Patch-ID# 114273-03
Keywords: security directory server service pack 3
Synopsis: SunOS 5.9_x86: Sun ONE Directory Server 5.1 patch
Date: Jan/05/2004


Install Requirements: None                      
                      
Solaris Release: 9_x86

SunOS Release: 5.9_x86

Unbundled Product: 

Unbundled Release: 

Xref: This patch available for SPARC as patch 113859
        NOTE:   Refer to Special Install Instructions section for
                specific information on this patch.

Topic: 

Relevant Architectures: i386

BugId's fixed with this patch: 4527608 4529402 4530466 4530509 4532320 4532757 4533706 4535845 4537169 4538268 4550044 4589224 4592931 4614559 4615165 4616579 4617085 4617521 4619976 4620546 4621920 4622371 4623119 4623199 4623308 4624693 4627760 4628444 4630124 4639310 4639408 4639560 4640273 4640724 4643122 4645544 4645887 4646301 4646350 4646392 4649319 4649615 4651972 4652031 4652859 4653016 4656657 4656846 4658787 4658810 4663658 4665564 4665571 4668480 4669525 4669879 4671360 4672889 4672914 4672960 4674387 4675387 4682961 4683476 4684519 4686213 4687038 4689805 4691101 4692956 4695152 4697500 4704039 4704635 4705641 4707395 4708296 4709128 4711201 4711202 4713256 4714196 4714358 4715065 4715955 4716340 4716745 4717121 4719564 4722987 4723630 4732352 4735062 4735919 4737978 4738221 4738639 4742083 4742450 4743633 4743796 4748399 4749234 4751092 4753087 4754469 4754595 4756215 4758387 4759670 4761010 4765575 4767182 4773751 4773823 4773920 4776001 4777358 4778128 4778154 4778334 4780230 4780807 4781823 4783910 4784168 4786154 4786475 4786504 4786547 4787220 4789601 4791877 4795280 4797685 4802963 4805734 4807803 4809504 4809846 4813355 4813998 4815733 4817676 4818005 4819399 4819555 4819710 4820037 4821198 4821289 4824825 4826265 4826843 4826863 4827569 4829894 4830417 4834508 4836446 4836491 4838624 4838863 4840786 4840960 4842620 4846165 4846332 4848325 4850717 4850722 4851870 4854827 4854898 4856290 4856329 4856331 4857614 4863001 4863706 4863943 4864622 4865435 4865525 4865653 4865859 4866060 4867299 4880352 4881181 4881653 4883250 4884416 4885686 4886421 4891116 4894995 4897873 4898449 4899320 4903397 4904414 4908443 4911023 4911678 4911711 4912539 4912664 4913176 4913984 4916248 4918912 4920323 4921426 4922595 4925223 4928129 4929089 4930098 4932782 4935077 4938445 4942664 4943975 4945548 4946487 4948365 4953750 4957279

Changes incorporated in this version: 4537169 4649319 4671360 4686213 4716745 4751092 4773920 4780807 4784168 4805734 4807803 4809846 4813355 4813998 4815733 4817676 4818005 4819399 4819710 4820037 4821198 4821289 4824825 4826265 4826843 4826863 4829894 4830417 4834508 4836446 4836491 4838624 4838863 4840786 4840960 4842620 4846165 4846332 4848325 4850717 4850722 4851870 4854827 4854898 4856290 4856329 4856331 4857614 4863001 4863706 4863943 4864622 4865435 4865525 4865653 4865859 4866060 4867299 4880352 4881181 4881653 4883250 4884416 4885686 4886421 4891116 4894995 4897873 4898449 4899320 4903397 4904414 4908443 4911023 4911678 4911711 4912539 4912664 4913176 4913984 4916248 4918912 4920323 4921426 4922595 4925223 4928129 4929089 4930098 4932782 4935077 4938445 4942664 4943975 4945548 4946487 4948365 4953750 4957279

Patches accumulated and obsoleted by this patch: 

Patches which conflict with this patch: 

Patches required with this patch: 

Obsoleted by: 

Files included with this patch: 

/usr/iplanet/admserv5.1/admin-serv/config/jvm12.conf
/usr/iplanet/admserv5.1/admserv
/usr/iplanet/admserv5.1/bin/admin/admconfig
/usr/iplanet/admserv5.1/bin/admin/admin/bin/Cgi.pm
/usr/iplanet/admserv5.1/bin/admin/admin/bin/ReadLog
/usr/iplanet/admserv5.1/bin/admin/admin/bin/admpw
/usr/iplanet/admserv5.1/bin/admin/admin/bin/config
/usr/iplanet/admserv5.1/bin/admin/admin/bin/dsconfig
/usr/iplanet/admserv5.1/bin/admin/admin/bin/listOldSrvs
/usr/iplanet/admserv5.1/bin/admin/admin/bin/mergeConfig
/usr/iplanet/admserv5.1/bin/admin/admin/bin/migrateConfig
/usr/iplanet/admserv5.1/bin/admin/admin/bin/restartsrv
/usr/iplanet/admserv5.1/bin/admin/admin/bin/sec-activate
/usr/iplanet/admserv5.1/bin/admin/admin/bin/security
/usr/iplanet/admserv5.1/bin/admin/admin/bin/snmpconf
/usr/iplanet/admserv5.1/bin/admin/admin/bin/snmpmctl
/usr/iplanet/admserv5.1/bin/admin/admin/bin/start_config_ds
/usr/iplanet/admserv5.1/bin/admin/admin/bin/statpingserv
/usr/iplanet/admserv5.1/bin/admin/admin/bin/statusping
/usr/iplanet/admserv5.1/bin/admin/admin/bin/stopsrv
/usr/iplanet/admserv5.1/bin/admin/admin/bin/ugdsconfig
/usr/iplanet/admserv5.1/bin/admin/admin/bin/userauth
/usr/iplanet/admserv5.1/bin/admin/admin/bin/userinfo
/usr/iplanet/admserv5.1/bin/admin/admin/bin/viewlog
/usr/iplanet/admserv5.1/bin/admin/ns-config
/usr/iplanet/admserv5.1/bin/admin/ns-remove
/usr/iplanet/admserv5.1/bin/admin/ns-update
/usr/iplanet/admserv5.1/bin/https/bin/ns-httpd
/usr/iplanet/admserv5.1/bin/https/bin/uxwdog
/usr/iplanet/admserv5.1/bin/https/jar/NSJavaMiscUtil.jar
/usr/iplanet/admserv5.1/bin/https/jar/NSJavaUtil.jar
/usr/iplanet/admserv5.1/bin/https/jar/NSServletLayer.jar
/usr/iplanet/admserv5.1/bin/https/jar/jspengine.jar
/usr/iplanet/admserv5.1/bin/https/jar/servlet-2.3-filters-api.jar
/usr/iplanet/admserv5.1/bin/https/jar/servlet-2.3-session-activation-api.jar
/usr/iplanet/admserv5.1/bin/https/jar/servlet.jar
/usr/iplanet/admserv5.1/bin/https/lib/libAdmservPlugin.so
/usr/iplanet/admserv5.1/bin/https/lib/libConfigFile.so
/usr/iplanet/admserv5.1/bin/https/lib/libMMapSession.so
/usr/iplanet/admserv5.1/bin/https/lib/libNSJavaMiscUtil.so
/usr/iplanet/admserv5.1/bin/https/lib/libNSJavaUtil.so
/usr/iplanet/admserv5.1/bin/https/lib/libNSJvmControl.so
/usr/iplanet/admserv5.1/bin/https/lib/libNSServletLayer.so
/usr/iplanet/admserv5.1/bin/https/lib/libNSServletPlugin.so
/usr/iplanet/admserv5.1/bin/https/lib/libShtml.so
/usr/iplanet/admserv5.1/bin/https/lib/libdirmon4.so
/usr/iplanet/admserv5.1/bin/https/lib/libgetprop.so
/usr/iplanet/admserv5.1/bin/https/lib/liblibdbm.so
/usr/iplanet/admserv5.1/bin/https/lib/liblibsi18n.so
/usr/iplanet/admserv5.1/bin/https/lib/libns-httpd40.so
/usr/iplanet/admserv5.1/bin/https/lib/libnscpVer.so
/usr/iplanet/admserv5.1/bin/https/lib/libnsfc.so
/usr/iplanet/admserv5.1/bin/https/lib/libnsprwrap.so
/usr/iplanet/admserv5.1/bin/https/lib/libnstime.so
/usr/iplanet/admserv5.1/bin/https/lib/libnstp.so
/usr/iplanet/admserv5.1/bin/https/lib/libregex.so
/usr/iplanet/admserv5.1/bin/https/lib/libresonate.so
/usr/iplanet/admserv5.1/bin/https/lib/libsupport.so
/usr/iplanet/admserv5.1/bin/https/lib/libxerces-c.so
/usr/iplanet/admserv5.1/dist/download
/usr/iplanet/admserv5.1/plugins/snmp/magt/magt
/usr/iplanet/admserv5.1/plugins/snmp/sagt/sagt
/usr/iplanet/admserv5.1/setup/admin/admin.inf
/usr/iplanet/console5.1/bin/base/console-update
/usr/iplanet/console5.1/java/base.jar
/usr/iplanet/console5.1/java/caplugin/default.jar
/usr/iplanet/console5.1/java/jars/admserv51.jar
/usr/iplanet/console5.1/java/jars/admserv51_en.jar
/usr/iplanet/console5.1/java/jars/ds51.jar
/usr/iplanet/console5.1/java/jars/ds51_en.jar
/usr/iplanet/console5.1/java/jss311.jar
/usr/iplanet/console5.1/java/ldapjdk.jar
/usr/iplanet/console5.1/java/mcc51.jar
/usr/iplanet/console5.1/java/mcc51_en.jar
/usr/iplanet/console5.1/java/nmclf51.jar
/usr/iplanet/console5.1/java/nmclf51_en.jar
/usr/iplanet/console5.1/java/patch/console42.jar
/usr/iplanet/console5.1/java/patch/patch-admserv40.jar
/usr/iplanet/console5.1/java/patch/patch-cert40.jar
/usr/iplanet/console5.1/java/patch/patch-cert42.jar
/usr/iplanet/console5.1/java/patch/patch-ds40.jar
/usr/iplanet/console5.1/java/patch/patch-ds41.jar
/usr/iplanet/console5.1/java/patch/patch-msgadmin40.jar
/usr/iplanet/console5.1/java/patch/patch-msgadmin41.jar
/usr/iplanet/console5.1/java/patch/patch-msgadmin50.jar
/usr/iplanet/console5.1/startconsole
/usr/iplanet/ds5/bin/slapd/admin/bin/Base.pm
/usr/iplanet/ds5/bin/slapd/admin/bin/Cgi.pm
/usr/iplanet/ds5/bin/slapd/admin/bin/DSAdmin.pm
/usr/iplanet/ds5/bin/slapd/admin/bin/DSAdmin.so
/usr/iplanet/ds5/bin/slapd/admin/bin/Inf.pm
/usr/iplanet/ds5/bin/slapd/admin/bin/Install.pl
/usr/iplanet/ds5/bin/slapd/admin/bin/addindex
/usr/iplanet/ds5/bin/slapd/admin/bin/ds_bak2db
/usr/iplanet/ds5/bin/slapd/admin/bin/ds_create
/usr/iplanet/ds5/bin/slapd/admin/bin/ds_db2bak
/usr/iplanet/ds5/bin/slapd/admin/bin/ds_db2ldif
/usr/iplanet/ds5/bin/slapd/admin/bin/ds_ldif2db
/usr/iplanet/ds5/bin/slapd/admin/bin/ds_listdb
/usr/iplanet/ds5/bin/slapd/admin/bin/ds_remove
/usr/iplanet/ds5/bin/slapd/admin/bin/ds_rmdb
/usr/iplanet/ds5/bin/slapd/admin/bin/ds_snmpctrl
/usr/iplanet/ds5/bin/slapd/admin/bin/ds_viewlog.pl
/usr/iplanet/ds5/bin/slapd/admin/bin/getConfigInfo
/usr/iplanet/ds5/bin/slapd/admin/bin/migrateInstance
/usr/iplanet/ds5/bin/slapd/admin/bin/migrateLocalDB
/usr/iplanet/ds5/bin/slapd/admin/bin/migratePwdFile
/usr/iplanet/ds5/bin/slapd/admin/bin/migrateTo4
/usr/iplanet/ds5/bin/slapd/admin/bin/migratecred
/usr/iplanet/ds5/bin/slapd/admin/bin/ns-config
/usr/iplanet/ds5/bin/slapd/admin/bin/ns-keygen
/usr/iplanet/ds5/bin/slapd/admin/bin/ns-update
/usr/iplanet/ds5/bin/slapd/admin/bin/restart
/usr/iplanet/ds5/bin/slapd/admin/bin/shutdown
/usr/iplanet/ds5/bin/slapd/admin/bin/start
/usr/iplanet/ds5/bin/slapd/admin/bin/uname.lib
/usr/iplanet/ds5/bin/slapd/admin/bin/uninstall
/usr/iplanet/ds5/bin/slapd/admin/bin/vlvindex
/usr/iplanet/ds5/bin/slapd/admin/scripts/template-bak2db.pl
/usr/iplanet/ds5/bin/slapd/admin/scripts/template-db2bak.pl
/usr/iplanet/ds5/bin/slapd/admin/scripts/template-db2index.pl
/usr/iplanet/ds5/bin/slapd/admin/scripts/template-db2ldif.pl
/usr/iplanet/ds5/bin/slapd/admin/scripts/template-ldif2db.pl
/usr/iplanet/ds5/bin/slapd/admin/scripts/template-ns-accountstatus.pl
/usr/iplanet/ds5/bin/slapd/admin/scripts/template-ns-activate.pl
/usr/iplanet/ds5/bin/slapd/admin/scripts/template-ns-inactivate.pl
/usr/iplanet/ds5/bin/slapd/install/ldif/template.ldif
/usr/iplanet/ds5/bin/slapd/install/schema/30ns-common.ldif
/usr/iplanet/ds5/bin/slapd/lib/libds_admin.so
/usr/iplanet/ds5/bin/slapd/lib/libns-dshttpd51.so
/usr/iplanet/ds5/bin/slapd/server/idsktune
/usr/iplanet/ds5/bin/slapd/server/keyupg
/usr/iplanet/ds5/bin/slapd/server/ldif
/usr/iplanet/ds5/bin/slapd/server/mmldif
/usr/iplanet/ds5/bin/slapd/server/ns-ldapagt
/usr/iplanet/ds5/bin/slapd/server/ns-slapd
/usr/iplanet/ds5/bin/slapd/server/pwdhash
/usr/iplanet/ds5/lib/acl-plugin.so
/usr/iplanet/ds5/lib/chainingdb-plugin.so
/usr/iplanet/ds5/lib/cos-plugin.so
/usr/iplanet/ds5/lib/des-plugin.so
/usr/iplanet/ds5/lib/libadminutil51.so
/usr/iplanet/ds5/lib/libadmsslutil51.so
/usr/iplanet/ds5/lib/libback-ldbm.so
/usr/iplanet/ds5/lib/liblcoll.so
/usr/iplanet/ds5/lib/libldap50.so
/usr/iplanet/ds5/lib/libnss3.so
/usr/iplanet/ds5/lib/libnssckbi.so
/usr/iplanet/ds5/lib/libprldap50.so
/usr/iplanet/ds5/lib/libslapd.so
/usr/iplanet/ds5/lib/libsmime3.so
/usr/iplanet/ds5/lib/libssl3.so
/usr/iplanet/ds5/lib/libssldap50.so
/usr/iplanet/ds5/lib/passthru-plugin.so
/usr/iplanet/ds5/lib/pwdstorage-plugin.so
/usr/iplanet/ds5/lib/referint-plugin.so
/usr/iplanet/ds5/lib/replication-plugin.so
/usr/iplanet/ds5/lib/retrocl-plugin.so
/usr/iplanet/ds5/lib/roles-plugin.so
/usr/iplanet/ds5/lib/statechange-plugin.so
/usr/iplanet/ds5/lib/syntax-plugin.so
/usr/iplanet/ds5/lib/uid-plugin.so
/usr/iplanet/ds5/manual/help/help
/usr/iplanet/ds5/plugins/slapd/slapi/examples/distrib/distrib.c
/usr/iplanet/ds5/plugins/slapd/slapi/include/slapi-plugin.h
/usr/iplanet/ds5/setup/setup
/usr/iplanet/ds5/setup/slapd/examples/update_configDS.sh
/usr/iplanet/ds5/setup/slapd/ns-config
/usr/iplanet/ds5/setup/slapd/slapd.inf
/usr/iplanet/ds5/shared/bin/NativeToAscii
/usr/iplanet/ds5/shared/bin/admin_ip.pl
/usr/iplanet/ds5/shared/bin/ldapdelete
/usr/iplanet/ds5/shared/bin/ldapmodify
/usr/iplanet/ds5/shared/bin/ldapsearch
/usr/iplanet/ds5/shared/bin/modutil
/usr/iplanet/ds5/startconsole
/usr/iplanet/ds5/uninstall
/usr/iplanet/jss3.1/lib/jss/libjss3.so
/usr/iplanet/nls3.1/lib/libnsbrk31.so
/usr/iplanet/nls3.1/lib/libnscnv31.so
/usr/iplanet/nls3.1/lib/libnscol31.so
/usr/iplanet/nls3.1/lib/libnsfmt31.so
/usr/iplanet/nls3.1/lib/libnsres31.so
/usr/iplanet/nls3.1/lib/libnsuni31.so
/usr/iplanet/nls3.1/lib/nls/conv31/libnscck31.so
/usr/iplanet/nls3.1/lib/nls/conv31/libnsjpn31.so
/usr/iplanet/nls3.1/lib/nls/conv31/libnssb31.so
/usr/iplanet/nspr4.1.2/lib/libares3.so
/usr/iplanet/nspr4.1.2/lib/libnspr4.so
/usr/iplanet/nspr4.1.2/lib/libplc4.so
/usr/iplanet/nspr4.1.2/lib/libplds4.so
/usr/iplanet/nss3.3.1/lib/libnss3.so
/usr/iplanet/nss3.3.1/lib/libnssckbi.so
/usr/iplanet/nss3.3.1/lib/libsmime3.so
/usr/iplanet/nss3.3.1/lib/libssl3.so
/usr/iplanet/perl5/lib/site/Mozilla/LDAP/API.pm
/usr/iplanet/perl5/lib/site/Mozilla/LDAP/Conn.pm
/usr/iplanet/perl5/lib/site/Mozilla/LDAP/Entry.pm
/usr/iplanet/perl5/lib/site/Mozilla/LDAP/LDIF.pm
/usr/iplanet/perl5/lib/site/Mozilla/LDAP/Utils.pm
/usr/iplanet/perl5/lib/site/sun4-solaris/auto/Mozilla/LDAP/API/API.so
/usr/sbin/directoryserver

Problem Description:

4537169 problem with spaces and substring search filters
4649319 Connection handling memory leak on NT
4671360 core dump in connection_close_nolock on unbind
4686213 Number of passwds to remember in passwd history not working as expected.
4716745 Directory doesn't support files larger than 2 Gb
4751092 store becomes unavailable due to transaction id wrapping
4773920 Possible denial of service attack in WIN2k/NT connection handling
4780807 Working in MMR, modification of required attributes is not done properly.
4784168 error message in supplier
4805734 Memory leak in single Master Replication on consumer in DS 5.1
4807803 Memory leak
4809846 integrate some 5.1 acl fixes to 5.2
4813355 deleted values on consumers contains duplicates
4813998 Crash in replication due to modify with missing attribute name
4815733 Transaction logs aren't deleted anymore if you cancel db2bak
4817676 MMR causing High CPU utilization when changes are done only on one Master
4818005 core in cache_return when deleting entry
4819399 special chars are not allowed in userPassoword for admin entry
4819710 DS51 - ";binary" compatibility issue -  ldap not handling the RFC1274
4820037 attribute modify-replace with no attribute/value has unexpected results
4821198 Server that gives out a referral in response to a MOD operation.
4821289 Invalid warnings are displayed about indexes fragmentation
4824825 error message with fix
4826265 Crash with persistant search.
4826843 audit log is not rotated as configured in specific case.
4826863 Changing LINUX LDAPSDK comp. version to include 4821283 and 4819452
4829894 DBVERSION and ancestorid.db3 files are left behind when deleting suffix
4830417 adding an entry crashes the server
4834508 Unable to use non-ascii characters in nsslapd-rootdn
4836446 inconsistent ruv information in database and changelog
4836491 ldif2db can crash with specific ldif file
4838624 After a online initialisation the consumer perf counters are not accessible
4838863 Slapd coredump issue related to the search plugin implementation
4840786 Deadlock in acl plugin (invalid 4795280 fix)
4840960 Console renders large list of managed roles very slowly
4842620 db2ldif miscounts # of entries
4846165 repeated modify request leads unproper replication replay
4846332 iDS 5.1 sp2: access log rotation not occuring upon restart of slapd
4848325 DN checking operation is not properly carried out by the Directory Server
4850717 After long run, DB is looping trickling => poor performance
4850722 replication sessions over SSL time out with slapd_poll(823)
4851870 bad ACI syntax crashes the Directory Server systemmatically
4854827 Issue in Administration Express
4854898 A Vulnerability in SSL/TLS implementations of ciphersuites that use block cipher
4856290 passwordretrycount fails to increment correctly in 5.x
4856329 tombstone entries not being purged
4856331 db2ldif -r used with -s or -n  makes ns-slapd core
4857614 Product doesn't function as it used to in earlier release.
4863001 Replication stopped with systematic "Replication Busy" message.
4863706 slapd crashes in replicated operation
4863943 repl_set_mtn_referrals: could not set referrals for replica errors
4864622 Can't restore backup when retro changelog is activated
4865435 iDS 5.1 sp1: ns-slapd cores on parallel nationalization matching rule searches
4865525 ldapsearch -A fails against a chained database
4865653 During shutdown RI plugin can crash server if its processing deletes from ref lo
4865859 ns-slapd dumped core while creating large number Identity Server objects
4866060 Stored core under ALPS stress
4867299 triviality check skip when more than 1 attributes are modified
4880352 rootdn is shown always in lower case on iplanet console
4881181 Memory leak in search on suffix containing referral subsuffix
4881653 re-initialized master does not contain "start iteration" for all replicaIds
4883250 In certain condictions, binding with cert auth and simple can cause hang
4884416 ds 5.1 patch over-writes ds 5.2 package files
4885686 slapd can crash if entry is deleted and immediately added again
4886421 connections for persitent searches are not cleaned up on NT (5.1sp2)
4891116 Adding entry with "*" chars in DN field incur full scan of nstombstone
4894995 bak2db fails if target database directories are missing
4897873 MOD INT. op on retryCount coming from a passwd MOD MUST be flagged as UNCHAINABL
4898449 5.1sp2 + HF2 core dumps
4899320 ACI Errors After Migrating from 4.x to 5.x
4903397 ns-slapd coredump when importing corrupt LDIF
4904414 entry2str size with attr deletion CSNs
4908443 Password expiration doesn't completely prevent users from binding
4911023 Performance degradation on HPUX under heavy load
4911678 MMR4wway: Crash in ruv_destroy on solaris9 x86
4911711 Admin Express: ViewLog coredumps when non-default log directory configured
4912539 console process grows when adding users
4912664 All Attribute subtypes gets deleted from index  if they have same values
4913176 ACIs prevent access to attributes when they should not.
4913984 aci evaluation on db link server fails to return just the DN attribute
4916248 Critical store error in shared folder stress test
4918912 DENY macro ACI applies to entries that it should not apply to
4920323 Several tomsbtone purging threads for the same replica running in parallel
4921426 Occasional imap errors occur.
4922595 Local aci doesn't work properly over a database link when specifing dn attribute
4925223 Directory Server hangs on _mutex_adaptive_lock in urp_delete_operation
4928129 nsslapd-accesslog-logminfreediskspace is not working as expected
4929089 S1DS Admin web interface installs without proper URL sanitation
4930098 PasswordRetryCount internal op being replicated (sometimes empty)
4932782 ns-accountstatus.pl fails if the suffix includes a whitespace
4935077 S1DS5.2 ldif2db -n userRoot -i test.ldif = Bus Error - core dumped
4938445 imsbackup cores on mboxlist_close
4942664 cannot malloc 0 bytes in some VLV search when there is empty attributes
4943975 for some searches the result message is logged twice
4945548 Memory leak on consumer after doing deletes on DS 5.1sp2
4946487 DS5.1 : deliver unstripped binaries on HP-UX platform
4948365 Crash in iDS 5.1 SP2 + HF3 in do_modify side effect of fix for 4867299
4953750 Recent fix still allows for DOS attack on Win2k ds 5.x using NSS_3341
4957279 5.1SP3 : include fix for security alert referenced in bug 4945089
 
(from 114273-02)
 
4827569 S9 patches rev 01 for 5.1 SP2 fail to pass PST testing (AutoIB)
 
(from 114273-01)
 
4529402 htmladmin.exe crashes when trying to stop secure admin server using admin expres
4532320 OULU encode tests cause SNMP agent core dump
4532757 User can not bind after passwd expiration without warning message
4533706 Directory Server is down and slapd will not start.
4535845 Meta-directory UTC filters are not working and saved incorrectly
4550044 Attribute deletion doesn't work in cascaded replication
4589224 Three-digit Replica ID is not shown correctly.
4615165 actual created time is displayed in GMT although it's displayed as an JST.
4616579 Multiple replication does not work correctly on iDS5.0SP1 JA for Windows2000.
4617085 Replication slow and unstable
4617521 problem with the nsTombstone entries not being purged: "unable to delete"
4619976 Password Policy: trivialy checking doesn't work when adding user
4622371 Customer's modifications to operations do not show all entries
4623119 slapd crashe in replicated env during bulk import
4623199 Update the idsktune version in iDS5.0 SP2 / 5.1 SP1 / 5.2
4623308 Directory server inappropriately responds to an unbind
4624693 Case sensitive MODs are not stored correctly with MMR configured
4630124 COS plugin leaking memory
4639310 Retro changelog plugin logs operational attibutes to changelog
4639408 `Bind Timeout` parameter in chaining does not work as expected
4640724 Admin Server with WS60sp1 & Java 1.3 & iDAR 5.x Servlets inoperative
4643122 server can hang or crash
4645544 Bold characters display as square boxes with Japanese font.
4645887 passwordretrycount is not resetting to zero when a user correctly authenticate
4646301 Unable to modify hub/dedicated consumer replica via the console
4646392 Replication broken when migrating consumer from 5.0 to 5.0 SP1 or 5.1
4649615 Multiple Attribute uniqueness plugins force uniqueness BETWEEN each other.
4656846 time stamp in error log incorrect during shutdown
4658787 Cannot delete CA Certs from Console
4658810 Supplier fails to replicate when R.O. consumer have RUV Elt with ReplicaID=65535
4663658 Console 5.1 cannot access user data for remote 5.1 DS, SSL, SSL in console
4665564 ldapmodify should not interpret base64 encoded "<" as redirection arrow
4665571 updating an operational attribute halts replications between 4.x and 5.1
4668480 enable nsslapd-ds4-compatible-schema disables Console functionality
4672889 empty nsDS5ReplicaBindMethod in repl agreement causes core in extended op
4672914 Can not use '&' character into console's admin password
4672960 problem in handling turn back of system clock
4674387 directory server can crash in specific stress test scenario
4682961 mem leak in extended schema searches
4684519 distribution plugin chains database initialization
4687038 incorrect handling of spaces in dn components
4691101 improve replication monitoring
4692956 Updates for iDS51 SP1: new consoleSDK,  new LIBPATH AIX/LINUX/OSF1 and NESCORE
4697500 Unable to install 5.1SP1 on the top of a 5.1 installation on HP-UX
4527608 Accounts cannot be unlocked on non-master 5.0 servers
4530466 running db2index.pl with '-w -' option on Solaris 9 does not work
4530509 indexes screen comes up blank (configuration, data, userRoot, Indexes tab)
4538268 HUB not on configDS machine is unmodifiable thru console
4592931 Default install parameter for "Number of file descriptors" is out of range
4614559 Console does not update modified/removed entry names
4620546 ns-slapd does not restart after a system crash (calloc 0 bytes)
4621920 Deeply nested filters will crash server
4627760 Referrals for modifing entries fail, due to the DN being trimmed at the space
4628444 Log files will not rotate properly in Directory 5.1
4639560 tombstone entries not deleted if one master never updated
4640273 iDS crashed during undeployment. Race condition when abandonning psearchs
4646350 Stopping iDS 5.0SP1 takes hours when Millions of users and replication agreement
4651972 ids5.1 error ` libdb: Lock table is out of available locks`
4652031 Getting error message: db error - 12 Not enough space
4652859 changelogmaxage doesn't work
4669879 ldif2db not applying default encoding to cleartext userPasswords from LDIF
4675387 Directory 5.1 Crashs within ruv_init_from_slapi_attr_and_check_purl
4689805 Replication doesn't restart after restore bak2db
4695152 CSNGen remote_offset drift
4704039 configuring nsslapd-changelogmaxage replaces objectclass of cn=changelog5 entry
4705641 index blocks get set to ALLIDS inappropriately
4708296 range searches can crash server
4711201 replication fails
4711202 replication stalls for 10 minutes and server is not accessible
4714196 Crash in cache_flush during a restore
4715065 VLV searches on iDS5.1 produce "Server reported sorting error" sometimes.
4715955 search gives wrong results for specific order of search filters in query
4719564 Macro ACI cause server down
4722987 Ldapmodify allows exact values of a multi-valued attribute to be created
4732352 directoryserver helper scripts expose DN user passwd
4735062 Directory server susceptible to buffer overflow
4735919 The slapd daemon is hanged when backup task being issued from Console
4737978 ldif2db segfaults when directory string type attr is  between DN type attr
4738221 ldif2db hangs during data import
4742450 Consumer crashes while consumer is initialized with entires having >5000 lines
4743633 Using referral, unsafe characters in operation DN are not escaped
4743796 snmp core dumps - escalation number 537065
4748399 Disabling and re-enabling replication stops replication one side in MMR
4749234 User's menu on Console is hidden with right click if there are 35 users.
4753087 ldapsearch problem/bug when binding as a normal user
4754595 unindexed attribute with referential-integrity plug-in enabled
4756215 iDS 5.1SP1 - memory leak on replica
4758387 iDS5.1p1: changelog is purged incorrectly
4761010 One can create entry with duplicate objectclass: inetorgperson attribute value.
4765575 Memory Leak in DS5.1sp1 in LDAP COMPARE operation
4767182 Legacy Replication fails when Password policy is enable on 4.x
4773751 process size of slapd.exe keeps on growing
4776001 Sorting is not correctly performed by the ServerSideSorting function
4777358 process size of slapd.exe grows with persistent search
4778128 Linux - 5.1spX certificate mapping plug-in not loaded
4778154 The BER failure is logged incorrectly (B1) during any imports that exceeds the m
4778334 ids5.1 to ids5.1 replication breaks if legacy nds4.16 supplier injects MODRDN
4780230 Changelog trimming does not take place in a multimaster environment.
4781823 nsslapd dbtest is broken in 5.1 SP1
4783910 2-pass ldif2db does not correctly merge indexes
4786154 MMR: ns-slapd up but does not respond
4786475 During replication modifications can be missing on a consumer
4786504 directory on Solaris/NT blocks indefinetly when ssl bound application is stopped
4787220 DS 5.1sp1 crashes when binding with entry that has two or more vattrs
4795280 Recursive deletion of entires encounters err=50 (insufficient access)
4797685 the multi-master replication in environment with two or more suffixes
4802963 Replication halts / Directory hangs because a DataBase lock is held
4809504 RetroChangelog trims before the time defined in nsslapd-changelogmaxage
4653016 as root, after db2ldif -r, can not run start-slapd; db-home-directory configured
4656657 db2ldif -r creates cache files as root and does not clean them up properly.
4709128 numsubordinates assertion failure when deleting a glue entry
4713256 The ACI 'Directory Administrators Group' is buggy
4714358 restore fails after server creation until restarted
4716340 IPLTadmin and IPLTdsu are not LU and Alternate Root compliance in S9 and S10.
4717121 iDS 5.1SP1 Substring searches do not work correctly on integer syntax attributes
4723630 ldif import crashes if entries have a large number of attributes
4742083 Crash of ns-slapd during import
4754469 Only first modification is taken into account by uid uniqueness plugin and 7 bit
4759670 internal modify crashes server in case of attribute deletes
4773823 1st Total Update never finishes when doing 2 total update at the same time
4786547 7-bit Check plugin does not reject forbidden modifications.
4791877 connections are closed incorrectly because of max idletimeout
4669525 Console performs modrdn when OK button is clicked and no value is changed
4683476 unable to add members or alter membership to groups
4738639 Administration Express core dumps or lists the logs directory depending on how d
4789601 5.1 console installation on Windows 2000 fails intermittently when non-default p
4704635 The console fails to load jss library on Linux.
4707395 DOS:Transfer encoding bug
4819555 ns-http core dumps on Solaris 9 intel platforms

Patch Installation Instructions:
--------------------------------
 
For Solaris 7-9 releases, refer to the man pages for instructions
on using 'patchadd' and 'patchrm' scripts provided with Solaris.
Any other special or non-generic installation instructions should be
described below as special instructions.  The following example
installs a patch to a standalone machine:
 
       example# patchadd /var/spool/patch/104945-02
 
The following example removes a patch from a standalone system:
 
       example# patchrm 104945-02
 
For additional examples please see the appropriate man pages.

Special Install Instructions:
-----------------------------
 
Note 1: fixes for bugs 4713256, 4732352 and 4754595 will be applied to
        instances created after this patch is installed. They will not
        be applied to already existing instances.
 
Note 2: fixes for bugs 4687038 and 4535845 are not enabled by default.
        Without these fixes, Directory Server 5.1 does not conform to RFC2252
        when handling:
          DN with multiple white spaces (4687038)
          DN with multiple escaped characters(4535845)
 
        To enforce conformance with RFC2252, perform the following steps:
          Create a file <ServerRoot>/slapd-<ServerInstance>/config/newnormdn
          Restart the directory instance
          Rebuild the index databases, either by doing an db2ldif and ldif2db,
	    or by rebuilding any index with DN syntax (e.g. entryDN)
	    (see Chapter 10, Managing Indexes in the iPlanet Directory Server
            Administrator's Guide)
 
Note 3: To activate fix for bug 4639310, import the following LDIF file (through
        console or ldapmodify):
 
        dn: cn=Retro Changelog Plugin,cn=plugins,cn=config
        changetype: modify
        add: nsslapd-pluginarg0
        nsslapd-pluginarg0: -ignore_attributes
        add: nsslapd-pluginarg1
        nsslapd-pluginarg1: copyingFrom

README -- Last modified date:  Friday, January 16, 2004

