Patch Name: PHSS_12114 Patch Description: s700_800 10.20 Authorization Server A.02.10 patch bundle #1 Creation Date: 97/09/23 Post Date: 97/09/29 Hardware Platforms - OS Releases: s700: 10.20 s800: 10.20 Products: Authorization Server A.02.10 Filesets: PrAS-AuthServer.ASSVR-RUN,A.02.10 PrAS-Core.ASCO-ENG-A-MAN,A.02.10 PrAS-Core.ASCORE-RUN,A.02.10 Automatic Reboot?: No Status: General Superseded Critical: Yes PHSS_12114: CORRUPTION OTHER Refer to SR# 4701367409 Path Name: /hp-ux_patches/s700_800/10.X/PHSS_12114 Symptoms: PHSS_12114: 1. This problem is in bulding an entitlement. When you have two attributes where one attribute name is a subset of another attribute name, like account and account_type. In some cases, when you select account in the rule building screen, the name account_type may end up in the rule. 2. Commands authu_batch or authu will refuse to accept several classes of valid input. Also start and stop times are altered (except for ODSS_START and ODSS_END). Defect Description: PHSS_12114: 1. Defect description for SR # 4701364745 The wrong transaction attribute is sometimes selected in the java code while building a rule. 2. Defect description for SR # 4701367409 Several defects in processing of input have been fixed. Start and stop times are not converted to UTC on input, however they are the UTC to local time conversion is applied when displaying start and stop times. The special times, ODSS_START and ODSS_END are not affected. SR: 4701364745 4701367409 Patch Files: /opt/odss/bin/authu_batch /opt/odss/bin/authu_maint /opt/odss/bin/odss_rep_admin /opt/odss/gui/odss/cgi-bin/odss_admin_gui.cgi /opt/odss/gui/odss/html/java/Attribute.class /opt/odss/gui/odss/html/java/AttributeArray.class /opt/odss/gui/odss/html/java/CGIAccess.class /opt/odss/gui/odss/html/java/ComplexRule.class /opt/odss/gui/odss/html/java/ Convert_Entitlement_to_CGI.class /opt/odss/gui/odss/html/java/DefValue.class /opt/odss/gui/odss/html/java/DefineAttributesDialog.class /opt/odss/gui/odss/html/java/DefinePrivilegesDialog.class /opt/odss/gui/odss/html/java/DefineRulesDialog.class /opt/odss/gui/odss/html/java/DialogCallable.class /opt/odss/gui/odss/html/java/Entitlement.class /opt/odss/gui/odss/html/java/Error_Object.class /opt/odss/gui/odss/html/java/MessageBox.class /opt/odss/gui/odss/html/java/Odss_Admin.class /opt/odss/gui/odss/html/java/PrivAttribute.class /opt/odss/gui/odss/html/java/Rule.class /opt/odss/gui/odss/html/java/ScrollablePanel.class /opt/odss/gui/odss/html/java/ScrollingWindow.class /opt/odss/gui/odss/html/java/SimpleRule.class /opt/odss/lbin/authu /opt/odss/lbin/odss_conf_maint /opt/odss/lbin/rep_create_db /opt/odss/lib/libauthl.sl /opt/odss/share/man/man3.Z/odss_authz_eval.3 /opt/odss/share/man/man3.Z/odss_inq_entitlements.3 what(1) Output: /opt/odss/bin/authu_batch: HP92453-02A.10.00 HP-UX SYMBOLIC DEBUGGER (END.O) $R evision: 74.03 $ HP PRAESIDIUM/AS version A.02.10 (PHSS_12114) Thu Sep 11 13:51:19 PDT 1997 /opt/odss/bin/authu_maint: HP92453-02A.10.00 HP-UX SYMBOLIC DEBUGGER (END.O) $R evision: 74.03 $ HP PRAESIDIUM/AS version A.02.10 (PHSS_12114) Thu Sep 11 13:51:19 PDT 1997 /opt/odss/bin/odss_rep_admin: HP92453-02A.10.00 HP-UX SYMBOLIC DEBUGGER (END.O) $R evision: 74.03 $ /opt/odss/gui/odss/cgi-bin/odss_admin_gui.cgi: HP92453-02A.10.00 HP-UX SYMBOLIC DEBUGGER (END.O) $R evision: 74.03 $ HP PRAESIDIUM/AS version A.02.10 (PHSS_12114) Thu Sep 11 13:51:19 PDT 1997 /opt/odss/gui/odss/html/java/Attribute.class: None /opt/odss/gui/odss/html/java/AttributeArray.class: None /opt/odss/gui/odss/html/java/CGIAccess.class: None /opt/odss/gui/odss/html/java/ComplexRule.class: None /opt/odss/gui/odss/html/java/ Convert_Entitlement_to_CGI.class: None /opt/odss/gui/odss/html/java/DefValue.class: None /opt/odss/gui/odss/html/java/DefineAttributesDialog.class: None /opt/odss/gui/odss/html/java/DefinePrivilegesDialog.class: None /opt/odss/gui/odss/html/java/DefineRulesDialog.class: None /opt/odss/gui/odss/html/java/DialogCallable.class: None /opt/odss/gui/odss/html/java/Entitlement.class: None /opt/odss/gui/odss/html/java/Error_Object.class: None /opt/odss/gui/odss/html/java/MessageBox.class: None /opt/odss/gui/odss/html/java/Odss_Admin.class: None /opt/odss/gui/odss/html/java/PrivAttribute.class: None /opt/odss/gui/odss/html/java/Rule.class: None /opt/odss/gui/odss/html/java/ScrollablePanel.class: None /opt/odss/gui/odss/html/java/ScrollingWindow.class: None /opt/odss/gui/odss/html/java/SimpleRule.class: None /opt/odss/lbin/authu: HP92453-02A.10.00 HP-UX SYMBOLIC DEBUGGER (END.O) $R evision: 74.03 $ $Header: sec_info.c,v 0.5 93/12/29 17:00:13 dibl Exp $ HP PRAESIDIUM/AS version A.02.10 (PHSS_12114) Thu Sep 11 13:51:19 PDT 1997 /opt/odss/lbin/odss_conf_maint: HP92453-02A.10.00 HP-UX SYMBOLIC DEBUGGER (END.O) $R evision: 74.03 $ /opt/odss/lbin/rep_create_db: HP92453-02A.10.00 HP-UX SYMBOLIC DEBUGGER (END.O) $R evision: 74.03 $ /opt/odss/lib/libauthl.sl: None /opt/odss/share/man/man3.Z/odss_authz_eval.3: None /opt/odss/share/man/man3.Z/odss_inq_entitlements.3: None cksum(1) Output: 2873905767 1048760 /opt/odss/bin/authu_batch 1436771316 918188 /opt/odss/bin/authu_maint 4255371781 598436 /opt/odss/bin/odss_rep_admin 4260005438 1267908 /opt/odss/gui/odss/cgi-bin/ odss_admin_gui.cgi 174651036 2431 /opt/odss/gui/odss/html/java/Attribute.class 4185431898 4350 /opt/odss/gui/odss/html/java/ AttributeArray.class 3440771094 3245 /opt/odss/gui/odss/html/java/CGIAccess.class 951421356 3359 /opt/odss/gui/odss/html/java/ ComplexRule.class 1748209309 3443 /opt/odss/gui/odss/html/java/ Convert_Entitlement_to_CGI.class 1867253611 2120 /opt/odss/gui/odss/html/java/DefValue.class 1599238589 13694 /opt/odss/gui/odss/html/java/ DefineAttributesDialog.class 2890986955 12609 /opt/odss/gui/odss/html/java/ DefinePrivilegesDialog.class 3279639769 14142 /opt/odss/gui/odss/html/java/ DefineRulesDialog.class 4154556850 255 /opt/odss/gui/odss/html/java/ DialogCallable.class 1343167941 1678 /opt/odss/gui/odss/html/java/ Entitlement.class 3886051204 587 /opt/odss/gui/odss/html/java/ Error_Object.class 4203031582 2403 /opt/odss/gui/odss/html/java/ MessageBox.class 1379141951 12768 /opt/odss/gui/odss/html/java/ Odss_Admin.class 499868259 3481 /opt/odss/gui/odss/html/java/ PrivAttribute.class 755961309 5150 /opt/odss/gui/odss/html/java/Rule.class 245452057 660 /opt/odss/gui/odss/html/java/ ScrollablePanel.class 3923353543 2102 /opt/odss/gui/odss/html/java/ ScrollingWindow.class 2100342132 4248 /opt/odss/gui/odss/html/java/ SimpleRule.class 1997431590 7021268 /opt/odss/lbin/authu 699401617 123376 /opt/odss/lbin/odss_conf_maint 2539905241 2735428 /opt/odss/lbin/rep_create_db 1114159986 983948 /opt/odss/lib/libauthl.sl 924738840 2917 /opt/odss/share/man/man3.Z/odss_authz_eval.3 3533456949 3352 /opt/odss/share/man/man3.Z/ odss_inq_entitlements.3 Patch Conflicts: None Patch Dependencies: None Hardware Dependencies: None Other Dependencies: None Supersedes: None Equivalent Patches: None Patch Package Size: 14540 KBytes Installation Instructions: Please review all instructions and the Hewlett-Packard SupportLine User Guide or your Hewlett-Packard support terms and conditions for precautions, scope of license, restrictions, and, limitation of liability and warranties, before installing this patch. ------------------------------------------------------------ 1. Back up your system before installing a patch. 2. Login as root. 3. Copy the patch to the /tmp directory. 4. Move to the /tmp directory and unshar the patch: cd /tmp sh PHSS_12114 5a. For a standalone system, run swinstall to install the patch: swinstall -x autoreboot=true -x match_target=true \ -s /tmp/PHSS_12114.depot 5b. For a homogeneous NFS Diskless cluster run swcluster on the server to install the patch on the server and the clients: swcluster -i -b This will invoke swcluster in the interactive mode and force all clients to be shut down. WARNING: All cluster clients must be shut down prior to the patch installation. Installing the patch while the clients are booted is unsupported and can lead to serious problems. The swcluster command will invoke an swinstall session in which you must specify: alternate root path - default is /export/shared_root/OS_700 source depot path - /tmp/PHSS_12114.depot To complete the installation, select the patch by choosing "Actions -> Match What Target Has" and then "Actions -> Install" from the Menubar. 5c. For a heterogeneous NFS Diskless cluster: - run swinstall on the server as in step 5a to install the patch on the cluster server. - run swcluster on the server as in step 5b to install the patch on the cluster clients. By default swinstall will archive the original software in /var/adm/sw/patch/PHSS_12114. If you do not wish to retain a copy of the original software, you can create an empty file named /var/adm/sw/patch/PATCH_NOSAVE. Warning: If this file exists when a patch is installed, the patch cannot be deinstalled. Please be careful when using this feature. It is recommended that you move the PHSS_12114.text file to /var/adm/sw/patch for future reference. To put this patch on a magnetic tape and install from the tape drive, use the command: dd if=/tmp/PHSS_12114.depot of=/dev/rmt/0m bs=2k Special Installation Instructions: If the Authorization Server Engine servers are running, they must be shut down before this patch is installed. The following command will show the servers if they are running: ps -ef | grep auth If the servers are running, execute the following command (as root) to shut them down: ODSS_authz_shutdown You may now install the patch as described above.