Issued:

2011-05-19

Updated:

2011-05-19

RHBA-2011:0796 - nss-pam-ldapd bug fix update

Synopsis

nss-pam-ldapd bug fix update

Type/Severity

Bug Fix Advisory (none)

Topic

An updated nss-pam-ldapd package is now available for Red Hat Enterprise Linux 6.

Description

The nss-pam-ldapd provides the nss-pam-ldapd daemon (nslcd) which uses a directory server to look up name service information on behalf of a lightweight nsswitch module.

This updated nss-pam-ldapd package includes fixes for the following bugs:

• Prior to this update, nslcd did not allow parentheses to be used in a valid name. With this update, the implementation of the "validusers" configuration option has been added and the use of opening and closing parentheses in usernames and groupnames is now allowed. (BZ#690870)

• Verifying the nss-pam-ldapd package (by executing the "rpm --verify nss-pam-ldapd" command) failed in the /etc/nslcd.conf file due to changes in that configuration file performed after the installation of the package. With this update, post-installation changes in the /etc/nslcd.conf file no longer affect the verification of the nss-pam-ldapd package. (BZ#692225)

• The nslcd man page syntax contained an error which caused the man page to return the following error message on the standard error output:

  Error parsing *roff command from file /usr/share/man/man8/nslcd.8.gz

This update fixes the syntax error and the "man nslcd" command no longer returns an error message. (BZ#692496)

• When nslcd was configured to use multiple LDAP servers, it failed to fall back to a different server in case the primary server could not be reached. This was due to nslcd trying to keep the first connection alive even when the connection was dropped. With this update, nslcd correctly falls back to a different server after loosing connection with the current one. (BZ#692817)

All users of nss-pam-ldapd are advised to upgrade to this updated package, which resolves these issues.

Solution

Before applying this update, make sure that all previously-released errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at This content is not included.https://access.redhat.com/kb/docs/DOC-11259

Affected Products

Updated Packages

• nss-pam-ldapd-debuginfo-0.7.5-7.el6.ppc.rpm
• nss-pam-ldapd-debuginfo-0.7.5-7.el6.s390.rpm
• nss-pam-ldapd-0.7.5-7.el6.s390.rpm
• nss-pam-ldapd-0.7.5-7.el6.ppc.rpm
• nss-pam-ldapd-debuginfo-0.7.5-7.el6.s390x.rpm
• nss-pam-ldapd-0.7.5-7.el6.s390x.rpm
• nss-pam-ldapd-0.7.5-7.el6.ppc64.rpm
• nss-pam-ldapd-debuginfo-0.7.5-7.el6.ppc64.rpm
• nss-pam-ldapd-0.7.5-7.el6.i686.rpm
• nss-pam-ldapd-debuginfo-0.7.5-7.el6.i686.rpm
• nss-pam-ldapd-0.7.5-7.el6.src.rpm
• nss-pam-ldapd-0.7.5-7.el6.x86_64.rpm
• nss-pam-ldapd-debuginfo-0.7.5-7.el6.x86_64.rpm

Fixes

• This content is not included.BZ - 690870
• This content is not included.BZ - 692225
• This content is not included.BZ - 692496
• This content is not included.BZ - 692817

CVEs

(none)

References

(none)

Additional information

• The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
• Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.