OBSOLETE Patch-ID# 121308-23
Download this patch from My Oracle Support
|
Your use of the firmware, software and any other materials contained
in this update is subject to My Oracle Support Terms of Use, which
may be viewed at My Oracle Support.
|
|
For further information on patching best practices and resources, please
see the following links:
|
|
Copyright (c) 2012, Oracle and/or its affiliates. All rights reserved.
|
Keywords: security management console wbem port trace trusted extensions smc
Synopsis: Obsoleted by: 121308-24 SunOS 5.10: Solaris Management Console Patch
Date: May/10/2012
Install Requirements: NA
Solaris Release: 10
SunOS Release: 5.10
Unbundled Product:
Unbundled Release:
Xref: This patch available for x86 as patch 121309
Topic: SunOS 5.10: Solaris Management Console Patch
Relevant Architectures: sparc
Bugs fixed with this patch:
Changes incorporated in this version: 6447833
Patches accumulated and obsoleted by this patch: 123887-02
Patches which conflict with this patch:
Patches required with this patch: 124188-01 (or greater)
Obsoleted by:
Files included with this patch:
/usr/sadm/lib/smc/bin/certtool
/usr/sadm/lib/smc/bin/smc
/usr/sadm/lib/smc/bin/smcappadm
/usr/sadm/lib/smc/bin/smcboot
/usr/sadm/lib/smc/bin/smccompile
/usr/sadm/lib/smc/bin/smcconf
/usr/sadm/lib/smc/bin/smcregister
/usr/sadm/lib/smc/bin/smcserver
/usr/sadm/lib/smc/bin/smcwbemserver
/usr/sadm/lib/smc/lib/console_rt.jar
/usr/sadm/lib/smc/lib/functions
/usr/sadm/lib/smc/lib/libpassauthen.so
/usr/sadm/lib/smc/lib/libroleChecks.so
/usr/sadm/lib/smc/lib/preload/jsdk21.jar
/usr/sadm/lib/smc/lib/server_rt.jar
/usr/sadm/lib/smc/lib/smcapi.jar
/usr/sadm/lib/smc/lib/smcwbemserver_rt.jar
/usr/sadm/lib/smc/policy/smcconsole.policy
/usr/sadm/lib/smc/policy/smcserver.config
/usr/sadm/lib/smc/prereg/SUNWmc/LaunchLegacyAppToolClient.jar
/usr/sadm/lib/smc/prereg/SUNWmc/LaunchServiceBean.jar
/usr/sadm/lib/smc/prereg/SUNWmc/libvsyslog.so
/usr/sadm/lib/smc/prereg/SUNWmc/upgrade1.0.sh
/usr/sadm/lib/smc/prereg/SUNWwbmc/WBEMLogServiceBean.jar
/usr/sadm/lib/smcapi.jar
Problem Description:
6447833 SMC CLI commands can't take the TX options
(from 121308-22)
6938738 SMC requires rebranding
(from 121308-21)
6885144 SMC ignores values set in /etc/default/passwd
(from 121308-20)
6916441 SMC does not start using Java 1.6, sticks on loading toolboxes
(from 121308-19)
6856339 starting SMC caused WBEMLogService cannot be loaded message after 121308-16 installed
(from 121308-18)
6759698 SMC hangs while displaying -Configuring Management Server- on Txxx Systems
(from 121308-17)
6613154 SMC abuses PAM_RUSER
(from 121308-16)
6570437 since 121308-07 or 121309-07, SMC should also accept JVMs from JDK/JRE v1.6.x
6721796 running SMC remotely and attaching to another SMC server, ldap logins cannot authenticate
6729612 SMC stops working when hostname is associated with a vni interface
(from 121308-15)
6490562 SUNWmcc's postinstall script fails in zones upgrade
(from 121308-14)
6647821 SMC fails accreditation requirement known as separation of duty
(from 121308-13)
6696486 SMC reports java.io.IOException exception when starting "Enhanced Storage"
(from 121308-12)
4760846 SMC and the enhanced crypt(3c) seem to be incompatible
(from 121308-11)
6479965 Solaris Management Console does not load toolbox
(from 121308-10)
6513080 121308-08 causes smosservice to fail
(from 121308-09)
6365758 security vulnerability in Solaris WBEM server
(from 121308-08)
This revision accumulates S10U3 feature point patch 123887-02
and also adds the following fixes:
6461461 CR 6179516 fix leads to authentication failure on some Solaris 10 boxes
6179516 SMC: "Add Multiple Users With Wizard -> Specify text file" broken when using a role
(from 121308-07)
6383511 patches 121308-02 & 119313-05 break smlog in Solaris 10
6378956 smosservice/smdiskless broken in s10u2_02 due to WBEM issues
6407617 SMC should work with 121308-02 (or greater) even if JAVA_HOME and/or PATH set to 1.4.2
(from 121308-06)
This revision addresses a packaging issue.
(from 121308-05)
6389712 customer wants fix so as not to have to remove /var/sadm/smc/codebase directory
(from 121308-04)
6365746 security vulnerability in Solaris WBEM server
(from 121308-03)
6179516 SMC: "Add Multiple Users With Wizard -> Specify text file" broken when using a role
(from 121308-02)
6183058 SMC GUI outputs java.lang.UnsupportedClassVersionError
(from 121308-01)
5090761 WBEM port 898 vulnerable to TRACE HTTP exploits
(from 123887-02)
5016983 by default WBEM should not listen for remote connections
6434535 some SMC apps including default toolbox not working in local only mode
6434217 Viper services in SMC broken in non-local mode
(from 123887-01)
6396510 integrate Solaris Trusted Extensions to admin
Patch Installation Instructions:
--------------------------------
Please refer to the man pages for instructions on using 'patchadd'
and 'patchrm' commands provided with Solaris.
The following example installs a patch to a standalone machine:
example# patchadd /var/spool/patch/123456-07
The following example removes a patch from a standalone system:
example# patchrm 123456-07
For additional examples please see the appropriate man pages. Any
other special or non-generic installation instructions should be
described below as special instructions.
Special Install Instructions:
-----------------------------
Not all patches listed in this section as needed for the completion
of a fix or feature, may be available at the same time as this patch.
This allows the remaining fixes/features to be made available sooner.
Please note that after the installation of this patch, the SMC/WBEM server
will need to be manually stopped and re-started. The fixes introduced by
this patch will not be active until the SMC/WBEM server is restarted.
Verify that the WBEM service is not being used by any clients, then
stop the WBEM service, clear the SMC temporary folder and restart the
WBEM service.
To stop the WBEM service:
svcadm disable wbem
To remove the SMC temporary folder:
rm -rf /var/sadm/smc
To start the WBEM service:
svcadm enable wbem
NOTE 1: To get the complete fix for BugId 6183058 (SMC GUI outputs
java.lang.UnsupportedClassVersionError), please also install
the following patch:
119313-05 (or greater) WBEM Patch
NOTE 2: To get the complete fix for BugId's:
6383511 patches 121308-02 & 119313-05 break smlog in Solaris 10
6378956 smosservice/smdiskless is broken in s10u2 due to WBEM issues
6407617 smc should work with 121308-02, or later, even if JAVA_HOME
and/or PATH are set to 1.4.2
please also install the following patches:
119313-07 (or greater) WBEM Patch
119315-06 (or greater) Solaris Management Applications Patch
NOTE 3: To get the complete Solaris Trusted Extensions feature (per
BugId 6396510), please also install the following patches:
119313-08 (or greater) WBEM Patch
119315-07 (or greater) Solaris Management Applications Patch
NOTE 4: To get the complete Secure-by-Default feature (PSARC/2004/368 and
PSARC/2005/373), please also install the following patches:
118833-26 (or greater)* kernel patch
119252-14 (or greater) System Administration Applications patch
119313-08 (or greater) WBEM patch
120199-07 (or greater) sysidtool patch
120272-06 (or greater) SMA patch
122539-06 (or greater)* volmgt and bsmconv patch
122856-03 (or greater)* sendmail patch
124393-01 (or greater) dtlogin smf patch
124628-01 (or greater) CD-ROM Install Boot Image patch
124630-01 (or greater) System Administration Applications, Network,
and Core Libraries Patch
* Substitute patch 118833-36 for the indicated set of patches.
Due to some of them being unreleased and/or accumulated into
unreleased 118833 revisions, 118833-36 is the only available
patch that contains all of them.
NOTE 5: To get the complete fix for BugId 4760846 (SMC and the enhanced
crypt(3c) seem to be incompatible), please also install the
following patch:
119313-14 (or greater) WBEM Patch
NOTE 6: To get the complete fix for BugId 6647821 (SMC fails accreditation
requirement known as separation of duty), please also install
the following patches:
119313-22 (or greater) WBEM Patch
119315-14 (or greater) Solaris Management Applications Patch
NOTE 7: To get the complete fix for BugId's 6721796 (running SMC remotely and
attaching to another SMC server, ldap logins cannot authenticate)
and 6729612 (SMC stops working when hostname is associated with a
vni interface), please also install the following patch:
119313-25 (or greater) WBEM Patch
NOTE 8: To get the complete fix for BugId 6613154 (SMC abuses PAM_RUSER),
please also install the following patch:
119313-26 (or greater) WBEM Patch
NOTE 9: To get the complete fix for BugId 6916441 (SMC does not start using
Java 1.6, sticks on loading toolboxes), please also install the
following patch:
119313-32 (or greater) WBEM Patch
NOTE 10: To get the complete fix for BugId 6885144 (SMC ignores values set in
/etc/default/passwd), please also install the following patches:
119313-35 (or greater) WBEM Patch
119315-20 (or greater) Solaris Management Applications Patch
NOTE 11: To get the complete fix for BugId 6938738 (SMC requires rebranding),
please also install the following patches:
119313-38 (or greater) WBEM Patch
119315-21 (or greater) Solaris Management Applications Patch
144325-02 (or greater) Resource Management User Interface Patch
README -- Last modified date: Wednesday, June 8, 2016