Patch-ID# 103178-05
Keywords: security pam_pwmgt.so.1 nispasswd cred domain /100 y2000 su
Synopsis: SunOS 5.5: pam security patch
Date: Aug/25/97

Solaris Release: 2.5

SunOS Release: 5.5

Unbundled Product:

Unbundled Release:

Xref: This patch available for x86 as patch 103179

Topic: SunOS 5.5: pam security patch

        NOTE:    We recommend installing all of the following bundled Solaris 2.5 
                 OS/Networking patches which contain the Y2000 fixes: 
   
                 102964-07  (or higher revs)    lp patch 
                 103153-15  (or higher revs)    kernel/fs/ufs & usr/lib/fs/ufs/fsck patch 
                 103178-04  (or higher revs)    pam security patch
                 103187-26  (or higher revs)    libc, libnsl, nis_cachemgr & rpc.nisd patch 
                 103241-03  (or higher revs)    BCP (binary compatibility) patch 
                 103261-04  (or higher revs)    ufsdump and ufsrestore patch 
                 103723-04  (or higher revs)    cron/crontab/at/atq/atrm patch 
                 103945-02  (or higher revs)    accounting patch
                 104466-02  (or higher revs)    usr/bin/date patch 
                 104861-01  (or higher revs)    usr/sbin/sar patch  
                 104863-02  (or higher revs)    troff macro patch      
                 104865-01  (or higher revs)    usr/bin/passwd patch 
                 104867-01  (or higher revs)    usr/lib/saf/listen patch 
                 104869-01  (or higher revs)    usr/lib/libadm.a and usr/lib/libadm.so.1 patch 
                 104871-01  (or higher revs)    usr/vmsys/bin/initial patch
                 104889-01  (or higher revs)    usr/bin/uustat patch
                 105018-01  (or higher revs)    usr/lib/libkrb.a and & usr/lib/libkrb.so.1 patch

BugId's fixed with this patch: 1151955 1218457 4010565 4018347 4030217

Changes incorporated in this version: 4010565

Relevant Architectures: sparc

Patches accumulated and obsoleted by this patch:

Patches which conflict with this patch:

Patches required with this patch: 104410-02 (or higher revs)

Obsoleted by:

Files included with this patch:

/etc/lib/pam_authen.so.1
/etc/lib/pam_entry.so.1
/etc/lib/pam_pwmgt.so.1
/usr/lib/security/pam_authen.so.1
/usr/lib/security/pam_entry.so.1
/usr/lib/security/pam_pwmgt.so.1

Problem Description:

4010565 su can be interrupted by <control-C> and not logged in /var/adm/log

(from 103178-04)

4030217 sa_get_authtokattr() error message prints /100 for /00 in year 2000

(from 103178-03)

4018347 pam security problem

(from 103178-02)

1151955 The PASSLENGTH attribute in /etc/default/passwd doesn't appear to work

(from 103178-01)

1218457 nispasswd fails if the LOCAL cred points to another domain

Patch Installation Instructions:
--------------------------------
Refer to the Install.info file within the patch for instructions on
using the generic 'installpatch' and 'backoutpatch' scripts provided
with each patch. Any other special or non-generic installation
instructions should be described below.

Special Install Instructions:
-----------------------------

        NOTE:    We recommend installing all of the following bundled Solaris 2.5 
                 OS/Networking patches which contain the Y2000 fixes: 
   
                 102964-07  (or higher revs)    lp patch 
                 103153-15  (or higher revs)    kernel/fs/ufs & usr/lib/fs/ufs/fsck patch 
                 103178-04  (or higher revs)    pam security patch
                 103187-26  (or higher revs)    libc, libnsl, nis_cachemgr & rpc.nisd patch 
                 103241-03  (or higher revs)    BCP (binary compatibility) patch 
                 103261-04  (or higher revs)    ufsdump and ufsrestore patch 
                 103723-04  (or higher revs)    cron/crontab/at/atq/atrm patch 
                 103945-02  (or higher revs)    accounting patch
                 104466-02  (or higher revs)    usr/bin/date patch 
                 104861-01  (or higher revs)    usr/sbin/sar patch  
                 104863-02  (or higher revs)    troff macro patch      
                 104865-01  (or higher revs)    usr/bin/passwd patch 
                 104867-01  (or higher revs)    usr/lib/saf/listen patch 
                 104869-01  (or higher revs)    usr/lib/libadm.a and usr/lib/libadm.so.1 patch 
                 104871-01  (or higher revs)    usr/vmsys/bin/initial patch
                 104889-01  (or higher revs)    usr/bin/uustat patch
                 105018-01  (or higher revs)    usr/lib/libkrb.a and & usr/lib/libkrb.so.1 patch