Patch-ID# 115615-10
Keywords: directory server security
Synopsis: SunOS 5.9_x86 : Sun Java(TM) System Directory Server 5.2 patch 2
Date: May/25/2004


Install Requirements: None                      
                      
Solaris Release: 9_x86

SunOS Release: 5.9_x86

Unbundled Product: Directory Server

Unbundled Release: 5.2

Xref: This patch available for Sparc as patch 115614-10
        NOTE:   Refer to Special Install Instructions section for  specific information on this patch.

Topic: 

Relevant Architectures: i386

BugId's fixed with this patch: 4470489 4653354 4686213 4719793 4724380 4808471 4816672 4819535 4819710 4824825 4826265 4826843 4837881 4845622 4846332 4856331 4857614 4863943 4865525 4865653 4865940 4866019 4866020 4866042 4868546 4869596 4870522 4875059 4875661 4876045 4876558 4877307 4877855 4877894 4879059 4879061 4879063 4879725 4881004 4881181 4882699 4883250 4884551 4884562 4885686 4885781 4886766 4886773 4887252 4887779 4887823 4887872 4888371 4889124 4889908 4891116 4891177 4891228 4891294 4892676 4893427 4894162 4895652 4897113 4897873 4899710 4901063 4901590 4901922 4903368 4904414 4905697 4908443 4909592 4911023 4911678 4912539 4912664 4914067 4914467 4914856 4918912 4919017 4921574 4922595 4923238 4923294 4923860 4923939 4924002 4925205 4928129 4928897 4930075 4930081 4930098 4932767 4932782 4932848 4933667 4934942 4934977 4935063 4935077 4937356 4938775 4941327 4941585 4941781 4942286 4942481 4942664 4943278 4944732 4946145 4946487 4947083 4947099 4947106 4950677 4950680 4950744 4950751 4950754 4951377 4951921 4955835 4956510 4957404 4959500 4960638 4960904 4961502 4963599 4964294 4966313 4966886 4967936 4969832 4970375 4970989 4971006 4971148 4971643 4971709 4971715 4971975 4972081 4972095 4972855 4973181 4973186 4973806 4974197 4974285 4974287 4974748 4974789 4974942 4975358 4976153 4976158 4976819 4976883 4976981 4977451 4978018 4978103 4978113 4978118 4978687 4978688 4978689 4978695 4978697 4979321 4980054 4980223 4980412 4980421 4981702 4981783 4981785 4982698 4983995 4984084 4984114 4985302 4987825 4987902 4989893 4990227 4990951 4990974 4990981 4991071 4991136 4991160 4991667 4991919 4992043 4992702 4992706 4993313 4993746 4994310 4994321 4994393 4994399 4995191 4996427 4996483 4997230 4997833 4999266 5001781 5002956 5003027 5003037 5003046 5003272 5003822 5003943 5006931 5008567 5008575 5008666 5009486 5010064 5010077 5011130 5012388 5014078 5014207 5014310 5015101 5015115 5017743 5018564 5018729 5020348 5021198 5021348 5022028 5023292 5023337 5023338 5023364 5023500 5023936 5024069 5024189 5025135 5025892 5027230 5027329 5028058 5029593

Changes incorporated in this version: 4974942 5018564 5025892 5029593

Patches accumulated and obsoleted by this patch: 

Patches which conflict with this patch: 

Patches required with this patch: 

Obsoleted by: 

Files included with this patch: 

/etc/ds/v5.2/slapd/install/ldif/roledit.ldif
/etc/ds/v5.2/slapd/install/ldif/tasks.ldif
/etc/ds/v5.2/slapd/install/schema/00core.ldif
/etc/ds/v5.2/slapd/install/schema/11rfc2307.ldif
/etc/init.d/directory
/etc/init.d/directorysnmp
/etc/rc0.d/K41directory
/etc/rc0.d/K86directorysnmp
/etc/rc1.d/K41directory
/etc/rc1.d/K86directorysnmp
/etc/rc2.d/K86directorysnmp
/etc/rc2.d/S72directory
/etc/rc3.d/S86directorysnmp
/etc/rcS.d/K41directory
/etc/rcS.d/K86directorysnmp
/usr/ds/v5.2/bin/slapd/admin/bin/ds_create
/usr/ds/v5.2/bin/slapd/admin/bin/ds_remove
/usr/ds/v5.2/bin/slapd/admin/bin/ns-update
/usr/ds/v5.2/bin/slapd/admin/scripts/template-create_migration_dir_sub
/usr/ds/v5.2/bin/slapd/admin/scripts/template-db2index.pl
/usr/ds/v5.2/bin/slapd/admin/scripts/template-migrate5xto52
/usr/ds/v5.2/bin/slapd/admin/scripts/template-migrateInstance5
/usr/ds/v5.2/bin/slapd/admin/scripts/template-ns-accountstatus.pl
/usr/ds/v5.2/bin/slapd/admin/scripts/template-ns-activate.pl
/usr/ds/v5.2/bin/slapd/admin/scripts/template-ns-inactivate.pl
/usr/ds/v5.2/bin/slapd/admin/scripts/template-schema_push.pl
/usr/ds/v5.2/bin/slapd/server/idsktune
/usr/ds/v5.2/bin/slapd/server/ns-ldapagt
/usr/ds/v5.2/bin/slapd/server/ns-slapd
/usr/ds/v5.2/lib/acl-plugin.so
/usr/ds/v5.2/lib/chainingdb-plugin.so
/usr/ds/v5.2/lib/cos-plugin.so
/usr/ds/v5.2/lib/des-plugin.so
/usr/ds/v5.2/lib/hdsml-plugin.so
/usr/ds/v5.2/lib/libback-ldbm.so
/usr/ds/v5.2/lib/libfe.so
/usr/ds/v5.2/lib/liblcoll.so
/usr/ds/v5.2/lib/libslapd.so.1
/usr/ds/v5.2/lib/mrules-plugin.so
/usr/ds/v5.2/lib/passthru-plugin.so
/usr/ds/v5.2/lib/pwdstorage-plugin.so
/usr/ds/v5.2/lib/referint-plugin.so
/usr/ds/v5.2/lib/replication-plugin.so
/usr/ds/v5.2/lib/retrocl-plugin.so
/usr/ds/v5.2/lib/roles-plugin.so
/usr/ds/v5.2/lib/statechange-plugin.so
/usr/ds/v5.2/lib/subtreecounter-plugin.so
/usr/ds/v5.2/lib/syntax-plugin.so
/usr/ds/v5.2/lib/uid-plugin.so
/usr/ds/v5.2/lib/valuecounter-plugin.so
/usr/ds/v5.2/plugins/signatures/plugin.signatures
/usr/ds/v5.2/plugins/slapd/slapi/examples/README
/usr/ds/v5.2/plugins/slapd/slapi/include/ldap_msg.h
/usr/ds/v5.2/plugins/slapd/slapi/include/prinit.h
/usr/ds/v5.2/plugins/slapd/slapi/include/slapi-plugin.h
/usr/ds/v5.2/plugins/snmp/netscape-ldap.mib
/usr/ds/v5.2/sbin/directoryserver
/usr/ds/v5.2/sbin/entrycmp
/usr/ds/v5.2/sbin/insync
/usr/ds/v5.2/sbin/repldisc
/usr/ds/v5.2/sbin/sync-directory
/usr/ds/v5.2/setup/DirectoryServerSetup.class
/usr/ds/v5.2/setup/locale/resources/DSSetupResources.properties
/usr/ds/v5.2/setup/slapd/slapd.inf
/usr/ds/v5.2/setup/typical.ins
/usr/ds/v5.2/setup/uninstall.ins
/usr/sadm/mps/admin/v5.2/java/jars/ds522.jar
/usr/sadm/mps/admin/v5.2/java/jars/ds522_en.jar
/usr/sadm/mps/admin/v5.2/manual/en/slapd/SunONE.jpg
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/SunONE.jpg
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/backup.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/chaining_authentication.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/chaining_connection.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/chaining_new.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/chaining_settings.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/config_encryption.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/config_network.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/config_settings.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/config_snmp.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/cos_attributes.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/cos_general.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/cos_template.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/data_acctlock.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/data_attribute_set.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/data_chaining.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/data_passwords.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/data_replication.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/dialog_browser.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/effectiverights_input.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/effectiverights_output.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/generic_attribute.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/generic_editor.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/generic_objectclass.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/help_contents.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/help_misc.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/helpstyle.css
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/install_newinstance.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/logs_access.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/logs_audit.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/logs_error.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/logs_setlevel.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/password_general.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/password_lockout.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/password_policy.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/performance_caching.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/performance_client.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/performance_misc.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/plugins.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/plugins_signature.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/referral_authentication.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/referral_general.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/referral_urls.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/replica_advanced.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/replica_agreement.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/replica_changelog.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/replica_connection.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/replica_consumer.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/replica_disabled.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/replica_duplicate.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/replica_hub.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/replica_id.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/replica_legacy.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/replica_manager.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/replica_master.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/replica_network.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/replica_partial.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/replica_role.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/replica_schedule.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/replica_summary.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/role_accounts.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/role_filtered.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/role_general.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/role_managed.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/role_nested.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/role_selector.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/schema_attributes.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/schema_editattr.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/schema_editobj.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/schema_matchingrules.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/schema_objectclass.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/search_advanced.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/search_basic.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/search_filtered.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/set_passwordpolicy.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/set_roles.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/status_access.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/status_audit.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/status_chaining.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/status_counters.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/status_error.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/status_replication.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/status_suffixes.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/suffix_attrencrypt.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/suffix_export.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/suffix_indexes.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/suffix_initialize.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/suffix_new.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/suffix_options.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/suffix_reindex.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/suffix_settings.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/task_backup.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/task_export.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/task_import.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/task_restore.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/help/user_account.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/index.html
/usr/sadm/mps/admin/v5.2/manual/en/slapd/style.css
/usr/sadm/mps/admin/v5.2/manual/en/slapd/tokens.map
/usr/sadm/mps/admin/v5.2/manual/en/slapd/topicindex.htm
/usr/sbin/directoryserver

Problem Description:

4974942 deadlock with start_tls and disconnect_server
5018564 DS Patch README installation section to be improved
5025892 Patch_ZIP: applying patch zip breaks replication over SSL
5029593 MMR2 way crash in prot_notify_update
 
(from 115615-09)
4816672 ns-slapd looping on mmap()==EAGAIN when running out of swap
4971715 "Startup time on server" always shows current time
4993313 initial values for password policy settings
5003027 patchrm 115614-06 fails if no directory instance exist
5003943 OnLine Help broken on linuxRH2.1AS - rpm pkg install
5014310 5.2 Consumers hang when schema is pushed over replication.
5015101 Obsolete idsktune version 9-MAY-2003 in DS 5.2 patch2 build7 - sparc and x86
5018729 upgrade ns-slapd/schema_push.pl fails on WINNT
5020348 /usr/sbin/directoryserver is not cluster-safe whith failover filesystem
5021198 upgrade: jss related links created under <SR> do not point on secv1/[*.jar|*.so]
5021348 PATCHZIP : unable to update libraries
5022028 substring index get corrupt if  one of similar multiple values is deleted
5023292 schema_push.pl does not always update 99user.ldif
5023337 Patch_ZIP: Auto-upgrade with Multi-instance fails on HP-UX
5023338 Patch_ZIP: README file broken (end truncated)
5023500 Description of  Resource Type for Directory Server Data Service is not appropria
5023936 Patch_ZIP: ns-slapd already running error message
5024069 PATCHZIP - linux - no sync during upgrade
5024189 Java exception error in console while editing/modifying an user defined Object c
5025135 memory leak when cos performance improvement activated
5027230 Unable to backout the patch
5027329 On console, replace button for pwd policy is available for user,member to role w
5028058 New Java exception error in console while editing/modifying an user defined Obje
 
(from 115615-08)
4978018 directoryserver configure ask again questions on second cluster node, then fails
4987902 config fails due to LDAPCSDK_5.10 not found
5010064 Console should request LDIF file name before allowing [OK] in Export to LDIF
5010077 Console's Export to LDIF on server machine puts resulting ldif in logs directory
5011130 Applying 5.2patch2 patches on configured instance does not fix cluster bugs
5012388 OrionB7: DS repl. erase a schema in master1, with no schema change in master2
5014078 Server crashes if bad certificate (without issuerDN) sent by the client
5014207 digest authentication with valid username null password crashes S1DS5.2 ns-slapd
5015115 JES2_b07a: directory tree fails to remove an organization unit
5017743 Coredump 4-way MMR in Retro-Changelog
5023364 JES2_b07a: l10n: Duplicated hot keys in DS GUI
 
(from 115615-07)
4686213 Number of passwds to remember in passwd history not working as expected.
4942481 slapd exits with ERROR<5130> - Resource Limit - Memory allocation error
4946145 Memory leakage when running persistent searches (psearch)
4971148 mpsadmserver&directoryserver configure doesn't support multiple SUNWicu installa
4978103 stop-slapd is not cluster-enabled
4989893 Orion2_b05 : 'db2index.pl' failed inside the 'comm_dssetup.pl'
4994310 Backout patch P2 to go to 5.2 : missing version test
4994321 Attributes list size incorrect in Add indexed attribute windows
4994393 DS unconfigure removes set of links => AS cannot be restarted anymore
4994399 DS unconfigure does not remove ISIE entries stored in the CDS
4996427 unable to focus on replica ID field without resizing window in wizard
4996483 Cannot create an instance from Console
4997230 Buildnumber is not updated during the upgrade/backout
4997833 patchrm -R fails and reports "libc: warning: libc/libthread interface mismatch:
4999266 LongDuration ACI test failed with DN normalization
5001781 Anonymous search should not return password policy attributes
5002956 Directory Server crashs on receipt of an invalid PDU
5003037 patchrm reports "Cannot convert from cert8.db to cert7.db" then "success" ?!?!
5003046 cert7.db not upgraded during patchadd if cert8.db already exists in directory
5003272 Directory Server install fails with Orion2_06 on s10_53
5003822 RPMs integrate command issue
5006931 directoryserver command -d fails of non-root
5008567 Update the README of the patch with Backout of NSS certificates procedures
5008575 Link errors when applying patch 115614-06 on second node of cluster
5008666 DS 5.2 Replication Master 1 will hang when master 2 is being stoped
5009486 Update comments issued by the pre/post patch/backout scripts
 
(from 115615-06)
4866042 User entry with nt user account cannot be edited with custom editor.
4885686 slapd can crash if entry is deleted and immediately added again
4923238 pkginfo for SUNWasha should display correct name and description
4928897 Registration file not found for "SUNW.dsldap" and "SUNW.mps"
4932782 ns-accountstatus.pl fails if the suffix includes a whitespace
4934942  DS52 - wildcard search has problems with single character attribute values
4937356 ACI's/ACL's do not take in account for extra whitespace's
4964294 Several attributes are missing in the password policy entries created on Directo
4974197 No control of values - integers cast regardless value actually ldapmodifyied
4976883 DS 5.2 does not detect all available system memory at startup
4980421 ld.so.1 if directoryserver help mmldif with no instance created
4981785 max value delay interval in R-I plugin before buffer overflow is 21474 secs  (5.
4985302 more than once pkgadd SUNWdsvu corrupts install - bad /usr/sbin/directorserver
4987825 MMR issue running batch password updates
4990227 security risk with HF1 to 5.2 "dictionary attack" possible in MMR
4990951 Postpatch failed if DS is not configured
4990974 slapd crashes in dn normalization
4990981 Restart failed during postpatch if DS 5.1 is installed
4991071 Cannot restart DS as non root during patchadd
4991136 Cannot //usr/sbin/directoryserver sync-cds as requested by patchadd 115614-05
4991160 pkgchk errors after patchadd 115614-05
4991667 Directory Server RPMs in JES2 are not compatible with public ICU bits
4991919 Cannot backout DS patch if DS has been configured after patch install
4992043 rebranding is not correct in the DS OLH
4992702 Backout of DS patch 115614-05 fails on 32 bits kernel OS
4992706 Postpatch asks user to synchronize CDS even if AS is not configured
4993746 back to RTM/OR1 bits, downgrade left upgrade dir + versions.conf. clean up to do
4995191 postpatch/prebackout scripts need to : Update nspr links - change ownership of l
 
(from 115615-05)
4719793 ACIs on cn=schema are not replicated
4819535 Query performance slow with large numbers of static groups
4819710 DS51 - ";binary" compatibility issue -  ldap not handling the RFC1274
4826843 audit log is not rotated as configured in specific case.
4845622 Unable to configure PTA with URLs containing the same suffix
4846332 iDS 5.1 sp2: access log rotation not occuring upon restart of slapd
4856331 db2ldif -r used with -s or -n  makes ns-slapd core
4857614 Product doesn't function as it used to in earlier release.
4865525 ldapsearch -A fails against a chained database
4865653 During shutdown RI plugin can crash server if its processing deletes from ref lo
4875661 No Signature for Pass-Through Authentication Plug-In
4881181 Memory leak in search on suffix containing referral subsuffix
4883250 In certain condictions, binding with cert auth and simple can cause hang
4891116 Adding entry with "*" chars in DN field incur full scan of nstombstone
4895652 subtree plugin logs superfluous postop warnings
4911023 Performance degradation on HPUX under heavy load
4912664 All Attribute subtypes gets deleted from index  if they have same values
4914067 Pluging Signature does not check 64 bit binaries.
4918912 DENY macro ACI applies to entries that it should not apply to
4922595 Local aci doesn't work properly over a database link when specifing dn attribute
4923294 Cannot install SUNWdsvr SUNWdsvu in non forced mode
4923939 HP-UX version need to be unstripped way
4928129 nsslapd-accesslog-logminfreediskspace is not working as expected
4930075 migrateInstance5 of ds5.2 gives error stating 'uname' is not recognized as valid
4933667 string_values2keys return NULL array if value contains only blanks
4934977 some searches that start or end with a wild card trigger bug
4942286 iDS52/Search operation with "-" char in filter failure
4951921 Persistent search returns tombstone purging events
4960638 iDS52/LDAP operation (MOD) failure in line with usgae of OID and subtype
4960904 bak2db fails with db1/db2/db3 directory structure
4966313 Buffer Overflow in re_comp on AIX
4969832 Significant memory leak in 5.1 (sol) /5.2 (w2k)
4971975 Password history checking is incorrect on first change after decreasing password
4973806 5.2 rtm server core dumps in preop_modify when attr uniq plugin activated
4974285 Bad format of logging messages
4975358 S1DS5.2 installlation failed on HP-UX 11i
4976158 Patches should stop the servers, apply and restart the servers
4976819 over 5 min link loss causes consumer not to sync after network recovery
4976981 retrochangelog trimming crash
4977451 MMR4/SSL, ADD not replicated, DEL cannot be replayed (32), ERROR 8293 8221 8312
4978688 Directory crash due to control double free
4981702 ns-slapd process crashed when importing ldif contains encrypted value
4982698 Backout of DS patch deletes /usr/sbin/directoryserver if DS 5.1 is installed
4983995 pwdChagedTime is not replicated properly
4984114 expirationtimeunit does not take the right default value
 
(from 115615-04)
4808471 db2ldif, db2bak, ldif2db, bak2db cannot be run on an inactive node of a cluster
4869596 deletion of filteredrole entry takes over 2 mins from hub to consumer
4877855 vlv search based on empty container returns err=1
4897113 db2ldif blocked in ldbm_back_ldbm2ldif/.../__dbenv_open/.../lwp_mutex_lock
4930081 Retro-Changelog plugin not enabled post migration to ds 5.2 even though it was e
4941327 Server stops responding when LDAP search w/ too many attributes sent
4942664 cannot malloc 0 bytes in some VLV search when there is empty attributes
4955835 Read from uninitialized in plugin_setup
4956510 Using uninitialized variable in dispatch_operation_core_pb
4974287 "directoryserver help startconsole" doesn't show options
4976153 Patches 115614-02 and 115615-02 are not relocatable
4978113 Directory server always returns "off" for usePwdChangedTime
4978118 directoryserver -s instance-does-not-exist shows underlaying command
4978687 ldif2db is not cluster-safe / could run on inactive node while db is in use
4978689 ldif2ldap does not work on cluster - Can't connect to the LDAP server
4978695 ldap2ldif options doesn't work as documented and does not follow usage
4978697 /usr/sbin/directoryserver ldif2ldap does not work
4979321 Consumer aborts with core when usePwdChangedTime=1
4980054 directory returns an entry that does not match wildcard filter criteria (linux o
4980223 directoryserver -[dlgu] should check validity of the release
4980412 Various errors in top wrapper directoryserver's usage/help
4981783 AS error causes some errors in DS console (logs, snmp subagent, stop server)
4984084 Actions in the Tasks tabs are not working (Java Exception)
 
(from 115615-03)
4724380 Action cancels when user put some bad Informations in the 'Create Attribute' box
4863943 repl_set_mtn_referrals: could not set referrals for replica errors
4865940 Reliab12: error 8221 Incremental protocol failed....
4866019 Numeric value 64 bits casted to 32 bits in logs/errors
4866020 Total update failed because of space difference in sub-suffix: ERROR<8285>
4868546 nsslapd-maxpsearch value off by one
4870522 Unable to release Id(s) on the consumer after link down for more than 5 mins
4901922 incoherent return code for directoryserver help command
4912539 console process grows when adding users
4914856 if you activate/deactivate group, in property editor you will not see red block
4941585 couldn't get online help for New Root Object
4959500 Console doesn't display access log when greater than 60Mb and filter is used
4966886 SolPkg: Unable to unconfigure DS if multiple installed JVM
4967936 ds5ReplicaTransportWindowSize can not be set more than 500 on sunone console
4970375 Bad behavior in command directoryserver : getdefault and listversions flags
4970989 Directory packages informations still refer SUN ONE
4971006 Directory console refers SUN One DS instead SUN Java DS
4971643 On Line Help : One page is missing
4971709 Restart operation from stop state fails on Windows.
4972081 Incompatible attributes in SUNWdsha (x86) for /usr/cluster/lib and sub-dirs
4972095 Missing SUNWasha / SUNW.mps on x86
4972855 migrateInstance5 fails while migrating to DS52 with hotfix1
4973181 "Save" button stay disabled after some changes in the log options of the Directo
4973186 Invalid behavior of file selection dialog within Directory Server administration
4974748 References to 5.2_HotFix_1 should be replaced by references to 5.2_patch2
4974789 Orion Integrate command fails for DS pkgs
 
(from 115615-02)
4653354 segmentation fault when calling ldapcompare without the SSL option -Z
4824825 error message with fix
4826265 Crash with persistant search.
4837881 abnormal memory growth pattern using solaris packages (mtmalloc)
4875059 uid uniqueness plugin logs into errors log on every add operation
4879725 Admin Guide - Advanced multi-master config
4882699 DS 5.x listen port can be hijacked
4886766 userattr acis can misbehave
4886773 proxy auth control with peristent search does not work
4887252 replicated update can stop replication
4887823 acis added twice to acl cache when added via LDAP ADD operation
4888371 Deployment Guide should describe alternative RCL in MMR setup
4889124 DS 5.2 Solaris packages not compliant to jumpstart install
4889908 docs RFE for search result
4891177 Mentions of Solaris Operation Environment ==> Solaris Operating System
4892676 repldisc does not properly work when multiple instances of DS on the same machin
4893427 Crash while creating a Browsing Index
4897873 MOD INT. op on retryCount coming from a passwd MOD MUST be flagged as UNCHAINABL
4899710 Referential Integrity plugin does not allocate enough space for internal search
4903368 modify-delete more than 5 values of a multi-valued attr deletes ALL values
4904414 entry2str size with attr deletion CSNs
4905697 doc objectclass as an example for targattrfilters aci keyword
4908443 Password expiration doesn't completely prevent users from binding
4911678 MMR4wway: Crash in ruv_destroy on solaris9 x86
4914467 Admin Guide doc on chaining incorrectly states persistent search control works
4919017 Change wording in Admin guide regarding self-signed certificates and replication
4921574 Sun Cluster agents in DS 5.2 don't support HAStoragePlus
4923860 Special DN (long RDN with ; and ,) crashes the Directory Server
4925205 Directory Server 5.2 dumps core in acl_access_allowed
4930098 PasswordRetryCount internal op being replicated (sometimes empty)
4932848 ns-slapd -V does not display version for libslapd and libfe
4935063 the 5.2 command suffix2instance dumps a core
4935077 S1DS5.2 ldif2db -n userRoot -i test.ldif = Bus Error - core dumped
4938775 SolPkg: Use ${PKG_INSTALL_ROOT} instead of ${BASEDIR} in scripts
4941781 acl plugin searches inefficiently for acis in ldapsubentries at startup
4943278 Error 'cat: cannot open /[...]/serverroot.conf' when patchadd 115614-01
4944732 DS unconfigure hangs due to shared serverroot directory
4946487 DS5.1 : deliver unstripped binaries on HP-UX platform
4947083 ns-slapd dumps core during checking the history of a clear password
4947099 repl tools crash with memory allocation error at startup using SSL on Windows XP
4947106 output of repldisc on HP-UX does not display correctly the topology
4950677 replace the exec to ldapsearch with a call to the libldap
4950680 Increase default value for Probe_Timeout
4950744 RT_VERSION should be increased for SUNW.dsldap
4950751 STOP method implementations should not timeout themselves, should rely on RGM
4950754 Use LOG_NOTICE instead of LOG_INFO for logging key failover steps
4951377 Wrong DS port number seen after upgrade of DS and changing new DS port number to
4957404 start_tls is not thread safe
4961502 sustained modifies will consume all available memory and crash DS
4963599 new attr. pwdChangedTime should be subject to passwordExp
 
(from 115615-01)
4470489 patchadd fails to recreate /var/sadm/patch/.patchDB correctly
4876045 memory leak when clients modify non-existent entries
4876558 5.2 M initialized (online) by 5.1 M can't initialize its consumers (5.1 or 5.2)
4877307 VLV indexes broken
4877894 Merging empty VLV after import broken
4879059 SolPkg: directoryserver command to be updated for Sol10
4879061 SolPkg/DS: packages dependancies to be updated for Sol10
4879063 SolPkg/AS: packages dependancies to be updated for Sol10
4881004 nsslapd-changelogmaxage default value should be set to "7d"
4884551 ldapaddent does not correctly add the structural objectclasses
4884562 ieee802Device & bootableDevice schema backward incompatible in DS 5.2
4885781 Directory Server Patch check issue
4887779 Plugin Signature issue with DIRVERSION
4887872 SolPkg:DS unconfiguration reports errors (wrong links to ICU 64 bits lib created
4891228 server crashes if changelog trimming is enabled
4891294 Wrong pkginfo fields SUNW_PRODNAME and SUNW_PRODVERS
4894162 Generating self signed plugin binaries
4901063 Syntax error in prepatch file
4901590 CMApplicationFailureException on Customer portal
4909592 strange reverse-dns request issued by iDS5.2 at startup
4924002 identifying Java location based on SUNWj3rt install location
4932767 orion1_b09: slapd core dump

Patch Installation Instructions:
--------------------------------
 
For Solaris 7-9 releases, refer to the man pages for instructions
on using 'patchadd' and 'patchrm' scripts provided with Solaris.
Any other special or non-generic installation instructions should be
described below as special instructions.  The following example
installs a patch to a standalone machine:
 
       example# patchadd /var/spool/patch/104945-02
 
The following example removes a patch from a standalone system:
 
       example# patchrm 104945-02
 
 
For additional examples please see the appropriate man pages.

Special Install Instructions:
-----------------------------
        Upgrading Directory Server
 
    You upgrade Directory Server by applying patches, and synchronizing
    settings with the configuration directory server.
 
    ------------------------------------------------------------------------
 
    Notes
 
    1.  Directory Server belongs to a group of products sharing the same
    Administration Server. You must patch these products at the same time.
 
    2.  Upgrading Directory Server by applying patches only works for
    Directory Server installed on a Solaris system with SUNWds* packages.
 
    3.  During the patch upgrade process, some but not all
    instance-specific scripts under <ServerRoot>/slapd-<serverID>/ are
    backed up under <ServerRoot>/slapd-<serverID>/upgrade/bak_patch2/,
    and then regenerated to reflect changes made during the upgrade. If
    patches are backed out, the backed up scripts are restored.
 
    4.  Patching upgrades the SSL certificate database. If you
    subsequently decide to back out the patches *and* you have changed
    the content of the certificate database, you must *manually replay*
    the changes after backing out the patches.
 
    Directory Server cannot start in secure mode when you back out
    patches after having changed the server certificate. You can,
    however, turn off secure mode, restart Directory Server, reinstall
    the server certificate, and then enable SSL mode.
 
    Refer to the "Directory Server Administration Guide"
    (http://docs.sun.com/doc/817-5221) for instructions.
 
    5.  Rolling upgrade for Directory Server as a Sun Cluster data
    service is not supported.
 
    ------------------------------------------------------------------------
 
 
                  Applying Patches
 
       1. Follow the instructions for applying patches included in the
          Administration Server patch README file. The Administration
          Server patch is 115611-09.
 
          You *must* follow these instructions and apply Administration Server
          patches *even if you have never explicitly selected Administration
          Server for installation.*
 
                You may obtain patches from
                http://sunsolve.sun.com/pub-cgi/show.pl?target=patches/patch-access.
 
 
       2. If Directory Server is configured, synchronize the upgraded
          Directory Server settings with those stored in the
          configuration directory server using the directoryserver(1M)
          command.
 
          # /usr/sbin/directoryserver -u 5.2 sync-cds
 
          If the configuration directory server is remote, it must be
          available for this step to complete properly.
 
 
                  Removing Patches
 
       1. If Directory Server is configured, return to the pre-patch
          settings stored in the configuration directory using the
          directoryserver(1M) command.
 
          # /usr/sbin/directoryserver -u 5.2 sync-cds 5.2
 
          Notice the final 5.2. If the configuration directory server is
          remote, it must be available for this step to complete properly.
 
       2. Follow the instructions for removing patches included in the
          Administration Server patch README file.
 
       3. Make sure the directoryserver(1M) command applies to 5.2 by
          default:
 
          # /usr/sbin/directoryserver -d 5.2
 
 
                  Troubleshooting
 
        * If after applying the patches and setting the
          directoryserver(1M) command to apply to 5.2 by default
          (directoryserver -d 5.2), you still see a Sun ONE-branded
          console, rather than a Sun Java System-branded console, verify
          that you effectively synchronized with the configuration
          directory server (directoryserver sync-cds).
 
        * If backing out the patches did not work, typically this is
          because you did not synchronize settings for the upgraded Directory Server
          with the configuration directory server before you tried to
          back out patches. Try the entire process again, starting from
          Applying Patches.
 
    ------------------------------------------------------------------------

README -- Last modified date:  Tuesday, May 25, 2004

