NOVELL TECHNICAL INFORMATION DOCUMENT

TITLE:              Intruder Detection Patch for v2.2
DOCUMENT ID:        TID000142
DOCUMENT REVISION:  A
DATE:               01JUL93
ALERT STATUS:       Yellow
INFORMATION TYPE:   Symptom Solution
README FOR:         INTRUD.EXE

NOVELL PRODUCT and VERSION:
NetWare 2.2

ABSTRACT:
This patch addresses the issue of INTRUDER DETECTION/LOCKOUT abending a
v2.2 NetWare file server.  If DETECT INTRUDERS is set to YES and a user
logging in to the file server hits the INCORRECT LOGIN ATTEMPTS number, the
file server could ABEND with a General Protection Interrupt (GPI).
_________________________________________________________________

DISCLAIMER
THE ORIGIN OF THIS INFORMATION MAY BE INTERNAL OR EXTERNAL TO NOVELL. 
NOVELL MAKES EVERY EFFORT WITHIN ITS MEANS TO VERIFY THIS INFORMATION. 
HOWEVER, THE INFORMATION PROVIDED IN THIS DOCUMENT IS FOR YOUR INFORMATION
ONLY.  NOVELL MAKES NO EXPLICIT OR IMPLIED CLAIMS TO THE VALIDITY OF THIS
INFORMATION.
_________________________________________________________________

Self-Extracting File Name:  INTRUD.EXE

Files Included     Size     Date        Time

  INTRUD.TXT          (This File)
  ZAPOBJ.EXE      28660    7-31-90      4:24p
  INTRUD.FIX        649   11-21-91      6:34a


This README file of INTRUD.EXE accompanies INTRUD.FIX and for NetWare
v2.2.

Purpose:
This patch addresses the issue of INTRUDER DETECTION/LOCKOUT abending a
v2.2 NetWare file server.  If DETECT INTRUDERS: is set to YES and a user
logging in to the file server hits the INCORRECT LOGIN ATTEMPTS number, the
file server could ABEND with a GENERAL PROTECTION INTERRUPT.  The file
server might also display garbage characters on the screen.

Installation:
Patching the Operating System:

NOTE* 	DEDOS.OBJ     Dedicated Operating System
    	NONDEDOS.OBJ  Non-Dedicated Operating System

1)  Patch the DEDOS.OBJ or NONDEDOS.OBJ files and relink the operating
system.  It is best to perform the following steps either on a network
drive or a local hard drive.

a)  Copy ZAPOBJ.EXE  and INTRUD.FIX into the same directory as the above
mentioned OBJ files.

b)  Run ZAPOBJ.EXE against the appropriate OBJ file.  The correct syntax
for ZAPOBJ.EXE is:  ZAPOBJ <INPUTFILE> <OUTPUTFILE> <PARAMETERFILE>.

Example:
For a dedicated server:  zapobj dedos.obj newdedos.obj intrud.fix
For a nondedicated server: zapobj nondedos.obj newnon.obj intrud.fix

c)  Rename the original OBJ to *.OLD and the patched OBJ (newdedos.obj or
newnon.obj) to DEDOS.OBJ or NONDEDOS.OBJ.  If you are using floppy disks
you will need to create a new working copy of the OSOBJ diskette and copy
the patched OBJ files to this diskette.

d)  Run INSTALL -M and link and configure the OS.  You will then have a new
NET$OS.EXE on the OSEXE directory/diskette.

e)  If the NetWare partition is not bootable, or if you are running a
non-dedicated server, install the new NET$OS.EXE to the network drive and
boot the server.

ÿ