Patch-ID# 105923-02
Keywords: boks_servc boks_clntd boks_drainmast ssm ssmi 4.4 export global
Synopsis: SSMI 4.4: Upgrade/Misc. fixes
Date: Nov/20/98

Solaris Release: 2.6

SunOS release: 5.6

Unbundled Product: Solstice Security Manager for Intranets

Unbundled Release: 4.4

Relevant Architectures: sparc 

BugId's fixed with this patch: ppr01829 ppr01844 ppr01877 ppr02057 ppr02058 ppr02059 ppr02061 ppr02063 ppr02064 ppr02066 ppr02067

Changes incorporated in this version: ppr01829 ppr01844 ppr01877 ppr02057 ppr02058 ppr02059 ppr02061 ppr02063 ppr02064 ppr02066 ppr02067

Relevant Architectures: sparc

Patches accumulated and obsoleted by this patch: 

Patches which conflict with this patch:

Patches required with this patch:

Obsoleted by:

Files included with this patch:

/opt/SUNWssmi/lib/boks_bridge_d
/opt/SUNWssmi/lib/boks_drainmast_d
/opt/SUNWssmi/lib/boks_master_d
/opt/SUNWssmi/lib/boks_servc_d
/opt/SUNWssmi/lib/boks_servm_d
/opt/SUNWssmi/lib/connect.o_d


Problem Description: The following corrections are included in this patch:

Problems fixed in patch #01 (105923-01)
ppr01829: There was a problem when checking if a certificate
          was revoked or not. If two users has different certificate
          issuers but the same serial numbers and one user gets
          blocked/revoked, both users were denied access.
ppr01844: Empty file in master spool causes drainmast to dump.
ppr01877: telnet with bosk/bosas from solaris client may fail.

Problems fixed in patch #02 (105923-02)
ppr02057: The users retry counter is now only reset if needed.
ppr02058: Update of user last login time may be disabled by adding 
	  DONT_UPDATE_LOGINTIME=on to the file $BOKS_etc/ENV.
ppr02059: Sanity checking has been added to drainmast.
ppr02061: Replication of user password changes to password file(s)
	  may be disabled by adding MAS_NO_CHPSW_FILE=on to
	  $BOKS_etc/ENV on the Master.
ppr02063: Timeouts may be set for the bridge processes.
	  BRIDGE_CONNECT_TIMEOUT_<label>=<value>, default is 10s.
	  BRIDGE_RESPONSE_TIMEOUT_<label>=<value>, default 20s.
ppr02064: Timeout when clients connect to servc. Default is 20s.
	  Change by adding SERVC_Q_TIMEOUT=<value> in $BOKS_etc/ENV.
	  Accepted values range between 20-60 seconds.
ppr02066: The "boks_bridge" program core dumped in debug mode.
ppr02067: The current date and time (in milliseconds) is now shown in 
	  some programs running in debug mode.


Patch Installation Instructions:
--------------------------------
Refer to the Install.info file within the patch for instructions on
using the generic 'installpatch' and 'backoutpatch' scripts provided
with each patch. Any other special or non-generic installation
instructions should be described below.


Special Install Instructions:
-----------------------------
None.