topic Re: tsconvert and minimal patching in Operating System - HP-UX

tsconvert and minimal patching

John Carr_2 — Mon, 22 Dec 2003 07:51:39 GMT

I have a 10.10 server which can not be ugraded which needs to be converted to trusted mode. The server has very little space and I ask what is the minimum patching that can be done to perform this. I am presuming that if I do not use sam and work from the command line I only need patches relating to tsconvert and modprpw. Please advise.

I also have a 11.00 server with the same problem please advise for this too.

thanks
John.

Re: tsconvert and minimal patching

Pete Randall — Mon, 22 Dec 2003 08:01:38 GMT

John,

Interestingly enough, searching the patch database for 10.10 with the keywords "tsconvert" and "modprpw" turns up no results. I hope that's an indication that you don't need any patches but I wouldn't guarantee that's the case.

Why can't you upgrade this system? Most application code is binary compatible and will run untouched on 11.0 or even 11i.

Pete

Re: tsconvert and minimal patching

Bruno Ganino — Mon, 22 Dec 2003 08:49:40 GMT

My search (hp-ux 10.10) has found

http://www5.itrc.hp.com/service/patch/patchDetail.do?BC=patch.breadcrumb.main|patch.breadcrumb.search|&patchid=PHCO_12235&context=hpux:800:10:10

http://www5.itrc.hp.com/service/patch/patchDetail.do?BC=patch.breadcrumb.main|patch.breadcrumb.search|&patchid=PHCO_16346&context=hpux:800:10:10

It is usefull ???
Bye
Bruno

Re: tsconvert and minimal patching

John Carr_2 — Mon, 22 Dec 2003 08:59:48 GMT

Pete

im not really familiar with any of the applications but I am told upgrading is not possible at the moment.

these are production servers and there are not test servers available so im going to have to be very careful.

Bruno

thanks for the links I shall be using them

:-) John.

Re: tsconvert and minimal patching

John Carr_2 — Mon, 22 Dec 2003 10:04:51 GMT

Hi guys

I installed patch 12235 on the 10.10 server and tsconvert followed by modprpw worked fine now for the 11.00 server

:-) John.

Re: tsconvert and minimal patching

John Carr_2 — Mon, 22 Dec 2003 10:26:19 GMT

Hi

just trusted 11.00 system without any problem did install patch 28980 though :-) JOhn.

Re: tsconvert and minimal patching

Jean-Louis Phelix — Mon, 22 Dec 2003 10:40:49 GMT

Hi,

For me you required *2* patches in 10.10 :

A - PHCO_12235 (80k)
which delivers only modprpw even if it could be taken for a SAM patch

B - PHCO_10620 (90k)
which delivers tsconvert

Regards.

Re: tsconvert and minimal patching

Bruno Ganino — Mon, 22 Dec 2003 10:42:20 GMT

Ok, very Well !
Good Work, John

Bruno

Re: tsconvert and minimal patching

Darren Prior — Mon, 22 Dec 2003 11:11:56 GMT

Hmmmm - I've had a look through 10.10 patches searching on the keyword "trusted" and came up with a few additions:

all are PHCO_

10427 - login
11208 - libsec
6573 - su
13733 - passwd
15222 - useradd
22769 - cron

I'd suggest you read the patch texts for these to see if you can live without them. As for modprpw - that is a part of SAM hence why the patch is a SAM patch.

regards,

Darren.

Re: tsconvert and minimal patching

doug hosking — Tue, 23 Dec 2003 13:58:30 GMT

I'm sure you know that 10.10 is well past its support life and that you won't get support from HP if you need patches for that release.

Since you state you plan to use trusted mode,
I would strongly encourage you to get the latest 10.10 libsec patch. 10.10 trusted mode had some ugly performance problems in certain cases. Also, be sure to check the cron patches. Others have previously posted a list of other patches that would be a good idea.

Beware that there was a compatibility bump between 10.10 and 10.20 in the format of certain structures used for trusted mode, due to the support for 32-bit UIDs in 10.20.

The net result of this is that binaries that use the trusted mode APIs (getprpw, etc.)
(anything that knows how to authenticate
properly in a trusted mode environment)
will work on 10.10 OR 10.20 but the same
binary will not work correctly on both. It may APPEAR to work but don't believe it.
Be sure to recompile any such application rather than moving the binary between releases. This is documented in the 'read me first' document that comes with 10.20 systems.