Patch-ID# 110396-06 Keywords: udp ip mipagent mipagent AAA reverse tunneling core dumps Synopsis: SunOS 5.8_x86: udp ip mipagent Date: Feb/22/2002 Solaris Release: 8_x86 SunOS Release: 5.8_x86 Unbundled Product: Unbundled Release: Xref: This patch available for SPARC as patch 110378 Topic: SunOS 5.8_x86: udp ip mipagent Relevant Architectures: i386 BugId's fixed with this patch: 4278842 4302749 4310956 4313189 4317221 4320818 4324051 4335568 4360818 4370123 4370438 4375915 4375920 4376886 4377368 4377693 4377694 4378163 4378727 4379361 4382946 4382996 4382998 4383001 4383007 4386544 4390912 4391040 4392110 4406041 Changes incorporated in this version: 4406041 Patches accumulated and obsoleted by this patch: 110199-01 110551-01 Patches which conflict with this patch: Patches required with this patch: 108529-13 or greater 108529-13 or greater 108529-13 or greater Obsoleted by: Files included with this patch: /etc/inet/mipagent.conf-sample /etc/inet/mipagent.conf.fa-sample /etc/inet/mipagent.conf.ha-sample /usr/lib/inet/mipagent /usr/sbin/mipagentconfig /usr/sbin/mipagentstat Problem Description: 4406041 mipagent core dumps due to invalid processing of the MN-HA auth ext (from 110396-05) 4382946 Router IP Address needs to be converted to network byte order 4383001 More optimal to validate FA HA auth ext & MN HA auth ext before aaa call vs afte 4382996 Potential deadlock when closing a session and starting new one with same NAI 4383007 Upon HA binding expire mipagent should do a Accounting Stop Request 4382998 Per aaa spec shouldn't be checking for MN addr & Home Agent addr AVP with OSA 4379361 Reverse Tunneling AVP should be processed 4390912 mipagent sample files to be updated with reverse tunnel info 4391040 agentInit.c has wrong definition and call for delFAVEptr 4392110 Change forcefullyDeregisterMN to take homeagent addr and homeaddr 4378727 visitors on a FA may get mixed up when private overlapped addresses are used 4370438 mipagent termination cleanup code needs enhancement (from 110396-04) This patch revision was generated to accumulate and obsolete the feature changes introduced in feature point patch 110551-01 (from 110396-03) 4386544 S8U3 Generic Patches Accumulating PP Requirements (from 110396-02) 4377368 FA doesn't save the challenge when it includes it in RegRpy -so no way to verify 4378163 Foreign Agent does not accept deregistrations correctly 4377693 Visitor entry should not be deleted if re-registration fails 4377694 Mobile Node NAI does not print correctly 4375915 FA hangs when two mobile nodes using same HA and FA expire reglife time (from 110396-01) This patch revision was generated to accumulate and obsolete the feature changes introduced in point patch 110199-01. 4317221 mipagent needs to read IP TTL to fully support reverse tunneling 4302749 Foreign Agent should not broadcast ARP for Mobile Nodes Link Layer address 4310956 ARP support needed for Mobile IP addresses 4320818 add radius hooks to mipagent daemon 4335568 mipagent's generic auth extension processing is broken (from 110199-01) 4317221 mipagent needs to read IP TTL to fully support reverse tunneling 4302749 Foreign Agent should not broadcast ARP for Mobile Nodes Link Layer address 4310956 ARP support needed for Mobile IP addresses 4320818 add radius hooks to mipagent daemon 4335568 mipagent's generic auth extension processing is broken (from 110551-01) 4278842 Add reverse tunneling to Foreign Agent and Home Agent 4313189 Mipagent needs to use routing socket to add/delete routes for rev-tun support 4324051 Mipagent needs to have a socket option to route reg reply directly to MN 4360818 Provide kernel support for Reverse tunneling and private addressing 4370123 AAA extensions to RADIUS interface between mipagent and radius 4376886 mipagent doesn't work with PPP interfaces 4375920 Foreign agent does not create two tunnels to HA when different COAs used Patch Installation Instructions: -------------------------------- For Solaris 2.0-2.6 releases, refer to the Install.info file and/or the README within the patch for instructions on using the generic 'installpatch' and 'backoutpatch' scripts provided with each patch. For Solaris 7-8 releases, refer to the man pages for instructions on using 'patchadd' and 'patchrm' scripts provided with Solaris. Any other special or non-generic installation instructions should be described below as special instructions. The following example installs a patch to a standalone machine: example# patchadd /var/spool/patch/104945-02 The following example removes a patch from a standalone system: example# patchrm 104945-02 For additional examples please see the appropriate man pages. Special Install Instructions: NOTE 1: To get Network Multipathing offlining capability, one needs to install the following patches: 109280-07 (or newer) /kernel/drv/ip patch 109741-03 (or newer) /kernel/drv/udp patch 109903-02 (or newer) /usr/lib/inet/in.ndpd patch 109905-02 (or newer) /sbin/in.mpathd patch 109907-03 (or newer) /sbin/ifconfig patch 110396-01 (or newer) /usr/lib/inet/mipagent patch NOTE 2: To get the complete support for the following: Add reverse tunneling to Foreign Agent and Home Agent Mipagent needs to use routing socket to add/delete routes for rev-tun support Mipagent needs to have a socket option to route reg reply directly to MN Provide kernel support for Reverse tunneling and private addressing one needs to install the following patches: 110396-04 (or newer) mipagent patch 109280-09 (or newer) ip/ipsecah patch 109741-04 (or newer) udp patch 109743-03 (or newer) icmp patch 109473-05 (or newer) tcp patch README -- Last modified date: Friday, February 22, 2002