Patch-ID# 148579-08

21346756 Server should support XEP 199 (XMPP Ping) completely
22523692 Showing Inaccurate C2S count in resource conflict case when user login via Httpbind
23053422 Support different delimiter double quote for XMPP packet  
23053372 Accept working with the previously open stream after TLS handshake  
17172239 22523692 Incorrect C2S count for Httpbind users  
22753639 HTTP-BIND request results in 4xx or 5xx error  
22781530 Logging Should be provided for the server and Multiplexor throttling feature
22581349 TLS worker threads for handling tls calls in the server
21442281 Noticed High Cpu Usage in PSR tests
22565099 Connection throttling at Multiplexor 
22564636 IM Server TLS connection throttling
21490156 Glashfish server is consuming 60% CPU constantly  
22523633 memory leak in presenceapi/User object 
20261104 Presence-Api component is consuming 80% heap memory
20241174 roster information intermittently disappears 
20014791 Disable jabber:iq:auth as default feature support
20261139 high CPU usage by server processes
20261170 servers failing to accept connections
 
(from 148579-07)
 
19900697 Remove SSLv3 support
19671202 Notification of roster item removal is not always sent to other resources
19661182 Server should send message addressed to barejid to the most available resource
19661138 Server should send an error message back to the sender if sender is offline
19627305 Server disconnects client if it sends a large stanza
19592726 Server shd have an option to send subscription requests to available resources
19592594 Server should have an option to disable sending namespace in empty IQ result
19592385 Server should strip off resource of contact's jid before saving to roster
19274834 User presence is not updated based on Cal when email and jid are not same
 
(from 148579-06)
 
18400991 Changing Password of other user is not handled properly
18899896 Remove deprecated options in imadmin
18759210 IM AVATAR IS NOT DISPLAYED IN S2S(SERVER FEDERATION)
18684027 Presence status update for httpbind users showing offline when peer is restarted
18635453 Make parameters restricted since they are deployment specific
18556566 Rename config options for SIP outbound blacklist and whitelist domains
18481931 Add CollabAPI level logging to log4j
18431105 Showing incorrect presence of Federated user,after block and unblock the Fed use
18401213 Ping support between peers in server pool
18375031 Creation of sip war shouldn't depend on existence of iim.conf.xml file
18356402 Stream reopen failes after SASL negotiation is successful in OutServerConnection
18318001 Peerusers shown offline and split conf seen when network interface is restarted
18266836 Use of Dynamic groups in MUC is not working in HostedDomain
18265097 Server should logout existing sessions if a user is removed from store
18261965 Conversion of persistent public room to restricted room is not working
18244356 Provide imconfutil support for setting process queue
18244339 S2S server id printed as null in logs ,difficult to debug the problematic conn
18159671 Group chat enters into invalid state when no LDAP contexts are available
18140560 S2S support in SFS Gateway
18101394 PeerServer connection retry when an incoming connection is made
18093101 Cleanup IM schema and make corresponding changes in code
17955884 Presence API should respond immediately to the request if user doesn't exist
17907851 IMQ shared dependency removal
17809951 Duplicate messages in MUC when peer user joins the room
17787231 not allowed to participate this room error seen in perf tests
17781761 With SELinux in Permissive mode, imadmin does not start because of permissions
17730106 Change the loglevel for below error messages in xmppd.log to WARN mode
17673679 IN POOL PRESENCE PROBE TO A USER NOT IN ROSTER RETURNS THE USER'S PRESENCE
17574885 Server restarts/hangs during performance test,all threads blocked on LDAP
17558390 Duplicate messages are received when federated (JabberD users) joins the MUC
17238742 XMPPD LOG KEEPS ROTATING UNDEFINATELY WHEN WRONG PEER ID IS SPECIFIED IN POOL
17203175 PRESENCE PROBE TO USER NOT IN ROSTER LIST IS NOT GETTING PRESENCE
17203133 PRESENCE PROBE TO CONTACT WHO HAS BLOCKED NOTIFICATION RETURNS TYPE=UNAVAILABLE
16970287 JSS DEPENDENCY REMOVAL
16925009 Stop bundling AM related jars, IMPS, python gateways, remove ENS support
14502397 GROUP MESSAGING NOT WORKING BETWEEN FEDERATED SERVERS
13845159 OFFLINE MESSAGES ARE NOT RECEIVED IF THEY ARE SENT B4 S2S SESSION ESTABLISHED
13463977 THE SEARCH MUST BE MODIFIED FOR GROUPS,IT SEARCHES WHOLE USER BASE
13463895 GROUP MESSAGING DOES NOT WORK IN HOSTED DOMAINS
12713942 SIP FEDERATION DOES NOT WORK IN SERVERPOOL SETUP
12304931 SUNBT7005044 PROVIDE HELP DESCRIPTION FOR THE PARAMETERS WHICH HAS DESCRIPTION N
12287918 SUNBT6924965 USER NOT ABLE TO ENTER THE ROOM WHILE HE IS LOGGED WITH DIFF RESOUR
12287854 SUNBT6924610 ADMIN NOT ABLE TO GRANT MODERATOR PRIVILEGES TO A MEMBER IN A CONFE
12287151 SUNBT6920854 ISSUES WITH MANAGING CONFERENCE/DISCUSSION HISTORY
12265683 SUNBT6820693 CONFERENCE HISTORY SHOULD NOT BE LOADED WHILE IT IS DISABLED ON SER
12263857 SUNBT6812313 MESSAGES ARE NOT DELETED IN LDAP
 
(from 148579-05)
 
18273930 All peers users are kicked out if a peer connection breaks with one peer
18164062 Communication break between peers in longevity test
17997636 Privacy setting operation is prone to logical deadlock 
17984124 Deadlock in PeerEndPoint causes server restart 
17939907 Presence is not getting updated after restart of the peer in server pool 
17957850 PeerEndPoint not updated properly after peer restart
17574912 Pool communication not working b/n connected usersunder load,when...
17341557 IM Chatroom Created By Federated User on IM Server in Server Pool...
17729664 Dialback issue when peer servers are restarted,sender is not vali...
17875757 Communication breakage as a result of SSL handleResult spinning
17787390 Server Pool communication breakage resulting in high CPU usage
17746856 Deadlock in OutConnection,users unable to login
17880775 More number of LDAP Context than configured are getting created.
17700486 Deadlock in PeerServer causes outage
17574726 Deadlock in PeerServer during cleanup results in server restart
17611946 Watchdog should take jstack of mux and server before restarting mux
12284097 SUNBT6905494 CHANGING NICK OF THE EXISTING PARTICIPANT IN A CONF ...
17537502 Log message for diskbackup should contain a space
17574789 When a peer is restarted under load,mux on other instances restarts
17345181 Communication is broken after connecting to other peer with same ...
17345226 Offline subscription is not working properly in a server pool
17357037 Blocking a user doesn't work properly in server pool
17366661 Sometimes TLS peer to peer connection not established
17380598 Re-requesting authorization after buddy is removed from roster li...
17396530 Subscription not working when messages client is used in mutual s...
17406753 Persistent room will be removed after cancelling configuration
17511968 Processing of packets from Peer is done in serverin resulting in ...
17539611 Server does not fall back to dialback when SASL fails
17539633 Affiliations not getting propagated across peers
17540007 Login as invisible doesn't work in a server pool
18136017 Stream exception seen in httpbind logs when it tries authenticating itself
 
(from 148579-04)
 
17472652 IM Client sessions get closed while connecting via ssl over httpbind 
12367296 INTERMITTANT PRESENCE IN FEDERATION
16700306 IWADMIN MUST SUPPORT GENERATING WAR FILES EVEN IF CONFIGURATOR IS NOT RUN
14402873 ./IMADMIN -C IIM.CONF.XML FAILS WITH CONFIG FILE NOT FOUND ERROR 
15964936 IM9P1 PRE/POST UPGRADE TASKS FAILS ON OEL SINCE IT'S USING INCORRECT KSH PATH 
17325160 User in pool is shown offline to a user in s2s server post presence subscription
17181183 BUFFEROVERFLOWEXCEPTION SEEN DURING PERFORMANCE TEST.
17178276 DIGEST-MD5 PROVIDER SHOULD BE MADE GENERIC TO BE USED WITH ANY REALM
16995104 ON THE FLY VCARD SHOULD INCLUDE TELEPHONENUMBER ATTRIBUTE IN THE RESPONSE
16950952 IIM_SERVER.FEDERATION.POLICY PROPERTY IS NOT ACCEPTING LOWERCASE VALUES
16909437 CALENDAR PRESENCE INTEGRATION
16894220 LOGGING ON NEW CHANNEL ADDITION RESULTS IN THREAD-CONTENTION.
16806633 PROVIDE A CONFIGURATION TO CONTROL MAIL FORWARDING FOR OFFLINE USERS
16580229 IMPROVE HTTPBIND DEBUG LOGGING 
16580130 IM LOGIN/LOGOUT ISSUES ARE SEEN WITH COMPRESSION ENABLE ON T1000
16579831 HIGH RESPONSE TIMES FOR HTTPBIND CLIENT REQUESTS WHICH ARE RELAYED TO XMPP SERVE
16463608 SERVER SHOULD SUPPORT MONITORING
16401415 WATCHDOG RESTARTS IM SERVER WHEN LDAP IS DOWN
16320969 ERROR WHILE NOTIFYING: RID, COMETHANDLER CANNOT BE NULL. 
16309662 OCIM SERVER SHOULD PROVIDE ABILITY TO GET PRESENCE OF ANY USER IN THE DOMAIN
16066488 HTTP AND IMPS GATEWAY CONFIGURATION VERIFIES CONFIG INFO WITH NOVALIDATE OPTION
16013835 STREAM ERROR CONDITION IS NOT DEFINED IN THE <STREAM:ERROR> STANZA
16011730 LIMIT THE PARALLELGC THREAD COUNT FOR WATCHDOG PROCESS
15989719 OFFLINE MESSAGES OF TYPE 'CHAT' ARE NOT FORWARDED AS AN EMAIL TO RECIPIENT
15855131 DEADLOCK IN OUTCONNECTION
15828251 INFOQUERY PACKET TO AN INVALID USER SHOULD BE HANDLED PROPERLY
14832330 SERVER STOPS ACCEPTING CONNECTIONS AND CRASHES DURING PERF TEST WITH TLS 
14766604 INCONSISTENT ROSTER STATE IN SERVER SEEN
14584848 INCOMAPTIBLE MIN & MAX HEAP SIZES FOR MUX ERROR WHEN UPGRADED FROM IM9->9P1
14402962 ENABLING S2S COMMUNICATION MUST SET IIM_SERVER.USEPORT=TRUE
13944878 WEBSERVER FOR API DOCS NOT STARTING DUE TO WRONG PATH
12272213 SUNBT6851077 BUDDY'S PRESENCE SHOWN AS ONLINE,EVEN WHILE BUDDY HIS OFFLINE IN SE
12265792 SUNBT6821257 CONFIGURATOR FAILS TO CHANGE PERMISSIONS FOR HTTPBIND.CONF AND HTTP
17325152 Offline message delivery in a server-pool causing sender user to be unreachable
17412974 ROSTER IS NOT SEEN WHEN USER LOGS IN USING FB GATEWAY
17178180 JAVA MAIL API SHOULD BE UPGRADED TO THE LATEST VERSION
16832522 UPGRADE OF IM FAILS FROM IM9P3->IM9U1
17325145 Peer server stop trying to reconnect to S2S server when s2s server is restarted
16914403 P-16914403 ISSUE IN S2S CONNECTION CAUSES IM OUTAGE
 
(from 148579-03)
 
16572199 IM SERVER 9.2 :AVATAR IS NOT WORKING 
 
(from 148579-02)
 
16248393 TLS BUFFER USAGE SHOULD BE OPTIMIZED
15896128 IM API DOC MUST BE UPDATED TO INCLUDE RELEVANT INFORMATION
15883281 IQ PACKET OF TYPE RESULT IS NOT BEING SENT IN CASE OF ROSTER REMOVE
14766341 MULTIPLE INSTANCES OF WATCHDOG STARTED WHEN LOG DIR DOESN'T EXIST
15883332 RESTARTLOGIC ATTRIBUTE NOT BEING ADVERTISED BY THE CONNECTION MANAGER
12971303 TYPOS IN HELP OUTPUT FOR IMCONFUTIL
15858073 CONF FILE IS READ FOR SMPP CONF EVERY TIME AN OFFLINE USER RECEIVE A MESSAGE
14827195 PRESENCE OF TYPE 'SUBSCRIBED' NOT BEING SENT IN CASE OF MUTUAL SUBSCRIPTION
12290143 SUNBT6934454 PRESENCE OF USER IS SEEN WHEN A BLOCKED CONTACT LOGOUT AND LOGIN IN
14827218 WRONG ERROR BEING RETURNED BY BOSH CONNECTION MANAGER
15958175 FILE NOT TRANSFERRED WHEN BYTE STREAM FILTERS ARE ENABLED
15958098 UNABLE TO ENABLE BYTE STREAM FILTERS USING IMCONFUTIL
12310267 SUNBT7031963 PUB-SUB : SUBSCRIBTION RESULT DOES NOT SHOW PUBSUB AND SUBSCRIPTION
15900826 $PKG65 INITIALIZED TO SUNWIIM FOR MACHINES WITH LINUX OS
14797845 GETVERSION SHOULD RETURN ORACLE'S 5-PART VERSION ISTEAD OF THE MARKETING VERSION
15856731 SERVER DOES NOT ADHERE TO SESSION SETUP TIMEOUT SET IN CONFIGURATION
14848444 INFOQUERY PACKET OF TYPE GET/SET SHOULD FOLLOW DELIVERY RULES
14736350 DEADLOCK IN IM SERVER CAUSING SERVER RE-START IN PERFORMANCE TEST
14591876 DIGEST-MD5 MECHANISM MUST BE SUPPORTED BY IM SERVER
14626701 GF3 SUPPORT FOR IM
15857712 ISSUES WITH SERVER DIALBACK
 
(from 148579-01)
 
14488000 HTTPBIND: FEATURES REPORTED IN INCORRECT ELEMENT
14492963 HTTPBIND SHOULD HANDLE CASE WHEN ID OF A PACKET CONTAINS COLON
14335835 UNRECOGNIZED PARAMETERS WITH IMCONFUTIL WHICH MUST BE SUPPORTED
14304611 P-13686205 DEADLOCK SEEN IN JSTACK DUMP OF IM SERVER
14304142 P-12770268 ICHAT CAUSES VERY LARE LOG FILES.
14303959 P-13686264 THREAD HANGING ISSUE DURING JSO'S STREAM.SEND CALL
14281922 NOT ABLE TO LOGIN TO FACEBOOK USING FACEBOOK GATEWAY
13969925 PROVIDE AVATAR SUPPORT FOR IM IN S2S(SERVER FEDERATION)
13943600 P-13788553 ENABLE SUPPORT FOR OFFLINE MESSAGES IN INSTANT MESSAGING 
13939676 P-13686187 THREAD HANGING ISSUE DURING GROUP CHAT INIT CALL.
13939664 P-13686227 THREADS HANDLING QUEUES ARE NOT NAMED PROPERLY.
13939647 P-13639553 IM INSTALL INSTRUCTIONS MUST BE UPDATED IN PATCH README 
13939121 P-13080295 SUNBT6973034 PERFORM GROUP EXPANSION ON THE SERVER SIDE, AND AVOI...
13644243 HTTPBIND SHOULD BE ABLE TO SUPPORT STREAM RESTARTS
13597852 WATCHDOG SHOULD TAKE A STACK TRACE BEFORE RESTARTING SERVER, TO AID DEBUGGING FORCED RESTARTS
13478345 HTTPBIND SHOULD NOT BE RESTARTED WHEN A NEW HOSTED DOMAIN IS ADDED TO IM SERVER
13428426 P-13428241 IN S2S, ONLY ONE-WAY COMMUNICATION OCCURS WHEN THE REMOTE SERVER ...
13428417 P-13428225 SERVER RESTARTS WHEN REMOTE SERVER IS RESTARTED IN A FEDERATION
13428320 P-13428260 THREAD STARVATION LEADING TO SERVER RESTART IN FEDERATION DURING ...
13428291 P-13428207 SERVER HANGS ON RESTARTING REMOTE SERVER IN FEDERATION
13423327 RACE CONDITION IN HTTPBIND WHEN A REQUEST IS QUEUED.
13394589 HTTPBIND: PACKETS IN QUEUE NOT NOTIFIED
13394195 HTTPBIND: TIME TO WAIT CALCULATION IS WRONG
13389473 SESSION CLOSED WHEN A REQUEST IS RETRANSMITTED
13385823 SESSION CLOSED WHEN AN UNPROCESSED REQUEST'S CONNECTION IS CLOSED.
13385373 P-13377767 DEADLOCK IN IM SERVER WHEN CLOSING AN S2S CONNECTION OVER TLS
13385356 P-13377737 DEADLOCK IN IM SERVER WHEN DISCONNECTING AN S2S CONNECTION OVER TLS
13385292 P-13377664 TOO MANY THREADS BLOCKED ON SINGLE S2S CONNECTION
13242229 P-13113030 IM SERVER DOES NOT RELEASE LOCK WHEN IT RECEIVES A MALFORMED BLOC...
13070819 P-12307319 SUNBT7015505 IM 8, WATCHDOG PROCESS NOT CLOSING UNUSED S_IFIFO DE...
13038924 P-13038813 MULTIPLEXER PROCESS SHOULD SET JAVA MAX HEAP SIZE
13038031 P-12618951 UNABLE TO DELETE 2 OR MORE BUDDIES WITH IM
13037885 P-12967340 IM PRESENCE ERROR NOT BEING SENT BACK TO CLIENT
13001788 P-12301322 SUNBT6986255 PROVIDE CONFIGURATION OPTION TO CUSTOMIZE TO SERVER ...
13001728 P-12307241 SUNBT7015120 IM 8, WATCHDOG PROCESS SHOULD SET JAVA MAX HEAP SIZE
13001654 P-12367244 RFE TO IMPLEMENT STATISTICS FROM SERVER
13001627 P-12367182 RFE TO ALLOW CONFERENCE SERVER'S NAME TO BE CONFIGURED TO OTHER T...
12620812 INCORRECT JID/PASSWORD SET FOR CALAGENT AFTER CONFIGURATION
12305842 SUNBT7009061 NO COMMAND TO GET-DEFAULT-MUX-THREADPOOL,GET-DEFAULT-SERVER-THREADP
12291429 SUNBT6940010 CONFIGURATOR SHOULD SUPPORT CONFIGURATION OF CALENDAR AGENT WITH JM
12222617 SUNBT6646034 IMADMIN ASSIGN_SERVICES FAILS WHEN IM TALKS TO LDAP IN SSL MODE
13478456 MAILEQUIVALENTADDRESS NEED TO BE SUPPORTED FOR ROSTER.EXTRA.ATTRIBUTES.MAIL 
14371084 IM 9 UNABLE TO CONFIGURE MESSAGE CONVERSION API FUNCTIONALITY
 
This patch contains some security improvements.

--------------------------------
 
Refer to the man pages for instructions
on using 'patchadd' and 'patchrm' scripts provided with Solaris.
Any other special or non-generic installation instructions should be
described below as special instructions.  The following example
installs a patch to a standalone machine:
 
       example# patchadd /var/spool/patch/148579-08
 
The following example removes a patch from a standalone system:
 
       example# patchrm 148579-08
 
For additional examples please see the appropriate man pages.

-----------------------------
 
Stop IM services before installing.
 
If you are using any of the below:
 
* Components - Calendar Agent, HTTPBind etc
* S2S Federation
* Server Pool
* Server health monitoring using Watchdog
 
then you need to set the parameter iim_server.useport to true using imconfutil if you want to continue using old configuration file.
Ex: imconfutil -c <xml config file> set-prop iim_server.useport=true
 
Running patchadd or patchrm does not automatically redeploy web applications
with updated binaries.  This can be done using BASEDIR/sbin/iwadmin redeploy all.
 
SSLv3 support is disabled by default. However to allow or restrict TLS protocols you can set following restricted properties at default and listener levels.
 
1. To enable TLS protocols in server.
Ex: ./imconfutil -c ../config/iim.conf.xml -u set-prop iim_server.tls.enabledprotocols="TLSv1,TLSv1.1,TLSv1.2"
 
2. To enable TLS protocols in c2s and s2s listeners. 
Ex: ./imconfutil -c ../config/iim.conf.xml -u set-listener-prop s2s enabledtlsprotocols="TLSv1.2"
Ex: ./imconfutil -c ../config/iim.conf.xml -u set-listener-prop c2s enabledtlsprotocols="SSLv3,SSLv2Hello,TLSv1,TLSv1.1,TLSv1.2"
 
3. To enable TLS protocols in SFS Gateway
Ex: ./imconfutil -c ../config/iim.conf.xml -u set-prop iim_server.tls.enabledprotocols="TLSv1,TLSv1.1,TLSv1.2"
Ex: ./create_sip_war <command line>
 
Enforcing XML double-quote in OCIM to support non-compliant devices add following OCIM Server JVM option and set it to "true". The jvm property name is "jso.xmlWriter.useDoubleQuote".
 
1. To get the existing jvm options,
   Ex: ./imconfutil -c ../config/iim.conf get-prop iim_server.jvm.options
 
2. Append the above jvm property with the existing jvm options,
   Ex: ./imconfutil -c ../config/iim.conf set-prop iim_server.jvm.options="-Djso.xmlWriter.useDoubleQuote=true <existing-jvm-options>"
 
Configuration parameters for controlling the rate of incoming connections in OCIM server and multiplexor.
 
1. Multiplexor parameters
   iim_mux.throttle.connections - the number of connections allowed per 'timeout' period. 0 or less to disable. Default is 0.
   iim_mux.throttle.timeout - timeout in milliseconds. Default is 1000.
   Ex: ./imconfutil -c ../config/iim.conf.xml -u set-prop iim_mux.throttle.connections=300 iim_mux.throttle.timeout=1000
 
2. OCIM Server parameters
   iim_server.c2s.tls.tokens - the number of connections allowed per 'timeout' period. 0 or less to disable. Default is 0.
   iim_server.c2s.tls.token_timeout - timeout in milliseconds. Default is 200.
   Ex: ./imconfutil -c ../config/iim.conf.xml -u set-prop iim_server.c2s.tls.tokens=150 iim_server.c2s.tls.token_timeout=500
 
Configuration parameter for HTTPBind's minimum wait time at the server(to be added in httpbind.conf),
   httpbind.min_wait_time - value in seconds, and default value is 15.
 
For dedicated TLS thread pool in OCIM server, use "iim_server.tls_worker" parameter.
   Ex: ./imconfutil -c ../config/iim.conf.xml -u add-server-threadpool id=tls_pool maxthreads=30
       ./imconfutil -c ../config/iim.conf.xml -u iim_server.tls_worker=tls_pool 
 
To enable Server-to-Client ping feature, use "iim_server.clientping.timeout" parameter.
   Ex: ./imconfutil -c ../config/iim.conf.xml iim_server.clientping.timeout=30
        Value in seconds, negative value to disable the feature. By default disabled.
 
README -- Last modified date: Aug/18/2016