Patch Name: PHNE_28673

Patch Description: s700_800 10.26 xntpd cumulative patch

Creation Date: 03/02/21

Post Date: 03/02/27

Hardware Platforms - OS Releases:
	s700: 10.26
	s800: 10.26

Products: N/A

Filesets:
	InternetSrvcs.INET-ENG-A-MAN InternetSrvcs.INETSVCS-BOOT

Automatic Reboot?: No

Status: General Release

Critical:
	No (superseded patches were critical)
	PHNE_24476: ABORT

Path Name: /hp-ux_patches/s700_800/10.X/PHNE_28673

Symptoms:
	PHNE_28673:
	1. Port of 10.20 patch PHNE_24510 to 10.26 (TOS).

	(PHNE_24510:)
	JAGae26628 / SR 8606262293:
	1. xntpd can cause performance problem.

	PHNE_25341:
	xntpd logs unnecessary audit records

	PHNE_24476:
	Partial port of 10.20 patch PHNE_23717
	JAGad58537 / SR 8606189322: xntpd core dumps.

	PHNE_18261:
	ntp does not perform trusted auditing, only system auditing

Defect Description:
	PHNE_28673:
	1. Port of 10.20 patch PHNE_24510 to 10.26 (TOS).

	(PHNE_24510:)
	JAGae26628 / SR 8606262293:
	1. xntpd can cause performance degradation under
	   certain circumstances.

	Resolution:
	The performance problem is now fixed.

	PHNE_25341:
	xntpd fills up the audit log with unnecessory information
	Resolution:
	Code has been modified to avoid logging unnecessary records

	PHNE_24476:
	Partial port of 10.20 patch PHNE_23717
	JAGad58537 / SR 8606189322: xntpd core dumps with SIGSEGV.
	Resolution:
	Now xntpd does not core dump.

	PHNE_18261:
	ntp does not do trusted auditing

	Resolution:
	implemented xntpd as a multilevel daemon, added trusted
	addendum to xntpd(1M), ntpq(1M) and ntpdate(1M)

SR:
	8606189322 8606262293

Patch Files:
	/usr/sbin/xntpd
	/usr/sbin/ntpdate
	/usr/share/man/man1m.Z/xntpd.1m
	/usr/share/man/man1m.Z/ntpq.1m
	/usr/share/man/man1m.Z/ntpdate.1m
	/etc/auth/system/files.fcdb/15.net/PHNE_18261.fcdb

what(1) Output:
	/usr/sbin/xntpd:
		2003/02/20 Hewlett-Packard HP-UX 10.26 TOS [ ic5hj -
			 DAV17 ]
		03/02/18 services/INETSVCS/xntp/xntpd/ntp_control.c,
			 hpux, hpux_10.26, ic5hj Revision 1.3 PATCH_
			10.26 (PHNE_28673)
		99/04/21 services/INETSVCS/xntp/xntpd/ntp_io.c, hpux
			, hpux_10.26, ic5hj Revision 1.3 PATCH_10.26
			 (PHNE_18261)
		99/04/21 services/INETSVCS/xntp/xntpd/ntp_loopfilter
			.c, hpux, hpux_10.26, ic5hj Revision 1.3 PAT
			CH_10.26 (PHNE_18261)
		99/04/21 services/INETSVCS/xntp/xntpd/ntpd.c, hpux,
			hpux_10.26, ic5hj Revision 1.3 PATCH_10.26 (
			PHNE_18261)
		99/04/21 services/INETSVCS/xntp/xntpd/ntp_intres.c,
			hpux, hpux_10.26, ic5hj Revision 1.1 PATCH_1
			0.26 (PHNE_18261)
		xntpd 3.4 #Revision 1.1.110.2: Thu Feb 20 21:52:37 G
			MT 2003
		Copyright 1992 David L. Mills
		02/04/18 services/INETSVCS/xntp/lib/systime.c, hpux,
			 hpux_10.26, ic5hj Revision 1.2 PATCH_10.26
			(PHNE_25341)
	/usr/sbin/ntpdate:
		2002/06/05 Hewlett-Packard HP-UX 10.26 TOS [ ic5gt -
			 DAV17 ]
		99/04/21 services/INETSVCS/xntp/ntpdate/ntpdate.c, h
			pux, hpux_10.26, ic5gt Revision 1.4 PATCH_10
			.26 (PHNE_18261)
		ntpdate 3.4 #Revision 1.1.110.2: Wed Jun  5 19:24:47
			 GMT 2002
		Copyright 1992 David L. Mills
		02/04/18 services/INETSVCS/xntp/lib/systime.c, hpux,
			 hpux_10.26, ic5gt Revision 1.2 PATCH_10.26
			(PHNE_25341)
	/usr/share/man/man1m.Z/xntpd.1m:
		None
	/usr/share/man/man1m.Z/ntpq.1m:
		None
	/usr/share/man/man1m.Z/ntpdate.1m:
		None
	/etc/auth/system/files.fcdb/15.net/PHNE_18261.fcdb:
		99/04/21 etc/auth/system/files.fcdb/15.net/PHNE_1826
			1.fcdb, hpux, hpux_10.26, ic5ca Revision 1.1
			 PATCH_10.26 (PHNE_18261)

cksum(1) Output:
	1728529122 167936 /usr/sbin/xntpd
	981781417 61440 /usr/sbin/ntpdate
	963190725 14738 /usr/share/man/man1m.Z/xntpd.1m
	2122406339 7860 /usr/share/man/man1m.Z/ntpq.1m
	4290151870 3869 /usr/share/man/man1m.Z/ntpdate.1m
	2885530080 444 /etc/auth/system/files.fcdb/15.net/
		PHNE_18261.fcdb

Patch Conflicts: None

Patch Dependencies: None

Hardware Dependencies: None

Other Dependencies: None

Supersedes:
	PHNE_18261 PHNE_24476 PHNE_25341

Equivalent Patches: None

Patch Package Size: 310 KBytes

Installation Instructions:
	Please review all instructions and the Hewlett-Packard
	SupportLine User Guide or your Hewlett-Packard support terms
	and conditions for precautions, scope of license,
	restrictions, and, limitation of liability and warranties,
	before installing this patch.
	------------------------------------------------------------
	1. Back up your system before installing a patch.

	2. Login as root.

	3. Copy the patch to the /tmp directory.

	4. Move to the /tmp directory and unshar the patch:

		cd /tmp
		sh PHNE_28673

	5a. For a standalone system, run swinstall to install the
	    patch:

		swinstall -x autoreboot=true -x match_target=true \
			-s /tmp/PHNE_28673.depot

	By default swinstall will archive the original software in
	/var/adm/sw/patch/PHNE_28673.  If you do not wish to retain a
	copy of the original software, you can create an empty file
	named /var/adm/sw/patch/PATCH_NOSAVE.

	WARNING: If this file exists when a patch is installed, the
	         patch cannot be deinstalled.  Please be careful
		 when using this feature.

	It is recommended that you move the PHNE_28673.text file to
	/var/adm/sw/patch for future reference.

	To put this patch on a magnetic tape and install from the
	tape drive, use the command:

		dd if=/tmp/PHNE_28673.depot of=/dev/rmt/0m bs=2k

Special Installation Instructions: None