Patch-ID# 103884-05 Keywords: security account keyboard lockup authenticate NIS+ password xsun Synopsis: CDE 1.0.1: dtlogin patch Date: Jan/30/98 Solaris Release: 2.4 2.5 SunOS Release: 5.4 5.5 Unbundled Product: CDE Unbundled Release: 1.0.1 Relevant Architectures: sparc Xref: This patch available for x86 as patch 103885 BugId's fixed with this patch: 1205631 1253624 1258143 4005735 4067366 4095696 Changes incorporated in this version: 4095696 Patches accumulated and obsoleted by this patch: Patches which conflict with this patch: Patches required with this patch: Obsoleted by: Files included with this patch: /usr/dt/bin/dtlogin /usr/dt/config/dtconfig.rc Problem Description: 4095696 Xsun -query doesn't work with Solaris 2.5.1 Incorporated from previous patch: 4067366 Core file from dtlogin expose user's unencrypted passwd. 4005735 CDE 1.1 dtlogin on Solaris 2.4 (and 1.0.x patch) has serious security hole. 1205631 Dtlogin failed to detect an expired account. 1253624 Keyboard lockup fix for console logins. 1258143 Authenticate NIS+ passwords longer than 8 characters. Patch Installation Instructions: -------------------------------- Refer to the Install.info file for instructions on using the generic 'installpatch' and 'backoutpatch' scripts provided with each patch. Any other special or non-generic installation instructions should be described below as special instructions. Special Install Instructions: ----------------------------- None.