Patch Name: PHSS_10876
Patch Description: s700_800 10.20 dtgreet and dtsession point patch
Creation Date: 97/04/25
Post Date: 97/04/28
Repost: 97/05/13
PHSS_10876 has PHSS_9803 as a patch dependency.
Unfortunately this is not documented. Hence the repost.
The actual patch bits were not altered. Sites
having the patch installed should not update to the
reposted version.
Hardware Platforms - OS Releases:
s700: 10.20
s800: 10.20
Products: N/A
Filesets:
CDE.CDE-RUN CDE.CDE-PAM
Automatic Reboot?: No
Status: Special Superseded
Critical: No
Path Name: /hp-ux_patches/s700_800/10.X/PHSS_10876
Symptoms:
PHSS_10876:
1) Dtgreet hangs trying to display to xterminal without CDE
fonts.
2) cde:trusted system:screenlock: unlock by root seen as
unsuccessful try
3) CDE:Trusted system:root can't unlock screen lock
4) Possibility of disableing user accounts on trusted
system by screen lock
5) CDE screen locker doesn't use DCE authentication to
unlock the screen
Defect Description:
PHSS_10876:
1) Dtgreet hangs trying to display to xterminal without CDE
fonts.
2) cde:trusted system:screenlock: unlock by root seen as
unsuccessful try
3) CDE:Trusted system:root can't unlock screen lock
4) Possibility of disableing user accounts on trusted
system by screen lock
5) CDE screen locker doesn't use DCE authentication to
unlock the screen
SR:
5003349738 5003356295 5003356287 5003356303 5003352930
Patch Files:
/usr/lib/security/libpam_unix.1
/usr/dt/bin/dtgreet
/usr/dt/bin/dtsession
what(1) Output:
/usr/lib/security/libpam_unix.1:
X Window System, Version 11 R6+ HP-UX B.10.20.970423
+O2
(build date: Wed Apr 23 15:48:42 PDT 1997)
/usr/dt/bin/dtgreet:
X Window System, Version 11 R6+ HP-UX B.10.20.00 Mar
1997 Patch Release
(build date: Wed Feb 26 17:16:10 PST 1997)
dtgreet: $Revision: 1.5 $
/usr/dt/bin/dtsession:
X Window System, Version 11 R6+ HP-UX B.10.20.00 Mar
1997 Patch C Releasee
(build date: Fri Apr 25 09:38:58 PDT 1997)
dtsession: $Revision: 2.0 $
cksum(1) Output:
123989032 90298 /usr/lib/security/libpam_unix.1
117590794 86016 /usr/dt/bin/dtgreet
3317115576 176128 /usr/dt/bin/dtsession
Patch Conflicts: None
Patch Dependencies: None
Hardware Dependencies: None
Other Dependencies: None
Supersedes: None
Equivalent Patches: None
Patch Package Size: 400 Kbytes
Installation Instructions:
Please review all instructions and the Hewlett-Packard
SupportLine User Guide or your Hewlett-Packard support terms
and conditions for precautions, scope of license,
restrictions, and, limitation of liability and warranties,
before installing this patch.
------------------------------------------------------------
1. Back up your system before installing a patch.
2. Login as root.
3. Copy the patch to the /tmp directory.
4. Move to the /tmp directory and unshar the patch:
cd /tmp
sh PHSS_10876
5a. For a standalone system, run swinstall to install the
patch:
swinstall -x autoreboot=true -x match_target=true \
-s /tmp/PHSS_10876.depot
5b. For a homogeneous NFS Diskless cluster run swcluster on the
server to install the patch on the server and the clients:
swcluster -i -b
This will invoke swcluster in the interactive mode and
force all clients to be shut down.
WARNING: All cluster clients must be shut down prior to the
patch installation. Installing the patch while the
clients are booted is unsupported and can lead to
serious problems.
The swcluster command will invoke an swinstall session in which
you must specify:
alternate root path - default is /export/shared_root/OS_700
source depot path - /tmp/PHSS_10876.depot
To complete the installation, select the patch by choosing
"Actions -> Match What Target Has" and then "Actions -> Install"
from the Menubar.
5c. For a heterogeneous NFS Diskless cluster:
- run swinstall on the server as in step 5a to install
the patch on the cluster server.
- run swcluster on the server as in step 5b to install
the patch on the cluster clients.
By default swinstall will archive the original software in
/var/adm/sw/patch/PHSS_10876. If you do not wish to retain a
copy of the original software, you can create an empty file
named /var/adm/sw/patch/PATCH_NOSAVE.
Warning: If this file exists when a patch is installed, the
patch cannot be deinstalled. Please be careful
when using this feature.
It is recommended that you move the PHSS_10876.text file to
/var/adm/sw/patch for future reference.
To put this patch on a magnetic tape and install from the
tape drive, use the command:
dd if=/tmp/PHSS_10876.depot of=/dev/rmt/0m bs=2k
Special Installation Instructions:
It is recommended that patch PHSS_9803 is applied first.
Please note:
The CDE environment must not be running when this
patch is installed.
If it is, you will receive warnings that text files
are busy. SD will move these aside and place the
new files in the appropriate location, but it is
recomended that CDE first be shutdown prior to patch
instalation.
Requires the Periodic Patch PHSS_9803 to be installed
first. Otherwise, you may receive warnings about
unresolved external symbols.