Patch-ID# 109127-05
Keywords: Sun Ray Update Patch
Synopsis: Sun Ray enterprise server version 1.1 Update Patch
Date: Sep/25/2001

Solaris Release: 2.6 7

SunOS Release: 5.6 5.7

Unbundled Product: Sun Ray Enterprise Server Software

Unbundled Release: 1.1

Xref: 

Topic: 

Relevant Architectures: sparc

BugId's fixed with this patch: 4283989 4307504 4318606 4325014 4325061 4325402 4325931 4326129 4326153 4326584 4327948 4331260 4334630 4334632 4335208 4337061 4339788 4342178 4345059 4348273 4354901 4355760 4355897 4355989 4356548 4356736 4357903 4393246 4408919 4417780 4440161

Changes incorporated in this version: 4440161 4417780 4393246

Patches accumulated and obsoleted by this patch: 

Patches which conflict with this patch: 

Patches required with this patch: 

Obsoleted by: 

Files included with this patch: 

	/etc/rc0.d/K98utacleanup
	/etc/rcS.d/K98utacleanup
	/opt/SUNWut/cgi-bin/admincgi
	/opt/SUNWut/cgi-bin/desktop
	/opt/SUNWut/cgi-bin/gstatus
	/opt/SUNWut/cgi-bin/log
	/opt/SUNWut/cgi-bin/main
	/opt/SUNWut/cgi-bin/nav
	/opt/SUNWut/cgi-bin/smartcard
	/opt/SUNWut/cgi-bin/start
	/opt/SUNWut/cgi-bin/status
	/opt/SUNWut/cgi-bin/user
	/opt/SUNWut/lib/firmware/CoronaP0
	/opt/SUNWut/lib/firmware/CoronaP1
	/opt/SUNWut/lib/firmware/CoronaP2
	/opt/SUNWut/lib/libutgrpmgr.so
	/opt/SUNWut/lib/libutjadmin.so
	/opt/SUNWut/lib/modules/TerminalId.jar
	/opt/SUNWut/lib/policy
	/opt/SUNWut/lib/prototype/OWconfig.SUNWut.prototype
	/opt/SUNWut/lib/prototype/Xreset.SUNWut.prototype 
	/opt/SUNWut/lib/prototype/Xsetup.SUNWut.prototype 
	/opt/SUNWut/lib/prototype/Xstartup.SUNWut.prototype
	/opt/SUNWut/lib/prototype/inetd.conf.SUNWut.prototype
	/opt/SUNWut/lib/prototype/services.SUNWut.prototype
	/opt/SUNWut/lib/utauthd.jar
	/opt/SUNWut/lib/utdtrepair
	/opt/SUNWut/lib/utdtsession
	/opt/SUNWut/lib/utdtutil
	/opt/SUNWut/sbin/utcard
	/opt/SUNWut/sbin/utdesktop
	/opt/SUNWut/sbin/utglpolicy
	/opt/SUNWut/sbin/utgstatus
	/opt/SUNWut/sbin/utpolicy
	/opt/SUNWut/sbin/utpw
	/opt/SUNWut/sbin/utuser
	/usr/openwin/server/modules/ddxSUNWcorona.so.1
        /etc/rc1.d/K98utacleanup
        /etc/rc2.d/S98utacleanup
        /opt/SUNWut/lib/firmware/CoronaP3
/etc/init.d/utacleanup

Problem Description:

4440161 security: buffer overflow in keyboard DDX allows root exploit
4417780 Graphic driver fail to recognize Rage 128 PRO rev. D22
4393246 session reaper doesn't get turned off if new language is selected via 'dtgreet'
 
(from 109127-04)
4408919 SunRay DHCP bootup takes along time if there are many DHCP servers.
 
(from 109127-03)
4342178 screen display not centered after /opt/SUNWut/lib/utxconfig -r
4354901 AuthMgr threads should not die if there is processing error
4326584 Sun Ray on non-local interface crashes authd with arithmetic exception
4318606 utgstatus shows (incorrectly) a private interconnect interface on the LAN
4357903 Group Manager uses fopen/fgets, which fails with more than 256 open files
4326153 Removal of card while being redirected causes incorrect server selection
4355897 Redirection of a LAN sun ray to a server not accepting LAN connections hangs
4283989 Firmware download fails under heavy network load
4345059 authd hangs after bad free() called from ut_ldap_rebind_callback()
4307504 SunRay should check if a DISPLAY is already in use before allocating it
4339788 Killing a session using alt+ctrl_bkspace(twice) four times killsuse of the card
4356548 SunRay 1.1 patches README should contain instructions for use in a fail-over group environment 
4355989 SunRay firmware does not recognize new type MicroPayflex and Payflex cards
4355760 Add Payflex and Cyberflex Access smart cards support in 1.1 firmware
4356736 Payflex and Cyberflex not recognized even though firmware supports these cards
 
(from 109127-02)
4337061 (for SunRay 150 only)mouse/kb frozen with usb fixes on enhanced stereo selection button.
4334630 Logitech trackball does not work during hotplug
4334632 Logitech trackball does not work during power up
4335208 Need to report via syslog during USB overcurrent detect
4348273 Hardware watchdog is not enabled.And so the hardware watchdog reset is not kicking in when it is required.
 
(from 109127-01)
4331260 Sun Ray configuration may be overwritten by other product patches
4325931 utswitch -h <bogus server name) causes auth manager to die 
4325402 utpolicy hinders the use of non-CoronaP1 token readers 
4327948 'utpolicy' tests string where it should be checking a variable 
4326129 Performance issue seen in Andromeda unit with certain hubs. 
4325014 using UTLOAD with wrong P1 or P2 firmware can disable HW. 
4325061 devctl locks up
 
ALSO : This patch contains the CoronaP3 firmware for SunRay 150 support.

Patch Installation Instructions:
-------------------------------- 
For Solaris 2.6 & 7 releases, refer to the man pages for instructions
on using 'patchadd' and 'patchrm' scripts provided with Solaris.
Any other special or non-generic installation instructions should be
described below as special instructions.  The following example
installs a patch to a standalone machine:
 
        example# patchadd /var/spool/patch/104945-02
 
The following example removes a patch from a standalone system:
 
        example# patchrm 104945-02
 
For additional examples please see the appropriate man pages.
 
 
Note for Servers that are members of a FAIL-OVER GROUP:
------------------------------------------------------
 
If you are installing this patch on a server that is a member of a fail-over group you need to patch
all of the servers that are members of the fail-over group to ensure that correct firmware updates are 
downloaded to connected SunRay units.

Special Install Instructions:
----------------------------
 
     ** WARNING: This patch should only be applied to systems which
	have Sun Ray Server Software 1.1 fully installed.  Do not
	attempt to add this patch to the UFS image to be applied as
	part of the install process **
 
This patch includes firmware updates for Sun Ray appliances.  The
updated firmware will be loaded by your Sun Ray appliances through the
usual Sun Ray firmware download mechanism.  The firmware changes are
independent of the Sun Ray Server Software changes but are delivered
in this patch for your convenience.
 
If this patch is being applied to servers configured into a Sun Ray
failover group it must be applied to all servers in the group at your
earliest convenience.  While some members of the group remain unpatched
the restart time of your Sun Ray appliances may be noticably longer
than usual.  The increased restart time can be avoided by taking the
action described in step 1 below.
 
The following additional steps are required when adding this patch on a
live system:
 
	(before applying patch to system)
 
	1. (optionally) Suppress firmware downloads from all servers in
	a Sun Ray failover group
 
	2. Stop Sun Ray services on the server being patched
 
	(after applying patch)
	3. Reboot the Sun Ray server
 
 
To remove this patch, carry out these steps in the following order:
 
	(before removing the patch)
 
	1. (optionally) Suppress firmware downloads from all servers in
	   a Sun Ray failover group
 
	2. Stop Sun Ray services on the server being patched
 
	(after removing the patch)
	3. Reboot the Sun Ray server
 
 
Detailed Steps
--------------
 
1. Suppress firmware downloads
 
	If the server being patched is not a member of a Sun Ray
	failover group you should skip this step.
 
	If the server being patched is a member of a Sun Ray failover
	group then this step is optional but is strongly recommended.
 
	At Patch Installation
	---------------------
 
	    Before adding this patch to servers configured into a Sun
	    Ray failover group we advise that you disable Sun Ray
	    firmware delivery from all unpatched hosts in the failover
	    group.  On each host in the group, execute the command:
 
		$ /opt/SUNWut/sbin/utfwadm -a -D -n all
 
	    Do this only one time, before adding this patch to any
	    server in the group.
 
	    The purpose of this step is to prevent unpatched servers
	    from offering old firmware to Sun Ray appliances that have
	    already accepted the new firmware delivered with this
	    patch.
 
	    If this patch is being applied to a Sun Ray failover group
	    then omitting this step may result in increased restart
	    times for your Sun Ray appliances.  (A mixture of patched
	    and unpatched servers advertising conflicting firmware
	    versions may cause the appliance to download new firmware
	    each time it restarts.  The appliance automatically
	    restarts itself after downloading fresh firmware so its
	    overall restart cycle is longer in that case.  The
	    appliance may restart itself several times before
	    establishing or reconnecting to a session.)  The Sun Ray
	    restart time will return to normal once the patch has been
	    added to all servers in the failover group.
 
	At Patch Removal
	----------------
 
	    Before removing this patch from servers configured into a
	    Sun Ray failover group we advise that you disable firmware
	    delivery from any hosts in the failover group that have
	    this patch installed.  On each already-patched host in the
	    group, execute the command:
 
		$ /opt/SUNWut/sbin/utfwadm -a -D -n all
 
	    Do this only one time, before removing this patch from any
	    of the already-patched servers in the group.
 
	    The purpose of this step is to prevent already-patched
	    servers from offering new firmware to Sun Ray appliances.
 
	    If this patch is being removed to a Sun Ray failover group
	    then omitting this step may result in increased restart
	    times for your Sun Ray appliances.  (A mixture of patched
	    and unpatched servers advertising conflicting firmware
	    versions may cause the appliance to download new firmware
	    each time it restarts.  The appliance automatically
	    restarts itself after downloading fresh firmware so its
	    overall restart cycle is longer in that case.  The
	    appliance may restart itself several times before
	    establishing or reconnecting to a session.)  The Sun Ray
	    restart time will return to normal once the patch has been
	    removed from all servers in the failover group.
 
 
2. Stopping Sun Ray services and login sessions
 
	Before applying this patch to a Sun Ray server or removing this
	patch from a Sun Ray server all users should be logged out of
	their Sun Ray sessions.
 
	Stop the Sun Ray services using the following command:
 
		$ /etc/init.d/utsvc stop
 
	This command will terminate any Sun Ray sessions that were not
	already logged out.
 
	Next, add or remove the patch using the instructions outlined
	above in the section "Patch Installation Instructions".
 
	Adding the patch automatically prepares the server to advertise
	new firmware to your Sun Ray appliances.  Removing the patch
	automatically prepares the server to revert to advertising
	pre-patch firmware to your Sun Ray appliances.
 
 
3. Rebooting the Sun Ray server
 
	The Sun Ray server must be rebooted after the addition or
	removal of the patch.

README -- Last modified date:  Tuesday, September 25, 2001