Patch-ID# 116046-07
Keywords: security libkadm5srv.so.1 krbv5 pam_krb5
Synopsis: SunOS 5.9_x86: krbv5 Patch (libkadm5srv.so.1)
Date: May/11/2005


Install Requirements: Reboot after installation                      
                      
Solaris Release: 9_x86

SunOS Release: 5.9_x86

Unbundled Product: 

Unbundled Release: 

Xref: This patch available for SPARC as patch 112921

Topic: SunOS 5.9_x86: krbv5 Patch (libkadm5srv.so.1)

Relevant Architectures: i386

BugId's fixed with this patch: 4836676 4837278 5110105 6209960

Changes incorporated in this version: 5110105

Patches accumulated and obsoleted by this patch: 

Patches which conflict with this patch: 

Patches required with this patch: 

Obsoleted by: 

Files included with this patch: 

/usr/lib/krb5/libkadm5srv.so.1
/usr/sbin/kadmin
/usr/sbin/kadmin.local

Problem Description:

5110105 addprinc with -randkey, {-/+} <flag> does *not* honor default_principal_flags
 
(from 116046-06)
 
6209960 heap buffer overflow in libkadm5srv
 
(from 116046-05)
 
Patch respun due to a build error which didn't include fix 4837278.
 
(from 116046-04)
 
4837278 Kerberos utilities should include automigrate capability
 
(from 116046-03)
 
4836676 Bounds checks not in place for princs in krbv5
	Additional respin.
 
(from 116046-02)
 
4836676	Bounds checks not in place for princs in krbv5
	Respun.
 
(from 116046-01)
 
4836676 Bounds checks not in place for princs in krbv5

Patch Installation Instructions:
--------------------------------
 
For Solaris 2.0-2.6 releases, refer to the Install.info file and/or
the README within the patch for instructions on using the generic
'installpatch' and 'backoutpatch' scripts provided with each patch.
 
For Solaris 7-9 releases, refer to the man pages for instructions
on using 'patchadd' and 'patchrm' scripts provided with Solaris.
Any other special or non-generic installation instructions should be
described below as special instructions.  The following example
installs a patch to a standalone machine:
 
       example# patchadd /var/spool/patch/104945-02
 
The following example removes a patch from a standalone system:
 
       example# patchrm 104945-02
 
For additional examples please see the appropriate man pages.

Special Install Instructions:
-----------------------------
 
NOTE 1:  To get the complete fix of bug 4836676 "Bounds checks not in place
        for princs in krbv5," please also install the following patches:
 
        116044-01 (or newer) kdb5_util
        116045-01 (or newer) krb5kdc
        116046-03 (or newer) libkadm5srv.so.1   (This patch)
        113990-04 (or newer) mech_krb5.so.1 gl_kmech_krb5
        115168-02 (or newer) pam_krb5.so.1
 
NOTE 2: To get the complete fix for ID 4837278, "Kerberos utilities should include
        automigrate capability," please also install  the following patches:
 
	115168-05 (or newer) usr/lib/security/pam_krb5.so.1
	116044-02 (or newer) kdb5_util

README -- Last modified date:  Wednesday, May 11, 2005

