Novell Privileged User Manager 2.2 Support Pack 2 (2.2.2) Readme

July 21, 2010

1.0 Purpose of Support Pack 2

Novell Privileged User Manager 2.2. Support Pack 2 (2.2.2) is a bundle of bug fixes and enhancements. This patch includes fixes for the following modules:

1.1 Bugs Fixed

The support pack for this module includes the following fixes:

  • Bug 603287: udsh line wraps output with -b option.

    Solution: udsh does not wrap with -b option.

  • Bug 619552: usrun fails (memory fault) in init script on RHEL after patching to 2.2.1 HF 2

    Solution: usrun succeeds in init script

  • Bug 607126 - Enhanced Access Control doesn't run as non-root user.

    Solution: Enhanced Access Controt runs as root and non-root user.

  • Bug 613283 - Solaris: Failed to copy /usr/lib/secure/32/ccpreload-elf32.so

    Solution: Enhanced Access Control works with non-root user on Linux and Solaris

1.2 SUSE Linux Enterprise Server (SLES) Specific Enhancements

Privileged User Manager 2.2.2 now works independent of the open-source packages and works using the SLES supported packages. The open-source packages are delivered and maintained through the SLES channel.

IMPORTANT:PUM 2.2.2 will use the following packages from SLES:

  • openssl

  • perl

  • apr

  • zlib

  • pcre

  • openldap

Name for SLES RPM’s have changed.

  • Name of the new RPMs for 32-bit architecture are as below:

    SLES 10 Manager RPM

    SLES10\novell-pum-manager-2.2.2-i586.rpm

    SLES 10 Agent RPM

    SLES10\novell-pum-2.2.2-i586.rpm

    SLES 11 Manager RPM

    SLES11\novell-pum-manager-2.2.2-x86.rpm

    SLES 11 Agent RPM

    SLES11\novell-pum-2.2.2-x86.rpm

  • Name of the new RPMs for 64-bit architecture are as below:

    SLES 10 Manager RPM

    SLES10\novell-pum-manager-2.2.2-i586_64.rpm

    SLES 10 Agent RPM

    SLES10\novell-pum-2.2.2-i586_64.rpm

    SLES 11 Manager RPM

    SLES11\novell-pum-manager-2.2.2-x86_64.rpm

    SLES 11 Agent RPM

    SLES11\novell-pum-2.2.2-x86_64.rpm

  • Bugs 608727, 608737: Cosmetic errors present in Privileged User Manager 2.2.1.

    Solution: Cosmetic errors resolved by applying PUM 2.2.2 and the aaa_base package.

    NOTE:The aaa_base package is available from the SLES channel.

  • Bug 599726: Restricted shells create conflicts with SLES.

    Solution: Name of the Privileged User Manager shells are changed as below:

    UNIX or Linux Shell Name

    SLES Shell Name

    crush

    cpcksh

    rrush

    rpcksh

    rush

    pcksh

  • In Privileged User Manager 2.2.2 for SLES, the location of the installed files have changed, due to File Hierarchy Standard (FHS) changes.

    Type of Files

    Location of SLES Framework Files

    Location of UNIX Framework Files

    Log file

    /var/opt/novell/npum/logs/

    /opt/novell/npum/logs/

    Database and Service files

    /var/opt/novell/npum/service/local/

    /opt/novell/npum/service/local/

    Library and binary files

    /opt/novell/npum/lib/

    /opt/novell/npum/lib/

    Configuration files

    /etc/opt/novell/npum/config/

    /opt/novell/npum/config/

2.0 Installing the Patches

Privileged User Manager supports two ways to patch your system:

2.1 Using the Package Manager with NCC

During the process of installing the packages via the Framework, you can create a backup of the existing packages that are being replaced. To create the backup, you need to leave the Create backup option enabled when installing the patch. Then if you want to remove the update, you can use the Rollback Packages option.

  1. Configure the Package Manager for Novell Customer Center (NCC):

    1. Log in to the Framework Manager console.

    2. Click Package Manager.

    3. In the left frame, click Settings

    4. From the drop-down menu, select Novell Update Server.

    5. Configure the following fields:

      User name: Specify the username that allows you to log in to the Novell Customer Center.

      Password: Specify the password that is associated with this account.

    6. Select the Advanced Settings, then specify the NCC Update URL from the e-mail you received.

    7. Click Finish.

  2. (Conditional) If you do not have the Framework patch loaded in your Package Manager:

    1. In the left frame of the Package Manager page, select Add Packages.

    2. Select the Framework Patches, then click Next.

    3. After the patches are loaded, click Finish.

  3. Load the updates:

    1. In the left frame of the Package Manager page, click Check for Updates.

    2. If updates are listed, select the packages, then click Next.

    3. After the patches are loaded, click Finish.

  4. To push the patches to your host machines, continue with Section 2.4, Installing the Patches on Host Machines.

2.2 Using the Package Manager with a Local Server

  1. Download the patch manually:

    1. On http://download.novell.com, select the Basic Search tab.

    2. Under Product or Technology, select Privileged User Manager, then select Search.

    3. On the Patches tab, select to download Privileged User Manager 2.2.2.

      NOTE:The downloadable patch is an ISO file.

  2. Extract and publish packages into the Framework:

    1. Copy the novell-npum-packages-2.2.2.tar.gz file to one of your Privileged User Manager machines.

    2. Extract novell-npum-packages-2.2.2.tar.gz into a temporary location, such as a /tmp/framework/ directory.

      tar -xvzf novell-npum-packages-2.2.2.tar.gz 
      
    3. Publish the packages to your Framework, using the following command:

      /opt/novell/npum/sbin/unifi -u admin distrib publish -d /tmp/framework/packages/
      

      If you did not extract the packages to the /tmp/framework directory, replace /tmp/framework with the path to your directory.

    4. When prompted, enter the name and password for the administrator user.

  3. To push the patches to your host machines, continue with Section 2.4, Installing the Patches on Host Machines.

2.3 Committing Packages

If the current package does perform correctly in your environment, you can commit the package, which frees up disk space by deleting the files in the backup directory. If your hosts have limited disk space, Novell recommends that you commit the packages on all hosts before performing the next update.

To commit the updates to the Package Manager:

  1. Log in to the Framework Manager console.

  2. On the Home page, click Hosts

  3. In the navigation pane, select the domain or the host where you want to commit packages.

  4. Click Commit Domain Packages or Commit Packages in the task pane.

  5. Select the packages from the list of available packages.

    To select multiple packages, press the Ctrl key and select the packages one at a time, or press the Shift key to select a consecutive list of packages. To select all packages, use Ctrl+A.

  6. Click Next to start the commit process.

  7. Click Finish.

2.4 Installing the Patches on Host Machines

During the process of installing the packages via the Framework, you can create a backup of the existing packages that are being replaced. To create the backup, you need to leave the Create backup option enabled when installing the patch. Then if you want to remove the update, you can use the Rollback Packages option.

You can select to install the patches on all hosts or on selected hosts.

  1. Log in to the Framework Manager console.

  2. To install the patches on all hosts (if you want to install the patches on only selected hosts, skip to Step 3):

    1. On the Home page, click Hosts.

    2. Select the root most domain.

    3. In the left frame, select Update Domain Packages.

    4. Select the desired hosts.

      Use Shift+click or Ctrl+click to select multiple hosts.

    5. Click Next.

      A message should be displayed, stating:

      Framework Patch version 2.2.2(Rev:22080,Bld:4783)on sd143: successfully installed.
      
      Command Control Agent version 2.2.2(Rev:22131,Bld:4785)on sd143: successfully installed.
      
      Distribution Agent version 2.2.2(Rev:21221,Bld:4775)on sd143: successfully installed.
      
      Registry Agent version 2.2.2(Rev:20447,Bld:4775)on sd143: successfully installed. 
      
      Store and Forward Agent version 2.2.2(Rev:21473,Bld:4775)on sd143: successfully installed. 
      
    6. Click Finish.

  3. To install the patches on selected hosts:

    1. On the Home page, click Hosts.

    2. In the left frame, select Update Packages.

    3. Select the desired Hosts.

      Use Shift+click or Ctrl+click to select multiple hosts.

    4. Click Next.

      A message should be displayed, stating:

      Framework Patch version 2.2.2(Rev:22080,Bld:4783)on sd143: successfully installed.
      
      Command Control Agent version 2.2.2(Rev:22131,Bld:4785)on sd143: successfully installed.
      
      Distribution Agent version 2.2.2(Rev:21221,Bld:4775)on sd143: successfully installed.
      
      Registry Agent version 2.2.2(Rev:20447,Bld:4775)on sd143: successfully installed.
      
      Store and Forward Agent version 2.2.2(Rev:21473,Bld:4775)on sd143: successfully installed.
      
    5. Click Finish.

3.0 Documentation

The following sources provide information about Novell Privileged User Manager 2.2.2: