OBSOLETE Patch-ID# 113579-12


Download this patch from My Oracle Support

Your use of the firmware, software and any other materials contained in this update is subject to My Oracle Support Terms of Use, which may be viewed at My Oracle Support.
For further information on patching best practices and resources, please see the following links:
Copyright (c) 2012, Oracle and/or its affiliates. All rights reserved.

Keywords: security ypserv ypxfrd crypt plugin password hashing nis ldap
Synopsis: Obsoleted by: 115695-02 SunOS 5.9: ypserv/ypxfrd patch
Date: Feb/20/2007


Install Requirements: Perform a reconfigure reboot after installing this patch to activate the changes delivered. An alternative may be specified in the Special Install Instructions.

Solaris Release: 9

SunOS Release: 5.9

Unbundled Product:

Unbundled Release:

Xref: This patch available for x86 as patch 114342

Topic: SunOS 5.9: ypserv/ypxfrd patch

Relevant Architectures: sparc

Bugs fixed with this patch:

Sun CR # Bug #
419282414976333
424843014991642
428335515003646
439005315044908
470060215111319
473741715120825
482355315147994
488252815165358
488293715165474
489053015167714
490545415172351
492631815178039
495139915184614
502215015203713
631694615284286
633290615290401
649565115362285


Changes incorporated in this version: 4882528

Patches accumulated and obsoleted by this patch: 113483-02 115490-01

Patches which conflict with this patch:

Patches required with this patch: 113319-26 115165-03 (or greater)

Obsoleted by: 115695-02

Files included with this patch:

/usr/include/crypt.h
/usr/lib/netsvc/yp/inityp2l
/usr/lib/netsvc/yp/rpc.yppasswdd
/usr/lib/netsvc/yp/ypmap2src
/usr/lib/netsvc/yp/ypserv
/usr/lib/netsvc/yp/ypstart
/usr/lib/netsvc/yp/ypxfr
/usr/lib/netsvc/yp/ypxfrd
/var/yp/Makefile

Problem Description:

4882528 ypserv segfaults when connection to resolver can't be established
 
(from 113579-11)
 
6495651 putback of 6316946 introduced hard dependency (on 113319-26)
 
(from 113579-10)
 
6316946 N2L: ypserv sporadically doesn't refresh NIS maps from LDAP after their TTL has expired
 
(from 113579-09)
 
6332906 corrupt yp requests may cause ypserv to hang or dump core
 
(from 113579-08)
 
4926318 ypserv deletes cert7.db file
 
(from 113579-07)
 
4951399 ypserv prints do_accept : can't open connection : Interrupted system call
 
(from 113579-06)
 
5022150 NIS/LDAP transition disables secure maps
 
(from 113579-05)
 
4890530 ypserv should only answer bind requests from clients in /var/yp/securenets
 
(from 113579-04)
 
4905454 ypserv holds parent stdio's causing program such as rsh to hang
 
(from 113579-03)
 
4882937 patch for 4390053 should include updated /usr/include/crypt.h
 
(from 113579-02)
 
        This revision accumulates S9U5 feature point patch 115490-01.
 
(from 113579-01)
 
4737417 ypxfrd security issue with map handling
 
(from 113483-02)
 
4283355 rpc.yppasswdd temporarily removes passwd source file resulting in exit
 
(from 113483-01)
 
4390053 crypt(3c) needs to interoperate with *BSD and Linux
4248430 RFE: NIS+ should support alternate encryption algorithms for the user password
4192824 newkey/chkey should use a configurable crypt() to encrypt the users password
4700602 crypt_gensalt should be version SUNW_1.22 instead of SUNW_1.21
 
(from 115490-01)
 
4823553 NIS to LDAP transition project (N2L) 2001/282


Patch Installation Instructions:
--------------------------------
 
For Solaris 2.0-2.6 releases, refer to the Install.info file and/or
the README within the patch for instructions on using the generic
'installpatch' and 'backoutpatch' scripts provided with each patch.
 
For Solaris 7-10 releases, refer to the man pages for instructions
on using 'patchadd' and 'patchrm' scripts provided with Solaris.
Any other special or non-generic installation instructions should be
described below as special instructions.  The following example
installs a patch to a standalone machine:
 
       example# patchadd /var/spool/patch/104945-02
 
The following example removes a patch from a standalone system:
 
       example# patchrm 104945-02
 
For additional examples please see the appropriate man pages.


Special Install Instructions:
-----------------------------
 
NOTE 1:  Reconfigure system (boot -r) immediately after patch installation.
 
NOTE 2:  To get the complete Flexible Crypt feature, please also install the
         following patches:
 
         112874-06 (or greater)  libc patch
         113475-01 (or greater)  libsecurity crypt patch
         113476-01 (or greater)  passwdutil.so.1 patch
         113480-01 (or greater)  pam_unix patch
         113481-01 (or greater)  nispasswdd patch
         113482-01 (or greater)  sulogin patch
 
NOTE 3:  To get the complete NIS to LDAP Transition Project, please also 
         install the following patches:
 
         115165-02  (or greater)  libnisdb.so.2 patch
         115677-01  (or greater)  idsconfig patch
 
NOTE 4:  This patch replaces the file /var/yp/Makefile after saving
         a copy of it as /var/yp/Makefile.old.  If customizations were
         previously made to the /var/yp/Makefile, please transfer the
         customizations to the new /var/yp/Makefile.
 
NOTE 5:  /var/yp/Makefile.old has been replaced by Makefile.patchid for rev -06
         and greater revisions of this patch.  Refer to the patch log file for
         more information.


NOTE: The list of 'patches required with this patch' (above) has been
modified from the list specified at patch creation time. The reason for
the modification is that one or more of the required patches was
either never released or withdrawn after its release. The following
substitutions (which are guaranteed to satisfy the original requirements)
were therefore made:

115165-03 replaces 115165-02




README -- Last modified date: Friday, November 9, 2012