Issued:
2011-05-19
Updated:
2011-05-19

RHBA-2011:0673 - openldap bug fix and enhancement update

Synopsis

openldap bug fix and enhancement update

Type/Severity

Bug Fix Advisory (none)

Topic

Updated openldap packages that fix several bugs and add an enhancement are now available.

Description

OpenLDAP is an open source suite of LDAP (Lightweight Directory Access Protocol) applications and development tools. LDAP is a set of protocols for accessing directory services (usually phone book style information, but other information is possible) over the Internet, similar to the way DNS (Domain Name System) information is propagated over the Internet. The openldap package contains configuration files, libraries, and documentation for OpenLDAP.

This update addresses the following bugs:

  • Move openldap libraries from /usr/lib to /lib. (BZ#548475)
  • Init script is working wrong if database recovery is needed. (BZ#613966)
  • Update list of modules in slapd.conf.bak. (BZ#630637)
  • slapd init script gets stuck in an infinite loop. (BZ#644399)
  • openldap-servers upgrade hangs or do not upgrade the database (BZ#685119)

As well, this update adds the following enhancement:

  • The openldap packages were rebased (from 2.4.19 to 2.4.23), where OpenLDAP crypto backend was changed from OpenSSL to Mozilla NSS. This brings better certificates management and ability to use OpenLDAP with FreeIPA. The transition should be seamless. OpenLDAP with Mozilla NSS can use all of the PEM cert and key files, and other TLS configuration, that OpenLDAP with OpenSSL used. (BZ#644077)

Users are advised to upgrade to these packages, which resolve these issues.

Solution

Before applying this update, make sure all previously-released errata relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at This content is not included.http://kbase.redhat.com/faq/docs/DOC-11259

Affected Products

ProductVersionArch
Red Hat Enterprise Linux for Scientific Computing6x86_64
Red Hat Enterprise Linux for Power, big endian6ppc64
Red Hat Enterprise Linux for IBM z Systems6s390x
Red Hat Enterprise Linux Workstation6x86_64
Red Hat Enterprise Linux Workstation6i386
Red Hat Enterprise Linux Server6x86_64
Red Hat Enterprise Linux Server6i386
Red Hat Enterprise Linux Server from RHUI6x86_64
Red Hat Enterprise Linux Server from RHUI6i386
Red Hat Enterprise Linux Server - Retired Extended Life Cycle Support6x86_64
Red Hat Enterprise Linux Server - Extended Life Cycle Support6x86_64
Red Hat Enterprise Linux Server - Extended Life Cycle Support6i386
Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension6x86_64
Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension6i386
Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension (for IBM z Systems)6s390x
Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems)6s390x
Red Hat Enterprise Linux Desktop6x86_64
Red Hat Enterprise Linux Desktop6i386

Updated Packages

  • openldap-servers-sql-2.4.23-15.el6.x86_64.rpm
  • openldap-devel-2.4.23-15.el6.ppc.rpm
  • openldap-servers-sql-2.4.23-15.el6.ppc64.rpm
  • openldap-servers-2.4.23-15.el6.x86_64.rpm
  • openldap-clients-2.4.23-15.el6.ppc64.rpm
  • openldap-2.4.23-15.el6.i686.rpm
  • openldap-devel-2.4.23-15.el6.ppc64.rpm
  • openldap-servers-sql-2.4.23-15.el6.i686.rpm
  • openldap-devel-2.4.23-15.el6.x86_64.rpm
  • openldap-debuginfo-2.4.23-15.el6.s390.rpm
  • openldap-2.4.23-15.el6.src.rpm
  • openldap-debuginfo-2.4.23-15.el6.s390x.rpm
  • openldap-devel-2.4.23-15.el6.s390.rpm
  • openldap-clients-2.4.23-15.el6.x86_64.rpm
  • openldap-devel-2.4.23-15.el6.s390x.rpm
  • openldap-debuginfo-2.4.23-15.el6.x86_64.rpm
  • openldap-2.4.23-15.el6.s390.rpm
  • openldap-2.4.23-15.el6.s390x.rpm
  • openldap-2.4.23-15.el6.ppc64.rpm
  • openldap-servers-sql-2.4.23-15.el6.s390x.rpm
  • openldap-debuginfo-2.4.23-15.el6.i686.rpm
  • openldap-clients-2.4.23-15.el6.i686.rpm
  • openldap-2.4.23-15.el6.ppc.rpm
  • openldap-servers-2.4.23-15.el6.ppc64.rpm
  • openldap-servers-2.4.23-15.el6.s390x.rpm
  • openldap-2.4.23-15.el6.x86_64.rpm
  • openldap-devel-2.4.23-15.el6.i686.rpm
  • openldap-debuginfo-2.4.23-15.el6.ppc.rpm
  • openldap-clients-2.4.23-15.el6.s390x.rpm
  • openldap-debuginfo-2.4.23-15.el6.ppc64.rpm
  • openldap-servers-2.4.23-15.el6.i686.rpm

Fixes

CVEs

(none)

References

(none)

Additional information