Patch-ID# 115611-09 Keywords: admin server 5.2 security Synopsis: SunOS 5.9_x86 : Sun Java(TM) System Administration Server 5.2 patch Date: May/27/2004 Install Requirements: None Solaris Release: 9_x86 SunOS Release: 5.9_x86 Unbundled Product: Java System Administration Server Unbundled Release: 5.2.2 Xref: This patch available for SPARC as patch 115610 NOTE: Refer to Special Install Instructions section for specific information on this patch. Topic: SunOS 5.9_x86 : Sun Java(TM) System Administration Server 5.2 patch Relevant Architectures: i386 BugId's fixed with this patch: 4537710 4737629 4807799 4819399 4838530 4840960 4865862 4865986 4866621 4866623 4866809 4868083 4868115 4868579 4869603 4869632 4869832 4871813 4873123 4874038 4877839 4881871 4884243 4885761 4885783 4890502 4891293 4894106 4899507 4903266 4904217 4911836 4914080 4915499 4916483 4922064 4922687 4924528 4927268 4929089 4934633 4935171 4937199 4940899 4942406 4944036 4947556 4948897 4949163 4952777 4953656 4955933 4957418 4957726 4959414 4960135 4960701 4960704 4960763 4966144 4972164 4974134 4976205 4978090 4978821 4979406 4980213 4980530 4982663 4982669 4982680 4982804 4983338 4983418 4983466 4983524 4984035 4984668 4984692 4985244 4985408 4986025 4986809 4986838 4986840 4987707 4990274 4991149 4991849 4991852 4991923 4992121 4992828 4993518 4993522 4993539 4993547 4994480 4995585 4997855 4999262 5003049 5003822 5003975 5004008 Changes incorporated in this version: 4983338 Patches accumulated and obsoleted by this patch: Patches which conflict with this patch: Patches required with this patch: Obsoleted by: Files included with this patch: /etc/mps/admin/v5.2/admin-serv/ldif/tasks.ldif /usr/lib/mps/admin/libadminutil52.so /usr/lib/mps/admin/libadmsslutil52.so /usr/sadm/mps/admin/v5.2/bin/admin/admconfig /usr/sadm/mps/admin/v5.2/bin/admin/admin/bin/ReadLog /usr/sadm/mps/admin/v5.2/bin/admin/admin/bin/admpw /usr/sadm/mps/admin/v5.2/bin/admin/admin/bin/config /usr/sadm/mps/admin/v5.2/bin/admin/admin/bin/dsconfig /usr/sadm/mps/admin/v5.2/bin/admin/admin/bin/listOldSrvs /usr/sadm/mps/admin/v5.2/bin/admin/admin/bin/mergeConfig /usr/sadm/mps/admin/v5.2/bin/admin/admin/bin/migrateConfig /usr/sadm/mps/admin/v5.2/bin/admin/admin/bin/restartsrv /usr/sadm/mps/admin/v5.2/bin/admin/admin/bin/sec-activate /usr/sadm/mps/admin/v5.2/bin/admin/admin/bin/security /usr/sadm/mps/admin/v5.2/bin/admin/admin/bin/snmpconf /usr/sadm/mps/admin/v5.2/bin/admin/admin/bin/snmpmctl /usr/sadm/mps/admin/v5.2/bin/admin/admin/bin/start_config_ds /usr/sadm/mps/admin/v5.2/bin/admin/admin/bin/statpingserv /usr/sadm/mps/admin/v5.2/bin/admin/admin/bin/statusping /usr/sadm/mps/admin/v5.2/bin/admin/admin/bin/stopsrv /usr/sadm/mps/admin/v5.2/bin/admin/admin/bin/ugdsconfig /usr/sadm/mps/admin/v5.2/bin/admin/admin/bin/userauth /usr/sadm/mps/admin/v5.2/bin/admin/admin/bin/userinfo /usr/sadm/mps/admin/v5.2/bin/admin/sync-admin /usr/sadm/mps/admin/v5.2/bin/admin/sync-admin-cds /usr/sadm/mps/admin/v5.2/bin/https/bin/ns-httpd /usr/sadm/mps/admin/v5.2/bin/https/bin/uxwdog /usr/sadm/mps/admin/v5.2/bin/https/jar/NSJavaMiscUtil.jar /usr/sadm/mps/admin/v5.2/bin/https/jar/NSJavaUtil.jar /usr/sadm/mps/admin/v5.2/bin/https/jar/NSServletLayer.jar /usr/sadm/mps/admin/v5.2/bin/https/jar/jspengine.jar /usr/sadm/mps/admin/v5.2/bin/https/lib/libAdmservPlugin.so /usr/sadm/mps/admin/v5.2/bin/https/lib/libConfigFile.so /usr/sadm/mps/admin/v5.2/bin/https/lib/libMMapSession.so /usr/sadm/mps/admin/v5.2/bin/https/lib/libNSJavaMiscUtil.so /usr/sadm/mps/admin/v5.2/bin/https/lib/libNSJavaUtil.so /usr/sadm/mps/admin/v5.2/bin/https/lib/libNSJvmControl.so /usr/sadm/mps/admin/v5.2/bin/https/lib/libNSServletLayer.so /usr/sadm/mps/admin/v5.2/bin/https/lib/libNSServletPlugin.so /usr/sadm/mps/admin/v5.2/bin/https/lib/libShtml.so /usr/sadm/mps/admin/v5.2/bin/https/lib/libares3.so /usr/sadm/mps/admin/v5.2/bin/https/lib/libdirmon4.so /usr/sadm/mps/admin/v5.2/bin/https/lib/libgetprop.so /usr/sadm/mps/admin/v5.2/bin/https/lib/liblibdbm.so /usr/sadm/mps/admin/v5.2/bin/https/lib/liblibsi18n.so /usr/sadm/mps/admin/v5.2/bin/https/lib/libns-httpd40.so /usr/sadm/mps/admin/v5.2/bin/https/lib/libnscpVer.so /usr/sadm/mps/admin/v5.2/bin/https/lib/libnsfc.so /usr/sadm/mps/admin/v5.2/bin/https/lib/libnsprwrap.so /usr/sadm/mps/admin/v5.2/bin/https/lib/libnstime.so /usr/sadm/mps/admin/v5.2/bin/https/lib/libnstp.so /usr/sadm/mps/admin/v5.2/bin/https/lib/libregex.so /usr/sadm/mps/admin/v5.2/bin/https/lib/libresonate.so /usr/sadm/mps/admin/v5.2/bin/https/lib/libsupport.so /usr/sadm/mps/admin/v5.2/bin/https/lib/libxerces-c.so /usr/sadm/mps/admin/v5.2/java/jars/admserv522.jar /usr/sadm/mps/admin/v5.2/java/jars/admserv522_en.jar /usr/sadm/mps/admin/v5.2/manual/en/admin/SunONE.jpg /usr/sadm/mps/admin/v5.2/manual/en/admin/help/SunONE.jpg /usr/sadm/mps/admin/v5.2/manual/en/admin/help/access_permissions.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/aci_addug.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/aci_hostfilter.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/aci_hosts.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/aci_main.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/aci_manualmode.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/aci_rights.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/aci_targets.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/aci_times.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/aci_usersgroups.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/browse_directory.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/certificate_authorities.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/certificate_compromisedlist.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/certificate_detail.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/certificate_general.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/certificate_manager.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/certificate_password.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/certificate_path.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/certificate_revoked.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/certimport_confirmation.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/certimport_serveralias.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/certimport_sourcepath.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/certinstall_information.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/certinstall_location.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/certinstall_purpose.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/certinstall_type.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/certrequest_introduction.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/certrequest_password.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/certrequest_requestor.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/certrequest_submission.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/clone_configuration.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/config_access.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/config_ciphers.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/config_configdir.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/config_encryption.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/config_hostname.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/config_ipaddress.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/config_network.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/config_userdir.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/console_legacylist.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/console_legacyserver.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/console_newdomain.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/create_selectou.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/group_certificates.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/group_certinfo.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/group_constructurl.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/group_customeditor.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/group_dynamic.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/group_dynamicmembers.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/group_languages.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/group_static.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/help_contents.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/helpstyle.css /usr/sadm/mps/admin/v5.2/manual/en/admin/help/legacy_httpaccess.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/logs_configuration.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/merge_configuration.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/migrate_certificates.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/migrate_legacyserver.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/migrate_serverRoot.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/orgunit_customeditor.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/orgunit_languages.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/orgunit_pronunciation.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/preferences_fonts.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/preferences_profile.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/preferences_selectfont.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/preferences_settings.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/preferences_uipermissions.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/search_changedirectory.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/search_ugadvanced.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/search_usersandgroups.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/search_usersgroups.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/security_install.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/security_modules.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/set_permissions.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/snmp_communities.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/snmp_editcommunity.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/snmp_editmanager.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/snmp_managers.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/snmp_status.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/topology_domain.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/topology_host.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/topology_server.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/topology_servergroup.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/user_customeditor.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/user_languages.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/user_nt.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/user_posix.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/views_configuration.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/views_editor.html /usr/sadm/mps/admin/v5.2/manual/en/admin/help/views_visibility.html /usr/sadm/mps/admin/v5.2/manual/en/admin/index.html /usr/sadm/mps/admin/v5.2/manual/en/admin/style.css /usr/sadm/mps/admin/v5.2/manual/en/admin/tokens.map /usr/sadm/mps/admin/v5.2/manual/en/admin/topicindex.htm /usr/sadm/mps/admin/v5.2/manual/help/help /usr/sadm/mps/admin/v5.2/plugins/snmp/magt/magt /usr/sadm/mps/admin/v5.2/plugins/snmp/sagt/sagt /usr/sadm/mps/admin/v5.2/setup/SunONEAdministrationServer52.class /usr/sadm/mps/admin/v5.2/setup/admin/typicalInstall.ins /usr/sadm/mps/admin/v5.2/setup/admin/typicalUninstall.ins /usr/sadm/mps/admin/v5.2/setup/locale/resources/ASSetupResources.properties /usr/sadm/mps/admin/v5.2/setup/locale/resources/ASSetupResources_en.properties /usr/sadm/mps/admin/v5.2/shared/bin/cert-convert /usr/sadm/mps/admin/v5.2/shared/bin/ldapcompare /usr/sadm/mps/admin/v5.2/shared/bin/ldapdelete /usr/sadm/mps/admin/v5.2/shared/bin/ldapmodify /usr/sadm/mps/admin/v5.2/shared/bin/ldapsearch /usr/sadm/mps/admin/v5.2/shared/bin/sync-product-cds /usr/sadm/mps/admin/v5.2/shared/bin/sync-version /usr/sadm/mps/console/v5.2/bin/startconsole /usr/sadm/mps/console/v5.2/java/base.jar /usr/sadm/mps/console/v5.2/java/caplugin/default.jar /usr/sadm/mps/console/v5.2/java/ldapjdk.jar /usr/sadm/mps/console/v5.2/java/mcc52.jar /usr/sadm/mps/console/v5.2/java/mcc52_en.jar /usr/sadm/mps/console/v5.2/java/nmclf52.jar /usr/sadm/mps/console/v5.2/java/nmclf52_en.jar /usr/sbin/mpsadmconfig /usr/sbin/mpsadmserver /usr/sbin/mpsconsole Problem Description: 4983338 /usr/sbin/mpsadmserver configure fails in a read-only /usr setup (from 115611-07) 4807799 double // in /var/mps/serverroot : slapd -> //etc/ds/v5.2/slapd 4952777 AS is not automatically started when Zip setup run as root/configured to run as 4987707 help from console unusable after first failure 4890502 help button on "Console login" window does not work correctly 4995585 sync-product-cds does not take into account the build number option 4991149 patch 115610-05 must not instruct to "mpsadmserver sync-cds" if not configured 4997855 TLS Cipher preferences are not saved in the encryption panel 4940899 mnemonic problem in admin console 4979406 DS admin console hangs forever if incorrect port number specified. 5003822 RPMs integrate command issue 5004008 SUNWasha integrate command issue 5003975 upgrade/backout messages not clear enough 4999262 missing user message after patchadd -R: manually start AS 5003049 incorrect AS server root if path has / at the end (from 115611-06) 4991852 AS restarted as root after patchadd AS 5.2 patch2 4991923 bad path in the ouput of "mpsadmserver configure" command 4992828 sync-product-cds cores with bad parameters 4993518 upgrade process ignores the server root owner 4993522 AS backout from OR2 to RTM doesn't remove upgrade/versions.conf file 4993539 upgrade (AS,DS,DPS) : icon files are not removed by backout 4993547 downgrade leaves ldap tool link in when coming back to rtm bits ... 4994480 upgrade does not upgrade links for SUNWpr (mps => mps/secv1 directory) (from 115611-05) 4982804 HttpChannel.exec() should not hide InterruptedIOException 4984035 Icon files cannot be localized in console 4986809 upgrade:sync--cds forgets some attribute value update, description,buildnumber 4986840 mpsadmserver sync-cds does not identify bad arguments 4990274 Console 5.2.2 splash screen copyrights still mention 'Sun ONE' 4991849 patchadd AS 5.2 patch2 raises errors: ln admserv522.jar 4992121 registration file not found for "SUNW.mps" 4922064 broken links and missing binary in SUNWasvu for Orion. 4972164 On Line Help: Impossible to access to OnLine Help 4983466 patchadd 115611-04 upgrades NSS related links but do not report correct owner 4983524 '//' in serverroot makes AdminServ responds 404 to all requests 4986025 AS patching with '-R' option generates errors during backout 4986838 postpatch&postbackout always report 'AS restarted successful' even if it failed (from 115611-04) 4819399 special chars are not allowed in user password for admin entry 4871813 ns-httpd dumps core while running meta directory. 4916483 Stop Admin fails (both via console as well as command line) 4974134 authentication plugin is leaking 4976205 patches should stop the servers, apply and restart the servers 4978090 submitpatch_sunsoft failed for patch 115611-02 115611-02 4982663 x86: 'mpsadmserver sync-cds' fails because it does not find libraries 4982669 Linux: 'mpsadmserver sync-cds' fails but such option should not exist ... 4982680 upgrade does not integrate 4869832 fix (ldap tools links missing in server root) 4983418 patchrm 115611-04 does not downgrade NSS links in /lib to NSS3.3.4 lib 4984668 upgd: -h opt of CDS upgrade tools should not be (sync--cds,mpsadmserver) 4984692 cannot create links during AS patchadd 4985244 cannot restart AS after patching the system if only NSS3.3.4 is installed 4985408 patchadd 115611-04 create wrong link to admserv522*.jar in /java/jar 4980530 Admin Serv goes to 500 Internal Server Error after receiving some requests (from 115611-03) 4537710 incorrect file access permissions 4840960 console renders large list of managed roles very slowly 4929089 S1DS Admin web interface installs without proper URL sanitation 4978821 warning during SUNWasvr build 4980213 startconsole.exe option -jit makes the console abort 4873123 "ACI name" text field in ACI editor accept [Return] key code. 4924528 bad behavior of Times Tab of the ACI Editor 4937199 ns-httpd crashes and produces Dr. Watson dump file 4942406 need close twice for help on host tab of ACI 4953656 Directory Server Admin domain is not removed properly. 4959414 time format problems on ACI editor, Time TAB 4960701 build number has quotes with zip4 and no quotes with zip5 (from 115611-02) 4948897 IP and Hostname security restrictions do not function as per docs in Admin Serve 4960763 Admin_server : patch installation problem 4966144 sol pkg: re-configuring in another server root fails (bad link on uninstaller) 4866809 StringIndexOutOfBoundsException in OutputReaderThread 4869832 mpsadmserver should create links of ldap tools on (server root)/shared/bin/ 4884243 libicule, libustdio and libicutoolutil missing from admin server nsbase.zip 4885761 cannot install adminserver52 again over ds5.2 4891293 wrong pkginfo fields SUNW_PRODNAME and SUNW_PRODVERS 4894106 uninstallation of AdminServer doesn't happen if AdmServ(setupsdk 5) and AdmServ 4899507 console fails to retrieve localized jar files 4903266 Advanced Editor not picking up the values entered in com.netscape.management.cli 4904217 The README file is not Sun ONE branded 4911836 /usr/sadm/mps/admin/v5.2/README installed twice (SUNWasvu and SUNWasvcp) 4914080 "Sun-Netscape Alliance" string appears in the "PreInstall"er 4915499 startconsole.exe still contains the iPlanet icon 4922687 'Import Certificates' does not copy cert files with the right name. 4927268 com.netscape.management.client.console.LoginDialog class throws NullPointerExce 4934633 console sdk browser scrolls to bottom on long pages 4935171 Admin server patch delivers packages that are empty 4944036 console SDK SSL factory does not verify server cert hostnames 4947556 Admin server crashes during flow of entries from CV2MV in Meta Directory. 4949163 Administration Server Configuration Failed on second node for two-cluster nodes 4955933 Console 5.2.1 20031117 is no longer able to open DS 5.2 console 4957418 AS CGIs broken on sol pkg when DS is not configured, and SUNWicu basedir != '/' 4957726 AdminServer and NSS 4960135 Display build version and build number in the About box 4960704 AS 20031126 admconfig is broken by the version change (from 115611-01) 4737629 console shipped with Directory Server 5.1sp1 does not handle backslashes in RDN 4838530 i18n: font tab on preference panel has problem in JA locale 4865862 unable to set admin URL in NodeData panel 4865986 I18N: CA Certs and Revoked Certs tabs are missing in JA locale 4866621 i18n: default window size of "Create New Domain" is too small to display Japanese 4866623 could not operate some help window 4868083 creating Group with Member causes LDAPException 4868115 behavior of help browser seems wrong 4868579 OLH (i18n): broken Asian chars in start console login help window 4869603 console SDK forgets 'charset=UTF-8' in HTTP connections 4869632 i18n: HP-UX - admin server can not start in JA locale 4874038 Log Viewer Component is not 508 Compliant 4877839 AdminServer uses bad Admin-Core component 4881871 i18n: On zh_TW build if Pressed 'Launch in Browser..' button on help window 4885783 Directory Server Patch check issue Patch Installation Instructions: -------------------------------------------- For Solaris 7-9 releases, refer to the man pages for instructions on using 'patchadd' and 'patchrm' scripts provided with Solaris. Any other special or non-generic installation instructions should be described below as special instructions. The following example installs a patch to a standalone machine: example# patchadd /var/spool/patch/104945-02 The following example removes a patch from a standalone system: example# patchrm 104945-02 For additional examples please see the appropriate man pages. Special Install Instructions: ---------------------------------------- Updating Administration Server You upgrade Administration Server by applying patches, and synchronizing settings with the configuration directory server. ------------------------------------------------------------------------------------------------- Note 1. Administration Server belongs to a group of products sharing the same Administration Server. You must patch these products at the same time. 2. Upgrading Administration Server by applying patches only works for Administration Server installed on a Solaris system with SUNWas* packages. 3. Patching upgrades the SSL certificate database. If you subsequently decide to back out the patches and you have changed the content of the certificate database, you must manually replay the changes after backing out the patches. Administration Server cannot start in secure mode when you back out patches after having changed the server certificate. 4. Rolling upgrade for Sun Cluster data services is not supported. ------------------------------------------------------------------------------------------------- Applying Patches 1. Obtain the patches for your platform and installed server component products. * Sun Java Enterprise System 2004Q2 Recommended Patch Cluster for the Solaris(TM) operating system * Administration Server: 115611-09 or later * Directory Proxy Server: 116374-08 or later * Directory Server: 115615-09 or later; 116640-07 or later * Messaging Server: 116569-10 or later You may download patches from http://sunsolve.sun.com/pub-cgi/show.pl?target=patches/patch-access. 2. Stop all running servers in the following order: 1. Messaging Server 2. Directory Proxy Server 3. Directory Server 4. Administration Server Refer to the product documentation for instructions on starting and stopping servers. 3. Apply the Recommended Patch Cluster for your platform. 4. Apply the patches listed in Step 1 for all servers installed, *even if those servers are not configured,* in the following order using the patchadd(1M) command. 1. Administration Server 2. Directory Server 3. Directory Proxy Server 4. Messaging Server 5. Restart the servers in the same order as for Step 4. 6. If Administration Server is configured, synchronize the upgraded Administration Server settings with those stored in the configuration directory server using the mpsadmserver(1M) command. # /usr/sbin/mpsadmserver sync-cds The configuration directory server must be available for this step to complete properly. 7. Perform server-specific steps for individual servers you have patched. Removing Patches 1. Perform server-specific steps for individual servers whose patches you intend to remove. 2. If Administration Server is configured, return to the pre-patch settings stored in the configuration directory using the mpsadmserver(1M) command. # /usr/sbin/mpsadmserver sync-cds 5.2 Notice the final 5.2. The configuration directory server must be available for this step to complete properly. 3. Stop all running servers in the following order: 1. Messaging Server 2. Directory Proxy Server 3. Directory Server 4. Administration Server 4. Back out server patches in the same order as for Step 3 using the patchrm(1M) command. 5. Restart the servers in the following order: 1. Administration Server 2. Directory Server 3. Directory Proxy Server 4. Messaging Server Troubleshooting * If after applying the patches, you still see a Sun ONE-branded console, rather than a Sun Java System-branded console, verify that you effectively synchronized with the configuration directory server (mpsadmserver sync-cds). * If backing out the patches did not work, typically this is because you did not synchronize settings for the upgraded Administration Server with the configuration directory server before you tried to back out patches. Try the entire process again, starting from Applying Patches. README -- Last modified date: Thursday, May 27, 2004