OBSOLETE Patch-ID# 116659-01
Keywords: security qstat qhost scheduler execd pe jobs qacct i18n l10n ssl
Synopsis: Obsoleted by: 116659-02 Sun Grid Engine, Enterprise Edition 5.3 _x86: maint./security patch
Date: Dec/03/2003


Install Requirements: Additional instructions may be listed below                      
                      
Solaris Release: 8_x86 9_x86

SunOS Release: 5.8_x86 5.9_x86

Unbundled Product: Sun Grid Engine Enterprise Edition

Unbundled Release: 5.3
NOTE: This patch is for customers who installed the Sun Grid
              Engine using the NON-Solaris Package format. If Sun
              Grid Engine product was installed using Solaris
              Packaging utilities, please use patch 116658.

Xref: 

Topic: 

Relevant Architectures: sparc

BugId's fixed with this patch: 4930786 4930789 4930793 4949917 4952236 4952767 4957760

Changes incorporated in this version: 4930786 4930789 4930793 4949917 4952236 
4952767 4957760

Patches accumulated and obsoleted by this patch: 

Patches which conflict with this patch: 

Patches required with this patch: 

Obsoleted by: 

Files included with this patch: 

<install_dir>/bin/solaris86/qacct
<install_dir>/bin/solaris86/qalter
<install_dir>/bin/solaris86/qconf
<install_dir>/bin/solaris86/qdel
<install_dir>/bin/solaris86/qhost
<install_dir>/bin/solaris86/qmake
<install_dir>/bin/solaris86/qmod
<install_dir>/bin/solaris86/qmon
<install_dir>/bin/solaris86/qsh
<install_dir>/bin/solaris86/qstat
<install_dir>/bin/solaris86/qsub
<install_dir>/bin/solaris86/qtcsh
<install_dir>/bin/solaris86/sge_commd
<install_dir>/bin/solaris86/sge_coshepherd
<install_dir>/bin/solaris86/sge_execd
<install_dir>/bin/solaris86/sge_qmaster
<install_dir>/bin/solaris86/sge_schedd
<install_dir>/bin/solaris86/sge_shadowd
<install_dir>/bin/solaris86/sge_shepherd
<install_dir>/bin/solaris86/sgecommdcntl
<install_dir>/lib/solaris86/libXltree.so
<install_dir>/utilbin/solaris86/adminrun
<install_dir>/utilbin/solaris86/checkprog
<install_dir>/utilbin/solaris86/checkuser
<install_dir>/utilbin/solaris86/filestat
<install_dir>/utilbin/solaris86/gethostbyaddr
<install_dir>/utilbin/solaris86/gethostbyname
<install_dir>/utilbin/solaris86/gethostname
<install_dir>/utilbin/solaris86/getservbyname
<install_dir>/utilbin/solaris86/infotext
<install_dir>/utilbin/solaris86/loadcheck
<install_dir>/utilbin/solaris86/now
<install_dir>/utilbin/solaris86/openssl
<install_dir>/utilbin/solaris86/qrsh_starter
<install_dir>/utilbin/solaris86/rlogin
<install_dir>/utilbin/solaris86/rsh
<install_dir>/utilbin/solaris86/rshd
<install_dir>/utilbin/solaris86/testsuidroot
<install_dir>/utilbin/solaris86/uidgid

Problem Description:

4930786    global load values are ignored
4930789    An overwritten string attribut was ignored in the scheduler
4930793    minor issues with the sgeee ticket update interval
4949917    qmon seg faults with a user hold job from qtcsh qtask file
4952236    Broken mail option with SGE 5.3p4 qrsh
4952767    qrsh -notify doesn't work
4957760    Fix needed for CERT CA-2003-26 Multiple Vulnerabilities in SSL/TLS

Patch Installation Instructions:
--------------------------------
 
   Important note if Sun Grid Engine has been installed with openSSL support
   -------------------------------------------------------------------------
 
   If Sun Grid Engine has been installed with openSSL support ("CSP mode")
   prior to SGE 5.3p3 (which was linked with openSSL 0.9.6.c), the
   certificates which have been installed with these versions are
   incompatible with certificates installed with SGE 5.3p4 or later. All
   such certificates will need to be recreated after installing this patch
   and before restarting Sun Grid Engine. Please refer to the Sun Grid  
   Engine Administration and User Manual for how to create new certificates
   with the utiliy script "sge_ca", which comes with the distribution.
 
   The reason for the incompatibility is a changed field name between
   openSSL version 0.9.6 and 0.9.7 in the certificates, where
   "uniqueIdentifier" has been renamed to "userId".
 
Installation
------------
 
This patch in 'tar.gz' format cannot be installed with 'patchadd' on Solaris
systems. The patch is installed by unpacking the 'tar.gz' file(s) in this
directory in <install_dir>. <install_dir> is usually your <sge_root>
directory. The installation of this patch later is not visible with the
"showrev -p" command on Solaris.
 
This patch later cannot be backed out. You may make a backup copy of the
files which will be overwritten when this patch is installed.
 
Please read "Special Install Instructions" later in this file and carry out
all steps before you unpack the 'tar.gz' file(s) included in this patch.
 
This patch in 'tar.gz' format may not be installed of the original package
has been installed with 'pkgadd' on Solaris. In this case please install the
available patches for Sun Grid Engine, Enterprise Edition from
http://sunsolve.sun.com in 'pkgadd' format.
 
The patch is installed by user root by unpacking the file(s) in the
directory where the original package has been installed:
 
   # cd <install_dir>
   # gzip -dc <patchid>/<targzfile> | tar xvpf -
 
After installing the patch you should correct the file permissions if your
Sun Grid Engine, Enterprise Edition installation is installed as an "admin
user" system:
 
   # cd <sge_root>
   # util/setfileperm.sh <adminuser> <admingroup> <sge_root>
 
where <adminuser> is the username of the "admin_user" of your global cluster
configuration and <admingroup> is the group which you set during your
initial installation for the files of your Sun Grid Engine, Enterprise
Edition distribution.

Special Install Instructions:
-----------------------------
 
   These special installation instructions assume that you are running a
   homogenous Sun Grid Engine, Enterprise Edition cluster where all hosts
   share the same directory for the binaries. If you are running Sun Grid
   Engine, Enterprise Edition in a heterogenous environment (mix of 32-bit
   and 64-bit binaries for Solaris and/or other operating systems) it is
   only necessary to shutdown the daemons for the architecture for which the
   patch is applied.  If you installed the binaries on a local partition,
   you only need to stop the SGE daemons for that host on which you are
   installing the patch.
 
   By default there may by no running jobs when the patch is installed. 
   There may pending batch jobs, but no pending interactive jobs (qrsh,
   qmake, qsh, qtcsh).
 
   It is possible to install the patch with running batch jobs. To avoid a
   failure of the active "sge_shepherd" binary it is necessary to move the
   old shepherd binary (and copy it back prior the installation of the
   patch).
 
   In no case it is supported to install the patch with running interactive
   jobs, 'qmake' jobs or with running parallel jobs which use the tight
   integration support (control_slaves=true in PE configuration is set). 
 
 
   Stopping the Sun Grid Engine, Enterprise Edition cluster to start jobs
   ----------------------------------------------------------------------
 
   Disable all queues that no new jobs are started:
 
      # qmod -d '*'
 
   Optional (only needed if there are running jobs which should continue to
   run when the patch is installed):
 
      # cd $SGE_ROOT/bin
      # mv <arch>/sge_shepherd <arch>/sge_shepherd.sge53
 
   It is important that the binary is moved with the "mv" command. It may
   not be copied because this couldcause a crash of an active shepherd
   process of a running job when the patch is installed.
 
 
   Shutting down Sun Grid Engine, Enterprise Edition qmaster and scheduler
   -----------------------------------------------------------------------
 
   You need to shutdown (and restart) the qmaster and scheduler daemon and
   all execution daemons on all SGE hosts.
 
   Shutdown all your execution hosts. Login to all your execution hosts and 
   stop the 'sge_execd' and 'sge_commd':
 
      # /etc/init.d/rcsge stop
 
   Then login to your qmaster machine and stop 'sge_qmaster', 'sge_schedd', 
   'sge_commd' and if the machine is also an execution host 'sge_execd'
 
      # /etc/init.d/rcsge stop
 
   Now verify with the 'ps' command that all Sun Grid Engine, Enterprise
   Edition daemons on all hosts are stopped. If you decided to rename the
   shepherd binary that running patch job continue to run during the patch
   installation you may not kill the 'sge_shepherd' binary.
 
 
   Installing the patch and restarting Sun Grid Engine, Enterprise Edition
   -----------------------------------------------------------------------
 
   Now please install the patch by unpacking the 'tar.gz' files included in
   this patch as outline above.
 
   After installing the patch you need to restart your SGE cluster. Please
   login to your qmaster machine and enter:
 
      # /etc/init.d/rcsge
 
   Now you should repeat this step on all your execution hosts.
 
   After restarting SGE you may again enable your queues:
 
      # qmod -e '*'
 
   If you renamed the shepherd binary you may safely delete the old binary
   when all jobs finished which where running prior the patch installation.

README -- Last modified date:  Wednesday, April 7, 2004

