Issued:

2011-06-14

Updated:

2011-06-14

RHBA-2011:0865 - ipa bug fix update

Synopsis

ipa bug fix update

Type/Severity

Bug Fix Advisory

Topic

Updated ipa packages that fix several bugs are now available for Red Hat Enterprise Linux 6.

Description

Red Hat Enterprise Identity (IPA) is a centralized authentication, identity management and authorization solution for both traditional and cloud based enterprise environments. It integrates components of the Red Hat Directory Server, MIT Kerberos, Red Hat Certificate System, NTP and DNS. It provides web browser and command-line interfaces. Its administration tools allow an administrator to quickly install, set up, and administer a group of IPA servers to meet the authentication and identity management requirements of the large scale Linux and Unix deployments.

This update fixes the following bugs:

• When an IPA server was installed and then a replica package for a replica server was generated, the installation of the replica server failed. With this update, the installation process waits for the 389DS (389 Directory Server) tasks to complete before restarting the server, fixing this bug. (BZ#709329)

• Previously, the ipa service was not enabled via the chkconfig tool during the installation of a replica server. Subsequently, when the replica server was restarted, the ipa service was not started. With this update, replica servers are properly configured to start on boot. (BZ#709330)

• After a replica server was installed, the Managed Entries were not properly configured on replica servers. Subsequently, users had to manually add the configuration using the ldapmodify tool after the replica installation, and then restart the services with the "ipactl restart" command. This bug has been fixed and the configuration is now automatically added as expected. (BZ#709331)

• When a new reverse zone was created via the ipa-replica-prepare script, the wrong DNS entry was updated, which eventually caused an installation of a replica server to fail. This bug has been fixed and when the named service is restarted after a replica package has been created, the correct DNS entries are now set up for an installation of a replica server. (BZ#709332)

All users of ipa are advised to upgrade to these updated packages, which fix these bugs.

Solution

Before applying this update, make sure that all previously-released errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at This content is not included.https://access.redhat.com/kb/docs/DOC-11259

Affected Products

Updated Packages

• ipa-2.0.0-23.el6_1.1.src.rpm
• ipa-client-2.0.0-23.el6_1.1.x86_64.rpm
• ipa-python-2.0.0-23.el6_1.1.ppc64.rpm
• ipa-client-2.0.0-23.el6_1.1.s390x.rpm
• ipa-python-2.0.0-23.el6_1.1.x86_64.rpm
• ipa-server-2.0.0-23.el6_1.1.i686.rpm
• ipa-server-2.0.0-23.el6_1.1.x86_64.rpm
• ipa-server-selinux-2.0.0-23.el6_1.1.i686.rpm
• ipa-python-2.0.0-23.el6_1.1.s390x.rpm
• ipa-server-selinux-2.0.0-23.el6_1.1.x86_64.rpm
• ipa-debuginfo-2.0.0-23.el6_1.1.s390x.rpm
• ipa-admintools-2.0.0-23.el6_1.1.x86_64.rpm
• ipa-admintools-2.0.0-23.el6_1.1.i686.rpm
• ipa-python-2.0.0-23.el6_1.1.i686.rpm
• ipa-client-2.0.0-23.el6_1.1.ppc64.rpm
• ipa-debuginfo-2.0.0-23.el6_1.1.ppc64.rpm
• ipa-client-2.0.0-23.el6_1.1.i686.rpm
• ipa-admintools-2.0.0-23.el6_1.1.ppc64.rpm
• ipa-debuginfo-2.0.0-23.el6_1.1.x86_64.rpm
• ipa-admintools-2.0.0-23.el6_1.1.s390x.rpm
• ipa-debuginfo-2.0.0-23.el6_1.1.i686.rpm

Fixes

• This content is not included.BZ - 709329
• This content is not included.BZ - 709330
• This content is not included.BZ - 709331
• This content is not included.BZ - 709332

CVEs

(none)

References

(none)

Additional information

• The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
• Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.