Patch Name: PHSS_26848 Patch Description: s700_800 11.00 KRB5-Client Version 1.0 patch Creation Date: 02/04/22 Post Date: 02/05/21 Hardware Platforms - OS Releases: s700: 11.00 s800: 11.00 Products: KRB5-Client B.11.00.11 Filesets: KRB5-Client.KRB5-SHLIB,fr=B.11.00.11,fa=HP-UX_B.11.00_32/64,v=HP KRB5-Client.KRB5-PRG,fr=B.11.00.11,fa=HP-UX_B.11.00_32/64,v=HP KRB5-Client.KRB5-RUN,fr=B.11.00.11,fa=HP-UX_B.11.00_32/64,v=HP KRB5-Client.KRB5-ENG-A-MAN,fr=B.11.00.11,fa=HP-UX_B.11.00_32/64,v=HP KRB5-Client.KRB5-64SLIB,fr=B.11.00.11,fa=HP-UX_B.11.00_32/64,v=HP Automatic Reboot?: No Status: General Release Critical: No Category Tags: defect_repair enhancement general_release Path Name: /hp-ux_patches/s700_800/11.X/PHSS_26848 Symptoms: PHSS_26848: 1. SR: 8606256012 CR: JAGae20328 : The Kerberos Client configuration file does not support the appdefaults section to specify the default options for applications, for example, kinit, telnet et cetera. 2. SR: 8606255026 CR: JAGae19355 : In case of Windows 2000 multidomain, Kerberos Client resolves the principal's realm to the default realm as specified in the Kerberos configuration file. The Kerberos Client should instead, resolve it to the appropriate Windows 2000 domain. 3. SR: 8606247862 CR: JAGae14262: The file names in the shared library list need to have an absolute path instead of a relative path. Defect Description: PHSS_26848: 1. SR: 8606256012 CR: JAGae20328 : The kerberos configuration file does not support the appdefaults section, where the application specific defaults can be specified. Resolution: Two new APIs krb5_get_appdefault_string() and krb5_get_appdefault_boolean() have been added to libkrb5.sl. Applications can use these APIs to get the default values from the appdefaults section of the Kerberos Configuration file. 2. SR: 8606255026 CR: JAGae19355 : If the principal is present in the Windows 2000 multidomain, then the Kerberos client should resolve its realm name to the Windows 2000 domain. Resolution: The krb5_parse_name() has been modified to obtain the principal's realm name from the Windows 2000 multidomain if the LDAPUX Windows 2000 multidomain product has been configured. If the principal is not present in the Windows 2000 multidomain then the principal's realm will be the default realm, as specified in the Kerberos Configuration file. 3. SR: 8606247862 CR: JAGae14262 : While building the libraries relative paths are used, which are recorded in the shared library list. Resolution: The build has been altered to record an absolute path instead of a relative path in the shared library list. SR: 8606256012 8606255026 8606247862 Patch Files: KRB5-Client.KRB5-SHLIB,fr=B.11.00.11,fa=HP-UX_B.11.00_32/64, v=HP: /usr/lib/libkrb5.sl /usr/lib/gss/libgssapi_krb5.sl KRB5-Client.KRB5-PRG,fr=B.11.00.11,fa=HP-UX_B.11.00_32/64, v=HP: /usr/include/krb5.h KRB5-Client.KRB5-RUN,fr=B.11.00.11,fa=HP-UX_B.11.00_32/64, v=HP: /usr/bin/kinit KRB5-Client.KRB5-ENG-A-MAN,fr=B.11.00.11, fa=HP-UX_B.11.00_32/64,v=HP: /usr/share/man/man4.Z/krb5.conf.4 /usr/share/man/man1.Z/kinit.1 /usr/share/man/man1.Z/klist.1 KRB5-Client.KRB5-64SLIB,fr=B.11.00.11, fa=HP-UX_B.11.00_32/64,v=HP: /usr/lib/pa20_64/libkrb5.sl /usr/lib/pa20_64/gss/libgssapi_krb5.sl what(1) Output: KRB5-Client.KRB5-SHLIB,fr=B.11.00.11,fa=HP-UX_B.11.00_32/64, v=HP: /usr/lib/libkrb5.sl: HP Kerberos V5 1.0 (PHSS_26848) Module: libkrb5.sl D ate: Apr 18 2002 15:45:15 /usr/lib/gss/libgssapi_krb5.sl: HP Kerberos V5 1.0 (PHSS_26848) Module: libgssapi_kr b5.sl Date: Apr 18 2002 15:48:17 KRB5-Client.KRB5-PRG,fr=B.11.00.11,fa=HP-UX_B.11.00_32/64, v=HP: /usr/include/krb5.h: None KRB5-Client.KRB5-RUN,fr=B.11.00.11,fa=HP-UX_B.11.00_32/64, v=HP: /usr/bin/kinit: HP Kerberos V5 1.0 (PHSS_26848) Module: kinit Date: May 13 2002 17:48:40 KRB5-Client.KRB5-ENG-A-MAN,fr=B.11.00.11, fa=HP-UX_B.11.00_32/64,v=HP: /usr/share/man/man4.Z/krb5.conf.4: None /usr/share/man/man1.Z/kinit.1: None /usr/share/man/man1.Z/klist.1: None KRB5-Client.KRB5-64SLIB,fr=B.11.00.11, fa=HP-UX_B.11.00_32/64,v=HP: /usr/lib/pa20_64/libkrb5.sl: HP Kerberos V5 1.0 (PHSS_26848) Module: libkrb5.sl D ate: Apr 18 2002 16:09:00 /usr/lib/pa20_64/gss/libgssapi_krb5.sl: HP Kerberos V5 1.0 (PHSS_26848) Module: libgssapi_kr b5.sl Date: Apr 18 2002 16:13:01 cksum(1) Output: KRB5-Client.KRB5-SHLIB,fr=B.11.00.11,fa=HP-UX_B.11.00_32/64, v=HP: 406355912 1077248 /usr/lib/libkrb5.sl 458133933 249856 /usr/lib/gss/libgssapi_krb5.sl KRB5-Client.KRB5-PRG,fr=B.11.00.11,fa=HP-UX_B.11.00_32/64, v=HP: 3001340347 104177 /usr/include/krb5.h KRB5-Client.KRB5-RUN,fr=B.11.00.11,fa=HP-UX_B.11.00_32/64, v=HP: 3975409948 20480 /usr/bin/kinit KRB5-Client.KRB5-ENG-A-MAN,fr=B.11.00.11, fa=HP-UX_B.11.00_32/64,v=HP: 3999063958 7868 /usr/share/man/man4.Z/krb5.conf.4 2805105477 3349 /usr/share/man/man1.Z/kinit.1 3028080879 2203 /usr/share/man/man1.Z/klist.1 KRB5-Client.KRB5-64SLIB,fr=B.11.00.11, fa=HP-UX_B.11.00_32/64,v=HP: 1920821857 576056 /usr/lib/pa20_64/libkrb5.sl 3906698664 140672 /usr/lib/pa20_64/gss/libgssapi_krb5.sl Patch Conflicts: None Patch Dependencies: None Hardware Dependencies: None Other Dependencies: None Supersedes: None Equivalent Patches: PHSS_26850: s700: 11.11 s800: 11.11 Patch Package Size: 2180 KBytes Installation Instructions: Please review all instructions and the Hewlett-Packard SupportLine User Guide or your Hewlett-Packard support terms and conditions for precautions, scope of license, restrictions, and, limitation of liability and warranties, before installing this patch. ------------------------------------------------------------ 1. Back up your system before installing a patch. 2. Login as root. 3. Copy the patch to the /tmp directory. 4. Move to the /tmp directory and unshar the patch: cd /tmp sh PHSS_26848 5. Run swinstall to install the patch: swinstall -x autoreboot=true -x patch_match_target=true \ -s /tmp/PHSS_26848.depot By default swinstall will archive the original software in /var/adm/sw/save/PHSS_26848. If you do not wish to retain a copy of the original software, include the patch_save_files option in the swinstall command above: -x patch_save_files=false WARNING: If patch_save_files is false when a patch is installed, the patch cannot be deinstalled. Please be careful when using this feature. For future reference, the contents of the PHSS_26848.text file is available in the product readme: swlist -l product -a readme -d @ /tmp/PHSS_26848.depot To put this patch on a magnetic tape and install from the tape drive, use the command: dd if=/tmp/PHSS_26848.depot of=/dev/rmt/0m bs=2k Special Installation Instructions: During installation of the patch the following message can be ignored NOTE: tlinstall is searching filesystem - please be patient NOTE: The following are messages for core transition links WARNING: Can't create core transition links since files/directories exist: /usr/bin/kdestroy -> /opt/dce/bin/kdestroy /usr/bin/kinit -> /opt/dce/bin/kinit /usr/bin/klist -> /opt/dce/bin/klist NOTE: Complete with message(s) displayed above WARNING: The command "/usr/lbin/sw/install_clean" had warnings. The installation will continue. Check the above output for details about the warnings.