Patch Name: PHCO_8131 Patch Description: s700_800 10.01 SAM cumulative patch Creation Date: 96/12/09 Post Date: 97/02/21 Repost: 97/05/21 A problem has been discovered with superseding patches PHCO_9326 and PHCO_10825. These two patches can cause the SAM 'Printers and Plotters' menu to be unusable. PHCO_8131 is being re-released until a replacement patch is available. Hardware Platforms - OS Releases: s700: 10.01 s800: 10.01 Products: N/A Filesets: SystemAdmin.SAM SystemAdmin.SAM-HELP OS-Core.UX-CORE Automatic Reboot?: No Status: General Superseded Critical: No Path Name: /hp-ux_patches/s700_800/10.X/PHCO_8131 Symptoms: PHCO_8131: - Certain parts of the Auditing and Security area are not 2000-safe. - Post-2000 dates are not set correctly via xntp. - Remove DHCP entry in "Bootable Devices". DHCP is not available in 10.01. - The use of a public-writable directory by SAM permits unauthorized privileges. - The password for user sam_exec (used for remote SAM admin) can be discovered by unscrupulous users. The password field for sam_exec should be changed so it is not possible to log in as sam_exec. - A restricted SAM user cannnot be given access to "Bootable Devices". - SAM does not detect printers that are already setup. - SAM does not restore network printers when a saved configuration is restored. PHCO_7813: - SAM doesn't properly convert the locale in a command in a .cb file. - rmterm.sh sets permissions on /etc/inittab improperly. - Authorized login times strings on a trusted system can cause data corruption. - With CA Unicenter running, if customer goes into SAM->Networking & Communications->Networked File Systems-> Exported Local File Systems they get an error from ch_exports saying that the file cannot be removed. PHCO_6926: - On a system that has a TOSHIBA CD-ROM XM-5401 installed, the Tape Drives area would show this device in the list. Since it's not a tape drive, it shouldn't show on this list. - Restricted SAM user gains unrestricted access. - In the backup and recovery area, JFS volumes are not listed for backup when local backup scope is selected. PHCO_6207: - Multiple SCSI cascades are not properly identified. - The 35401 tape autochanger and 5401 CD-ROM drive are confused for each other. - When SAM is used to add or modify the default network routing, the task fails with an empty error dialog. - libsamsec.sl is not updated when busy. - Help screens are missing in the Trusted Systems area. - Removing term/modem at port 1 removes all terminals with port numbers whose most significant digit is 1 such as 10 11 12. - When SAM adds a network printer, it does not give the user the option of adding the printer to their VUE front panel printer configuration. - In the Routine Tasks area, SAM fails to create a default list of log files and produces an error: The command "find -print 2>/dev/null" has failed. Errno=2 (no such file or directory). - SAM does not allow a printer to be added to the last 16 ports of a J2096A 32-port mux. PHCO_6147: The end user will not see this problem. SAM partners (those adding their own functionality to SAM) may over-run the DA field name buffer. Defect Description: PHCO_8131: - Various coding errors. PHCO_7813: - When the Functional Area Launcher read the .cb file, it treated it as a .ou file due to a variable that wasn't being reset. - In creating a new copy of /etc/inittab in rmterm.sh, setting of permissions was overlooked. - Authorized login times strings can cause data corruption. On a trusted system, the UG area of SAM allows you to specify a sequence ofdays and times when the user is allowed to log in to the system. This sequence of days and times is encoded and passed as a parameter to the to the modprpw command. Only 50 characters have been allocated to store this string by the modprpw command but the command does not check to make sure the parameter passed in is valid. Passing a string longer than 50 characters can result in data corruption. It is possible to select days and times in SAM (e.g. if you select to allow logging in during a different time period on each of the seven days of the week) that create an encoded string of more than 50 characters. SAM should disallow any combination of days and times that results in a string over 50 characters. - A pathname was not being checked for validity before attempting to remove it. PHCO_6926: - The XM-5401 CD-ROM was not adequately described in /usr/sam/lbin/ioparser.sh. - Restricted SAM users were not sufficiently restricted when using the samlog viewer. - JFS volumes were not considered in the original design of the backup code. PHCO_6207: - Multiple SCSI cascades were not allowed due to a coding error. - The 35401 tape autochanger and 5401 CD-ROM drive were being misidentified due to their similar model numbers. - The default network routing problem was caused by an unintended use of a compare operator instead of an assignment operator. - Libsamsec.sl was not being checked in the postinstall script for being busy, which can happen if SAM is running while SAM is being installed. - The product delivery scripts failed to deliver ts.hv and ts.hvk, the files needed for Trusted Systems help screens. - SAM failed to call lp_vue_config after adding a network printer. - The listchk command, which builds a list of log files, would fail when given a non-existent path. - The printers area of SAM has a bug related to there being more than 2 serial interfaces on the system. PHCO_6147: The buffers used for storing DA field names in the SAM task manager didn't allow for the trailing NULL. SR: 1653147025 5003310169 1653162024 5003306977 4701334763 Patch Files: /usr/sam/lbin/chuidacl /usr/sam/lbin/dareg /usr/sam/lbin/get_gr_mems /usr/sam/lbin/inittab /usr/sam/lbin/ipconn_load /usr/sam/lbin/pd_ups_parse /usr/sam/lbin/rxagent /usr/sam/lbin/samx /usr/sam/lbin/tmgrx /usr/sam/lbin/tmreg /usr/sam/lbin/upgrpfiles /usr/sam/lbin/upusrfiles /usr/sam/lbin/uuadmin /usr/sam/lib/fs/fs.sl /usr/sam/lib/fs/fs_com.sl /usr/sam/lib/libdb.sl /usr/sam/lib/libdm.sl /usr/sam/lib/libdmtask.sl /usr/sam/lib/librx.sl /usr/sam/lib/libsam.sl /usr/sam/lib/nnc/nnc.sl /usr/sam/lib/nnc/nnc_da_com.sl /usr/sam/lib/pd/pd.sl /usr/sam/lib/pd/pd_comlib.sl /usr/sam/lib/tm/tm_comlib.sl /usr/sam/lib/ug/ug.sl /usr/sam/lbin/ioparser.sh /usr/sam/help/C/ts/ts.hv /usr/sam/help/C/ts/ts.hvk /usr/sam/help/C/ts/ts00.ht /usr/sam/lbin/rmterm.sh /usr/sam/lbin/mkterm.sh /usr/sam/lib/lp/lp.sl /usr/sam/lbin/listchk /usr/sam/lbin/laninfo /usr/sam/bin/samlog_viewer /usr/sam/lib/br/br.sl /usr/sam/lib/fal/fal.sl /usr/sam/lib/ug/ug_comlib.sl /usr/sbin/ch_exports /usr/sam/lib/ts/ts.sl /usr/sam/lib/ra/ra.sl /usr/sam/lib/C/sam.cb /usr/sam/lbin/lpmgr /usr/sam/lib/C/sam.lp.cat /usr/sam/lib/C/ts.cat /usr/sam/lib/C/ug.cat /usr/sam/help/C/lp/lp.hv /usr/sam/help/C/lp/lp.hvk /usr/sam/help/C/lp/lp00.ht /usr/sam/help/C/lp/lp01.ht /usr/sam/lib/C/ts.ui what(1) Output: /usr/sam/lbin/chuidacl: $Revision: 72.1 $ /usr/sam/lbin/dareg: None /usr/sam/lbin/get_gr_mems: None /usr/sam/lbin/inittab: $Revision: 72.12 $ /usr/sam/lbin/ipconn_load: SAM - NNC ipconn_load $Revision: 72.1 $ File editing library $Revision: 72.1 $ /usr/sam/lbin/pd_ups_parse: None /usr/sam/lbin/rxagent: rxagent: $Revision: 72.29 $ $Date: 95/02/07 09:34:00 $ File editing library $Revision: 72.1 $ /usr/sam/lbin/samx: File editing library $Revision: 72.1 $ /usr/sam/lbin/tmgrx: tmgrx: $Revision: 72.10 $ $Date: 95/03/28 12:48:09 $ File editing library $Revision: 72.1 $ HP C++ B2402 A.03.50 /usr/sam/lbin/tmreg: None /usr/sam/lbin/upgrpfiles: $Revision: 72.6 $ /usr/sam/lbin/upusrfiles: $Revision: 72.12 $ /usr/sam/lbin/uuadmin: $Revision: 72.5 $ /usr/sam/lib/fs/fs.sl: None /usr/sam/lib/fs/fs_com.sl: None /usr/sam/lib/libdb.sl: SAM Infrastructure Version 1.0 - 10/13/95 11:37:15 /usr/sam/lib/libdm.sl: SAM Infrastructure Version 1.0 - 10/13/95 11:36:49 /usr/sam/lib/libdmtask.sl: SAM Infrastructure Version 1.0 - 10/13/95 11:36:56 /usr/sam/lib/librx.sl: SAM Infrastructure Version 1.0 - 10/13/95 11:36:38 /usr/sam/lib/libsam.sl: SAM Infrastructure Version 1.0 - 10/13/95 11:39:54 /usr/sam/lib/nnc/nnc.sl: SAM - NNC $Revision: 72.2 $ /usr/sam/lib/nnc/nnc_da_com.sl: None /usr/sam/lib/pd/pd.sl: None /usr/sam/lib/pd/pd_comlib.sl: None /usr/sam/lib/tm/tm_comlib.sl: None /usr/sam/lib/ug/ug.sl: None /usr/sam/lbin/ioparser.sh: $Header: ioparser.sh,v 72.41.1.4 96/11/22 16:02:07 h mgr Exp $ /usr/sam/help/C/ts/ts.hv: None /usr/sam/help/C/ts/ts.hvk: None /usr/sam/help/C/ts/ts00.ht: None /usr/sam/lbin/rmterm.sh: $Revision: 72.16.1.1 $ /usr/sam/lbin/mkterm.sh: $Revision: 72.20 $ /usr/sam/lib/lp/lp.sl: None /usr/sam/lbin/listchk: None /usr/sam/lbin/laninfo: $Revision: 72.18 $ /usr/sam/bin/samlog_viewer: None /usr/sam/lib/br/br.sl: None /usr/sam/lib/fal/fal.sl: None /usr/sam/lib/ug/ug_comlib.sl: None /usr/sbin/ch_exports: $Revision: 72.28.1.2 $ issubdir.c 1.2 90/07/23 4.1NFSSRC Copyr 1990 Su n Micro /usr/sam/lib/ts/ts.sl: None /usr/sam/lib/ra/ra.sl: None /usr/sam/lib/C/sam.cb: None /usr/sam/lbin/lpmgr: $Header: lpmgr,v 72.25.1.3 96/11/08 15:46:59 hmgr Ex p $ /usr/sam/lib/C/sam.lp.cat: None /usr/sam/lib/C/ts.cat: None /usr/sam/lib/C/ug.cat: None /usr/sam/help/C/lp/lp.hv: None /usr/sam/help/C/lp/lp.hvk: None /usr/sam/help/C/lp/lp00.ht: None /usr/sam/help/C/lp/lp01.ht: None /usr/sam/lib/C/ts.ui: None cksum(1) Output: 2668753888 24576 /usr/sam/lbin/chuidacl 2321076151 159744 /usr/sam/lbin/dareg 1328160603 32768 /usr/sam/lbin/get_gr_mems 3829292725 24576 /usr/sam/lbin/inittab 3115289750 32768 /usr/sam/lbin/ipconn_load 3866952839 28672 /usr/sam/lbin/pd_ups_parse 157253325 69632 /usr/sam/lbin/rxagent 1203175493 69632 /usr/sam/lbin/samx 687757200 77824 /usr/sam/lbin/tmgrx 4090908567 126976 /usr/sam/lbin/tmreg 2794362660 40960 /usr/sam/lbin/upgrpfiles 1868974697 40960 /usr/sam/lbin/upusrfiles 186743335 32768 /usr/sam/lbin/uuadmin 1850497792 462848 /usr/sam/lib/fs/fs.sl 3772300981 278528 /usr/sam/lib/fs/fs_com.sl 3480132387 49152 /usr/sam/lib/libdb.sl 2258816798 24576 /usr/sam/lib/libdm.sl 372184034 20480 /usr/sam/lib/libdmtask.sl 3365021514 49152 /usr/sam/lib/librx.sl 2518399928 253952 /usr/sam/lib/libsam.sl 2290561448 405504 /usr/sam/lib/nnc/nnc.sl 858384569 12288 /usr/sam/lib/nnc/nnc_da_com.sl 2507252648 77824 /usr/sam/lib/pd/pd.sl 174009216 110592 /usr/sam/lib/pd/pd_comlib.sl 588120510 77824 /usr/sam/lib/tm/tm_comlib.sl 85390894 237568 /usr/sam/lib/ug/ug.sl 4145025278 22121 /usr/sam/lbin/ioparser.sh 2227880669 21545 /usr/sam/help/C/ts/ts.hv 1562564889 38 /usr/sam/help/C/ts/ts.hvk 958831249 87819 /usr/sam/help/C/ts/ts00.ht 2332597032 2942 /usr/sam/lbin/rmterm.sh 4185225993 9529 /usr/sam/lbin/mkterm.sh 4157744249 151552 /usr/sam/lib/lp/lp.sl 736938819 16384 /usr/sam/lbin/listchk 460169973 20480 /usr/sam/lbin/laninfo 134639646 53248 /usr/sam/bin/samlog_viewer 2530584046 122880 /usr/sam/lib/br/br.sl 3045454450 110592 /usr/sam/lib/fal/fal.sl 1756454758 77824 /usr/sam/lib/ug/ug_comlib.sl 246078840 36864 /usr/sbin/ch_exports 1184509931 102400 /usr/sam/lib/ts/ts.sl 2599070228 24576 /usr/sam/lib/ra/ra.sl 3867190296 12994 /usr/sam/lib/C/sam.cb 3982911749 142909 /usr/sam/lbin/lpmgr 1103576112 24745 /usr/sam/lib/C/sam.lp.cat 1622782282 12726 /usr/sam/lib/C/ts.cat 1502803797 44500 /usr/sam/lib/C/ug.cat 2067668115 24331 /usr/sam/help/C/lp/lp.hv 1562564889 38 /usr/sam/help/C/lp/lp.hvk 1465389051 112153 /usr/sam/help/C/lp/lp00.ht 1768625723 4331 /usr/sam/help/C/lp/lp01.ht 505393090 31308 /usr/sam/lib/C/ts.ui Patch Conflicts: None Patch Dependencies: None Hardware Dependencies: 9000/800 9000/700 Other Dependencies: None Supersedes: PHCO_6147 PHCO_6207 PHCO_6926 PHCO_7813 Equivalent Patches: None Patch Package Size: 4110 Kbytes Installation Instructions: Please review all instructions and the Hewlett-Packard SupportLine User Guide or your Hewlett-Packard support terms and conditions for precautions, scope of license, restrictions, and, limitation of liability and warranties, before installing this patch. ------------------------------------------------------------ 1. Back up your system before installing a patch. 2. Login as root. 3. Copy the patch to the /tmp directory. 4. Move to the /tmp directory and unshar the patch: cd /tmp sh PHCO_8131 5a. For a standalone system, run swinstall to install the patch: swinstall -x autoreboot=true -x match_target=true \ -s /tmp/PHCO_8131.depot 5b. For a homogeneous NFS Diskless cluster run swcluster on the server to install the patch on the server and the clients: swcluster -i -b This will invoke swcluster in the interactive mode and force all clients to be shut down. WARNING: All cluster clients must be shut down prior to the patch installation. Installing the patch while the clients are booted is unsupported and can lead to serious problems. The swcluster command will invoke an swinstall session in which you must specify: alternate root path - default is /export/shared_root/OS_700 source depot path - /tmp/PHCO_8131.depot To complete the installation, select the patch by choosing "Actions -> Match What Target Has" and then "Actions -> Install" from the Menubar. 5c. For a heterogeneous NFS Diskless cluster: - run swinstall on the server as in step 5a to install the patch on the cluster server. - run swcluster on the server as in step 5b to install the patch on the cluster clients. By default swinstall will archive the original software in /var/adm/sw/patch/PHCO_8131. If you do not wish to retain a copy of the original software, you can create an empty file named /var/adm/sw/patch/PATCH_NOSAVE. Warning: If this file exists when a patch is installed, the patch cannot be deinstalled. Please be careful when using this feature. It is recommended that you move the PHCO_8131.text file to /var/adm/sw/patch for future reference. To put this patch on a magnetic tape and install from the tape drive, use the command: dd if=/tmp/PHCO_8131.depot of=/dev/rmt/0m bs=2k Special Installation Instructions: Make sure SAM is not running before installing this patch. PHCO_8839 for improved auditing, is strongly recommended.