Please download the Hotfix called,QSJ Patch 3560 Read Me for solution SOL57176 from:https://support.quest.com/SUPPORT/index?page=downloadsentitlement&file=2890653
This patch updates the Java classes in compatible VSJ releases listed above. It replaces two classes (com.dstc.security.kerberos.gssapi.ServerHandShaker and com.dstc.security.kerberos.dns.Response) and adds a new package of classes (com.dstc.security.kerberos.av.*).
The classes that constitute this patch are packaged in a JAR file, vsj-patch-3560.jar, included in this patch distribution. The classes from this patch JAR file must be merged into one of the JAR files in the applicable VSJ release. There are two ways to perform this merge: manually, or (for most of the releases listed above) using the Ant build.xml included in this patch distribution.
To install this patch using Ant:
Note:this approach can be used for all VSJ releases listed above except VSJ for NetWeaver.
- Install Apache Ant (1.5.3 or above) if you do not have it already, and configure your PATH and JAVA_HOME environment variables.
- Identify the JAR file that must be patched in your VSJ release. (This is the JAR file that contains the com.dstc.security.kerberos.gssapi.ServerHandShaker class).
- For VSJ 3.1, this is lib/jcsi_krb.jar
- For VSJ 3.2 releases, this is lib/vsj-*-3.2.jar (for example, vsj-weblogic-3.2.jar)
- For VSJ Standard Edition 3.3, this is lib/vsj-standard-3.3.jar
- For VSJ Tomcat Edition 3.3, this is lib/vsj-tomcat-3.3-core.jar
- Edit the apply-patch.properties file (included in this patch distribution) to specify the path to the JAR file identified above.
- Change to the directory that contains this unpacked patch distribution (including the apply-patch.properties, build.xml, vsj-patch-3560.jar files).
- Run Ant (ant) with no arguments. This will replace the JAR file identified above with an updated version that includes the new classes from the patch JAR file.
- Follow the appropriate process for your VSJ release to use the modified JAR file in your applications. (For VSJ Standard Edition, rebuild your web applications using the modified JAR file and then redeploy them. For other VSJ editions, copy the modified JAR file into the appropriate location in your Java application server, just as you previously did when installing the unmodified JAR file from your original VSJ release).
To install this patch manually:
For all applicable VSJ versions except VSJ for NetWeaver:
- Find the jar command in your Java JDK / JRE.
- Use jars x and f options to extract the classes from vsj-patch-3560.jar into a temporary directory tree.
- Identify the JAR file that must be patched in your VSJ release (as above).
- Use jars u and f options to update that JAR file with the contents of the temporary directory tree.
- Remove the temporary directory tree.
- Follow the appropriate process for your VSJ release to use the modified JAR file in your applications. (For VSJ Standard Edition, rebuild your web applications using the modified JAR file and then redeploy them. For other VSJ editions, copy the modified JAR file into the appropriate location in your Java application server, just as you previously did when installing the unmodified JAR file from your original VSJ release).
VSJ for NetWeaver requires the following extra steps, because the JAR file that must be updated is packaged inside an SDA file:
- Extract the contents of the install/required/com.quest.vsj.netweaver.sda file (for instance, using a zip tool) into a temporary directory tree.
- In that directory tree, find the vsj-netweaver-3.3.jar file and, following the steps listed above, use the jar command to patch it
- Update the contents of the install/required/com.quest.vsj.netweaver.sda file to replace the original vsj-netweaver-3.3.jar file with the patched vsj-netweaver-3.3.jar file.
- Since the version-number information in the SDA file has not been updated by this process, uninstall the original (unpatched) com.quest.vsj.netweaver.sda from your NetWeaver installation before installing this new (patched) com.quest.vsj.netweaver.sda.