OBSOLETE Patch-ID# 114242-15
Keywords: security nsswitch passwdutil.so.1 pam_authtok_store pam_ldap ldap
Synopsis: Obsoleted by: 114242-16 SunOS 5.9_x86: passwdutil.so.1 & pam_authtok Patch
Date: Mar/30/2005


Install Requirements: See Special Install Instructions                      
                      Reboot after installation                      
                      
Solaris Release: 9_x86

SunOS Release: 5.9_x86

Unbundled Product: 

Unbundled Release: 

Xref: This patch available for SPARC as patch 113476

Topic: SunOS 5.9_x86: passwdutil.so.1 & pam_authtok Patch

Relevant Architectures: i386

BugId's fixed with this patch: 4743707 4746114 4747441 4751394 4754634 4765506 4768140 4774607 4793719 4805635 4830406 4873939 4874749 4877796 4887906 4894583 4913437 4977110 4980441 4988859 5003953 5007891 5012514 5014993 5044522 5096736

Changes incorporated in this version: 5007891 5096736

Patches accumulated and obsoleted by this patch: 

Patches which conflict with this patch: 

Patches required with this patch: 

Obsoleted by: 

Files included with this patch: 

/usr/lib/libpam.so.1
/usr/lib/llib-lpasswdutil
/usr/lib/llib-lpasswdutil.ln
/usr/lib/passwdutil.so.1
/usr/lib/security/pam_authtok_check.so.1
/usr/lib/security/pam_authtok_get.so.1
/usr/lib/security/pam_authtok_store.so.1
/usr/lib/security/pam_dhkeys.so.1
/usr/lib/security/pam_passwd_auth.so.1

Problem Description:

5007891 s8 passwd(1) command may SEGV on NIS+ master servers.
5096736 pwd change in NIS+ fails with "Permission denied" if new pwd is longer than 11 b
 
(from 114242-14)
 
4894583 su to a local account will dump core, if LDAP is enabled
 
(from 114242-13)
 
5044522 Root is able to change user passwd if no of attempts > max_attempts in nis+.
 
(from 114242-12)
 
5014993 user logins may fail when nsswitch compat mode is used with NIS+ or LDAP
 
(from 114242-11)
 
4988859 passwd -g, -e, -h cause segfault
5003953 Logins to Solaris 9 NIS+ clients always talk to master even when it is down
 
(from 114242-10)
 
4913437 Changing password in NIS+ fails on S9 clients with "Permission denied"
5012514 'passwd <nis+_user>' fails as root on NIS+ systems
4980441 PAM module pam_dhkeys fails to retrieve changed credentials
 
(from 114242-09)
 
4977110 passwd doesn't work with compat entries in /etc/nsswitch.conf
 
(from 114242-08)
 
4887906 pam_sm_chauthtok() returns 13 (PAM_USER_UNKNOWN) if lastchg=0 for local users
 
(from 114242-07)
 
4746114 libpam internationalized messages are off by 1 for locale != C
4793719 pam_authtok_check.so.1::circ() too space-conservative
4805635 root may change enduser password in NIS+ without entering its own password
4877796 passwd (passwdutil) inadvertently resets aging information
 
(from 114242-06)
 
4873939 pam and compat does not work after applying patch 108993-18
 
(from 114242-05)
 
4874749 passwd -x modifies the lastchg field also in /etc/shadow file
 
(from 114242-04)
 
4765506 NIS+ password problems with Solaris 9
4768140 passwd core dumps when changing shell
 
(from 114242-03)
 
4774607 pam_ldap gets confused when root tries to change user's password
 
(from 114242-02)
 
4830406 passwdutil is too dumb to handle NIS+ subdomains correctly
 
(from 114242-01)
 
4743707 non-default nsswitch backends confuse passwdutil.so.1
4747441 pam_authtok_store does not map all the PWU errors to PAM errors
4751394 non decisive modules should not return PAM_SUCCESS
4754634 passwd command seg faults when updating user can't be authenticated to LDAP

Patch Installation Instructions:
--------------------------------
 
For Solaris 2.0-2.6 releases, refer to the Install.info file and/or
the README within the patch for instructions on using the generic
'installpatch' and 'backoutpatch' scripts provided with each patch.
 
For Solaris 7-9 releases, refer to the man pages for instructions
on using 'patchadd' and 'patchrm' scripts provided with Solaris.
Any other special or non-generic installation instructions should be
described below as special instructions.  The following example
installs a patch to a standalone machine:
 
       example# patchadd /var/spool/patch/104945-02
 
The following example removes a patch from a standalone system:
 
       example# patchrm 104945-02
 
For additional examples please see the appropriate man pages.

Special Install Instructions:
-----------------------------
 
NOTE:   To get the complete fix for the bug 4765506, please install
        the following patch in addition to this patch:
 
        113719-08       (or newer)      rpc.nispasswdd

README -- Last modified date:  Thursday, April 14, 2005

