Patch Name: PHNE_18686 Patch Description: s700_800 10.26 Cumulative patch for XSysAdmin Role Program Creation Date: 99/10/20 Post Date: 99/10/26 Hardware Platforms - OS Releases: s700: 10.26 s800: 10.26 Products: N/A Filesets: BLS.BLS-CORE NFS.NFS-CLIENT NFS.NIS-CLIENT NFS.NIS-SERVER Automatic Reboot?: No Status: General Superseded Critical: No Path Name: /hp-ux_patches/s700_800/10.X/PHNE_18686 Symptoms: PHNE_18686: 1. If a user is added using sysadmin role program, directory entry for that user in /etc/passwd file is corrupted if a mistake was made in entering user name. 2. In an NIS domain configured with a large number of users, the map generation for NIS groups fails. PHNE_18003: After installing patch PHNE_17451 on an already configured NIS Master, ypmake is run. On already configured NIS Slave the permissions on the /var/yp/mydomain directory or not set correctly. PHNE_17451: 1. When running ypinit -m to setup NIS on the Master, the following error is generated Running make in /var/yp: updated prpasswd updated default yppullc:*** Error exit code 1 There is no yppullc running yppullc: *** Error exit code 1 There is no yppullc running updated passwd updated group 2. NIS maps have incorrect owners. PHNE_17432: When M6RHDB is modified on NIS server, the clients do not update their m6d cache and devassign entries. PHNE_17384: 1. Audit is not able to print reports. 2. Audit doesn't allow NIS users. 3. ISSO menu may crash during audit report display. 4. Local user account list shows NIS accounts in XIsso/XSysAdmin. 5. Double error GUIs displayed when missing audit_parms file. PHNE_16979: Netgroups and the automounter are not usable. PHNE_16947: 1. Upon bootup, NIS client takes about 2 minutes to initialize. 2. ypbind not stopped when /sbin/init.d/nis.client stop issued. 3. WAIT_FOR_NIS_SERVER parameter does not function. 4. NIS prpasswd map not updated when yppasswd(1) is invoked. 5. "Update NIS Map" program does not display error messages. 6. ypbind(1) reports that it is bound when it is not. Defect Description: PHNE_18686: 1. Sysadmin role program is constructing path to the home directory of the user using user name. If user name that already exists is entered, an error dialog will be posted, but the directory path is not corrected. When the correct user name is entered, the wrong path will be constructed by adding the correct name to the wrong one. 2. When a new NIS user account is created, the primary group name associated with that user is also added in the NIS group file as a supplementary group. This results in a long entry in the NIS group file if a large number of users belong to the same primary group. The limitation for NIS maps is that no entry should exceed more than 1024 characters. A long long entry results in the NIS map generation failure. Resolution: 1. Code was modified to delete the wrong user name from the home directory path. 2. Don't add primary group name as supplementary group for a user. PHNE_18003: If NIS was newly configured after PHNE_17451 was installed then ypinit and ypmake correctly set the ownerships and permissions on /var/yp/ypdomain. If the NIS was already configured prior to the patch then the postinstall script performed a ypmake and did not set ownerships and permissions on the master and slave Resolution: Change postinstall script only. No content change to patch files. Use chmod and chown to correctly set the permissions on already configured Master and Slaves instead of ypmake. PHNE_17451: 1. When ypinit runs, it executes make in /var/yp. At this point, none of the NIS services are available. The makefile calls yppullc -P. This results in an error message. 2. The files in /var/yp/domainname are owned by root. Resolution: 1. Check if yppullc is running in the makefile. 2. Modify makefiles and commands to change ownership to auth:auth. PHNE_17432: When /tcb/files/M6RHDB or NIS's M6RHDB or any file that M6DB is based on is changed, the M6DB should be regenerated. This way, the database is always in sync with the source. Resolution: Added code to yppullc to execute "m6ctl -h" and "addrhlogin" commands when new M6RHDB file is pulled. PHNE_17384: 1. Audit does not have print option. 2. Audit subsystem not updated for NIS. 3. Improper error handling. 4. List of users not updated to exclude NIS accounts. 5. Improper error handling when file does not exist. Resolution: 1. Added the print option to the Display or Delete Existing Reports menu. 2. Added the NIS users/groups in the Creat/Modify/Delete Selection Files screen when NIS is running. 3. Fixed the isso crash problem due to no local report to print. 4. Removed NIS users from the Local User Account screen in various XIsso and XSysAdmin menus. 5. Fixed varous audit screen error problems due to missing audit_parms file. PHNE_16979: Support for netgroups and the automounter was not available. Resolution: Support for netgroups and the automounter has been added. Please refer to netgroup(4) and automount(1M) for information. See special installation instructions for this patch. PHNE_16947: 1. ypwhich(1) did not all effective privileges, so at boot it was running with allownetaccess,etc. 2. ypbind was removed to fix another problem, but a better fix for that problem came. 3. Same as 1. 4. Order of arguments to yppasswdd in /sbin/init.d/ nis.server. 5. Standard error was not be caputured. 6. Same as 1. Resolution: 1. Drop all authorizations in ypwhich(1) 2. Add ypbind to list of processes to kill 3. see 1. 4. Changed order of arguements to yppasswdd 5. Updated program to catch error 6. see 1. SR: 0000000000 Patch Files: /etc/menuhelp/XIsso/audit/DispReports /etc/menuhelp/XIsso/isso.msg /etc/menuhelp/XNISUpdate/xnis.msg /etc/menuhelp/XSysAdmin/sysadmin.msg /sbin/init.d/nis.client.script /tcb/bin/cmutil /tcb/bin/set_collect_parms /usr/bin/X11/XIsso /usr/bin/X11/XNISUpdate /usr/bin/X11/XSysAdmin /usr/bin/ypwhich /usr/lib/X11/app-defaults/XIsso /usr/lib/X11/app-defaults/XSysAdmin /usr/lib/netsvc/yp/yppullc /usr/newconfig/usr/sbin/ypinit /usr/newconfig/var/yp/Makefile /usr/newconfig/var/yp/ypmake /usr/sbin/automount /usr/sbin/ypxfr what(1) Output: /etc/menuhelp/XIsso/audit/DispReports: None /etc/menuhelp/XIsso/isso.msg: None /etc/menuhelp/XNISUpdate/xnis.msg: None /etc/menuhelp/XSysAdmin/sysadmin.msg: None /sbin/init.d/nis.client.script: $Revision: 1.13 services/NFS/scripts/nis.client.scri pt, hpux, hpux_10.26, ic5aj $ $Date: 98/12/1 6 15:16:38 $ Hewlett Packard Co. 98/12/17 services/NFS/scripts/nis.client.script, hpu x, hpux_10.26, ic5aj Revision 1.13 PATCH_10. 26 (PHNE_16947) /tcb/bin/cmutil: $Revision: Hewlett-Packard 10.26 TOS Level ic5an Bas e DAV17$$Date: Thu Jan 14 17:52:18 PST 1999$ 99/01/14 seccmd/cmutil/cmutil.c, role_prog, hpux_10. 26, ic5an Revision 1.4 PATCH_10.26 (PHNE_173 84) /tcb/bin/set_collect_parms: $Revision: Hewlett-Packard 10.26 TOS Level ic5an Bas e DAV17$$Date: Thu Jan 14 17:52:18 PST 1999$ 99/01/14 seccmd/cmutil/set_collect_parms.c, role_pro g, hpux_10.26, ic5an Revision 1.10 PATCH_10. 26 (PHNE_17384) /usr/bin/X11/XIsso: 1999/10/22 Hewlett-Packard HP-UX 10.26 TOS [ ic5dq - DAV17 ] 99/10/22 seccmd/screens/xif/audit/XAudColnsl.c, hpux , hpux_10.26, ic5dq Revision 1.14 PATCH_10.2 6 (PHNE_17384) 99/10/22 seccmd/screens/xif/audit/XAudColxsl.c, hpux , hpux_10.26, ic5dq Revision 1.14 PATCH_10.2 6 (PHNE_17384) 99/10/22 seccmd/screens/xif/audit/XEvents.c, hpux, h pux_10.26, ic5dq Revision 1.16 PATCH_10.26 ( PHNE_17384) 99/10/22 seccmd/screens/xif/audit/XParameter.c, hpux , hpux_10.26, ic5dq Revision 1.11 PATCH_10.2 6 (PHNE_17384) 99/10/22 seccmd/screens/xif/audit/XSelectFil.c, hpux , hpux_10.26, ic5dq Revision 1.14 PATCH_10.2 6 (PHNE_17384) 99/10/22 seccmd/screens/xif/audit/XShowRep.c, hpux, hpux_10.26, ic5dq Revision 1.9 PATCH_10.26 ( PHNE_17384) 99/10/22 seccmd/screens/xif/audit/XUsrGrp.c, hpux, h pux_10.26, ic5dq Revision 1.13 PATCH_10.26 ( PHNE_17384) 99/10/22 seccmd/screens/xif/audit/XAudUtils.c, hpux, hpux_10.26, ic5dq Revision 1.9 PATCH_10.26 (PHNE_17384) 99/10/22 seccmd/screens/xif/audit/XSelection.c, hpux , hpux_10.26, ic5dq Revision 1.14 PATCH_10.2 6 (PHNE_17384) 99/10/06 seccmd/screens/xif/accounts/XMakeUser.c, hp ux, hpux_10.26, ic5dq Revision 1.16 PATCH_10 .26 (PHNE_18686) seccmd/screens/common/AuthUtils.c, hpux, hpux_10.26, ic5dq $Date: 99/10/22 14:53:11 $ $Revision: 1.20 PATCH_10.26 (PHNE_18686) $ 99/10/22 seccmd/screens/common/Reports.c, hpux, hpux _10.26, ic5dq Revision 1.7 PATCH_10.26 (PHNE _17384) 99/10/22 seccmd/screens/common/Selection.c, hpux, hp ux_10.26, ic5dq Revision 1.17 PATCH_10.26 (P HNE_17384) 99/10/22 seccmd/screens/common/UsrGrp.c, hpux, hpux_ 10.26, ic5dq Revision 1.10 PATCH_10.26 (PHNE _17384) 99/10/22 seccmd/screens/common/Utils.c, hpux, hpux_1 0.26, ic5dq Revision 1.25 PATCH_10.26 (PHNE_ 17384) 99/10/22 seccmd/screens/common/BufferU.c, hpux, hpux _10.26, ic5dq Revision 1.7 PATCH_10.26 (PHNE _17384) /usr/bin/X11/XNISUpdate: $Revision: Hewlett-Packard 10.26 TOS Level ic5an Bas e DAV17$$Date: Thu Jan 14 17:52:18 PST 1999$ seccmd/screens/xif/xnis/XGenMaps.c, hpux, hpux_10.26 , ic5an $Date: 99/01/14 17:37:55 $ $Revision : 1.3 PATCH_10.26 (PHNE_16947) $ seccmd/screens/xif/xnis/XGenMapsPush.c, hpux, hpux_1 0.26, ic5an $Date: 99/01/14 17:37:56 $ $Revi sion: 1.3 PATCH_10.26 (PHNE_16947) $ 99/01/14 seccmd/screens/xif/audit/XAudColnsl.c, hpux , hpux_10.26, ic5an Revision 1.14 PATCH_10.2 6 (PHNE_17384) 99/01/14 seccmd/screens/xif/audit/XAudColxsl.c, hpux , hpux_10.26, ic5an Revision 1.14 PATCH_10.2 6 (PHNE_17384) 99/01/14 seccmd/screens/xif/audit/XEvents.c, hpux, h pux_10.26, ic5an Revision 1.16 PATCH_10.26 ( PHNE_17384) 99/01/14 seccmd/screens/xif/audit/XParameter.c, hpux , hpux_10.26, ic5an Revision 1.11 PATCH_10.2 6 (PHNE_17384) 99/01/14 seccmd/screens/xif/audit/XSelectFil.c, hpux , hpux_10.26, ic5an Revision 1.14 PATCH_10.2 6 (PHNE_17384) 99/01/14 seccmd/screens/xif/audit/XShowRep.c, hpux, hpux_10.26, ic5an Revision 1.9 PATCH_10.26 ( PHNE_17384) 99/01/14 seccmd/screens/xif/audit/XUsrGrp.c, hpux, h pux_10.26, ic5an Revision 1.13 PATCH_10.26 ( PHNE_17384) 99/01/14 seccmd/screens/xif/audit/XAudUtils.c, hpux, hpux_10.26, ic5an Revision 1.9 PATCH_10.26 (PHNE_17384) 99/01/14 seccmd/screens/xif/audit/XSelection.c, hpux , hpux_10.26, ic5an Revision 1.14 PATCH_10.2 6 (PHNE_17384) seccmd/screens/common/AuthUtils.c, hpux, hpux_10.26, ic5an $Date: 99/01/14 17:21:52 $ $Revision: 1.19 PATCH_10.26 (PHNE_16979) $ 99/01/14 seccmd/screens/common/Reports.c, hpux, hpux _10.26, ic5an Revision 1.7 PATCH_10.26 (PHNE _17384) 99/01/14 seccmd/screens/common/Selection.c, hpux, hp ux_10.26, ic5an Revision 1.17 PATCH_10.26 (P HNE_17384) 99/01/14 seccmd/screens/common/UsrGrp.c, hpux, hpux_ 10.26, ic5an Revision 1.10 PATCH_10.26 (PHNE _17384) 99/01/14 seccmd/screens/common/Utils.c, hpux, hpux_1 0.26, ic5an Revision 1.25 PATCH_10.26 (PHNE_ 17384) 99/01/14 seccmd/screens/common/BufferU.c, hpux, hpux _10.26, ic5an Revision 1.7 PATCH_10.26 (PHNE _17384) /usr/bin/X11/XSysAdmin: 1999/10/22 Hewlett-Packard HP-UX 10.26 TOS [ ic5dq - DAV17 ] 99/10/22 seccmd/screens/xif/audit/XAudColnsl.c, hpux , hpux_10.26, ic5dq Revision 1.14 PATCH_10.2 6 (PHNE_17384) 99/10/22 seccmd/screens/xif/audit/XAudColxsl.c, hpux , hpux_10.26, ic5dq Revision 1.14 PATCH_10.2 6 (PHNE_17384) 99/10/22 seccmd/screens/xif/audit/XEvents.c, hpux, h pux_10.26, ic5dq Revision 1.16 PATCH_10.26 ( PHNE_17384) 99/10/22 seccmd/screens/xif/audit/XParameter.c, hpux , hpux_10.26, ic5dq Revision 1.11 PATCH_10.2 6 (PHNE_17384) 99/10/22 seccmd/screens/xif/audit/XSelectFil.c, hpux , hpux_10.26, ic5dq Revision 1.14 PATCH_10.2 6 (PHNE_17384) 99/10/22 seccmd/screens/xif/audit/XShowRep.c, hpux, hpux_10.26, ic5dq Revision 1.9 PATCH_10.26 ( PHNE_17384) 99/10/22 seccmd/screens/xif/audit/XUsrGrp.c, hpux, h pux_10.26, ic5dq Revision 1.13 PATCH_10.26 ( PHNE_17384) 99/10/22 seccmd/screens/xif/audit/XAudUtils.c, hpux, hpux_10.26, ic5dq Revision 1.9 PATCH_10.26 (PHNE_17384) 99/10/22 seccmd/screens/xif/audit/XSelection.c, hpux , hpux_10.26, ic5dq Revision 1.14 PATCH_10.2 6 (PHNE_17384) 99/10/06 seccmd/screens/xif/accounts/XMakeUser.c, hp ux, hpux_10.26, ic5dq Revision 1.16 PATCH_10 .26 (PHNE_18686) seccmd/screens/common/AuthUtils.c, hpux, hpux_10.26, ic5dq $Date: 99/10/22 14:53:11 $ $Revision: 1.20 PATCH_10.26 (PHNE_18686) $ 99/10/22 seccmd/screens/common/Reports.c, hpux, hpux _10.26, ic5dq Revision 1.7 PATCH_10.26 (PHNE _17384) 99/10/22 seccmd/screens/common/Selection.c, hpux, hp ux_10.26, ic5dq Revision 1.17 PATCH_10.26 (P HNE_17384) 99/10/22 seccmd/screens/common/UsrGrp.c, hpux, hpux_ 10.26, ic5dq Revision 1.10 PATCH_10.26 (PHNE _17384) 99/10/22 seccmd/screens/common/Utils.c, hpux, hpux_1 0.26, ic5dq Revision 1.25 PATCH_10.26 (PHNE_ 17384) 99/10/22 seccmd/screens/common/BufferU.c, hpux, hpux _10.26, ic5dq Revision 1.7 PATCH_10.26 (PHNE _17384) /usr/bin/ypwhich: 1999/10/22 Hewlett-Packard HP-UX 10.26 TOS [ ic5dq - DAV17 ] 99/08/20 services/NFS/cmds/usr.bin/ypwhich.c, hpux, hpux_10.26, ic5dq Revision 1.3 PATCH_10.26 ( PHNE_16947) /usr/lib/X11/app-defaults/XIsso: $Revision: 1.13 seccmd/screens/xif/main/XIsso.res, h pux, hpux_10.26, ic5an $ $Date: 99/01/14 15: 42:27 $ Hewlett Packard Co. 99/01/14 seccmd/screens/xif/main/XIsso.res, hpux, hp ux_10.26, ic5an Revision 1.13 PATCH_10.26 (P HNE_17384) 60 1.1.1.13 seccmd/screens/xif/main/XIsso.res, cmd srole_xif, hpux_mlpmp, mlpmp6 11/09/95 13:20 :28, SecureWare, Inc. /usr/lib/X11/app-defaults/XSysAdmin: $Revision: 1.13 seccmd/screens/xif/main/XIsso.res, h pux, hpux_10.26, ic5an $ $Date: 99/01/14 15: 42:27 $ Hewlett Packard Co. 99/01/14 seccmd/screens/xif/main/XIsso.res, hpux, hp ux_10.26, ic5an Revision 1.13 PATCH_10.26 (P HNE_17384) 60 1.1.1.13 seccmd/screens/xif/main/XIsso.res, cmd srole_xif, hpux_mlpmp, mlpmp6 11/09/95 13:20 :28, SecureWare, Inc. /usr/lib/netsvc/yp/yppullc: 99/03/22 services/NFS/cmds/usr.etc/yppull/yppull.c, hpux, hpux_10.26, ic5bn Revision 1.20 PATCH_ 10.26 (PHNE_18003) 1999/03/22 Hewlett-Packard HP-UX 10.26 TOS [ ic5bn - DAV17 ] /usr/newconfig/usr/sbin/ypinit: $Revision: 1.17 services/NFS/cmds/usr.etc/yp/ypinit, hpux, hpux_10.26, ic5bn $ $Date: 99/03/18 1 3:59:00 $ Hewlett Packard Co. 99/03/18 services/NFS/cmds/usr.etc/yp/ypinit, hpux, hpux_10.26, ic5bn Revision 1.17 PATCH_10.26 (PHNE_18003) $ ypinit: $Revision: 1.33.114.1 $ $Date: 95/10/02 18:2 2:56 $ /usr/newconfig/var/yp/Makefile: 99/03/22 services/NFS/cmds/usr.etc/yp/make.script, h pux, hpux_10.26, ic5bn Revision 1.18 Hewlett Packard Co. 99/03/18 services/NFS/cmds/usr.etc/yp/make.script, h pux, hpux_10.26, ic5bn Revision 1.18 PATCH_1 0.26 (PHNE_18003) make.script 1.32 90/01/24 SMI /usr/newconfig/var/yp/ypmake: $Revision: 1.11 services/NFS/cmds/usr.etc/yp/ypmake, hpux, hpux_10.26, ic5bn $ $Date: 99/03/18 1 3:56:41 $ Hewlett Packard Co. 99/03/18 services/NFS/cmds/usr.etc/yp/ypmake, hpux, hpux_10.26, ic5bn Revision 1.11 PATCH_10.26 (PHNE_18003) $ ypmake: $Revision: 1.47.114.4 $ $Date: 96/04/29 12:5 3:43 $ /usr/sbin/automount: $Revision: Hewlett-Packard 10.26 TOS Level ic5ak Bas e DAV17$$Date: Wed Jan 6 18:30:36 PST 1999$ services/NFS/cmds/usr.etc/automount/auto_main.c, hpu x, hpux_10.26, ic5ak $Date: 99/01/06 17:57:5 3 $ $Revision: 1.6 PATCH_10.26 (PHNE_16979) $ automount: PHNE_6444 $Revision: 1.11.114.5 $ $Dat e: 96/02/15 10:47:16 $ /usr/sbin/ypxfr: 99/03/22 services/NFS/cmds/usr.etc/yp/ypxfr.c, hpux, hpux_10.26, ic5bn Revision 1.6 PATCH_10.26 (PHNE_18003) ypxfr: $Revision: 1.46.114.2 $ $Date: 96/04/11 12:3 3:56 $ 1999/03/22 Hewlett-Packard HP-UX 10.26 TOS [ ic5bn - DAV17 ] cksum(1) Output: 4184477579 1088 /etc/menuhelp/XIsso/audit/DispReports 1834188066 90362 /etc/menuhelp/XIsso/isso.msg 2644327276 84473 /etc/menuhelp/XNISUpdate/xnis.msg 1834188066 90362 /etc/menuhelp/XSysAdmin/sysadmin.msg 3266343288 8445 /sbin/init.d/nis.client.script 1451201254 16384 /tcb/bin/cmutil 2853027333 28672 /tcb/bin/set_collect_parms 4017661244 741376 /usr/bin/X11/XIsso 1102882681 733184 /usr/bin/X11/XNISUpdate 4017661244 741376 /usr/bin/X11/XSysAdmin 447869524 20480 /usr/bin/ypwhich 174940455 27225 /usr/lib/X11/app-defaults/XIsso 174940455 27225 /usr/lib/X11/app-defaults/XSysAdmin 894144857 28672 /usr/lib/netsvc/yp/yppullc 1368216512 12379 /usr/newconfig/usr/sbin/ypinit 4115604929 22724 /usr/newconfig/var/yp/Makefile 1729189453 24073 /usr/newconfig/var/yp/ypmake 2810993730 98304 /usr/sbin/automount 2405476850 45056 /usr/sbin/ypxfr Patch Conflicts: None Patch Dependencies: None Hardware Dependencies: None Other Dependencies: None Supersedes: PHNE_16947 PHNE_16979 PHNE_17384 PHNE_17432 PHNE_17451 PHNE_18003 Equivalent Patches: None Patch Package Size: 2130 KBytes Installation Instructions: Please review all instructions and the Hewlett-Packard SupportLine User Guide or your Hewlett-Packard support terms and conditions for precautions, scope of license, restrictions, and, limitation of liability and warranties, before installing this patch. ------------------------------------------------------------ 1. Back up your system before installing a patch. 2. Login as root. 3. Copy the patch to the /tmp directory. 4. Move to the /tmp directory and unshar the patch: cd /tmp sh PHNE_18686 5a. For a standalone system, run swinstall to install the patch: swinstall -x autoreboot=true -x match_target=true \ -s /tmp/PHNE_18686.depot By default swinstall will archive the original software in /var/adm/sw/patch/PHNE_18686. If you do not wish to retain a copy of the original software, you can create an empty file named /var/adm/sw/patch/PATCH_NOSAVE. WARNING: If this file exists when a patch is installed, the patch cannot be deinstalled. Please be careful when using this feature. It is recommended that you move the PHNE_18686.text file to /var/adm/sw/patch for future reference. To put this patch on a magnetic tape and install from the tape drive, use the command: dd if=/tmp/PHNE_18686.depot of=/dev/rmt/0m bs=2k Special Installation Instructions: In order to make these changes effective, use the following procedure: 1. Install the patch. 2. On the NIS master server, either run the command "/var/yp/ypmake NOPUSH=1" or use the "Update NIS Maps" program and choose "Generate Maps". 3. On each NIS slave server, execute the following commands: /usr/sbin/ypxfr netgroup /usr/sbin/ypxfr netgroup.byhost /usr/sbin/ypxfr netgroup.byuser /usr/sbin/ypxfr auto.master 4. You may now use the netgroups and automounter functionality. 5. The customer may manually cleanup the /etc/group and /var/yp/NISServer/group file for all the existing accounts.