Patch Name: PHSS_10875 Patch Description: s700_800 10.20 CDE dtgreet and dtsesion point patch Creation Date: 97/05/30 Post Date: 97/06/10 Repost: 97/06/16 The patch was modified to contain an SD-UX prerequisite attribute to insure that PHSS_9803 is installed prior to this patch. Also, the patch documentation was modified to list PHSS_9803 in the Patch Dependencies field. If PHSS_10875 is already installed, it does not need to be reinstalled. However, if PHSS_10875 is maintained in a depot please update the depot with the newer copy of the patch. Hardware Platforms - OS Releases: s700: 10.20 s800: 10.20 Products: N/A Filesets: CDE.CDE-RUN CDE.CDE-PAM Automatic Reboot?: No Status: Special Superseded Critical: No Path Name: /hp-ux_patches/s700_800/10.X/PHSS_10875 Symptoms: PHSS_10876: 1) Dtgreet hangs trying to display to xterminal without CDE fonts. 2) cde:trusted system:screenlock: unlock by root seen as unsuccessful try 3) CDE:Trusted system:root can't unlock screen lock 4) Possibility of disableing user accounts on trusted system by screen lock 5) CDE screen locker doesn't use DCE authentication to unlock the screen 6) CDE builtin screen lock may fail to display the password prompt. PHSS_10875: 1) CDE builtin screen lock may fail to display the password prompt Defect Description: PHSS_10876: 1) Dtgreet hangs trying to display to xterminal without CDE fonts. 2) cde:trusted system:screenlock: unlock by root seen as unsuccessful try 3) CDE:Trusted system:root can't unlock screen lock 4) Possibility of disableing user accounts on trusted system by screen lock 5) CDE screen locker doesn't use DCE authentication to unlock the screen 6) CDE builtin screen lock may fail to display the password prompt. PHSS_10875: 1) CDE builtin screen lock may fail to display the password prompt SR: 5003349738 5003356295 5003356287 5003356303 5003352930 5003345140 Patch Files: /usr/lib/security/libpam_unix.1 /usr/dt/bin/dtgreet /usr/dt/bin/dtsession what(1) Output: /usr/dt/bin/dtgreet: X Window System, Version 11 R6+ HP-UX B.10.20.00 Mar 1997 Patch Release (build date: Wed Feb 26 17:16:10 PST 1997) dtgreet: $Revision: 1.5 $ /usr/dt/bin/dtsession: X Window System, Version 11 R6+ HP-UX B.10.20.00 Mar 1997 Patch C Release (build date: Fri May 30 08:37:33 PDT 1997) dtsession: $Revision: 2.0 $ /usr/lib/security/libpam_unix.1: X Window System, Version 11 R6+ HP-UX B.10.20.970423 +O2 (build date: Wed Apr 23 15:48:42 PDT 1997) cksum(1) Output: 117590794 86016 /usr/dt/bin/dtgreet 3376829605 172032 /usr/dt/bin/dtsession 123989032 90298 /usr/lib/security/libpam_unix.1 Patch Conflicts: None Patch Dependencies: s700: 10.20: PHSS_9803 s800: 10.20: PHSS_9803 Hardware Dependencies: None Other Dependencies: None Supersedes: PHSS_10876 Equivalent Patches: None Patch Package Size: 400 Kbytes Installation Instructions: Please review all instructions and the Hewlett-Packard SupportLine User Guide or your Hewlett-Packard support terms and conditions for precautions, scope of license, restrictions, and, limitation of liability and warranties, before installing this patch. ------------------------------------------------------------ 1. Back up your system before installing a patch. 2. Login as root. 3. Copy the patch to the /tmp directory. 4. Move to the /tmp directory and unshar the patch: cd /tmp sh PHSS_10875 5a. For a standalone system, run swinstall to install the patch: swinstall -x autoreboot=true -x match_target=true \ -s /tmp/PHSS_10875.depot 5b. For a homogeneous NFS Diskless cluster run swcluster on the server to install the patch on the server and the clients: swcluster -i -b This will invoke swcluster in the interactive mode and force all clients to be shut down. WARNING: All cluster clients must be shut down prior to the patch installation. Installing the patch while the clients are booted is unsupported and can lead to serious problems. The swcluster command will invoke an swinstall session in which you must specify: alternate root path - default is /export/shared_root/OS_700 source depot path - /tmp/PHSS_10875.depot To complete the installation, select the patch by choosing "Actions -> Match What Target Has" and then "Actions -> Install" from the Menubar. 5c. For a heterogeneous NFS Diskless cluster: - run swinstall on the server as in step 5a to install the patch on the cluster server. - run swcluster on the server as in step 5b to install the patch on the cluster clients. By default swinstall will archive the original software in /var/adm/sw/patch/PHSS_10875. If you do not wish to retain a copy of the original software, you can create an empty file named /var/adm/sw/patch/PATCH_NOSAVE. Warning: If this file exists when a patch is installed, the patch cannot be deinstalled. Please be careful when using this feature. It is recommended that you move the PHSS_10875.text file to /var/adm/sw/patch for future reference. To put this patch on a magnetic tape and install from the tape drive, use the command: dd if=/tmp/PHSS_10875.depot of=/dev/rmt/0m bs=2k Special Installation Instructions: Please note: The CDE environment must not be running when this patch is installed. If it is, you will receive warnings that text files are busy. SD will move these aside and place the new files in the appropriate location, but it is recomended that CDE first be shutdown prior to patch instalation. Requires the Periodic Patch PHSS_9803 to be installed first. Otherwise, you may receive warnings about unresolved external symbols.