Patch Name: PHNE_17384

Patch Description: s700_800 10.26 NIS and Audit fixes

Creation Date: 99/01/15

Post Date:  99/01/19

Hardware Platforms - OS Releases:
	s700: 10.26
	s800: 10.26

Products: N/A

Filesets:
	BLS.BLS-CORE NFS.NFS-CLIENT NFS.NIS-CLIENT NFS.NIS-SERVER

Automatic Reboot?: No

Status: General Superseded

Critical: No

Path Name: /hp-ux_patches/s700_800/10.X/PHNE_17384

Symptoms:
	PHNE_17384:

	1. Audit is not able to print reports.
	2. Audit doesn't allow NIS users.
	3. ISSO menu may crash during audit report display.
	4. Local user account list shows NIS accounts in
	   XIsso/XSysAdmin.
	5. Double error GUIs displayed when missing audit_parms
	   file.

	PHNE_16979:
	Netgroups and the automounter are not usable.

	PHNE_16947:
	1. Upon bootup, NIS client takes about 2 minutes
	to initialize.

	2. ypbind not stopped when /sbin/init.d/nis.client stop
	issued.

	3. WAIT_FOR_NIS_SERVER parameter does not function.

	4. NIS prpasswd map not updated when yppasswd(1) is
	invoked.

	5. "Update NIS Map" program does not display error
	messages.

	6. ypbind(1) reports that it is bound when it is not.

Defect Description:
	PHNE_17384:

	1. Audit does not have print option.
	2. Audit subsystem not updated for NIS.
	3. Improper error handling.
	4. List of users not updated to exclude NIS accounts.
	5. Improper error handling when file does not exist.

	Resolution:
	1. Added the print option to the Display or Delete Existing
	   Reports menu.
	2. Added the NIS users/groups in the Creat/Modify/Delete
	   Selection Files screen when NIS is running.
	3. Fixed the isso crash problem due to no local report to
	   print.
	4. Removed NIS users from the Local User Account screen
	   in various XIsso and XSysAdmin menus.
	5. Fixed varous audit screen error problems due to missing
	   audit_parms file.

	PHNE_16979:

	Support for netgroups and the automounter was not
	available.

	Resolution:
	Support for netgroups and the automounter has been added.
	Please refer to netgroup(4) and automount(1M) for
	information.

	See special installation instructions for this patch.

	PHNE_16947:

	1. ypwhich(1) did not all effective privileges, so at boot
	it was running with allownetaccess,etc.

	2. ypbind was removed to fix another problem, but a better
	fix for that problem came.

	3. Same as 1.

	4. Order of arguments to yppasswdd in /sbin/init.d/
	nis.server.

	5. Standard error was not be caputured.

	6. Same as 1.

	Resolution:

	1. Drop all authorizations in ypwhich(1)

	2. Add ypbind to list of processes to kill

	3. see 1.

	4. Changed order of arguements to yppasswdd

	5. Updated program to catch error

	6. see 1.

SR:
	0000000000

Patch Files:
	/etc/menuhelp/XIsso/audit/DispReports
	/etc/menuhelp/XIsso/isso.msg
	/etc/menuhelp/XNISUpdate/xnis.msg
	/etc/menuhelp/XSysAdmin/sysadmin.msg
	/sbin/init.d/nis.client.script
	/tcb/bin/cmutil
	/tcb/bin/set_collect_parms
	/usr/bin/X11/XIsso
	/usr/bin/X11/XNISUpdate
	/usr/bin/X11/XSysAdmin
	/usr/bin/ypwhich
	/usr/lib/X11/app-defaults/XIsso
	/usr/lib/X11/app-defaults/XSysAdmin
	/usr/newconfig/usr/sbin/ypinit
	/usr/newconfig/var/yp/Makefile
	/usr/newconfig/var/yp/ypmake
	/usr/sbin/automount

what(1) Output:
	/etc/menuhelp/XIsso/audit/DispReports:
		None
	/etc/menuhelp/XIsso/isso.msg:
		None
	/etc/menuhelp/XNISUpdate/xnis.msg:
		None
	/etc/menuhelp/XSysAdmin/sysadmin.msg:
		None
	/sbin/init.d/nis.client.script:
		$Revision: 1.13 services/NFS/scripts/nis.client.scri
			pt, hpux, hpux_10.26, ic5aj $ $Date: 98/12/1
			6 15:16:38 $ Hewlett Packard Co.
		98/12/17 services/NFS/scripts/nis.client.script, hpu
			x, hpux_10.26, ic5aj Revision 1.13 PATCH_10.
			26 (PHNE_16947)
	/tcb/bin/cmutil:
		$Revision: Hewlett-Packard 10.26 TOS Level ic5an Bas
			e DAV17$$Date: Thu Jan 14 17:52:18 PST 1999$
		99/01/14 seccmd/cmutil/cmutil.c, role_prog, hpux_10.
			26, ic5an Revision 1.4 PATCH_10.26 (PHNE_173
			84)
	/tcb/bin/set_collect_parms:
		$Revision: Hewlett-Packard 10.26 TOS Level ic5an Bas
			e DAV17$$Date: Thu Jan 14 17:52:18 PST 1999$
		99/01/14 seccmd/cmutil/set_collect_parms.c, role_pro
			g, hpux_10.26, ic5an Revision 1.10 PATCH_10.
			26 (PHNE_17384)
	/usr/bin/X11/XIsso:
		$Revision: Hewlett-Packard 10.26 TOS Level ic5an Bas
			e DAV17$$Date: Thu Jan 14 17:52:18 PST 1999$
		99/01/14 seccmd/screens/xif/audit/XAudColnsl.c, hpux
			, hpux_10.26, ic5an Revision 1.14 PATCH_10.2
			6 (PHNE_17384)
		99/01/14 seccmd/screens/xif/audit/XAudColxsl.c, hpux
			, hpux_10.26, ic5an Revision 1.14 PATCH_10.2
			6 (PHNE_17384)
		99/01/14 seccmd/screens/xif/audit/XEvents.c, hpux, h
			pux_10.26, ic5an Revision 1.16 PATCH_10.26 (
			PHNE_17384)
		99/01/14 seccmd/screens/xif/audit/XParameter.c, hpux
			, hpux_10.26, ic5an Revision 1.11 PATCH_10.2
			6 (PHNE_17384)
		99/01/14 seccmd/screens/xif/audit/XSelectFil.c, hpux
			, hpux_10.26, ic5an Revision 1.14 PATCH_10.2
			6 (PHNE_17384)
		99/01/14 seccmd/screens/xif/audit/XShowRep.c, hpux,
			hpux_10.26, ic5an Revision 1.9 PATCH_10.26 (
			PHNE_17384)
		99/01/14 seccmd/screens/xif/audit/XUsrGrp.c, hpux, h
			pux_10.26, ic5an Revision 1.13 PATCH_10.26 (
			PHNE_17384)
		99/01/14 seccmd/screens/xif/audit/XAudUtils.c, hpux,
			 hpux_10.26, ic5an Revision 1.9 PATCH_10.26
			(PHNE_17384)
		99/01/14 seccmd/screens/xif/audit/XSelection.c, hpux
			, hpux_10.26, ic5an Revision 1.14 PATCH_10.2
			6 (PHNE_17384)
		seccmd/screens/common/AuthUtils.c, hpux, hpux_10.26,
			 ic5an $Date: 99/01/14 17:21:52 $ $Revision:
			 1.19 PATCH_10.26 (PHNE_16979) $
		99/01/14 seccmd/screens/common/Reports.c, hpux, hpux
			_10.26, ic5an Revision 1.7 PATCH_10.26 (PHNE
			_17384)
		99/01/14 seccmd/screens/common/Selection.c, hpux, hp
			ux_10.26, ic5an Revision 1.17 PATCH_10.26 (P
			HNE_17384)
		99/01/14 seccmd/screens/common/UsrGrp.c, hpux, hpux_
			10.26, ic5an Revision 1.10 PATCH_10.26 (PHNE
			_17384)
		99/01/14 seccmd/screens/common/Utils.c, hpux, hpux_1
			0.26, ic5an Revision 1.25 PATCH_10.26 (PHNE_
			17384)
		99/01/14 seccmd/screens/common/BufferU.c, hpux, hpux
			_10.26, ic5an Revision 1.7 PATCH_10.26 (PHNE
			_17384)
	/usr/bin/X11/XNISUpdate:
		$Revision: Hewlett-Packard 10.26 TOS Level ic5an Bas
			e DAV17$$Date: Thu Jan 14 17:52:18 PST 1999$
		seccmd/screens/xif/xnis/XGenMaps.c, hpux, hpux_10.26
			, ic5an $Date: 99/01/14 17:37:55 $ $Revision
			: 1.3 PATCH_10.26 (PHNE_16947) $
		seccmd/screens/xif/xnis/XGenMapsPush.c, hpux, hpux_1
			0.26, ic5an $Date: 99/01/14 17:37:56 $ $Revi
			sion: 1.3 PATCH_10.26 (PHNE_16947) $
		99/01/14 seccmd/screens/xif/audit/XAudColnsl.c, hpux
			, hpux_10.26, ic5an Revision 1.14 PATCH_10.2
			6 (PHNE_17384)
		99/01/14 seccmd/screens/xif/audit/XAudColxsl.c, hpux
			, hpux_10.26, ic5an Revision 1.14 PATCH_10.2
			6 (PHNE_17384)
		99/01/14 seccmd/screens/xif/audit/XEvents.c, hpux, h
			pux_10.26, ic5an Revision 1.16 PATCH_10.26 (
			PHNE_17384)
		99/01/14 seccmd/screens/xif/audit/XParameter.c, hpux
			, hpux_10.26, ic5an Revision 1.11 PATCH_10.2
			6 (PHNE_17384)
		99/01/14 seccmd/screens/xif/audit/XSelectFil.c, hpux
			, hpux_10.26, ic5an Revision 1.14 PATCH_10.2
			6 (PHNE_17384)
		99/01/14 seccmd/screens/xif/audit/XShowRep.c, hpux,
			hpux_10.26, ic5an Revision 1.9 PATCH_10.26 (
			PHNE_17384)
		99/01/14 seccmd/screens/xif/audit/XUsrGrp.c, hpux, h
			pux_10.26, ic5an Revision 1.13 PATCH_10.26 (
			PHNE_17384)
		99/01/14 seccmd/screens/xif/audit/XAudUtils.c, hpux,
			 hpux_10.26, ic5an Revision 1.9 PATCH_10.26
			(PHNE_17384)
		99/01/14 seccmd/screens/xif/audit/XSelection.c, hpux
			, hpux_10.26, ic5an Revision 1.14 PATCH_10.2
			6 (PHNE_17384)
		seccmd/screens/common/AuthUtils.c, hpux, hpux_10.26,
			 ic5an $Date: 99/01/14 17:21:52 $ $Revision:
			 1.19 PATCH_10.26 (PHNE_16979) $
		99/01/14 seccmd/screens/common/Reports.c, hpux, hpux
			_10.26, ic5an Revision 1.7 PATCH_10.26 (PHNE
			_17384)
		99/01/14 seccmd/screens/common/Selection.c, hpux, hp
			ux_10.26, ic5an Revision 1.17 PATCH_10.26 (P
			HNE_17384)
		99/01/14 seccmd/screens/common/UsrGrp.c, hpux, hpux_
			10.26, ic5an Revision 1.10 PATCH_10.26 (PHNE
			_17384)
		99/01/14 seccmd/screens/common/Utils.c, hpux, hpux_1
			0.26, ic5an Revision 1.25 PATCH_10.26 (PHNE_
			17384)
		99/01/14 seccmd/screens/common/BufferU.c, hpux, hpux
			_10.26, ic5an Revision 1.7 PATCH_10.26 (PHNE
			_17384)
	/usr/bin/X11/XSysAdmin:
		$Revision: Hewlett-Packard 10.26 TOS Level ic5an Bas
			e DAV17$$Date: Thu Jan 14 17:52:18 PST 1999$
		99/01/14 seccmd/screens/xif/audit/XAudColnsl.c, hpux
			, hpux_10.26, ic5an Revision 1.14 PATCH_10.2
			6 (PHNE_17384)
		99/01/14 seccmd/screens/xif/audit/XAudColxsl.c, hpux
			, hpux_10.26, ic5an Revision 1.14 PATCH_10.2
			6 (PHNE_17384)
		99/01/14 seccmd/screens/xif/audit/XEvents.c, hpux, h
			pux_10.26, ic5an Revision 1.16 PATCH_10.26 (
			PHNE_17384)
		99/01/14 seccmd/screens/xif/audit/XParameter.c, hpux
			, hpux_10.26, ic5an Revision 1.11 PATCH_10.2
			6 (PHNE_17384)
		99/01/14 seccmd/screens/xif/audit/XSelectFil.c, hpux
			, hpux_10.26, ic5an Revision 1.14 PATCH_10.2
			6 (PHNE_17384)
		99/01/14 seccmd/screens/xif/audit/XShowRep.c, hpux,
			hpux_10.26, ic5an Revision 1.9 PATCH_10.26 (
			PHNE_17384)
		99/01/14 seccmd/screens/xif/audit/XUsrGrp.c, hpux, h
			pux_10.26, ic5an Revision 1.13 PATCH_10.26 (
			PHNE_17384)
		99/01/14 seccmd/screens/xif/audit/XAudUtils.c, hpux,
			 hpux_10.26, ic5an Revision 1.9 PATCH_10.26
			(PHNE_17384)
		99/01/14 seccmd/screens/xif/audit/XSelection.c, hpux
			, hpux_10.26, ic5an Revision 1.14 PATCH_10.2
			6 (PHNE_17384)
		seccmd/screens/common/AuthUtils.c, hpux, hpux_10.26,
			 ic5an $Date: 99/01/14 17:21:52 $ $Revision:
			 1.19 PATCH_10.26 (PHNE_16979) $
		99/01/14 seccmd/screens/common/Reports.c, hpux, hpux
			_10.26, ic5an Revision 1.7 PATCH_10.26 (PHNE
			_17384)
		99/01/14 seccmd/screens/common/Selection.c, hpux, hp
			ux_10.26, ic5an Revision 1.17 PATCH_10.26 (P
			HNE_17384)
		99/01/14 seccmd/screens/common/UsrGrp.c, hpux, hpux_
			10.26, ic5an Revision 1.10 PATCH_10.26 (PHNE
			_17384)
		99/01/14 seccmd/screens/common/Utils.c, hpux, hpux_1
			0.26, ic5an Revision 1.25 PATCH_10.26 (PHNE_
			17384)
		99/01/14 seccmd/screens/common/BufferU.c, hpux, hpux
			_10.26, ic5an Revision 1.7 PATCH_10.26 (PHNE
			_17384)
	/usr/bin/ypwhich:
		services/NFS/cmds/usr.bin/ypwhich.c, hpux, hpux_10.2
			6, ic5aj $Date: 98/12/17 16:25:36 $ $Revisio
			n: 1.2 PATCH_10.26 (PHNE_16947) $
		ypwhich:        $Revision: 1.37.114.1 $ $Date: 95/10
			/02 18:18:11 $
		$Revision: Hewlett-Packard 10.26 TOS Level ic5aj Bas
			e DAV17$$Date: Thu Dec 17 16:39:41 PST 1998$
	/usr/lib/X11/app-defaults/XIsso:
		$Revision: 1.13 seccmd/screens/xif/main/XIsso.res, h
			pux, hpux_10.26, ic5an $ $Date: 99/01/14 15:
			42:27 $ Hewlett Packard Co.
		99/01/14 seccmd/screens/xif/main/XIsso.res, hpux, hp
			ux_10.26, ic5an Revision 1.13 PATCH_10.26 (P
			HNE_17384)
		60  1.1.1.13  seccmd/screens/xif/main/XIsso.res, cmd
			srole_xif, hpux_mlpmp, mlpmp6 11/09/95 13:20
			:28, SecureWare, Inc.
	/usr/lib/X11/app-defaults/XSysAdmin:
		$Revision: 1.13 seccmd/screens/xif/main/XIsso.res, h
			pux, hpux_10.26, ic5an $ $Date: 99/01/14 15:
			42:27 $ Hewlett Packard Co.
		99/01/14 seccmd/screens/xif/main/XIsso.res, hpux, hp
			ux_10.26, ic5an Revision 1.13 PATCH_10.26 (P
			HNE_17384)
		60  1.1.1.13  seccmd/screens/xif/main/XIsso.res, cmd
			srole_xif, hpux_mlpmp, mlpmp6 11/09/95 13:20
			:28, SecureWare, Inc.
	/usr/newconfig/usr/sbin/ypinit:
		$Revision: 1.13 services/NFS/cmds/usr.etc/yp/ypinit,
			 hpux, hpux_10.26, ic5ak $ $Date: 98/11/23 1
			6:45:19 $ Hewlett Packard Co.
		services/NFS/cmds/usr.etc/yp/ypinit, hpux, hpux_10.2
			6, ic5ak $Date: 99/01/06 18:15:05 $ $Revisio
			n: 1.13 PATCH_10.26 (PHNE_16979) $
		ypinit: $Revision: 1.33.114.1 $ $Date: 95/10/02 18:2
			2:56 $
	/usr/newconfig/var/yp/Makefile:
		$Revision: 1.14 services/NFS/cmds/usr.etc/yp/make.sc
			ript, hpux, hpux_10.26, ic5ak $ $Date: 98/11
			/23 16:44:56 $ Hewlett Packard Co.
		services/NFS/cmds/usr.etc/yp/make.script, hpux, hpux
			_10.26, ic5ak $Date: 99/01/06 18:15:08 $ $Re
			vision: 1.14 PATCH_10.26 (PHNE_16979) $
		make.script 1.32 90/01/24 SMI
	/usr/newconfig/var/yp/ypmake:
		$Revision: 1.7 services/NFS/cmds/usr.etc/yp/ypmake,
			hpux, hpux_10.26, ic5ak $ $Date: 98/11/23 16
			:45:38 $ Hewlett Packard Co.
		services/NFS/cmds/usr.etc/yp/ypmake, hpux, hpux_10.2
			6, ic5ak $Date: 99/01/06 18:15:04 $ $Revisio
			n: 1.7 PATCH_10.26 (PHNE_16979) $
		ypmake: $Revision: 1.47.114.4 $ $Date: 96/04/29 12:5
			3:43 $
	/usr/sbin/automount:
		$Revision: Hewlett-Packard 10.26 TOS Level ic5ak Bas
			e DAV17$$Date: Wed Jan  6 18:30:36 PST 1999$
		services/NFS/cmds/usr.etc/automount/auto_main.c, hpu
			x, hpux_10.26, ic5ak $Date: 99/01/06 17:57:5
			3 $ $Revision: 1.6 PATCH_10.26 (PHNE_16979)
			$
		automount: PHNE_6444    $Revision: 1.11.114.5 $ $Dat
			e: 96/02/15 10:47:16 $

cksum(1) Output:
	4184477579 1088 /etc/menuhelp/XIsso/audit/DispReports
	1834188066 90362 /etc/menuhelp/XIsso/isso.msg
	2644327276 84473 /etc/menuhelp/XNISUpdate/xnis.msg
	1834188066 90362 /etc/menuhelp/XSysAdmin/sysadmin.msg
	3266343288 8445 /sbin/init.d/nis.client.script
	1451201254 16384 /tcb/bin/cmutil
	2853027333 28672 /tcb/bin/set_collect_parms
	228263256 741376 /usr/bin/X11/XIsso
	1102882681 733184 /usr/bin/X11/XNISUpdate
	228263256 741376 /usr/bin/X11/XSysAdmin
	1870825052 20480 /usr/bin/ypwhich
	174940455 27225 /usr/lib/X11/app-defaults/XIsso
	174940455 27225 /usr/lib/X11/app-defaults/XSysAdmin
	2857918954 12193 /usr/newconfig/usr/sbin/ypinit
	1082754269 17558 /usr/newconfig/var/yp/Makefile
	1880599053 20969 /usr/newconfig/var/yp/ypmake
	2810993730 98304 /usr/sbin/automount

Patch Conflicts: None

Patch Dependencies: None

Hardware Dependencies: None

Other Dependencies: None

Supersedes:
	PHNE_16947 PHNE_16979

Equivalent Patches: None

Patch Package Size: 1930 KBytes

Installation Instructions:
	Please review all instructions and the Hewlett-Packard
	SupportLine User Guide or your Hewlett-Packard support terms
	and conditions for precautions, scope of license,
	restrictions, and, limitation of liability and warranties,
	before installing this patch.
	------------------------------------------------------------
	1. Back up your system before installing a patch.

	2. Login as root.

	3. Copy the patch to the /tmp directory.

	4. Move to the /tmp directory and unshar the patch:

		cd /tmp
		sh PHNE_17384

	5a. For a standalone system, run swinstall to install the
	    patch:

		swinstall -x autoreboot=true -x match_target=true \
			-s /tmp/PHNE_17384.depot

	5b. For a homogeneous NFS Diskless cluster run swcluster on the
	    server to install the patch on the server and the clients:

		swcluster -i -b

	    This will invoke swcluster in the interactive mode and
	    force all clients to be shut down.

	    WARNING: All cluster clients must be shut down prior to the
		     patch installation.  Installing the patch while the
		     clients are booted is unsupported and can lead to
		     serious problems.

	    The swcluster command will invoke an swinstall session in which
	    you must specify:

		alternate root path  -  default is /export/shared_root/OS_700
		source depot path    -  /tmp/PHNE_17384.depot

	    To complete the installation, select the patch by choosing
	    "Actions -> Match What Target Has" and then "Actions -> Install"
	    from the Menubar.

	5c. For a heterogeneous NFS Diskless cluster:

		- run swinstall on the server as in step 5a to install
		  the patch on the cluster server.

		- run swcluster on the server as in step 5b to install
		  the patch on the cluster clients.

	By default swinstall will archive the original software in
	/var/adm/sw/patch/PHNE_17384.  If you do not wish to retain a
	copy of the original software, you can create an empty file
	named /var/adm/sw/patch/PATCH_NOSAVE.

	Warning: If this file exists when a patch is installed, the
	         patch cannot be deinstalled.  Please be careful
		 when using this feature.

	It is recommended that you move the PHNE_17384.text file to
	/var/adm/sw/patch for future reference.

	To put this patch on a magnetic tape and install from the
	tape drive, use the command:

		dd if=/tmp/PHNE_17384.depot of=/dev/rmt/0m bs=2k

Special Installation Instructions:
	In order to make these changes effective, use the following
	procedure:

	1.  Install the patch.

	2.  On the NIS master server, either run the command
	"/var/yp/ypmake NOPUSH=1" or use the "Update NIS Maps"
	program and choose "Generate Maps".

	3.  On each NIS slave server, execute the following
	commands:
		/usr/sbin/ypxfr netgroup
		/usr/sbin/ypxfr netgroup.byhost
		/usr/sbin/ypxfr netgroup.byuser
		/usr/sbin/ypxfr auto.master

	4. You may now use the netgroups and automounter
	functionality.