Patch-ID# 116044-03
Keywords: security kdb5_util krbv5
Synopsis: SunOS 5.9_x86: krbv5 Patch
Date: Jan/20/2005


Install Requirements: None                      
                      
Solaris Release: 9_x86

SunOS Release: 5.9_x86

Unbundled Product: 

Unbundled Release: 

Xref: This patch available for SPARC as patch 112925

Topic: SunOS 5.9_x86: krbv5 Patch (kdb5_util)

Relevant Architectures: i386

BugId's fixed with this patch: 4836676 4837278 4955217

Changes incorporated in this version: 4955217

Patches accumulated and obsoleted by this patch: 

Patches which conflict with this patch: 

Patches required with this patch: 

Obsoleted by: 

Files included with this patch: 

/usr/lib/krb5/kadmind
/usr/sbin/kdb5_util

Problem Description:

4955217 kadmind grows to use a large amount of memory and eventually runs out of swap
 
(from 116044-02)
 
4837278 Kerberos utilities should include automigrate capability
 
(from 116044-01)
 
4836676 Bounds checks not in place for princs in krbv5

Patch Installation Instructions:
--------------------------------
 
For Solaris 2.0-2.6 releases, refer to the Install.info file and/or
the README within the patch for instructions on using the generic
'installpatch' and 'backoutpatch' scripts provided with each patch.
 
For Solaris 7-9 releases, refer to the man pages for instructions
on using 'patchadd' and 'patchrm' scripts provided with Solaris.
Any other special or non-generic installation instructions should be
described below as special instructions.  The following example
installs a patch to a standalone machine:
 
       example# patchadd /var/spool/patch/104945-02
 
The following example removes a patch from a standalone system:
 
       example# patchrm 104945-02
 
For additional examples please see the appropriate man pages.

Special Install Instructions:
-----------------------------
 
NOTE 1: To get the complete fix for bug 4836676, "Bounds checks not in place 
        for princs in krbv5," please also install the following patches:
 
        116045-01 (or greater) krb5kdc 
        116046-02 (or greater) libkadm5srv.so.1
        113990-04 (or greater) mech_krb5.so.1 gl_kmech_krb5
        115168-02 (or greater) pam_krb5.so.1
 
NOTE 2: To get the complete fix for bug 4837278, "Kerberos utilities should include 
        automigrate capability," please also install  the following patches:
 
        115168-05 (or greater) pam_krb5.so.1
        116046-04 (or greater) libkadm5srv.so.1

README -- Last modified date:  Thursday, January 20, 2005