Patch-ID# 106119-01
Keywords: NT login password synchronize slow /opt/MSPolicy 
Synopsis: SNC 3.1.1: Disable /opt/MSPolicy & add password sync. 
Date: Apr/28/98

Solaris Release:  

SunOS Release: 

Unbundled Product: Solstice Network Client (SNC) 

Unbundled Release: 3.1.1

Relevant Architectures: i86pc

BugId's fixed with this patch: 4113394 4071107 

Changes incorporated in this version: 

Patches accumulated and obsoleted by this patch:  

Patches which conflict with this patch:  

Patches required with this patch: 105843-01

Obsoleted by: 

Files included with this patch: 

 readme.txt
 sunwntps.dll
 sunwnpnt.dll
 config32.hlp
 config32.cnt
 sunwnp.hlp
 sunwnp.cnt
 oview.hlp
 oview.cnt

Problem Description: 

 4113394 - Added NT password change sync. option to the /Services/Solstice NFS
           Client/Properties/Security tab.  When option is checked changing the
           NT domain password will attempt to change the NIS/NIS+ password at 
           the same time.  See Network Client Help for more information.
           
 4071107 - Disable attempt to mount /opt/MSpolicy during login.


Patch Installation Instructions:

 This patch is for Windows NT ONLY.
 
 This patch is packaged as a self-extracting compressed file (10611901.exe).  
 It must be installed from Windows NT.  The setup program backs up the original 
 file(s).  It then installs the new file(s) and a patch uninstall utility. 

 To install, download 10611901.exe to a temporary directory on the PC.  
 
 In Windows NT, select "Run" from the "Start" menu.  Enter the path and 
 patch filename (Example: c:\temp\10611901) then select "OK".  

 The patch will uncompress and start the setup program automatically.  
 Follow the setup program prompts to complete the patch installation.  

 Restart NT.

To enable NT password synchronization:

 Log onto NT as a user with Administrator privileges.  From the start menu
 select "Settings/Control Panel."  Select the "Network" icon on the Control 
 Panel window.  Select the "Services" tab under Network.  Highlight "Solstice 
 NFS Client" in the services list and click the "Properties" button.  Select 
 the "Security" tab on the properties page and check the "Enable password
 synchronization" checkbox.  
 
 With the "Enable password synchronization" active, you can no longer change 
 just the NT password.  You will have the choice of changing both passwords 
 or the Network Client (NIS/NIS+) password.
 
 To change both passwords, select the NT Domain from the drop down box, 
 enter the old password and the new password twice.  Two confirmation 
 message boxes will be displayed.  One from NT and one from Network Client.  
 
 To change the Network Client Password (NIS/NIS+), select Solstice_NFS_Client 
 from the drop down box, enter the old password and the new password twice. 
 A confirmation message will be displayed by Network Client.
 
Limitations:

 Solstice NIS/NIS+ Name Services must be enabled on the NT system before
 attempting to change NIS/NIS+ passwords with Solstice Network Client.  
 Solstice Network Client cannot change passwords stored in /etc/passwd
 files on a UNIX system.

 If the user's passwords are not the same to begin with and password
 change sync is enabled, attempting to change both passwords with the 
 NIS/NIS+ password will cause the NT password change to fail.  When the 
 NT password change fails, the Network Client (NIS/NIS+) password change 
 is not attempted.  No passwords are changed.
	
 If the user's passwords are not the same to begin with and password 
 change sync. is enabled, attempting to change both passwords with the 
 NT password will allow the NT password change to succeed.  The Network 
 Client password change will fail because of the wrong password.
	
 When a synchronous password change is attempted, the NT password is always 
 changed first.  If the NT password change fails for any reason the Network 
 Client password change is not attempted.  If, on the other hand, the Network 
 Client password change fails for any reason the NT password will already 
 have been changed and the passwords will be out of sync.
	
 Attempting to change the Network Client (NIS/NIS+) password more than once 
 in quick succession will probably fail because there is usually some latency 
 time before the change is propagated to all the servers on the network.  The 
 time it takes for a NIS/NIS+ password change to take effect will vary from 
 network to network according to how long it takes the NIS/NIS+ master to 
 update all the NIS/NIS+ slaves in the network.
 

Patch Removal Instructions:

 In Windows NT, click "Start".  Then select "Programs", "Patch 10611901"
 and click on "uninstallSHIELD".  

 WARNING - The patch uninstall program restarts Windows at the end
           of the uninstall process.
 

Installation Notes:

 All drive letter and directory name references are Solstice Network Client
 defaults. If you have installed Solstice Network Client or the patch file on 
 a different drive, or in a different directory, substitute your 
 drive and directory names in the example commands above.