<html><head><meta name="color-scheme" content="light dark"></head><body><pre style="word-wrap: break-word; white-space: pre-wrap;">OBSOLETE Patch-ID# 111891-07
Keywords: Security Sun Ray Update Patch
Synopsis: Obsoleted by: 111891-08 Sun Ray Server version 1.3 Patch Update
Date: Oct/07/2002

Install Requirements: Reboot immediately after patch is installed                      
                      See Special Install Instructions                      
                      
Solaris Release: 2.6 7 8

SunOS Release: 5.6 5.7 5.8

Unbundled Product: Sun Ray Enterprise Server Software

Unbundled Release: 1.3

Xref: 

Topic: 

Relevant Architectures: sparc

BugId's fixed with this patch: 4436983 4463574 4476245 4484759 4486704 4489566 4493511 4496966 4518444 4518568 4520208 4521702 4530019 4530420 4548753 4614182 4616249 4616446 4616447 4616450 4619491 4623388 4626041 4627096 4630220 4640827 4640929 4642695 4648409 4649533 4657147 4660438 4662521 4665447 4672787 4678927 4685177 4714470 4714473 4714474 4714475

Changes incorporated in this version: 4714470 4714473 4714474 4714475 4627096 4678927 4665447 4685177

Patches accumulated and obsoleted by this patch: 

Patches which conflict with this patch: 

Patches required with this patch: 

Obsoleted by: 

Files included with this patch: 

/etc/init.d/utsyscfg
/etc/opt/SUNWut/smartcard/CommonAccessCard.cfg
/etc/opt/SUNWut/smartcard/Payflex-All.cfg
/etc/opt/SUNWut/smartcard/probe_order.conf
/opt/SUNWbb/bin/bbkillproc
/opt/SUNWbb/bin/bbrootsession
/opt/SUNWbb/bin/bbstartd
/opt/SUNWut/bin/utselect
/opt/SUNWut/bin/utxconfig
/opt/SUNWut/cgi-bin/desktop
/opt/SUNWut/cgi-bin/status
/opt/SUNWut/cgi-bin/user
/opt/SUNWut/etc/template/utsservices.cfg
/opt/SUNWut/lib/firmware/CoronaP1
/opt/SUNWut/lib/firmware/CoronaP2
/opt/SUNWut/lib/firmware/CoronaP3
/opt/SUNWut/lib/firmware/CoronaP4
/opt/SUNWut/lib/iu_modules/M25SunRayCore
/opt/SUNWut/lib/libsrcom.so.2
/opt/SUNWut/lib/libutgrpmgr.so
/opt/SUNWut/lib/libutjadmin.so
/opt/SUNWut/lib/libutscr.so.2
/opt/SUNWut/lib/libutsession.so.1
/opt/SUNWut/lib/libutstatus.so.1
/opt/SUNWut/lib/modules/TerminalGroup.jar
/opt/SUNWut/lib/nscloginGUI
/opt/SUNWut/lib/ocf_termadmin
/opt/SUNWut/lib/pam_sunray.so
/opt/SUNWut/lib/prototype/Xreset.SUNWut.prototype
/opt/SUNWut/lib/prototype/Xsetup.SUNWut.prototype
/opt/SUNWut/lib/prototype/Xstartup.SUNWut.prototype
/opt/SUNWut/lib/prototype/services.SUNWut.prototype
/opt/SUNWut/lib/scloginGUI
/opt/SUNWut/lib/sdk.jar
/opt/SUNWut/lib/sunrayCTdriver.jar
/opt/SUNWut/lib/utaction
/opt/SUNWut/lib/utauthd.jar
/opt/SUNWut/lib/utdevmgrd
/opt/SUNWut/lib/utdmsession
/opt/SUNWut/lib/utdtsession
/opt/SUNWut/lib/utscrevent
/opt/SUNWut/sbin/utadm
/opt/SUNWut/sbin/utdesktop
/opt/SUNWut/sbin/utfwadm
/opt/SUNWut/sbin/utuser
/usr/openwin/server/modules/ddxSUNWsunray.so.1

Problem Description:

4714470 F/w doesn't return data if status code is 0x63XX
 
4714473 If the APDU length is smaller than GetResponse length, f/w goes with APDU length
 
4714474 F/w not attending to the card's request for more time
 
4714475 sunray can not be used to do longer APDU transactions.
 
4627096 terminating kiosk sessions leads to hung appliances
 
4678927 Sun Ray DDX should play well with Xinerama pixmap caching
 
4665447 utselect at login truncates altDts list in dtgreet
 
4685177 Smartcards  are not accessible from token reader DTU by SCF
 
(from 111891-06)
4662521 Need to patch 1.3 release to support cbs / P4
 
4484759 Broken appliance makes SRSS services dysfunctional after 3-5 hours
 
4548753 If the primary is down, then the secondaries fail during an ldap add timeout
 
4648409 Need fixes in SRSS to support smartcard operations on Solaris 8
 
4616249 APDU exchange sometimes returns 0000 for SW1, SW2
 
4616446 Smartcards in readers become inaccessible if DM goes away and comes back
 
4616447 If DM is unavailable for more than SCbus retry time, SRCOM wedges
 
4640827 Can not access devices using sessionID key during login
 
4640929 Device Manager has incorrect debug messages
 
4518568 OCF server loops after Sun Ray Session Manager is restarted
 
4672787 GetResponse processing is broken
 
4623388 ut_sessionGetId needs to work during X server grab
 
4476245 getatr command returns Error for smartcards supported in 1.3 most of the time.
 
4518444 SUNWutps won't install on Solaris 9 systems
 
4616450 SUNWutscr packaging scripts need to properly configure OCF for Sun Ray
 
(from 111891-05)
4657147 utselect GUI Copyright notice overlaps buttons in some locales
 
4614182 utselect fails to redirect to a server with a long (&gt;16 chars) name
 
4642695 sunray ignores buttons 4, 5, and 6 from usb mice
 
4660438 Security: Possible to log in as a different user when NSCM is enabled
 
(from 111891-04)
4649533 authentication mgr crashes with JNI panic: native code passed a wrong class
 
4486704 NSC login GUI is unusable at low display resolutions
 
4630220 NSC login GUI screen is "squished" if you enable  8 bit pseudocolor mode.
 
4496966 "welcome" string contains username instead of server name in one case.
 
(from 111891-03)
4626041 utxconfig when run without $DISPLAY set affects system defaults
 
4521702 UtselectAtlogin pop up window unreadable in Japanese.
 
(from 111891-02)
4489566 ut admin commands take 10 mins to produce output
 
4493511 utfwadm doesn't parse quotes from new-style dhtadm
 
4619491 Typo in README file of patches 110666  &amp; 111891
 
(from 111891-01)
4530019 Multihead secondaries get green newt when card is inserted or removed
 
4530420 waitForPrimary icon on secondaries while primary is connected
 
4436983 virtual resolution problem with SunRay 100, 1.2 and utxconfig -r 1152x900
 
4463574 Provide way to simultaneously use USB barcode scanner and USB keyboard
 
4520208 sunray boot hid driver accepts invalid interrupt packet length

Patch Installation Instructions:
-------------------------------- 
For Solaris 2.6, 7 &amp; 8 releases, refer to the man pages for instructions
on using 'patchadd' and 'patchrm' scripts provided with Solaris.
Any other special or non-generic installation instructions should be
described below as special instructions.  The following example
installs a patch to a standalone machine:
 
        example# patchadd /var/spool/patch/110666-01
 
The following example removes a patch from a standalone system:
 
        example# patchrm 110666-01
 
For additional examples please see the appropriate man pages.

Special Install Instructions:
----------------------------- 
 
Required Patches
----------------
Solaris 8 users must install the following patches before 
attempting to install this patch.  
 
	108919-14 (or later)
	109354-14 (or later)
	109887-13 (or later)
 
Solaris 2.6 &amp; 7 users do not need to install any extra patches
 
Warnings &amp; Errors
-----------------
** WARNING: This patch should only be applied to systems which
        have Sun Ray Server Software 1.3 fully installed.  Do not
        attempt to add this patch to the UFS image to be applied as
        part of the install process **
 
** WARNING: Unconfiguring the Sun Ray Server Software before
	removal of this patch may lead of error messages and/or
	removal failure 
 
Performing the command /opt/SUNWut/sbin/utconfig -u before removing
this patch may cause the following error messages to be output in
the log file:
 
ERROR: attribute verification of &lt;/etc/opt/SUNWut/smartcard/probe_order.conf&gt; failed
	group name &lt;utadmin&gt; not found in group table(s)
ERROR: attribute verification of &lt;/etc/opt/SUNWut/smartcard/probe_order.conf&gt; failed
	group name &lt;utadmin&gt; not found in group table(s)
 
The patch removal will fail and any subsequent attempts to remove
the patch will fail with the error message
 
	Patch 111891-07 was installed without backing up the original files.
	It cannot be backed out.
 
If this problem occurs, simply perform the steps documented below and 
the patch will remove successfully.
 
	1. Reconfigure the Sun Ray Server Software, applying the
	   settings used when the software was configure originally.
 
		$ /opt/SUNWut/sbin/utconfig
 
	2. Add the 111891-07 patch and reboot the system
 
		$ /usr/sbin/patchadd 111891-07
 
	3. Remove the 111891-07 patch 
 
		$ /usr/sbin/patchrm 111891-07
 
	4. Unconfigure the Sun Ray Server Software
 
		$ /opt/SUNWut/sbin/utconfig -u
 
 
Sun Ray Firmware Upgrades
-------------------------
 
This patch includes firmware updates for Sun Ray appliances.  The
updated firmware will be loaded by your Sun Ray appliances through the
usual Sun Ray firmware download mechanism.  The firmware changes are
independent of the Sun Ray Server Software changes but are delivered
in this patch for your convenience.
 
If this patch is being applied to servers configured into a Sun Ray
failover group it must be applied to all servers in the group at your
earliest convenience.  While some members of the group remain unpatched
the restart time of your Sun Ray appliances may be noticeably longer
than usual.  The increased restart time can be avoided by taking the
action described in step 1 below.
 
The following additional steps are required when adding this patch on a
live system:
 
        (before applying patch to system)
 
        1. (optionally) Suppress firmware downloads from all servers in
        a Sun Ray failover group
 
        2. Stop Sun Ray services on the server being patched
 
        (after applying patch)
        3. Reboot the Sun Ray server
 
 
To remove this patch, carry out these steps in the following order:
 
        (before removing the patch)
 
        1. (optionally) Suppress firmware downloads from all servers in
           a Sun Ray failover group
 
        2. Stop Sun Ray services on the server being patched
 
        (after removing the patch)
        3. Reboot the Sun Ray server
 
 
Detailed Steps
--------------
 
1. Suppress firmware downloads
 
        If the server being patched is not a member of a Sun Ray
        failover group you should skip this step.
 
        If the server being patched is a member of a Sun Ray failover
        group then this step is optional but is strongly recommended.
 
        At Patch Installation
        ---------------------
 
            Before adding this patch to servers configured into a Sun
            Ray failover group we advise that you disable Sun Ray
            firmware delivery from all unpatched hosts in the failover
            group.  On each host in the group, execute the command:
 
                $ /opt/SUNWut/sbin/utfwadm -a -D -n all
 
            Do this only one time, before adding this patch to any
            server in the group.
 
            The purpose of this step is to prevent unpatched servers
            from offering old firmware to Sun Ray appliances that have
            already accepted the new firmware delivered with this
            patch.
 
            If this patch is being applied to a Sun Ray failover group
            then omitting this step may result in increased restart
            times for your Sun Ray appliances.  (A mixture of patched
            and unpatched servers advertising conflicting firmware
            versions may cause the appliance to download new firmware
            each time it restarts.  The appliance automatically
            restarts itself after downloading fresh firmware so its
            overall restart cycle is longer in that case.  The
            appliance may restart itself several times before
            establishing or reconnecting to a session.)  The Sun Ray
            restart time will return to normal once the patch has been
            added to all servers in the failover group.
 
        At Patch Removal
        ----------------
 
            Before removing this patch from servers configured into a
            Sun Ray failover group we advise that you disable firmware
            delivery from any hosts in the failover group that have
            this patch installed.  On each already-patched host in the
            group, execute the command:
 
                $ /opt/SUNWut/sbin/utfwadm -a -D -n all
 
            Do this only one time, before removing this patch from any
            of the already-patched servers in the group.
 
            The purpose of this step is to prevent already-patched
            servers from offering new firmware to Sun Ray appliances.
 
            If this patch is being removed to a Sun Ray failover group
            then omitting this step may result in increased restart
            times for your Sun Ray appliances.  (A mixture of patched
            and unpatched servers advertising conflicting firmware
            versions may cause the appliance to download new firmware
            each time it restarts.  The appliance automatically
            restarts itself after downloading fresh firmware so its
            overall restart cycle is longer in that case.  The
            appliance may restart itself several times before
            establishing or reconnecting to a session.)  The Sun Ray
            restart time will return to normal once the patch has been
            removed from all servers in the failover group.
 
 
2. Stopping Sun Ray services and login sessions
 
        Before applying this patch to a Sun Ray server or removing this
        patch from a Sun Ray server all users should be logged out of
        their Sun Ray sessions.
 
        Stop the Sun Ray services using the following command:
 
                $ /etc/init.d/utsvc stop
 
        This command will terminate any Sun Ray sessions that were not
        already logged out.
 
        Next, add or remove the patch using the instructions outlined
        above in the section "Patch Installation Instructions".
 
        Adding the patch automatically prepares the server to advertise
        new firmware to your Sun Ray appliances.  Removing the patch
        automatically prepares the server to revert to advertising
        pre-patch firmware to your Sun Ray appliances.
 
 
3. Rebooting the Sun Ray server
 
        The Sun Ray server must be rebooted after the addition or
        removal of the patch.

README -- Last modified date:  Thursday, March 6, 2003

</pre></body></html>