Patch-ID# 117824-06

NOTE:
***********************************************************************
READ THE TERMS OF THE AGREEMENT ("AGREEMENT") IN THE LEGAL_LICENSE.TXT
FILE CAREFULLY BEFORE USING THIS SOFTWARE. BY USING THE SOFTWARE, YOU
AGREE TO THE TERMS OF THIS AGREEMENT. IF YOU DO NOT AGREE TO ALL OF THE
TERMS, PROMPTLY DESTROY THE UNUSED SOFTWARE.
***********************************************************************

Keywords: security wbem admin lastchg password smc http viper library nisplus
Synopsis: Trusted_Solaris_8_HW_12/02: SMC patch
Date: Jan/22/2007


Install Requirements: Reboot after installation, an alternative may be in Special Install Instructions                      
                      
Solaris Release: Trusted_Solaris_8_HW_12/02

SunOS Release: Trusted_Solaris_8_HW_12/02

Unbundled Product: 

Unbundled Release: 

Xref: This patch is available for x86 as patch 117825

Topic: Trusted_Solaris_8_HW_12/02: SMC patch

Relevant Architectures: sparc

BugId's fixed with this patch: 4766108 5070621 5074119 6392205 6407925

Changes incorporated in this version: 

Patches accumulated and obsoleted by this patch: 

Patches which conflict with this patch: 

Patches required with this patch: 

Obsoleted by: 

Files included with this patch: 

/usr/sadm/lib/smc/lib/preload/jsdk21.jar
/usr/sadm/lib/wbem/libprovutil.so
/usr/sadm/lib/wbem/solarisprovider.jar

Problem Description:

(NoBugID) The previous internal revision of this patch was missing a fix
 
(from 117824-04)
 
6392205 smc nisplus changes might not appear: should try niscat from master
	first
6407925 Use SMC to remove a NIS+ group w/o the default staff group resulted 
	in NIS+ gid corruption
 
(from 117824-03)
 
5074119 Backport security fix 4947668 for smc to Trusted Solaris
 
(from 117824-02)
 
5070621 Users unlocked by the admin are not required to set a password for min age days
 
(from 117824-01)
 
4766108 TS8: password change through smc wipes out last change field

Patch Installation Instructions:
--------------------------------
Refer to the man pages for instructions on using 'patchadd' and 'patchrm'
scripts provided with Trusted Solaris. Any other special or non-generic
installation instructions should be described below as special instructions.
 
For additional examples please see the appropriate man pages.

Special Install Instructions:
-----------------------------
NOTE 1:	Reboot the system after all the patches are installed.
 
The steps below assume the patch has been put into an ADMIN_LOW
directory in /var/tmp and the patch file label is configured to ADMIN_LOW.
 
Create a role which contains the Software Installation profile
(typically admin role is assigned this profile) and whose label
range includes the ADMIN_LOW label.  All the steps in the patch
installation should be executed at ADMIN_LOW.
 
The patch should be owned by this role.
 
        1) Login as a user authorized to assume a role that contains the
        Software Installation profile; typically the admin role.
        Assume that role.
 
        To verify the profile is assigned to the role, type:
        "profiles -l | grep patchadd".
 
        The result should be:
         /usr/sbin/patchadd    uid=0, privs=all, label=admin_low
 
        2) cd into /var/tmp and install the patch file.
 
        # cd /var/tmp
        # patchadd /var/tmp/<patch-id>
 
        where <patch-id> is the patch number.
 
Special Backout Instructions:
-----------------------------
NOTE 1:	Reboot the system after all the patches are removed.
 
        1) Login as a user authorized to assume a role that contains the
        Software Installation profile; typically the admin role.
        Assume that role.
 
        To verify the profile is assigned to the role, type:
        "profiles -l | grep patchrm".
 
        The result should be:
        /usr/sbin/patchrm    uid=0, privs=all, label=admin_low
 
        2) Backout patch by typing:
 
        # patchrm <patch-id>
 
        where <patch-id> is the patch number.

README -- Last modified date:  Monday, January 22, 2007

