Patch Name: PHNE_17451 Patch Description: s700_800 10.26 NIS and Audit cumulative patch Creation Date: 99/03/10 Post Date: 99/03/17 Hardware Platforms - OS Releases: s700: 10.26 s800: 10.26 Products: N/A Filesets: BLS.BLS-CORE NFS.NFS-CLIENT NFS.NIS-CLIENT NFS.NIS-SERVER Automatic Reboot?: No Status: General Superseded Critical: No Path Name: /hp-ux_patches/s700_800/10.X/PHNE_17451 Symptoms: PHNE_17451: 1. When running ypinit -m to setup NIS on the Master, the following error is generated Running make in /var/yp: updated prpasswd updated default yppullc:*** Error exit code 1 There is no yppullc running yppullc: *** Error exit code 1 There is no yppullc running updated passwd updated group 2. NIS maps have incorrect owners. PHNE_17432: When M6RHDB is modified on NIS server, the clients do not update their m6d cache and devassign entries. PHNE_17384: 1. Audit is not able to print reports. 2. Audit doesn't allow NIS users. 3. ISSO menu may crash during audit report display. 4. Local user account list shows NIS accounts in XIsso/XSysAdmin. 5. Double error GUIs displayed when missing audit_parms file. PHNE_16979: Netgroups and the automounter are not usable. PHNE_16947: 1. Upon bootup, NIS client takes about 2 minutes to initialize. 2. ypbind not stopped when /sbin/init.d/nis.client stop issued. 3. WAIT_FOR_NIS_SERVER parameter does not function. 4. NIS prpasswd map not updated when yppasswd(1) is invoked. 5. "Update NIS Map" program does not display error messages. 6. ypbind(1) reports that it is bound when it is not. Defect Description: PHNE_17451: 1. When ypinit runs, it executes make in /var/yp. At this point, none of the NIS services are available. The makefile calls yppullc -P. This results in an error message. 2. The files in /var/yp/domainname are owned by root. Resolution: 1. Check if yppullc is running in the makefile. 2. Modify makefiles and commands to change ownership to auth:auth. PHNE_17432: When /tcb/files/M6RHDB or NIS's M6RHDB or any file that M6DB is based on is changed, the M6DB should be regenerated. This way, the database is always in sync with the source. Resolution: Added code to yppullc to execute "m6ctl -h" and "addrhlogin" commands when new M6RHDB file is pulled. PHNE_17384: 1. Audit does not have print option. 2. Audit subsystem not updated for NIS. 3. Improper error handling. 4. List of users not updated to exclude NIS accounts. 5. Improper error handling when file does not exist. Resolution: 1. Added the print option to the Display or Delete Existing Reports menu. 2. Added the NIS users/groups in the Creat/Modify/Delete Selection Files screen when NIS is running. 3. Fixed the isso crash problem due to no local report to print. 4. Removed NIS users from the Local User Account screen in various XIsso and XSysAdmin menus. 5. Fixed varous audit screen error problems due to missing audit_parms file. PHNE_16979: Support for netgroups and the automounter was not available. Resolution: Support for netgroups and the automounter has been added. Please refer to netgroup(4) and automount(1M) for information. See special installation instructions for this patch. PHNE_16947: 1. ypwhich(1) did not all effective privileges, so at boot it was running with allownetaccess,etc. 2. ypbind was removed to fix another problem, but a better fix for that problem came. 3. Same as 1. 4. Order of arguments to yppasswdd in /sbin/init.d/ nis.server. 5. Standard error was not be caputured. 6. Same as 1. Resolution: 1. Drop all authorizations in ypwhich(1) 2. Add ypbind to list of processes to kill 3. see 1. 4. Changed order of arguements to yppasswdd 5. Updated program to catch error 6. see 1. SR: 0000000000 Patch Files: /etc/menuhelp/XIsso/audit/DispReports /etc/menuhelp/XIsso/isso.msg /etc/menuhelp/XNISUpdate/xnis.msg /etc/menuhelp/XSysAdmin/sysadmin.msg /sbin/init.d/nis.client.script /tcb/bin/cmutil /tcb/bin/set_collect_parms /usr/bin/X11/XIsso /usr/bin/X11/XNISUpdate /usr/bin/X11/XSysAdmin /usr/bin/ypwhich /usr/lib/X11/app-defaults/XIsso /usr/lib/X11/app-defaults/XSysAdmin /usr/lib/netsvc/yp/yppullc /usr/newconfig/usr/sbin/ypinit /usr/newconfig/var/yp/Makefile /usr/newconfig/var/yp/ypmake /usr/sbin/automount /usr/sbin/ypxfr what(1) Output: /etc/menuhelp/XIsso/audit/DispReports: None /etc/menuhelp/XIsso/isso.msg: None /etc/menuhelp/XNISUpdate/xnis.msg: None /etc/menuhelp/XSysAdmin/sysadmin.msg: None /sbin/init.d/nis.client.script: $Revision: 1.13 services/NFS/scripts/nis.client.scri pt, hpux, hpux_10.26, ic5aj $ $Date: 98/12/1 6 15:16:38 $ Hewlett Packard Co. 98/12/17 services/NFS/scripts/nis.client.script, hpu x, hpux_10.26, ic5aj Revision 1.13 PATCH_10. 26 (PHNE_16947) /tcb/bin/cmutil: $Revision: Hewlett-Packard 10.26 TOS Level ic5an Bas e DAV17$$Date: Thu Jan 14 17:52:18 PST 1999$ 99/01/14 seccmd/cmutil/cmutil.c, role_prog, hpux_10. 26, ic5an Revision 1.4 PATCH_10.26 (PHNE_173 84) /tcb/bin/set_collect_parms: $Revision: Hewlett-Packard 10.26 TOS Level ic5an Bas e DAV17$$Date: Thu Jan 14 17:52:18 PST 1999$ 99/01/14 seccmd/cmutil/set_collect_parms.c, role_pro g, hpux_10.26, ic5an Revision 1.10 PATCH_10. 26 (PHNE_17384) /usr/bin/X11/XIsso: $Revision: Hewlett-Packard 10.26 TOS Level ic5an Bas e DAV17$$Date: Thu Jan 14 17:52:18 PST 1999$ 99/01/14 seccmd/screens/xif/audit/XAudColnsl.c, hpux , hpux_10.26, ic5an Revision 1.14 PATCH_10.2 6 (PHNE_17384) 99/01/14 seccmd/screens/xif/audit/XAudColxsl.c, hpux , hpux_10.26, ic5an Revision 1.14 PATCH_10.2 6 (PHNE_17384) 99/01/14 seccmd/screens/xif/audit/XEvents.c, hpux, h pux_10.26, ic5an Revision 1.16 PATCH_10.26 ( PHNE_17384) 99/01/14 seccmd/screens/xif/audit/XParameter.c, hpux , hpux_10.26, ic5an Revision 1.11 PATCH_10.2 6 (PHNE_17384) 99/01/14 seccmd/screens/xif/audit/XSelectFil.c, hpux , hpux_10.26, ic5an Revision 1.14 PATCH_10.2 6 (PHNE_17384) 99/01/14 seccmd/screens/xif/audit/XShowRep.c, hpux, hpux_10.26, ic5an Revision 1.9 PATCH_10.26 ( PHNE_17384) 99/01/14 seccmd/screens/xif/audit/XUsrGrp.c, hpux, h pux_10.26, ic5an Revision 1.13 PATCH_10.26 ( PHNE_17384) 99/01/14 seccmd/screens/xif/audit/XAudUtils.c, hpux, hpux_10.26, ic5an Revision 1.9 PATCH_10.26 (PHNE_17384) 99/01/14 seccmd/screens/xif/audit/XSelection.c, hpux , hpux_10.26, ic5an Revision 1.14 PATCH_10.2 6 (PHNE_17384) seccmd/screens/common/AuthUtils.c, hpux, hpux_10.26, ic5an $Date: 99/01/14 17:21:52 $ $Revision: 1.19 PATCH_10.26 (PHNE_16979) $ 99/01/14 seccmd/screens/common/Reports.c, hpux, hpux _10.26, ic5an Revision 1.7 PATCH_10.26 (PHNE _17384) 99/01/14 seccmd/screens/common/Selection.c, hpux, hp ux_10.26, ic5an Revision 1.17 PATCH_10.26 (P HNE_17384) 99/01/14 seccmd/screens/common/UsrGrp.c, hpux, hpux_ 10.26, ic5an Revision 1.10 PATCH_10.26 (PHNE _17384) 99/01/14 seccmd/screens/common/Utils.c, hpux, hpux_1 0.26, ic5an Revision 1.25 PATCH_10.26 (PHNE_ 17384) 99/01/14 seccmd/screens/common/BufferU.c, hpux, hpux _10.26, ic5an Revision 1.7 PATCH_10.26 (PHNE _17384) /usr/bin/X11/XNISUpdate: $Revision: Hewlett-Packard 10.26 TOS Level ic5an Bas e DAV17$$Date: Thu Jan 14 17:52:18 PST 1999$ seccmd/screens/xif/xnis/XGenMaps.c, hpux, hpux_10.26 , ic5an $Date: 99/01/14 17:37:55 $ $Revision : 1.3 PATCH_10.26 (PHNE_16947) $ seccmd/screens/xif/xnis/XGenMapsPush.c, hpux, hpux_1 0.26, ic5an $Date: 99/01/14 17:37:56 $ $Revi sion: 1.3 PATCH_10.26 (PHNE_16947) $ 99/01/14 seccmd/screens/xif/audit/XAudColnsl.c, hpux , hpux_10.26, ic5an Revision 1.14 PATCH_10.2 6 (PHNE_17384) 99/01/14 seccmd/screens/xif/audit/XAudColxsl.c, hpux , hpux_10.26, ic5an Revision 1.14 PATCH_10.2 6 (PHNE_17384) 99/01/14 seccmd/screens/xif/audit/XEvents.c, hpux, h pux_10.26, ic5an Revision 1.16 PATCH_10.26 ( PHNE_17384) 99/01/14 seccmd/screens/xif/audit/XParameter.c, hpux , hpux_10.26, ic5an Revision 1.11 PATCH_10.2 6 (PHNE_17384) 99/01/14 seccmd/screens/xif/audit/XSelectFil.c, hpux , hpux_10.26, ic5an Revision 1.14 PATCH_10.2 6 (PHNE_17384) 99/01/14 seccmd/screens/xif/audit/XShowRep.c, hpux, hpux_10.26, ic5an Revision 1.9 PATCH_10.26 ( PHNE_17384) 99/01/14 seccmd/screens/xif/audit/XUsrGrp.c, hpux, h pux_10.26, ic5an Revision 1.13 PATCH_10.26 ( PHNE_17384) 99/01/14 seccmd/screens/xif/audit/XAudUtils.c, hpux, hpux_10.26, ic5an Revision 1.9 PATCH_10.26 (PHNE_17384) 99/01/14 seccmd/screens/xif/audit/XSelection.c, hpux , hpux_10.26, ic5an Revision 1.14 PATCH_10.2 6 (PHNE_17384) seccmd/screens/common/AuthUtils.c, hpux, hpux_10.26, ic5an $Date: 99/01/14 17:21:52 $ $Revision: 1.19 PATCH_10.26 (PHNE_16979) $ 99/01/14 seccmd/screens/common/Reports.c, hpux, hpux _10.26, ic5an Revision 1.7 PATCH_10.26 (PHNE _17384) 99/01/14 seccmd/screens/common/Selection.c, hpux, hp ux_10.26, ic5an Revision 1.17 PATCH_10.26 (P HNE_17384) 99/01/14 seccmd/screens/common/UsrGrp.c, hpux, hpux_ 10.26, ic5an Revision 1.10 PATCH_10.26 (PHNE _17384) 99/01/14 seccmd/screens/common/Utils.c, hpux, hpux_1 0.26, ic5an Revision 1.25 PATCH_10.26 (PHNE_ 17384) 99/01/14 seccmd/screens/common/BufferU.c, hpux, hpux _10.26, ic5an Revision 1.7 PATCH_10.26 (PHNE _17384) /usr/bin/X11/XSysAdmin: $Revision: Hewlett-Packard 10.26 TOS Level ic5an Bas e DAV17$$Date: Thu Jan 14 17:52:18 PST 1999$ 99/01/14 seccmd/screens/xif/audit/XAudColnsl.c, hpux , hpux_10.26, ic5an Revision 1.14 PATCH_10.2 6 (PHNE_17384) 99/01/14 seccmd/screens/xif/audit/XAudColxsl.c, hpux , hpux_10.26, ic5an Revision 1.14 PATCH_10.2 6 (PHNE_17384) 99/01/14 seccmd/screens/xif/audit/XEvents.c, hpux, h pux_10.26, ic5an Revision 1.16 PATCH_10.26 ( PHNE_17384) 99/01/14 seccmd/screens/xif/audit/XParameter.c, hpux , hpux_10.26, ic5an Revision 1.11 PATCH_10.2 6 (PHNE_17384) 99/01/14 seccmd/screens/xif/audit/XSelectFil.c, hpux , hpux_10.26, ic5an Revision 1.14 PATCH_10.2 6 (PHNE_17384) 99/01/14 seccmd/screens/xif/audit/XShowRep.c, hpux, hpux_10.26, ic5an Revision 1.9 PATCH_10.26 ( PHNE_17384) 99/01/14 seccmd/screens/xif/audit/XUsrGrp.c, hpux, h pux_10.26, ic5an Revision 1.13 PATCH_10.26 ( PHNE_17384) 99/01/14 seccmd/screens/xif/audit/XAudUtils.c, hpux, hpux_10.26, ic5an Revision 1.9 PATCH_10.26 (PHNE_17384) 99/01/14 seccmd/screens/xif/audit/XSelection.c, hpux , hpux_10.26, ic5an Revision 1.14 PATCH_10.2 6 (PHNE_17384) seccmd/screens/common/AuthUtils.c, hpux, hpux_10.26, ic5an $Date: 99/01/14 17:21:52 $ $Revision: 1.19 PATCH_10.26 (PHNE_16979) $ 99/01/14 seccmd/screens/common/Reports.c, hpux, hpux _10.26, ic5an Revision 1.7 PATCH_10.26 (PHNE _17384) 99/01/14 seccmd/screens/common/Selection.c, hpux, hp ux_10.26, ic5an Revision 1.17 PATCH_10.26 (P HNE_17384) 99/01/14 seccmd/screens/common/UsrGrp.c, hpux, hpux_ 10.26, ic5an Revision 1.10 PATCH_10.26 (PHNE _17384) 99/01/14 seccmd/screens/common/Utils.c, hpux, hpux_1 0.26, ic5an Revision 1.25 PATCH_10.26 (PHNE_ 17384) 99/01/14 seccmd/screens/common/BufferU.c, hpux, hpux _10.26, ic5an Revision 1.7 PATCH_10.26 (PHNE _17384) /usr/bin/ypwhich: services/NFS/cmds/usr.bin/ypwhich.c, hpux, hpux_10.2 6, ic5aj $Date: 98/12/17 16:25:36 $ $Revisio n: 1.2 PATCH_10.26 (PHNE_16947) $ ypwhich: $Revision: 1.37.114.1 $ $Date: 95/10 /02 18:18:11 $ $Revision: Hewlett-Packard 10.26 TOS Level ic5aj Bas e DAV17$$Date: Thu Dec 17 16:39:41 PST 1998$ /usr/lib/X11/app-defaults/XIsso: $Revision: 1.13 seccmd/screens/xif/main/XIsso.res, h pux, hpux_10.26, ic5an $ $Date: 99/01/14 15: 42:27 $ Hewlett Packard Co. 99/01/14 seccmd/screens/xif/main/XIsso.res, hpux, hp ux_10.26, ic5an Revision 1.13 PATCH_10.26 (P HNE_17384) 60 1.1.1.13 seccmd/screens/xif/main/XIsso.res, cmd srole_xif, hpux_mlpmp, mlpmp6 11/09/95 13:20 :28, SecureWare, Inc. /usr/lib/X11/app-defaults/XSysAdmin: $Revision: 1.13 seccmd/screens/xif/main/XIsso.res, h pux, hpux_10.26, ic5an $ $Date: 99/01/14 15: 42:27 $ Hewlett Packard Co. 99/01/14 seccmd/screens/xif/main/XIsso.res, hpux, hp ux_10.26, ic5an Revision 1.13 PATCH_10.26 (P HNE_17384) 60 1.1.1.13 seccmd/screens/xif/main/XIsso.res, cmd srole_xif, hpux_mlpmp, mlpmp6 11/09/95 13:20 :28, SecureWare, Inc. /usr/lib/netsvc/yp/yppullc: 99/03/09 services/NFS/cmds/usr.etc/yppull/yppull.c, hpux, hpux_10.26, ic5bd Revision 1.19 PATCH_ 10.26 (PHNE_17451) 1999/03/09 Hewlett-Packard HP-UX 10.26 TOS [ ic5bd - DAV17 ] /usr/newconfig/usr/sbin/ypinit: $Revision: 1.16 services/NFS/cmds/usr.etc/yp/ypinit, hpux, hpux_10.26, ic5bd $ $Date: 99/03/09 1 0:28:49 $ Hewlett Packard Co. 99/03/09 services/NFS/cmds/usr.etc/yp/ypinit, hpux, hpux_10.26, ic5bd Revision 1.16 PATCH_10.26 (PHNE_17451) $ ypinit: $Revision: 1.33.114.1 $ $Date: 95/10/02 18:2 2:56 $ /usr/newconfig/var/yp/Makefile: 99/03/09 services/NFS/cmds/usr.etc/yp/make.script, h pux, hpux_10.26, ic5bd Revision 1.17 Hewlett Packard Co. 99/03/09 services/NFS/cmds/usr.etc/yp/make.script, h pux, hpux_10.26, ic5bd Revision 1.17 PATCH_1 0.26 (PHNE_17451) make.script 1.32 90/01/24 SMI /usr/newconfig/var/yp/ypmake: $Revision: 1.10 services/NFS/cmds/usr.etc/yp/ypmake, hpux, hpux_10.26, ic5bd $ $Date: 99/03/09 1 0:29:32 $ Hewlett Packard Co. 99/03/09 services/NFS/cmds/usr.etc/yp/ypmake, hpux, hpux_10.26, ic5bd Revision 1.10 PATCH_10.26 (PHNE_17451) $ ypmake: $Revision: 1.47.114.4 $ $Date: 96/04/29 12:5 3:43 $ /usr/sbin/automount: $Revision: Hewlett-Packard 10.26 TOS Level ic5ak Bas e DAV17$$Date: Wed Jan 6 18:30:36 PST 1999$ services/NFS/cmds/usr.etc/automount/auto_main.c, hpu x, hpux_10.26, ic5ak $Date: 99/01/06 17:57:5 3 $ $Revision: 1.6 PATCH_10.26 (PHNE_16979) $ automount: PHNE_6444 $Revision: 1.11.114.5 $ $Dat e: 96/02/15 10:47:16 $ /usr/sbin/ypxfr: 99/03/09 services/NFS/cmds/usr.etc/yp/ypxfr.c, hpux, hpux_10.26, ic5bd Revision 1.5 PATCH_10.26 (PHNE_17451) ypxfr: $Revision: 1.46.114.2 $ $Date: 96/04/11 12:3 3:56 $ 1999/03/09 Hewlett-Packard HP-UX 10.26 TOS [ ic5bd - DAV17 ] cksum(1) Output: 4184477579 1088 /etc/menuhelp/XIsso/audit/DispReports 1834188066 90362 /etc/menuhelp/XIsso/isso.msg 2644327276 84473 /etc/menuhelp/XNISUpdate/xnis.msg 1834188066 90362 /etc/menuhelp/XSysAdmin/sysadmin.msg 3266343288 8445 /sbin/init.d/nis.client.script 1451201254 16384 /tcb/bin/cmutil 2853027333 28672 /tcb/bin/set_collect_parms 228263256 741376 /usr/bin/X11/XIsso 1102882681 733184 /usr/bin/X11/XNISUpdate 228263256 741376 /usr/bin/X11/XSysAdmin 1870825052 20480 /usr/bin/ypwhich 174940455 27225 /usr/lib/X11/app-defaults/XIsso 174940455 27225 /usr/lib/X11/app-defaults/XSysAdmin 2713689709 28672 /usr/lib/netsvc/yp/yppullc 616858809 12379 /usr/newconfig/usr/sbin/ypinit 468743121 22724 /usr/newconfig/var/yp/Makefile 1421597324 24073 /usr/newconfig/var/yp/ypmake 2810993730 98304 /usr/sbin/automount 2993121244 45056 /usr/sbin/ypxfr Patch Conflicts: None Patch Dependencies: None Hardware Dependencies: None Other Dependencies: None Supersedes: PHNE_16947 PHNE_16979 PHNE_17384 PHNE_17432 Equivalent Patches: None Patch Package Size: 2010 KBytes Installation Instructions: Please review all instructions and the Hewlett-Packard SupportLine User Guide or your Hewlett-Packard support terms and conditions for precautions, scope of license, restrictions, and, limitation of liability and warranties, before installing this patch. ------------------------------------------------------------ 1. Back up your system before installing a patch. 2. Login as root. 3. Copy the patch to the /tmp directory. 4. Move to the /tmp directory and unshar the patch: cd /tmp sh PHNE_17451 5a. For a standalone system, run swinstall to install the patch: swinstall -x autoreboot=true -x match_target=true \ -s /tmp/PHNE_17451.depot 5b. For a homogeneous NFS Diskless cluster run swcluster on the server to install the patch on the server and the clients: swcluster -i -b This will invoke swcluster in the interactive mode and force all clients to be shut down. WARNING: All cluster clients must be shut down prior to the patch installation. Installing the patch while the clients are booted is unsupported and can lead to serious problems. The swcluster command will invoke an swinstall session in which you must specify: alternate root path - default is /export/shared_root/OS_700 source depot path - /tmp/PHNE_17451.depot To complete the installation, select the patch by choosing "Actions -> Match What Target Has" and then "Actions -> Install" from the Menubar. 5c. For a heterogeneous NFS Diskless cluster: - run swinstall on the server as in step 5a to install the patch on the cluster server. - run swcluster on the server as in step 5b to install the patch on the cluster clients. By default swinstall will archive the original software in /var/adm/sw/patch/PHNE_17451. If you do not wish to retain a copy of the original software, you can create an empty file named /var/adm/sw/patch/PATCH_NOSAVE. Warning: If this file exists when a patch is installed, the patch cannot be deinstalled. Please be careful when using this feature. It is recommended that you move the PHNE_17451.text file to /var/adm/sw/patch for future reference. To put this patch on a magnetic tape and install from the tape drive, use the command: dd if=/tmp/PHNE_17451.depot of=/dev/rmt/0m bs=2k Special Installation Instructions: In order to make these changes effective, use the following procedure: 1. Install the patch. 2. On the NIS master server, either run the command "/var/yp/ypmake NOPUSH=1" or use the "Update NIS Maps" program and choose "Generate Maps". 3. On each NIS slave server, execute the following commands: /usr/sbin/ypxfr netgroup /usr/sbin/ypxfr netgroup.byhost /usr/sbin/ypxfr netgroup.byuser /usr/sbin/ypxfr auto.master 4. You may now use the netgroups and automounter functionality.