Issued:

2012-06-20

Updated:

2012-06-20

RHBA-2012:0931 - authconfig bug fix and enhancement update

Synopsis

authconfig bug fix and enhancement update

Type/Severity

Bug Fix Advisory (none)

Topic

Updated authconfig packages that fix multiple bugs and add two enhancements are now available for Red Hat Enterprise Linux 6.

Description

The authconfig packages provide a command line utility and a GUI application that can configure a workstation to be a client for certain network user information and authentication schemes, and other user information and authentication related options.

This update fixes the following bugs:

• Prior to this update, SSSD configuration files failed to parse if the files were not correctly formatted. As a consequence, the authconfig utility could abort unexpectedly. With this update, the error is correctly handled, the configuration file is backed up, and a new file is created. (BZ#689717)

• Prior to this update, the man page "authconfig(8)" referred to non-existing obsolete configuration files. This update modifies the man page to point to configuration files that are currently modified by authconfig. (BZ#708850)

• Prior to this update, a deprecated "krb_kdcip" option was set instead of the "krb5_server" option when the SSSD configuration was updated. This update modifies the SSSD configuration setting to use the "krb5_server" option to set the Kerberos KDC server address. (BZ#749700)

• Prior to this update, the authconfig command always returned the exit value "1" when the "--savebackup" option was used, due to handling of nonexisting configuration files on the system. With this update, the exit value is "0" if the configuration backup succeeds even if some configuration files which can be handled by authconfig, are not present on the system. (BZ#755975)

This update also adds the following enhancements:

• Prior to this update, the authconfig utility did not support the SSSD configuration with the IPA backend. This update allows to join an IPAv2 domain with the system via the ipa-client-install command. (BZ#731094)

• With this update, the nss_sss module is also used in the "services" entry of the nsswitch.conf file when configuring this file. (BZ#804615)

All users of authconfig are advised to upgrade to these updated packages, which fix these bugs and add these enhancements.

Solution

Before applying this update, make sure that all previously-released errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258

Affected Products

Updated Packages

• authconfig-6.1.12-10.el6.s390x.rpm
• authconfig-gtk-6.1.12-10.el6.s390x.rpm
• authconfig-6.1.12-10.el6.src.rpm
• authconfig-gtk-6.1.12-10.el6.i686.rpm
• authconfig-debuginfo-6.1.12-10.el6.x86_64.rpm
• authconfig-6.1.12-10.el6.i686.rpm
• authconfig-debuginfo-6.1.12-10.el6.s390x.rpm
• authconfig-6.1.12-10.el6.x86_64.rpm
• authconfig-gtk-6.1.12-10.el6.x86_64.rpm
• authconfig-debuginfo-6.1.12-10.el6.i686.rpm
• authconfig-debuginfo-6.1.12-10.el6.ppc64.rpm
• authconfig-gtk-6.1.12-10.el6.ppc64.rpm
• authconfig-6.1.12-10.el6.ppc64.rpm

Fixes

• This content is not included.BZ - 689717
• This content is not included.BZ - 731094
• This content is not included.BZ - 749700
• This content is not included.BZ - 755975
• This content is not included.BZ - 804615

CVEs

(none)

References

(none)

Additional information

• The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
• Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.