Issued:

2010-12-10

Updated:

2010-12-10

RHBA-2010:0971 - sssd bug fix update

Synopsis

sssd bug fix update

Type/Severity

Bug Fix Advisory

Topic

Updated sssd packages that fix various bugs are now available for Red Hat Enterprise Linux 6.

Description

The System Security Services Daemon (SSSD) provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable backend system to connect to multiple different account sources. It is also the basis to provide client auditing and policy services for projects like FreeIPA.

This update fixes the following bugs:

• During an upgrade of the sssd package, the package manager restarts the sssd service to ensure the running instance is properly replaced with the newer version. However, prior to this update, a race condition could occur upon the service shutdown, causing the parent process not to wait for its children to terminate. When this happened, these running sub-processes may have prevented sssd from starting again. With this update, the sssd service has been corrected to wait for the children processes to terminate, so that it can be restarted as expected. (BZ#658374)

• On 32-bit architectures, running the "getent passwd" command on a username with a very large user or group identifier (that is, UID or GID greater than

2147483647) resulted in an empty output. With this update, the underlying source code has been modified to address this issue, and the getent command now returns the expected output. (BZ#660585)

• Previously, shutting down the sssd service (either by using the "service sssd stop" command, or with the SIGTERM signal) could cause the service to stop responding. This error has been fixed, and sssd no longer fails to shut down. (BZ#660592)

All users of sssd are advised to upgrade to these updated packages, which resolve these issues.

Solution

Before applying this update, make sure that all previously-released errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at This content is not included.https://access.redhat.com/kb/docs/DOC-11259

Affected Products

Updated Packages

• libini_config-0.5.1-28.el6_0.4.x86_64.rpm
• libref_array-devel-0.1.0-28.el6_0.4.ppc.rpm
• libref_array-devel-0.1.0-28.el6_0.4.ppc64.rpm
• libcollection-devel-0.5.0-28.el6_0.4.s390x.rpm
• libdhash-0.4.0-28.el6_0.4.i686.rpm
• sssd-1.2.1-28.el6_0.4.src.rpm
• libini_config-devel-0.5.1-28.el6_0.4.ppc64.rpm
• libpath_utils-devel-0.2.0-28.el6_0.4.ppc64.rpm
• libref_array-0.1.0-28.el6_0.4.ppc64.rpm
• sssd-client-1.2.1-28.el6_0.4.s390x.rpm
• sssd-client-1.2.1-28.el6_0.4.x86_64.rpm
• libpath_utils-devel-0.2.0-28.el6_0.4.x86_64.rpm
• libini_config-0.5.1-28.el6_0.4.ppc.rpm
• libcollection-0.5.0-28.el6_0.4.s390.rpm
• sssd-1.2.1-28.el6_0.4.i686.rpm
• libini_config-devel-0.5.1-28.el6_0.4.s390x.rpm
• libini_config-devel-0.5.1-28.el6_0.4.x86_64.rpm
• sssd-debuginfo-1.2.1-28.el6_0.4.i686.rpm
• libpath_utils-0.2.0-28.el6_0.4.ppc.rpm
• sssd-client-1.2.1-28.el6_0.4.i686.rpm
• libini_config-0.5.1-28.el6_0.4.ppc64.rpm
• libref_array-devel-0.1.0-28.el6_0.4.i686.rpm
• libcollection-devel-0.5.0-28.el6_0.4.ppc.rpm
• libpath_utils-devel-0.2.0-28.el6_0.4.s390.rpm
• libref_array-0.1.0-28.el6_0.4.s390x.rpm
• libdhash-0.4.0-28.el6_0.4.s390x.rpm
• libref_array-0.1.0-28.el6_0.4.ppc.rpm
• libpath_utils-devel-0.2.0-28.el6_0.4.i686.rpm
• libdhash-devel-0.4.0-28.el6_0.4.ppc64.rpm
• libpath_utils-0.2.0-28.el6_0.4.s390x.rpm
• sssd-debuginfo-1.2.1-28.el6_0.4.s390x.rpm
• sssd-debuginfo-1.2.1-28.el6_0.4.s390.rpm
• libpath_utils-0.2.0-28.el6_0.4.x86_64.rpm
• libdhash-0.4.0-28.el6_0.4.ppc.rpm
• sssd-client-1.2.1-28.el6_0.4.ppc64.rpm
• libdhash-0.4.0-28.el6_0.4.s390.rpm
• libcollection-0.5.0-28.el6_0.4.s390x.rpm
• libini_config-0.5.1-28.el6_0.4.s390x.rpm
• libcollection-devel-0.5.0-28.el6_0.4.x86_64.rpm
• sssd-1.2.1-28.el6_0.4.s390x.rpm
• libref_array-devel-0.1.0-28.el6_0.4.s390.rpm
• sssd-client-1.2.1-28.el6_0.4.s390.rpm
• sssd-debuginfo-1.2.1-28.el6_0.4.ppc64.rpm
• libpath_utils-0.2.0-28.el6_0.4.i686.rpm
• sssd-1.2.1-28.el6_0.4.ppc64.rpm
• sssd-1.2.1-28.el6_0.4.x86_64.rpm
• libdhash-devel-0.4.0-28.el6_0.4.ppc.rpm
• libini_config-devel-0.5.1-28.el6_0.4.ppc.rpm
• libcollection-0.5.0-28.el6_0.4.ppc64.rpm
• libcollection-devel-0.5.0-28.el6_0.4.ppc64.rpm
• libdhash-devel-0.4.0-28.el6_0.4.s390.rpm
• libdhash-devel-0.4.0-28.el6_0.4.x86_64.rpm
• libpath_utils-devel-0.2.0-28.el6_0.4.s390x.rpm
• libref_array-devel-0.1.0-28.el6_0.4.x86_64.rpm
• sssd-debuginfo-1.2.1-28.el6_0.4.ppc.rpm
• libdhash-0.4.0-28.el6_0.4.ppc64.rpm
• libcollection-0.5.0-28.el6_0.4.x86_64.rpm
• libref_array-0.1.0-28.el6_0.4.i686.rpm
• libref_array-0.1.0-28.el6_0.4.x86_64.rpm
• libdhash-0.4.0-28.el6_0.4.x86_64.rpm
• sssd-debuginfo-1.2.1-28.el6_0.4.x86_64.rpm
• libini_config-0.5.1-28.el6_0.4.i686.rpm
• libpath_utils-devel-0.2.0-28.el6_0.4.ppc.rpm
• libini_config-0.5.1-28.el6_0.4.s390.rpm
• libcollection-devel-0.5.0-28.el6_0.4.i686.rpm
• libcollection-0.5.0-28.el6_0.4.ppc.rpm
• libini_config-devel-0.5.1-28.el6_0.4.i686.rpm
• libref_array-devel-0.1.0-28.el6_0.4.s390x.rpm
• sssd-client-1.2.1-28.el6_0.4.ppc.rpm
• libpath_utils-0.2.0-28.el6_0.4.s390.rpm
• libini_config-devel-0.5.1-28.el6_0.4.s390.rpm
• libref_array-0.1.0-28.el6_0.4.s390.rpm
• libcollection-0.5.0-28.el6_0.4.i686.rpm
• libpath_utils-0.2.0-28.el6_0.4.ppc64.rpm
• libdhash-devel-0.4.0-28.el6_0.4.i686.rpm
• libdhash-devel-0.4.0-28.el6_0.4.s390x.rpm
• libcollection-devel-0.5.0-28.el6_0.4.s390.rpm

Fixes

• This content is not included.BZ - 658374
• This content is not included.BZ - 660585
• This content is not included.BZ - 660592

CVEs

(none)

References

(none)

Additional information

• The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
• Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.