Patch Name: PHCO_8133 Patch Description: s700_800 10.20 SAM cumulative patch Creation Date: 96/12/09 Post Date: 96/12/27 Repost: 97/02/14 The patch documentation was modified to reference an additional Service Request, SR 4701334763. The files included in the patch were not modified. Hardware Platforms - OS Releases: s700: 10.20 s800: 10.20 Products: N/A Filesets: SystemAdmin.SAM SystemAdmin.SAM-HELP Automatic Reboot?: No Status: General Superseded Critical: No Path Name: /hp-ux_patches/s700_800/10.X/PHCO_8133 Symptoms: PHCO_8133: - Certain parts of the Auditing and Security area are not 2000-safe. - The SAM Functional Area Launcher does not properly display icons when in non-C locale. - An attempt to disable access for the user 'nobody' doesn't result in the expected changes to /etc/exports. - Under Networking and Communications->NIS->Actions->Modify, the "If Server Unavailable" box always comes up with the "Wait for NIS Server" button activated even though the /etc/rc.config.d/namesvrs file has the environment variable WAIT_FOR_NIS_SERVER set to FALSE. The "Boot Without NIS" button should be highlighted instead. - Restricted SAM user can change root's password. - When adding a terminal to an eisa mux, SAM calls mksf with improper arguments, causing mksf to fail. - When adding a remote printer, SAM replaces an alias entered for the remote system with the system's fully-qualified domain name. - New lan cards btlan3, btlan4, btlan5 are not supported. PHCO_7814: - Driver spt0 is not supported. The kernel config area of SAM needs to recognize the spt0 driver for NIO SCSI pass-through. - SAM tries to add floppy device files as LVM alternate links for non-floppy devices on s800. - rmterm.sh sets permissions on /etc/inittab improperly. - Authorized login times strings can cause data corruption on a trusted system. - SAM can hang when a user is removed from a trusted system. - When large portions of a cluster are down, cluster-wide tasks fail and take forever. Samagent hangs. - SAM does not detect printers that are already setup. - SAM reports the rebuild priority of an Edison array incorrectly. - The password for user sam_exec (used for remote SAM admin) can be discovered by unscrupulous users. - Binding RAID LUNs fail. - Regular expression handling is broken in all but the C locale. - When running in a non-C locale and something was input into a field that used the '|' symbol in the format, the standard format error is displayed, even if the entered data is valid. - /usr/sam/lbin/dns_make_cache relies on /bin -> /usr/bin transition link. - NTP server configuration ignores aliases. - Support for GSC 100 Base TX & GSC 100 Base T4 is not available. - ioparser.sh fix. - SAM has problems adding certain printers because it calls mksf ambiguously. - The functional area launcher doesn't set localization properly for the functional areas. - When adding a remote printer, SAM expands remote hostname to a fully-qualified domain name which- causes problems. - SAM FAL does not properly display icons when in non-C locale. - When building NIS maps, SAM terminates. - An attempt to disable access for the user 'nobody' doesn't result in the expected changes to /etc/exports. - SAM doesn't parse quoted NIS_DOMAIN entries in /etc/rc.config.d/namesvrs properly. - Logging of customized tasks overwrite the same log file. - Temporary files are written to a public-writable directory. PHCO_7672: SAM coredumps when the SNA area of SAM is entered. Defect Description: PHCO_8133: - Various coding errors. - New lan cards btlan3, btlan4, btlan5 were added since the previous patch. PHCO_7814: - Support for the spt0 driver was inadvertently left out. - SAM was using all the device files it found as alternate paths to a device. - On a trusted system, the UG area of SAM allows you to specify a sequence of days and times when the user is allowed to log in to the system. This sequence of days and times is encoded and passed as a parameter to the to the modprpw command. Only 50 characters have been allocated to store this string by the modprpw command but the command does not check to make sure the parameter passed in is valid. Passing a string longer than 50 characters can result in data corruption. It is possible to select days and times in SAM (e.g. if you select to allow logging in during a different time period on each of the seven days of the week) that create an encoded string of more than 50 characters. SAM should disallow any combination of days and times that results in a string over 50 characters. - When removing a user on a trusted system, SAM's upusrfiles command depended on the su command, which on a trusted system would ask for a password, causing SAM to hang. - The incorrect use of pthread_mutex_lock() in a signal handler caused a deadlock in a process. - SAM fails to initialize all variables and printers that for a new printer, causing lpadmin to return only some of the information on such printers. - The meaning of the rebuild priority on an Edison array was incorrectly understood. - The password field for sam_exec should be changed so it is not possible to log in as sam_exec. - In 10.20, the option of binding a Raid3 LUN was removed from the menu because Raid3 is unsupported. Not all remnants of Raid3 code were removed. There existed an enumerated type which contained a RAID3 value. This caused all options which followed it to be off by one. This is a problem for binding LUN's and associated error reporting. - The significance of the '|' symbol in non-C locales was overlooked. - A dependence on transition links was remained in the code. - Qualifying domain names interfered with the use of aliases. - Support for GSC 100 Base TX & GSC 100 Base T4 was added after the 10.20 release. - When building NIS maps, a SIGTERM is normally produced, causing SAM to terminate. This was fixed by adding SIGTERM to a list of signals that are ignored while commands are executing. - Customized task history is lost when the log file is overwritten. PHCO_7672: The calling convention of one of SAM's partner APIs was not fully tested. When called in a certain manner, SAM coredumps. SR: 5003310169 5003337071 5000716050 4701334763 Patch Files: /usr/newconfig/etc/sam/reg_da.db /usr/newconfig/etc/sam/reg_files.db /usr/newconfig/etc/sam/reg_tm.db /usr/sam/bin/cladd /usr/sam/bin/reconcile /usr/sam/bin/samlog_viewer /usr/sam/help/C/lp/lp.hv /usr/sam/help/C/lp/lp.hvk /usr/sam/help/C/lp/lp00.ht /usr/sam/help/C/lp/lp01.ht /usr/sam/lbin/autoopt /usr/sam/lbin/chuidacl /usr/sam/lbin/dareg /usr/sam/lbin/dmconnect /usr/sam/lbin/dns_make_cache /usr/sam/lbin/get_gr_mems /usr/sam/lbin/get_ttydevs /usr/sam/lbin/inittab /usr/sam/lbin/ioparser.sh /usr/sam/lbin/ipconn_load /usr/sam/lbin/laninfo /usr/sam/lbin/lpmgr /usr/sam/lbin/parse_dgconf /usr/sam/lbin/pd_ups_parse /usr/sam/lbin/rmterm.sh /usr/sam/lbin/samagent /usr/sam/lbin/samx /usr/sam/lbin/task_customize /usr/sam/lbin/tmgrx /usr/sam/lbin/tmreg /usr/sam/lbin/ug_area_vis /usr/sam/lbin/upgrpfiles /usr/sam/lbin/upusrfiles /usr/sam/lib/C/fal.ui /usr/sam/lib/C/fal_custom.ui /usr/sam/lib/C/fs.cat /usr/sam/lib/C/sam.lp.cat /usr/sam/lib/C/ts.ui /usr/sam/lib/C/ug.cat /usr/sam/lib/C/ug.ui /usr/sam/lib/C/ug.ut.ui /usr/sam/lib/diskless_def /usr/sam/lib/fal/fal.sl /usr/sam/lib/fs/fs.sl /usr/sam/lib/fs/fs_com.sl /usr/sam/lib/kc/drivers.tx /usr/sam/lib/libdb.sl /usr/sam/lib/libdm.sl /usr/sam/lib/libdmtask.sl /usr/sam/lib/librx.sl /usr/sam/lib/libsam.sl /usr/sam/lib/lp/lp.sl /usr/sam/lib/lp/lp.tm /usr/sam/lib/nnc/nnc.sl /usr/sam/lib/ra/ra.sl /usr/sam/lib/ts/ts.sl /usr/sam/lib/ug/ug.sl /usr/sam/lib/ug/ug.tm /usr/sam/lib/ug/ug_comlib.sl /usr/sam/lib/tm/tm_comlib.sl what(1) Output: /usr/newconfig/etc/sam/reg_da.db: None /usr/newconfig/etc/sam/reg_files.db: $Header: fs.tm,v 72.167 96/04/29 17:50:26 hmgr Exp $ $Revision: 72.10 $ /usr/newconfig/etc/sam/reg_tm.db: None /usr/sam/bin/cladd: $Revision: 72.38.1.1 $ /usr/sam/bin/reconcile: reconcile $Revision: 72.11 $ SAM Infrastructure Version 2.0 /usr/sam/bin/samlog_viewer: samlog_viewer $Revision: 72.22 $ SAM Infrastructure Version 2.0 - 11/13/96 10:42:14 /usr/sam/help/C/lp/lp.hv: None /usr/sam/help/C/lp/lp.hvk: None /usr/sam/help/C/lp/lp00.ht: None /usr/sam/help/C/lp/lp01.ht: None /usr/sam/lbin/autoopt: $Revision: 72.24 $ SAM Infrastructure Version 2.0 - 11/13/96 10:42:14 SAM file editing library $Revision: 72.2 $ /usr/sam/lbin/chuidacl: $Revision: 72.2 $ SAM Infrastructure Version 2.0 - 11/13/96 10:42:14 /usr/sam/lbin/dareg: dareg $Revision: 72.6 $ SAM Infrastructure Version 2.0 - 11/13/96 10:42:14 /usr/sam/lbin/dmconnect: dmconnect $Revision: 72.6 $ SAM Infrastructure Version 2.0 /usr/sam/lbin/dns_make_cache: None /usr/sam/lbin/get_gr_mems: SAM Infrastructure Version 2.0 - 11/13/96 10:42:14 /usr/sam/lbin/get_ttydevs: None /usr/sam/lbin/inittab: $Revision: 72.12 $ SAM Infrastructure Version 2.0 - 11/13/96 10:42:14 /usr/sam/lbin/ioparser.sh: $Header: ioparser.sh,v 72.54 96/09/24 15:42:10 hmgr Exp $ /usr/sam/lbin/ipconn_load: SAM - NNC ipconn_load $Revision: 72.2 $ SAM file editing library $Revision: 72.2 $ SAM Infrastructure Version 2.0 - 11/13/96 10:42:14 /usr/sam/lbin/laninfo: $Revision: 72.20.1.2 $ /usr/sam/lbin/lpmgr: $Header: lpmgr,v 72.30.1.1 96/11/08 13:23:06 hmgr Ex p $ /usr/sam/lbin/parse_dgconf: None /usr/sam/lbin/pd_ups_parse: SAM Infrastructure Version 2.0 - 11/13/96 10:42:14 /usr/sam/lbin/rmterm.sh: $Revision: 72.18 $ /usr/sam/lbin/samagent: SAM Infrastructure Version 2.0 - 11/13/96 10:42:14 SAM file editing library $Revision: 72.2 $ /usr/sam/lbin/samx: SAM Infrastructure Version 2.0 - 11/13/96 10:42:14 SAM file editing library $Revision: 72.2 $ /usr/sam/lbin/task_customize: task_customize $Revision: 72.11 $ SAM Infrastructure Version 2.0 /usr/sam/lbin/tmgrx: tmgrx: $Revision: 72.16 $ $Date: 96/03/08 15:26:38 $ SAM Infrastructure Version 2.0 - 11/13/96 10:42:14 SAM file editing library $Revision: 72.2 $ HP C++ HPCPLUSPLUS A.10.08 /usr/sam/lbin/tmreg: tmreg $Revision: 72.12 $ SAM Infrastructure Version 2.0 - 11/13/96 10:42:14 /usr/sam/lbin/ug_area_vis: ug_area_vis $Revision: 72.1 $ /usr/sam/lbin/upgrpfiles: $Revision: 72.8 $ SAM Infrastructure Version 2.0 - 11/13/96 10:42:14 /usr/sam/lbin/upusrfiles: $Revision: 72.16 $ SAM Infrastructure Version 2.0 - 11/13/96 10:42:14 /usr/sam/lib/C/fal.ui: None /usr/sam/lib/C/fal_custom.ui: None /usr/sam/lib/C/fs.cat: None /usr/sam/lib/C/sam.lp.cat: None /usr/sam/lib/C/ts.ui: None /usr/sam/lib/C/ug.cat: None /usr/sam/lib/C/ug.ui: $Revision: 72.118.1.1 $ */ /usr/sam/lib/C/ug.ut.ui: $Revision: 72.22.1.1 $ */ /usr/sam/lib/diskless_def: $Revision: 72.14.1.1 $ /usr/sam/lib/fal/fal.sl: None /usr/sam/lib/fs/fs.sl: None /usr/sam/lib/fs/fs_com.sl: None /usr/sam/lib/kc/drivers.tx: $Header: drivers700.tx,v 72.38 96/05/31 10:02:02 hmg r Exp $ /usr/sam/lib/libdb.sl: SAM Infrastructure Version 2.0 - 11/13/96 10:42:14 /usr/sam/lib/libdm.sl: SAM Infrastructure Version 2.0 - 11/13/96 10:42:14 /usr/sam/lib/libdmtask.sl: SAM Infrastructure Version 2.0 - 11/13/96 10:42:14 /usr/sam/lib/librx.sl: SAM Infrastructure Version 2.0 - 11/13/96 10:42:14 /usr/sam/lib/libsam.sl: SAM Infrastructure Version 2.0 - 11/13/96 10:42:14 SAM Infrastructure Version 2.0 - 11/13/96 10:42:14 /usr/sam/lib/lp/lp.sl: None /usr/sam/lib/lp/lp.tm: $Header: lp_defs.h,v 72.88.1.1 96/11/08 13:22:49 hmg r Exp $ */ $Header: lp_err.h,v 72.21 95/08/28 15:28:49 hmgr Exp $ */ $Header: ar_errors.h,v 72.1 94/01/13 16:44:03 hmgr E xp $ */ /usr/sam/lib/nnc/nnc.sl: SAM - NNC $Revision: 72.2 $ /usr/sam/lib/ra/ra.sl: None /usr/sam/lib/ts/ts.sl: None /usr/sam/lib/ug/ug.sl: None /usr/sam/lib/ug/ug.tm: $Header: ug_errmsg.h,v 72.124.1.2 96/06/25 18:11:26 hmgr Exp $*/ $Header: ug_errors.h,v 72.36 96/04/12 15:41:30 hmgr Exp $ */ /usr/sam/lib/ug/ug_comlib.sl: None /usr/sam/lib/tm/tm_comlib.sl: None cksum(1) Output: 445441021 2081 /usr/newconfig/etc/sam/reg_da.db 180280816 5904 /usr/newconfig/etc/sam/reg_files.db 3482137229 27352 /usr/newconfig/etc/sam/reg_tm.db 1077025236 45691 /usr/sam/bin/cladd 1474737521 2259 /usr/sam/bin/reconcile 2240953405 53248 /usr/sam/bin/samlog_viewer 972836522 24332 /usr/sam/help/C/lp/lp.hv 1562564889 38 /usr/sam/help/C/lp/lp.hvk 514285952 112442 /usr/sam/help/C/lp/lp00.ht 1768625723 4331 /usr/sam/help/C/lp/lp01.ht 1492001147 90112 /usr/sam/lbin/autoopt 2444468413 24576 /usr/sam/lbin/chuidacl 588380770 163840 /usr/sam/lbin/dareg 1547926944 7973 /usr/sam/lbin/dmconnect 1274905607 874 /usr/sam/lbin/dns_make_cache 2842679758 32768 /usr/sam/lbin/get_gr_mems 287833800 16384 /usr/sam/lbin/get_ttydevs 3458664089 24576 /usr/sam/lbin/inittab 3591505835 24173 /usr/sam/lbin/ioparser.sh 2704715252 36864 /usr/sam/lbin/ipconn_load 957756256 20480 /usr/sam/lbin/laninfo 2441629932 145789 /usr/sam/lbin/lpmgr 2615865834 16384 /usr/sam/lbin/parse_dgconf 2633488195 32768 /usr/sam/lbin/pd_ups_parse 3735928256 2684 /usr/sam/lbin/rmterm.sh 2753041787 274432 /usr/sam/lbin/samagent 506869179 262144 /usr/sam/lbin/samx 3664018817 5813 /usr/sam/lbin/task_customize 3742846490 270336 /usr/sam/lbin/tmgrx 3937254551 126976 /usr/sam/lbin/tmreg 3071242336 200704 /usr/sam/lbin/ug_area_vis 863328356 40960 /usr/sam/lbin/upgrpfiles 830808594 40960 /usr/sam/lbin/upusrfiles 2666085236 15944 /usr/sam/lib/C/fal.ui 2187432205 25112 /usr/sam/lib/C/fal_custom.ui 2314124984 101514 /usr/sam/lib/C/fs.cat 1764148603 24930 /usr/sam/lib/C/sam.lp.cat 2179627128 35932 /usr/sam/lib/C/ts.ui 2214875735 57185 /usr/sam/lib/C/ug.cat 2785849961 76094 /usr/sam/lib/C/ug.ui 1773413985 102316 /usr/sam/lib/C/ug.ut.ui 1664579683 1232 /usr/sam/lib/diskless_def 551056867 151552 /usr/sam/lib/fal/fal.sl 3735340643 692224 /usr/sam/lib/fs/fs.sl 1785505346 389120 /usr/sam/lib/fs/fs_com.sl 2283286130 13046 /usr/sam/lib/kc/drivers.tx 3432066404 53248 /usr/sam/lib/libdb.sl 3513446225 24576 /usr/sam/lib/libdm.sl 3001183730 20480 /usr/sam/lib/libdmtask.sl 109775064 69632 /usr/sam/lib/librx.sl 2229336000 286720 /usr/sam/lib/libsam.sl 1049248360 163840 /usr/sam/lib/lp/lp.sl 1444780239 77979 /usr/sam/lib/lp/lp.tm 2198513289 720896 /usr/sam/lib/nnc/nnc.sl 1900856199 28672 /usr/sam/lib/ra/ra.sl 3839062045 122880 /usr/sam/lib/ts/ts.sl 25958552 479232 /usr/sam/lib/ug/ug.sl 1408788614 144453 /usr/sam/lib/ug/ug.tm 3821054603 81920 /usr/sam/lib/ug/ug_comlib.sl 2865389542 81920 /usr/sam/lib/tm/tm_comlib.sl Patch Conflicts: None Patch Dependencies: None Hardware Dependencies: None Other Dependencies: Since this is a SAM patch, filesets SystemAdmin.SAM and SystemAdmin.SAM-HELP should already exist on the system. ('swlist -l fileset SystemAdmin' will tell you this.) Supersedes: PHCO_7672 PHCO_7814 Equivalent Patches: None Patch Package Size: 6160 Kbytes Installation Instructions: Please review all instructions and the Hewlett-Packard SupportLine User Guide or your Hewlett-Packard support terms and conditions for precautions, scope of license, restrictions, and, limitation of liability and warranties, before installing this patch. ------------------------------------------------------------ 1. Back up your system before installing a patch. 2. Login as root. 3. Copy the patch to the /tmp directory. 4. Move to the /tmp directory and unshar the patch: cd /tmp sh PHCO_8133 5a. For a standalone system, run swinstall to install the patch: swinstall -x autoreboot=true -x match_target=true \ -s /tmp/PHCO_8133.depot 5b. For a homogeneous NFS Diskless cluster run swcluster on the server to install the patch on the server and the clients: swcluster -i -b This will invoke swcluster in the interactive mode and force all clients to be shut down. WARNING: All cluster clients must be shut down prior to the patch installation. Installing the patch while the clients are booted is unsupported and can lead to serious problems. The swcluster command will invoke an swinstall session in which you must specify: alternate root path - default is /export/shared_root/OS_700 source depot path - /tmp/PHCO_8133.depot To complete the installation, select the patch by choosing "Actions -> Match What Target Has" and then "Actions -> Install" from the Menubar. 5c. For a heterogeneous NFS Diskless cluster: - run swinstall on the server as in step 5a to install the patch on the cluster server. - run swcluster on the server as in step 5b to install the patch on the cluster clients. By default swinstall will archive the original software in /var/adm/sw/patch/PHCO_8133. If you do not wish to retain a copy of the original software, you can create an empty file named /var/adm/sw/patch/PATCH_NOSAVE. Warning: If this file exists when a patch is installed, the patch cannot be deinstalled. Please be careful when using this feature. It is recommended that you move the PHCO_8133.text file to /var/adm/sw/patch for future reference. To put this patch on a magnetic tape and install from the tape drive, use the command: dd if=/tmp/PHCO_8133.depot of=/dev/rmt/0m bs=2k Special Installation Instructions: Make sure SAM is not running before installing this patch.