000022182 - RSA ClearTrust Agent 4.6 for Apache install fails if Sun Solaris 2.8 patch 110934-24 & Solaris 9 patch 113713-16 is installed

Document created by RSA Customer Support Employee on Jun 16, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000022182
Applies ToRSA ClearTrust Agent 4.6 for Apache
Sun Solaris 2.8 patch 110934-24
Sun Solaris 9 patch 113713-16
IssueRSA ClearTrust Agent 4.6 for Apache install fails if Sun Solaris 2.8 patch 110934-24 and Solaris 9 patch 113713-16 is installed
Type "yes" to accept these terms and continue with installation: yes
/var/tmp/dstreAAAi4aO_4/RSActap20/install/request: /var/ct_apache2/.ct_vars_apache2: cannot create
pkgadd: ERROR: request script did not complete successfully
Installation of <RSActap20> failed.
No changes were made to the system.
CauseSo now that Sun Microsystems has fixed a security bug in pkgadd with Solaris patch 110934-24 and Solaris 9 patch 113713-16, the request script no longer runs with root privileges and instead runs as the user nobody if the install user doesn't exist. This problem will occur both for the standard 4.6.0.0 agent installation and a subsequent 4.6.0.3 patch brought out to resolve a similar issue where Solaris patch  110934-20 had been installed.
ResolutionThe following steps should be used to install the standard RSA ClearTrust Agent 4.6.0.0 for Apache software on a system where Sun Solaris 2.8 patch 110934-24 and Solaris 9 patch 113713-16 is installed:

1. Add a user called install to Solaris:

    # useradd -c "pkgadd install user" -s /bin/false -d / install

2. Find the UID of this newly created user:

    # egrep "^install:" /etc/passwd | cut -d: -f3
    12345

3. Change the UID of this new user to 0:

    # usermod -o -u 0 install

4. Install the ClearTrust Agent 4.6.0.0 following the documented installation process

5. Reset the install user's UID to its original value:

    # usermod -o -u 12345 install

For more details on the issue, see http://www.phoneboy.com/bin/view.pl/FAQs/SolarisInstallAndUpgradeIssueWorkaround
Legacy Article IDa28738

Attachments

    Outcomes