Patch-ID# 118020-16 Keywords: security portal server linux rhel2.1 Synopsis: PS 6.3.1: Portal Server RHEL2.1 Date: Mar/07/2005 Install Requirements: None Solaris Release: Note: Redhat SunOS Release: Note: RHEL2.1 Unbundled Product: Portal Server Unbundled Release: 6.3.1 Xref: This patch available for Solaris SPARC in patch 118128-13, and in Solaris x86 in patch 118129-13 Topic: Portal Server RHEL2.1 Relevant Architectures: i386 BugId's fixed with this patch: 4919693 4942807 4982737 4984548 4990975 4996257 5007637 5011543 5012561 5012561 5014142 5017610 5024441 5027194 5031458 5032163 5032164 5032850 5034648 5038250 5040088 5040194 5042039 5043753 5044891 5045136 5045138 5046271 5046549 5048822 5049038 5049038 5049038 5056218 5063149 5065201 5065201 5065201 5067138 5067372 5067380 5069157 5070452 5072021 5080679 5089180 Changes incorporated in this version: 5046549 5045138 4982737 5067380 5067372 5048822 4942807 5049038 5067138 5045136 5044891 4919693 5014142 5012561 5070452 5065201 5032850 5032164 5065201 5063149 5065201 5032163 5024441 5069157 5049038 5049038 5072021 5080679 5056218 5043753 5012561 5042039 5040194 5040088 5031458 4984548 4990975 4996257 5007637 5011543 5017610 5027194 5034648 5038250 5046271 5089180 Patches accumulated and obsoleted by this patch: Patches which conflict with this patch: Patches required with this patch: Obsoleted by: Files included with this patch: Note: sun-portal-addressbookapi-6.3-25.i386.rpm sun-portal-addressbookapi-config-6.3-25.i386.rpm sun-portal-calendarapi-6.3-25.i386.rpm sun-portal-calendarapi-config-6.3-25.i386.rpm sun-portal-configurator-6.3-25.i386.rpm sun-portal-container-6.3-25.i386.rpm sun-portal-core-6.3-25.i386.rpm sun-portal-core-config-6.3-25.i386.rpm sun-portal-desktop-6.3-25.i386.rpm sun-portal-desktopadmin-6.3-25.i386.rpm sun-portal-desktop-config-6.3-25.i386.rpm sun-portal-desktopdatamgmt-6.3-25.i386.rpm sun-portal-desktopextension-6.3-25.i386.rpm sun-portal-desktopextension-config-6.3-25.i386.rpm sun-portal-desktoppapi-6.3-25.i386.rpm sun-portal-desktoppapi-config-6.3-25.i386.rpm sun-portal-desktopserviceconfig-6.3-25.i386.rpm sun-portal-desktopserviceconfig-config-6.3-25.i386.rpm sun-portal-discussions-6.3-25.i386.rpm sun-portal-discussions-config-6.3-25.i386.rpm sun-portal-gateway-6.3-25.i386.rpm sun-portal-gatewayadmin-6.3-25.i386.rpm sun-portal-gateway-config-6.3-25.i386.rpm sun-portal-gatewayidentityagent-6.3-25.i386.rpm sun-portal-gatewayidentityagent-identity-6.3-25.i386.rpm sun-portal-instantmessaging-6.3-25.i386.rpm sun-portal-instantmessaging-config-6.3-25.i386.rpm sun-portal-jsptaglib-6.3-25.i386.rpm sun-portal-jsptaglib-config-6.3-25.i386.rpm sun-portal-kssl-6.3-25.i386.rpm sun-portal-mail-6.3-25.i386.rpm sun-portal-mail-config-6.3-25.i386.rpm sun-portal-mobileaccess-6.3-25.i386.rpm sun-portal-mobileaccess-config-6.3-25.i386.rpm sun-portal-mobileaccess-doc-6.3-25.i386.rpm sun-portal-mobileaccess-identity-6.3-25.i386.rpm sun-portal-netfile-6.3-25.i386.rpm sun-portal-netlet-6.3-25.i386.rpm sun-portal-netlet-config-6.3-25.i386.rpm sun-portal-netletproxy-6.3-25.i386.rpm sun-portal-netletproxy-config-6.3-25.i386.rpm sun-portal-netmail-6.3-25.i386.rpm sun-portal-onlinehelp-6.3-25.i386.rpm sun-portal-onlinehelp-identity-6.3-25.i386.rpm sun-portal-portlet-6.3-25.i386.rpm sun-portal-portlet-config-6.3-25.i386.rpm sun-portal-portletsample-6.3-25.i386.rpm sun-portal-portletsample-config-6.3-25.i386.rpm sun-portal-portlettck-6.3-25.i386.rpm sun-portal-portlettck-config-6.3-25.i386.rpm sun-portal-proxylet-6.3-25.i386.rpm sun-portal-proxylet-config-6.3-25.i386.rpm sun-portal-rewriter-6.3-25.i386.rpm sun-portal-rewriteradmin-6.3-25.i386.rpm sun-portal-rewriterproxy-6.3-25.i386.rpm sun-portal-rewriterproxy-config-6.3-25.i386.rpm sun-portal-sample-6.3-25.i386.rpm sun-portal-sample-config-6.3-25.i386.rpm sun-portal-sdk-6.3-25.i386.rpm sun-portal-searchadmin-6.3-25.i386.rpm sun-portal-searchserver-6.3-25.i386.rpm sun-portal-searchui-6.3-25.i386.rpm sun-portal-searchui-config-6.3-25.i386.rpm sun-portal-srasample-6.3-25.i386.rpm sun-portal-ssoadapter-6.3-25.i386.rpm sun-portal-ssoadapteradmin-6.3-25.i386.rpm sun-portal-subscriptions-6.3-25.i386.rpm sun-portal-subscriptions-config-6.3-25.i386.rpm sun-portal-wsrpcommon-6.3-25.i386.rpm sun-portal-wsrpconsumer-6.3-25.i386.rpm sun-portal-wsrpconsumerconfig-6.3-25.i386.rpm sun-portal-wsrpconsumersample-6.3-25.i386.rpm sun-portal-wsrpproducer-6.3-25.i386.rpm sun-portal-wsrpproducersample-6.3-25.i386.rpm Problem Description: 5046549 Code to generate full login url when no session 5045138 integrating proxylet with Separis application 4982737 multi-db support for robot 5067380 Profiler user timetrack not working 5067372 Subscriptions Provider / Profiler Channel wrong class definition 5048822 sample portlets not shown when new container is added 4942807 Make PAB work with hosted domains 5049038 Create UWC application Helpers 5067138 CRT#2 netlet multiple hosts resolution 5045136 CRT#5 gateway in chroot not starting 5044891 CRT#4 Client IP Addr not accessable in secure mode (via Gateway) 4919693 Enabling IMAP/SSL to work 5014142 Calendar security problem 5012561 Desktop Admin console JATO fix 5070452 CRT#10 SRAP Admin console JATO fix 5065201 IS fix to read service name from constant 5032850 CRT#12 fix to get Desktop working with IS trunk 5032164 CRT#12 fix to get SRA working with IS trunk 5065201 IS fix to read service name from constant 5063149 workaround for issue with identity api to get authless anonymous working 5065201 Portal desktop service does not show up for a user in identity console 5032163 Remove AMSchema usage from desktop 5024441 CRT#14 must not use deprecated IS APIs 5069157 CRT#15 Portal support for new comms express address book 5049038 CRT#17 Calendar Comms Express Application Helper was not appending 'domain' to calendar id 5049038 CRT#18 Robot caused core dump when a site definition without "database" attribute. 5072021 CRT#19 GW should only URLEncode org parameter but leave others untouched 5080679 CRT#21 psinstall script does not handle non defult install location for Identity 5056218 CRT#22 linux : portal multiserverinstance script is not working 5043753 SRA Perf issues 5012561 CRT#25 Due to changes in JATO, wsrpadmin checkboxes fails 5042039 Netlet - Usability and Resiliency 5040194 Proxylet SSL Support 5040088 User defined PAC file generation 5031458 Pac file local storage 4984548 PAC file generation on Netscape does not include FTP, GOPHER protocol 4990975 PAC file generation on IE does not work if 'Use same proxy server for protocol' 4996257 Proxylet does not work if cookies are disabled 5007637 Proxylet UI was not displaying info on the debug tab 5011543 Port Range check failed for Proxylet 5017610 Proxylet autolaunch was downloading old VM version 5027194 Proxylet displaying debug info when debug was turned off 5034648 i18N was not displaying message if locale was different than English 5038250 Proxylet was not resetting browser proxy setting if session timed out 5046271 Proxylet on IE was not supporting all formats for PAC file configuration 5089180 Gateway was not usable if Netlet was disabled Patch Installation Instructions: -------------------------------- To install this patch, run the script on both the portal server machine and the gateway machine. upgradeportalrpms This will freshen your existing RPM installation. Post Install Instructions --------------------------- 1. Run the /bin/deploy to redeploy the portal application. Note: For Application Server the environment variable $DEPLOY_ADMIN_PASSWORD needs to be set to the webcontainer admin password before running the deploy script. 2. To configure the patch, run the following script 'upgradeSRA-04Q4-05Q1' from the /lib directory. This script is available under /lib directory. 3. Perform the following steps from your AMCONSOLE to configure Proxylet and Netlet service 3.1. Restart your Web or Application Server 3.2. Logon to AMCONSOLE as user 'amadmin'. 3.3. Remove Proxylet and Netlet services. To remove, under 'Identity Management' tab, choose to view the 'Services' option. This will list all the registered services on the left panel. From 'SRA Configuration', select 'Proxylet' and 'Netlet' checkbox . Scroll to the top on the left panel and click on the Remove button. This will remove the Proxylet and Netlet service from the ORG level. To Verify this step manually, you may check your LDAP directory ( under your orgainization) to makesure that the services (srapProxylet, srapNetlet) are really removed. 3.4. Add the services again. To add, under 'Identity Management' tab, choose to view the 'Services' option. Click on the Add button under Services. This will display all the available services on the right panel. Choose proxylet and Netlet service checkbox and click on the OK button. The newly added services will appear under 'SRA Configuration' on your left panel. 3.5. Click on the newly added services and build the template file. Click on the 'Save' button. 3.6. Add '/portal/netlet/jnlpclient.jar' and '/portal/netlet/netletjsse.jar' to non-Authenticated list of URLs under the gateway service. To add, a. Click on 'Service Configuration' tab. b. Click on the 'Gateway' link under 'SRA Configuration'. This will list all the available gateway profiles. d. Choose a particular profile by clicking on the link. c. Choose 'Security' tab. e. Add '/portal/netlet/jnlpclient.jar' in the edit field under 'Non-authenticated URLs' and click on 'Add' button. f. Add '/portal/netlet/netletjsse.jar' in the edit field under 'Non-authenticated URLs' and click on 'Add' button. g. Click on the 'Save' button at the bottom of the page. h. Restart your gateway server. Special Install Instructions: ------------------------------- None. README -- Last modified date: Monday, March 7, 2005