OBSOLETE Patch-ID# 108881-05
Keywords: security BSM auditing log compat shell gecos autohome home nis passwd
Synopsis: Obsoleted by: 108881-07 Solstice AdminSuite 3.0.1_x86: Auditing compat mode passwd autohome
Date: Mar/01/2001

Solaris Release: 8_x86

SunOS Release: 5.8_x86

Unbundled Product: Solstice AdminSuite

Unbundled Release: 3.0.1

Xref: This patch available for SPARC as patch 108879-05

Topic: 

Relevant Architectures: i386

BugId's fixed with this patch: 4305942 4308991 4318890 4322070 4341813 4372914 4410452

Changes incorporated in this version: 4410452

Patches accumulated and obsoleted by this patch: 

Patches which conflict with this patch: 109414-04

Patches required with this patch: 108876-07 or greater

Obsoleted by: 

Files included with this patch: 

/opt/SUNWseam/3_0/admswt10.jar
/opt/SUNWseam/3_0/lib/libadmsvr.so.1

Problem Description:

4410452 Current patches for Adminsuite 3.0 and 3.0.1 don't restart the 
	server on install
 
(from 108881-04)
4318890 possible problem with  passwd min/max variables in correct field
 
(from 108881-03)
4372914 AdminSuite 3/NIS+: change shell or GECOS fields mangles entry in passwd.org_dir
4341813 AdminSuite 3.0 sets wrong homedirectory using usrmgr in NIS-Environment
 
(from 108881-02)
4322070 The AdminSuite server must audit login attempts.
4305942 admsvr3_0 fails to start with 'compat' in nsswitch.conf
	This patch fixes the admsvr3_0 start failures, but when the 
	compat option is used in /etc/nsswitch.conf, a subset of the 
	complete functionality of the normal compat option will be used 
	when searching for user authorizations.
 
	A table of authorization search orders based on the configuration 
	of /etc/nsswitch.conf and /etc/passwd follows:
 
	/etc/passwd ends in +   passwd_compat:        search order
	yes                     none                  files nis
	yes                     nis                   files nis
	yes                     nisplus               files nisplus
	no                      any                   files
 
	For example, if the compat option is used, and the /etc/passwd 
	file ends with a +, and there is no passwd_compat target in the 
	nsswitch.conf, then the search order for authorizations will be 
	first all of /etc/passwd, then all of the NIS passwd map.
 
	Other special compat mode syntax, such as +-user or +-netgroup,
	is NOT supported.  In order to eliminate any confusion in assigning 
	authorizations, it is highly recommended that all administrative 
	users not be users who go through any of the unsupported compat 
	switch syntax when logging in.
 
(from 108881-01)
4308991 BSM Auditing not working correctly for users, groups and mounts

Patch Installation Instructions:
--------------------------------
 
Refer to the man pages for instructions on using 'patchadd' and 'patchrm' 
scripts provided with Solaris.  Any other special or non-generic installation 
instructions should be described below as special instructions.  The following 
example installs a patch to a stand-alone machine:
 
       example# patchadd /var/spool/patch/104945-02
 
The following example removes a patch from a stand-alone system:
 
       example# patchrm 104945-02
 
For additional examples please see the appropriate man pages.

Special Install Instructions:
----------------------------- 
 
The AdminSuite server is automatically stopped and restarted during
patch installation.  The user must exit the AdminSuite client application
and restart it before the patch changes will take effect.
 
The AdminSuite server is NOT automatically restarted during patch 
removal.  If this patch is removed, the AdminSuite server most be
stopped and restarted (/opt/SUNWseam/3_0/sbin/admsvr stop/start) to 
remove the patch changes.  Anytime the AdminSuite server is stopped
and restarted the AdminSuite client application must be exited and
restarted.
 
Sites that need the fixes for BugID 4372914, 4341813, 4305942, 4318890 or
4410452 but not the C2 security related fixes for AdminSuite 3.0.1 should 
install patch 109414-04 instead of this patch.

README -- Last modified date:  Wednesday, April 25, 2001

