Patch-ID# 118080-11

NOTE:
***********************************************************************
READ THE TERMS OF THE AGREEMENT ("AGREEMENT") IN THE LEGAL_LICENSE.TXT
FILE CAREFULLY BEFORE USING THIS SOFTWARE. BY USING THE SOFTWARE, YOU
AGREE TO THE TERMS OF THIS AGREEMENT. IF YOU DO NOT AGREE TO ALL OF THE
TERMS, PROMPTLY DESTROY THE UNUSED SOFTWARE.
***********************************************************************

Keywords: java_es linux rhel2.1 security
Synopsis: Sun Java(TM) System Directory Server 5.2 Patch 4 - RHEL2.1
Date: Sep/28/2005


Install Requirements: None                      
                      
Solaris Release: 
Note: Redhat


SunOS Release: 
Note: RHEL2.1


Unbundled Product: Directory Server

Unbundled Release: 5.2

Xref: This patch available for SunOS sparc in patch 115614 and for SunOS i386 in patch 115615
        NOTE:   Refer to Special Install Instructions section for
                specific information on this patch.


Topic: RHEL2.1: Sun Java(TM) System Directory Server 5.2 Patch 4

Relevant Architectures: i386

BugId's fixed with this patch: 4540348 4703823 4705238 4817331 4834633 4859217 4866642 4870419 4917152 4943244 4971685 4971699 4972234 4973380 4976129 4976981 4977320 4987124 4992117 4993755 4993766 5001773 5002960 5005446 5006180 5006198 5009329 5010313 5011670 5019492 5025571 5025703 5025708 5027187 5028920 5029020 5030511 5033621 5033648 5033860 5035339 5036033 5036063 5039753 5039922 5040313 5040489 5040955 5041885 5045670 5046748 5048909 5050272 5052660 5053672 5054014 5056586 5057348 5057383 5059653 5061279 5061313 5062657 5062658 5063342 5064009 5064528 5064543 5064553 5064567 5064639 5065161 5067921 5068370 5068403 5068523 5068847 5068924 5069432 5069443 5070064 5071022 5071401 5071499 5071534 5071543 5071555 5071675 5071835 5071900 5072460 5072471 5072473 5073261 5073482 5074198 5074349 5074773 5075348 5075429 5077081 5077085 5077289 5077789 5078878 5079445 5079478 5079607 5080762 5082575 5083577 5084464 5084650 5084881 5086599 5089462 5089910 5091804 5091823 5093189 5093994 5095587 5095911 5096607 5097503 5098456 5099386 5099389 5099530 5100203 5100350 5100886 5101624 5101683 5102471 5102792 5103254 5103276 5103332 5103659 5104614 5104945 5105438 5106012 5106072 5106142 5106684 5106746 5107507 5107970 5108629 5108631 5108714 5109252 5109303 5109510 5110002 5110024 6174156 6174274 6174351 6174358 6174806 6174980 6175378 6175402 6175447 6175461 6175580 6176852 6178507 6179199 6179285 6179861 6181060 6181119 6181122 6181168 6181203 6181237 6181241 6181250 6182106 6182428 6182534 6183411 6185914 6188736 6189349 6189447 6191433 6192088 6193283 6194664 6195685 6197763 6198506 6198596 6199981 6200727 6201045 6203788 6208161 6209991 6211231 6212643 6213363 6216291 6218130 6221154 6221840 6222919 6224038 6226061 6226138 6226163 6226183 6226186 6226211 6227765 6227772 6227791 6228810 6229360 6229917 6229929 6229933 6229951 6229983 6230410 6230949 6231660 6233228 6235041 6236844 6237734 6238832 6239107 6241443 6242420 6242741 6245092 6252050 6252452 6252565 6260083 6261233 6262066 6267965 6269446 6275420 6276993 6278500 6279463 6281506 6282564 6283717 6283860 6284642 6285260 6285268 6285785 6286620 6286635 6287508 6287819 6288027 6288145 6288249 6290059 6295348

Changes incorporated in this version: 6295348

Patches accumulated and obsoleted by this patch: 117865-01

Patches which conflict with this patch: 

Patches required with this patch: 

Obsoleted by: 

Files included with this patch: 


Note: sun-directory-server-5.2-25.i386.rpm
sun-directory-server-man-5.2-9.i386.rpm

Problem Description:

(from current patch)
6295348 5.2patch4 build 4 - DS console cannot be opened
 
(from 118080-09)
4972234 Account validation via LDAP bind without user password
5103276 Hub not replicating due to Wrong ReplicaId 65535 in the Hub RUV
5106142 lack of out of disk space causes looping in in db2bak internal TASK
6195685 DS 5.2patch2/aci returns incorrect results when fix for 4886766 is applied
6197763 fix 4974942 (in 5.2patch2) is wrong and can lead to a race condition when closing the connections
6199981 Memory leak in search "cn=config"
6200727 Memory leak in each replication session comming from a hub
6209991 bad server side sorting performances when data contains a lot of identical values
6211231 not able to add members to ldap group with one double quote
6236844 add/delete of an attribute in one ldapmodify is not replicated correctly
6239107 fildif is not able to work with files larger than 2GB (CU LDIF export file in this case is 28GB)
6242420 Deleting multivalued attribute(s) in directory server 5.2 patch2 results in high etimes
6245092 Directory Server hangs when running stop-slapd command
6252050 DS exits when acllas__handle_group_entry()tries to allocate 4GB
6260083 JES 4 Build 2 Linux: DS fails to configure on RHAS 3.0 u4 for AMD64
6261233 Jes4_b4 DS failing to install on snv
6262066 on UNIX Directory may crash if #fd resource limit is dynamically increased
6267965 Searches for subtype attributes does not work correctly with nsslapd-search-tune enabled.
6276993 DS 5.2p3 : crash in is_pending_value_mods
6282564 Restart of a Fractional Consumer breaks replication with WARNING<10271> - Partial Config Error
6283717 A consumer does not detect there is pending operation and when closing an 'idle' replication cnx
6283860 DS5.2p3: modification lost when using ldapmodify
6284642 README file of patch still refers old patch numbers
6285260 Upgrade: No patch README file for shared components on Red Hat
6285268 Upgrade with rpm patch: various mistakes in README files README.118079-08 and README.118080-08
6285785 ds5ReplicaConsumerTimeout cannot be configured
6286620 PATCHZIP: Version and Build number on the main Console are not updated.
6286635 PATCHZIP: some Version number on Console are not updated.
6287508 install.sh -f does not detect that cred file does not exist
6287819 upgrade : mpsadmserver command is broken after the upgrade of the components
6288027 Backport DSEE -> DS5.2: memory control/true ceiling
6288145 Patchzip's install.sh provides wrong instruction when failed to sync-cds
6288249 Directory Server can hang if replication agreement is being initalized from another master
6290059 Performance issue when deleting non existant attribute
 
(from 118080-08)
4540348 Enhancement of uniqueness plugin to handle combination of attributes
4817331 allow "Administrators" to reset the password
6216291 passwordRetryCount does not get incremented when passwordResetFailureCount is set to 0
6218130 LDAP server 5.2 needs to ship with new libsasl component
6229983 idsktune from patchzip is not executable - missing chmod +x
6238832 Cannot restart DS after ZIP-upgrade of DS only on windows
6252565 pkgmap has changed in directory server ha component. need hack to configure ha
6269446 Incorrect Version of DS Is Displayed After Upgrade From DS 5 2005Q1 to DS 5 2005Q4
6275420 Deadlock in database while evaluating the acls in a modify operation
6278500 SUNW.dsldap link in /usr/cluster/lib/rgm/rtreg/ is not created after HA DS is installed on S10
6279463 Performace improvement around modify
6281506 Replication may be slow to restart after a network outage
 
(from 118080-07)
4540348 Enhancement of uniqueness plugin to handle combination of attributes
4817331 allow "Administrators" to reset the password
6216291 passwordRetryCount does not get incremented when passwordResetFailureCount is set to 0
6218130 LDAP server 5.2 needs to ship with new libsasl component
6229983 idsktune from patchzip is not executable - missing chmod +x
6238832 Cannot restart DS after ZIP-upgrade of DS only on windows
6252565 pkgmap has changed in directory server ha component. need hack to configure ha
6269446 Incorrect Version of DS Is Displayed After Upgrade From DS 5 2005Q1 to DS 5 2005Q4
6275420 Deadlock in database while evaluating the acls in a modify operation
6278500 SUNW.dsldap link in /usr/cluster/lib/rgm/rtreg/ is not created after HA DS is installed on S10
6279463 Performace improvement around modify
6281506 Replication may be slow to restart after a network outage
 
(from 118080-06)
5010313 DS 5.2. db2ldif -r removes the guardian file.
5100203 Add the rc code inside the &quot;could not be logged in the Changelog&quot; erro
6174806 Huge memory leak on mixed 5.1/5.2 topology (5.1 protocol)
6208161 Online indexation task request +  search (evaluating role aci) -> DS deadlock hang
6212643 ns-slapd Memory leak when dn_norlamization failed
6213363 Index corruption
6221840 DS5.2: Memory leak in Individual Password Policies
6229360 Random crash with DSML pdu larger than 2K
6237734 multivalued subtring index of DN syntax gets corrupted if value deleted
6241443 Upgrading DS (5.2 RTM to Patch 3) on wintel platform when spaces are in the path
6242741 Directory server crashes while processing ldapmodify with Retro Changelog plugin turned on
6252452 db2ldif.pl -r may hangs the server
 
(from 118080-05)
5068370 PATCHZIP: Installing patchzip fails if admin password includes "&"
5069443 PATCHZIP: "Sun ONE" returns on AS Console by adding a localized patchzip
5082575 PATCHZIP: Please add a user check feature in the install script
6193283 Upgrade on Linux: DS README does not say how to downgrade
6201045 patchrm of 115614-18 generates misleading errors
6221154 Zip 64 bits: new instances are registered below "cn=Sun Java(TM) System Directory Server,..."
6222919 PATCHZIP: the ability to upgrade a single DS installation is not provided
6224038 RPM-PATCH : missing directory server man pages
6226061 PATCHZIP: "5.2.2." in window title
6226183 PATCHZIP: Some files allow a write access to others.
6226211 MMR-2: crash in csngen_adjust_time (difference between system clock is > 24 hours)
6227765 RPM-PATCH : AS readme is duplicated, should not be
6227772 JES3 PATCH Create New Role window does not open
6227791 PATCHZIP: Create New Role window does not open in a mixed environment
6228810 crash in bm_binary_subtype
6229917 No diagnostic nor error message from patchzip's install.sh when error in arguments
6229929 Confusing warning vs. error when error in sync-product-cds during patchzip
6229933 patchzip's install.sh requires write access to the patch's directory and does not support multiple p
6229951 Patchzip's install.sh does not support spaces in admin id or password...
6230410 PATCHZIP: Configuration error after restart
6230949 PATCHZIP win2k Help Error in Directory Server Console
6231660 patchZIP and patchNATIF README to be fixed
6233228 PATCH : can't start slapd after patchrm 115614-20
6235041 PATCHZIP: sync-product-cds fails
 
(from 118080-04)
5028920 db2bak uses a wrong format for backup directory
5041885 nsSchemaCSN" has multiple values after upgrade AS + DS in Orion 1 to Orion 2
5048909 directoryserver mmldif report is useless and erroneous
5063342 PATCHZIP: Create New Role window does not open
5064528 mpsadmserver unconfigure ends with "Unconfiguration of the Adm. Server failed."
5077085 Silent unconfigure of DS sometimes reports an error
5104614 JES installer should check for SUNWzlibx before proceding with install
6175378 DS failed to stop in multimaster_stop
6176852 Crash in the Sleepycat abort function call
6179199 Account lockout doesn't work for DIGEST-MD5 authentication
6181119 Bad format for 00core.ldif after upgrading DS5.2Patch1 => Patch3
6181203 The upgrade does not update the schema: 'modDNEnabledSuffixes' attribute is missing
6181250 Missing changes in retrocl on a master under stress
6188736 mmldif tool: Delta Files do not contain ldif update statements as docs show.
6191433 compilation fails on HP-UX pluginsign fails
6194664 JES3 build07 - i18n - Error dialog without text for creating role members
6198506 replication halts and restarts with "send update now".
6226138 PATCHZIP: Cannot upgrade instances which were created during JES2-level era, on Win.
6226163 PATCHZIP: idsktune is not in the same directory where the patchzip install script is extracted.
6226186 PATCHZIP: Unnecessary perl messages are displayed during installation.
 
(from 118080-03)
5064639 CAnnot directoryserver unconfigure : "Error UnConfiguration of the server(s) fai
5107970 log expiration doesn't work if only logexpirationtimeunit is specified explicitl
6181060 Proxied operations use wrong access control cache
6181168 Upgrade overwrites certmap.conf
6181237 WARNING<10288> Replay of an already seen operation too often in error log
6181241 600 changes duplicated in retrochangelog on a consumer after killing/restarting it
6182534 after downgrade from DS5.2 patch3 to DS5.2 patch 2, directoryserver command is broken
6185914 Bad description for package SUNWasvmn
6189447 Failed to upgrade AS: maybe due to env
6192088 insync crash if Num Replicas Defined in Supplier > Num Replicas Defined in Consumer
6198596 JES3_Build8: SUNWdsvmn and SUNWasvmn are installed under / with JES installer
6203788 Upgrade to 5.2 patch 3 : schema not upgraded with new retrochangelog attributes
 
(from 118080-02)
5005446 directoryserver monitor Command Does Not Work on Non-Active Nodes in a Cluster
5019492 insync: Does not detect when replication agreement enabled
5064553 Binary attribute values are not encrypted with attr encrpytion
5070064 PATCHZIP: Can not continue installation if admin password is longer than 8
5072471 Patchzip : bad exmaple path /var/sun/mps - should be /var/Sun/mps
5072473 Patchzip : install.sh should be executable
5084650 SSL problem (hangs) when using with Sun Directory Server 5.2 ( 5.1SP2 )
5100350 Linux: directoryserver configure wants /bin/java while /usr/java/j2re1.4.2_05/bi
5101624 ERROR<8324> Consumer detected a connection timeout and decided to close it
5110002 MMR-4: crash after conflicting moddn operations
6174980 slapd memory leaks during replication if query ds5ReplicaPendingChangesCount
6175402 PATCHZIP: patchzip does not replace start-admin
6175461 Deadlock between replica and connection locks
6175580 Can't configure DS on the latest solaris 10 Build (68)
6181122 Need to align the number of object entries with the number of locks in the server
6182106 SJES3_b6a: Last item in Directory tab is sometimes garbled
6182428 Crash in acl_check_mods.
6189349 directoryserver saveconfig option does not take account of sub-entries and operational attributes
 
(from 118080-01)
4703823 replication tools utilities should have a timeout parameter
4705238 Typedown menus don't  type down to attributes
4834633 SolPkg: DS Unconfiguration - Wrong error message
4859217 Multiple password changes can lead to clear-text password in the directory serve
4866642 Problem handling blank for ldap search on telephonenumber
4870419 noticable memory growth in directory server when running for more than 24 hours
4917152 chaining downcasts DNs
4943244 l10n;ja: mistranslation in console message
4971685 Highlighted line in "Entry caches" list box becomes invisible
4971699 SSL won't start for a DS with the instance name "test-cert"
4973380 hang (deadlock) while VLV search and ADD operation (VLV update)
4976129 nsslapd-XXXXXXlog-logmaxdiskspace does not work over 2 GB
4976981 retrochangelog trimming crash
4977320 Must Re-Initialize the Consumer Twice After Modifying Attributes Replicated by F
4987124 uid uniqueness not enforced
4992117 Option "Custom Editor" not available after modification of user in console
4993755 few occurences of "Sun ONE" in the OLH : Help -> Contents page
4993766 Double popup error windows when Remove Server that was already rm -rf
5001773 Cannot create instance 'already in use' while no instance exist
5002960 "password is expiring on consumer in  d seconds." message reported in
5006180 After DS 5.2 uninstall, RtiDSMngmnt.html is no more part of DS 5.1
5006198 Enourmous replication delays in 4-way MMR (DaimlerChrysler)
5009329 Restart slapd from console takes too long (2+ minutes) if slapd not running
5010313 DS 5.2. db2ldif -r removes the guardian file.
5011670 Improvement of 4819710 ( nsslapd-binary-mode ) feature
5025571 JES2_b07a: Show Inactivated Roles throw exception when user is not logged
5025703 Console forgets to initialize passwordCheckSyntax and passwordRootdnMayBypassM
5025708 DS calls exit() from acllas__user_ismember_of_group() after 4 gig realloc
5027187 ACL doesn't work as expected if nestead group is specfied as groupdn
5029020 ds5ReplicaTransportWindowSize limit: 1000 in console/doc, 65000 in server
5030511 Customer's ns-slapd crashing at startup in ACI code
5033621 Unable to configure the Directory Server on Linux 2.1
5033648 Crash (memory corruption ?) when reading the replication agreement
5033860 JES2_b07a: bad layout of Construct LDAP URL window
5035339 idsktune 12-DEC-2003 from DS 5.2 patch2 build10 wrongly reports missing patches
5036033 patchrm 115614-10 error on cluster : /jars/ds522*.jar: No such file or directory
5036063 Schema Replication can miss changes
5039753 Need to use latest db32 build to FIX hang problem
5039922 Missing entries in the left pane when sorting is enabled.
5040313 need to use libsmime3.so instead of libpkcs7.a
5040489 Directory server crash -- IDSync plugin calls internal MOD with NULL connection
5040955 DS should not use CERT_DB_FILE_VERSION and PRIVATE_KEY_DB_FILE_VERSION macros
5045670 need to remove unwanted help files from solaris packages
5046748 Updating index crash when no keys are returned
5050272 DS5.2: server crashes in certain request with DsmlModify
5052660 PTA plugin : failover to a second running server fails
5053672 problem in creating subsuffix with cloning indexe configuration
5054014 Slow import with complex DIT
5056586 console removes attributes with subtype (binary, lang) for any add or remove of
5057348 JES2_b11b:l10n: Not translated string when overwriting data in the suffix.
5057383 Inconsistency in Replicated Data between Master and Consumer with DS 5.2hf1
5059653 LINUX JES2_b11: Memory Leak When Using Portal Server
5061279 replication breaks when conflict between modrdn and delete attribute
5061313 Changing Directory Manager password through console shows passwd clear text in a
5062657 MODRDN of an attribute with syntax 1.3.6.1.4.1.1466.115.121.1.26 is broken
5062658 RFE: adding call to integrate command during RPM builds
5064009 Substring searches very slow/Linux crash
5064543 schema integrity with cached entries
5064567 ACIs broken if sizelimit hit
5065161 P2/Search Performance Degradation in DS52HF1 when search conducted against non-e
5067921 memory leak in DS using proxy auth
5068403 Missing link on perl binary
5068523 Directory Server 5.2 HF1 crashes when both modifying a password and deleting pas
5068847 server will crash in specific search during adding sub-suffix
5068924 insync hanging if one of the server is hanging
5069432 RetroCL: No change logged (changeIsReplFixupOp=TRUE ) after naming conflict
5071022 Replication halts but restart after using "Send updates now".
5071401 ip test in bind rule not evaluated correctly when connection is SSL (Windows onl
5071499 Crash on a master after a modrdn operation
5071534 Linux - nss version is 3.3.10 but should be 3.9.2 or 3.9.3
5071543 moddn : server crashes when doing successively several modrdn
5071555 can't stop or restart Directory Server from the console
5071675 DS5.1sp3: unable to see non-default log on windows via console
5071835 Err log refer 5.2patch2 - should be 5.2patch3
5071900 MMR4 + retrocl: crash in get_replica_id
5072460 moddn changes target aci upper caracters to lower caracters
5073261 DS Connection is downed for DS52HF1
5073482 DS 5.2 Dir Console - database not disabled while removing suffix
5074198 High CPU consumption if DS run out of FD on Windows
5074349 Different behaviour between master and consumer when expanding super objectclass
5074773 DS is not stopped during RPM upgrade
5075348 SolPkg: DS 5.2 patch 3 should obsolete DS JES2 patch
5075429 moddn : export & re-imported the ldif file failed in specific case
5077081 DS cannot read cert8.db on RHAS2.1
5077289 Once the log level has been raised it cannot be lowered.
5077789 RCL's deletedentryattr feature does not work for binary attributes
5078878 No patch available on Linux
5079445 Bad dependancies of SUNWsaslx on Sol10
5079478 DS config on linux failed.
5079607 Check presence of SUNljdk in directoryserver configure
5080762 SUNWdsha installation fails
5083577 DS 5.2, Console export subtree excludes subsuffixes
5084464 DS crash when runnning multiple import tasks
5084881 directory [SERVERROOT]/shared/lib is empty
5086599 JES3-Build3: NPE when installing AdminServer in CLI
5089462 Bogus directorysnmp script in sbin on Linux
5089910 RetroCL doesn't work with multiple suffixes
5091804 Migration : impossible to migrate from 5.1 to 5.2 patch3
5091823 CLEANRUV task does not remove RUV with Read-Only replica ID ( 65535 ).
5093189 Error of definition in acl.h of ACI_AUTHMETHOD_RULE and ACI_DAYOFWEEK_RULE
5093994 directory server fails to upgrade when spaces in server root path on windows
5095587 high entry cache can slow down post processing with numsubordinates
5095911 SPARC: Directory Server is not stopped after installed by JES installer
5096607 MMR: Huge memory leak on masters
5097503 agt_get_ip_by_name() in nsldapagt.c doesn't work
5098456 entrycmp usage lines print a non-existing option
5099386 Hang of LDAP client due to server lock in mappingtree
5099389 directoryserver -g must not display private interface
5099530 Help Error when selecting Help in DS console
5100886 Hang of ns-slapd during modrdn
5101683 Suppress the warning message which pops up after client control limits modificat
5102471 Many errors "ldap_explode_rdn failed" after upgrade to 5.2 Patch 2
5102792 Update performance drop for 2 threads vs 1 thread
5103254 Significant memory leak on retrochangelog
5103332 In some cases console performs two renaming to do the rename of the entry
5103659 MMR + moddn (subtree rename): memory leak
5104945 Race conditions in DSE backend
5105438 Impossible to modify an entry just after modifying its rdn
5106012 Linux: rpm sun-directory-server did not work, made Sep 22th nightly build failed
5106072 moddn of few entries is very slow when there are lots of entries in the backend
5106684 patchRpmDirectory  overwrites rpm done by rpmpkgDirectory
5106746 Cannot start ns-slapd 64b on Solaris
5107507 server crashes when moving an entry that has tombstones as children
5108629 moddn :  ref. integrity plugin adds space caracters on its modified attribute va
5108631 Tombstone entries part of the list of entryid to be removed from the ancestorid
5108714 moddn : can not enable full modrdn operation on specified suffixed
5109252 JES3_0929_nightly: Pronunciation does not appear for Japanese
5109303 DSML Client Auth method update modifies the wrong attribute under cn=config
5109510 Console Error When Modifying Directory Manager Password if Password Policy Is Defined
5110024 Regression in the repl conflict testsuite
6174156 MMR2: Crash after conflict between moddn subtree and add
6174274 error in prepatch script when instances are configured with an other name than the default
6174351 Update : Error during directory server patch installation
6174358 Cannot install patch 115614-16 on s8s - prepatch: /shared/bin: does not exist
6175447 Error while upgrading AS with SolPatch 115610-14
6178507 Cannot upgrade if there is more than one instance in serverroot
6179285 unable to update entry via console if RDN contains comma
6179861 Improve error message when exceeding resource limit while doing a moddn
6183411 DS 5.2p2: crashes slapd on consumers during schema replication if legacy replication enabled

Patch Installation Instructions:
--------------------------------
 
 
Upgrading Directory Server on Linux
 
    You upgrade Directory Server by applying patches, and synchronizing 
    settings with the configuration directory server.
 
    This readme provides instructions for upgrading Directory Server 
    from Sun Java Enterprise System 2004Q2 and 2005Q1 to 2005Q4. For
    more information on upgrading from prior versions, see the Java 
    Enterprise System Upgrade and Migration Guide.
 
    ------------------------------------------------------------------------
 
    Note
 
    1.  Directory Server belongs to a group of products sharing the same 
    Administration Server. You must patch all of these products at 
    the same time.
 
    2.  You cannot upgrade Directory Server by applying patches unless 
    Directory Server was installed on a Linux system with RPM packages.
 
    3.  When you apply patches, you upgrade the SSL certificate database.  
    If you subsequently decide to back out the patches and you have changed 
    the content of the certificate database, you must manually replay the 
    changes after backing out the patches. Consider performing a backup 
    before you back out the patches.
 
    When you backout patches after having changed the SSL certificate 
    database, you cannot start in SSL mode. To workaround this problem, 
    turn off SSL mode, restart Directory Server, reinstall the
    certificate, and then enable SSL mode.
 
    4.  Directory Server, Directory Proxy Server, Messaging Server,
    Calendar Server, and the associated Administration Server
    must run as the same user and group. That is, they must run with
    the same UID and GID. 
 
    5.  If you are planning to upgrade from Linux RH AS 2.1 to Linux RH AS 3, 
    you must upgrade the Sun Java Enterprise System component products 
    before you upgrade Linux.
 
    6.  In this procedure <oldversion> signifies the RPM for Directory Server, 
    Directory Proxy Server, and Administration Server 5.2 2004Q2
 
    7. This procedure includes steps for Directory Proxy Server, Calendar 
    Server, and Messaging Server. If you are not using a component product, 
    ignore the steps related to that product.
 
 
    ------------------------------------------------------------------------
 
    Caution
 
    Only upgrade from Sun Java Enterprise System 5.2 2004Q2 to Sun Java 
    Enterprise System 5.2 2005Q4 on Linux if you are sure you will not want
    to back out later. It is not possible to back out to Sun Java Enterprise
    System 5.2 2004Q2 on Linux.
 
    ------------------------------------------------------------------------
 
 
              To Upgrade Directory Server on Linux  
 
 
 
       1. Obtain the RPMs for your platform and installed server
          component products.
 
              * Shared components: 
 
                ICU:        sun-icu-2.1-6.i386.rpm (or higher)
                NSPR:       sun-nspr-4.5.1-2.i386.rpm (or higher)
                NSS:        sun-nss-3.9.4-1.i386.rpm (or higher)
                JSS:        sun-jss-4.0-5.i386.rpm (or higher)
                SASL:       sun-sasl-2.02-2.i386.rpm (or higher)
                LDAP-C-SDK: sun-ldapcsdk-5.12-3.i386.rpm (or higher)
                LDAP-JDK:   sun-ljdk-4.17-3.i386.rpm (or higher)
 
              * Directory Server: 118080-11:
                   Product:   sun-directory-server-5.2-25.i386.rpm
                   Man pages: sun-directory-server-man-5.2-9.i386.rpm
 
              * Administration Server: 118079-10:
                   Product:   sun-admin-server-5.2-18.i386.rpm
                   Console:   sun-server-console-5.2-18.i386.rpm
                   Man pages: sun-admin-server-man-5.2-8.i386.rpm
 
              * Calendar Server: 117851-14, 117852-14 (or higher)
 
              * Directory Proxy Server: 118096-07 (or higher):
                   Product: sun-directory-proxy-server-5.2-13.i386.rpm (or higher)
 
              * Messaging Server: 118209-01, 117786-03 (or higher)
 
 
       2. Stop the console if it is running.
 
 
       3. Stop all servers in this order:
 
             1. Calendar Server
             2. Messaging Server
             3. Directory Proxy Server
             4. Administration Server 
             5. Directory Server
 
 
       4. Apply each RPM for the shared components.
          See the shared component patch readme for the procedure. 
 
 
       5.  Apply each RPM for the Administration Server component.
           See the Administration Server component patch readme 
           for the procedure. 
 
 
       6.  Apply each RPM for the the Directory Server component.
 
 
           a. If you are running Directory Server standalone, without 
              Administration Server, you must upgrade the 
              partial Administration Server that was installed during 
              the initial Directory Server installation. 
 
              To do this, apply the Administration Server RPM: 
 
              # rpm -Fvh sun-admin-server-5.2-18.i386.rpm
 
           b. Apply the RPM for the Directory Server product.
 
                 1. Apply the RPM as follows:
                    # rpm -Fvh sun-directory-server-5.2-25.i386.rpm
 
                    If your Directory Server was configured previously, the 
                    following error will be returned:
 
                    error: execution of  preun scriptlet from 
                    sun-directory-server-5.2-<oldversion> failed, exit status 1
 
                    If this is the case, remove the old version of the RPM 
                    using the --noscripts option, as follows:
 
                    # rpm -e --noscripts sun-directory-server-5.2-<oldversion>
 
                 2. If your Directory Server was configured previously, ensure 
                    that the configuration directory server is running, and then 
                    synchronize the upgraded settings with the configuration 
                    directory server, by using the command:
 
                    # /opt/sun/sbin/directoryserver sync-cds
 
                 3. If the configuration directory server is local, stop the 
                    configuration directory server.
 
                 4. Confirm that the upgrade was successful:
                    # rpm -q sun-directory-server
                    The new version number of the RPM should be returned.
 
           c. Install the RPM for the Directory Server man pages:
              # rpm -ivh sun-directory-server-man-5.2-9.i386.rpm 
 
 
       7.  Apply the RPM for the Directory Proxy Server component. 
           See the Directory Proxy Server component patch readme 
           for the procedure. 
 
 
       8.  Apply the Messaging Server component RPM. 
           See the Messaging Server component patch readme for the procedure. 
 
 
       9.  Apply the Calendar Server component RPM. 
           See the Calendar Server component patch readme for the procedure.   
 
 
       10. Restart the servers in this order:  
             1. Directory Server
             2. Administration Server
             3. Directory Proxy Server
             4. Messaging Server
             5. Calendar Server
 
 
       11. If you wish to upgrade from Linux RH AS 2.1 to Linux RH AS 3, 
           do so now. For information, see the Linux documentation.
 
 
 
    ------------------------------------------------------------------------
 
 
 
                  Troubleshooting
 
 
        * If after applying the patches, you still see a Sun ONE-branded
          console rather than a Sun Java System-branded console, verify
          that you effectively synchronized with the configuration
          directory server.
 
 
    ------------------------------------------------------------------------

Special Install Instructions:
----------------------------------

None.

README -- Last modified date:  Wednesday, September 28, 2005

