Sun Ray Core Services version 3.1.1 RHELAS4.0 SLES9.0 Patch Update |
Status: RELEASED
Patch Id: 124388-03
***********************************************************************
READ THE TERMS OF THE AGREEMENT ("AGREEMENT") IN THE LEGAL_LICENSE.TXT
FILE CAREFULLY BEFORE USING THIS SOFTWARE. BY USING THE SOFTWARE, YOU
AGREE TO THE TERMS OF THIS AGREEMENT. IF YOU DO NOT AGREE TO ALL OF THE
TERMS, PROMPTLY DESTROY THE UNUSED SOFTWARE.
***********************************************************************Summary: Sun Ray Core Services version 3.1.1 RHELAS4.0 SLES9.0 Patch Update
Date: Nov/26/2008
Installation Requirements:
Additional instructions may be listed below
Solaris Release: Note: RedHat SUSE
Sun OS Release: Note: RHELAS4.0 SLES9.0
Unbundled Product: Sun Ray Core Services
Unbundled Release: 3.1.1
Xref:
Topic:
Relevant Architecture: i386
BugId's fixed with this patch:
4826729 6321047 6356963 6451188 6451202 6454344 6455350 6457990 6464686 6469070 6476131 6476242 6477396 6482250 6483716 6483721 6489577 6492593 6499003 6499940 6500512 6502096 6510494 6512434 6519512 6522301 6530837 6531336 6532811 6542450 6568443 6569349 6571384 6573093 6573728 6583348 6587900 6592372 6596045 6605645 6610233 6616994 6636671 6641754 6655178 6659871 6667384 6677259 6694424 6730748 6737449
Changes incorporated in this version:
6659871 6616994 6542450 6587900 6641754 6583348 6636671 6655178 6667384 6694424 6730748 6737449 6677259
Patches accumulated and obsoleted by this patch:
Patches which conflict with this patch:
Required Patches:
Obsoleted by:
Files Included in this Patch:
Note: SUNWuta-3.1.1-19.08.i386.rpm
SUNWutdsk-3.1.1-19.08.i386.rpm
SUNWutfw-3.1.1-19.08.i386.rpm
SUNWutgsm-3.1.1-19.08.i386.rpm
SUNWuto-3.1.1-19.08.i386.rpm
SUNWutps-3.1.1-19.08.i386.rpm
SUNWutr-3.1.1-19.08.i386.rpm
SUNWutsto-3.1.1-19.08.i386.rpm
SUNWutu-3.1.1-19.08.i386.rpm
Problem Description:
6659871 access restrictions need improvements
6616994 LDAP password exposed during configuration using utconfig
6542450 Sun Ray DTU responds to ping even if IP address is incorrect
6587900 Oberthur (SIEBEL) cards not recognized by Sun Ray P8 units when smartcards added to SRDS
6641754 Sun Ray 2/2FS/270 smart card readers sometimes drop bytes at bauds greater than 9600
6583348 Sun Ray: Apple Mighty Mouse vertical scroll not functioning properly
6636671 if Sun Ray terminal gets TFTPsrvN (option 66) it should try sunray-config-servers if this fails
6655178 Smartcard Philips SmartMX doesn't work anymore in SRSS4.0
6667384 2FS doesn't receive second monitor utresadm override if DDC failed on second monitor
6694424 Unitech barcode reader fails to work with Sun Ray
6730748 Sun Ray DTU can't resolve hostnames
6737449 SYN|ACK retry during TCP passive open is broken
6677259 Finnish ID card not recognized on Sun Ray 2 on SRSS 4.0 (but is on Sun Ray 270)
(from 124388-02)
6512434 DTU hang/choppiness when using PCSC and SRWC 1.1_15 with smartcard PKI certs and ActivCard
6356963 utseriald sometimes denies access to device
6531336 utseriald crashes in ut_svc_cmd_detach - dprintf_level
6321047 reset of YUV sessions after 30 seconds can result in GNC/26D
6522301 unable to set multicast address for Sun Ray utauthd on x86
6476242 Group Manager should ignore interfaces that are not running
6532811 utdevmgrd logs warning message for every minute in /var/adm/messages file in one scenario
6571384 Device Manager can be spoofed
6573728 sometimes xlock screen comes when smartcard session hotdesked
6592372 channels switch when playing audio on SR2FS and SR2 DTUs
6596045 audio record not working on 4.0 b48 on Sun Ray 2 family
6573093 1400x1050 res doesn't work if native panel resolution
6610233 Sun Ray firmware problem with 2048bit key
6568443 Oberthur 5.2 cards do not work on Sun Rays
6499003 DTUs hang between 14 and 26D when /tmp given as mount path for disk partition
6530837 SRSS: Num keys do not work with Japanese Type7 keyboards on Linux
6569349 Xnewt server needs to sync up with Xorg security fixes
6605645 SRSS 4.0 network bandwidth is much higher than 3.1.1
(from 124388-01)
6451202 Hardware flow control broken in Edgeport adapters with TI chip
6464686 Quatech serial driver flushes pending output on close()
4826729 unable to self register using PAM
6483721 waitforprimary.start immediately respawns yuvfile in a hard loop
6519512 Type 7 keyboard/hub freezes/stops working with Sun Ray DTUs
6500512 SR2 (P8) DTU fails RDP PIN login when using Starcos SPK 2.3 and 2.4 smart cards
6499940 firmware should not do Get Response processing for scbus APDUs
6489577 null pointer dereference in UpdateArpTable
6482250 MTU received through DHCPINFORM request is not taking effect
6502096 need Support for Starcos SPK2.4 family of cards
6483716 utbind is inefficient (utsession socket)
6457990 sometimes SR270, Sun Ray 2 and Sun Ray 2FS hang when Authenticated Smart Cards are used
6477396 utdiskctl on Linux does not enforce exclusive open
6476131 "cannot allocate memory" seen when two mass storage devices are plugged in SLES-64
6455350 /tmp/SUNWut/units/ term fails to propagate throughout FOG
6492593 disk with blocksize != 512 does not mount
6469070 utdomount should have iocharset option for multibyte filenames.
6454344 utresdef fails with "res=*: Undefined error code" after a local timing has been defined
6451188 Hardware flow control is disabled on Linux
6510494 backing store can not be enabled on Linux
Detailed Installation Steps
---------------------------
1. Suppress firmware downloads
If the server being patched is not a member of a Sun Ray
failover group you should skip this step.
If the server being patched is a member of a Sun Ray failover
group then this step is optional but is strongly recommended.
At Patch Installation
---------------------
Before adding this patch to servers configured into a Sun
Ray failover group we advise that you disable Sun Ray
firmware delivery from all unpatched hosts in the failover
group. On each host in the group:
For dedicated network interconnects:
$ /opt/SUNWut/sbin/utfwadm -D -a -n all
For shared subnetwork interconnects:
$ /opt/SUNWut/sbin/utfwadm -D -a -N all
Do this only one time, before adding this patch to any
server in the group.
The purpose of this step is to prevent unpatched servers
from offering old firmware to Sun Ray appliances.
2. Stopping Sun Ray services and login sessions
Before the addition of this patch to a Sun Ray server
all users should be logged out of their Sun Ray sessions.
Stop the Sun Ray services using the following commands:
$ /etc/init.d/utstorage stop
$ /etc/init.d/utsvc stop
These commands will terminate any Sun Ray sessions that were not
already logged out.
Next, use the instructions outlined below in the section
"Patch Installation Instructions" for the addition
of this patch.
3. Rebooting the Sun Ray server
The Sun Ray server must be rebooted after the addition
of the patch.
4. Enable firmware downloads
After the addition of this patch on all Sun Ray
servers in a failover group, enable firmware downloads
using one of the following methods:
1) If all Sun Ray servers in the failover group provide
firmware downloads run this command on one of the servers:
$ /opt/SUNWut/sbin/utfwsync
After which the Sun Ray DTU's will reboot themselves and load
the new firmware.
2) If only some of the Sun Ray servers in the failover group provide
firmware downloads to the DTU's, run the following command
on the servers that do provide firmware:
For dedicated network interconnects:
$ /opt/SUNWut/sbin/utfwadm -A -a -n all
For shared subnetwork interconnects:
$ /opt/SUNWut/sbin/utfwadm -A -a -N all
Then restart services on all servers in the failover group by
executing the following command on a server in the group:
$ /opt/SUNWut/sbin/utfwsync -d
3) Upgrading firmware via the config parameter (.parms) file
Before the patch is applied use
$ /opt/SUNWut/sbin/utfwadm -D -a -V
After the patch is applied use
$ /opt/SUNWut/sbin/utfwadm -A -a -VRevision History:
124388-02 124388-01
Patch Installation Instructions:
--------------------------------
NOTE 1: Before patch installation, make a copy of the auth.props file
which will have to be copied back after patch installation.
cp -p /etc/opt/SUNWut/auth.props <path_name>/auth.props-backup
NOTE 2: To install this patch, run the following command for each RPM:
rpm --nodeps -F --noscripts 'rpmname'
Consult the rpm(1) man page for more details.
NOTE 3: After patch installation, restore the saved auth.props file.
cp -p <path_name>/auth.props-backup /etc/opt/SUNWut/auth.props
NOTE 4: After patch installation and before rebooting the server, run
the following commands to install the new mass storage driver
and to configure PAM properly.
Note if you have made customizations to your PAM configurations
you may wish to back them up first and merge your changes into
the resulting files:
# cd /usr/src/SUNWut/utdisk
# make clean
# make
# make install
# /opt/SUNWut/lib/utgenpam enableSpecial Install Instructions:
-----------------------------
NOTE 1: This patch is for the Sun Ray Core Services 3.1.1 component
that is part of Sun Ray Server Software 3.1.1.
NOTE 2: This SRSS patch does not support Live Upgrade. Please do not
install this patch via Live Upgrade.
NOTE 3: The DTU firmware delivered in this patch has the following version
identification string
4.0_127553-04_2008.08.26.14.53
NOTE 4: Details on the new OSD icons can be found in the Administration guide.
http://docs.sun.com/source/820-0412/t-s.html#50429990_81747
NOTE 5: Details on the new firmware short cut keys can be found in the
Administration guide.
Available options are: Stop/Ctrl-Pause A, N, V, Left Arrow,
Right Arrow, Down Arrow.
http://docs.sun.com/source/820-0412/new_nw_config.html#50503692_23638
NOTE 6: The DTU firmware delivered in this patch has an increased
downgrade "barrier" of '321' to prevent accidental downgrades to
firmware from earlier releases. If you wish to revert a unit back
to an earlier release of firmware after upgrading to this version
of firmware, please see the admin guide for information on
overriding the barrier/barrierLevel mechanism.
NOTE 7: Some new strings have been added to the Self-Registration GUI,
but localized strings are not delivered in this patch.
NOTE 8: A new PAM service 'utselfreg' has been introduced in this patch
for use with the Self-Registration GUI. You may add or edit this
service configuration to configure authentication behavior of GUI
using standard PAM service modules supplied with Linux.
See the pam.d man page for further details.
Warnings & Errors
-----------------
** WARNING: This patch should only be applied to systems which have
Sun Ray Server Software 3.1.1 fully installed.
Do not attempt to add this patch to the UFS image to be
applied as part of the install process.
** WARNING: This patch redelivers the
/etc/opt/SUNWut/smartcard/probe_order.conf file.
If you have modified this file, the changes will be lost, and
you will need to make the same changes to the new copy.
** WARNING: As part of this patch installation, it will update
the Sun Ray PAM entries in the pam.d directory. This means
that your existing Sun Ray configuration in the pam.d directory
will be overwritten. If you have made some Sun Ray customization
for your site, you may want to save a copy of the current
pam.d directory before you install this patch so that you can
manually merge your changes back into the pam.d directory.
README -- Last modified date: Wednesday, November 26, 2008
Sun Contracted Content
Sun Contracted Feature
