OBSOLETE Patch-ID# 120036-07

Download this patch from My Oracle Support

Your use of the firmware, software and any other materials contained in this update is subject to My Oracle Support Terms of Use, which may be viewed at My Oracle Support.

For further information on patching best practices and resources, please see the following links:

Keywords: libldap libsldap.so.1
Synopsis: Obsoleted by: 118833-36 SunOS 5.10: libldap patch
Date: Aug/31/2006

Install Requirements: After installing this patch on an active boot environment, the system will be in a potentially inconsistent state until a reboot is performed. Unless
otherwise specified in the Special Install Instructions below, it is normally safe to apply further patches prior to initiating the reboot due to the relatively small footprint of the patch utilities. Normal operations must not be resumed until after the reboot is performed.
Use Single User Mode (run level S) when installing this patch on an active boot environment. An alternative may be specified in the Special Install Instructions.

Solaris Release: 10

SunOS Release: 5.10

Unbundled Product:

Unbundled Release:

Xref: This patch available for x86 as patch 120037

Topic: SunOS 5.10: libldap patch

Relevant Architectures: sparc

Bugs fixed with this patch:

Sun CR #	Bug #
4626861	15094159
4909247	15173426
6226776	15248306
6232564	15250740
6232579	15250744
6237466	15252728
6274517	15267412
6276525	15268190
6312173	15282254
6380248	15310392
6384642	15312447
6398052	15318922
6404337	15321571
6453641	15342377

Changes incorporated in this version: 6384642 6404337 6453641

Patches accumulated and obsoleted by this patch:

Patches which conflict with this patch:

Patches required with this patch:

Obsoleted by: 118833-36

Files included with this patch:

/usr/lib/libldap.so.5
/usr/lib/libsldap.so.1
/usr/lib/llib-lsldap.ln
/usr/lib/security/audit_syslog.so.1
/usr/lib/security/pam_ldap.so.1
/usr/lib/security/sparcv9/pam_ldap.so.1
/usr/lib/sparcv9/libldap.so.5
/usr/lib/sparcv9/libsldap.so.1
/usr/lib/sparcv9/llib-lsldap.ln

Problem Description:

6384642 libldap/SSL negotiation uses synchronous I/O preventing timeouts on congested server
6453641 bringover usr/src/lib/libsldap is missing a header file
6404337 nscd crashes in libsldap:get_mapped_filter() when using invalid chars in search filter
 
(from 120036-06)
 
6380248 ldap clients select incorrect profile on refresh when "cn=" is the same but "dn=" is different
 
(from 120036-05)
 
6237466 Solaris 10 LDAP Client using multiple authentication methods do not fail to second method listed
 
(from 120036-04)
 
4909247 Solaris 8 Client has broken .rhosts authentication with patch 108993-21
6398052 memory leak in the audit_syslog plugin module
 
(from 120036-03)
 
6312173 The libsldap function __ns_ldap_list() returns invalid DN string when using attributMap
 
(from 120036-02)
 
6226776 The passwd command will fail if first ldap server in referral list is down.
6276525 libldap5 cores when trying to resolve hostname
6274517 libsldap:search_state_machine() falls into recursive loop if ldap_search_ext() returns 91
 
(from 120036-01)
 
4626861 If a search times out, libsldap logs the wrong message
6232564 when interrupted (EINTR) while polling, libsldap should retry the poll
6232579 libldap not handling select() failures when issuing a connection

Patch Installation Instructions:

-----------------------------
For Solaris 2.0-2.6 releases, refer to the Install.info file and/or
the README within the patch for instructions on using the generic
'installpatch' and 'backoutpatch' scripts provided with each patch.
 
For Solaris 7-10 releases, refer to the man pages for instructions
on using 'patchadd' and 'patchrm' scripts provided with Solaris.
Any other special or non-generic installation instructions should be
described below as special instructions.  The following example
installs a patch to a standalone machine:
 
       example# patchadd /var/spool/patch/104945-02
 
The following example removes a patch from a standalone system:
 
       example# patchrm 104945-02
 
For additional examples please see the appropriate man pages.

Special Install Instructions:

--------------------------------
 
NOTE 1:  Reboot system after patch installation is complete.
 
NOTE 2:  If you're planning to set up Zones on this system, please make
         sure to install the following patch which fixes bugid 6216195
         (zone installation confused by UPDATE=yes in pkginfo(4) file):
 
         119015-01 (or greater)  Install and Patch Utilities Patch
 
         (Note that 119254 has superseded 119015; installation of the
          current version is recommended to be preferred, due to its
          central role in the installation and removal of patches.)
 
NOTE 3:  To get the complete fix for 4909247 (Solaris 8 Client has broken
         .rhosts authentication with patch 108993-21), the LDAP server must
         be Sun Java System Directory server 5.2 patch 4 or newer, and
         pam_ldap(5) must be used for account management.  Then, in cases
         where there is no user authentication token (PAM_AUTHTOK) available,
         the pam_sm_acct_mgmt(3PAM) function from pam_ldap(5) tries to
         retrieve the user's account status without authenticating to the
         LDAP server as the user is logging in.

README -- Last modified date: Saturday, November 10, 2012