DPS 5.2 : Directory Proxy Server 5.2 patch 4 |
Status: RELEASED
Patch Id: 116373-18
***********************************************************************
READ THE TERMS OF THE AGREEMENT ("AGREEMENT") IN THE LEGAL_LICENSE.TXT
FILE CAREFULLY BEFORE USING THIS SOFTWARE. BY USING THE SOFTWARE, YOU
AGREE TO THE TERMS OF THIS AGREEMENT. IF YOU DO NOT AGREE TO ALL OF THE
TERMS, PROMPTLY DESTROY THE UNUSED SOFTWARE.
***********************************************************************Summary: DPS 5.2 : Directory Proxy Server 5.2 patch 4
Date: Sep/29/2005
Installation Requirements:
NA
Solaris Release: 8 9 10
Sun OS Release: 5.8 5.9 5.10
Unbundled Product: Directory Proxy Server
Unbundled Release: 5.2
Xref: This patch available for i386 as patch 116374
Topic:
Directory Proxy Server 5.2 Patch 4
Relevant Architecture: sparc
BugId's fixed with this patch:
4554991 4555088 4789877 4870271 4896961 4908860 4916532 4919517 4931492 4934980 4937881 4942940 4955858 4966944 4976424 4977441 4977453 4980211 4980212 4983501 4983550 4984682 4984800 4990235 4990262 4991206 4991897 4992270 4992860 4993108 4993480 4994492 4995150 4997025 4997028 4997202 4997218 4997828 5003819 5004706 5006308 5011001 5013261 5018568 5022338 5024986 5025144 5028799 5031413 5041832 5042027 5065752 5078970 5083191 5085510 5089790 5091854 5091862 5100993 5105442 5108039 6174242 6182579 6184500 6186625 6190632 6192536 6195747 6197814 6197846 6199876 6201767 6202487 6228761 6234980 6243035 6247329 6269941 6272376 6285805 6289871 6291684 6296345 6303762
Changes incorporated in this version:
6291684 6303762 6296345
Patches accumulated and obsoleted by this patch:
Patches which conflict with this patch:
Required Patches:
115610-23 (or greater)
Obsoleted by:
Files Included in this Patch:
/usr/sadm/mps/admin/v5.2/bin/dps/COPYRIGHT
/usr/sadm/mps/admin/v5.2/bin/dps/install/script/dps52cfgUnix.tcl
/usr/sadm/mps/admin/v5.2/bin/dps/install/script/dps52ins.tcl
/usr/sadm/mps/admin/v5.2/bin/dps/install/script/dps52insUninstall.tcl
/usr/sadm/mps/admin/v5.2/bin/dps/install/script/dps52svrUnix.tcl
/usr/sadm/mps/admin/v5.2/bin/dps/install/script/dpsClean.tcl
/usr/sadm/mps/admin/v5.2/bin/dps/install/script/dpsInitLdif.tcl
/usr/sadm/mps/admin/v5.2/bin/dps/install/script/dpsSetup.tcl
/usr/sadm/mps/admin/v5.2/bin/dps/install/script/quickstart.tcl
/usr/sadm/mps/admin/v5.2/bin/dps/install/script/rminstance.tcl
/usr/sadm/mps/admin/v5.2/bin/dps/install/script/sync-dps-cds.tcl
/usr/sadm/mps/admin/v5.2/bin/dps/install/script/sync-dps.tcl
/usr/sadm/mps/admin/v5.2/bin/dps/license.txt
/usr/sadm/mps/admin/v5.2/bin/dps/server/bin/ldapfwd
/usr/sadm/mps/admin/v5.2/bin/dps/server/script/start
/usr/sadm/mps/admin/v5.2/bin/dps/server/script/stop
/usr/sadm/mps/admin/v5.2/java/jars/dps524.jar
/usr/sadm/mps/admin/v5.2/java/jars/dps524_en.jar
/usr/sadm/mps/admin/v5.2/manual/en/dps/help/Action-ChangeGroup.html
/usr/sadm/mps/admin/v5.2/manual/en/dps/help/Event-OnBind-Conditions.html
/usr/sadm/mps/admin/v5.2/manual/en/dps/help/Event-OnBind-Event.html
/usr/sadm/mps/admin/v5.2/manual/en/dps/help/Event-OnSSL.html
/usr/sadm/mps/admin/v5.2/manual/en/dps/help/NetworkGroup-Attribute-Renaming.html
/usr/sadm/mps/admin/v5.2/manual/en/dps/help/NetworkGroup-Attribute-Return.html
/usr/sadm/mps/admin/v5.2/manual/en/dps/help/NetworkGroup-Attribute-Search.html
/usr/sadm/mps/admin/v5.2/manual/en/dps/help/NetworkGroup-Compatibility.html
/usr/sadm/mps/admin/v5.2/manual/en/dps/help/NetworkGroup-DataHiding-Entry.html
/usr/sadm/mps/admin/v5.2/manual/en/dps/help/NetworkGroup-DataHiding-Subtree.html
/usr/sadm/mps/admin/v5.2/manual/en/dps/help/NetworkGroup-Encryption.html
/usr/sadm/mps/admin/v5.2/manual/en/dps/help/NetworkGroup-Forwarding-Bind.html
/usr/sadm/mps/admin/v5.2/manual/en/dps/help/NetworkGroup-Forwarding-Operations.html
/usr/sadm/mps/admin/v5.2/manual/en/dps/help/NetworkGroup-General.html
/usr/sadm/mps/admin/v5.2/manual/en/dps/help/NetworkGroup-Network.html
/usr/sadm/mps/admin/v5.2/manual/en/dps/help/NetworkGroup-Referral.html
/usr/sadm/mps/admin/v5.2/manual/en/dps/help/NetworkGroup-Search-Control.html
/usr/sadm/mps/admin/v5.2/manual/en/dps/help/NetworkGroup-Search-References.html
/usr/sadm/mps/admin/v5.2/manual/en/dps/help/NetworkGroup-Search-Scope.html
/usr/sadm/mps/admin/v5.2/manual/en/dps/help/NetworkGroup-Search-Size.html
/usr/sadm/mps/admin/v5.2/manual/en/dps/help/NetworkGroup-ServerLoad.html
/usr/sadm/mps/admin/v5.2/manual/en/dps/help/NetworkGroup-loadbalance.html
/usr/sadm/mps/admin/v5.2/manual/en/dps/help/Property-AttributeRenaming.html
/usr/sadm/mps/admin/v5.2/manual/en/dps/help/Property-ForbiddenEntry-AttributeFiltering.html
/usr/sadm/mps/admin/v5.2/manual/en/dps/help/Property-ForbiddenEntry-EntryMatching.html
/usr/sadm/mps/admin/v5.2/manual/en/dps/help/Property-LDAPServer-Encryption.html
/usr/sadm/mps/admin/v5.2/manual/en/dps/help/Property-LDAPServer-LDAPVersion.html
/usr/sadm/mps/admin/v5.2/manual/en/dps/help/Property-LDAPServer-Settings.html
/usr/sadm/mps/admin/v5.2/manual/en/dps/help/Property-LoadBalancing.html
/usr/sadm/mps/admin/v5.2/manual/en/dps/help/Property-Logging-Level.html
/usr/sadm/mps/admin/v5.2/manual/en/dps/help/Property-Logging-Output.html
/usr/sadm/mps/admin/v5.2/manual/en/dps/help/Property-Logging-Settings.html
/usr/sadm/mps/admin/v5.2/manual/en/dps/help/Property-SearchSizeLimit.html
/usr/sadm/mps/admin/v5.2/manual/en/dps/help/Server-Configuration-Main.html
/usr/sadm/mps/admin/v5.2/manual/en/dps/help/SunONE.jpg
/usr/sadm/mps/admin/v5.2/manual/en/dps/help/System-Encryption.html
/usr/sadm/mps/admin/v5.2/manual/en/dps/help/System-Encryption_cipher.html
/usr/sadm/mps/admin/v5.2/manual/en/dps/help/System-Settings-Connections.html
/usr/sadm/mps/admin/v5.2/manual/en/dps/help/System-Settings-SSL.html
/usr/sadm/mps/admin/v5.2/manual/en/dps/help/System-Settings-Unix.html
/usr/sadm/mps/admin/v5.2/manual/en/dps/help/System-Settings.html
/usr/sadm/mps/admin/v5.2/manual/en/dps/help/configuration-objectview.html
/usr/sadm/mps/admin/v5.2/manual/en/dps/help/configuration-topology.html
/usr/sadm/mps/admin/v5.2/manual/en/dps/help/help_contents.html
/usr/sadm/mps/admin/v5.2/manual/en/dps/help/server-configuration-logfile.html
/usr/sadm/mps/admin/v5.2/manual/en/dps/help/server-configuration-logs-detail.html
/usr/sadm/mps/admin/v5.2/manual/en/dps/help/server-configuration-logs-output.html
/usr/sadm/mps/admin/v5.2/manual/en/dps/help/server-configuration-logs-rotation.html
/usr/sadm/mps/admin/v5.2/manual/en/dps/help/server-configuration-logs.html
/usr/sadm/mps/admin/v5.2/manual/en/dps/help/server-configuration-netsettings.html
/usr/sadm/mps/admin/v5.2/setup/dps/locale/resources/DpsSetupResources.properties
Problem Description:
(from current patch)
6291684 DPS 5.2 Patch4 Solaris : unable to backout to previous version
6303762 Patch DPS Linux : /opt/directory-proxy-server/5.2/bin/tcl8.2/ is empty after applying the patch
6296345 DPS PatchZip4 : change the owner of SERVERROOT
(from 116373-17)
6199876 quickstart.tcl does not give the option to specify the instance name
6228761 ldapfwd 5.2.07+ is using 100 CPU on win2k following an referral without closing the TCP connection.
6289871 README files have not been updated for 5.2 P4
(from 116373-16)
4916532 When creating any new log property definitions, log file limits/rotation fails
4993108 Large Entries Are Truncated When Retrieved Over SSL
5042027 Does not change group on anonymous binds
6192536 crash in CAI_LF_AclARProperty::server_rename_dn_attrs when BIND dn has trailing "+"
6234980 JES3 DPS 5.2SP3 - crashes after a "configure now" installation when telneting DPS port from remote
6243035 When writing audit logging to a separate file, DPS can stop writing log info after log file deletion
6247329 ldapfwd crash in malloc
6269941 DPS shows bad version in mpsconsole after upgrade
6272376 bad management of references to CAI_LF_Server objects
6285805 JES4:Linux:DPS: After upgrade DPS Admin console looking for old jar file dps522.jar
(from 116373-15)
(from 116373-14)
6202487 Syntax Error in DPS-prebackout.sh Script
(from 116373-13)
6197814 DPS instance is not visible in the console
6197846 DPS backout returns to 5.2 instead of patch2 version
6201767 DPS upgrade from 52RTM to patch3 fails
(from 116373-12)
5078970 DPS doesn't respond
6182579 SSL Failover in DPS causes looping in failover function
6184500 Upgrade failed on Sol. x86 : libnspr4.so: version `NSPR_4.3' not found
6186625 Upgrade failed in postpatch script (upgrade)
6190632 Failback doesn't work on DPS 5.2
6195747 SJES3_11/14 nightly: OLH of DPS is not shown in all locales
(from 116373-11)
5065752 Bind and Unbind stress with ldclt fails on high performance windows platforms
5083191 Can not install DPS patch if the base dir diffrent from admin server base dir
5091854 Referrals hangs with ldapfwd 5.2.09
5091862 IP Connection Limit Is Not Enforced
5105442 Persistant search does not return an error code referred sub suffix
5108039 Upgrade doesn't work on Solaris (Sparc & x86)
6174242 Upgrade doesn't work on Solaris
(from 116373-10)
5011001 Internal Failover of DS by DPS52 proxy not transparent
5041832 Error Message Is Produced the First Time the Console Is Launched for a New Insta
5085510 DPS console hangs with JDK 1.5 beta
5089790 Patch are not available on Solaris
5100993 Old version of DPS is installed. 5.2P2 instead of 5.2P3
(from 116373-9)
5031413 On line Help : cannot access on line help pages from the configurator sub menus
(from 116373-8)
5006308 RPM : search on secure connection is interrupted
5018568 Patch README to be improved
5022338 after upgrade, DPS console is blocked
5024986 Java exception raised when changing Log details
5025144 README of DPS5.2patch2_bld6/x86 has a wrong patchid inside
5028799 DPS 5.2p2 patch does not bring rebranded on-line help
(from 116373-7)
4870271 DPS Topology Configs do not display help under certain conditions
4990262 dpsconfig2ldif returns Invalid credentials
(from 116373-6)
4789877 Wrong message if DS not started at DPS startup time
4896961 help menu does not work when DPS installed into different location from DS.
4931492 Orion1_b13a; DPS5.2; password stored in plain text in flat file
4934980 Cannot unconfigure as non-root (SolPkg)
4937881 user field in quickstart should be mandatory
4942940 5.2 install fails when running setup as root but specifying non-root user
4976424 Group change can lead to incorrect load balancing
4980211 Bad RPM packages on build 20040115.1
4984800 Cannot perform search with empty attribute type
4990235 DPS 5.2: attribute renaming doesn't work when filter contains a NOT operator
4991897 Orion2_b05; Admin console; DPS config screen does not load up
4992270 Server Load parameters are not consulted when a Change Group operation occurs
4992860 sync-dps-cds.tcl does not report errors when failing
4997025 In DPS upgrade, one temporary file is not cleaned and prevents clean uninstall
4997028 DPS patchrm / left <instance>-cert8.db that can cause pbs
4997202 patchadd & patchrm does not stop dps instance if running when <base dir>!='/'
4997218 Need more details in quickstart.tcl error logs
4997828 patchadd -R fails to upgrade <SR>:missing ROOTDIR path use when working remotely
5003819 RPMs integrate command issue
5004706 RPM : dpsconfig2ldif and dpsldif2config don't work. Java exception returned
5013261 Regression in acceptance test suite
(from 116373-5)
4966944 Sun ONE Directory Proxy Server 5.2 should use the short length form when possibl
4991206 After Upgrade the DPS console still refers SUN One product instaed of Sun Java
4993480 Upgrade process ignores the serverroot owner
4994492 removing a DPS instance may remove certificates of other instances
4995150 Unexpected traces returned by rminstance.tcl
(from 116373-4)
4983501 AS error (404 Not Found) prevents DPS configuration
4983550 PST-ID# 1739 - 116373-02; DPS patch failed AutoIB testing
4984682 Removing one instance unregisters SIEs of all instances in CDS
(from 116373-3)
4977441 password in clear in tailor.txt
4977453 DPS daemon doesnt' start when admin password is not encrypted
4980212 Bad unconfiguration of DPS instance
(from 116373-1)
4554991 Save button always enabled for OnSSLEstablished Event
4555088 Health check must do more than just connect
4908860 DPS5.2; setup; GUI; display filed back ground same colour as text
4919517 DPS does not find component libs
4955858 password in clear on quickstart command line
Revision History:
116373-09 116373-14
Patch Installation Instructions:
--------------------------------
Upgrading Directory Proxy Server on Solaris
You upgrade Directory Proxy Server by applying patches, and
synchronizing settings with the configuration directory server.
This readme provides instructions for upgrading Directory Proxy Server
from Sun Java Enterprise System 2003Q4, 2004Q2 and 2005Q1 to 2005Q4, and backing
out Directory Proxy Server from Sun Java Enterprise System 2005Q4 to
2003Q4, 2004Q2 and 2005Q1. For more information on upgrading from prior versions,
see the Java Enterprise System Upgrade and Migration Guide.
------------------------------------------------------------------------
Notes
1. Directory Proxy Server belongs to a group of products sharing
the same Administration Server. You must patch all of these products at
the same time.
2. You cannot upgrade Directory Proxy Server by applying patches unless
Directory Proxy Server was installed on a Solaris system with SUNW*
packages.
3. When you apply patches, you upgrade the SSL certificate database.
If you subsequently decide to back out the patches and you have changed
the content of the certificate database, you must manually replay
the changes after backing out the patches. Consider performing a
backup before you back out the patches.
When you backout patches after having changed the SSL certificate
database, you cannot start in SSL mode. To workaround this problem,
turn off SSL mode, restart Directory Proxy Server, reinstall the
certificate, and then enable SSL mode.
4. Directory Server, Directory Proxy Server, Messaging Server,
Calendar Server, and the associated Administration Server
must run as the same user and group. That is, they must run with
the same UID and GID.
5. Rolling upgrade for Sun Cluster data services is not supported.
6. This procedure includes steps for Directory Proxy Server, Calendar
Server, and Messaging Server. If you are not using a component product,
ignore the steps related to that product.
------------------------------------------------------------------------
To Upgrade Directory Proxy Server on Solaris
1. Obtain the patches for your platform and installed server
component products.
* Shared component patch cluster: See the Sun Java Enterprise
System 2005Q4 Upgrade and Migration Guide
* Directory Server: 115614-25 for Sparc, 115615-25 for x86
* Administration Server: 115610-23 for Sparc, 115611-23 for x86
* Calendar Server:
Sparc: 116577-16, 117010-18 (or greater)
x86: 116578-16, 117011-18 (or greater)
* Directory Proxy Server: 116373-18 for Sparc, 116374-18 for x86
* Messaging Server:
Sparc: 118207-28, 117784-10, 116574-01 (or greater)
x86: 118208-28, 117785-10, 116575-01 (or greater)
You can download patches from
http://sunsolve.sun.com/pub-cgi/show.pl?target=patches/patch-access.
2. Stop the console if it is running.
3. Stop all running servers in this order:
1. Calendar Server
2. Messaging Server
3. Directory Proxy Server
4. Administration Server
5. Directory Server
4. Apply the shared component patch cluster.
See the shared component patch readme for the procedure.
5. Apply the Administration Server component patch.
See the Administration Server component patch readme
for the procedure.
6. Apply the Directory Server component patch.
See the Directory Server component patch readme
for the procedure.
7. Apply the Directory Proxy Server component patch.
1. Ensure that the configuration directory server
is running. This step is essential for automatic
synchronization with the settings stored in the
configuration directory server.
2. Apply the patch using the patchadd(1m) command.
8. Apply the Messaging Server component patch.
See the Messaging Server component patch readme for the procedure.
9. Apply the Calendar Server component patch.
See the Calendar Server component patch readme for the procedure.
10. Restart the servers in this order:
1. Directory Server
2. Administration Server
3. Directory Proxy Server
4. Messaging Server
5. Calendar Server
------------------------------------------------------------------------
To Back Out Directory Proxy Server on Solaris
1. Stop the console if it is running.
2. Stop all running servers in this order:
1. Calendar Server
2. Messaging Server
3. Directory Proxy Server
4. Administration Server
5. Directory Server
3. Backout the Calendar Server component patch.
See the Calendar Server component patch readme for the procedure.
4. Backout the Messaging Server component patch.
See the Messaging Server component patch readme for the procedure.
5. Backout the Directory Proxy Server component patch.
1. Ensure that the configuration directory server is running.
This step is essential for automatic synchronization with
the settings stored in the configuration directory server.
2. Backout the patch by using the patchrm(1m) command.
3. If the configuration directory server is local, stop the
configuration directory server.
6. Backout the Directory Server component patch.
See the Directory Server component patch readme for the procedure.
7. Backout the Administration Server component patch.
See the Administration Server component patch readme for the procedure.
8. Backout the shared component patch cluster.
See the shared component patch readme for the procedure.
9. Restart the servers in this order:
1. Directory Server
2. Administration Server
3. Directory Proxy Server
4. Messaging Server
5. Calendar Server
------------------------------------------------------------------------
Troubleshooting
* If after applying the patches, you still see a Sun ONE-branded
console rather than a Sun Java System-branded console, verify
that you effectively synchronized with the configuration
directory server.
* If backing out the patches did not work, this could be
because the upgraded Directory Proxy Server was not
synchronized with the configuration directory server before
you tried to back out patches. Try the entire process again,
starting from the beginning.
* If the upgraded settings are not automatically
synchronized with the configuration directory
server, synchronize them by running this command:
# <DPS_BASEDIR>/usr/sadm/mps/admin/v5.2/bin/tcl8.2/tclsh
<DPS_BASEDIR>/usr/sadm/mps/admin/v5.2/bin/dps/install/script/sync-dps-cds.tcl
-cid <DPS_BASEDIR>/usr/sadm/mps/admin/v5.2 -serverroot <ServerRoot>
Where:
<DPS_BASEDIR> is / by default, and therefore may be left out.
The -cid option takes a full path, cid_path, such that the
program can assert that the following directory exists:
cid_path/bin/dps/install/script
The -serverroot option takes the full path to an installed
and configured Administration Server. The script validates
that the following files exist:
<ServerRoot>/admin-serv/config/adm.conf
<ServerRoot>/admin-serv/config/jvm12.conf
------------------------------------------------------------------------Special Install Instructions:
------------------------------
None.
README -- Last modified date: Wednesday, December 7, 2005