_SEED1 and ENCRYPTION_SEED2 in lm_code.h are numbers which are key to FLEXlm security. They are 0x87654321 and 0x12345678 by default. Each vendor must ensure that you replace these with numbers which are unique to your company, and keep these numbers secret. Only someone with access to these numbers can generate license files that will work with your application. MAKE SURE the numbers are not left to the defaults. Notice of Future Changes ________________________ Discontinuing "man" Pages _________________________ Starting with v6 of FLEXlm, we will no longer ship a "man" directory, with Unix-style man pages. These seem to be more rarely used these days, and we ship HTML files which provide a more popular on-line interface. Discontinuing debug_libs directory __________________________________ Starting with v6 of FLEXlm, we will no longer ship a debug_libs directory. New Features in V5.1 ____________________ lc_hostid() -- improved hostid interface. _________________________________________ int lc_hostid( LM_HANDLE *job, int id_type, char buf[MAX_CONFIG_LINE]) lc_hostid() fills in buf with a hostid string - 3 - specified by type. If type is HOSTID_DEFAULT, you get the default hostid type on the system. Hostids have become more flexible in recent versions, and this allows programmers access to hostid information in string format. It's recommended in the future that programmers use this function and avoid functions that deal with (HOSTID *) struct information, since this may change from version to version. Note that lc_hostid may return a space-separated list of hostids, if that's appropriate on a given system. Hostid types are specified and described in lmclient.h and include HOSTID_LONG HOSTID_ETHER HOSTID_ANY HOSTID_USER HOSTID_DISPLAY HOSTID_HOSTNAME HOSTID_ID_MODULE HOSTID_STRING HOSTID_FLEXID1_KEY HOSTID_DISK_SERIAL_NUM HOSTID_INTERNET HOSTID_DEMO HOSTID_FLEXID2_KEY HOSTID_FLEXID3_KEY HOSTID_FLEXID4_KEY HOSTID_FLEXID5_KEY HOSTID_SERNUM_ID HOSTID_VENDOR HOSTID_DEFAULT lc_hostid returns 0 on success, and the FLEXlm errno on error. LM_A_RETRY_CHECKOUT attribute _____________________________ When true, checkouts that fail due to communications errors are automatically retried once. Often this second attempt will succeed on networks with poor communications. This is turned on by default in both the Simple and Trivial API, and the default is off in the FLEXible API. Use lc_set_attr(job, LM_A_RETRY_CHECKOUT, (LM_A_VAL_TYPE)1); to turn this attribute on for the FLEXible API (recommended). It's turned off by default in the FLEXible API so that previous default behavior is preserved. License File Enhancments ________________________ - 4 - SUPERSEDE List ______________ SUPERSEDE SUPERSEDE="feat1 ... featn" SUPERSEDE=*ALL* SUPERSEDE (new in v5.0) can now take a list of features to supersede. This means that you can ship a single feature line which, if installed, will make other features with previous ISSUED dates unavailable to your customers. This is a way to securely phase out FEATUREs already shipped. If the list is "ALL", then all previously issued FEATURE lines are disabled. PLATFORMS="..." _________________________ This allows you to restrict usage to particular hardware platforms. The platforms are defined as the same platforms that are used to license FLEXlm itself: sun4_u4, i86_n3, etc. The names can be found in the Platform Specific Notes section at the bottom of this file. Note that the platform name can be overridden with lc_set_attr(job, LM_A_PLATFORM_OVERRIDE, (LM_A_VAL_TYPE)str); Note that the trailing digit in the platform name is ignored, and can be optionally left off in the name. If the platform list differs in any way for 2 INCREMENT lines for the same feature-name, they're are pooled separately and counted separately. Examples: FEATURE f1 ... PLATFORMS=sun4_u4 INCREMENT f2 ... 1 PLATFORMS="i86_w alpha_u" INCREMENT f2 ... 1 PLATFORMS="i86_w" f1 can be used on any sparc station running SunOS or Solaris. f2 can be used on a PC running Windows (not NT) and Dec Alpha running OSF1 or DEC-Unix. There's 1 license that can be shared between all Windows and Alpha-Unix systems, and 1 more license just for Windows. That is, at most 1 f2 can be used on the Alpha-Unix systems, but at most 2 f2s can be used by Windows systems. - 5 - If the checkout fails because it's on the wrong platform, the error returned is LM_PLATNOTLIC: "This platform not authorized by license" ID=1234 HOSTID ______________ We now support a pseudo-hostid of "ID=...". This is functionally equivalent to the "ANY" hostid -- it will run on any node. The difference is that the customer has a unique identifier that can be used to identify the customer. This hostid can be used to lock the license server (on the SERVER line) or the client node (on the FEATURE/INCREMENT line) -- anywhere a hostid can be used. The number can have dashes included for readability -- the dashes are ignored. Examples: ID=12345678 is the same as ID=1234-5678 is the same as ID=1-2-3-4-5-6-7-8 The HOSTID struct for this type is setup thus: type = HOSTID_SERNUM_ID id.string contains the id in string format. lmdiag can now checkout individual INCREMENT or FEATURE lines _____________________________________________________________ If a license file contains multiple lines for a particular feature, you can now select a particular line for lmdiag to report on. For example: lmdiag f1:HOSTID=12345678 will attempt a checkout on the line with the hostid limited to 12345678 The full syntax is: lmdiag feature:specification=value where: feature feature name specification one of the following: VERSION HOSTID - 6 - EXPDATE KEY VENDOR_STRING ISSUER NOTICE dist_info user_info asset_info value the value specifies a particular line. WARNING(): Warning messages for Simple and Trivial API ____________________________________________________ With LM_LENIENT and LM_FAILSAFE, a CHECKOUT or lp_checkout() call may succeed, while the license was not actually checked out. In this case, an application may want to inform the user of the condition, while still running. If there is a warning condition: 1) CHECKOUT() and lp_checkout() will return 0 (success), 2) lp_warning() and WARNING() will return a string describing the warning condition. If there is no warning condition (the license was fully checked out from the server), then lp_warning() and WARNING() will return 0 (NULL). PERROR(), PWARN(), lp_perror() and lp_pwarn() ___________________________________________________________ These Trivial and Simple API functions all print error and/or warning messages to the user. Windows: The messages appear in popups. Unix: The messages are printed to stderr. These functions are most useful on windows systems, since the popups are convenient for programmers and end-users. End User Options File Enhancments ___________________________________ MAX ___ Syntax: MAX numlic featurename type name Example: MAX 4 f1 GROUP accounting MAX gives your customers significantly more flexibility in how they prioritize use of licenses at their site. In past, - 7 - you could RESERVE licenses for individuals, or prevent individuals from using licenses, but with MAX, you can now indicate that a particular GROUP has a maximum use. You can also specify USER, HOST, HOST_GROUP, etc. as with all end-user options. If a checkout exceeds the maximum, they will see the following error message: Checkout exceeds MAX specified in options file (-87,147) TIMEOUTALL __________ This works the same as TIMEOUT, but applies to all features: TIMEOUTALL 1000 All features are timed out in 1000 seconds. See the Programmers and/or End-User manual for more information on TIMEOUT behavior. End-user Options features can now be PACKAGE names __________________________________________________ If you specify a PACKAGE name in the options file, it will apply to all features in that package. This is true for both regular PACKAGEs and OPTIONS=SUITE. lc_checkin() now takes LM_CI_ALL_FEATURES _________________________________________ The feature for lc_checkin can now be LM_CI_ALL_FEATURES (which is actually a NULL pointer). This will check in all features currently checked out. This has nearly the same effect as calling lc_disconn() or even lc_free_job(). However, since a checkin message is actually sent to the server, the REPORTLOG logs this as a normal checkin(). checkins that occur because of a disconnect are indicated differently in the log, so that end-users could differentiate between an application that actually calls checkin, and one that simply exits. IMPORTANT: If you use LM_CI_ALL_FEATURES (in the client) with ls_infilter (in the vendor daemon), then ls_infilter MUST check the feature name against LM_CI_ALL_FEATURES, which is actually a NULL pointer. Failure to do so may result in a crash. That is, you must check: if (feature != LM_CI_ALL_FEATURES) - 8 - LM_A_TCP_TIMEOUT ________________ If a client node crashes or the client node is disconnected from the network, the license will be automatically checked back in in LM_A_TCP_TIMEOUT seconds. default: 2 hours (60*60*2). Maximum value: 4 hours 15 minutes (15300 seconds), or 0 means NO TCP timeout. Minimum value: 60 seconds CPU Usage is now logged to REPORTLOG file. __________________________________________ CPU Usage is now automatically always logged when the REPORTLOG file is in use. In addition, this can be fine-tuned by the end-user with 2 settings in the end-user options file. The settings allow the user to limit how much CPU-usage is logged, thereby reducing log file size. By default, CPU-usage is only logged at checkout and checkin. However, it can also be logged with heartbeats enabling more accurate and fine-tuned CPU-usage reporting. REPORTLOG filename [ CPU_USAGE_INTERVAL = {n|CONTINUOUS} ] [CPU_USAGE_DELTA = n] CPU_USAGE_INTERVAL=n -- CPU-usages from heartbeats will be reported no more often than once every n minutes. Default is a huge number. "CONTINUOUS" is the same as 0, but is easier to read. CPU_USAGE_DELTA=n -- n is in tenths of a second of CPU time. Only log CPU-usage if it has changed from the last log by n/10 seconds of CPU-time. Improved Expiration Date Checking _________________________________ FLEXlm now automatically makes the following checks to ensure security of the expiration date. These checks ONLY occur if the license to be granted is expiring. 1) If the date on the system running the license server has been set back more than 24 hours, checkout fails with LM_BADSYSDATE 2) If the client is NOT using USE_SERVER or port@host, the checkout fails if the client node's system date has been set back more than 24 hours. - 9 - 3) If the client's date differs by more than 24-hours from the server's date. FLEXible API Changes ____________________ lc_baddate and lc_set_attr(...LM_A_MAX_TIMEDIFF) are now disabled _________________________________________________________________ These checks are modified and automatically performed, so these calls are no longer needed. For compatibility, the functions can be called, but they don't do anything. We found some cases on Unix with the date expiration routines (identified as bug P2181), which caused a checkout to hang or take a long time. In order to fix these cases, the routines which detect a systems date being set back do not detect a set-back date as often as they did previously. lc_expire_days returns LM_FOREVER on unexpiring license _______________________________________________________ If the license doesn't expire, the expiration date is set to 1-jan-0, and lc_expire_days will return LM_FOREVER, which is defined to be 9999. In version 5.0, lc_expire_days returned the number of days until a date in the year 2038. Other Enhancements __________________ makekey prompts are more helpful ________________________________ The makekey license generator now has a simplified, more helpful interface, and supports the all FEATURE attributes. lmswitchr accepts daemon name _____________________________ lmswitchr syntax is now: lmswitchr [ -c license_file ] daemon new-file, or lmswitchr [ -c license_file ] feature new-file - 10 - It used to only accept a feature name. It now accepts a daemon name also, and this is usually easier to use. lmgrd -nfs_log -- faster logging ________________________________ The -nfs_log is used to turn off fflush() commands to both the debug log and REPORTLOG files. Through internal testing we've discovered that fflush() can, on some systems, noticeably slow down the servers when they log to files that are NFS-mounted. In practice we recommend that log files NOT be NFS-mounted, but if you must do this, -nfs_log is then recommended. This may mean that the log files will be behind by a transaction or two, but in practice we find that -nfs_log actually makes no noticeable change, except to make the servers run faster. lmdiag: server logs do not record checkout ___________________________________________ In previous versions, when lmdiag checked out a license from the server, the server logs recorded the checkout. The logs now no longer are affected by lmdiag. lmcrypt: -f is now the default ______________________________ In previous versions lmcrypt required -f to encrypt a line already encrypted. This is now the default behavior and doesn't require the -f argument. If you prefer the old behavior, it can be modified in machind/lmcrypt.c. The -f argument now has no effect. Other Changes _____________ makekey.c now uses lc_cryptstr() ________________________________ makekey source now uses lc_cryptstr() as encrypting function. It previously used lc_crypt(), which is a harder function to use and maintain across FLEXlm versions. We now recommend that lc_cryptstr() be used - 11 - in its place. Bug fixes: __________ Bug Platform Description P1039 all lmcrypt and lc_cryptstr() ignore FEATURESET. P1414 all lmcrypt doesn't always truncate license file lines to 80 characters. Note that this fix only applies to lines that are in the v4+ format -- to force this, add ck=0 attributes to each line. P1460 all In rare cases, checkouts with LM_A_CHECKOUT_DATA and LM_DUP_VENDOR can become orphaned and never checked in. P1499 Win32 lsvendor.c defaults ls_minimum_user_timeout to 30 seconds. P1488 all lc_expire_days() returns number of days until max-unix date if no expiration. Fix is to return LM_FOREVER. P1506 all hostid lists should force FEATURE lines to be printed in "new" new format, i.e., HOSTID="..." P1511 all If TIMEOUT set, if the client tries to do a checkout between when the server frees the license and the client does a heartbeat, communications fail. rare. P1593 all lmdiag core dumps if no SERVER line in license file. P1602 all lc_heartbeat() doc is missing from Reference Manual. P1603 all copyright was a global symbol. All FLEXlm global symbols should have "l_" or "lc_" prefix. P1619 all lmstat reports non-suite PACKAGE name as "Error" P1621 all 1 process checks out 2 SUITE components, then checks 1 in: SUITE-token should remain checked out, but is not. P1658 all The following end-user options file syntax did not RESERVE the right FEATURE line: "RESERVE ... feature:HOSTID=nnn" P1659 all lmdiag: If there's several INCREMENT or FEATURE lines for the same feature name, lmdiag only reported on the last line. P1674 all lc_test_conf after checkout with LM_CO_LOCALTEST returned null if using port@host or USE_SERVER. P1676 all CHECKIN the same feature twice resulted in a core dump. P1708 Win32 Server log says "Unknown Signal" from lmdown. P1715 all vendor-defined hostids fail if the vdef hostid routine returns lowercase characters. P1728 all On some platforms, LM_PROJECT environment variable can cause vendor daemon to crash. P1741 all 1) use port@host or USE_SERVER, 2) feature removed - 12 - from license, then lmreread, 3) checkout returns LM_MAXUSERS instead of LM_NOFEATURE. P1778 all lmcrypt core dumps when hostid has 0x prefix. P1825 all lmdiag with colon-separated LM_LICENSE_FILE -- stops reporting when on file in the list doesn't exist. P1843 all lmdiag reports that licenses have incorrect syntax when they have vendor-defined hostids, though the files are correct. P1850 all lc_cryptstr() and lmcrypt have memory leaks when the feature contains "ck=nnn" P1883 all purify reported harmless bug in l_key.c. P1901 all lmcrypt/lc_cryptstr() fails with decimal hostids (#nnn) larger than the maximum positive 32-bit int. P1929 all Some lmutil utilities fail (lmdiag/lmutil, etc.) with FLEXLM_COMM_TRANSPORT set to UDP. P2045 all lmcrypt could core dump with mistyped license file. P2058 alpha_u3 checkout uses a file descriptor which is not closed. P2059 all memory leak when LM_A_LICENSE_DEFAULT is called > 1 time in a job. P2096 i86_d4 (DG Intel): checkouts were slow. P2118 all makekey generates incorrect ck= checksum when line wraps with ''. P2181 all On unix systems, lc_baddate could cause a checkout to take a long time, or sometimes hang. Known bugs: ___________ P1852 2 HP provides a command for changing the ethernet address/hostid. Patch: None. Workaround: Use uname -i hostid, which is more secure. Platform Specific Notes: ________________________ i86_w3 ______ Win32s will not be supported after FLEXlm v5. This is because Microsoft is discontinuing support for win32s. UNIX ____ alpha_u3 ________ - 13 - uname -a: OSF1 zippy V3.2 17 alpha CC: cc -std1 NOTE: alpha_u1 is discontinued. This only means that we no longer support v1 and v2 of the OS, and virtually no one uses those OS versions. Alpha_u3 fully supports Alpha DEC Unix 3 and 4. decs_u4 _______ uname -a: ULTRIX newport 4.2 0 RISC CC: /bin/cc -DPMAX -DULTRIX -DMIPS dg_u5 _____ uname -a: dgux dgsvr4 5.4 generic AViiON mc88100 CC: /bin/cc encore_u4 _________ uname -a: UNIX_SV encore 4.2MP 4.0.0.10 m88k m88k CC: /usr/bin/cc hp300_u8 ________ uname -a: HP-UX agent86 B.08.00 A 9000/375 080009060992 CC: /bin/cc link flags: -lBSD hp700_u8 ________ uname -a: HI-UX hit1 02.03_/B E 3050/R 154 CC: /bin/cc -Aa -D_HIUX_SOURCE +DA1.0 +DS1.0 (replace HIUX with HPUX on an HP system) Hostid note: See Bug P1852 above -- we no longer recommend using ethernet address as a hostid. i86_d4 ______ uname -a: dgux dgbig R4.11 generic AViiON Pentium CC: /bin/cc, actually, /usr/opt/sdk/sde/ix86dgux/usr/bin NOTE: hostid comes from /dev/net/*. By default these files are only readable by root. We recommend changing the perms to: - 14 - # chmod 644 /dev/net/* i86_l1 ______ uname -a: Linux linux 1.2.13 #1 Sun Aug 13 06:33:35 EDT 1995 i586 CC: /usr/bin/cc cc -v: Reading specs from /usr/lib/gcc-lib/i486-linux/2.7.0/specs gcc version 2.7.0 IMPORTANT NOTE: v5 version uses ethernet address as a hostid, which is relatively secure. v4 used the 'hostid' command, which was not secure. To obtain the ethernet address, type: /sbin/ifconfig eth0 Convert the hardward address as follows: From: HWaddr 00:40:05:16:E5:25 To: 00400516E525 V5 lmhostid will report ethernet address by default. v4 will report 'hostid'. Both types of hostid are acceptable to version 5 clients and servers. lmhostid, or lmhostid -ether -- obtains the ethernet address (secure) lmhostid -long -- obtains the output from the 'hostid' command (not secure) i86_u2 ______ uname -a: UNIX_SV rolm 4.2MP 2.0 i386 x86at CC: /usr/bin/cc i86_x5 (Solaris on Intel) ______ uname -a: SunOS sunpc 5.4 generic i86pc i386 CC: /opt/SUNWspro/bin (version 3.0) moto_u4 _______ uname -a: UNIX_System_V motosvr4 4.0 R40V4.2 m88k mc88100 CC: /bin/cc link flags: -lsocket -lnsl nec_u2 ______ - 15 - uname -a: UNIX_System_V nec 4.0 2 R3000 r3000 CC: /bin/cc link flags: -lsocket -lnsl /usr/necbin/uversion: Release6.2 Rev01 - EWS4800/220 - WS rs6000_u3 _________ uname -a: AIX rs6000 1 3 000276513100 CC: /bin/cc -D_BSD -D_BSD_INCLUDES link flags: -lbsd sco_u3 ______ uname -a: SCO_SV sco 3.2 2 i386 uname -X: System = SCO_SV Node = sco Release = 3.2v5.0.0 KernelID = 95/04/19 Machine = i80486 BusType = ISA Serial = 2CG001148 Users = 5-user OEM# = 0 Origin# = 1 NumCPU = 1 CC: /bin/cc -Dsco link flags: scoinfo.o -lsocket IMPORTANT NOTE: Previous FLEXlm versions were built on an older OS: Release = 3.2v2.0 KernelID = 90/10/01 sgi_u4 ______ uname -a: IRIX oly 4.0 08212247 IP6 CC: /usr/bin/cc -cckr link flags: -lsun -lbsd -lc_s sgi_u5 ______ uname -a: IRIX indy 5.2 02282013 IP12 mips CC: /bin/cc To build -n32 -mips3 or -n32 -mips4 on IRIX 6: - 16 - 1) In this directory, do: % make o32 This builds all binaries in o32 format. 2) Link your application (which has been compiled with -n32 -mips3 (or -mips4) with the correct FLEXlm library: liblmgr_n32mips3.a, or liblmgr_n32mips4.a NOTE: sgi keys are required for any 32-bit binary, including IRIX 6 with -n32 flags. sgi64_u6 ________ uname -a: IRIX64 challenger 6.1 07121831 IP26 mips CC: /bin/cc This was called sgir8_u6 in previous versions. It's been renamed to reflect the fact that it's 64-bit. To build -n32 -mips3 or -n32 -mips4, see sgi_u5 above. We currently only support 64-bit, mips4 binaries, which is how all files in this directory are compiled. sun4_u4 _______ uname -a: SunOS ss 4.1.2 2 sun4c CC: /bin/cc sun4_u4 is now built on a 4.1.2 system. This means that it will no longer work with 4.0.3 systems. sun4_u5 _______ uname -a: SunOS backstage 5.1 Generic sun4m sparc CC: /opt/SUNWspro/bin/cc Java Addendum - 17 - Installation and Directory Naming --------------------------------- No special installation of the FLEXlm class files is required. The classes are in the java_01/flexlm directory of the FLEXlm v5.1 main directory. Note that the FLEXlm class files must reside in a directory called "flexlm", since they are in a Java package named "flexlm". If you are running Java applications, you must set your CLASSPATH environment variable to include a component reflecting the location of the FLEXlm classes. For example, if you installed the FLEXlm classes into "/a/b/c/lmgr/v5.1/java_01/flexlm" you would include the following component in your CLASSPATH: "/a/b/c/lmgr/v5.1/java_01" If you are setting up the FLEXlm class files for access by an http server, they must reside in a directory called "flexlm", again because the FLEXlm class files are in the "flexlm" package. New Features Since v5.0 ----------------------- With LM.LENIENT and LM.FAILSAFE, checkout() may succeed, while the license was not actually checked out. In this case, an application may want to inform the user of the condition, while still running. If there is a warning condition: 1) checkout() will return 0 (success), 2) warning() will return a string describing the warning condition. If there is no warning condition (the license was fully checked out from the server), warning() will return null. The string to use for the Java platform in the PLATFORM= keyword is "java_0". The default TCP_TIMEOUT in FLEXlm/Java is 255 minutes. There is no API for changing this value. Integrating FLEXlm/Java into Your Java code ------------------------------------------- The constructor method for the "license" class takes your vendor keys and your encryption seeds as arguments. Since the encryption seeds must be kept secret (anyone who knows your encryption seeds and has a FLEXlm kit can generate licenses for your product), they are XORed with vendor key 5 when passed as method arguments. It is strongly recommended that you not store your encryption seeds and vendor keys in variables, or pass them verbatim as arguments. For example, given the following: Vendor name = xyzcorp vendor key 1 = 0xabcd1 - 18 - vendor key 2 = 0xabcd2 vendor key 3 = 0xabcd3 vendor key 4 = 0xabcd4 vendor key 5 = 0xabcd5 encryption seed 1 = 0xdead1 encryption seed 2 = 0xdead2 you would invoke the license constructor as follows: license lic = new license ("xyzcorp", 0xabcd5 ^ 0xdead1, 0xabcd5 ^ 0xdead2, 0xabcd1, 0xabcd2, 0xabcd3, 0xabcd4); In this way, it's much harder for someone reading disassembled code to discover your encryption seeds. Node-locked Licenses -------------------- Since Java is so portable and generic, there is not nearly the range of possibilities for determining a unique hostid in the Java environment as there are in the C/C++ world. Therefore, the FLEXlm/Java library supports only "DEMO", "ANY", and INTERNET=xxx.xxx.xxx.xxx hostids. Hostid lists are supported, so you can node-lock a license to a list of hostids, for example: "INTERNET=1.2.3.4 INTERNET=1.2.3.5 INTERNET=1.2.3.6". Wildcards are supported in address octets. Locating the License File ------------------------- The checkout method allows you to specify the license file location. This is used to supply a runtime-determined license file location, such as a value supplied on the command line, applet parameter, or a default. It may be specified as a colon-separated list of license files and/or port@host specifications. License File Restrictions ------------------------- When possible, it is preferable to use "port@host" to locate the license file, rather than a license file path. This is because the FLEXlm/Java implementation is not capable of parsing all possible license file syntax - when port@host is used, the server does all the license file parsing. Specifically, the FLEXlm/Java implementation understands only the following license file lines: SERVER DAEMON (ignored) USE_SERVER FEATURE INCREMENT Comment lines (lines starting with the "#") - 19 - Inclusion of other line types may cause an error. In addition, the Java library does not understand KEYWORD=value pairs (with the exception of "INTERNET=xxx.xxx.xxx.xxx" for host ID). or lines continued with " Examples of license file lines which are understood by the Java client: SERVER speedy ANY 7132 DAEMON demo /u/flexlm/sun4_u4/demo FEATURE f1 demo 1.000 1-jan-00 4 BBF8808162D4072297FF "" FEATURE f2 demo 1.000 1-jan-98 0 FBA85061E4ACCBA6D932 "" "INTERNET=192.156.198.82 INTERNET=192.156.199.*" Examples of license file lines which are not understood by the Java client: PACKAGE p1 demo 1.000 8040204170869E176457 COMPONENTS="c1 c2" FEATURE f1 demo 1.000 1-jan-0 4 BBF8808162D4072297FF "" HOSTID=2f2f2f2f FEATURE f2 demo 1.000 1-jan-98 0 FBA85061E4ACCBA6D932 "" "INTERNET=192.156.198.82 INTERNET=192.156.199.*" To reiterate, the restriction is that the FLEXlm/Java library cannot parse these lines - it is perfectly reasonable to use such lines in a license file accessed via port@host, as the server does all the parsing in that scenario. License file paths should be used only for uncounted licenses, where it's not necessary to run a server. FLEXlm display -------------- The FLEXlm display is a constant ("JavaDisplay") in the Java version. Development Environment ----------------------- The FLEXlm/Java classes were compiled using Sun's JDK v1.0.2 on Solaris/SPARC 2.x. Known bugs in this version -------------------------- - Checkin is broken in port@host environment if license file line is greater than 145 bytes long. checkin fails when called, but any licenses checked out by an application or applet are checked in when it exits. - If USE_SERVER is present anywhere in the license file, it causes the server to be used for everything, not just the lines following USE_SERVER. - 20 - Flexible License Manager Version 5.0a RELEASE NOTES 24 May, 1996 These release notes describe the changes from FLEXlm v4.0 To upgrade v4 source to v5, make the following changes: 1) Change "#include lm_client.h" to "#include lmclient.h" 2) Change LM_CODE macro: ENCRYPTION_CODE_1 to ENCRYPTION_SEED1 ENCRYPTION_CODE_2 to ENCRYPTION_SEED2 Other, rarely needed function names were also changed. See the "FLEXible API Changes" section for a more complete listing of source changes you may need. OVERVIEW ________ o port@host Plus! -- clients no longer need access to license file. More efficient and robust. Log files now can also log uncounted licenses. o USE_SERVER line -- client applications automatically get the benefits of port@host Plus without having to set an environment variable. o New Trivial and Simple APIs. Get FLEXlm functionality with 3 function calls. o lc_expire_days() -- function to tell when a license will expire o Server automatically notifies of licenses that will expire soon upon startup. o Hostid lists -- ability to lock a single FEATURE or INCREMENT line to several hostids. For example, allow 10 uses to be shared amongst only 3 nodes, by hostid. o Improved easier API for vendor-defined heartbeats. o lc_timer() ("heartbeats") interface made easier. o Easier specification of default license file location. o $LM_PROJECT environment variable added to REPORTLOG data for FLEXadmin reporting. o Improved Internet Firewall support -- Can specify TCP port number on DAEMON line. o Feature names in end-user Options file can now optionally specify particular INCREMENT lines. - 21 - o Improved lmcrypter error reporting, via new function lc_chk_conf() o IP Address supported for hostname on SERVER line. o CAPACITY license allows vendors to charge based on the power of the system: e.g., PC clients can be charged less than Unix clients. o Consolidate license files with SUPERSEDE option on FEATURE line o New ISSUED=date attribute -- readable issued date o USER_BASED and HOST_BASED licenses -- requires specified number of users (or hosts) to be INCLUDEd via the end-user options file. o FEATURE serial number attribute: "SN=value". o FEATURE MINIMUM=n checkout attribute. o DUP_GROUP for SUITE parent -- added flexibility for PACKAGE licensing. o MAX_OVERDRAFT in end-user options file -- allows end-user to limit OVERDRAFT -- for negotiated fees with trusted customers. o End-user options vendor-daemon "pool" selection -- so end-users can specify which INCREMENT line a RESERVE applies to. o lc_vsend() automatically connects to the server. o Improved end-user-specified TIMEOUT behavior -- the license is freed at the TIMEOUT time, rather than upon subsequent checkout request. o lmdiag provides more detailed FEATURE descriptions. o REPORTLOG format improved -- it's takes 75% less disk space, holds significantly more information, and will produce faster FLEXadmin reports. o lmstrip utility for security. o Overall improved security. New Features in V5.0 ____________________ port@host PLUS! _______________ This is a significant enhancement for the port@host feature in FLEXlm -- the behavior is nearly the same as the existing port@host feature, but performance is enhanced. (Note: the old behavior is still available with the syntax "-port@host" -- prepend a minus sign). With port@host PLUS: o The client never reads the license file, so startup is faster, particularly with large license files. o Sites with large license files, or Wide-Area networks can now safely use port@host o License servers can now log usage of uncounted licenses. To do this, make sure the license file has a SERVER and DAEMON line. If it does not, simply prepend them. The debug and report log files will then log usage for uncounted licenses in addition - 22 - to the normal logging of counted licenses. Automatic port@host via USE_SERVER __________________________________ port@host behavior is preferable to having the client application read the license file, since the application does not have to have a file in sync with the server. Now you can get this behavior automatically. Simply put the USE_SERVER keyword in the license file after the SERVER line, and the client will behave as though it were using port@host. If you have uncounted lines in your license file, and you're not running a server, or if you want clients to not check out uncounted licenses from your running server, put the uncounted lines before the USE_SERVER line in the file. With USE_SERVER, client copies of the license file are only required to have a SERVER line, followed by a USE_SERVER line. Anything after that in the file is ignored by client applications. New Optional Trival and Simple APIs: ___________________________________ This new API is "policy-based". That is, you specify an overall policy, with some optional modifiers, and everything is taken care of automatically. This new API is recommended for most companies that have straightforward licensing needs. Every attempt is made in these APIs to automatically solve common problems. For example, the display setting comes from the $DISPLAY environment variable, which is converted to an IP address for security reasons. For this reason, to override the display setting, a programmer should use putenv() (or setenv()) to set the variable before checking out a license. You will notice other, automatic, behavior that differs from the old, now called "FLEXible", API. See the example in machind/policy.c. The following is a complete, correct example of the new API, using the Trivial API macros: - 23 - #include "lmpolicy.h" main() { if (CHECKOUT(LM_RESTRICTIVE, "f1", "1.0","license.dat")) { fprintf(stderr, "%s0, ERRSTRING()); exit(1); } /* your application code here */ CHECKIN(); } POLICIES: _________ LM_RESTRICTIVE -- checkout, return failure if fails LM_QUEUE -- checkout, but queue if failure return error if other LM_FAILSAFE -- Always run. Queue for license if MAXUSERS. LM_LENIENT -- return error on MAXUSERS, otherwise return success. MODIFIERS: __________ LM_MANUAL_HEARTBEAT -- call HEARTBEAT(), which returns number of retries LM_RETRY_RESTRICTIVE -- HEARTBEAT will attempt retries forever, unless this is set, where it will exit after the 5th retry attempt. FUNCTIONS: __________ There's 2 levels of function calls: macro-level (Trivial) and actual functions (Simple). Most users will be able to use the Trivial API, which works only work if your binary checks out no more than one feature at a time. Otherwise, you'll need to use the function calls. Trivial API: CHECKOUT(policy, feature, version, licpath) where policy (int) is one of the policies listed above, with modifiers ORed in, e.g., LM_RESTRICTIVE | LM_MANUAL_HEARTBEAT. - 24 - feature (char *) feature name. version (char *) version in floating point format. licpath (char *) path to default location for license file. If 0, ignored. Returns 0 if success, else FLEXlm lm_errno. CHECKIN() -- checks in the license from CHECKOUT ERRSTRING() -- returns (char *) explanatory message for the latest FLEXlm error. HEARTBEAT() -- exchanges heartbeat messages with server. Returns 0 if success, else, number of failed retry attempts performed. Simple API: lp_checkout(VENDOR_NAME, code, policy, feature, version, nlic, licpath, lp_handle) where VENDOR_NAME -- from lm_code.h. code -- from LM_CODE macro, as in normal FLEXlm policy -- see CHECKOUT above. feature -- ditto version -- ditto nlic -- number of licenses to checkout licpath -- see CHECKOUT above lp_handle -- pointer to LP_HANDLE *. This is return handle from lp_checkout, and is used with all subsequent lp_xxx calls, e.g., LP_HANDLE *lp; ... lp_checkout(...,&lp); return values same as CHECKOUT lp_checkin(lp) -- lp is value returned from lp_checkout lp_errstring(lp) -- lp is value returned from lp_checkout lp_heartbeat(lp, nreconn, minutes) (Only used if policy is modified with LM_MANUAL_HEARTBEAT) lp -- value returned from lp_checkout nreconn -- pointer to integer -- number of - 25 - reconnects in "minutes" (if NULL, ignored) minutes -- return nreconn in this many minutes (if 0, ignored) lp_heartbeat return values same as HEARTBEAT nreconn can be used to discourage end-user theft by stopping and starting servers. New FEATURE attributes: _______________________ Hostid Lists ____________ Hostids can now be a list of hostids. The syntax is: "hostid1 hostid2 ... hostidn" For FEATURE lines in the new format, this will look like: FEATURE ... HOSTID="hostid1 hostid2 ... hostidn" This can be used on the FEATURE/INCREMENT/UPGRADE lines, but is not supported on the SERVER line (where it's not really needed). It allows node-locking to a list of hosts, an often requested feature. HOSTID struct now has a new member: next. This is now a null-terminated list of hostids. Usually, vendors that examine this struct only do so to see if they have a DEMO license. For that reason, this new member (next) should normally not be needed by vendors. Two new functions are available for these lists (which should be rarely needed): void lc_free_hostid(job, hostid) and HOSTID *lc_copy_hostid(job, hostid) DAEMON port number -- Internet Firewall Support _______________________________________________ Some firewalls require the administrator to specify - 26 - which ports are available to clients outside the firewall. In this case it is necessary to define not only the TCP port that lmgrd will use, but also the port each vendor daemon will use. This can now be done on the DAEMON line. The new syntax is: DAEMON vdaemon_name path [ [port=]port_num ] [ [options=]options.dat ] where port_num is a TCP port number and options.dat is the path to the end-user options file. For VMS, the old syntax for port, as well as this new syntax, is supported. This is not, however, currently supported for NT or Netware servers, and it's unlikely to be needed since firewalls are currently rarer for these systems. SN=serial_number ________________ SN=serial_number: This is a optional, encrypted, string attribute, useful for differentiating otherwise identical INCREMENT lines. USER_BASED and HOST_BASED _________________________ Syntax: USER_BASED[=n] HOST_BASED[=n] If USER_BASED is specified, then all licenses must be INCLUDEd to USER names via the end-user options file. Similarly, if HOST_BASED is specified, then all licenses must be INCLUDEd via HOST names. USER_BASED cannot appear on the same line with HOST_BASED. If =n appears, then the number of USERs or HOSTs is limited to n; otherwise, the limit is the number of users in the FEATURE. Will create new vendor-daemon pools. (See note about Vendor Daemon Pools later in this RELEASE_NOTES.) MINIMUM=n _________ Syntax: MINIMUM=min. If lc_checkout(...nlic...), - 27 - nlic is less than min, then the server will checkout min. SUPERSEDE and ISSUED ____________________ This allows vendors to sum up a set of INCREMENT lines in a single, new FEATURE (or INCREMENT) line, which supersedes all INCREMENT lines for the same feature name with previous start-dates. Note that the start date is the one field which is not readable in the license file, and is part of the 20-character license key. To make this more readable, we've also added a new ISSUED=date field (e.g., ISSUED=1-jan-1996). If the ISSUED date is set, then SUPERSEDE uses it, otherwise it uses the start-date For example: INCREMENT f1 ... 1 ... INCREMENT f1 ... 1 ... INCREMENT f1 ... 1 ... INCREMENT f1 ... 4 ... SUPERSEDE Assuming that the start date on the first 3 INCREMENT lines are prior to the last, the user will get only 4 uses of f1, and the first 3 INCREMENT lines can be deleted with no impact on the number of licenses of f1 available. Naturally, this is more readable in combination with ISSUED: INCREMENT f1 ... 1 ... ISSUED=1-jan-1995 INCREMENT f1 ... 1 ... ISSUED=1-jan-1995 INCREMENT f1 ... 1 ... ISSUED=1-jan-1995 INCREMENT f1 ... 4 ... SUPERSEDE ISSUED=1-jan-1996 CAPACITY and LM_A_CAPACITY __________________________ The most common purpose of CAPACITY is to charge more for a more powerful system. For example, with CAPACITY, you could automatically checkout more licenses on a Unix system than on a PC, thereby effectively charging more for the more powerful system. CAPACITY is a checkout multiplier--if lc_checkout requests 1 license, and CAPACITY is set to 3, 3 licenses will be checked out. - 28 - CAPACITY is set by 1) Adding the CAPACITY keyword to the FEATURE line 2) Setting CAPACITY in the application with lc_set_attr(job, LM_A_CAPACITY, (LM_A_VAL_TYPE)value); This value becomes a multiplier to the checkout number IF CAPACITY is set in the license file. If CAPACITY is missing from the FEATURE line, the attribute setting in the code will have no effect. Similarly, if CAPACITY is on the FEATURE line, but there is no call to lc_set_attr(...LM_A_CAPACITY), this will have no effect. The attribute must be set before the first connection to the server (usually lc_checkout), and cannot be reset once set. CAPACITY will create new vendor-daemon pools. (See note about Vendor Daemon Pools later in this RELEASE_NOTES.) SUITE_DUP_GROUP for PACKAGE SUITEs __________________________________ An enabling FEATURE line for a PACKAGE can now specify a different duplicate grouping for the "parent" of the suite than for its components via SUITE_DUP_GROUP=xxx where xxx is any combination of UHDV. (See the manual for DUP_GROUP for an explanation of duplicate grouping.) Note: If SUITE_DUP_GROUP is not specified, the parent will have the same duplicate grouping as the components. For example: PACKAGE pkg demo 1.050 E0A0A0B133C159D609A5 COMPONENTS="c1 c2" OPTIONS=SUITE FEATURE pkg demo 1.050 01-jan-0 3 6B9C2001518FA9DA4193 DUP_GROUP=U SUITE_DUP_GROUP=NONE Features "c1" and "c2" will have a duplicate grouping mask of USER, while the parent feature, "pkg", will have a mask of NONE. This means the same user can use 3 uses of c1, or 2 uses of c1 and 1 of c2, or 1 use of c1 and 2 of c2 - 29 - IP Address now supported as hostname on SERVER line ___________________________________________________ You can now use an IP address in the format #.#.#.# instead of a hostname on the SERVER line. Note this is ONLY supported when all clients and servers referring to the license file are v5 or higher. makekey vs lmcrypt ___________________________ makekey has not been extended to support the new FEATURE line attributes, and will not be extended in the future. We recommend that you use lmcrypt instead, as lmcrypt is much easier to use. Moreover, adding yet more options to makekey would make it more and more cumbersome to use. The source for makekey is available in machind/makekey.c, and you are free to add options to it as needed. New FLEXible API Functions __________________________ lc_expire_days() ________________ This new function returns the number of days until a license expires. It's syntax is: int days; CONFIG *conf; conf = lc_get_config(job, feature); days = lc_expire_days(job, conf); It's return values are: > 0 -- days till expiration 0 -- license will expire today at midnight < 0 -- lm_errno: LM_LONGGONE (expired) or LM_BADPARAM (invalid config argument). lc_errtext() ____________ Returns error message for FLEXlm errno. Syntax: (char *)error_message = lc_errtext(lm_job, lm_errno); Do not free the string returned from this function -- it's - 30 - static memory in the FLEXlm library. If needed later, it should be copied to ensure it's value doesn't change. lc_chk_conf() _____________ char * lc_chk_conf(job, conf, check_name) LM_HANDLE *job; CONFIG *conf; int check_name; Given a pointer to a CONFIG struct, lc_chk_conf returns a string describing errors in the struct, or NULL if no problems are found. This is automatically called by lc_cryptstr(), so if you're using lmcrypt or lc_cryptstr() you don't need to additionally call lc_chk_conf(). Normally this should only be used by a license generation program that calls lc_crypt(), such as makekey. If check_name is true, invalid feature names will also be reported. lc_heartbeat() ______________ lc_heartbeat can be used instead of lc_timer, allowing more security and a non-callback based API. Syntax is: int lc_heartbeat(LM_HANDLE *job, int *ret_num_reconnects, int minutes) This is the same as lp_heartbeat, described above. lc_heartbeat returns 0 upon success or the number of failed connections to the server. If lc_heartbeat fails, the application can notify the user, or if the number of failures is high, penalize the user by exiting or other steps. In addition, the 2nd and 3rd arguments can be used to provide additional security: It is possible to steal licenses by starting and restarting the server. One way to thwart this is to detect many reconnections in a short period, and take appropriate steps if this is discovered. The ret_num_reconnects is a pointer to an integer, which is set to the the number of reconnections in the number of minutes specified in the last argument. ret_num_reconnects is ONLY set when a reconnection - 31 - occurs, which in turn only occurs when lc_heartbeat returns 0. Following is a possible example for using this function: int num_reconnects, rc; rc = lc_heartbeat(lm_job, &num_reconnects, 10); if (rc) tell_user("The server is down); else if (num_reconnects > 3) { tell_user("Server restarted too many times"); exit(-1); } Vendor Daemon logs licenses soon to expire __________________________________________ Upon startup, the vendor daemon will report licenses that will expire within 2 weeks. End-User Options File "pool" selection ______________________________________ Because of INCREMENT, when you RESERVE based on a feature name, prior to v5 you could not control which "pool" for that feature was being RESERVEd. For example, FEATURE f1 demo 1.0 ... INCREMENT f1 demo 2.0 ... This will create 2 separate pools in the vendor daemon, tracking version 1.0 licenses SEPARATELY from v2.0 uses. (Different pools are created if the version, hostid, and sometimes the vendor-defined string are different.) RESERVE 1 f1 USER daniel This will reserve only from the first pool. Should you want to reserve a 2.0 version of f1 for daniel, you can do this with RESERVE 1 f1:VERSION=2.0 USER daniel You can specify a feature by any of the following fields: VERSION HOSTID - 32 - EXPDATE KEY VENDOR_STRING ISSUER NOTICE dist_info user_info asset_info Note that the lowercase fields are values that user can modify in the license file. So, another way to select the 2nd pool in the above example is to modify the INCREMENT line to: INCREMENT f1 demo 2.0 ... asset_info="pick this" And RESERVE by: RESERVE 1 f1:asset_info="pick this" USER daniel This new functionality applies everywhere a feature name is specified in the end-user options file: INCLUDE, INCLUDEALL, EXCLUDE, etc. $LM_PROJECT ___________ If a client application has the $LM_PROJECT environment variable set, then this will be logged in the vendor daemon's REPORTLOG, for FLEXadmin's report writer. End-User MAX_OVERDRAFT limit ________________________ If a license includes an OVERDRAFT limit, the end-user can choose to reduce the overdraft amount, in the end-user options file. The syntax is MAX_OVERDRAFT feature nnn where nnn is a number less than the OVERDRAFT amount for this feature in the license.dat file. The ascii debug log file reports this: 14:58:03 (demo) FEATURE f1 OVERDRAFT reduced from 20 to 10 This can be used to offer discounts to trusted customers. - 33 - lmcrypt and lc_cryptstr() ___________________________ Error messages are improved. Here's an example of the improved output: license.dat:line 3:"INCREMENT f1 demo 1.050 01-jan-99 0 DB1C20014C0C97B05C0A USER_BAS ..." Uncounted (number of users is 0) missing hostid Invalid license file syntax (-2,269) New, Simplified Vendor-Defined Hostid--LM_A_VENDOR_ID_DECLARE _____________________________________________________________ This has been simplified from 4 callback functions, to 1 callback function and an attribute setting. Here's sample code: Step 1: make a source file hostids.c /* hostids.c: */ /* define a callback function for getting the hostid */ HOSTID * get_vd_hostid(hostid_num) int hostid_num; { HOSTID *id = l_new_hostid(); /* Must call l_new_hostid() to allocate this hostid */ /* * We return the fixed strings for * illustration. The real function would * determine the hostid, and return it as * a string */ id->type = hostid_num; switch (hostid_num == HOSTID_VENDOR) { case HOSTID_VENDOR: strcpy(id->id.vendor, "1234"); return id; case HOSTID_VENDOR+1: strcpy(id->id.vendor, "4321") return id; default: return (HOSTID *)0; /* internal error */ } } - 34 - /* define a function to register all vendor-defined hostid information: */ void register_hostids() { /* declare an LM_VENDOR_HOSTID struct */ LM_VENDOR_HOSTID h; /* register the callback */ lc_set_attr(lm_job, LM_A_VENDOR_GETHOSTID, (LM_A_VAL_TYPE)(get_vd_hostid)); /* define the first hostid type */ h.label = "MYHOSTID_KEYWORD"; h.hostid_num = HOSTID_VENDOR; h.case_sensitive = 0; h.get_vendor_id = get_vd_hostid; /* register this definition: */ lc_set_attr(lm_job, LM_A_VENDOR_ID_DECLARE, (LM_A_VAL_TYPE)&h); /* define the next hostid type */ h.label = "SECOND_HOSTID"; h.hostid_num = HOSTID_VENDOR+1; h.case_sensitive = 0; h.get_vendor_id = get_vd_hostid; /* register this definition: */ lc_set_attr(lm_job, LM_A_VENDOR_ID_DECLARE, (LM_A_VAL_TYPE)&h); } Step 2: call register_hostids from client application, and license generators (lmcrypt, makekey, etc.) LM_HANDLE *lm_job; ... lc_init(..., &lm_job); register_hostids(); ... Step 3: Modify machind/ls_vendor.c thus: ... - 35 - ls_user_init2 = register_hostids; ... Step 4: Modify makefiles to include hostids.c. FLEXible API Changes ____________________ ENCRYPTION_CODE_1 and ENCRYPTION_CODE_2 names changed _____________________________________________________ They are replaced with ENCRYPTION_SEED1 and ENCRYPTION_SEED2. There is no functional change, just a name change to use a more standard terminology for the function of these seeds. If you want to use an existing lm_code.h file, you'll need to change these names. lc_get_dlist() and lc_free_daemon_list() removed ________________________________________________ These 2 functions are removed from the public API for FLEXlm. (They still exist internally as l_get_dlist() and l_free_daemon_list()). There's little or no reason why an application should need these functions. In addition, they don't always work with the new Port At Host Plus functionality. lc_flush_config renamed to l_flush_config _________________________________________ lc_flush_config should no longer be used in applications. Where an application needs to reread the license file, it should create a new job, via lc_init(). Otherwise FLEXlm will itself automatically read the license file when it is appropriate to do so. Therefore lc_flush_config() has been renamed to l_flush_config(). l_flush_config() takes the same arguments. You can continue to use l_flush_config() for now, but at best it rereads the license file unnecessarily, and at worst it can cause a core dump, if a successful checkout has already occurred. lc_node_lock() removed in this version ______________________________________ This function has been removed as of v5.0. - 36 - HOSTID struct changed _____________________ NOHOSTID is removed. This is replaced by a NULL hostid pointer. Demo licenses are now indicated by the type member being set to HOSTID_DEMO. This used to be override member set to DEMO_SOFTWARE. CONFIG struct "HOSTID id" member changed ________________________________________ This struct is defined in lm_client.h, and utilized by many FLEXlm functions. The id member used to be a HOSTID struct. It's now renamed to idptr, and it's a pointer to a HOSTID struct. We renamed it so that if you referenced it in the past, the compiler will give you a compile time error. The pointer will be NULL if the CONFIG line doesn't have a hostid. In previous versions, the type was set to NOHOSTID if there was nohostid. This type has been removed. lc_timer returns int -- simpler heartbeat interface ___________________________________________________ lc_timer returns the current number of failed reconnection attempts to the server. With this return value, a program can now avoid using callbacks (LM_A_USER_RECONNECT, and LM_A_USER_RECONNECT_DONE) to handle heartbeats. Many programmers will find this a simpler, improved interface when their program must call lc_timer directly, rather than through SIGALRM (the default behavior) or via the X or Windows window manager. NOTE: when lc_timer indicates no connection, do not then call lc_checkout. lc_timer has already done this, and calling lc_checkout on an already checked out feature will result in a confused state. lc_getid_type() and lc_gethostid() __________________________________ These function returns a pointer to a list of HOSTID structs. Each time either one is called, the list is free'd. Therefore, don't call either twice, and expect a previously returned pointer to be valid. LM_A_LICENSE_FILE - 37 - LM_A_LICENSE_FILE_PTR LM_A_LICENSE_DEFAULT (attributes for lc_set_attr) _______________________________________________________________ LM_A_LICENSE_FILE and LM_A_LICENSE_FILE_PTR are pre-v5 ways of setting these license file location. They behave the same as in v4, and, (it is noted here although it wasn't in the v4 manual or RELEASE_NOTES), behave identically to each other. LM_A_LICENSE_DEFAULT is new, and is usually preferred to the old methods. LM_A_LICENSE_DEFAULT: Normally, this is the preferred, and most efficient, method for setting the license file variable. This honors $LM_LICENSE_FILE environment variable first, then the path indicated to lc_set_attr(). If no valid license files are found in either location, it will return LM_NOCONFFILE as an error. The only reason to use the older attributes is if you explicitly do NOT want to honor the $LM_LICENSE_FILE environment variable, or if you want an error status returned if the license file is missing, but $LM_LICENSE_FILE is good. Again, this is not normally recommended. As of v5.0, we recommend code similar to the following to set a default license location: lc_set_attr(job, LM_A_LICENSE_DEFAULT, path); where "path" is a location in your product's distribution hierarchy. Again, this will honor $LM_LICENSE_FILE first, as well as the license finder, so that your users can easily override the location in your distribution hierarchy. Retry Forever--LM_A_RETRY_COUNT _______________________________ A more and more common policy is to retry to connect and checkout a license forever. You can now set LM_A_RETRY_COUNT to -1 to explicitly request this behavior. lc_set_attr(job, LM_A_RETRY_COUNT, (LM_A_VAL_TYPE)-1); The PC version now defaults to -1 for LM_A_RETRY_COUNT. - 38 - In addition, on the PC, it is now disallowed to set LM_A_RETRY_COUNT to anything other than -1 without also setting LM_A_USER_EXITCALL. lc_checkout returns BADPARAM for nlic = 0 __________________________________________ lc_checkout() returns BADPARAM if the number of licenses to be checked out is 0. File name changes _________________ All files now have common names for Windows, VMS, and Unix, in 8.3 format. On Unix and VMS, and old filenames will still be available. The following files are affected: Old Name New ________ ___ binary directory: create_license makekey create_pkg makepkg isvaliddate validdat lmcrypter lmcrypt lmfeatset lmfeats ls_vendor.o lsvendor.o machind: DEMO.notes demo.txt RELEASE_NOTES relnotes.txt create_lic.c makekey.c create_pkg.c makepkg.c isvaliddate.c validdat.c lm_client.h lmclient.h lm_errors.h lmerrors.h lm_hosttype.h lmhtype.h lmcrypter.c lmcrypt.c ls_feature.h lsfeatur.h ls_master.h lsmaster.h ls_server.h lsserver.h ls_vendor.c lsvendor.c style_guide.ps style.ps examples directory: vendor_hostid vdhostid vendor_info vdinfo - 39 - LM_DEMOKIT error removed ________________________ lc_init() never returns LM_DEMOKIT error as of v5. Other Enhancements __________________ lc_timer() __________ This function will do nothing if it is called within 20 seconds of the last time it was called. This prevents needless delays that would occur should lc_timer be called too often. lc_vsend() __________ This function will now connect to a server if it is not already connected. Note that if a user has a colon-separated list for licenses, it will connect to the first server in the list. TIMEOUT _______ If a client is timed-out via the end-user option TIMEOUT, it is now free'd from the server, within 2 minutes from the time it times out. Previously, TIMEOUTs were only checked when a license for the same feature name was requested. lmdiag ______ lmdiag provides a more extensive description of each license file line, and provides more error detection, particularly if the license has been mis-typed. Vendor Daemon Pools ___________________ When an INCREMENT line occurs for a feature that already appears in the license file, the vendor daemon will add these licenses in one of two ways: either the licenses will be "pooled" with the previous line, or it will be counted separately, and not "pooled." - 40 - This behavior has existed since INCREMENT was introduced in v3.0, but the specifics were not documented before. If 2 lines differ by: hostid version USER_BASED HOST_BASED CAPACITY they are counted separately. If they differ in any other way, they are counted in a single "pool." REPORTLOG format changed ________________________ The end-user option REPORTLOG format has changed. This is the file used by FLEXadmin to report on historical usage. The file is considerably improved: o The file size is now 1/3 to 1/10 it's old size, depending on each customer's actual usage (The file size will be somewhat larger with a larger pool of users.) o Considerably more information is in the file, including: - full license file information - authentication codes to detect end-user modification. - more complete transaction information. lmstrip _______ lmstrip utility adds additional security to licensing on Unix. (Note that these security issues don't exist on Windows.) 'lmstrip -h' lists it's usage: Help: Usage: lmstrip file [ -l ] [ -e | -n ] [ -r ][ strings... ] -l List internal and external names to be stripped -e Don't strip external names -n Don't strip internal and external names -r Replaces strings with random printable characters strings Strip these strings from the executable Use -e if lc_xxx calls are made from shared library Use -r if you're linking 2 versions of FLEXlm. (This is discussed fully in the FLEXlm Reference Manual. See lmstrip). It improves security and ease-of-use in 3 areas: - 41 - 1) Fully-linked binaries, including vendor daemons 2) Shipping libraries. 3) Linking with libraries that also use FLEXlm. 1) For shipping binaries and vendor daemons, we suggest running: % lmstrip binary_name 2) Shipping libraries: Assuming there's a single .o file that makes flexlm calls, (license.o): % ld -r license.o liblmgr.a -o lmgr_license.o % lmstrip -r lmgr_license.o You then ship lmgr_license.o to your customers. 3) Linking with libraries that already use FLEXlm. See the FLEXlm Reference Manual. Other Changes _____________ Debug libraries are shipped compressed ______________________________________ On Unix, the debug_libs directory contains libraries with -g debug flag turned on. These libraries are now shipped compressed. Use the uncompress flag to use these libraries. License Finder now turned off by default ________________________________________ The FLEXlm finder is turned off on Windows by default. It can be forced on by setting FLEXLM_USE_FINDER environment variable to "1". The change was made because the finder uses gethostbyname(), and this can adversely affect performance, or cause a hang, when NIS or DNS is not working properly. Bug fixes: __________ Bug Platform Description P265 all lmstat doesn't report two features of the same name from different daemons. P338 VMS lmstat and lmswitch failed when daemon started as batch. P353 all lc_feat_list failed when first server in colon-sep - 42 - list was down P456 all Can't RESERVE specific INCREMENT lines. P539 all lc_lic_where sometimes report wrong path. P564 VMS If license path contained non-existent file, rest of path wasn't searched. P639 hp700 Compiler flags weren't always correct. P668 SCO lc_baddate failed on sco. P681 SCO Install instructions were incorrect for SCO, where the install has to be done more manually, since SCO csh syntax is limited. P682 all Server pools licenses with different expiring dates, and doesn't expire licenses after being read. P688 all lmreread sometimes caused checkouts to fail. P699 all lmdiag sometimes misleading reported error -73. P700 NT Timers silently fail in console Mode. P702 all Name=Value attribute pairs could have false matches. P707 all reconnection would fail when 2 INCREMENT lines that don't pool are both checked out. P715 hp700 lmcrypter failed with gcc as compiler. P722 all lmdiag missing man page. P724 all -v arg to lmgrd and utilities wasn't always working. P743 Windows Counted node-locked to VSN, hangs P754 all lmstat -A didn't always print correct user list. P756 all LM_A_PERIODIC_CALL callbacks sometimes didn't get called. P757 all lc_checkout with cnt=0 silently fails. P760 all Vendor-defined hostids must be of type string. Otherwise silently fail. P765 rs6000 License file path with '@' in names fails. P766 all Child processes inherit FLEXlm socket descriptor. P767 all String hostid types failed with trailing blanks. P768 all create_license silently creates invalid license if counted license with no SERVER line. P772 all 2 quick lmdown commands can corrupt REPORTLOG file. P774 all PACKAGE with same name as component silently fails. P783 netware Won't run on Netware v3.11 P786 Win/NT/Netware vendor daemon name > 8 characters fails. P790 all lmswitch doesn't honor LM_LICENSE_FILE. P793 hp700 When NIS or DNS fails, log file report ??? for username. P796 all lmcksum fails on vendor-defined hostid. P829 sunos4 Spurious errors reported when SIGALRM set, but not alarm or setitimer(). P837 NT Can't pass args to lmgrd as a service. P844 Windows Malloc errors weren't always reported -- a different, misleading, error would result. P847 all Can't use lmcrypter with expire date > 2026. P851 hp700 node-locked features take too long to get hostid, and use SIGALRM, causing problems with programs that separately use SIGALRM. P876 Unix Calling setrlimit after lc_init can cause core dump. - 43 - P883 all License lines were sometimes > 80 characters long. P884 all Can miscount total number of licenses. P885 Unix lmcrypter leaves temporary file in /usr/tmp when input is stdin. P904 all SUITE PACKAGE in ls_use_all_features daemon fails when enabled with FEATURE. P905 all lmdown incorrectly report "1 server shutdown" on redundant servers. P910 all lc_master_list memory wasn't free'd by lc_free_job(). P914 sgir8 lmver fails, use "string <file> | grep Copy" instead. P916 all lmstat doesn't report counted features when preceded by uncounted for daemon none. P924 all finder used even when $LM_LICENSE_FILE set. P926 all man page for lc_errstring fixed. P953 Intel/DEC lmdiag extended diagnostics failed on systems with reverse-byte order shorts. P969 all lmcrypt fails if first char in COMPONENTS= is space. P976 all lc_checkin reported a spurious error when dequeueing. P989 Win95 License finder doesn't work on Windows 95. P1009 all lmswitchr failed without a "-c license_file" argument P1035 all lc_expire_days incorrect when exp-date > 2038 P1045 all report.log linger value is set to dup_select value. P1052 all DAEMON port number wasn't reused when vd restarted P1064 all 4-digit year errors in SUPERSEDE, lc_expire_days P1066 all success of starting REPORTLOG now accurate in lmgrd log P1067 all REPORTLOG large license files causes server to fail. P1072 all large license files fail producing report.log files P1082 all client can hang in checking out a license with a & P1089 lot of traffic P1127 all ip address is incorrect (sometimes) in report.log P1135 all license for client with DUP_GROUP not always freed when client dies P1144 all VD_FEAT_INFO -- user_cnt was wrong P1052 all DAEMON port not reused with redundant servers. P1162 all Trivial and Simple API can core dump. Mostly on solaris 2.4 P1174 all CONFIG_DAEMON edits ls_vendor.c, wrong file -- should be lsvendor.c P1179 all lmgrd restarting daemon--daemon can hang because the port is in use. P1180 Win/NT Backwards compatibility problem with 4.1 rainbows dongle license P1188 all INTERNET= hostid fails when counted. P1190 all lc_userlist(), called 2+ times, gives duplicate results with port@host (or USE_SERVER) P1225 NT v4 style of vendor-defined hostid failed with v5. P1230 all lc_userlist can fail. P1268 all LM_A_VD_FEATURE_INFO can fail with redundant servers P1277 all node-locked client can hang with port@host when on wrong host. - 44 - Known bugs: ___________ P1007 sco UDP communications does not work. It appears to be a bug in the OS we ported to, 3.2v5. P1179 all PORT=nnn only: lmgrd restarting daemon, daemon can hang until clients drop connections to dead daemon. Platform Specific Notes: ________________________ i86_w3 ______ Win32s will not be supported after FLEXlm v5. This is because Microsoft is discontinuing support for win32s. UNIX ____ alpha_u1 ________ uname -a: OSF1 speedy 1.2 10 alpha CC: cc -std1 decs_u4 _______ uname -a: ULTRIX newport 4.2 0 RISC CC: /bin/cc -DPMAX -DULTRIX -DMIPS dg_u5 _____ uname -a: dgux dgsvr4 5.4 generic AViiON mc88100 CC: /bin/cc encore_u4 _________ uname -a: UNIX_SV encore 4.2MP 4.0.0.10 m88k m88k CC: /usr/bin/cc hp300_u8 ________ uname -a: HP-UX agent86 B.08.00 A 9000/375 080009060992 - 45 - CC: /bin/cc link flags: -lBSD hp700_u8 ________ uname -a: HI-UX hit1 02.03_/B E 3050/R 154 CC: /bin/cc -Aa -D_HIUX_SOURCE +DA1.0 +DS1.0 (replace HIUX with HPUX on an HP system) i86_d4 ______ uname -a: dgux dgbig R4.11 generic AViiON Pentium CC: /bin/cc, actually, /usr/opt/sdk/sde/ix86dgux/usr/bin NOTE: hostid comes from /dev/net/*. By default these files are only readable by root. We recommend changing the perms to: # chmod 644 /dev/net/* i86_l1 ______ uname -a: Linux linux 1.2.13 #1 Sun Aug 13 06:33:35 EDT 1995 i586 CC: /usr/bin/cc cc -v: Reading specs from /usr/lib/gcc-lib/i486-linux/2.7.0/specs gcc version 2.7.0 IMPORTANT NOTE: v5 version uses ethernet address as a hostid, which is relatively secure. v4 used the 'hostid' command, which was not secure. To obtain the ethernet address, type: /sbin/ifconfig eth0 Convert the hardward address as follows: From: HWaddr 00:40:05:16:E5:25 To: 00400516E525 V5 lmhostid will report ethernet address by default. v4 will report 'hostid'. Both types of hostid are acceptable to version 5 clients and servers. lmhostid, or lmhostid -ether -- obtains the ethernet address (secure) lmhostid -long -- obtains the output from the 'hostid' command (not secure) i86_u2 - 46 - ______ uname -a: UNIX_SV rolm 4.2MP 2.0 i386 x86at CC: /usr/bin/cc i86_x5 (Solaris on Intel) ______ uname -a: SunOS sunpc 5.4 generic i86pc i386 CC: /opt/SUNWspro/bin (version 3.0) moto_u4 _______ uname -a: UNIX_System_V motosvr4 4.0 R40V4.2 m88k mc88100 CC: /bin/cc link flags: -lsocket -lnsl nec_u2 ______ uname -a: UNIX_System_V nec 4.0 2 R3000 r3000 CC: /bin/cc link flags: -lsocket -lnsl rs6000_u3 _________ uname -a: AIX rs6000 1 3 000276513100 CC: /bin/cc -D_BSD -D_BSD_INCLUDES link flags: -lbsd sco_u3 ______ uname -a: SCO_SV sco 3.2 2 i386 uname -X: System = SCO_SV Node = sco Release = 3.2v5.0.0 KernelID = 95/04/19 Machine = i80486 BusType = ISA Serial = 2CG001148 Users = 5-user OEM# = 0 Origin# = 1 NumCPU = 1 CC: /bin/cc -Dsco link flags: scoinfo.o -lsocket - 47 - IMPORTANT NOTE: Previous FLEXlm versions were built on an older OS: Release = 3.2v2.0 KernelID = 90/10/01 sgi_u4 ______ uname -a: IRIX oly 4.0 08212247 IP6 CC: /usr/bin/cc -cckr link flags: -lsun -lbsd -lc_s sgi_u5 ______ uname -a: IRIX indy 5.2 02282013 IP12 mips CC: /bin/cc To build -n32 -mips3 or -n32 -mips4 on IRIX 6: 1) In this directory, do: % make o32 This builds all binaries in o32 format. 2) Link your application (which has been compiled with -n32 -mips3 (or -mips4) with the correct FLEXlm library: liblmgr_n32mips3.a, or liblmgr_n32mips4.a NOTE: sgi keys are required for any 32-bit binary, including IRIX 6 with -n32 flags. sgi64_u6 ________ uname -a: IRIX64 challenger 6.1 07121831 IP26 mips CC: /bin/cc This was called sgir8_u6 in previous versions. It's been renamed to reflect the fact that it's 64-bit. To build -n32 -mips3 or -n32 -mips4, see sgi_u5 above. We currently only support 64-bit, mips4 binaries, which is how all files in this directory are compiled. sun4_u4 _______ - 48 - uname -a: SunOS ss 4.1.2 2 sun4c CC: /bin/cc sun4_u4 is now built on a 4.1.2 system. This means that it will no longer work with 4.0.3 systems. sun4_u5 _______ uname -a: SunOS backstage 5.1 Generic sun4m sparc CC: /opt/SUNWspro/bin/cc