OBSOLETE Patch-ID# 108994-11
Keywords: security tasks projects nsswitch LDAP ldapclient libldap automountd
Synopsis: Obsoleted by: 108994-18 SunOS 5.8_x86: nss and ldap patch
Date: Dec/17/2002

Install Requirements: See Special Install Instructions                      
                      
Solaris Release: 8_x86

SunOS Release: 5.8_x86

Unbundled Product: 

Unbundled Release: 

Xref: This patch available for SPARC as patch 108993

Topic: SunOS 5.8_x86: nss and ldap patch
	NOTE:   Refer to Special Install Instructions section for
                IMPORTANT specific information on this patch.

Relevant Architectures: i386

BugId's fixed with this patch: 1257084 4310379 4312278 4320901 4351510 4353601 4357778 4357885 4357912 4359656 4359677 4409411 4415143 4425163 4429802 4435628 4449613 4459155 4480119 4486616 4614945 4623957 4632611

Changes incorporated in this version: 4614945

Patches accumulated and obsoleted by this patch: 110195-01 110406-02 111091-03 111432-01

Patches which conflict with this patch: 

Patches required with this patch: 

Obsoleted by: 

Files included with this patch: 

/etc/lib/nss_files.so.1
/etc/nsswitch.conf
/etc/nsswitch.dns
/etc/nsswitch.files
/etc/nsswitch.ldap
/etc/nsswitch.nis
/etc/nsswitch.nisplus
/usr/bin/ldaplist
/usr/include/ldap.h
/usr/include/nss_dbdefs.h
/usr/include/nsswitch.h
/usr/lib/ldap/ldap_cachemgr
/usr/lib/libldap.so.4
/usr/lib/libsldap.so.1
/usr/lib/nss_files.so.1
/usr/lib/nss_ldap.so.1
/usr/lib/nss_nis.so.1
/usr/sbin/ldap_gen_profile
/usr/sbin/ldapclient

Problem Description:

4614945 Memleak in getgrent() when using against Native Ldap.
 
(from 108994-10)
 
4486616 NS_LDAP_SERVER_PREF= in ldap_client_file causes libsldap to crash
 
(from 108994-09)
 
4623957 nested netgroups on Solaris 8 Native ldap I causes getent to core.
 
(from 108994-08)
 
4357885 passwd dumps core if no gecos field in LDAP entry for user
 
(from 108994-07)
 
4459155 mountd in netgroup_check() waiting for LDAP
4632611 Putback for 4320901 backed out fix for 4425163
 
(from 108994-06)
 
4320901 Native LDAP takes a very long time to try the next server in the list
 
(from 108994-05)
 
4351510 LDAP Switch getgrpgid causes nscd crash
4425163 handling of multiple solarisdatasearchdn still broken
4359677 ldapclient -m -B overwrites previous database rather than adding new one
 
(from 108994-04)
 
4409411 LDAP Name Service (nss_ldap) returns unexpected NULL pointer for group passwd
4429802 LDAP Name Service (nss_ldap) neglects to remove "{crypt}" from group password
4480119 _nss_ldap_group2ent() getgrent.c does not use last byte in supplied buffer.
 
(from 108994-03)
 
1257084 login times out, due to excessive time in group lookup
4357778 PSARC 2000/038 create /etc/default/nss
 
(from 108994-02)
 
4353601 i.nsswitch CAS removes non-hosts entries for xfn
 
(from 108994-01)
 
4312278 tasks, projects, extended accounting project
 
(from 110406-02)
 
4415143 ldapclient fails to handle -i flag
 
(from 110406-01)
 
      This patch revision was generated to accumulate and obsolete the
      feature changes introduced in point patch 110195-01.
 
4310379 ldapclient needs to be smarter to work with install (sysid)
 
(from 110195-01)
 
4310379 ldapclient needs to be smarter to work with install (sysid)
 
(from 111091-03)
 
4449613 Buffer overflow in libsldap.so.1 leads to root compromise
 
(from 111091-02)
 
4357912 cannot change password when ldapclient set to use a replica
 
(from 111091-01)
 
4359656 ldap backend does not search multiple paths as per NS_LDAP_SEARCH_DN parameter
 
(from 111432-01)
 
4435628 libldap does not support rfc 2254 encoded characters as used by automountd

Patch Installation Instructions:
--------------------------------
 
For Solaris 2.0-2.6 releases, refer to the Install.info file and/or
the README within the patch for instructions on using the generic
'installpatch' and 'backoutpatch' scripts provided with each patch.
 
For Solaris 7-9 releases, refer to the man pages for instructions
on using 'patchadd' and 'patchrm' scripts provided with Solaris.
Any other special or non-generic installation instructions should be
described below as special instructions.  The following example
installs a patch to a standalone machine:
 
       example# patchadd /var/spool/patch/104945-02
 
The following example removes a patch from a standalone system:
 
       example# patchrm 104945-02
 
For additional examples please see the appropriate man pages.

Special Install Instructions:
-----------------------------
 
Reboot the system after patch installation.
 
	NOTE:	To get the complete support for Tasks, Projects and
		Accounting, one needs to install the following patches:
 
		108529-01 (or newer)    kernel update patch
		108990-01 (or newer)    /usr/kernel/sys/acctctl and
					/usr/kernel/sys/exacctsys patch
		108996-01 (or newer)    /usr/lib/libproc.so.1 patch
		108992-02 (or newer)    libc patch
		109026-01 (or newer)    /usr/bin/i86/truss patch
		109004-01 (or newer)    /etc/init.d/acctadm and
					/usr/sbin/acctadm patch
		109010-01 (or newer)    /etc/magic and /usr/bin/file patch
		109020-01 (or newer)    /usr/bin/priocntl patch
		109028-01 (or newer)    /usr/bin/wracct patch
		108998-01 (or newer)    libexacct and libproject patch
		109008-01 (or newer)    at/atrm/batch/cron patch
		109012-01 (or newer)    /usr/bin/id and /usr/xpg4/bin/id patch
		109014-01 (or newer)    /usr/bin/lastcomm patch
		109016-01 (or newer)    /usr/bin/newtask patch
		109000-01 (or newer)    PAM patch
		109022-01 (or newer)    /usr/bin/projects patch
		109024-01 (or newer)    /usr/bin/i86/ps patch
		109006-01 (or newer)    /sbin/su.static and /usr/bin/su patch
		109036-01 (or newer)    useradd/userdel/usermod patch
		109030-01 (or newer)    perl patch
		109018-01 (or newer)	/usr/bin/pgrep and /usr/bin/pkill patch
		109034-01 (or newer)    /usr/bin/i86/prstat patch
		109038-01 (or newer)    /var/yp/Makefile and
					/var/yp/nicknames patch
		109032-01 (or newer)    projadd/projdel/projmod patch

README -- Last modified date:  Friday, April 4, 2003

