Data Encryption Kit patches not downloadable with smpatch
`smpatch analyze' shows these patches:
118562-12 SunOS 5.10: Solaris Data Encryption Kit Patch
118563-12 SunOS 5.10_x86: Solaris Data Encryption Kit Patch
but `smpatch download' says:
The following patches were not downloaded:
118562-12: Request to download update failed. Status code 404 returned. The requested resource was not found or is not available.
The following patches were not downloaded:
118563-12: Request to download update failed. Status code 404 returned. The requested resource was not found or is not available.
This happens both when going through the local patch server and when going
directly to Sun's patch server. Previous versions of these patches were
downloadable. What's happened?
# 3
Downloading the patch works now. However, smpatch complains:
CRITICAL: The patch 118563-14 makes the kernel unstable, is obsolete or is forbidden by policy.
and doesn't apply the patch. That makes three patches that meet this fate now:
119253-18 SunOS 5.10_x86: System Administration Applications Patch
118563-14 SunOS 5.10_x86: Solaris Data Encryption Kit Patch
119281-11 CDE 1.6_x86: Runtime library patch for Solaris 10
I don't understand why any of these would be classified this way.
# 4
The error message is a bit generic. The most likely part to be true is: forbidden by policy. Normally this error occurs because the patch should be installed in single user mode, for patch 118563-14 this is certainly true.
Try dropping the system to single user mode then apply these patches. They should install without any further errors.
# 5
When I checked the README files for those three patches, none of them said
that they needed to be applied in single-user mode. On the other hand, this patch:
125101-06 SunOS 5.10_x86: Kernel Update patch
was applied during the same smpatch run where those three were rejected.
I'd say that something's wrong with how those patches are classified.
# 6
The patches have been flagged as "non-standard" which means the SunUC toolset will not be able to install them. This is generally done when there are potentially additional manual steps that need to be performed in order to fully complete installation.
Whether the application of the flag is correct or not for these patches I cannot say, but the patches should apply manually using patchadd without any difficulties.
