 |
≫ |
|
|
|
パッチ名: PHNE_36260
パッチ摘要: s700_800 11.23 NIS/NIS+累積パッチ
作成日: 07/05/31
公開日: 07/06/08
ハードウェアプラットフォームおよびOSリリース:
s700: 11.23
s800: 11.23
現象:
PHNE_36260:
(SR:8606480402 CR:JAGag34511)
rpc.yppasswddの問題。
問題点の説明:
PHNE_36260:
(SR:8606480402 CR:JAGag34511)
rpc.yppasswddのコードに欠陥がありました。
解決方法:
rpc.yppasswddのコードを修正しました。
-----------------------------------------------------------------------------
Patch Name: PHNE_36260
Patch Description: s700_800 11.23 NIS/NIS+ cumulative patch
Creation Date: 07/05/31
Post Date: 07/06/08
Hardware Platforms - OS Releases:
s700: 11.23
s800: 11.23
Products:
NFS B.11.23;
Filesets:
NFS.NFS-ENG-A-MAN,fr=B.11.23,fa=HP-UX_B.11.23_IA/PA,v=HP
NFS.NISPLUS-CORE,fr=B.11.23,fa=HP-UX_B.11.23_IA/PA,v=HP
NFS.KEY-CORE,fr=B.11.23,fa=HP-UX_B.11.23_IA,v=HP
NFS.NFS-64SLIB,fr=B.11.23,fa=HP-UX_B.11.23_IA,v=HP
NFS.NIS2-CLIENT,fr=B.11.23,fa=HP-UX_B.11.23_IA,v=HP
NFS.NIS2-CORE,fr=B.11.23,fa=HP-UX_B.11.23_IA,v=HP
NFS.NIS2-SERVER,fr=B.11.23,fa=HP-UX_B.11.23_IA,v=HP
NFS.KEY-CORE,fr=B.11.23,fa=HP-UX_B.11.23_PA,v=HP
NFS.NFS-64SLIB,fr=B.11.23,fa=HP-UX_B.11.23_PA,v=HP
NFS.NIS2-CLIENT,fr=B.11.23,fa=HP-UX_B.11.23_PA,v=HP
NFS.NIS2-CORE,fr=B.11.23,fa=HP-UX_B.11.23_PA,v=HP
NFS.NIS2-SERVER,fr=B.11.23,fa=HP-UX_B.11.23_PA,v=HP
Automatic Reboot?: Yes
Status: General Release
Critical:
No (superseded patches were critical)
PHNE_35513: ABORT
PHNE_34757: ABORT
Category Tags:
defect_repair enhancement general_release critical
halts_system
Path Name: /hp-ux_patches/s700_800/11.X/PHNE_36260
Symptoms:
PHNE_36260:
( SR:8606480402 CR:JAGag34511 )
Problem with rpc.yppasswdd.
PHNE_35513:
( SR:8606450912 CR:JAGag07918 )
The "revnetgroup -u" command dumps core while processing an
/etc/netgroup file with large records.
( SR:8606461972 CR:JAGag17899 )
Some NIS daemons (ypbind, rpc.yppasswdd, and ypserv) cannot
create a logfile if the file name length exceeds 64
characters.
( SR:8606466173 CR:JAGag21697 )
Problem with udpublickey.
PHNE_34757:
( SR:8606414935 CR:JAGaf74793 )
The yppasswd command changes the permissions of the
/etc/passwd file.
( SR:8606429925 CR:JAGaf89391 )
After executing "/usr/lib/nis/nisclient -r" on a system that
had NIS+ configured, the nis_cachemgr process is left
running on the system.
( SR:8606435507 CR:JAGaf93935 )
The "ypinit -m" command fails and mkalias dumps core.
( SR:8606440810 CR:JAGaf98610 )
Incorrect permissions for logfiles.
PHNE_33103:
( SR:8606167807 CR:JAGad37090 )
The ypinit(1m) man page contains references to obsolete vhe
functions.
( SR:8606394223 CR:JAGaf54255 )
The "ypwhich -m" command returns the error message:
"ypwhich: can't get the list of maps: RPC: Unable to
receive; buffer not large enough".
( SR:8606402423 CR:JAGaf62358 )
This product update is required to pre-enable the adjustment
of a system configurable limit.
PHNE_32060:
( SR:8606385871 CR:JAGaf46025 )
This product update provides pre-enablement for future
expansion of the maximum length of the system nodename and
hostname. Any actual expansion capability may be provided in
a future HP-UX nodename and hostname expansion product. Upon
installation, the nodename and hostname expansion bundle
(NodeHostNameXpnd) will install the full set of product
updates (including this one) needed to enable the expansion.
If the nodename and hostname expansion bundle is not
installed, this product update will have no affect on your
system.
Defect Description:
PHNE_36260:
( SR:8606480402 CR:JAGag34511 )
The rpc.yppasswdd code does not function properly.
Resolution:
Modified the rpc.yppasswdd code to fix the problem.
PHNE_35513:
( SR:8606450912 CR:JAGag07918 )
The read buffer for the revnetgroup command is limited to
1024 characters. If a netgroup record contains more than
1024 characters this can cause revnetgroup to dump core.
Resolution:
Modified revnetgroup to discard any characters exceeding the
read buffer length.
( SR:8606461972 CR:JAGag17899 )
Buffer overflow occurs in some NIS daemons when the length
of the logfile name exceeds 64 characters. This causes the
creation of the logfile to fail.
Resolution:
Increased the size of the array that holds the logfile name
to the maximum path length. If the file name length exceeds
1023 characters, then the logfile name is truncated to 1023
characters.
( SR:8606466173 CR:JAGag21697 )
The udpublickey code does not function properly.
Resolution:
Modified the udpublickey code to fix the problem.
PHNE_34757:
( SR:8606414935 CR:JAGaf74793 )
When a password change is requested, rpc.yppasswdd creates a
new temporary file, changes the password for the user, and
then renames this temporary file as /etc/passwd. The
temporary file is opened with 0644 permissions so when a
rename is done the permissions of /etc/passwd become 0644.
Resolution:
Modified rpc.yppasswdd to maintain the permissions of the
/etc/passwd file when a password is changed.
( SR:8606429925 CR:JAGaf89391 )
The nisclient script truncates the process name to eight
characters before obtaining the process ID. Since the
nis_cachemgr process name is 12 characters long it was not
terminated.
Resolution:
Modified the nisclient script to expand the process name to
12 characters.
( SR:8606435507 CR:JAGaf93935 )
There is a missing parameter in a strncmp function call. If
there is a :include: directive in the mail.aliases map file,
the mkalias command dumps core while it is rebuilding the
file. This causes the "ypinit -m" command to fail.
Resolution:
Added the missing parameter to the strncmp function call.
( SR:8606440810 CR:JAGaf98610 )
The logfiles created by the ypbind, rpc.yppasswdd, and
ypserv daemons allow all users to write to the file.
Resolution:
Only allow the file owner to have write permission.
PHNE_33103:
( SR:8606167807 CR:JAGad37090 )
Some references to vhe functions were not removed when the
functions were obsoleted.
Resolution:
Removed all references to the vhe functions from the
ypinit(1m) man page.
( SR:8606394223 CR:JAGaf54255 )
The "ypwhich -m" command fails when the client is bound to
a Solaris NIS server. This is because the receiving buffer
is not large enough to handle the message returned by the
server if there is a large number of NIS maps. Also the
message returned by the HP-UX NIS server is not as large as
the message returned by the Solaris NIS server.
Resolution:
Increased the size of the message returned by the HP-UX NIS
server. The client part of this fix is included in
PHNE_33101.
( SR:8606402423 CR:JAGaf62358 )
This product update contains minor enhancements required to
pre-enable the adjustment of a system configurable limit.
Resolution:
NIS is enhanced to address the adjustment in the system
configurable limit.
PHNE_32060:
( SR:8606385871 CR:JAGaf46025 )
This product update contains some minor enhancements
required to pre-enable a future HP-UX nodename and hostname
expansion product bundle (NodeHostNameXpnd).
Resolution:
The yppoll command with the -h option now accepts hostnames
up to 255 characters.
Enhancement:
No (superseded patches contained enhancements)
PHNE_33103:
Pre-enablement of the adjustment of a system
configurable limit.
PHNE_32060:
Support added for future maximum length expansion of
nodename and hostname.
SR:
8606480402 8606450912 8606461972 8606466173 8606414935
8606429925 8606435507 8606440810 8606167807 8606394223
8606402423 8606385871
Patch Files:
NFS.NFS-ENG-A-MAN,fr=B.11.23,fa=HP-UX_B.11.23_IA/PA,v=HP:
/usr/share/man/man1m.Z/ypinit.1m
/usr/share/man/man4.Z/netgroup.4
NFS.NISPLUS-CORE,fr=B.11.23,fa=HP-UX_B.11.23_IA/PA,v=HP:
/usr/lib/nis/nisclient
NFS.KEY-CORE,fr=B.11.23,fa=HP-UX_B.11.23_IA,v=HP:
/usr/sbin/udpublickey
NFS.NFS-64SLIB,fr=B.11.23,fa=HP-UX_B.11.23_IA,v=HP:
/usr/lib/hpux64/libnss_compat.so.1
/usr/lib/pa20_64/libnss_compat.1
NFS.NIS2-CLIENT,fr=B.11.23,fa=HP-UX_B.11.23_IA,v=HP:
/usr/lib/netsvc/yp/ypbind
/usr/sbin/yppoll
NFS.NIS2-CORE,fr=B.11.23,fa=HP-UX_B.11.23_IA,v=HP:
/usr/lib/hpux32/libnss_compat.so.1
/usr/lib/libnss_compat.1
NFS.NIS2-SERVER,fr=B.11.23,fa=HP-UX_B.11.23_IA,v=HP:
/usr/sbin/mkalias
/usr/sbin/revnetgroup
/usr/lib/netsvc/yp/rpc.yppasswdd
/usr/lib/netsvc/yp/ypserv
NFS.KEY-CORE,fr=B.11.23,fa=HP-UX_B.11.23_PA,v=HP:
/usr/sbin/udpublickey
NFS.NFS-64SLIB,fr=B.11.23,fa=HP-UX_B.11.23_PA,v=HP:
/usr/lib/pa20_64/libnss_compat.1
NFS.NIS2-CLIENT,fr=B.11.23,fa=HP-UX_B.11.23_PA,v=HP:
/usr/lib/netsvc/yp/ypbind
/usr/sbin/yppoll
NFS.NIS2-CORE,fr=B.11.23,fa=HP-UX_B.11.23_PA,v=HP:
/usr/lib/libnss_compat.1
NFS.NIS2-SERVER,fr=B.11.23,fa=HP-UX_B.11.23_PA,v=HP:
/usr/sbin/mkalias
/usr/sbin/revnetgroup
/usr/lib/netsvc/yp/rpc.yppasswdd
/usr/lib/netsvc/yp/ypserv
what(1) Output:
NFS.NFS-ENG-A-MAN,fr=B.11.23,fa=HP-UX_B.11.23_IA/PA,v=HP:
/usr/share/man/man1m.Z/ypinit.1m:
None
/usr/share/man/man4.Z/netgroup.4:
None
NFS.NISPLUS-CORE,fr=B.11.23,fa=HP-UX_B.11.23_IA/PA,v=HP:
/usr/lib/nis/nisclient:
nisclient.sh $Date: 2006/06/29 14:01:53 $Revision: r
11.23/1 PATCH_11.23 (PHNE_34757)
NFS.KEY-CORE,fr=B.11.23,fa=HP-UX_B.11.23_IA,v=HP:
/usr/sbin/udpublickey:
udpublickey.c $Date: 2006/12/05 10:45:13 $Revision:
r11.23/1 PATCH_11.23 (PHNE_35513)
NFS.NFS-64SLIB,fr=B.11.23,fa=HP-UX_B.11.23_IA,v=HP:
/usr/lib/hpux64/libnss_compat.so.1:
compat_common.c $Date: 2005/07/15 11:07:59 $Revision
: r11.23/2 PATCH_11.23 (PHNE_33103)
/usr/lib/pa20_64/libnss_compat.1:
compat_common.c $Date: 2005/07/15 11:07:59 $Revision
: r11.23/2 PATCH_11.23 (PHNE_33103)
NFS.NIS2-CLIENT,fr=B.11.23,fa=HP-UX_B.11.23_IA,v=HP:
/usr/lib/netsvc/yp/ypbind:
ypbind.c $Date: 2006/12/01 12:38:26 $Revision: r11.2
3/4 PATCH_11.23 (PHNE_35513)
/usr/sbin/yppoll:
yppoll.c $Date: 2005/08/25 14:28:42 $Revision: r11.2
3/3 PATCH_11.23 (PHNE_33103)
NFS.NIS2-CORE,fr=B.11.23,fa=HP-UX_B.11.23_IA,v=HP:
/usr/lib/hpux32/libnss_compat.so.1:
compat_common.c $Date: 2005/07/15 11:07:59 $Revision
: r11.23/2 PATCH_11.23 (PHNE_33103)
/usr/lib/libnss_compat.1:
compat_common.c $Date: 2005/07/15 11:07:59 $Revision
: r11.23/2 PATCH_11.23 (PHNE_33103)
NFS.NIS2-SERVER,fr=B.11.23,fa=HP-UX_B.11.23_IA,v=HP:
/usr/sbin/mkalias:
mkalias.c $Date: 2006/08/14 11:08:26 $Revision: r11.
23/2 PATCH_11.23 (PHNE_34757)
/usr/sbin/revnetgroup:
util.c $Date: 2006/11/30 18:07:10 $Revision: r11.23/
1 PATCH_11.23 (PHNE_35513)
/usr/lib/netsvc/yp/rpc.yppasswdd:
rpc.ypassd.c $Date: 2007/04/10 12:47:48 $Revision: r
11.23/3 PATCH_11.23 (PHNE_36260)
/usr/lib/netsvc/yp/ypserv:
ypserv.c $Date: 2005/05/26 14:01:23 $Revision: r11.2
3/3 PATCH_11.23 (PHNE_33103)
ypserv_map.c $Date: 2004/08/05 12:59:26 $Revision: i
380/3 PATCH_11.23 (PHKL_31500)
ypserv_dbmtrak.c $Date: 2004/08/05 12:59:21 $Revisio
n: i380/3 PATCH_11.23 (PHKL_31500)
NFS.KEY-CORE,fr=B.11.23,fa=HP-UX_B.11.23_PA,v=HP:
/usr/sbin/udpublickey:
$Revision: 92453-07 linker linker crt0.o B.11.16.01
030415 $
udpublickey.c $Date: 2006/12/05 10:45:13 $Revision:
r11.23/1 PATCH_11.23 (PHNE_35513)
NFS.NFS-64SLIB,fr=B.11.23,fa=HP-UX_B.11.23_PA,v=HP:
/usr/lib/pa20_64/libnss_compat.1:
compat_common.c $Date: 2005/07/15 11:07:59 $Revision
: r11.23/2 PATCH_11.23 (PHNE_33103)
NFS.NIS2-CLIENT,fr=B.11.23,fa=HP-UX_B.11.23_PA,v=HP:
/usr/lib/netsvc/yp/ypbind:
$Revision: 92453-07 linker linker crt0.o B.11.16.01
030415 $
ypbind.c $Date: 2006/12/01 12:38:26 $Revision: r11.2
3/4 PATCH_11.23 (PHNE_35513)
/usr/sbin/yppoll:
$Revision: 92453-07 linker linker crt0.o B.11.16.01
030415 $
yppoll.c $Date: 2005/08/25 14:28:42 $Revision: r11.2
3/3 PATCH_11.23 (PHNE_33103)
NFS.NIS2-CORE,fr=B.11.23,fa=HP-UX_B.11.23_PA,v=HP:
/usr/lib/libnss_compat.1:
compat_common.c $Date: 2005/07/15 11:07:59 $Revision
: r11.23/2 PATCH_11.23 (PHNE_33103)
NFS.NIS2-SERVER,fr=B.11.23,fa=HP-UX_B.11.23_PA,v=HP:
/usr/sbin/mkalias:
$Revision: 92453-07 linker linker crt0.o B.11.16.01
030415 $
mkalias.c $Date: 2006/08/14 11:08:26 $Revision: r11.
23/2 PATCH_11.23 (PHNE_34757)
/usr/sbin/revnetgroup:
$Revision: 92453-07 linker linker crt0.o B.11.16.01
030415 $
util.c $Date: 2006/11/30 18:07:10 $Revision: r11.23/
1 PATCH_11.23 (PHNE_35513)
/usr/lib/netsvc/yp/rpc.yppasswdd:
$Revision: 92453-07 linker linker crt0.o B.11.16.01
030415 $
rpc.ypassd.c $Date: 2007/04/10 12:47:48 $Revision: r
11.23/3 PATCH_11.23 (PHNE_36260)
/usr/lib/netsvc/yp/ypserv:
$Revision: 92453-07 linker linker crt0.o B.11.16.01
030415 $
ypserv.c $Date: 2005/05/26 14:01:23 $Revision: r11.2
3/3 PATCH_11.23 (PHNE_33103)
ypserv_map.c $Date: 2004/08/05 12:59:26 $Revision: i
380/3 PATCH_11.23 (PHKL_31500)
ypserv_dbmtrak.c $Date: 2004/08/05 12:59:21 $Revisio
n: i380/3 PATCH_11.23 (PHKL_31500)
cksum(1) Output:
NFS.NFS-ENG-A-MAN,fr=B.11.23,fa=HP-UX_B.11.23_IA/PA,v=HP:
3521822284 2458 /usr/share/man/man1m.Z/ypinit.1m
2188141137 1640 /usr/share/man/man4.Z/netgroup.4
NFS.NISPLUS-CORE,fr=B.11.23,fa=HP-UX_B.11.23_IA/PA,v=HP:
3415573751 32619 /usr/lib/nis/nisclient
NFS.KEY-CORE,fr=B.11.23,fa=HP-UX_B.11.23_IA,v=HP:
155539014 18692 /usr/sbin/udpublickey
NFS.NFS-64SLIB,fr=B.11.23,fa=HP-UX_B.11.23_IA,v=HP:
2630362149 67664 /usr/lib/hpux64/libnss_compat.so.1
334467041 27280 /usr/lib/pa20_64/libnss_compat.1
NFS.NIS2-CLIENT,fr=B.11.23,fa=HP-UX_B.11.23_IA,v=HP:
3247426875 91724 /usr/lib/netsvc/yp/ypbind
3120017338 31772 /usr/sbin/yppoll
NFS.NIS2-CORE,fr=B.11.23,fa=HP-UX_B.11.23_IA,v=HP:
1714317563 60480 /usr/lib/hpux32/libnss_compat.so.1
1716208734 28672 /usr/lib/libnss_compat.1
NFS.NIS2-SERVER,fr=B.11.23,fa=HP-UX_B.11.23_IA,v=HP:
2608886095 27908 /usr/sbin/mkalias
3715608235 38004 /usr/sbin/revnetgroup
505677885 65020 /usr/lib/netsvc/yp/rpc.yppasswdd
1472984485 178484 /usr/lib/netsvc/yp/ypserv
NFS.KEY-CORE,fr=B.11.23,fa=HP-UX_B.11.23_PA,v=HP:
3412619294 28672 /usr/sbin/udpublickey
NFS.NFS-64SLIB,fr=B.11.23,fa=HP-UX_B.11.23_PA,v=HP:
334467041 27280 /usr/lib/pa20_64/libnss_compat.1
NFS.NIS2-CLIENT,fr=B.11.23,fa=HP-UX_B.11.23_PA,v=HP:
1143662967 57344 /usr/lib/netsvc/yp/ypbind
2403023562 32768 /usr/sbin/yppoll
NFS.NIS2-CORE,fr=B.11.23,fa=HP-UX_B.11.23_PA,v=HP:
1716208734 28672 /usr/lib/libnss_compat.1
NFS.NIS2-SERVER,fr=B.11.23,fa=HP-UX_B.11.23_PA,v=HP:
2028880443 28672 /usr/sbin/mkalias
2061727290 32768 /usr/sbin/revnetgroup
330209949 45056 /usr/lib/netsvc/yp/rpc.yppasswdd
2421959684 94208 /usr/lib/netsvc/yp/ypserv
Patch Conflicts: None
Patch Dependencies:
s700: 11.23: PHKL_31500 PHNE_33101
s800: 11.23: PHKL_31500 PHNE_33101
Hardware Dependencies: None
Other Dependencies: None
Supersedes:
PHNE_35513 PHNE_34757 PHNE_33103 PHNE_32060
Equivalent Patches: None
Patch Package Size: 510 KBytes
Installation Instructions:
Please review all instructions and the Hewlett-Packard
SupportLine User Guide or your Hewlett-Packard support terms
and conditions for precautions, scope of license,
restrictions, and, limitation of liability and warranties,
before installing this patch.
------------------------------------------------------------
1. Back up your system before installing a patch.
2. Login as root.
3. Copy the patch to the /tmp directory.
4. Move to the /tmp directory and unshar the patch:
cd /tmp
sh PHNE_36260
5. Run swinstall to install the patch:
swinstall -x autoreboot=true -x patch_match_target=true \
-s /tmp/PHNE_36260.depot
By default swinstall will archive the original software in
/var/adm/sw/save/PHNE_36260. If you do not wish to retain a
copy of the original software, include the patch_save_files
option in the swinstall command above:
-x patch_save_files=false
WARNING: If patch_save_files is false when a patch is installed,
the patch cannot be deinstalled. Please be careful
when using this feature.
For future reference, the contents of the PHNE_36260.text file is
available in the product readme:
swlist -l product -a readme -d @ /tmp/PHNE_36260.depot
To put this patch on a magnetic tape and install from the
tape drive, use the command:
dd if=/tmp/PHNE_36260.depot of=/dev/rmt/0m bs=2k
Special Installation Instructions: None
|
