Patch-ID# 107609-03 Keywords: isp sws Sun Web Server Network Cache Accelerator nca snca Synopsis: Solaris ISP Server 2.0: SNCA 1.0 and SWS 2.1 component patch Date: Jul/19/99 Solaris Release: 2.6 7 SunOS Release: 5.6 5.7 Unbundled Product: Solaris ISP Server Xref: This patch available for x86 as patch 107610-03 Unbundled Release: 2.0 BugId's fixed with this patch: 4209383 4212898 4213265 4208850 4206408 4206734 4213292 4206411 4208028 4213195 4209333 4212042 4158362 4189259 4201777 4212431 4212433 4215203 4215205 4225656 4209273 4198716 4201774 4209384 4225042 4225044 4225051 4122878 4216924 4220899 4233981 4210172 4227880 4241855 4245545 Changes incorporated in this version: NOTE: This patch contains fixes for Sun Webserver 2.1 (SWS) and the Solaris 7 Network Cache Accelerator (NCA). Please note that the NCA fixes will only be installed on your system if you are running Solaris ISP Server 2.0 on Solaris 7. Relevant Architectures: sparc Patches accumulated and obsoleted by this patch: Patches which conflict with this patch: Patches required with this patch: Obsoleted by: Files included with this patch: /usr/lib/nca/ncalogd /kernel/drv/nca /kernel/drv/sparcv9/nca /etc/nca/ncakmod.conf /etc/nca/ncalogd.conf /usr/bin/ncab2clf /etc/init.d/ncakmod /etc/init.d/ncalogd /etc/http/site_template/conf/site.conf /usr/http/lib/create_server.sh /usr/jsdk/README.sws /usr/http/certs/VerisignTestCA.cert /usr/http/src/servlet/welcome/README.WelcomeServlet /usr/http/src/servlet/welcome/WelcomeServlet.java /usr/http/admin_server/public/admin/com/sun/sws/admin/ListResourceBundle/Messages.java /usr/http/admin_server/public/admin/com/sun/sws/admin/ListResourceBundle/ServerPropertiesUI.java /usr/bin/htaccess /usr/bin/htcontent /usr/bin/hthost /usr/bin/htmap /usr/bin/htpasswd /usr/bin/htserver /usr/bin/htservlet /usr/bin/htrealm /usr/http/bin/htafp /usr/http/lib/sslpasswd /usr/http/lib/cgi-bin/publish_script /usr/lib/httpd /usr/lib/http/libacl.so.1 /usr/lib/http/libcontent.so.1 /usr/lib/http/libcookies.so.1 /usr/lib/http/libhttpd.so.1 /usr/lib/http/libmappings.so.1 /usr/lib/http/librealm.so.1 /usr/lib/http/classes.zip /usr/lib/http/libse.so.1 /usr/http/admin_server/cgi-bin/errorlog /usr/http/admin_server/cgi-bin/eventlog /usr/http/admin_server/cgi-bin/requestlog /usr/http/admin_server/public/lib/admin_v2.1.dispatch.jar /usr/http/admin_server/public/lib/admin_v2.1.jar /usr/http/admin_server/public/lib/admin_v2.1.site.jar /usr/lib/http/libadmin.so.1 /usr/share/man/sman1m/httpd.1m /usr/share/man/sman1m/htafp.1m Problem Description: 4209383 SWS: URL parameter lists parse incorrectly. 4212898 SWS: HttpSessionBindingListener isn't called when session objects are replaced. 4213265 SWS: The servlet that uses a stale ServletOutputStream object can crash httpd. 4208850 SWS: encodeUrl(String url) only encodes absolute urls. 4206408 SWS: The site template should include a sym link directive. 4206734 SWS: RMI does not work from an SWS servlet. 4213292 SWS: Create new htafp man page. 4206411 SWS: hthost fails during default installation. 4208028 SWS: The java.net.URLConnection does not understandSWS 2.1 HTTP headers. 4213195 SWS: Eliminate double buffering for servlet input and output streams. 4209333 SWS: It should not be possible to delete the admin server instance. 4212042 SWS: SWS should support servlet debugging via jdb. 4158362 SWS: The servlet/cgi/request log script returns double entries. 4189259 SWS: The -z option must be addressed in htserver help. 4201777 SWS: cgi_dns_enable needs to be set to yes for a servlet to use nameservice. 4212431 SWS: htafp cannot be run against a single host or server. 4212433 SWS: htafp only uses HTPASSWD realms. 4215203 SWS: Document the -J option in httpd man page. 4215205 SWS: JDK 1.2 information is missing from the servlets readme. 4225656 SWS: When Sun WebServer encounters an error while processing a cgi request, it sends SIGKILL (9) to the cgi child process immediately, which does not give the cgi child process a chance to do any possible cleanup.4209273 SWS: Resource doors header corruption occurs. 4209273 SWS: Resource doors header corruption occurs. 4198716 SWS: The n_keepalive and n_timeout statistics are not implemented. 4201774 SWS: Accept headers are not parsed correctly. 4209384 Changes to "se_session_persistence" does not take effect with "htserver restart". 4225042 Default web site should be selected by default in the Web Sites List screen. 4225044 Configure Java virtual machine arguments (native stack size, java stack size, and initial and maximum java heap size) through the GUI. 4225051 GUI screen grays out when it encounters an invalid cgi-user. 4122878 Sun WebServer does not stop all processes and remove unnecessary temporary files when packages are removed. 4216924 The VeriSign trial server ID Certificate Authority certificate has expired. 4220899 Cannot specify multiple servlet initialization arguments in the GUI. 4233981 Sun WebServer is vulnerable to some denial of service attacks. 4210172 The first row of servlet log can't be viewed in "view message detail". 4227880 Sun WebServer core dumps when a series of concurrent requests are made against a single request handling thread 4245545 Need a way to set thread stack size 4241855 Performance enhancements to make dynamic content processing faster through the use of a new fast CGI mechanism, modified low-level lock ordering, and to change several single instance data structures to per-CPU data structures. Patch Installation Instructions: ------------------------------- You can use the generic 'patchadd' command to install the packages in this patch. Disregard the warning message stating that 'patchadd' or 'patchrm' is being used to install or remove a patch; this message is part of the normal procedure for installing or removing a patch on a Solaris system. On a Solaris system, any patch can be installed using 'patchadd' and removed by using 'patchrm'. You do not need to remove the old packages before installing the new ones. Note: | The patch installs only the relevant portions of the patch on | systems that have been configured in a distributed server model. | The patch installation process looks for existing packages and does | not install the patched portions if the original package is not | present. The patch upgrades existing packages. If you install new | Solaris ISP Server SWS or NCA component later, you should apply this | patch again. Special Install Instructions: ---------------------------- If you are a Solaris ISP Server customer, please install patch 107484-01 first. To install using the 'patchadd' command: 1. Become superuser. % su 2. Change (cd) to the directory where you unpacked the archives. For example: Note: | The packages are located in the directory where you unpacked the | archives; however, the actual directory names may vary. # cd /tmp 3. Apply the patch. # patchadd 107609-03 4. Reboot the system after the patch has been installed successfully. Note: | If you are running Solaris ISP Server 2.0 on multiple machines, | installing this patch on one server does not apply the patch to | all of the servers on which Solaris ISP Server 2.0 is installed. | Therefore, you must apply this patch directly to each machine | using the instructions provided in this README. For additional information on installing or backing out this patch, command descriptions, and a explanation of installation error messages, refer to 'Install.info' located in the same directory as this README.