Patch-ID# 113859-03 Keywords: security directory server service pack 3 Synopsis: SunOS 5.9: Sun ONE Directory Server 5.1 patch Date: Dec/24/2003 Install Requirements: None Solaris Release: 9 SunOS Release: 5.9 Unbundled Product: Sun ONE Directory Server Unbundled Release: 5.1 Xref: This patch available for x86 as patch 114273 NOTE: Refer to Special Install Instructions section for specific information on this patch. Topic: Relevant Architectures: sparc BugId's fixed with this patch: 4527608 4529402 4530466 4530509 4532320 4532757 4533706 4535845 4537169 4538268 4550044 4589224 4592931 4614559 4615165 4616579 4617085 4617521 4619976 4620546 4621920 4622371 4623119 4623199 4623308 4624693 4627760 4628444 4630124 4639310 4639408 4639560 4640273 4640724 4643122 4645544 4645887 4646301 4646350 4646392 4649319 4649615 4651972 4652031 4652859 4653016 4656657 4656846 4658787 4658810 4663658 4665564 4665571 4668480 4669525 4669879 4671360 4672889 4672914 4672960 4674387 4675387 4682961 4683476 4684519 4686213 4687038 4689805 4691101 4692956 4695152 4697500 4704039 4704635 4705641 4707395 4708296 4709128 4711201 4711202 4713256 4714196 4714358 4715065 4715955 4716340 4716745 4717121 4719564 4722987 4723630 4732352 4735062 4735919 4737978 4738221 4738639 4742083 4742450 4743633 4743796 4748399 4749234 4751092 4753087 4754469 4754595 4756215 4758387 4759670 4761010 4765575 4767182 4773751 4773823 4773920 4776001 4777358 4778128 4778154 4778334 4780230 4780807 4781823 4783910 4784168 4786154 4786475 4786504 4786547 4787220 4789601 4791877 4795280 4797685 4802963 4805734 4807803 4809504 4809846 4813355 4813998 4815733 4817676 4818005 4819399 4819710 4820037 4821198 4821289 4824825 4826265 4826843 4826863 4827569 4829894 4830417 4834508 4836446 4836491 4838624 4838863 4840786 4840960 4842620 4846165 4846332 4848325 4850717 4850722 4851870 4854827 4854898 4856290 4856329 4856331 4857614 4863001 4863706 4863943 4864622 4865435 4865525 4865653 4865859 4866060 4867299 4880352 4881181 4881653 4883250 4884416 4885686 4886421 4891116 4894995 4897873 4898449 4899320 4903397 4904414 4908443 4911023 4911678 4911711 4912539 4912664 4913176 4913984 4916248 4918912 4920323 4921426 4922595 4925223 4928129 4929089 4930098 4932782 4935077 4938445 4942664 4943975 4945548 4946487 4948365 4953750 4957279 Changes incorporated in this version: 4537169 4649319 4671360 4686213 4716745 4751092 4773920 4780807 4784168 4805734 4807803 4809846 4813355 4813998 4815733 4817676 4818005 4819399 4819710 4820037 4821198 4821289 4824825 4826265 4826843 4826863 4829894 4830417 4834508 4836446 4836491 4838624 4838863 4840786 4840960 4842620 4846165 4846332 4848325 4850717 4850722 4851870 4854827 4854898 4856290 4856329 4856331 4857614 4863001 4863706 4863943 4864622 4865435 4865525 4865653 4865859 4866060 4867299 4880352 4881181 4881653 4883250 4884416 4885686 4886421 4891116 4894995 4897873 4898449 4899320 4903397 4904414 4908443 4911023 4911678 4911711 4912539 4912664 4913176 4913984 4916248 4918912 4920323 4921426 4922595 4925223 4928129 4929089 4930098 4932782 4935077 4938445 4942664 4943975 4945548 4946487 4948365 4953750 4957279 Patches accumulated and obsoleted by this patch: Patches which conflict with this patch: Patches required with this patch: Obsoleted by: Files included with this patch: /usr/iplanet/admserv5.1/admin-serv/config/jvm12.conf /usr/iplanet/admserv5.1/admserv /usr/iplanet/admserv5.1/bin/admin/admconfig /usr/iplanet/admserv5.1/bin/admin/admin/bin/Cgi.pm /usr/iplanet/admserv5.1/bin/admin/admin/bin/ReadLog /usr/iplanet/admserv5.1/bin/admin/admin/bin/admpw /usr/iplanet/admserv5.1/bin/admin/admin/bin/config /usr/iplanet/admserv5.1/bin/admin/admin/bin/dsconfig /usr/iplanet/admserv5.1/bin/admin/admin/bin/htmladmin /usr/iplanet/admserv5.1/bin/admin/admin/bin/listOldSrvs /usr/iplanet/admserv5.1/bin/admin/admin/bin/mergeConfig /usr/iplanet/admserv5.1/bin/admin/admin/bin/migrateConfig /usr/iplanet/admserv5.1/bin/admin/admin/bin/restartsrv /usr/iplanet/admserv5.1/bin/admin/admin/bin/sec-activate /usr/iplanet/admserv5.1/bin/admin/admin/bin/security /usr/iplanet/admserv5.1/bin/admin/admin/bin/snmpconf /usr/iplanet/admserv5.1/bin/admin/admin/bin/snmpmctl /usr/iplanet/admserv5.1/bin/admin/admin/bin/start_config_ds /usr/iplanet/admserv5.1/bin/admin/admin/bin/statpingserv /usr/iplanet/admserv5.1/bin/admin/admin/bin/statusping /usr/iplanet/admserv5.1/bin/admin/admin/bin/stopsrv /usr/iplanet/admserv5.1/bin/admin/admin/bin/ugdsconfig /usr/iplanet/admserv5.1/bin/admin/admin/bin/userauth /usr/iplanet/admserv5.1/bin/admin/admin/bin/userinfo /usr/iplanet/admserv5.1/bin/admin/admin/bin/viewdata /usr/iplanet/admserv5.1/bin/admin/admin/bin/viewlog /usr/iplanet/admserv5.1/bin/admin/ns-config /usr/iplanet/admserv5.1/bin/admin/ns-remove /usr/iplanet/admserv5.1/bin/admin/ns-update /usr/iplanet/admserv5.1/bin/https/bin/ns-httpd /usr/iplanet/admserv5.1/bin/https/bin/uxwdog /usr/iplanet/admserv5.1/bin/https/jar/NSJavaMiscUtil.jar /usr/iplanet/admserv5.1/bin/https/jar/NSJavaUtil.jar /usr/iplanet/admserv5.1/bin/https/jar/NSServletLayer.jar /usr/iplanet/admserv5.1/bin/https/jar/jspengine.jar /usr/iplanet/admserv5.1/bin/https/jar/servlet-2.3-filters-api.jar /usr/iplanet/admserv5.1/bin/https/jar/servlet-2.3-session-activation-api.jar /usr/iplanet/admserv5.1/bin/https/jar/servlet.jar /usr/iplanet/admserv5.1/bin/https/lib/libAdmservPlugin.so /usr/iplanet/admserv5.1/bin/https/lib/libConfigFile.so /usr/iplanet/admserv5.1/bin/https/lib/libMMapSession.so /usr/iplanet/admserv5.1/bin/https/lib/libNSJavaMiscUtil.so /usr/iplanet/admserv5.1/bin/https/lib/libNSJavaUtil.so /usr/iplanet/admserv5.1/bin/https/lib/libNSJvmControl.so /usr/iplanet/admserv5.1/bin/https/lib/libNSServletLayer.so /usr/iplanet/admserv5.1/bin/https/lib/libNSServletPlugin.so /usr/iplanet/admserv5.1/bin/https/lib/libShtml.so /usr/iplanet/admserv5.1/bin/https/lib/libatomic.so /usr/iplanet/admserv5.1/bin/https/lib/libdirmon4.so /usr/iplanet/admserv5.1/bin/https/lib/libgetprop.so /usr/iplanet/admserv5.1/bin/https/lib/liblibdbm.so /usr/iplanet/admserv5.1/bin/https/lib/liblibsi18n.so /usr/iplanet/admserv5.1/bin/https/lib/libns-httpd40.so /usr/iplanet/admserv5.1/bin/https/lib/libnscpVer.so /usr/iplanet/admserv5.1/bin/https/lib/libnsfc.so /usr/iplanet/admserv5.1/bin/https/lib/libnsprwrap.so /usr/iplanet/admserv5.1/bin/https/lib/libnstime.so /usr/iplanet/admserv5.1/bin/https/lib/libnstp.so /usr/iplanet/admserv5.1/bin/https/lib/libregex.so /usr/iplanet/admserv5.1/bin/https/lib/libresonate.so /usr/iplanet/admserv5.1/bin/https/lib/libsupport.so /usr/iplanet/admserv5.1/bin/https/lib/libxerces-c.so /usr/iplanet/admserv5.1/dist/download /usr/iplanet/admserv5.1/plugins/snmp/magt/magt /usr/iplanet/admserv5.1/plugins/snmp/sagt/sagt /usr/iplanet/admserv5.1/setup/admin/admin.inf /usr/iplanet/console5.1/bin/base/console-update /usr/iplanet/console5.1/java/base.jar /usr/iplanet/console5.1/java/caplugin/default.jar /usr/iplanet/console5.1/java/jars/admserv51.jar /usr/iplanet/console5.1/java/jars/admserv51_en.jar /usr/iplanet/console5.1/java/jars/ds51.jar /usr/iplanet/console5.1/java/jars/ds51_en.jar /usr/iplanet/console5.1/java/jss311.jar /usr/iplanet/console5.1/java/ldapjdk.jar /usr/iplanet/console5.1/java/mcc51.jar /usr/iplanet/console5.1/java/mcc51_en.jar /usr/iplanet/console5.1/java/nmclf51.jar /usr/iplanet/console5.1/java/nmclf51_en.jar /usr/iplanet/console5.1/java/patch/console42.jar /usr/iplanet/console5.1/java/patch/patch-admserv40.jar /usr/iplanet/console5.1/java/patch/patch-cert40.jar /usr/iplanet/console5.1/java/patch/patch-cert42.jar /usr/iplanet/console5.1/java/patch/patch-ds40.jar /usr/iplanet/console5.1/java/patch/patch-ds41.jar /usr/iplanet/console5.1/java/patch/patch-msgadmin40.jar /usr/iplanet/console5.1/java/patch/patch-msgadmin41.jar /usr/iplanet/console5.1/java/patch/patch-msgadmin50.jar /usr/iplanet/console5.1/startconsole /usr/iplanet/ds5/bin/slapd/admin/bin/Base.pm /usr/iplanet/ds5/bin/slapd/admin/bin/Cgi.pm /usr/iplanet/ds5/bin/slapd/admin/bin/DSAdmin.pm /usr/iplanet/ds5/bin/slapd/admin/bin/DSAdmin.so /usr/iplanet/ds5/bin/slapd/admin/bin/Inf.pm /usr/iplanet/ds5/bin/slapd/admin/bin/Install.pl /usr/iplanet/ds5/bin/slapd/admin/bin/addindex /usr/iplanet/ds5/bin/slapd/admin/bin/ds_bak2db /usr/iplanet/ds5/bin/slapd/admin/bin/ds_create /usr/iplanet/ds5/bin/slapd/admin/bin/ds_db2bak /usr/iplanet/ds5/bin/slapd/admin/bin/ds_db2ldif /usr/iplanet/ds5/bin/slapd/admin/bin/ds_ldif2db /usr/iplanet/ds5/bin/slapd/admin/bin/ds_listdb /usr/iplanet/ds5/bin/slapd/admin/bin/ds_remove /usr/iplanet/ds5/bin/slapd/admin/bin/ds_rmdb /usr/iplanet/ds5/bin/slapd/admin/bin/ds_snmpctrl /usr/iplanet/ds5/bin/slapd/admin/bin/ds_viewlog.pl /usr/iplanet/ds5/bin/slapd/admin/bin/getConfigInfo /usr/iplanet/ds5/bin/slapd/admin/bin/migrateInstance /usr/iplanet/ds5/bin/slapd/admin/bin/migrateLocalDB /usr/iplanet/ds5/bin/slapd/admin/bin/migratePwdFile /usr/iplanet/ds5/bin/slapd/admin/bin/migrateTo4 /usr/iplanet/ds5/bin/slapd/admin/bin/migratecred /usr/iplanet/ds5/bin/slapd/admin/bin/ns-config /usr/iplanet/ds5/bin/slapd/admin/bin/ns-keygen /usr/iplanet/ds5/bin/slapd/admin/bin/ns-update /usr/iplanet/ds5/bin/slapd/admin/bin/restart /usr/iplanet/ds5/bin/slapd/admin/bin/shutdown /usr/iplanet/ds5/bin/slapd/admin/bin/start /usr/iplanet/ds5/bin/slapd/admin/bin/uname.lib /usr/iplanet/ds5/bin/slapd/admin/bin/uninstall /usr/iplanet/ds5/bin/slapd/admin/bin/vlvindex /usr/iplanet/ds5/bin/slapd/admin/scripts/template-bak2db.pl /usr/iplanet/ds5/bin/slapd/admin/scripts/template-db2bak.pl /usr/iplanet/ds5/bin/slapd/admin/scripts/template-db2index.pl /usr/iplanet/ds5/bin/slapd/admin/scripts/template-db2ldif.pl /usr/iplanet/ds5/bin/slapd/admin/scripts/template-ldif2db.pl /usr/iplanet/ds5/bin/slapd/admin/scripts/template-ns-accountstatus.pl /usr/iplanet/ds5/bin/slapd/admin/scripts/template-ns-activate.pl /usr/iplanet/ds5/bin/slapd/admin/scripts/template-ns-inactivate.pl /usr/iplanet/ds5/bin/slapd/install/ldif/template.ldif /usr/iplanet/ds5/bin/slapd/install/schema/30ns-common.ldif /usr/iplanet/ds5/bin/slapd/lib/libds_admin.so /usr/iplanet/ds5/bin/slapd/lib/libns-dshttpd51.so /usr/iplanet/ds5/bin/slapd/server/idsktune /usr/iplanet/ds5/bin/slapd/server/keyupg /usr/iplanet/ds5/bin/slapd/server/ldif /usr/iplanet/ds5/bin/slapd/server/mmldif /usr/iplanet/ds5/bin/slapd/server/ns-ldapagt /usr/iplanet/ds5/bin/slapd/server/ns-slapd /usr/iplanet/ds5/bin/slapd/server/pwdhash /usr/iplanet/ds5/lib/acl-plugin.so /usr/iplanet/ds5/lib/chainingdb-plugin.so /usr/iplanet/ds5/lib/cos-plugin.so /usr/iplanet/ds5/lib/des-plugin.so /usr/iplanet/ds5/lib/libadminutil51.so /usr/iplanet/ds5/lib/libadmsslutil51.so /usr/iplanet/ds5/lib/libback-ldbm.so /usr/iplanet/ds5/lib/libfreebl_hybrid_3.so /usr/iplanet/ds5/lib/libfreebl_pure32_3.so /usr/iplanet/ds5/lib/liblcoll.so /usr/iplanet/ds5/lib/libldap50.so /usr/iplanet/ds5/lib/libnss3.so /usr/iplanet/ds5/lib/libnssckbi.so /usr/iplanet/ds5/lib/libprldap50.so /usr/iplanet/ds5/lib/libsh_stub.so /usr/iplanet/ds5/lib/libslapd.so /usr/iplanet/ds5/lib/libsmime3.so /usr/iplanet/ds5/lib/libssl3.so /usr/iplanet/ds5/lib/libssldap50.so /usr/iplanet/ds5/lib/passthru-plugin.so /usr/iplanet/ds5/lib/pwdstorage-plugin.so /usr/iplanet/ds5/lib/referint-plugin.so /usr/iplanet/ds5/lib/replication-plugin.so /usr/iplanet/ds5/lib/retrocl-plugin.so /usr/iplanet/ds5/lib/roles-plugin.so /usr/iplanet/ds5/lib/statechange-plugin.so /usr/iplanet/ds5/lib/syntax-plugin.so /usr/iplanet/ds5/lib/uid-plugin.so /usr/iplanet/ds5/manual/help/help /usr/iplanet/ds5/plugins/slapd/slapi/examples/distrib/distrib.c /usr/iplanet/ds5/plugins/slapd/slapi/include/slapi-plugin.h /usr/iplanet/ds5/setup/setup /usr/iplanet/ds5/setup/slapd/examples/update_configDS.sh /usr/iplanet/ds5/setup/slapd/ns-config /usr/iplanet/ds5/setup/slapd/slapd.inf /usr/iplanet/ds5/shared/bin/NativeToAscii /usr/iplanet/ds5/shared/bin/admin_ip.pl /usr/iplanet/ds5/shared/bin/ldapdelete /usr/iplanet/ds5/shared/bin/ldapmodify /usr/iplanet/ds5/shared/bin/ldapsearch /usr/iplanet/ds5/shared/bin/modutil /usr/iplanet/ds5/startconsole /usr/iplanet/ds5/uninstall /usr/iplanet/jss3.1/lib/jss/libjss3.so /usr/iplanet/nls3.1/lib/libnsbrk31.so /usr/iplanet/nls3.1/lib/libnscnv31.so /usr/iplanet/nls3.1/lib/libnscol31.so /usr/iplanet/nls3.1/lib/libnsfmt31.so /usr/iplanet/nls3.1/lib/libnsres31.so /usr/iplanet/nls3.1/lib/libnsuni31.so /usr/iplanet/nls3.1/lib/nls/conv31/libnscck31.so /usr/iplanet/nls3.1/lib/nls/conv31/libnsjpn31.so /usr/iplanet/nls3.1/lib/nls/conv31/libnssb31.so /usr/iplanet/nspr4.1.2/lib/libares3.so /usr/iplanet/nspr4.1.2/lib/libnspr4.so /usr/iplanet/nspr4.1.2/lib/libplc4.so /usr/iplanet/nspr4.1.2/lib/libplds4.so /usr/iplanet/nss3.3.1/lib/libfreebl_hybrid_3.so /usr/iplanet/nss3.3.1/lib/libfreebl_pure32_3.so /usr/iplanet/nss3.3.1/lib/libnss3.so /usr/iplanet/nss3.3.1/lib/libnssckbi.so /usr/iplanet/nss3.3.1/lib/libsmime3.so /usr/iplanet/nss3.3.1/lib/libssl3.so /usr/iplanet/perl5/lib/site/Mozilla/LDAP/API.pm /usr/iplanet/perl5/lib/site/Mozilla/LDAP/Conn.pm /usr/iplanet/perl5/lib/site/Mozilla/LDAP/Entry.pm /usr/iplanet/perl5/lib/site/Mozilla/LDAP/LDIF.pm /usr/iplanet/perl5/lib/site/Mozilla/LDAP/Utils.pm /usr/iplanet/perl5/lib/site/sun4-solaris/auto/Mozilla/LDAP/API/API.so /usr/sbin/directoryserver Problem Description: 4537169 problem with spaces and substring search filters 4649319 Connection handling memory leak on NT 4671360 core dump in connection_close_nolock on unbind 4686213 Number of passwds to remember in passwd history not working as expected. 4716745 Directory doesn't support files larger than 2 Gb 4751092 store becomes unavailable due to transaction id wrapping 4773920 Possible denial of service attack in WIN2k/NT connection handling 4780807 Working in MMR, modification of required attributes is not done properly. 4784168 error message in supplier 4805734 Memory leak in single Master Replication on consumer in DS 5.1 4807803 Memory leak 4809846 integrate some 5.1 acl fixes to 5.2 4813355 deleted values on consumers contains duplicates 4813998 Crash in replication due to modify with missing attribute name 4815733 Transaction logs aren't deleted anymore if you cancel db2bak 4817676 MMR causing High CPU utilization when changes are done only on one Master 4818005 core in cache_return when deleting entry 4819399 special chars are not allowed in userPassoword for admin entry 4819710 DS51 - ";binary" compatibility issue - ldap not handling the RFC1274 4820037 attribute modify-replace with no attribute/value has unexpected results 4821198 Server that gives out a referral in response to a MOD operation. 4821289 Invalid warnings are displayed about indexes fragmentation 4824825 error message with fix 4826265 Crash with persistant search. 4826843 audit log is not rotated as configured in specific case. 4826863 Changing LINUX LDAPSDK comp. version to include 4821283 and 4819452 4829894 DBVERSION and ancestorid.db3 files are left behind when deleting suffix 4830417 adding an entry crashes the server 4834508 Unable to use non-ascii characters in nsslapd-rootdn 4836446 inconsistent ruv information in database and changelog 4836491 ldif2db can crash with specific ldif file 4838624 After a online initialisation the consumer perf counters are not accessible 4838863 Slapd coredump issue related to the search plugin implementation 4840786 Deadlock in acl plugin (invalid 4795280 fix) 4840960 Console renders large list of managed roles very slowly 4842620 db2ldif miscounts # of entries 4846165 repeated modify request leads unproper replication replay 4846332 iDS 5.1 sp2: access log rotation not occuring upon restart of slapd 4848325 DN checking operation is not properly carried out by the Directory Server 4850717 After long run, DB is looping trickling => poor performance 4850722 replication sessions over SSL time out with slapd_poll(823) 4851870 bad ACI syntax crashes the Directory Server systemmatically 4854827 Issue in Administration Express 4854898 A Vulnerability in SSL/TLS implementations of ciphersuites that use block cipher 4856290 passwordretrycount fails to increment correctly in 5.x 4856329 tombstone entries not being purged 4856331 db2ldif -r used with -s or -n makes ns-slapd core 4857614 Product doesn't function as it used to in earlier release. 4863001 Replication stopped with systematic "Replication Busy" message. 4863706 slapd crashes in replicated operation 4863943 repl_set_mtn_referrals: could not set referrals for replica errors 4864622 Can't restore backup when retro changelog is activated 4865435 iDS 5.1 sp1: ns-slapd cores on parallel nationalization matching rule searches 4865525 ldapsearch -A fails against a chained database 4865653 During shutdown RI plugin can crash server if its processing deletes from ref lo 4865859 ns-slapd dumped core while creating large number Identity Server objects 4866060 Stored core under ALPS stress 4867299 triviality check skip when more than 1 attributes are modified 4880352 rootdn is shown always in lower case on iplanet console 4881181 Memory leak in search on suffix containing referral subsuffix 4881653 re-initialized master does not contain "start iteration" for all replicaIds 4883250 In certain condictions, binding with cert auth and simple can cause hang 4884416 ds 5.1 patch over-writes ds 5.2 package files 4885686 slapd can crash if entry is deleted and immediately added again 4886421 connections for persitent searches are not cleaned up on NT (5.1sp2) 4891116 Adding entry with "*" chars in DN field incur full scan of nstombstone 4894995 bak2db fails if target database directories are missing 4897873 MOD INT. op on retryCount coming from a passwd MOD MUST be flagged as UNCHAINABL 4898449 5.1sp2 + HF2 core dumps 4899320 ACI Errors After Migrating from 4.x to 5.x 4903397 ns-slapd coredump when importing corrupt LDIF 4904414 entry2str size with attr deletion CSNs 4908443 Password expiration doesn't completely prevent users from binding 4911023 Performance degradation on HPUX under heavy load 4911678 MMR4wway: Crash in ruv_destroy on solaris9 x86 4911711 Admin Express: ViewLog coredumps when non-default log directory configured 4912539 console process grows when adding users 4912664 All Attribute subtypes gets deleted from index if they have same values 4913176 ACIs prevent access to attributes when they should not. 4913984 aci evaluation on db link server fails to return just the DN attribute 4916248 Critical store error in shared folder stress test 4918912 DENY macro ACI applies to entries that it should not apply to 4920323 Several tomsbtone purging threads for the same replica running in parallel 4921426 Occasional imap errors occur. 4922595 Local aci doesn't work properly over a database link when specifing dn attribute 4925223 Directory Server hangs on _mutex_adaptive_lock in urp_delete_operation 4928129 nsslapd-accesslog-logminfreediskspace is not working as expected 4929089 S1DS Admin web interface installs without proper URL sanitation 4930098 PasswordRetryCount internal op being replicated (sometimes empty) 4932782 ns-accountstatus.pl fails if the suffix includes a whitespace 4935077 S1DS5.2 ldif2db -n userRoot -i test.ldif = Bus Error - core dumped 4938445 imsbackup cores on mboxlist_close 4942664 cannot malloc 0 bytes in some VLV search when there is empty attributes 4943975 for some searches the result message is logged twice 4945548 Memory leak on consumer after doing deletes on DS 5.1sp2 4946487 DS5.1 : deliver unstripped binaries on HP-UX platform 4948365 Crash in iDS 5.1 SP2 + HF3 in do_modify side effect of fix for 4867299 4953750 Recent fix still allows for DOS attack on Win2k ds 5.x using NSS_3341 4957279 5.1SP3 : include fix for security alert referenced in bug 4945089 (from 113859-02) 4827569 S9 patches rev 01 for 5.1 SP2 fail to pass PST testing (AutoIB) (from 113859-01) 4529402 htmladmin.exe crashes when trying to stop secure admin server using admin expres 4532320 OULU encode tests cause SNMP agent core dump 4532757 User can not bind after passwd expiration without warning message 4533706 Directory Server is down and slapd will not start. 4535845 Meta-directory UTC filters are not working and saved incorrectly 4550044 Attribute deletion doesn't work in cascaded replication 4589224 Three-digit Replica ID is not shown correctly. 4615165 actual created time is displayed in GMT although it's displayed as an JST. 4616579 Multiple replication does not work correctly on iDS5.0SP1 JA for Windows2000. 4617085 Replication slow and unstable 4617521 problem with the nsTombstone entries not being purged: "unable to delete" 4619976 Password Policy: trivialy checking doesn't work when adding user 4622371 Customer's modifications to operations do not show all entries 4623119 slapd crashe in replicated env during bulk import 4623199 Update the idsktune version in iDS5.0 SP2 / 5.1 SP1 / 5.2 4623308 Directory server inappropriately responds to an unbind 4624693 Case sensitive MODs are not stored correctly with MMR configured 4630124 COS plugin leaking memory 4639310 Retro changelog plugin logs operational attibutes to changelog 4639408 `Bind Timeout` parameter in chaining does not work as expected 4640724 Admin Server with WS60sp1 & Java 1.3 & iDAR 5.x Servlets inoperative 4643122 server can hang or crash 4645544 Bold characters display as square boxes with Japanese font. 4645887 passwordretrycount is not resetting to zero when a user correctly authenticate 4646301 Unable to modify hub/dedicated consumer replica via the console 4646392 Replication broken when migrating consumer from 5.0 to 5.0 SP1 or 5.1 4649615 Multiple Attribute uniqueness plugins force uniqueness BETWEEN each other. 4656846 time stamp in error log incorrect during shutdown 4658787 Cannot delete CA Certs from Console 4658810 Supplier fails to replicate when R.O. consumer have RUV Elt with ReplicaID=65535 4663658 Console 5.1 cannot access user data for remote 5.1 DS, SSL, SSL in console 4665564 ldapmodify should not interpret base64 encoded "<" as redirection arrow 4665571 updating an operational attribute halts replications between 4.x and 5.1 4668480 enable nsslapd-ds4-compatible-schema disables Console functionality 4672889 empty nsDS5ReplicaBindMethod in repl agreement causes core in extended op 4672914 Can not use '&' character into console's admin password 4672960 problem in handling turn back of system clock 4674387 directory server can crash in specific stress test scenario 4682961 mem leak in extended schema searches 4684519 distribution plugin chains database initialization 4687038 incorrect handling of spaces in dn components 4691101 improve replication monitoring 4692956 Updates for iDS51 SP1: new consoleSDK, new LIBPATH AIX/LINUX/OSF1 and NESCORE 4697500 Unable to install 5.1SP1 on the top of a 5.1 installation on HP-UX 4527608 Accounts cannot be unlocked on non-master 5.0 servers 4530466 running db2index.pl with '-w -' option on Solaris 9 does not work 4530509 indexes screen comes up blank (configuration, data, userRoot, Indexes tab) 4538268 HUB not on configDS machine is unmodifiable thru console 4592931 Default install parameter for "Number of file descriptors" is out of range 4614559 Console does not update modified/removed entry names 4620546 ns-slapd does not restart after a system crash (calloc 0 bytes) 4621920 Deeply nested filters will crash server 4627760 Referrals for modifing entries fail, due to the DN being trimmed at the space 4628444 Log files will not rotate properly in Directory 5.1 4639560 tombstone entries not deleted if one master never updated 4640273 iDS crashed during undeployment. Race condition when abandonning psearchs 4646350 Stopping iDS 5.0SP1 takes hours when Millions of users and replication agreement 4651972 ids5.1 error ` libdb: Lock table is out of available locks` 4652031 Getting error message: db error - 12 Not enough space 4652859 changelogmaxage doesn't work 4669879 ldif2db not applying default encoding to cleartext userPasswords from LDIF 4675387 Directory 5.1 Crashs within ruv_init_from_slapi_attr_and_check_purl 4689805 Replication doesn't restart after restore bak2db 4695152 CSNGen remote_offset drift 4704039 configuring nsslapd-changelogmaxage replaces objectclass of cn=changelog5 entry 4705641 index blocks get set to ALLIDS inappropriately 4708296 range searches can crash server 4711201 replication fails 4711202 replication stalls for 10 minutes and server is not accessible 4714196 Crash in cache_flush during a restore 4715065 VLV searches on iDS5.1 produce "Server reported sorting error" sometimes. 4715955 search gives wrong results for specific order of search filters in query 4719564 Macro ACI cause server down 4722987 Ldapmodify allows exact values of a multi-valued attribute to be created 4732352 directoryserver helper scripts expose DN user passwd 4735062 Directory server susceptible to buffer overflow 4735919 The slapd daemon is hanged when backup task being issued from Console 4737978 ldif2db segfaults when directory string type attr is between DN type attr 4738221 ldif2db hangs during data import 4742450 Consumer crashes while consumer is initialized with entires having >5000 lines 4743633 Using referral, unsafe characters in operation DN are not escaped 4743796 snmp core dumps - escalation number 537065 4748399 Disabling and re-enabling replication stops replication one side in MMR 4749234 User's menu on Console is hidden with right click if there are 35 users. 4753087 ldapsearch problem/bug when binding as a normal user 4754595 unindexed attribute with referential-integrity plug-in enabled 4756215 iDS 5.1SP1 - memory leak on replica 4758387 iDS5.1p1: changelog is purged incorrectly 4761010 One can create entry with duplicate objectclass: inetorgperson attribute value. 4765575 Memory Leak in DS5.1sp1 in LDAP COMPARE operation 4767182 Legacy Replication fails when Password policy is enable on 4.x 4773751 process size of slapd.exe keeps on growing 4776001 Sorting is not correctly performed by the ServerSideSorting function 4777358 process size of slapd.exe grows with persistent search 4778128 Linux - 5.1spX certificate mapping plug-in not loaded 4778154 The BER failure is logged incorrectly (B1) during any imports that exceeds the m 4778334 ids5.1 to ids5.1 replication breaks if legacy nds4.16 supplier injects MODRDN 4780230 Changelog trimming does not take place in a multimaster environment. 4781823 nsslapd dbtest is broken in 5.1 SP1 4783910 2-pass ldif2db does not correctly merge indexes 4786154 MMR: ns-slapd up but does not respond 4786475 During replication modifications can be missing on a consumer 4786504 directory on Solaris/NT blocks indefinetly when ssl bound application is stopped 4787220 DS 5.1sp1 crashes when binding with entry that has two or more vattrs 4795280 Recursive deletion of entires encounters err=50 (insufficient access) 4797685 the multi-master replication in environment with two or more suffixes 4802963 Replication halts / Directory hangs because a DataBase lock is held 4809504 RetroChangelog trims before the time defined in nsslapd-changelogmaxage 4653016 as root, after db2ldif -r, can not run start-slapd; db-home-directory configured 4656657 db2ldif -r creates cache files as root and does not clean them up properly. 4709128 numsubordinates assertion failure when deleting a glue entry 4713256 The ACI 'Directory Administrators Group' is buggy 4714358 restore fails after server creation until restarted 4716340 IPLTadmin and IPLTdsu are not LU and Alternate Root compliance in S9 and S10. 4717121 iDS 5.1SP1 Substring searches do not work correctly on integer syntax attributes 4723630 ldif import crashes if entries have a large number of attributes 4742083 Crash of ns-slapd during import 4754469 Only first modification is taken into account by uid uniqueness plugin and 7 bit 4759670 internal modify crashes server in case of attribute deletes 4773823 1st Total Update never finishes when doing 2 total update at the same time 4786547 7-bit Check plugin does not reject forbidden modifications. 4791877 connections are closed incorrectly because of max idletimeout 4669525 Console performs modrdn when OK button is clicked and no value is changed 4683476 unable to add members or alter membership to groups 4738639 Administration Express core dumps or lists the logs directory depending on how d 4789601 5.1 console installation on Windows 2000 fails intermittently when non-default p 4704635 The console fails to load jss library on Linux. 4707395 DOS:Transfer encoding bug Patch Installation Instructions: -------------------------------- For Solaris 7-9 releases, refer to the man pages for instructions on using 'patchadd' and 'patchrm' scripts provided with Solaris. Any other special or non-generic installation instructions should be described below as special instructions. The following example installs a patch to a standalone machine: example# patchadd /var/spool/patch/104945-02 The following example removes a patch from a standalone system: example# patchrm 104945-02 For additional examples please see the appropriate man pages. Special Install Instructions: ----------------------------- Note 1: Fixes for bugs 4713256, 4732352 and 4754595 will be applied to instances created after this patch is installed. They will not be applied to already existing instances. Note 2: Fixes for bugs 4687038 and 4535845 are not enabled by default. Without these fixes, Directory Server 5.1 does not conform to RFC2252 when handling: DN with multiple white spaces (4687038) DN with multiple escaped characters(4535845) To enforce conformance with RFC2252, perform the following steps: Create a file /slapd-/config/newnormdn Restart the directory instance Rebuild the index databases, either by doing an db2ldif and ldif2db, or by rebuilding any index with DN syntax (e.g. entryDN) (see Chapter 10, Managing Indexes in the iPlanet Directory Server Administrator's Guide) Note 3: To activate fix for bug 4639310, import the following LDIF file (through console or ldapmodify): dn: cn=Retro Changelog Plugin,cn=plugins,cn=config changetype: modify add: nsslapd-pluginarg0 nsslapd-pluginarg0: -ignore_attributes add: nsslapd-pluginarg1 nsslapd-pluginarg1: copyingFrom README -- Last modified date: Tuesday, June 8, 2004