Patch-ID# 103178-09 Keywords: security y2000 pam_pwmgt.so.1 nispasswd cred domain su passwd Synopsis: SunOS 5.5: pam security patch Date: Oct/06/98 Solaris Release: 2.5 SunOS Release: 5.5 Unbundled Product: Unbundled Release: Xref: This patch available for x86 as patch 103179 Topic: SunOS 5.5: pam security patch NOTE: Refer to Special Install Instructions section for IMPORTANT specific information on this patch. BugId's fixed with this patch: 1151955 1218457 1234925 1235379 1236638 1253949 4010565 4018347 4030217 Changes incorporated in this version: 1253949 Relevant Architectures: sparc Patches accumulated and obsoleted by this patch: Patches which conflict with this patch: Patches required with this patch: 104410-02 (or newer) Obsoleted by: Files included with this patch: /etc/lib/pam_authen.so.1 /etc/lib/pam_entry.so.1 /etc/lib/pam_pwmgt.so.1 /usr/lib/security/pam_authen.so.1 /usr/lib/security/pam_entry.so.1 /usr/lib/security/pam_pwmgt.so.1 Problem Description: 1253949 In Solaris NIS, root must know user's old passwd (from 103178-08) 1234925 "passwd root" core dumps after the fix for 1218457 was applied. (from 103178-07) 1236638 *passwd* shadow file occasionally gets deleted in large user environment (from 103178-06) 1235379 nispasswd -D domain user fails. (from 103178-05) 4010565 su can be interrupted by and not logged in /var/adm/log (from 103178-04) 4030217 sa_get_authtokattr() error message prints /100 for /00 in year 2000 (from 103178-03) 4018347 pam security problem (from 103178-02) 1151955 The PASSLENGTH attribute in /etc/default/passwd doesn't appear to work (from 103178-01) 1218457 nispasswd fails if the LOCAL cred points to another domain Patch Installation Instructions: -------------------------------- Refer to the Install.info file within the patch for instructions on using the generic 'installpatch' and 'backoutpatch' scripts provided with each patch. Any other special or non-generic installation instructions should be described below. Special Install Instructions: ----------------------------- NOTE: To get the complete fix for bug 1253949 (In Solaris NIS, root must know user's old passwd), one must have the NSKit 1.2 patch 103053-05 (or newer).