Issued:

2014-10-13

Updated:

2014-10-13

RHEA-2014:1456 - new packages: mod_authnz_pam, mod_intercept_form_submit, mod_lookup_identity

Synopsis

new packages: mod_authnz_pam, mod_intercept_form_submit, mod_lookup_identity

Type/Severity

Product Enhancement Advisory

Topic

New authentication and identity modules for Apache HTTP server are now available for Red Hat Enterprise Linux 6.

Description

The mod_authnz_pam, mod_intercept_form_submit, and mod_lookup_identity are a set of Apache HTTP server modules to support authentication and identity functions for web applications.

The mod_authnz_pam Apache module serves as a PAM authorization module, supplementing authentication done by other modules, for example mod_auth_kerb. It can also be used as a full Basic Authentication provider for testing purposes, running the login and password authentication through the PAM stack.

The mod_intercept_form_submit Apache module intercepts application's login form submission and runs the PAM authentication.

The mod_lookup_identity Apache module retrieves additional information about the authenticated user.

This enhancement update adds the mod_authnz_pam, mod_intercept_form_submit, mod_lookup_identity packages to Red Hat Enterprise Linux 6. (BZ#1075121, BZ#1075122, BZ#1080478)

All users who require the new authentication and identity modules for Apache HTTP server are advised to install these new packages.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258

Affected Products

Updated Packages

• mod_lookup_identity-0.9.2-1.el6.s390x.rpm
• mod_intercept_form_submit-0.9.7-1.el6.src.rpm
• mod_intercept_form_submit-0.9.7-1.el6.s390x.rpm
• mod_authnz_pam-0.9.2-1.el6.ppc64.rpm
• mod_lookup_identity-debuginfo-0.9.2-1.el6.s390x.rpm
• mod_lookup_identity-0.9.2-1.el6.ppc64.rpm
• mod_lookup_identity-debuginfo-0.9.2-1.el6.ppc64.rpm
• mod_authnz_pam-0.9.2-1.el6.s390x.rpm
• mod_authnz_pam-debuginfo-0.9.2-1.el6.x86_64.rpm
• mod_authnz_pam-debuginfo-0.9.2-1.el6.i686.rpm
• mod_lookup_identity-debuginfo-0.9.2-1.el6.i686.rpm
• mod_intercept_form_submit-debuginfo-0.9.7-1.el6.ppc64.rpm
• mod_authnz_pam-0.9.2-1.el6.i686.rpm
• mod_lookup_identity-0.9.2-1.el6.src.rpm
• mod_intercept_form_submit-debuginfo-0.9.7-1.el6.i686.rpm
• mod_intercept_form_submit-debuginfo-0.9.7-1.el6.s390x.rpm
• mod_intercept_form_submit-0.9.7-1.el6.x86_64.rpm
• mod_lookup_identity-0.9.2-1.el6.x86_64.rpm
• mod_intercept_form_submit-0.9.7-1.el6.ppc64.rpm
• mod_authnz_pam-0.9.2-1.el6.src.rpm
• mod_lookup_identity-0.9.2-1.el6.i686.rpm
• mod_authnz_pam-0.9.2-1.el6.x86_64.rpm
• mod_authnz_pam-debuginfo-0.9.2-1.el6.ppc64.rpm
• mod_authnz_pam-debuginfo-0.9.2-1.el6.s390x.rpm
• mod_intercept_form_submit-0.9.7-1.el6.i686.rpm
• mod_intercept_form_submit-debuginfo-0.9.7-1.el6.x86_64.rpm
• mod_lookup_identity-debuginfo-0.9.2-1.el6.x86_64.rpm

Fixes

• This content is not included.BZ - 1114049

CVEs

(none)

References

(none)

Additional information

• The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
• Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.