eDirectory 8.8 SP3 FTF3 for Linux & Unix

This document (5042340) is provided subject to the disclaimer at the end of this document.

patches this patch supersedes

File	Product	Status	Patch
edir883_ftf2_nix.tgz	eDirectory 8.8.3	Obsolete	eDirectory 8.8 SP3 FTF2 for Linux & Unix

patches that supersede this patch

This patch is not superseded by any other patches.

patch attributes

Architecture: x86, x86-64

Security patch: Yes

Priority: Optional

Distribution Type: Field Test File

http://download.novell.com/Download?buildid=ZEya4WZ613k~

document

Revision: 5

Document ID: 5042340

Creation Date: 2009-02-25 22:32:19

Modified Date: 2009-03-13 00:11:21

technical support

This Field Test File is supported by Novell Technical Services.

abstract

This patch is an update to eDirectory 8.8 Support Pack 3.
This update is being provided to resolve known critical issues found since the original release of the Novell eDirectory 8.8 Support Pack 3.

Platform: NetWare
Main Module Versions contained in this patch: DS: 20216.89 NLDAP: 20216.80 DSREPAIR: 20214.27
(Note: a new NTLS, version 20410.01 - included, must be applied with this update.
MD5SUM: fed17c7306646b17464aa84cf313da0c

details

PRE INSTALLATION NOTES:

This patch can only be applied to eDirectory 8.8 SP3.

NOTE: DO NOT INSTALL THIS PATCH TO OES, ANY VERSION!!!

This patch assumes the server is using the latest supported Operating Systems and support packs as listed in the product documentation.

This FTF is designated eDirectory 8.8.3 FTF3. This FTF carries the designation of FTF2 because a previous fix for auditing only, the eDirectory 8.8 SP3 Instrumentation Patch, was released earlier. This FTF does not contain that fix.
If the instrumentation fix is required it can be found at: http://download.novell.com/Download?buildid=RH_B5b3M6EQ~

=========================================================

Issues Resolved:

DS\NDSD:
- Inconsistent returns from LDAP due to FLAIM reuse of frs file (Bug 455750)
- IDM 3.6 Role based entitlements returning inconsistent results (Bug 419539)
- Intruder lockout reset interval of 0 now locks account indefinately via LDAP access (Bug 449224)
- Custom location has errors writing to log due to an incorrect location for log file (Bug 343753)
- Error: time not synchronized (-659) during a timestamp collision seen in an IDM environment (Bug 456076)
- NDSD cores when using ICE with a LDIF file using LBURP (Bug 434728)
- Added trace messages to improve the ability to track the external reference server creating the unknown object (Bug 459276)
- NDSD cores when binding via LDAP as a user with multiple '.' in the RDN. When RDNs exceed the maximum length error: ERR_ILLEGAL_DS_NAME will be displayed (Bug 458504)
- Memory corruption issue (Bug 413580)
- Shutting down eDirectory via the ndsd script leads to a hang and high utilization (Bug 465309)
- NDSD cores in FLAIM while executing DSAIteratorsearch due to null pointer (Bug 393474)

NTLS:
- Enabling priority synchronization leads to memory fragmentation (Bug 431489)

LDAP:
- LDAP cores NDSD due to reuse of TLS socket (Bug 431783)
- When a LDAP search connection terminates the search the searchh request stops as well (Bug 431502)
- NLDAP abends after upgrading to eDir 88 when using a Bluecoat monitoring appliance (Bug 344893/427322)
- NDSD cores while performing a LDAP trace in which a query is greater than 1024 characters (Bug 399188)
- NDSD cores when using ICE to import users with base64 encoded passwords (Bug 416690)

IMONITOR:
- Localization fixes for iMonitor (Bug 450485)
- When changing database cache settings in iMonitor it also re-enables login update settings (Bug 417104)
- Security Vulnerability: Accept-Language Buffer Overflow (Bug 446342)

For a list of all issues resolved for eDirectory 8.8 please refer to TID: 3426981
http://www.novell.com/support/viewContent.do?externalId=3426981
=========================================================

LINUX INSTALLATION GUIDE:

This is a manual installation.

WARNING: DO NOT RUN THIS UPDATE ON ANY OES 2 SERVER!!!
eDirectory 8.8 Sp3 was never supported on any OES version. Determination of whether a server is running
OES can be made by typing the following command: " cat /etc/novell-release ". If this command reports
"OPEN ENTERPRISE SERVER 2" this server cannot be patched with this FTF!

Server Requirements:
Server MUST be running eDirectory 8.8 Support Pack 3.
This can be verified by typing " /opt/novell/eDirectory/bin/ndsstat " at a terminal session.
NOTE: If the version displayed is earlier the server must be upgraded to eDirectory 8.8 Support Pack 3 prior to applying
this FTF.

Pre-Installation checklist:
1. Run a health check on the tree to ensure there are no current problems with this or any other server in the tree.
2. IMPORTANT! You should make a backup of the server's eDirectory database AND NICI files. Among other methods,
this can be done by stopping NDSD, " /etc/init.d/ndsd stop " and creating a tarball achive of the eDirectory instance(s)'s
database ../dib and NICI directory . NOTE: An eDirectory 8.8.3 database will not load without the ORIGINAL NICI files.
Example (assuming the default database location was selected during the original installation):
" /etc/init.d/ndsd stop "
" cd /var/opt/novell/eDirectory/data " " tar -cvzf ndsbackup.tgz dib "
" cd /var/opt/novell " " tar -cvzf nici.tgz nici "
Also make a copy of the following files:
/etc/opt/novell/eDirectory/conf/nds.conf
/etc/opt/novell/eDirectory/conf/ndsimon.conf
/etc/opt/novell/eDirectory/conf/ndssnmp/ndssnmp.cfg (if it exists)
/etc/opt/novell/eDirectory/conf/ndssnmp/ndstrap.cfg (if it exists)
/var/opt/novell/eDirectory/data/dib/_ndsdb.ini (if it exists)
3. Ensure this server has eDirectory 8.8 Support Pack 3 installed.

Installation:
1. Log in as a user with root privileges on the host.
2. Stop NDSD. "/etc/init.d/ndsd stop"
Make an eDirectory backup as indicated above.
3. The following packages will need to be removed:
novell-NDSbase
novell-NDSimon
novell-NDSrepair
novell-NDSserv
novell-NLDAPbase
novell-ntls
Remove them by performing the following command:
" rpm --erase --nodeps --noscripts novell-NDSbase novell-NDSimon novell-NDSrepair novell-NDSserv novell-NLDAPbase novell-ntls"
4a. For a 32 bit installation install the packages from this FTF as in the following example:
" rpm --install --force --nodeps novell-NDSbase.i586.rpm novell-NDSimon.i586.rpm novell-NDSrepair.i586.rpm novell-NDSserv.i586.rpm novell-NLDAPbase.i586.rpm novell-ntls.i386.rpm"
4b. For a 64 bit installation install the packages from this FTF as in the following example:
" rpm --install --force --nodeps novell-NDSbase.x86_64.rpm novell-NDSimon.x86_64.rpm novell-NDSrepair.x86_64.rpm novell-NDSserv.x86_64.rpm novell-NLDAPbase.x86_64.rpm novell-ntls.x86_64.rpm "
5. Copy these files back from where they were backed up:
/etc/opt/novell/eDirectory/conf/nds.conf
/etc/opt/novell/eDirectory/conf/ndsimon.conf
/etc/opt/novell/eDirectory/conf/ndssnmp/ndssnmp.cfg (if it exists)
/etc/opt/novell/eDirectory/conf/ndssnmp/ndstrap.cfg (if it exists)
/var/opt/novell/eDirectory/data/dib/_ndsdb.ini (if it exists)
6. Restart NDSD. "/etc/init.d/ndsd start"
Typing " /opt/novell/eDirectory/bin/ndsstat " should now report a binary version of 20216.89.

=========================================================

SOLARIS INSTALLATION GUIDE:
This is a manual installation.

Server Requirements:
Server MUST be running eDirectory 8.8 Support Pack 3.
This can be verified by typing " /opt/novell/eDirectory/bin/ndsstat " at a terminal session.
NOTE: If the version displayed is earlier the server must be upgraded to eDirectory 8.8 Support Pack 3 prior to applying
this FTF.

Pre-Installation checklist:
1. Run a health check on the tree to ensure there are no current problems with this or any other server in the tree.
2. IMPORTANT! You should make a backup of the server's eDirectory database AND NICI files. Among other methods,
this can be done by stopping NDSD, " /etc/init.d/ndsd stop " and creating a tarball achive of the eDirectory instance(s)'s
database ../dib and NICI directory . An eDirectory 8.8.2 database will not load without the ORIGINAL NICI files.
Example (assuming the default database location was selected during the orginal installation):
" /etc/init.d/ndsd stop "
" cd /var/opt/novell/eDirectory/data " " tar -cf ndsbackup.tgz dib "
" cd /var/opt/novell " " tar -cf nici.tgz nici "
Also make a copy of the following files:
/etc/opt/novell/eDirectory/conf/nds.conf
/etc/opt/novell/eDirectory/conf/ndsimon.conf
/etc/opt/novell/eDirectory/conf/ndssnmp/ndssnmp.cfg (if it exists)
/etc/opt/novell/eDirectory/conf/ndssnmp/ndstrap.cfg (if it exists)
/var/opt/novell/eDirectory/data/dib/_ndsdb.ini (if it exists)
3. Ensure this server has eDirectory 8.8 Support Pack 3 installed.

Installation:
1. Log in as a user with root privileges on the host.
2. Stop NDSD. "/etc/init.d/ndsd stop"
Make an eDirectory backup as indicated above.
3. The following packages will need to be removed:
NDSbase
NDSimon
NDSrepair
NDSserv
NLDAPbase
novell-ntls
Remove them by performing the following command:
" pkgrm NDSbase NDSimon NDSrepair NDSserv NLDAPbase novell-ntls "
Answer yes to any additional questions regarding removal and to the dependancy checks.
4. Install the packages from this FTF as in the following examples:
" pkgadd -d NDSbase.pkg "
" pkgadd -d NDSimon.pkg "
" pkgadd -d NDSrepair.pkg "
" pkgadd -d NDSserv.pkg "
" pkgadd -d NLDAPbase.pkg "
" pkgadd -d novell-ntls.pkg "
Answer all to the question as to which packages to install and yes to all other questions.
5. Copy these files back from where they were backed up.
/etc/opt/novell/eDirectory/conf/nds.conf
/etc/opt/novell/eDirectory/conf/ndsimon.conf
/etc/opt/novell/eDirectory/conf/ndssnmp/ndssnmp.cfg (if it exists)
/etc/opt/novell/eDirectory/conf/ndssnmp/ndstrap.cfg (if it exists)
/var/opt/novell/eDirectory/data/dib/_ndsdb.ini (if it exists)
6. Restart NDSD. "/etc/init.d/ndsd start"
typing " /opt/novell/eDirectory/bin/ndsstat " should now report a Binary Version of 20216.89.

=========================================================

AIX INSTALLATION GUIDE:
This is a manual installation.

Server Requirements:
Server MUST be running eDirectory 8.8 Support Pack 3.
This can be verified by typing " /opt/novell/eDirectory/bin/ndsstat " at a terminal session.
NOTE: If the version displayed is earlier the server must be upgraded to eDirectory 8.8 Support Pack 2 prior to applying
this FTF.

Pre-Installation checklist:
1. Run a health check on the tree to ensure there are no current problems with this or any other server in the tree.
2. IMPORTANT! You should make a backup of the server's eDirectory database AND NICI files. Among other methods,
this can be done by stopping NDSD, " /etc/init.d/ndsd stop " and creating a tarball achive of the eDirectory instance(s)'s
database ../dib and NICI directory . An eDirectory 8.8.2 database will not load without the ORIGINAL NICI files.
Example (assuming the default database location was selected during the orginal installation):
" /etc/init.d/ndsd stop "
" cd /var/opt/novell/eDirectory/data " " tar -cf ndsbackup.tgz dib "
" cd /var/opt/novell " " tar -cf nici.tgz nici "
Also make a copy of the following files:
/etc/opt/novell/eDirectory/conf/nds.conf
/etc/opt/novell/eDirectory/conf/ndsimon.conf
/etc/opt/novell/eDirectory/conf/ndssnmp/ndssnmp.cfg (if it exists)
/etc/opt/novell/eDirectory/conf/ndssnmp/ndstrap.cfg (if it exists)
/var/opt/novell/eDirectory/data/dib/_ndsdb.ini (if it exists)
3. Ensure this server has eDirectory 8.8 Support Pack 3 installed.

Installation:
1. Log in as a user with root privileges on the host.
2. Stop NDSD. "/etc/init.d/ndsd stop"
Make an eDirectory backup as indicated above.
3. The following packages will need to be removed:
NDS.NDSbase
NDS.NDSimon
NDS.NDSrepair
NDS.NDSserv
NDS.NLDAPbase
NDS.NOVLntls
Remove them by performing the following command:
" installp -ug NDS.NDSbase NDS.NDSimon NDS.NDSrepair NDS.NDSserv NDS.NLDAPbase NOVLntls"
4. Install the packages from this FTF as in the following examples:
" installp -acgXd NDS.NDSbase "
" installp -acgXd NDS.NDSimon "
" installp -acgXd NDS.NDSrepair "
" installp -acgXd NDS.NDSserv "
" installp -acgXd NDS.NLDAPbase "
" installp -acgXd NOVLntls "
5. Copy back the original configuration files backed up in Preinstall step 2.
/etc/opt/novell/eDirectory/conf/nds.conf
/etc/opt/novell/eDirectory/conf/ndsimon.conf
/etc/opt/novell/eDirectory/conf/ndssnmp/ndssnmp.cfg (if it exists)
/etc/opt/novell/eDirectory/conf/ndssnmp/ndstrap.cfg (if it exists)
/var/opt/novell/eDirectory/data/dib/_ndsdb.ini (if it exists)
6. Restart NDSD. " /etc/init.d/ndsd start "
typing " /opt/novell/eDirectory/bin/ndsstat " should now report a Binary Version of 20216.89.

security fixes

FSC20081000-01

file contents

Files Included	Size	Date
edir883_ftf3_nix.tgz	92.1 MB (96624657)	2009-01-01 19:23:13
readme_5042340.html	N/A	2009-03-13 00:11:27

disclaimer

The Origin of this information may be internal or external to Novell. Novell makes all reasonable efforts to verify this information. However, the information provided in this document is for your information only. Novell makes no explicit or implied claims to the validity of this information. Any trademarks referenced in this document are the property of their respective owners. Consult your product manuals for complete trademark information.

Novell is a registered trademark of Novell, Inc. in the United States and other countries. SUSE is a registered trademark of SUSE Linux AG, a Novell business. *All third-party trademarks are the property of their respective owners.