[SunRay-Users] FYI: (LATE) Sun Ray Core Services Patch XXXXXX-01 for SRSS 4.2 available

Nishimura, Scott L (IT Solutions) scott.nishimura at ngc.com
Fri Mar 26 17:21:32 EET 2010


Stoyan,

   I thought you had already posted this message:  I thought that's how
I learned about the patches a few weeks back.

And thanks for your tireless work on this list.


Scott

-----Original Message-----
From: sunray-users-bounces at filibeto.org
[mailto:sunray-users-bounces at filibeto.org] On Behalf Of Stoyan Angelov
Sent: Friday, March 26, 2010 3:00 AM
To: sunray-users at filibeto.org
Subject: EXTERNAL:[SunRay-Users] FYI: (LATE) Sun Ray Core Services Patch
XXXXXX-01 for SRSS 4.2 available

dear all,

this announcement comes _pretty late_, since the patches have been 
probably available for more than a month... thanks to Niki Waibel for 
posting about these on the wiki!

140993-01 - Solaris SPARC
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-1
40993-01-1

README
http://www.sun-rays.org/patches/README/README.140993-01


140994-01 - Solaris 10 x86
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-1
40994-01-1

README
http://www.sun-rays.org/patches/README/README.140994-01


140995-01 - Linux
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-1
40995-01-1

README
http://www.sun-rays.org/patches/README/README.140995-01


below is the README for the SPARC platform patch.


greetings,

Stoyan




Patch-ID# 140993-01

NOTE:
***********************************************************************
READ THE TERMS OF THE AGREEMENT ("AGREEMENT") IN THE LEGAL_LICENSE.TXT
FILE CAREFULLY BEFORE USING THIS SOFTWARE. BY USING THE SOFTWARE, YOU
AGREE TO THE TERMS OF THIS AGREEMENT. IF YOU DO NOT AGREE TO ALL OF THE
TERMS, PROMPTLY DESTROY THE UNUSED SOFTWARE.
***********************************************************************
For further information on patching best practices and resources, please
see the Big Admin Patching Center, http://www.sun.com/bigadmin/patches/
***********************************************************************

Keywords: sun ray update patch security
Synopsis: Sun Ray Core Services version 4.2 Patch Update
Date: Feb/25/2010


Install Requirements: NA

Solaris Release: 10

SunOS Release: 5.10

Unbundled Product: Sun Ray Core Services

Unbundled Release: 4.2

Xref: This patch available for 5.10_x86 as 140994-01 and for Linux as 
140995-01

Topic:

Relevant Architectures: sparc

BugId's fixed with this patch: 6811761 6889535 6901836 6902328 6904684 
6904989 6908144 6910599 6915206 6918519

Changes incorporated in this version: 6811761 6889535 6901836 6902328 
6904684 6904989 6908144 6910599 6915206 6918519

Patches accumulated and obsoleted by this patch:

Patches which conflict with this patch:

Patches required with this patch:

Obsoleted by:

Files included with this patch:

/etc/opt/SUNWut/loginGUI.start
/opt/SUNWut/lib/firmware/CoronaP1
/opt/SUNWut/lib/firmware/CoronaP2
/opt/SUNWut/lib/firmware/CoronaP3
/opt/SUNWut/lib/firmware/CoronaP4
/opt/SUNWut/lib/firmware/CoronaP5
/opt/SUNWut/lib/firmware/CoronaP6
/opt/SUNWut/lib/firmware/CoronaP7
/opt/SUNWut/lib/firmware/CoronaP8
/opt/SUNWut/lib/firmware_gui/CoronaP1
/opt/SUNWut/lib/firmware_gui/CoronaP2
/opt/SUNWut/lib/firmware_gui/CoronaP3
/opt/SUNWut/lib/firmware_gui/CoronaP4
/opt/SUNWut/lib/firmware_gui/CoronaP5
/opt/SUNWut/lib/firmware_gui/CoronaP6
/opt/SUNWut/lib/firmware_gui/CoronaP7
/opt/SUNWut/lib/firmware_gui/CoronaP8
/opt/SUNWut/lib/libusbut.so.1
/opt/SUNWut/lib/libutgrpmgr.so
/opt/SUNWut/lib/loginGUI
/opt/SUNWut/lib/utaddfontpath
/opt/SUNWut/lib/utdevmgrd
/opt/SUNWut/lib/utparalleld
/opt/SUNWut/lib/utseriald
/opt/SUNWut/lib/utstoraged

Problem Description:

6811761 on SRSS 4.1, with Japanese language login,characters on lock 
window are garbled
6889535 loginGUI displays incorrect msg "Unable to authenticate - 
Internal PAM Error" when user is locked
6901836 SRSS 4.2 FCS, SR2 devices reboot during VPN authentication
6902328 memory problems in the Sun Ray Session Server
6904684 Sun Ray VPN fails on the 2nd IKE rekey, and reboots
6904989 When a VPN gateway closes a connection, the Sun Ray sends the 
previously entered password repeatedly
6908144 VPN connection expiration can leave Sun Ray in state that 
requires power off
6910599 Sound setup of DTU changes to speaker and headphone on when 
playing music
6915206 FOG doesn't work when 'enableMulticast=false' is set in 
auth.props file.
6918519 Restore "forced callme" feature to DM

Detailed Installation Steps
---------------------------

1. Suppress firmware downloads

	If the server being patched is not a member of a Sun Ray
	failover group you should skip this step.

	If the server being patched is a member of a Sun Ray failover
	group then this step is optional but is strongly recommended.

	At Patch Installation
	---------------------

	    Before adding this patch to servers configured into a Sun
	    Ray failover group we advise that you disable Sun Ray
	    firmware delivery from all unpatched hosts in the failover
	    group.  On each host in the group:

		For config parameters (.parms) file:

		    $ /opt/SUNWut/sbin/utfwadm -D -a -V

		For dedicated network interconnects:

		    $ /opt/SUNWut/sbin/utfwadm -D -a -n all

		For shared subnetwork interconnects:

		    $ /opt/SUNWut/sbin/utfwadm -D -a -N all

	    Do this only one time, before adding this patch to any
	    server in the group.

	    The purpose of this step is to prevent unpatched servers
	    from offering old firmware to Sun Ray appliances.

	At Patch Removal
	----------------

	    Before removing this patch from servers configured into a
	    Sun Ray failover group we advise that you disable firmware
	    delivery from any hosts in the failover group that have
	    this patch installed.  On each already-patched host in the
	    group:

		For dedicated network interconnects:

		    $ /opt/SUNWut/sbin/utfwadm -D -a -n all

		For shared subnetwork interconnects:

		    $ /opt/SUNWut/sbin/utfwadm -D -a -N all

		For config parameters (.parms) file:

		    $ /opt/SUNWut/sbin/utfwadm -D -a -V

	    Do this only one time, before removing this patch from any
	    of the already-patched servers in the group.

	    The purpose of this step is to prevent already-patched
	    servers from offering new firmware to Sun Ray appliances.

	    If this patch is being removed from a Sun Ray failover group
	    then omitting this step may result in increased restart
	    times for your Sun Ray appliances.  (A mixture of patched
	    and unpatched servers advertising conflicting firmware
	    versions may cause the appliance to download new firmware
	    each time it restarts.  The appliance automatically
	    restarts itself after downloading fresh firmware so its
	    overall restart cycle is longer in that case.  The
	    appliance may restart itself several times before
	    establishing or reconnecting to a session.)  The Sun Ray
	    restart time will return to normal once the patch has been
	    removed from all servers in the failover group.


2. Stopping Sun Ray services and login sessions

	Before the addition or removal of this patch to a Sun Ray server
	all users should be logged out of their Sun Ray sessions.

	Stop the Sun Ray services using the following commands:

                 $ /etc/init.d/utstorage stop
                 $ /etc/init.d/utsvc stop

	These commands will terminate any Sun Ray sessions that were not
	already logged out.

	Next, use the instructions outlined below in the section
	"Patch Installation Instructions" for the addition or removal
	of this patch.

3. Restart Sun Ray services

	 After the addition or removal of the patch, Sun Ray
	 services should be restarted on the system by running
	 '/opt/SUNWut/sbin/utrestart -c'.

4. Enable firmware downloads

	After the addition or removal of this patch on all Sun Ray
	servers in a failover group, enable firmware downloads
	using one of the following methods:

	1) If all Sun Ray servers in the failover group provide default
	   (non GUI) firmware downloads run this command on one of the
servers:

		$ /opt/SUNWut/sbin/utfwsync

	   After which the Sun Ray DTU's will reboot themselves and load
	   the new firmware.

	2) If only some of the Sun Ray servers in the failover group
provide
	   firmware downloads to the DTU's, run the following command
	   on the servers that do provide firmware:

	   For default (non GUI) firmware.

		For dedicated network interconnects:

		  $ /opt/SUNWut/sbin/utfwadm -A -a -n all

		For shared subnetwork interconnects:

		  $ /opt/SUNWut/sbin/utfwadm -A -a -N all

	   For GUI firmware.

		For dedicated network interconnects:

		  $ /opt/SUNWut/sbin/utfwadm -A -a -n all -f \
		    /opt/SUNWut/lib/firmware_gui

		For shared subnetwork interconnects:

		  $ /opt/SUNWut/sbin/utfwadm -A -a -N all -f \
		    /opt/SUNWut/lib/firmware_gui

	3) Upgrading firmware via the config parameter (.parms) file

	   For default (non GUI) firmware.

		  $ /opt/SUNWut/sbin/utfwadm -A -a -V

	   For GUI firmware.

		  $ /opt/SUNWut/sbin/utfwadm -A -a -V -f \
		    /opt/SUNWut/lib/firmware_gui

	   Then restart services on all servers in the failover group by
	   executing the following command on a server in the group:

		  $ /opt/SUNWut/sbin/utfwsync -d

Patch Installation Instructions:
--------------------------------
Refer to the man pages for instructions on using 'patchadd' and
'patchrm'
scripts provided with Solaris.  Any other special or non-generic 
installation
instructions should be described below as special instructions.  The 
following
example installs a patch to a standalone machine:

	example# patchadd /var/spool/patch/<patchid-rev>

The following example removes a patch from a standalone system:

	example# patchrm <patchid-rev>

patchadd may give some messages while installing on a system
with zones.  To suppress these messages "-G" option can be used.

	example# patchadd -G /var/spool/patch/<patchid-rev>

For additional examples please see the appropriate man pages.

Special Install Instructions:
-----------------------------
NOTE 1: This patch is for the Sun Ray Core Services 4.2 component
that is part of Sun Ray Server Software 4.2.

NOTE 2: This SRSS patch does not support Live Upgrade.  Please do not
install this patch via live upgrade.

NOTE 3: The DTU firmware delivered in this patch has the following
version
identification string

     4.2_140993-01_2010.01.21.17.35
     GUI4.2_140993-01_2010.01.21.17.35

Required Patches
----------------

Warnings & Errors
-----------------
** WARNING: This patch should only be applied to systems which have
	    Sun Ray Server Software 4.2 fully installed.
	    Do not attempt to add this patch to the UFS image to be
	    applied as part of the install process.

Post-Patch Installation Notes:
------------------------------

README -- Last modified date:  Thursday, February 25, 2010





_______________________________________________
SunRay-Users mailing list
SunRay-Users at filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


More information about the SunRay-Users mailing list