Patch-ID# 105918-02
Keywords: boks_servc boks_clntd boks_drainmast ssm ssmi 4.4 export global
Synopsis: SSMI 4.4: Upgrade/Misc. fixes
Date: Nov/20/98

Solaris Release: 2.5 2.5.1

SunOS release: 5.5 5.5.1

Unbundled Product: Solstice Security Manager for Intranets

Unbundled Release: 4.4

Relevant Architectures: sparc 

BugId's fixed with this patch: ppr01827 ppr01829 ppr01835 ppr01841 ppr01844 ppr01847 ppr01862 ppr01864 ppr01865 ppr01866 ppr01867 ppr01872 ppr01873 ppr01876 ppr01877 ppr01879 ppr01880 ppr01883 ppr01895 ppr01910 ppr01912 ppr02003 ppr02008 ppr02034 ppr02057 

BugId's fixed with this patch: ppr02058 ppr02059 ppr02060 ppr02061 ppr02062 ppr02063 ppr02064 ppr02065 ppr02066 ppr02067 ppr02073 ppr02075 ppr02093 ppr02094 ppr02164 ppr02168 ppr02177 ppr02178 ppr02180 ppr02187 ppr02190 ppr02192 ppr02193 ppr02196    

Changes incorporated in this version: ppr02008 ppr02034 ppr02057 ppr02058 ppr02059 ppr02060 ppr02061 ppr02062 ppr02063 ppr02064 ppr02065 ppr02066 ppr02067 ppr02070 ppr02073 ppr02075 ppr02093 ppr02094 ppr02164 ppr02168 ppr02177 ppr02178 ppr02180 ppr02187 ppr02190 ppr02192 ppr02193 ppr02196

Relevant Architectures: sparc

Patches accumulated and obsoleted by this patch: 

Patches which conflict with this patch:

Patches required with this patch:

Obsoleted by:

Files included with this patch:

/etc/opt/SUNWssmi/alarmlogs
/etc/opt/SUNWssmi/boksinit.client
/etc/opt/SUNWssmi/boksinit.master
/etc/opt/SUNWssmi/boksinit.server
/etc/opt/SUNWssmi/countrylist
/etc/opt/SUNWssmi/distrib.cfg
/etc/opt/SUNWssmi/method.conf
/opt/SUNWssmi/bin/X11/xdl
/opt/SUNWssmi/bin/suexec
/opt/SUNWssmi/lib/X11/boks_xd
/opt/SUNWssmi/lib/X11/boks_xt
/opt/SUNWssmi/lib/X11/dtlogin
/opt/SUNWssmi/lib/X11/xdm
/opt/SUNWssmi/lib/alltaas
/opt/SUNWssmi/lib/boks_bridge_e
/opt/SUNWssmi/lib/boks_clntd
/opt/SUNWssmi/lib/boks_drainmast_e
/opt/SUNWssmi/lib/boks_master_e
/opt/SUNWssmi/lib/boks_servc_e
/opt/SUNWssmi/lib/boks_servm_e
/opt/SUNWssmi/lib/boksauth
/opt/SUNWssmi/lib/boksdiag
/opt/SUNWssmi/lib/bosas
/opt/SUNWssmi/lib/cadm
/opt/SUNWssmi/lib/certfile2db
/opt/SUNWssmi/lib/cinit_e
/opt/SUNWssmi/lib/clean_kcache
/opt/SUNWssmi/lib/clntlog
/opt/SUNWssmi/lib/connect.o_e
/opt/SUNWssmi/lib/gui/etc/eng/keypack.msg
/opt/SUNWssmi/lib/gui/etc/eng/subadm.msg
/opt/SUNWssmi/lib/gui/forms/access/listblock.run
/opt/SUNWssmi/lib/gui/forms/access/unblock.form
/opt/SUNWssmi/lib/gui/forms/backup.form
/opt/SUNWssmi/lib/gui/forms/host/mod.form
/opt/SUNWssmi/lib/gui/forms/icheck/modlist.form
/opt/SUNWssmi/lib/gui/forms/icheck/setup.form
/opt/SUNWssmi/lib/gui/forms/keypack/keypackadd.form
/opt/SUNWssmi/lib/gui/forms/keypack/keypackmod.form
/opt/SUNWssmi/lib/gui/forms/keypack/select2.form
/opt/SUNWssmi/lib/gui/forms/sso_config/set_service.form
/opt/SUNWssmi/lib/gui/forms/sso_map/addmap.form
/opt/SUNWssmi/lib/gui/forms/sso_map/delmap.form
/opt/SUNWssmi/lib/gui/forms/subadm/access_conf.form
/opt/SUNWssmi/lib/gui/forms/subadm/config.form
/opt/SUNWssmi/lib/gui/forms/subadm/inact_conf.form
/opt/SUNWssmi/lib/gui/forms/subadm/integ_conf.form
/opt/SUNWssmi/lib/gui/forms/subadm/log_conf.form
/opt/SUNWssmi/lib/gui/forms/subadm/psd_conf.form
/opt/SUNWssmi/lib/gui/forms/subadm/security_conf.form
/opt/SUNWssmi/lib/gui/forms/subadm/subadm.form
/opt/SUNWssmi/lib/gui/forms/subadm/user_conf.form
/opt/SUNWssmi/lib/gui/forms/user/del.form
/opt/SUNWssmi/lib/gui/forms/user/listblock.run
/opt/SUNWssmi/lib/gui/forms/user/mod.form
/opt/SUNWssmi/lib/gui/forms/user/ssomod.form
/opt/SUNWssmi/lib/gui/forms/user/unblock.form
/opt/SUNWssmi/lib/gui/tcl/high/access/suexec.tcl
/opt/SUNWssmi/lib/gui/tcl/high/host/host.tcl
/opt/SUNWssmi/lib/gui/tcl/high/integrity/icheck.tcl
/opt/SUNWssmi/lib/gui/tcl/high/psd/psd.tcl
/opt/SUNWssmi/lib/gui/tcl/high/psd/utils.tcl
/opt/SUNWssmi/lib/gui/tcl/high/subadm/subadm.tcl
/opt/SUNWssmi/lib/gui/tcl/high/user/user.tcl
/opt/SUNWssmi/lib/gui/tcl/low/group.tcl
/opt/SUNWssmi/lib/gui/tcl/low/route.tcl
/opt/SUNWssmi/lib/hostkey
/opt/SUNWssmi/lib/in.ftpd
/opt/SUNWssmi/lib/in.rexecd
/opt/SUNWssmi/lib/in.rshd
/opt/SUNWssmi/lib/in.telnetd
/opt/SUNWssmi/lib/mess.eng
/opt/SUNWssmi/lib/rpc.pcnfsd
/opt/SUNWssmi/lib/securid
/opt/SUNWssmi/lib/sysreplace
/opt/SUNWssmi/lib/upgrade2psd
/opt/SUNWssmi/man/man1/dscadm.1
/opt/SUNWssmi/man/man1/dscertadm.1
/opt/SUNWssmi/man/man1/hgrpadm.1
/opt/SUNWssmi/man/man1/modnismap.1
/opt/SUNWssmi/man/man1/suexec.1
/opt/SUNWssmi/sbin/Boot
/opt/SUNWssmi/sbin/boks_bru
/opt/SUNWssmi/sbin/convert
/opt/SUNWssmi/sbin/hgrpadm
/opt/SUNWssmi/sbin/smadm
/opt/SUNWssmi/sbin/snkadmin
/sbin/su..ssm
/usr/bin/login..ssm
/usr/bin/passwd..ssm
/usr/bin/su..ssm


Problem Description:

ppr02008 The GUI gave a dump if tried to create a CA with a space.
         Create CA failed if the name contained a space.
ppr02034 Access routes assigned with other than default days created
         a tcl dump.
ppr02057 The users retry counter is now only reset if needed.
ppr02058 Update of user last login time may be disabled by adding
         DONT_UPDATE_LOGINTIME=on to the file $BOKS_etc/ENV.
ppr02059 Sanity checking has been added to drainmast.
ppr02060 boks_clntd now holds a cache of password file updates.
ppr02061 Replication of user password changes to password file(s)
         may be disabled by adding MAS_NO_CHPSW_FILE=on to
         $BOKS_etc/ENV on the Master.
ppr02062 The List Blocked Users menu choice was slow.
ppr02063 Timeouts may be set for the bridge processes.
         BRIDGE_CONNECT_TIMEOUT_<label>=<value>, default is 10s.
         BRIDGE_RESPONSE_TIMEOUT_<label>=<value>, default is 20s.
ppr02064 Timeout when clients connect to servc. Default is 20s.
         Change by adding SERVC_Q_TIMEOUT=<value> in $BOKS_etc/ENV.
         Accepted values range between 20-60 seconds.
ppr02065 The cadm command dumped core for some option combinations.
ppr02066 The "boks_bridge" program core dumped in debug mode.
ppr02067 The current date and time (in milliseconds) is now shown in
         some programs running in debug mode.
ppr02070 The problem with Japanese Kanji fonts has been solved.
ppr02073 Corrections made to the suexec man page.
ppr02075 The conversion of $BOKS_var/ssoconfig when upgrading from
         4.3.1 to 4.4.0 failed.
ppr02093 Misspell in messages corrected.
ppr02094 Man page for hgrpadm updated.
ppr02164 Import of certificates from old database, sometimes failed.
ppr02168 NIS+ support of Trusted External Password added.
ppr02177 Alarm log message for su corrected.
ppr02178 suexec demanded expired root password change.
ppr02180 Man pages for dscertadm.1 and dscadm.1 updated.
ppr02187 Disable of integrity check didn't remove crontab entry.
ppr02190 Menu choice for adding sub-administrators was confusing.
ppr02192 $BOKS_var/subadm with files was not exported to replicas.
ppr02193 The convert utility couldn't find the path to Boot.
ppr02196 Prevention of two masters in the same domain.

(from 105918-01)
ppr01827 / dsmbug 505,4105030 - After upgrading from the
         4.3 database the host certificates did not work correctly.
ppr01829 There was a problem when checking if a certificate
         was revoked or not. If two users has different certificate
         issuers but the same serial numbers and one user gets
         blocked/revoked, both users were denied access.
ppr01835 Sub administrator was not allowed to remove users.
ppr01841 Lacking log information, especially in subadm part.
ppr01844 Empty file in master spool causes drainmast to dump.
ppr01847 Create User and User PSD from Create User form gives
         Internal error 541.
ppr01862 Delete User does not delete subadm-configuration file.
ppr01864 Forms in SSO Application Security are not correctly
         subadmin safe
ppr01865 Country pickbox lists Czechoslovakia as a country.
ppr01866 modnismap no longer works.
ppr01867 Imported hosts shows up in Import Hosts pickbox.
ppr01872 Missing man page for modnismap.
ppr01873 Double log lines when creating host groups.
ppr01876 Wrong error message when entering illegal character
         in Setup SSO Services.
ppr01877 telnet with bosk/bosas from solaris client may fail.
ppr01879 All user PSDs listed when some was selected.
ppr01880 Wrong path for command to modnismap.
ppr01883 No deletion of old keys in key-cache.
ppr01895 Bad window name in the PSD Administration.
ppr01910 Non-default CA gives problem with pcprot in create user psd.
ppr01912 Create User PSD in User admin does not create pcprot keys.
ppr02003 / C98025292 Register 4.2.4 host did not work.


Patch Installation Instructions:
--------------------------------
Refer to the Install.info file within the patch for instructions on
using the generic 'installpatch' and 'backoutpatch' scripts provided
with each patch. Any other special or non-generic installation
instructions should be described below.


Special Install Instructions:
-----------------------------
None.