Issued:

2017-09-19

Updated:

2017-09-19

RHBA-2017:2743 - ovirt-engine-extension-aaa-ldap bug fix and enhancement update for RHV 4.1.6

Synopsis

ovirt-engine-extension-aaa-ldap bug fix and enhancement update for RHV 4.1.6

Type/Severity

Bug Fix Advisory None

Topic

Updated ovirt-engine-extension-aaa-ldap and ovirt-engine-extension-aaa-ldap-setup 1.3.4 packages.

Description

The ovirt-engine-extension-aaa-ldap extension allows users to customize their external directory setup easily. The ovirt-engine-extension-aaa-ldap extension supports many different LDAP server types, and an interactive setup script is provided to assist you with the setup for most LDAP types.

Changes to the ovirt-engine-extension-aaa-ldap component:

• When configuring Active Directory (AD) with the ovirt-engine-extension-aaa-ldap-setup tool, regardless of whether you are defining a multiple or single domain forest, you can only configure the name of the forest - you cannot define the name of a specific domain or a specific server.

This release provides examples for common advanced AD configuration which users can copy to their local environment and adapt as required. These examples are bundled within the ovirt-engine-extension-aaa-ldap package and after installing the package, a description of these examples can be found in /usr/share/ovirt-engine-extension-aaa-ldap/examples/README.md

In addition, the following improvements have been made to the ovirt-engine-extension-aaa-ldap-setup tool:

1. A more detailed error reporting for various AD forest configuration steps.
2. A mandatory login test that checks the configuration (previously this test was optional). (BZ#1472254)

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/2974891

Affected Products

Updated Packages

• ovirt-engine-extension-aaa-ldap-1.3.4-1.el7ev.src.rpm
• ovirt-engine-extension-aaa-ldap-1.3.4-1.el7ev.noarch.rpm
• ovirt-engine-extension-aaa-ldap-setup-1.3.4-1.el7ev.noarch.rpm

Fixes

• This content is not included.BZ - 1472254
• This content is not included.BZ - 1485875

CVEs

(none)

References

(none)

Additional information

• The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
• Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.