Issued:

2011-07-07

Updated:

2011-07-07

RHBA-2011:0925 - sssd bug fix update

Synopsis

sssd bug fix update

Type/Severity

Bug Fix Advisory

Topic

Updated sssd packages that fix two bugs are now available for Red Hat Enterprise Linux 6.

Description

The System Security Services Daemon (SSSD) provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS (Name Service Switch) and PAM (Pluggable Authentication Modules) interface toward the system and a pluggable back-end system to connect to multiple different account sources. It is also the basis to provide client auditing and policy services for projects such as FreeIPA.

This update fixes the following bugs:

• Previously, SSSD relied on the inotify kernel subsystem to detect whether a DNS resolver file had been changed. If inotify returned an error (for example due to resource exhaustion), SSSD terminated unexpectedly and network logins no longer worked. With this update, SSSD itself detects the failure in the described scenario and falls back to the five-second polling, fixing this bug. (BZ#716905)

• When SSSD communicated with an OpenLDAP server, which supported server-side password policies but did not list them in the "supportedControl" attribute of the server's rootDSE entry, SSSD terminated unexpectedly with a segmentation fault. This was a regression introduced in version 1.5.1-34.el6 of the sssd package. An upstream patch has been provided to fix this bug. (BZ#716909)

All users of sssd are advised to upgrade to these updated packages, which fix these bugs.

Solution

Before applying this update, make sure that all previously-released errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at This content is not included.https://access.redhat.com/kb/docs/DOC-11259

Affected Products

Updated Packages

• sssd-debuginfo-1.5.1-34.el6_1.2.i686.rpm
• sssd-tools-1.5.1-34.el6_1.2.x86_64.rpm
• sssd-client-1.5.1-34.el6_1.2.s390.rpm
• sssd-debuginfo-1.5.1-34.el6_1.2.ppc64.rpm
• sssd-1.5.1-34.el6_1.2.s390x.rpm
• sssd-debuginfo-1.5.1-34.el6_1.2.s390.rpm
• sssd-1.5.1-34.el6_1.2.src.rpm
• sssd-tools-1.5.1-34.el6_1.2.i686.rpm
• sssd-client-1.5.1-34.el6_1.2.x86_64.rpm
• sssd-client-1.5.1-34.el6_1.2.ppc.rpm
• sssd-1.5.1-34.el6_1.2.ppc64.rpm
• sssd-tools-1.5.1-34.el6_1.2.ppc64.rpm
• sssd-debuginfo-1.5.1-34.el6_1.2.s390x.rpm
• sssd-tools-1.5.1-34.el6_1.2.s390x.rpm
• sssd-client-1.5.1-34.el6_1.2.s390x.rpm
• sssd-1.5.1-34.el6_1.2.i686.rpm
• sssd-1.5.1-34.el6_1.2.x86_64.rpm
• sssd-debuginfo-1.5.1-34.el6_1.2.ppc.rpm
• sssd-client-1.5.1-34.el6_1.2.i686.rpm
• sssd-debuginfo-1.5.1-34.el6_1.2.x86_64.rpm
• sssd-client-1.5.1-34.el6_1.2.ppc64.rpm

Fixes

• This content is not included.BZ - 716905
• This content is not included.BZ - 716909

CVEs

(none)

References

(none)

Additional information

• The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
• Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.