<html><head><meta name="color-scheme" content="light dark"></head><body><pre style="word-wrap: break-word; white-space: pre-wrap;">OBSOLETE Patch-ID# 105402-34
Keywords: security rpcinfo libnsl lookup ypbind.pid clients rpc.nisd RPC buffer
Synopsis: Obsoleted by: 105402-35 SunOS 5.6_x86: libnsl and NIS+ commands patch
Date: Jun/26/2001

Solaris Release: 2.6_x86

SunOS Release: 5.6_x86

Unbundled Product: 

Unbundled Release: 

Xref: This patch is available for SPARC as patch 105401

Topic: SunOS 5.6_x86: libnsl and NIS+ commands patch
	NOTE:  Refer to Special Install Instructions section for 
               IMPORTANT specific information on this patch.

Relevant Architectures: i386

BugId's fixed with this patch: 1168376 1189481 1225430 4055704 4055715 4055724 4055727 4062999 4075462 4076999 4080264 4082712 4084813 4085079 4085394 4098943 4103308 4105286 4111288 4117516 4122273 4124715 4125365 4126638 4135388 4139126 4140617 4152002 4153703 4157559 4161969 4162879 4165775 4186012 4216240 4233192 4240463 4246959 4280714 4295834 4296198 4302592 4305859 4318294 4326943 4374142

Changes incorporated in this version: 4374142

Patches accumulated and obsoleted by this patch: 105525-01

Patches which conflict with this patch: 

Patches required with this patch: 

Obsoleted by: 

Files included with this patch: 

/usr/bin/nismkdir
/usr/bin/nistest
/usr/include/rpc/rpc_com.h
/usr/include/rpc/svc.h
/usr/lib/libnisdb.a
/usr/lib/libnisdb.so.2
/usr/lib/libnsl.a
/usr/lib/libnsl.so.1
/usr/lib/nis/nisclient
/usr/lib/nis/nisopaccess
/usr/lib/nis/nisping
/usr/lib/nis/nisupdkeys
/usr/sbin/nis_cachemgr
/usr/sbin/nisbackup
/usr/sbin/nisinit
/usr/sbin/nisrestore
/usr/sbin/rpc.nisd
/usr/sbin/rpc.nispasswdd

Problem Description:

4374142 RPC services using RPC_SVC_MT_AUTO can stop listening
 
(from 105402-33)
 
4280714 rpc.nisd hangs and consumes a lot of memory
4302592 TLI library is not fork-safe
4326943 Gets hundreds of __directory_object: Failed to lookup ... no such name
 
(from 105402-32)
 
4318294 Operations on NIS+ master slow when bug fix 4165775 is introduced
 
(from 105402-31)
 
4165775 Replica servers may attempt to allocate huge amounts of memory
 
(from 105402-30)
 
4125365 nisping -u exits with wrong return code when only getting master's update time
 
(from 105402-29)
 
4295834 NETPATH security problem in libnsl
4296198 NIS_OPTIONS sh vars (libnsl) security problem
 
(from 105402-28)
 
4305859 libnsl security bug.
 
(from 105402-27)
 
4124715 Denial of Service in connection oriented Transports.
 
(from 105402-26)
 
4246959 rpc.nispasswdd leaks memory during normal use
 
(from 105402-25)
 
4153703 Issuing an rpcinfo -u causes the 1.2 daemon of pcnfs to hang
4233192 NIS+ stops responding to UDP requests
4240463 checkpoint completes, but does not clear master's transaction log
 
(from 105402-24)
 
4216240 nisd patch 105401-20 generates irrelevant messages  "isn't a directory"
 
(from 105402-23)
 
4186012 NIS+ replicas may lose synchronization with the NIS+ master
 
(from 105402-22)
 
4055704 NIS_CALLBACK not authenticated (reworked)
4055715 NIS_PING not authenticated (reworked)
4055724 NIS_CHECKPOINT not authenticated (reworked)
4055727 NIS_CPTIME not authenticated (reworked)
 
(from 105402-21)
 
4055704 NIS_CALLBACK not authenticated
4055715 NIS_PING not authenticated
4055724 NIS_CHECKPOINT not authenticated
4055727 NIS_CPTIME not authenticated
 
(from 105402-20)
 
4162879 After the TTL value of directory cache expires the subdomain client. root object
 
(from 105402-19)
 
4152002 NIS+ groups donot work in the Solaris 2.6
 
(from 105402-18)
 
4157559 automountd won't retry the Null call to nfsd in pingnfs()
 
(from 105402-17)
 
4122273 after a nisls -lgR the niscat -o "[],directory" does not work anymore
 
(from 105402-16)
 
4161969 passwd lookups via FOLLOW_LINK do not FOLLOW_PATH from linked table any further
4105286 NIS master with DNS forwarding mode will hang up during system-reboot
 
(from 105402-15)
 
4140617 serving list hosed by nis+ object with non-trailing-dot group owner name
 
(from 105402-14)
 
4139126 libnsl buffer overflows
 
(from 105402-13)
 
4084813 directory objects not refreshed after timeout.
4085079 nisshowcache -v doesn't show the TTL counter decrementing
 
(from 105402-12)
 
4135388 rpc.nisd buffer overflow
 
(from 105402-11)
 
4117516 Fix for 4056960 breaks NIS public key retrieval
 
(from 105402-10)
 
4126638 nis cache manager does not invalidate cache
 
(from 105402-09)
 
        This revision has been generated to workaround bug 4010430 -- 
        installpatch should ignore a required patch when not applicable 
        to a target system.  The workaround is to include an empty root 
        sparse patch package.  This will allow patch dependency requirement 
        to be met in a server/client configuration.
 
(from 105402-08)
 
4111288 email with \" in the address causes nis_cachemgr to spin
 
(from 105402-07)
 
4085394 TCP connections to rpcbind remain established if client is halted.
4062999 "Error in RPC subsystem" from nisstat, nisupdkeys with +10 NIS+ sub-domains
 
(from 105402-06)
 
4098943 'yp_match' function not working in compatibility mode
 
(from 105402-05)
 
4103308 fix for bug #1168376 is incomplete for 2.6
 
(from 105402-04)
 
1189481 automountd caches old ip address of nfs server and never refreshes
 
(from 105402-03)
 
4082712 keylogin dumps core for nis+ client on 2.6
1168376 NIS+ servers should be allowed to be in the domain they serve.
 
(from 105402-02)
 
4080264 ypbind.pid file not created for diskless clients
1225430 ypbind can get requests before it is ready for them
 
(from 105402-01)
 
4076999 rpcinfo: RPC: Unable to receive; An event requires attention on Solaris 2.6.
 
(from 105525-01)
 
4075462 nisd is not closing file descriptors.

Patch Installation Instructions:
-------------------------------- 
Refer to the Install.info file within the patch for instructions on
using the generic 'installpatch' and 'backoutpatch' scripts provided
with each patch.  Any other special or non-generic installation
instructions should be described below.

Special Install Instructions:
----------------------------- 
 
	NOTE 1: To get the complete fix for 1225430 (ypbind can get
                requests before it is ready for them) and 4080264
                (ypbind.pid file not created for diskless clients),
                one needs to install 105404-01 (or newer).
 
	NOTE 2: If you are installing this patch to fix the "non-root
                NIS+ server not living in domain it serves" problem,
                you will also need to install the chkey/keylogin patch
                (105563-01 or newer).  You will also need to install
                the kernel/misc/rpcsec patch (105565-01 or newer) if
                you are installing this patch on a NIS+ server that is
                either a Secure NFS client or server.
 
	        Instructions on how to set up the non-root NIS+ server
	        to live in the domain it serves:
 
	        Setting up an existing non-root NIS+ server:
	        1.  Install this libnsl/NIS+ commands patch on the non-root 
	            NIS+ server.  Also install the kernel/misc/rpcsec patch 
	            (105565-01 or newer) if this server is either a Secure 
	            NFS client or server.
	        2.  Change the /etc/defaultdomain on the server to the domain 
	            it serves.
	        3.  Reboot the server.
 
	        Setting up a new non-root NIS+ server:
	        1.  Set up the server as described in the NIS+ docs.
	        2.  Install this libnsl/NIS+ commands patch on this new NIS+   
	            server.  Also install the kernel/misc/rpcsec patch 
	            (105565-01 or newer) if this server is either a Secure 
                    NFS client or server.
	        3.  Change the /etc/defaultdomain on the server to the domain 
	            it serves.
	        4.  Reboot the server.
 
        NOTE 3: To get the complete fix for 4085394 (TCP connections
                to rpcbind remain established if client is halted),
                one needs to install the /usr/sbin/rpcbind patch,
                105217-03, or its newer revision.
 
        NOTE 4: To get the complete fix for bug 4124715 (Denial of Service in
                connection oriented Transports) we recommend installation of
                the following patches (or newer):
 
                108896-01       (/usr/sbin/rpc.bootparamd)
                108894-01       (/usr/lib/netsvc/yp/rpc.ypupdated)
                108891-01       (/usr/lib/netsvc/yp/ypxfrd)
                105553-03       (/usr/sbin/rpc.nisd_resolv)
                105217-04       (/usr/sbin/rpcbind)
                108308-02       (/usr/sbin/keyserv)
                105404-03       (ypbind &amp; ypserv)
                106593-03       (/usr/lib/nfs/statd)
                105616-08       (/usr/lib/nfs/mountd)

README -- Last modified date:  Wednesday, October 3, 2001

</pre></body></html>