Patch-ID# 113476-04
Keywords: security plugin password hashing algorithm Blowfish pam ldap
Synopsis: SunOS 5.9: usr/lib/passwdutil.so.1 pam_ldap Patch
Date: 17/Oct/02

Solaris Release: 9

SunOS release: 5.9

Unbundled Product: 

Unbundled Release: 

Topic: SunOS 5.9: usr/lib/passwdutil.so.1 pam_ldap Patch

BugId's fixed with this patch: 4192824 4248430 4357827 4390053 4658625 4660019 4670947 4677591 4682120 4683522 4700602 4709300 4756113 

Changes incorporated in this version: 4756113

Relevant Architectures: sparc

Patches accumulated and obsoleted by this patch: 113152-01 113166-01 

Patches which conflict with this patch: 

Patches required with this patch: 112874-06 112960-03 (or newer)

Obsoleted by: 

Files included with this patch:

/usr/lib/libpam.so.1
/usr/lib/passwdutil.so.1
/usr/lib/security/pam_authtok_store.so.1
/usr/lib/security/pam_ldap.so.1
/usr/lib/security/pam_passwd_auth.so.1
/usr/lib/security/pam_unix_account.so.1
/usr/lib/security/pam_unix_auth.so.1
/usr/lib/security/sparcv9/pam_authtok_store.so.1
/usr/lib/security/sparcv9/pam_ldap.so.1
/usr/lib/security/sparcv9/pam_passwd_auth.so.1
/usr/lib/security/sparcv9/pam_unix_account.so.1
/usr/lib/security/sparcv9/pam_unix_auth.so.1
/usr/lib/sparcv9/libpam.so.1
/usr/lib/sparcv9/passwdutil.so.1

Problem Description:

4756113 libc version number is incorrect in s9u2 and s10

(from 113476-03)

4709300 passwd fails if the pam_authtok_store service was specified with server_policy

(from 113476-02)

4670947 logins failing when NIS is backend for authentication

(from 113476-01)

4390053 crypt(3c) needs to interoperate with *BSD and Linux
4248430 RFE: NIS+ should support alternate encryption algorithms for the user password
4192824 newkey/chkey should use a configurable crypt() to encrypt the users password
4700602 crypt_gensalt should be version SUNW_1.22 instead of SUNW_1.21
4357827 pam_ldap should fully support password aging
4677591 implement PSARC/2002/241 - PAM binding control flag
4660019 nss_ldap.so may return non '-1' values for getspnam()
4682120 get/set_item conversation function tracing needs improvement.
4658625 pam_framework doesn't trace pam_chauthtok PAM_TRY_AGAIN return.
4683522 pam_get_data tracing could improve.

Patch Installation Instructions:
--------------------------------

For Solaris 2.0-2.6 releases, refer to the Install.info file and/or
the README within the patch for instructions on using the generic
'installpatch' and 'backoutpatch' scripts provided with each patch.

For Solaris 7-9 releases, refer to the man pages for instructions
on using 'patchadd' and 'patchrm' scripts provided with Solaris.
Any other special or non-generic installation instructions should be
described below as special instructions.  The following example
installs a patch to a standalone machine:

       example# patchadd /var/spool/patch/104945-02

The following example removes a patch from a standalone system:

       example# patchrm 104945-02

For additional examples please see the appropriate man pages.

Special Install Instructions: 
----------------------------- 

NOTE 1: To get the complete Flexible Crypt feature, please install the
        following patches:

        112874-06       (or newer)      libc
        113475-01       (or newer)      libsecurity crypt
        113480-01       (or newer)      pam_unix Patch
        113481-01       (or newer)      nispasswdd
        113482-01       (or newer)      rpc.ypasswd
        113483-01       (or newer)      sbin/sulogin



