Patch-ID# 112925-04 Keywords: security ktutil kdb5_util kadmin kadmin.local kadmind kerberos Synopsis: SunOS 5.9: ktutil kdb5_util kadmin kadmin.local kadmind Patch Date: Oct/01/2004 Install Requirements: None Solaris Release: 9 SunOS Release: 5.9 Unbundled Product: Unbundled Release: Xref: This patch available for SPARC as patch 116044 Topic: SunOS 5.9: ktutil kdb5_util kadmin kadmin.local kadmind Patch Relevant Architectures: sparc BugId's fixed with this patch: 4197937 4220042 4642879 4646370 4836676 4837278 Changes incorporated in this version: 4837278 Patches accumulated and obsoleted by this patch: 112731-02 Patches which conflict with this patch: Patches required with this patch: 112908-01 or greater Obsoleted by: Files included with this patch: /usr/bin/ktutil /usr/lib/krb5/kadmind /usr/sbin/kadmin /usr/sbin/kadmin.local /usr/sbin/kdb5_util Problem Description: 4837278 Kerberos utilities should include automigrate capability (from 112925-03) 4836676 Bounds checks not in place for princs in krbv5 (from 112925-02) 4646370 kadmin listprincs needs paging for accessibility (from 112925-01) This patch revision was generated to accumulate and obsolete the changes introduced in Solaris Update: s9u1 feature point patches: 112731-02 (from 112731-02) This patch revision was generated to synchronize the package version string between s9 and s9u1 (from 112731-01) 4642879 Kerberos Mechanism Re-sync with MIT 1.2.1 4197937 gss_init_sec_context() doesn't set GSS_C_TRANS_FLAG 4220042 "kadmin: add_principal -expire "9/1/1999 7:00am" xhu" doesn't work Patch Installation Instructions: -------------------------------- For Solaris 2.0-2.6 releases, refer to the Install.info file and/or the README within the patch for instructions on using the generic 'installpatch' and 'backoutpatch' scripts provided with each patch. For Solaris 7-9 releases, refer to the man pages for instructions on using 'patchadd' and 'patchrm' scripts provided with Solaris. Any other special or non-generic installation instructions should be described below as special instructions. The following example installs a patch to a standalone machine: example# patchadd /var/spool/patch/104945-02 The following example removes a patch from a standalone system: example# patchrm 104945-02 For additional examples please see the appropriate man pages. Special Install Instructions: ----------------------------- NOTE 1: To get the complete Kerberos feature, please also install the following patches: 112907-01 (or newer) libggs 112921-01 (or newer) adm5 112922-01 (or newer) krb5 lib 112923-01 (or newer) usr lib krb 112924-01 (or newer) usr sbin krb NOTE 2: To get the complete fix of bug 4836676 "Bounds checks not in place for princs in krbv5," please also install the following patches: 112923-03 (or newer) krb5kdc 112921-02 (or newer) libkadm5srv.so.1 112908-10 (or newer) mech_krb5.so.1 gl_kmech_krb5 pam_krb5.so.1 NOTE 3: To get the complete fix for bugID 4837278, please also install the following patches (or newer): 112908-15 krb5 shared object Patch 112921-05 libkadm5 Patch README -- Last modified date: Friday, October 1, 2004