tsconvert and minimal patching

[John Carr_2]

I have a 10.10 server which can not be ugraded which needs to be converted to trusted mode. The server has very little space and I ask what is the minimum patching that can be done to perform this. I am presuming that if I do not use sam and work from the command line I only need patches relating to tsconvert and modprpw. Please advise.

I also have a 11.00 server with the same problem please advise for this too.

thanks
John.

[Pete Randall]

John,

Interestingly enough, searching the patch database for 10.10 with the keywords "tsconvert" and "modprpw" turns up no results. I hope that's an indication that you don't need any patches but I wouldn't guarantee that's the case.

Why can't you upgrade this system? Most application code is binary compatible and will run untouched on 11.0 or even 11i.


Pete

[Bruno Ganino]

My search (hp-ux 10.10) has found

http://www5.itrc.hp.com/service/patch/patchDetail.do?BC=patch.breadcrumb.main|patch.breadcrumb.search|&patchid=PHCO_12235&context=hpux:800:10:10

http://www5.itrc.hp.com/service/patch/patchDetail.do?BC=patch.breadcrumb.main|patch.breadcrumb.search|&patchid=PHCO_16346&context=hpux:800:10:10

It is usefull ???
Bye
Bruno

[John Carr_2]

Pete

im not really familiar with any of the applications but I am told upgrading is not possible at the moment.

these are production servers and there are not test servers available so im going to have to be very careful.

Bruno

thanks for the links I shall be using them

:-) John.

[John Carr_2]

Hi guys

I installed patch 12235 on the 10.10 server and tsconvert followed by modprpw worked fine now for the 11.00 server

:-) John.

[John Carr_2]

Hi

just trusted 11.00 system without any problem did install patch 28980 though :-) JOhn.

[Jean-Louis Phelix]

Hi,

For me you required *2* patches in 10.10 :

A - PHCO_12235 (80k)
which delivers only modprpw even if it could be taken for a SAM patch

B - PHCO_10620 (90k)
which delivers tsconvert

Regards.

[Bruno Ganino]

Ok, very Well !
Good Work, John

Bruno

[Darren Prior]

Hmmmm - I've had a look through 10.10 patches searching on the keyword "trusted" and came up with a few additions:

all are PHCO_

10427 - login
11208 - libsec
6573 - su
13733 - passwd
15222 - useradd
22769 - cron

I'd suggest you read the patch texts for these to see if you can live without them. As for modprpw - that is a part of SAM hence why the patch is a SAM patch.

regards,

Darren.

[doug hosking]

I'm sure you know that 10.10 is well past its support life and that you won't get support from HP if you need patches for that release.

Since you state you plan to use trusted mode,
I would strongly encourage you to get the latest 10.10 libsec patch. 10.10 trusted mode had some ugly performance problems in certain cases. Also, be sure to check the cron patches. Others have previously posted a list of other patches that would be a good idea.

Beware that there was a compatibility bump between 10.10 and 10.20 in the format of certain structures used for trusted mode, due to the support for 32-bit UIDs in 10.20.

The net result of this is that binaries that use the trusted mode APIs (getprpw, etc.)
(anything that knows how to authenticate
properly in a trusted mode environment)
will work on 10.10 OR 10.20 but the same
binary will not work correctly on both. It may APPEAR to work but don't believe it.
Be sure to recompile any such application rather than moving the binary between releases. This is documented in the 'read me first' document that comes with 10.20 systems.