-------------------------------------------------------------------------- SUBJECT: 12/17/98 Roll up patch for SGI DCE 1.1C now available. Announcing the availability of the 3rd roll up patch for IRIX DCE/DFS 1.1C. -------------------------------------------------------------------------- The 3rd roll up patch for DCE/DFS 1.1C is now available on the SGI patch servers as follows: 3497 - IRIX 6.2 DCE 1.1C base rollup #3 Replaces patches - 2678 and 2912 3499 - IRIX 6.3 DCE 1.1C base rollup #3 Replaces patches - 2680 and 2914 3501 - IRIX 6.4 DCE 1.1C base rollup #3 Replaces patches - 2682 and 2916 ** Note - Customers who have licensed our DCE domestic security option, please see below for information on the accompanying patch for the domestic code. Fixes contained in this rollup patch are also incorporated in SGI's 1.2.2 release for IRIX 6.5. Therefore customers who have upgraded to the 1.2.2 release already have these fixes. Fix information --------------- This is a roll up patch, therefore changes from the 1st and 2nd roll up patches are included in the 3rd roll up patch. This patch contains fixes for the following bugs. Bug numbers from Silicon Graphics bug tracking system are included for reference. o 488883 System panics with the panic string "dcache hc". o 549120 Credential problem - error code 382312714, "Attempting to use credentials belonging to another user". o 567820 System panic after a communication failure with the FX server. o 593288 Software detected SEGV on CPU running DCEdfsd. o 629087 Duplicate of PV 549120. o 635145 The dced daemon aborts after receiving an invalid rpc message. o 638844 A heavily loaded system can not recover from a Token State Recovery condition. Bugs fixed by the 2nd rollup patch. o 489383 To many interfaces in RPC_UNSUPPORTED_NETIFS cause end ones to be ignored. o 514434 Client programs hang when accessing DFS filesystems. The DFS client believes the server is in token recovery when it is not. o 517621 The cma_stdio.h header file needs to include sys/types.h. o 530971 Error in config script. When configuring a cds server, dce_config states in the message that 4.0 is the default, but when it actually asks for an entry it defaults to 3.0. o 539036 The dce_config remembers old cell_admin pw while reconfiguring into a new cell. o 540488 The dced aborts with a SEGV error. o 542125 MKDIR over DFS generates an incorrect error message if the directory already exists. o 544349 The klist command as hosts/self is very slow after the machine has been up for a while. Also there are a lot of expired tickets seen in the machine credentials file which can grow very large. (Duplicate of PV 552237.) o 544770 DFS implementation honors the UNIX umask setting over the DFS IC (initial container) acl umask setting for the "group" container acl. o 552237 The dfsbind and dtsd daemons use a large percentage of the CPU. The problem is due to the expired machine credentials and the resources needed to search this large file. o 559637 Excessive writes and reads to CDS cache o 565540 dcecp can not handle a sigvtalarm in some cases. o 568616 Having dce activated, chkconfig dce on, with no cell information hangs boot process. o 573486 DCE'ized ftpd needs to be updated to pick up ftpd changes. o 612545 sec_create_db core dumps if the data already exists o 540087 RFE: Modify dce_config to run on only 1 cpu reducing race conditions. o 569236 RFE: Request for a local dce environment file that survives upgrades (/opt/dcelocal/etc/dce_local_env). Local changes which have been made to dce_com_env (ie. RPC_UNSUPPORTED_NETIFS) should be moved to this file. o 575769 RFE: Request that the dcedfs include files be distributed. o 603787 RFE: Configuration script changes: - Add comman line configuration options (dce_config(8)). - Clean up some problems doing reconfigurations. - Make the DFS server configuration easier. See dfsmkfs(8) and dfsrmfs(8) man pages distributed with this patch. Bugs fixed by the 1st rollup patch. o 522047 Accessing a DFS exported filesysstem on an IRIX 6.2, 64 bit system DFS server causes the system to panic. o 522377 Removing a file from a DFS exported filesystem on an IRIX 6.2, 64 bit DFS server panics the system. o 525030 The /opt/dcelocal/share/include/pthread.h is not pointed to by the symbolic link created in /usr/include/dce/pthread.h after installation of the DCE 1.1C package from dist.engr. o 525749 Data corruption when accessing DFS files. o 527850 Critical security (CERT) problem with secd, which could allow for a denial of service attack. o 527916 The cds and security servers are not installable with domestic package. o 528319 The DCE 1.1C distribution distributes scheme as part of it's integrated login feature. SGI's Security Advisory 19970508-02-PX describes a problem with login/scheme. The patches to fix this problem need to be integrated into the version of scheme distributed with DCE. o 537753 The xlock program with DCE integrated login functionality will not accept any further key strokes if someone types RETURN instead of a valid password. o 538257 The dcestat command does not display all running dce/dfs daemons. o 539860 Problems in the DCE/DFS unconfigure scripts. o 540108 Data corruption on Onyx2 and O2 to AIX DFS server o 547311 6.2 DFS 1.1C does not link when kernel rollup patch2401 or later is installed. Customers will ge the following error when linking the kernel. ld: ERROR 33: Undefined data symbol "polllock" -- 1st referenced by krpch.a (comsoc_sys.o). o 551782 DFS panics if AFS is running on the same system. Customers with the DCE domestic security option (DCEDOM). --------------------------------------------------------- Due to United States export laws these patches can not be distributed through non-regulated methods. Customers with the domestic security license should call the Eagan Order Desk at 1-651-683-5907. Tell them you are a customer who has licensed the DCE domestic option and would like the current roll up patch. See below for the patch number appropiate for your operating system level. The person taking the order will verify the license and give you access to an online version of this patch. Domestic Patches - 3498 - IRIX 6.2 DCE & DFS 1.1C Domestic Rollup #3 This patch replaces patch 2679 and 2913. 3500 - IRIX 6.2 DCE & DFS 1.1C Domestic Rollup #3 This patch replaces patch 2681 and 2915. 3502 - IRIX 6.2 DCE & DFS 1.1C Domestic Rollup #3 This patch replaces patch 2683 and 2917. If you have any questions related to this patch please contact the Eagan Customer Service Center at (800)950-2729 or send email to support@cray.com. If sending email please include the serial number of your SGI system.