Patch-ID# 119313-42


Download this patch from My Oracle Support

Your use of the firmware, software and any other materials contained in this update is subject to My Oracle Support Terms of Use, which may be viewed at My Oracle Support.
For further information on patching best practices and resources, please see the following links:
Copyright (c) 2012, Oracle and/or its affiliates. All rights reserved.

Keywords: security nis+ solaris trusted extensions smc diskless
Synopsis: SunOS 5.10: WBEM Patch
Date: Mar/29/2011


Install Requirements: NA

Solaris Release: 10

SunOS Release: 5.10

Unbundled Product:

Unbundled Release:

Xref: This patch available for x86 as patch 119314

Topic: SunOS 5.10: WBEM Patch

Relevant Architectures: sparc

Bugs fixed with this patch:

Sun CR # Bug #
476084615127768
487269715162515
500676715199223
501698315202434
507646415219458
618305815233264
621292715242636
623589215252067
624277515254970
625110215258465
625238515259038
625238815259041
625590815260525
626491815263582
626506915263664
627788415268725
636191715302338
637895615309812
638006815310309
638351115311892
638971215314782
639651015318018
640761715323126
642291515329169
642298415329186
646895115349774
648046215354958
650033415364790
650593415367875
651434715372809
652141215376782
652494415378793
653923515386715
657984515409474
660086915421217
661315415428507
662521615435766
664782115449052
665663615454360
667161115462880
667247315463372
667297015463633
667818915466639
669093315474207
669853315478598
672179615491803
672503815493881
672810115495828
672961215496817
675295115511073
677363515524007
678009215527197
678144615527823
685676815573387
685715515573618
686223915576876
688514415591954
689796615601158
690024015602799
690108815603463
691644115615031
693647515630829
693836415632309
693873815632591
694672215638605
694672315638606
696451115652480
701552515694110


Changes incorporated in this version: 7015525

Patches accumulated and obsoleted by this patch: 123883-04

Patches which conflict with this patch:

Patches required with this patch: 119042-09 121901-01 (or greater)

Obsoleted by:

Files included with this patch:

/etc/init.d/init.wbem
/etc/rc0.d/K36wbem (deleted)
/etc/rc1.d/K36wbem (deleted)
/etc/rc2.d/S90wbem (deleted)
/etc/rcS.d/K36wbem (deleted)
/etc/security/auth_attr
/etc/security/prof_attr
/lib/svc/method/svc-wbem
/usr/sadm/bin/cimworkshop
/usr/sadm/bin/dtsetup
/usr/sadm/bin/mib2mof
/usr/sadm/bin/mofcomp
/usr/sadm/bin/mofreg
/usr/sadm/bin/ossadm
/usr/sadm/bin/smdiskless
/usr/sadm/bin/smosservice
/usr/sadm/bin/wbemadmin
/usr/sadm/bin/wbemlogviewer
/usr/sadm/lib/smc/lib/preload/providerutility.jar
/usr/sadm/lib/volmgr/VVolMgr.jar
/usr/sadm/lib/wbem.jar
/usr/sadm/lib/wbem/WbemServices.properties
/usr/sadm/lib/wbem/cimapi.jar
/usr/sadm/lib/wbem/cimom.jar
/usr/sadm/lib/wbem/config_tftp
/usr/sadm/lib/wbem/drmproviders.jar
/usr/sadm/lib/wbem/fsproviders.jar
/usr/sadm/lib/wbem/libWBEMkernel.so
/usr/sadm/lib/wbem/libWBEMuser.so
/usr/sadm/lib/wbem/libcimom.so
/usr/sadm/lib/wbem/libprovutil.so
/usr/sadm/lib/wbem/libsmoss.so
/usr/sadm/lib/wbem/libsolprov.so
/usr/sadm/lib/wbem/providerutility.jar
/usr/sadm/lib/wbem/remotedprovider
/usr/sadm/lib/wbem/smosscmd
/usr/sadm/lib/wbem/solarisprovider.jar
/usr/sadm/lib/wbem/suncimom.jar
/usr/sadm/lib/wbem/sunwbem.jar
/var/svc/manifest/application/management/wbem.xml

Problem Description:

7015525 patch 119313-39 breaks the fix of CR 6359179 - i.script (pkgproto cmd) - is not "e" file friendly
 
(from 119313-41)
 
6264918 /usr/sadm/bin/dtsetup storeCred echoes password in cleartext
 
(from 119313-40)
 
6773635 SMC does not create local or LDAP users' home directories on certain x86 platforms
 
(from 119313-39)
 
6539235 line no. 531 of smossspmi.c is shown as lint error, but it looks like a serious bug
6964511 macro SM_NOT_FOUND_ON_MEDIA is not defined correctly; leads to incorrect output
 
(from 119313-38)
 
6938738 SMC requires rebranding
 
(from 119313-37)
 
6656636 selection of Rights properties causes smcwbemserver to core if /usr/bin has more than 1000 executables
6936475 ossadm/read_bp breaks if a line has more than two escaped newlines in bootparams file
 
(from 119313-36)
 
6946722 ossadm should display mode not specified when user does not specify on CLI
6946723 ossadm does not specify sub-command missing when user does not specify any subcommand on CLI
 
(from 119313-35)
 
6885144 SMC ignores values set in /etc/default/passwd
 
(from 119313-34)
 
6938364 ossadm doesn't execute as the sm_load_libraries fail to find runpath for libs
 
(from 119313-33)
 
6900240 need to stop the diskless madness and make diskless sustainable and reliable
 
(from 119313-32)
 
6897966 config_tftp expects non-existent filelist.safe and returns 0 prematured state
6901088 smdiskless dumps core (libsmoss) if the optional client root is not specified
6916441 SMC does not start using Java 1.6, sticks on loading toolboxes
 
(from 119313-31)
 
6380068 SMC 2.1 adding multiple users to an LDAP group creates incorrect entries
6856768 Admin Install package common_files outdated
 
(from 119313-30)
 
5076464 SMC 2.1 "Copy Initial Files From:" field in user template does not work
 
(from 119313-29)
 
6625216 patches 121308-11 and 124188-02 being recommended when none of their packages are installed
6857155 i86 server does not create a boot_archive when client os=sparc.sun4v.Solaris10
 
(from 119313-28)
 
6862239 [tx] SMC console hangs on adding a new user
 
(from 119313-27)
 
6781446 SMC has issue with TSOL exec_attr in LDAP env
 
(from 119313-26)
 
6613154 SMC abuses PAM_RUSER
6725038 SMC needs to support account management with LDAP scope
 
(from 119313-25)
 
6251102 SMC: WBEM_Logging_Service prints garbage characters in debug messages.
6671611 SMC issues with s10u5_08 even after auditing is off and BugId 6478257 is fixed
6690933 deletion of hosts that are assigned to the tnrhtp templates fails in SMC with LDAP scope
6721796 running SMC remotely and attaching to another SMC server, LDAP logins cannot authenticate
6729612 SMC stops working when hostname is associated with a vni interface
6780092 SMC command line tools do not work when netservices limited is used
 
(from 119313-24)
 
6600869 SMC will not work as a user if cmask set to 077 in /etc/default/init file with JASS
6752951 user can't manage user account on SMC
 
(from 119313-23)
 
6521412 PSARC 2006/525: new boot sparc
 
(from 119313-22)
 
6647821 SMC fails accreditation requirement known as separation of duty
6698533 "wbemadmin" hangs and dumps "java.lang.NullPointerException"
6728101 i.rbac entry missing in the package prototype_com file
 
(from 119313-21)
 
6672473 dtsetup doesn't handle multiple scopes for LDAP
 
(from 119313-20)
 
6600869 SMC will not work as user if cmask set to 077 in /etc/default/init file with JASS
 
(from 119313-19)
 
6678189 smcboot[2551]: bind: Address already in use
 
(from 119313-18)
 
6514347 SMC: warning dialog appears when starting "Enhanced Storage" (refix)
6672970 BugId fix 6514347 not working properly in patches 119313-17 & 119314-18
 
(from 119313-17)
 
6514347 SMC: warning dialog appears when starting "Enhanced Storage"
 
(from 119313-16)
 
6277884 could not edit properties of individual nodes in SMC hosts tool, in LDAP scope
6422915 not able to add Ethernet addr in Computer & Network tool when SMC scope LDAP
6422984 no content in subnetwork view in Computer & Network tool when SMC scope LDAP
 
(from 119313-15)
 
6579845 [tcde-smc] $HOME ownership incorrect when administrative role created
 
(from 119313-14)
 
4760846 SMC and enhanced crypt(3c) seem to be incompatible
6505934 patchadd: /tmp/CLEANUP file not removed which causes a confusing log
 
(from 119313-13)
 
6500334 smosservice add command fails after Zulu integrates
 
(from 119313-12)
 
6524944 patches 119313-11 119314-12 have incorrect deletes files for package SUNWwbcor
 
(from 119313-11)
 
6242775 SMC mail server option behaves differently in different situations
6361917 SMC 2.1: fully qualified name is not valid in user's properties
 
(from 119313-10)
 
6480462 pkgchk errors after zones upgrade from S10/S10U1 FCS to S10U3_07a for SUNWwbcor
 
(from 119313-09)
 
        This revision addresses a packaging issue.
 
(from 119313-08)
 
        This revision accumulates Solaris Update S10U3 feature point patch
        123883-04.
 
(from 119313-07)
 
6383511 patches 121308-02 and 119313-05 break smlog in Solaris 10
6378956 smosservice/smdiskless is broken in s10u2_02 due to WBEM issues
6407617 SMC should work with 121308-02 (or greater) even if JAVA_HOME and/or PATH are set to 1.4.2
 
(from 119313-06)
 
6389712 customer wants fix so that he does not have to remove /var/sadm/smc/codebase directory
 
(from 119313-05)
 
6183058 SMC GUI outputs java.lang.UnsupportedClassVersionError
 
(from 119313-04)
 
6252385 install changes needed for Solaris Boot Architecture
6252388 diskless changes needed for Solaris Boot Architecture
6265069 find device calls devfs_bootdev_free_list() after incrementing boot_dev pointer
 
(from 119313-03)
 
5006767 SMC server start displays confusing messages on the console
6235892 CIMOM crashes on multiple parallel requests
6255908 CIMOM returns empty values or unexpected values for some properties
 
(from 119313-02)
 
6212927 SMC 2.1: full name information is not kept in User's properties
 
(from 119313-01)
 
4872697 modify NIS+ user fails with error: user <username> was partially modified
 
(from 123883-04)
 
6468951 problems with SMC in S10U3, build 5
 
(from 123883-03)
 
        This revision addresses a packaging issue.
 
(from 123883-02)
 
5016983 by default WBEM should not listen for remote connections
 
(from 123883-01)
 
6396510 integrate Solaris Trusted Extensions to admin


Patch Installation Instructions:
--------------------------------
 
Please refer to the man pages for instructions on using 'patchadd'
and 'patchrm' commands provided with Solaris.
 
The following example installs a patch to a standalone machine:
 
       example# patchadd /var/spool/patch/123456-07
 
The following example removes a patch from a standalone system:
 
       example# patchrm 123456-07
 
For additional examples please see the appropriate man pages. Any
other special or non-generic installation instructions should be
described below as special instructions.


Special Install Instructions:
-----------------------------
 
Not all patches listed in this section as needed for the completion
of a fix or feature, may be available at the same time as this patch.
This allows the remaining fixes/features to be made available sooner.
 
Please note that after the installation of this patch, the SMC/WBEM server
will need to be manually stopped and re-started.  The fixes introduced by
this patch will not be active until the SMC/WBEM server is restarted.
Verify that the WBEM service is not being used by any clients, then
stop and restart the WBEM service.
 
To stop the WBEM service, execute the command:
 
        svcadm disable wbem
 
To start the WBEM service, execute the command:
 
        svcadm enable wbem
 
NOTE 1:  To get the complete Solaris Boot Architecture feature, please
         also install the following patches:
 
         119081-08 (or greater)  CD-ROM Install Boot Image Patch
         119252-07 (or greater)  System Administration Applications Patch
         119254-10 (or greater)  Install and Patch Utilities Patch
 
NOTE 2:  To get the complete fix for BugId's:
 
         6383511 patches 121308-02 & 119313-05 break smlog in Solaris 10
         6378956 smosservice/smdiskless is broken in s10u2 due to WBEM issues
         6407617 SMC should work with 121308-02 (or later) even if JAVA_HOME
                 and/or PATH are set to 1.4.2
 
         please also install the following patch:
 
         119315-06 (or greater)  Solaris Management Applications Patch
 
NOTE 3:  To get the complete Solaris Trusted Extensions feature (BugId
         6396510), please also install the following patch:
 
         119315-07 (or greater)  Solaris Management Applications Patch
 
NOTE 4:  In order to get the complete fix for BugId 6361917 (SMC 2.1: fully
         qualified name not valid in user's properties), please also install
         the following patch:
 
         119315-08 (or greater)  Solaris Management Applications Patch
 
NOTE 5:  To get the complete fix for BugId 4760846 (SMC and the enhanced
         crypt(3c) seem to be incompatible), please also install the
         following patch:
 
         121308-12 (or greater)  Solaris Management Console Patch
 
NOTE 6:  To get the complete fix for BugId 6505934 (patchadd: /tmp/CLEANUP
         file not removed which causes a confusing log), please also install
         the following patch:
 
         122911-08 (or greater)  Apache 1.3 Patch
 
NOTE 7:  To get the complete fix for BugId's:
 
         6277884 could not edit properties of individual nodes in SMC hosts
                 tool, in LDAP scope
         6422915 not able to add Ethernet addr in Computer & Network tool
                 when SMC scope LDAP
         6422984 no content in subnetwork view in Computer & Network tool
                 when SMC scope LDAP
 
         please also install the following patch:
 
         119315-11 (or greater)  Solaris Management Applications Patch
 
NOTE 8:  To get the complete fix for BugId 6647821 (SMC fails accreditation
         requirement known as separation of duty), please also install the
         following patches:
 
         119315-14 (or greater)  Solaris Management Applications Patch
         121308-14 (or greater)  Solaris Management Console Patch
 
NOTE 9:  To get complete ZFS Boot and New Boot Sparc features, PSARC/2006/370
         and PSARC/2006/525, please also install the following patches:
 
         119252-26 (or greater)  System Administration Applications Patch
         119254-59 (or greater)  Install and Patch Utilities Patch
         120450-02 (or greater)  Get netmask Utility Patch
         121428-11 (or greater)  Live Upgrade Zones Support Patch
         121430-27 (or greater)  Live Upgrade Patch
         124628-08 (or greater)  CD-ROM Install Boot Image Patch
         124630-18 (or greater)  System Administration Applications, Network,
                                 and Core Libraries Patch
 
NOTE 10: To get the complete fix for BugId's:
 
         6721796 running SMC remotely and attaching to another SMC server,
                 LDAP logins cannot authenticate),
         6729612 SMC stops working when hostname is associated with a vni
                 interface
         6780092 SMC command line tools do not work when netservices limited
                 is used
 
         please also install the following patch:
 
         121308-16 (or greater)  Solaris Management Console Patch
 
NOTE 11: To get the complete fix for BugId 6613154 (SMC abuses PAM_RUSER),
         please also install the following patch:
 
         121308-17 (or greater)  Solaris Management Console Patch
 
NOTE 12: To get the complete fix for BugId's 5016983 (by default WBEM should
         not listen for remote connections) and 6396510 (integrate Solaris
         Trusted Extensions to admin), please also install the following
         patches:
 
         121308-08 (or greater)  Solaris Management Console Patch
         124188-01 (or greater)  Trusted Solaris Attributes Patch
 
NOTE 13: To get the complete fix for BugId 5076464 (SMC 2.1 "Copy Initial
         Files From:" field in user template does not work), please also
         install the following patch:
 
         119315-17 (or greater)  Solaris Management Applications Patch
 
NOTE 14: To get the complete fix for BugId 6916441 (SMC does not start using
         Java 1.6, sticks on loading toolboxes), please also install the
         following patch:
 
         121308-20 (or greater)  Solaris Management Console Patch
 
NOTE 15: To get the complete fix for BugId 6885144 (SMC ignores values set in
         /etc/default/passwd), please also install the following patches:
 
         119315-20 (or greater)  Solaris Management Applications Patch
         121308-21 (or greater)  Solaris Management Console Patch
 
NOTE 16: To get the complete fix for BugId 6938738 (SMC requires rebranding),
         please also install the following patches:
 
         119315-21 (or greater)  Solaris Management Applications Patch
         121308-22 (or greater)  Solaris Management Console Patch
         144325-02 (or greater)  Resource Management User Interface Patch

NOTE 17: To get the complete Secure-by-Default feature (PSARC/2004/368 and
         PSARC/2005/373), please also install the following patches:

         118833-26 (or greater)* kernel patch
         119252-14 (or greater)  System Administration Applications patch
         120199-07 (or greater)  sysidtool patch
         120272-06 (or greater)  SMA patch
         121308-08 (or greater)  Solaris Management Console patch
         122539-06 (or greater)* volmgt and bsmconv patch
         122856-03 (or greater)* sendmail patch
         124393-01 (or greater)  dtlogin smf patch
         124628-01 (or greater)  CD-ROM Install Boot Image patch
         124630-01 (or greater)  System Administration Applications, Network,
                                 and Core Libraries Patch

         * Substitute patch 118833-36 for the indicated set of patches.
           Due to some of them being unreleased and/or accumulated into
           unreleased 118833 revisions, 118833-36 is the only available
           patch that contains all of them.


README -- Last modified date: Saturday, November 10, 2012