Patch Name: PHSS_24108 Patch Description: s700_800 11.04 VirtualVault 4.0 iWS 4.1 NSAPI module Creation Date: 01/05/31 Post Date: 01/06/01 Hardware Platforms - OS Releases: s700: 11.04 s800: 11.04 Products: VirtualVault A.04.00 US/Canada Release VirtualVault A.04.00 International Release Filesets: VaultNES.NES-VAULT,fr=A.04.00,fa=HP-UX_B.11.04_32/64,v=HP VaultNES.NES-US,fr=A.04.00,fa=HP-UX_B.11.04_32/64,v=HP Automatic Reboot?: Yes Status: General Release Critical: No Category Tags: defect_repair general_release Path Name: /hp-ux_patches/s700_800/11.X/PHSS_24108 Symptoms: PHSS_24108: Web server (admin) running on VirtualVault 4.0 may exhibit unexpected behavior. PHSS_22918: Error occurs after attempt to start the server from the GUI. PHSS_22431: Create certificate request fails for SpeedCard PHSS_22294: SSL Speedcard and client certificate problems with NES 4.0 SP1 server. PHSS_21843: This patch addresses two problems: 1) Manual rotation of NES logs (access and error) via the the NES administration server user interface, "Archive Log", appears to succeed, but the logs are not archived. 2) "Log Preferences" updates via the NES administration server user interface fail with the following error responses: "Invalid path, did you enter the path correctly?" and "The log file you are trying to change is currently in use. you should either shut down the server and remove the old log file, or change the log file path as well" Defect Description: PHSS_24108: Web server (admin) running on VirtualVault 4.0 may exhibit unexpected behavior. Resolution: iPlanet has provided a NSAPI module to correct this behavior. It is recommended that all VirtualVault 4.0 users apply this patch, which includes the distributed NSAPI module from iWS. PHSS_22918: Error occurs after attempt to start the server from the GUI. The command to perform the start from the GUI does not have the necessary privilege. Resolution: Added privilege to the server4.conf file. PHSS_22431: Create certificate request fails for SpeedCard Resolution: Modify the /etc/opt/vaultTS/cfg/vvwrap/server4.conf file to include the allowmacread privilege for one of the delivered binaries PHSS_22294: SSL Speedcard and client certificate problems with NES 4.0 SP1 server. Resolution: Vendor provided 4.1 SP2 upgrade. This patch releases files common to all VirtualVault 4.0 releases. PHSS_21843: The entries for the "rotate" and "lgaccess" NES CGI programs in the /etc/opt/vaultTS/cfg/vvwrap/server4.conf VV wrapper configuration file contain an incorrect user ID and label. Resolution: Modify the /etc/opt/vaultTS/cfg/vvwrap/server4.conf so the rotate and lgaccess programs are started with the user id "owww" and level of "system outside". SR: 8606161275 8606124448 8606134730 8606134732 8606178539 8606197727 Patch Files: VaultNES.NES-VAULT,fr=A.04.00,fa=HP-UX_B.11.04_32/64,v=HP: /etc/opt/vaultTS/cfg/vvwrap/server4.conf /opt/vaultTS/bin/vaultify VaultNES.NES-US,fr=A.04.00,fa=HP-UX_B.11.04_32/64,v=HP: /etc/auth/system/files.fcdb/25.patches/24108_PHSS.fcdb /opt/vaultTS/lib/bounds_check.so what(1) Output: VaultNES.NES-VAULT,fr=A.04.00,fa=HP-UX_B.11.04_32/64,v=HP: /etc/opt/vaultTS/cfg/vvwrap/server4.conf: $Source: src/host/etc/opt/vaultTS/cfg/vvwrap/server4 .conf, vaultNES, vaultNES_4.0 $ $Date: 01/01 /23 15:09:02 $ $Revision: 1.21.1.7 PATCH_11. 04 (PHSS_22918) /opt/vaultTS/bin/vaultify: $Source: src/misc/vaultify/vaultify, vaultNES, vault NES_4.0 $ $Date: 01/05/31 17:39:55 $ $Revisi on: 1.13.1.4 PATCH_11.04 (PHSS_24108) VaultNES.NES-US,fr=A.04.00,fa=HP-UX_B.11.04_32/64,v=HP: /opt/vaultTS/lib/bounds_check.so: None /etc/auth/system/files.fcdb/25.patches/24108_PHSS.fcdb: src/host/24108_PHSS.fcdb, vaultNES, vaultNES_4.0 1.4 01/05/24 cksum(1) Output: VaultNES.NES-VAULT,fr=A.04.00,fa=HP-UX_B.11.04_32/64,v=HP: 1414581222 36973 /etc/opt/vaultTS/cfg/vvwrap/server4.conf 2394554860 2932 /opt/vaultTS/bin/vaultify VaultNES.NES-US,fr=A.04.00,fa=HP-UX_B.11.04_32/64,v=HP: 1167344203 12288 /opt/vaultTS/lib/bounds_check.so 3418476201 584 /etc/auth/system/files.fcdb/25.patches/ 24108_PHSS.fcdb Patch Conflicts: None Patch Dependencies: s700: 11.04: PHSS_23215 s800: 11.04: PHSS_23215 Hardware Dependencies: None Other Dependencies: None Supersedes: PHSS_21843 PHSS_22294 PHSS_22431 PHSS_22918 Equivalent Patches: None Patch Package Size: 100 KBytes Installation Instructions: Please review all instructions and the Hewlett-Packard SupportLine User Guide or your Hewlett-Packard support terms and conditions for precautions, scope of license, restrictions, and, limitation of liability and warranties, before installing this patch. ------------------------------------------------------------ 1. Back up your system before installing a patch. 2. Login as root. 3. Copy the patch to the /tmp directory. 4. Move to the /tmp directory and unshar the patch: cd /tmp sh PHSS_24108 5. Run swinstall to install the patch: swinstall -x autoreboot=true -x patch_match_target=true \ -s /tmp/PHSS_24108.depot By default swinstall will archive the original software in /var/adm/sw/save/PHSS_24108. If you do not wish to retain a copy of the original software, use the patch_save_files option: swinstall -x autoreboot=true -x patch_match_target=true \ -x patch_save_files=false -s /tmp/PHSS_24108.depot WARNING: If patch_save_files is false when a patch is installed, the patch cannot be deinstalled. Please be careful when using this feature. For future reference, the contents of the PHSS_24108.text file is available in the product readme: swlist -l product -a readme -d @ /tmp/PHSS_24108.depot To put this patch on a magnetic tape and install from the tape drive, use the command: dd if=/tmp/PHSS_24108.depot of=/dev/rmt/0m bs=2k Special Installation Instructions: You MUST install patch PHSS_23215 or its succssor onto your system BEFORE installing this patch. The installation of this patch will fail if PHSS_23215 is not present on the sytem.