Patch Name: PHSS_28850 Patch Description: s700_800 11.X Cluster Object Manager A.01.03.01 Creation Date: 03/05/05 Post Date: 03/06/09 Hardware Platforms - OS Releases: s700: 11.00 11.11 s800: 11.00 11.11 Products: Cluster Object Manager A.01.03 Filesets: Cluster-OM.CM-DEN-MOF,fr=A.01.03,fa=HP-UX_B.11.00_32/64,v=HP Cluster-OM.CM-DEN-PROV,fr=A.01.03,fa=HP-UX_B.11.00_32/64,v=HP Cluster-OM.CM-OM,fr=A.01.03,fa=HP-UX_B.11.00_32/64,v=HP Cluster-OM.CM-OM-AUTH,fr=A.01.03,fa=HP-UX_B.11.00_32/64,v=HP Cluster-OM.CM-OM-TOOLS,fr=A.01.03,fa=HP-UX_B.11.00_32/64,v=HP Automatic Reboot?: No Status: General Release Critical: No (superseded patches were critical) PHSS_26675: ABORT This is critical because cmomd core dumps if a port scanning tool like nmap talks to it. PHSS_24292: ABORT The Object Manager aborts with a core dump when the where clause in the query string is multiple of 128 bytes long. Category Tags: defect_repair enhancement general_release critical halts_system Path Name: /hp-ux_patches/s700_800/11.X/PHSS_28850 Symptoms: PHSS_28850: 1. (no symptoms - internal changes for enhanced patch testing) PHSS_26675: 1. In a trusted hpux system, Object Manager failed to authenticate if the password was greater than eight characters in length. 2. Admin functions executed through ServiceGuard Manager are not logged in syslog on a cluster node where operation takes place. 3. cmomd core dumps if a port scanning tool like nmap talks to it PHSS_24292: 1. An API client connection can cause cmomd to abort with a core dump if client issues a query string with a where clause exactly in the multiples of 128 bytes long. The core is located in /var/opt/cmom directory. PHSS_22175: 1. Without this patch and ServiceGuard patch PHSS_24678, "ServiceGuard Manager A.02.00" cannot perform cluster administrative operations such as running and halting nodes, packages or the cluster. Note that ServiceGuard Manager releases before A.02.00 do not support cluster administrative operations. Defect Description: PHSS_28850: 1. Changes were made to support a new internal testing infrastructure. PHSS_26675: 1. As part of authentication logic, we used the crypt() function, which can handle only eight characters. Resolution: Used the bigcrypt() method if the system is in "trusted system" mode. 2. This is an enhancement request. Remote admin requests executed through Object Manager were not tracked through syslog on a cluster node where operation takes place. Resolution: Enhanced admin code paths in config library and ServiceGuard daemons to log more information about the user requesting the request: where the request is being issued and how it is issued. In order for this additional logging to be active, ServiceGuard 11.13 Patch PHSS_27722 must also be installed. 3. We prematurely deallocate a configuration object, that is needed later. Resolution: Deallocate the configuration object only when it is no longer needed. PHSS_24292: 1. The query engine does not allocate enough memory before appending a termination character to an incoming string while processing a where clause from the query string. Under a heavy system load, when the Object Manager tries to free up the reference to this memory location, it core dumps. Resolution: Reallocate the query string memory required to accomodate the termination character. PHSS_22175: 1. This feature was not supported in prior releases. Resolution: This patch along with ServiceGuard patch PHSS_24678 enables cluster administrative operations. Enhancement: No (superseded patches contained enhancements) PHSS_26675: This patch delivers new functionality for logging the audit messages into the syslog.log for the admin operations. PHSS_22175: With this patch and ServiceGuard patch PHSS_24678, "ServiceGuard Manager A.02.00" can perform cluster administrative operations such as running and halting nodes, packages or the cluster. SR: 8606215549 8606228018 8606257589 8606214892 8606286661 Patch Files: Cluster-OM.CM-DEN-MOF,fr=A.01.03,fa=HP-UX_B.11.00_32/64, v=HP: /opt/cmom/mof/CMlogicalconsumer.mof /opt/cmom/mof/OMevent.mof Cluster-OM.CM-DEN-PROV,fr=A.01.03,fa=HP-UX_B.11.00_32/64, v=HP: /opt/cmom/providers/lcprovider.omp Cluster-OM.CM-OM,fr=A.01.03,fa=HP-UX_B.11.00_32/64,v=HP: /opt/cmom/lbin/cmomd /opt/cmom/lib/libcmom.1 /opt/cmom/lib/libcmom.sl /opt/cmom/lib/libcmutil.1 /opt/cmom/lib/libcmutil.sl /opt/cmom/mof/OMcore.mof Cluster-OM.CM-OM-AUTH,fr=A.01.03,fa=HP-UX_B.11.00_32/64, v=HP: /opt/cmom/authenproviders/sehostbasedprovider.omp /opt/cmom/authenproviders/selocalhostprovider.omp /opt/cmom/authenproviders/seuserpasswdprovider.omp Cluster-OM.CM-OM-TOOLS,fr=A.01.03,fa=HP-UX_B.11.00_32/64, v=HP: /opt/cmom/tools/bin/cmreadlog what(1) Output: Cluster-OM.CM-DEN-MOF,fr=A.01.03,fa=HP-UX_B.11.00_32/64, v=HP: /opt/cmom/mof/CMlogicalconsumer.mof: ServiceGuard Schema 1.3.1 /opt/cmom/mof/OMevent.mof: Schema Name: Object Manager Version: 1.3.1 Cluster-OM.CM-DEN-PROV,fr=A.01.03,fa=HP-UX_B.11.00_32/64, v=HP: /opt/cmom/providers/lcprovider.omp: Product Name: HP Cluster Object Manager Version: A.01.03.01 Patch Name: PHSS_28850 Build date: Tue Apr 29 15:51:49 PDT 2003 Build id: ibld_api_a0103_patch_makefile Build platform: hpux Product Name: HP Cluster Object Manager Version: A.01.03.01 Cluster-OM.CM-OM,fr=A.01.03,fa=HP-UX_B.11.00_32/64,v=HP: /opt/cmom/lbin/cmomd: HP92453-02A.10.20 HP-UX SYMBOLIC DEBUGGER (END.O) $R evision: 74.03 $ Build date: Tue Apr 29 15:48:02 PDT 2003 Build id: ibld_api_a0103_patch_makefile Build platform: hpux Product Name: HP Cluster Object Manager Version: A.01.03.01 Patch Name: PHSS_28850 Product Name: HP Cluster Object Manager Version: A.01.03.01 /opt/cmom/lib/libcmom.1: Product Name: HP Cluster Object Manager Version: A.01.03.01 Patch Name: PHSS_28850 Build date: Tue Apr 29 15:49:24 PDT 2003 Build id: ibld_api_a0103_patch_makefile Build platform: hpux Product Name: HP Cluster Object Manager Version: A.01.03.01 /opt/cmom/lib/libcmom.sl: Product Name: HP Cluster Object Manager Version: A.01.03.01 Patch Name: PHSS_28850 Build date: Tue Apr 29 15:49:24 PDT 2003 Build id: ibld_api_a0103_patch_makefile Build platform: hpux Product Name: HP Cluster Object Manager Version: A.01.03.01 /opt/cmom/lib/libcmutil.1: Cluster Monitor Product $Revision: 82.2 $ MC/ServiceGuard Product $Revision: 82.2 $ Build date: Tue Apr 29 15:59:40 PDT 2003 Build id: ibld_api_a0103_patch_makefile Build platform: hpux Product Name: HP Cluster Object Manager Version: A.01.03.01 /opt/cmom/lib/libcmutil.sl: Cluster Monitor Product $Revision: 82.2 $ MC/ServiceGuard Product $Revision: 82.2 $ Build date: Tue Apr 29 15:59:40 PDT 2003 Build id: ibld_api_a0103_patch_makefile Build platform: hpux Product Name: HP Cluster Object Manager Version: A.01.03.01 /opt/cmom/mof/OMcore.mof: Schema Name: Object Manager Version: 1.3.1 Cluster-OM.CM-OM-AUTH,fr=A.01.03,fa=HP-UX_B.11.00_32/64, v=HP: /opt/cmom/authenproviders/sehostbasedprovider.omp: Product Name: HP Cluster Object Manager Version: A.01.03.01 Patch Name: PHSS_28850 Build date: Tue Apr 29 15:52:08 PDT 2003 Build id: ibld_api_a0103_patch_makefile Build platform: hpux Product Name: HP Cluster Object Manager Version: A.01.03.01 /opt/cmom/authenproviders/selocalhostprovider.omp: Product Name: HP Cluster Object Manager Version: A.01.03.01 Patch Name: PHSS_28850 Build date: Tue Apr 29 15:52:15 PDT 2003 Build id: ibld_api_a0103_patch_makefile Build platform: hpux Product Name: HP Cluster Object Manager Version: A.01.03.01 /opt/cmom/authenproviders/seuserpasswdprovider.omp: Product Name: HP Cluster Object Manager Version: A.01.03.01 Patch Name: PHSS_28850 Product Name: HP Cluster Object Manager Version: A.01.03.01 Build date: Tue Apr 29 15:52:24 PDT 2003 Build id: ibld_api_a0103_patch_makefile Build platform: hpux Cluster-OM.CM-OM-TOOLS,fr=A.01.03,fa=HP-UX_B.11.00_32/64, v=HP: /opt/cmom/tools/bin/cmreadlog: HP92453-02A.10.20 HP-UX SYMBOLIC DEBUGGER (END.O) $R evision: 74.03 $ Build date: Tue Apr 29 15:49:33 PDT 2003 Build id: ibld_api_a0103_patch_makefile Build platform: hpux Product Name: HP Cluster Object Manager Version: A.01.03.01 Patch Name: PHSS_28850 Product Name: HP Cluster Object Manager Version: A.01.03.01 cksum(1) Output: Cluster-OM.CM-DEN-MOF,fr=A.01.03,fa=HP-UX_B.11.00_32/64, v=HP: 2419401695 1321 /opt/cmom/mof/CMlogicalconsumer.mof 2205947407 3070 /opt/cmom/mof/OMevent.mof Cluster-OM.CM-DEN-PROV,fr=A.01.03,fa=HP-UX_B.11.00_32/64, v=HP: 1270984361 77824 /opt/cmom/providers/lcprovider.omp Cluster-OM.CM-OM,fr=A.01.03,fa=HP-UX_B.11.00_32/64,v=HP: 1181099548 354000 /opt/cmom/lbin/cmomd 3937177740 1400832 /opt/cmom/lib/libcmom.1 3937177740 1400832 /opt/cmom/lib/libcmom.sl 2937209883 2641920 /opt/cmom/lib/libcmutil.1 2937209883 2641920 /opt/cmom/lib/libcmutil.sl 3115965923 18850 /opt/cmom/mof/OMcore.mof Cluster-OM.CM-OM-AUTH,fr=A.01.03,fa=HP-UX_B.11.00_32/64, v=HP: 4244588022 77824 /opt/cmom/authenproviders/ sehostbasedprovider.omp 1641616621 45056 /opt/cmom/authenproviders/ selocalhostprovider.omp 2759779330 32768 /opt/cmom/authenproviders/ seuserpasswdprovider.omp Cluster-OM.CM-OM-TOOLS,fr=A.01.03,fa=HP-UX_B.11.00_32/64, v=HP: 4154815022 59088 /opt/cmom/tools/bin/cmreadlog Patch Conflicts: None Patch Dependencies: None Hardware Dependencies: None Other Dependencies: None Supersedes: PHSS_22175 PHSS_24292 PHSS_26675 Equivalent Patches: None Patch Package Size: 1280 KBytes Installation Instructions: Please review all instructions and the Hewlett-Packard SupportLine User Guide or your Hewlett-Packard support terms and conditions for precautions, scope of license, restrictions, and, limitation of liability and warranties, before installing this patch. ------------------------------------------------------------ 1. Back up your system before installing a patch. 2. Login as root. 3. Copy the patch to the /tmp directory. 4. Move to the /tmp directory and unshar the patch: cd /tmp sh PHSS_28850 5. Run swinstall to install the patch: swinstall -x autoreboot=true -x patch_match_target=true \ -s /tmp/PHSS_28850.depot By default swinstall will archive the original software in /var/adm/sw/save/PHSS_28850. If you do not wish to retain a copy of the original software, include the patch_save_files option in the swinstall command above: -x patch_save_files=false WARNING: If patch_save_files is false when a patch is installed, the patch cannot be deinstalled. Please be careful when using this feature. For future reference, the contents of the PHSS_28850.text file is available in the product readme: swlist -l product -a readme -d @ /tmp/PHSS_28850.depot To put this patch on a magnetic tape and install from the tape drive, use the command: dd if=/tmp/PHSS_28850.depot of=/dev/rmt/0m bs=2k Special Installation Instructions: SR#: 8606215549 PHSS_22175 or later, along with ServiceGuard patch PHSS_24678 or later and ServiceGuard Manager version A.02.00 or later, enables Cluster Administration features. If the customer has already installed ServiceGuard patch PHSS_24678 or later and upgraded to ServiceGuard Manager version A.02.00 or later, but has not yet enabled Administration features and wishes to do so, he should restart ServiceGuard Manager after installing this patch.