Patch-ID# 117666-01 Keywords: directory server security Synopsis: Directory Server 5.2_x86 patch 2 : core patch - patchzip for Solaris Date: Aug/11/2004 Install Requirements: Additional instructions may be listed below Solaris Release: 8_x86 9_x86 SunOS Release: 5.8_x86 5.9_x86 Unbundled Product: Directory Server Unbundled Release: 5.2 Xref: Topic: Relevant Architectures: i386 BugId's fixed with this patch: 4470489 4653354 4686213 4719793 4724380 4808471 4816672 4819535 4819710 4824825 4826265 4826843 4837881 4845622 4846332 4856331 4857614 4863943 4865525 4865653 4865940 4866019 4866020 4866042 4868546 4869596 4870522 4875059 4875661 4876045 4876558 4877307 4877855 4877894 4879059 4879061 4879063 4879725 4881004 4881181 4882699 4883250 4884551 4884562 4885686 4885781 4886766 4886773 4887252 4887779 4887823 4887872 4888371 4889124 4889908 4891116 4891177 4891228 4891294 4892676 4893427 4894162 4895652 4897113 4897873 4899710 4901063 4901590 4901922 4903368 4904414 4905697 4908443 4909592 4911023 4911678 4912539 4912664 4914067 4914467 4914856 4918912 4919017 4921574 4922595 4923238 4923294 4923860 4923939 4924002 4925205 4928129 4928897 4930075 4930081 4930098 4932767 4932782 4932848 4933667 4934942 4934977 4935063 4935077 4937356 4938775 4941327 4941585 4941781 4942286 4942481 4942664 4943278 4944732 4946145 4946487 4947083 4947099 4947106 4950677 4950680 4950744 4950751 4950754 4951377 4951921 4955835 4956510 4957404 4959500 4960638 4960904 4961502 4963599 4964294 4966313 4966886 4967936 4969832 4970375 4970989 4971006 4971148 4971643 4971709 4971715 4971975 4972081 4972095 4972855 4973181 4973186 4973806 4974197 4974285 4974287 4974748 4974789 4974942 4975358 4976153 4976158 4976819 4976883 4976981 4977451 4978018 4978103 4978113 4978118 4978687 4978688 4978689 4978695 4978697 4979321 4980054 4980223 4980412 4980421 4981702 4981783 4981785 4982698 4983995 4984084 4984114 4985302 4987825 4987902 4989893 4990227 4990951 4990974 4990981 4991071 4991136 4991160 4991667 4991919 4992043 4992702 4992706 4993313 4993746 4994310 4994321 4994393 4994399 4995191 4996427 4996483 4997230 4997833 4999266 5001781 5002956 5003027 5003037 5003046 5003272 5003822 5003943 5006931 5008567 5008575 5008666 5009486 5010064 5010077 5011130 5012388 5014078 5014207 5014310 5015101 5015115 5017743 5018564 5018729 5020348 5021198 5021348 5022028 5023292 5023337 5023338 5023364 5023500 5023936 5024069 5024189 5025135 5025892 5027230 5027329 5028058 5029593 Changes incorporated in this version: 4974942 5018564 5025892 5029593 Patches accumulated and obsoleted by this patch: Patches which conflict with this patch: Patches required with this patch: Obsoleted by: Files included with this patch: bin/slapd/admin/bin/ds_create bin/slapd/admin/bin/ds_remove bin/slapd/admin/bin/ns-update bin/slapd/admin/scripts/template-create_migration_dir_sub bin/slapd/admin/scripts/template-db2index.pl bin/slapd/admin/scripts/template-migrate5xto52 bin/slapd/admin/scripts/template-migrateInstance5 bin/slapd/admin/scripts/template-ns-accountstatus.pl bin/slapd/admin/scripts/template-ns-activate.pl bin/slapd/admin/scripts/template-ns-inactivate.pl bin/slapd/admin/scripts/template-schema_push.pl bin/slapd/install/ldif/roledit.ldif bin/slapd/install/ldif/tasks.ldif bin/slapd/install/schema/00core.ldif bin/slapd/install/schema/11rfc2307.ldif bin/slapd/lib/libds_admin.so bin/slapd/server/idsktune bin/slapd/server/ns-ldapagt bin/slapd/server/ns-slapd java/jars/ds522.jar java/jars/ds522_en.jar lib/acl-plugin.so lib/chainingdb-plugin.so lib/cos-plugin.so lib/des-plugin.so lib/hdsml-plugin.so lib/libback-ldbm.so lib/libfe.so lib/liblcoll.so lib/libslapd.so lib/mrules-plugin.so lib/passthru-plugin.so lib/pwdstorage-plugin.so lib/referint-plugin.so lib/replication-plugin.so lib/retrocl-plugin.so lib/roles-plugin.so lib/statechange-plugin.so lib/subtreecounter-plugin.so lib/syntax-plugin.so lib/uid-plugin.so lib/valuecounter-plugin.so manual/en/slapd/SunONE.jpg manual/en/slapd/help/SunONE.jpg manual/en/slapd/help/backup.html manual/en/slapd/help/chaining_authentication.html manual/en/slapd/help/chaining_connection.html manual/en/slapd/help/chaining_new.html manual/en/slapd/help/chaining_settings.html manual/en/slapd/help/config_encryption.html manual/en/slapd/help/config_network.html manual/en/slapd/help/config_settings.html manual/en/slapd/help/config_snmp.html manual/en/slapd/help/cos_attributes.html manual/en/slapd/help/cos_general.html manual/en/slapd/help/cos_template.html manual/en/slapd/help/data_acctlock.html manual/en/slapd/help/data_attribute_set.html manual/en/slapd/help/data_chaining.html manual/en/slapd/help/data_passwords.html manual/en/slapd/help/data_replication.html manual/en/slapd/help/dialog_browser.html manual/en/slapd/help/effectiverights_input.html manual/en/slapd/help/effectiverights_output.html manual/en/slapd/help/generic_attribute.html manual/en/slapd/help/generic_editor.html manual/en/slapd/help/generic_objectclass.html manual/en/slapd/help/help_contents.html manual/en/slapd/help/help_misc.html manual/en/slapd/help/helpstyle.css manual/en/slapd/help/install_newinstance.html manual/en/slapd/help/logs_access.html manual/en/slapd/help/logs_audit.html manual/en/slapd/help/logs_error.html manual/en/slapd/help/logs_setlevel.html manual/en/slapd/help/password_general.html manual/en/slapd/help/password_lockout.html manual/en/slapd/help/password_policy.html manual/en/slapd/help/performance_caching.html manual/en/slapd/help/performance_client.html manual/en/slapd/help/performance_misc.html manual/en/slapd/help/plugins.html manual/en/slapd/help/plugins_signature.html manual/en/slapd/help/referral_authentication.html manual/en/slapd/help/referral_general.html manual/en/slapd/help/referral_urls.html manual/en/slapd/help/replica_advanced.html manual/en/slapd/help/replica_agreement.html manual/en/slapd/help/replica_changelog.html manual/en/slapd/help/replica_connection.html manual/en/slapd/help/replica_consumer.html manual/en/slapd/help/replica_disabled.html manual/en/slapd/help/replica_duplicate.html manual/en/slapd/help/replica_hub.html manual/en/slapd/help/replica_id.html manual/en/slapd/help/replica_legacy.html manual/en/slapd/help/replica_manager.html manual/en/slapd/help/replica_master.html manual/en/slapd/help/replica_network.html manual/en/slapd/help/replica_partial.html manual/en/slapd/help/replica_role.html manual/en/slapd/help/replica_schedule.html manual/en/slapd/help/replica_summary.html manual/en/slapd/help/role_accounts.html manual/en/slapd/help/role_filtered.html manual/en/slapd/help/role_general.html manual/en/slapd/help/role_managed.html manual/en/slapd/help/role_nested.html manual/en/slapd/help/role_selector.html manual/en/slapd/help/schema_attributes.html manual/en/slapd/help/schema_editattr.html manual/en/slapd/help/schema_editobj.html manual/en/slapd/help/schema_matchingrules.html manual/en/slapd/help/schema_objectclass.html manual/en/slapd/help/search_advanced.html manual/en/slapd/help/search_basic.html manual/en/slapd/help/search_filtered.html manual/en/slapd/help/set_passwordpolicy.html manual/en/slapd/help/set_roles.html manual/en/slapd/help/status_access.html manual/en/slapd/help/status_audit.html manual/en/slapd/help/status_chaining.html manual/en/slapd/help/status_counters.html manual/en/slapd/help/status_error.html manual/en/slapd/help/status_replication.html manual/en/slapd/help/status_suffixes.html manual/en/slapd/help/suffix_attrencrypt.html manual/en/slapd/help/suffix_export.html manual/en/slapd/help/suffix_indexes.html manual/en/slapd/help/suffix_initialize.html manual/en/slapd/help/suffix_new.html manual/en/slapd/help/suffix_options.html manual/en/slapd/help/suffix_reindex.html manual/en/slapd/help/suffix_settings.html manual/en/slapd/help/task_backup.html manual/en/slapd/help/task_export.html manual/en/slapd/help/task_import.html manual/en/slapd/help/task_restore.html manual/en/slapd/help/user_account.html manual/en/slapd/index.html manual/en/slapd/style.css manual/en/slapd/tokens.map manual/en/slapd/topicindex.htm plugins/signatures/plugin.signatures plugins/slapd/slapi/examples/README plugins/slapd/slapi/include/ldap_msg.h plugins/slapd/slapi/include/prinit.h plugins/slapd/slapi/include/slapi-plugin.h plugins/snmp/netscape-ldap.mib setup/slapd/slapd.inf shared/bin/entrycmp shared/bin/insync shared/bin/repldisc slapd/slapd.inf Problem Description: 4974942 deadlock with start_tls and disconnect_server 5018564 DS Patch README installation section to be improved 5025892 Patch_ZIP: applying patch zip breaks replication over SSL 5029593 MMR2 way crash in prot_notify_update (from 115614-09) 4816672 ns-slapd looping on mmap()==EAGAIN when running out of swap 4971715 "Startup time on server" always shows current time 4993313 initial values for password policy settings 5003027 patchrm 115614-06 fails if no directory instance exist 5003943 OnLine Help broken on linuxRH2.1AS - rpm pkg install 5014310 5.2 Consumers hang when schema is pushed over replication. 5015101 Obsolete idsktune version 9-MAY-2003 in DS 5.2 patch2 build7 - sparc and x86 5018729 upgrade ns-slapd/schema_push.pl fails on WINNT 5020348 /usr/sbin/directoryserver is not cluster-safe whith failover filesystem 5021198 upgrade: jss related links created under do not point on secv1/[*.jar|*.so] 5021348 PATCHZIP : unable to update libraries 5022028 substring index get corrupt if one of similar multiple values is deleted 5023292 schema_push.pl does not always update 99user.ldif 5023337 Patch_ZIP: Auto-upgrade with Multi-instance fails on HP-UX 5023338 Patch_ZIP: README file broken (end truncated) 5023500 Description of Resource Type for Directory Server Data Service is not appropria 5023936 Patch_ZIP: ns-slapd already running error message 5024069 PATCHZIP - linux - no sync during upgrade 5024189 Java exception error in console while editing/modifying an user defined Object c 5025135 memory leak when cos performance improvement activated 5027230 Unable to backout the patch 5027329 On console, replace button for pwd policy is available for user,member to role w 5028058 New Java exception error in console while editing/modifying an user defined Obje (from 115614-08) 4978018 directoryserver configure ask again questions on second cluster node, then fails 4987902 config fails due to LDAPCSDK_5.10 not found 5010064 Console should request LDIF file name before allowing [OK] in Export to LDIF 5010077 Console's Export to LDIF on server machine puts resulting ldif in logs directory 5011130 Applying 5.2patch2 patches on configured instance does not fix cluster bugs 5012388 OrionB7: DS repl. erase a schema in master1, with no schema change in master2 5014078 Server crashes if bad certificate (without issuerDN) sent by the client 5014207 digest authentication with valid username null password crashes S1DS5.2 ns-slapd 5015115 JES2_b07a: directory tree fails to remove an organization unit 5017743 Coredump 4-way MMR in Retro-Changelog 5023364 JES2_b07a: l10n: Duplicated hot keys in DS GUI (from 115614-07) 4686213 Number of passwds to remember in passwd history not working as expected. 4942481 slapd exits with ERROR<5130> - Resource Limit - Memory allocation error 4946145 Memory leakage when running persistent searches (psearch) 4971148 mpsadmserver&directoryserver configure doesn't support multiple SUNWicu installa 4978103 stop-slapd is not cluster-enabled 4989893 Orion2_b05 : 'db2index.pl' failed inside the 'comm_dssetup.pl' 4994310 Backout patch P2 to go to 5.2 : missing version test 4994321 Attributes list size incorrect in Add indexed attribute windows 4994393 DS unconfigure removes set of links => AS cannot be restarted anymore 4994399 DS unconfigure does not remove ISIE entries stored in the CDS 4996427 unable to focus on replica ID field without resizing window in wizard 4996483 Cannot create an instance from Console 4997230 Buildnumber is not updated during the upgrade/backout 4997833 patchrm -R fails and reports "libc: warning: libc/libthread interface mismatch: 4999266 LongDuration ACI test failed with DN normalization 5001781 Anonymous search should not return password policy attributes 5002956 Directory Server crashs on receipt of an invalid PDU 5003037 patchrm reports "Cannot convert from cert8.db to cert7.db" then "success" ?!?! 5003046 cert7.db not upgraded during patchadd if cert8.db already exists in directory 5003272 Directory Server install fails with Orion2_06 on s10_53 5003822 RPMs integrate command issue 5006931 directoryserver command -d fails of non-root 5008567 Update the README of the patch with Backout of NSS certificates procedures 5008575 Link errors when applying patch 115614-06 on second node of cluster 5008666 DS 5.2 Replication Master 1 will hang when master 2 is being stoped 5009486 Update comments issued by the pre/post patch/backout scripts (from 115614-06) 4866042 User entry with nt user account cannot be edited with custom editor. 4885686 slapd can crash if entry is deleted and immediately added again 4923238 pkginfo for SUNWasha should display correct name and description 4928897 Registration file not found for "SUNW.dsldap" and "SUNW.mps" 4932782 ns-accountstatus.pl fails if the suffix includes a whitespace 4934942 DS52 - wildcard search has problems with single character attribute values 4937356 ACI's/ACL's do not take in account for extra whitespace's 4964294 Several attributes are missing in the password policy entries created on Directo 4974197 No control of values - integers cast regardless value actually ldapmodifyied 4976883 DS 5.2 does not detect all available system memory at startup 4980421 ld.so.1 if directoryserver help mmldif with no instance created 4981785 max value delay interval in R-I plugin before buffer overflow is 21474 secs (5. 4985302 more than once pkgadd SUNWdsvu corrupts install - bad /usr/sbin/directorserver 4987825 MMR issue running batch password updates 4990227 security risk with HF1 to 5.2 "dictionary attack" possible in MMR 4990951 Postpatch failed if DS is not configured 4990974 slapd crashes in dn normalization 4990981 Restart failed during postpatch if DS 5.1 is installed 4991071 Cannot restart DS as non root during patchadd 4991136 Cannot //usr/sbin/directoryserver sync-cds as requested by patchadd 115614-05 4991160 pkgchk errors after patchadd 115614-05 4991667 Directory Server RPMs in JES2 are not compatible with public ICU bits 4991919 Cannot backout DS patch if DS has been configured after patch install 4992043 rebranding is not correct in the DS OLH 4992702 Backout of DS patch 115614-05 fails on 32 bits kernel OS 4992706 Postpatch asks user to synchronize CDS even if AS is not configured 4993746 back to RTM/OR1 bits, downgrade left upgrade dir + versions.conf. clean up to do 4995191 postpatch/prebackout scripts need to : Update nspr links - change ownership of l (from 115614-05) 4719793 ACIs on cn=schema are not replicated 4819535 Query performance slow with large numbers of static groups 4819710 DS51 - ";binary" compatibility issue - ldap not handling the RFC1274 4826843 audit log is not rotated as configured in specific case. 4845622 Unable to configure PTA with URLs containing the same suffix 4846332 iDS 5.1 sp2: access log rotation not occuring upon restart of slapd 4856331 db2ldif -r used with -s or -n makes ns-slapd core 4857614 Product doesn't function as it used to in earlier release. 4865525 ldapsearch -A fails against a chained database 4865653 During shutdown RI plugin can crash server if its processing deletes from ref lo 4875661 No Signature for Pass-Through Authentication Plug-In 4881181 Memory leak in search on suffix containing referral subsuffix 4883250 In certain condictions, binding with cert auth and simple can cause hang 4891116 Adding entry with "*" chars in DN field incur full scan of nstombstone 4895652 subtree plugin logs superfluous postop warnings 4911023 Performance degradation on HPUX under heavy load 4912664 All Attribute subtypes gets deleted from index if they have same values 4914067 Pluging Signature does not check 64 bit binaries. 4918912 DENY macro ACI applies to entries that it should not apply to 4922595 Local aci doesn't work properly over a database link when specifing dn attribute 4923294 Cannot install SUNWdsvr SUNWdsvu in non forced mode 4923939 HP-UX version need to be unstripped way 4928129 nsslapd-accesslog-logminfreediskspace is not working as expected 4930075 migrateInstance5 of ds5.2 gives error stating 'uname' is not recognized as valid 4933667 string_values2keys return NULL array if value contains only blanks 4934977 some searches that start or end with a wild card trigger bug 4942286 iDS52/Search operation with "-" char in filter failure 4951921 Persistent search returns tombstone purging events 4960638 iDS52/LDAP operation (MOD) failure in line with usgae of OID and subtype 4960904 bak2db fails with db1/db2/db3 directory structure 4966313 Buffer Overflow in re_comp on AIX 4969832 Significant memory leak in 5.1 (sol) /5.2 (w2k) 4971975 Password history checking is incorrect on first change after decreasing password 4973806 5.2 rtm server core dumps in preop_modify when attr uniq plugin activated 4974285 Bad format of logging messages 4975358 S1DS5.2 installlation failed on HP-UX 11i 4976158 Patches should stop the servers, apply and restart the servers 4976819 over 5 min link loss causes consumer not to sync after network recovery 4976981 retrochangelog trimming crash 4977451 MMR4/SSL, ADD not replicated, DEL cannot be replayed (32), ERROR 8293 8221 8312 4978688 Directory crash due to control double free 4981702 ns-slapd process crashed when importing ldif contains encrypted value 4982698 Backout of DS patch deletes /usr/sbin/directoryserver if DS 5.1 is installed 4983995 pwdChagedTime is not replicated properly 4984114 expirationtimeunit does not take the right default value (from 115614-04) 4808471 db2ldif, db2bak, ldif2db, bak2db cannot be run on an inactive node of a cluster 4869596 deletion of filteredrole entry takes over 2 mins from hub to consumer 4877855 vlv search based on empty container returns err=1 4897113 db2ldif blocked in ldbm_back_ldbm2ldif/.../__dbenv_open/.../lwp_mutex_lock 4930081 Retro-Changelog plugin not enabled post migration to ds 5.2 even though it was e 4941327 Server stops responding when LDAP search w/ too many attributes sent 4942664 cannot malloc 0 bytes in some VLV search when there is empty attributes 4955835 Read from uninitialized in plugin_setup 4956510 Using uninitialized variable in dispatch_operation_core_pb 4974287 "directoryserver help startconsole" doesn't show options 4976153 Patches 115614-02 and 115615-02 are not relocatable 4978113 Directory server always returns "off" for usePwdChangedTime 4978118 directoryserver -s instance-does-not-exist shows underlaying command 4978687 ldif2db is not cluster-safe / could run on inactive node while db is in use 4978689 ldif2ldap does not work on cluster - Can't connect to the LDAP server 4978695 ldap2ldif options doesn't work as documented and does not follow usage 4978697 /usr/sbin/directoryserver ldif2ldap does not work 4979321 Consumer aborts with core when usePwdChangedTime=1 4980054 directory returns an entry that does not match wildcard filter criteria (linux o 4980223 directoryserver -[dlgu] should check validity of the release 4980412 Various errors in top wrapper directoryserver's usage/help 4981783 AS error causes some errors in DS console (logs, snmp subagent, stop server) 4984084 Actions in the Tasks tabs are not working (Java Exception) (from 115614-03) 4724380 Action cancels when user put some bad Informations in the 'Create Attribute' box 4863943 repl_set_mtn_referrals: could not set referrals for replica errors 4865940 Reliab12: error 8221 Incremental protocol failed.... 4866019 Numeric value 64 bits casted to 32 bits in logs/errors 4866020 Total update failed because of space difference in sub-suffix: ERROR<8285> 4868546 nsslapd-maxpsearch value off by one 4870522 Unable to release Id(s) on the consumer after link down for more than 5 mins 4901922 incoherent return code for directoryserver help command 4912539 console process grows when adding users 4914856 if you activate/deactivate group, in property editor you will not see red block 4941585 couldn't get online help for New Root Object 4959500 Console doesn't display access log when greater than 60Mb and filter is used 4966886 SolPkg: Unable to unconfigure DS if multiple installed JVM 4967936 ds5ReplicaTransportWindowSize can not be set more than 500 on sunone console 4970375 Bad behavior in command directoryserver : getdefault and listversions flags 4970989 Directory packages informations still refer SUN ONE 4971006 Directory console refers SUN One DS instead SUN Java DS 4971643 On Line Help : One page is missing 4971709 Restart operation from stop state fails on Windows. 4972081 Incompatible attributes in SUNWdsha (x86) for /usr/cluster/lib and sub-dirs 4972095 Missing SUNWasha / SUNW.mps on x86 4972855 migrateInstance5 fails while migrating to DS52 with hotfix1 4973181 "Save" button stay disabled after some changes in the log options of the Directo 4973186 Invalid behavior of file selection dialog within Directory Server administration 4974748 References to 5.2_HotFix_1 should be replaced by references to 5.2_patch2 4974789 Orion Integrate command fails for DS pkgs (from 115614-02) 4653354 segmentation fault when calling ldapcompare without the SSL option -Z 4824825 error message with fix 4826265 Crash with persistant search. 4837881 abnormal memory growth pattern using solaris packages (mtmalloc) 4875059 uid uniqueness plugin logs into errors log on every add operation 4879725 Admin Guide - Advanced multi-master config 4882699 DS 5.x listen port can be hijacked 4886766 userattr acis can misbehave 4886773 proxy auth control with peristent search does not work 4887252 replicated update can stop replication 4887823 acis added twice to acl cache when added via LDAP ADD operation 4888371 Deployment Guide should describe alternative RCL in MMR setup 4889124 DS 5.2 Solaris packages not compliant to jumpstart install 4889908 docs RFE for search result 4891177 Mentions of Solaris Operation Environment ==> Solaris Operating System 4892676 repldisc does not properly work when multiple instances of DS on the same machin 4893427 Crash while creating a Browsing Index 4897873 MOD INT. op on retryCount coming from a passwd MOD MUST be flagged as UNCHAINABL 4899710 Referential Integrity plugin does not allocate enough space for internal search 4903368 modify-delete more than 5 values of a multi-valued attr deletes ALL values 4904414 entry2str size with attr deletion CSNs 4905697 doc objectclass as an example for targattrfilters aci keyword 4908443 Password expiration doesn't completely prevent users from binding 4911678 MMR4wway: Crash in ruv_destroy on solaris9 x86 4914467 Admin Guide doc on chaining incorrectly states persistent search control works 4919017 Change wording in Admin guide regarding self-signed certificates and replication 4921574 Sun Cluster agents in DS 5.2 don't support HAStoragePlus 4923860 Special DN (long RDN with ; and ,) crashes the Directory Server 4925205 Directory Server 5.2 dumps core in acl_access_allowed 4930098 PasswordRetryCount internal op being replicated (sometimes empty) 4932848 ns-slapd -V does not display version for libslapd and libfe 4935063 the 5.2 command suffix2instance dumps a core 4935077 S1DS5.2 ldif2db -n userRoot -i test.ldif = Bus Error - core dumped 4938775 SolPkg: Use ${PKG_INSTALL_ROOT} instead of ${BASEDIR} in scripts 4941781 acl plugin searches inefficiently for acis in ldapsubentries at startup 4943278 Error 'cat: cannot open /[...]/serverroot.conf' when patchadd 115614-01 4944732 DS unconfigure hangs due to shared serverroot directory 4946487 DS5.1 : deliver unstripped binaries on HP-UX platform 4947083 ns-slapd dumps core during checking the history of a clear password 4947099 repl tools crash with memory allocation error at startup using SSL on Windows XP 4947106 output of repldisc on HP-UX does not display correctly the topology 4950677 replace the exec to ldapsearch with a call to the libldap 4950680 Increase default value for Probe_Timeout 4950744 RT_VERSION should be increased for SUNW.dsldap 4950751 STOP method implementations should not timeout themselves, should rely on RGM 4950754 Use LOG_NOTICE instead of LOG_INFO for logging key failover steps 4951377 Wrong DS port number seen after upgrade of DS and changing new DS port number to 4957404 start_tls is not thread safe 4961502 sustained modifies will consume all available memory and crash DS 4963599 new attr. pwdChangedTime should be subject to passwordExp (from 115614-01) 4470489 patchadd fails to recreate /var/sadm/patch/.patchDB correctly 4876045 memory leak when clients modify non-existent entries 4876558 5.2 M initialized (online) by 5.1 M can't initialize its consumers (5.1 or 5.2) 4877307 VLV indexes broken 4877894 Merging empty VLV after import broken 4879059 SolPkg: directoryserver command to be updated for Sol10 4879061 SolPkg/DS: packages dependancies to be updated for Sol10 4879063 SolPkg/AS: packages dependancies to be updated for Sol10 4881004 nsslapd-changelogmaxage default value should be set to "7d" 4884551 ldapaddent does not correctly add the structural objectclasses 4884562 ieee802Device & bootableDevice schema backward incompatible in DS 5.2 4885781 Directory Server Patch check issue 4887779 Plugin Signature issue with DIRVERSION 4887872 SolPkg:DS unconfiguration reports errors (wrong links to ICU 64 bits lib created 4891228 server crashes if changelog trimming is enabled 4891294 Wrong pkginfo fields SUNW_PRODNAME and SUNW_PRODVERS 4894162 Generating self signed plugin binaries 4901063 Syntax error in prepatch file 4901590 CMApplicationFailureException on Customer portal 4909592 strange reverse-dns request issued by iDS5.2 at startup 4924002 identifying Java location based on SUNWj3rt install location 4932767 orion1_b09: slapd core dump Patch Installation Instructions: WARNING This patch is ONLY for patching ZIP installation - It should not be applied on top of Directory 5.2 native package version (115615-10 is the patch to install on Solaris native installation) In the following example stands for the directory where the Directory Server product has been installed. For UNIX (Solaris, AIX, HP-UX, Linux) : Unpack the tar gzipped archive : > mkdir MyDirectory > cd MyDirectory > cp .tar.gz . > gunzip .tar.gz > tar xvf .tar Run the install script : > sh install.sh example : sh install.sh /var/sun/mps For Windows : Unpack the zip archive : > mkdir MyDirectory > cd MyDirectory > cp . > unzip Run the install script : > install.bat example : install.bat "D:\Program Files\Sun\MPS\server" admin admin You don't need to start/stop the directory server, this is done by the install script. Notes : 1. The directory into which the archive has been copied must be writeable. 2. On Windows 2000, if contains spaces or/and other special characters, you must use the following command directly: lib\nsPerl5.005_03\bin\MSWin32-x86\perl.exe upgrade.pl "" where must be protected with double quotes ("). Example : lib\nsPerl5.005_03\bin\MSWin32-x86\perl.exe upgrade.pl "D:\Program Files\Sun\MPS\servers" admin admin Special Install Instructions: ----------------------------- - If you are using a localized version of Directory please install also the corresponding locale patch ( 117798 (de) 117799 (es) 117800(fr) 117801(ja) 117802(ko) 117803(zh) 117804(zh_TW) - All the Consoles must be closed before running the patchzip installation script, else the install script wont be able to upgrade the console binaries (5059764). - On Windows, if the event viewer is open, the installation of the patchzip will fail ( 5061260 ) - The installation script can start existing instances that were stopped intentionally. It is up to the user to stop these instance after upgrade. - If you want to patch an installation where only the console has been installed, you will need to manually copy the 2 files nsclient.zip and nsjre.zip in the serverroot and to unzip them manually. This will upgrade your console to the same level as this patch. - When upgrading to 5.2 patch2, the creation of new role via the console will fail with the following exception : java.lang.NullPointerException (5063342). To prevent this, the user can edit the Configuration Directory Server, and update manually the class to be called by the console : step1 : ldapsearch -1 -p -b o=Netscaperoot cn=nsroledefinition 1.1 dn: cn=nsroledefinition, cn=ResourceEditorExtension, ou=4.0, ou=Admin, ou=Global Preferences, ou=, o=NetscapeRoot step2 : ldapmodify -p -D -w << _EOF_ changetype: modify replace: nsclassname nsclassname: com.netscape.admin.dirserv.roledit.ResEditorRoleInfo@ds522.jar nsclassname: com.netscape.admin.dirserv.roledit.ResEditorRoleMembers@ds522.jar nsclassname: com.netscape.admin.dirserv.roledit.ResEditorRoleAccountPage@ds522.jar _EOF_ step3 : restart Console - On Windows, if the admin password contains some special characters ( like '&' ) the upgrade of the CDS data will fail (5068370) There is a workaround : 1) create a file containing 2 lines Admin Id: admin Admin Password: 2) run the commands lib\nsPerl5.005_03\bin\MSWin32-x86\perl.exe upgrade.pl "" -f - Patching compressed archive versions of Directory Server in a localized environment causes the Administration Console to display the incorrect name (5069443) If you have installed a localized version of Directory Server via compressed archive, and are updating the installation, the Administration Server console name changes from Sun Java System to Sun ONE. This change is harmless and can be ignored. - On HP-UX, if you have installed Directory Server via compressed archive, and are updating the installation, an administration password longer than eight characters causes the update to fail. (5070064) There is a workaround : Change the administration password temporarily while performing the update. For information on how to change the administration password, see To Change the Configuration Administrators User Name or Password in Chapter 4 of the Administration Server Administration Guide. checksum: 65017 98287 patchzip-directory-5.2_Patch_2-us.i386-unknown-solaris2.8.tar.gz README -- Last modified date: Wednesday, August 11, 2004