OBSOLETE Patch-ID# 108881-02
Keywords: security BSM auditing log adminsuite compat nsswitch.conf
Synopsis: Obsoleted by: 108881-03 Solstice AdminSuite 3.0.1_x86: Auditing, 'compat' in nsswitch.conf
Date: Aug/30/2000

Solaris Release: 8_x86

SunOS Release: 5.8_x86

Unbundled Product: Solstice AdminSuite

Unbundled Release: 3.0.1

Xref: This patch available for SPARC as patch 108879-02

Topic: 

Relevant Architectures: i386

BugId's fixed with this patch: 4305942 4308991 4322070

Changes incorporated in this version: 4305942 4322070

Patches accumulated and obsoleted by this patch: 

Patches which conflict with this patch: 

Patches required with this patch: 

Obsoleted by: 

Files included with this patch: 

/opt/SUNWseam/3_0/admswt10.jar
/opt/SUNWseam/3_0/lib/libadmsvr.so.1

Problem Description:

4322070 - The AdminSuite server must audit login attempts.
4305942 - admsvr3_0 fails to start with ''compat'' in nsswitch.conf
	  This patch fixes the admsvr3_0 start failures, but when the 
	  compat option is used in /etc/nsswitch.conf, a subset of the 
	  complete functionality of the normal compat option will be used 
	  when searching for user authorizations.
	  A table of authorization search orders based on the configuration 
	  of /etc/nsswitch.conf and /etc/passwd follows:
	  /etc/passwd ends in +   passwd_compat:        search order
	  yes                     none                  files nis
	  yes                     nis                   files nis
	  yes                     nisplus               files nisplus
	  no                      any                   files
	  For example, if the compat option is used, and the /etc/passwd 
	  file ends with a +, and there is no passwd_compat target in the 
	  nsswitch.conf, then the search order for authorizations will be 
	  first all of /etc/passwd, then all of the NIS passwd map.
	  Other special compat mode syntax, such as +-user or +-netgroup,
	  is NOT supported.  In order to eliminate any confusion in assigning 
	  authorizations, it is highly recommended that all administrative 
	  users not be users who go through any of the unsupported compat 
	  switch syntax when logging in.
(from 108881-01)
4308991 - BSM Auditing not working correctly for users, groups and mounts

Patch Installation Instructions:
--------------------------------
For Solaris 2.0-2.6 releases, refer to the Install.info file and/or
the README within the patch for instructions on using the generic
''installpatch'' and ''backoutpatch'' scripts provided with each patch.
For Solaris 7 release, refer to the man pages for instructions on
using ''patchadd'' and ''patchrm'' scripts provided with Solaris.
Any other special or non-generic installation instructions should be
described below as special instructions.  The following example
installs a patch to a standalone machine:
       example# patchadd /var/spool/patch/104945-02
The following example removes a patch from a standalone system:
       example# patchrm 104945-02
For additional examples please see the appropriate man pages.

Special Install Instructions:
----------------------------- 
Sites that need the fix for BugID 4305942, but not the C2 security related
fixes in this patch, should install patch 109414-01 instead of this patch.

