RHBA-2007:0739 - Bug Fix Advisory

Topic

Updated OpenLDAP packages that fix a number of errors are now available.

Description

OpenLDAP is an open source suite of LDAP (Lightweight Directory Access
Protocol) applications and development tools. The openldap package contains
configuration files, libraries, and documentation for OpenLDAP.

This update corrects the following issues:

• Fixed various problems with Microsoft Windows interoperability.
• Fixed initscript return codes.
• initscript now checks permissions of TLS keys and certificates.
• initscript is able to recover from simple database errors caused by the

unclean shutdown of ldap server.

• Fixed set access rules.
• Fixed crash when dereferencing an alias with the ldbm backend.
• Fixed sending results from an ldap server with meta backend.
• slapd now makes sure that the port number is within the proper range.
• A URI in ldap.conf can now be longer than 128 characters.
• Fixed GSSAPI queries.
• Fixed src.rpm build problems.
• Fixed crash when restricting pagedResults.
• The OpenLDAP server now creates a .pid file in the /var/run/openldap

directory.

Users of OpenLDAP should upgrade to these updated packages, which resolve
these issues.

Please note that the format of the default OpenLDAP server configuration
file has changed. A fresh copy of the default configuration file will be
created as /etc/openldap/slapd.conf.rpmnew during the update process,
in case the user has changed /etc/openldap/slapd.conf. To enable a
previously-customized slapd.conf configuration file to work after updating,
change the "pidfile" and "argsfile" paths in this section:

# Do not enable referrals until AFTER you have a working directory
# service AND an understanding of referrals.
#referral ldap://root.openldap.org

pidfile /var/run/slapd.pid
argsfile /var/run/slapd.args

to correctly reflect their new locations in /var/run/openldap:

pidfile /var/run/openldap/slapd.pid
argsfile /var/run/openldap/slapd.args

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/FAQ_58_10188

Affected Products

• Red Hat Enterprise Linux Server 4 x86_64
• Red Hat Enterprise Linux Server 4 ia64
• Red Hat Enterprise Linux Server 4 i386
• Red Hat Enterprise Linux Workstation 4 x86_64
• Red Hat Enterprise Linux Workstation 4 ia64
• Red Hat Enterprise Linux Workstation 4 i386
• Red Hat Enterprise Linux Desktop 4 x86_64
• Red Hat Enterprise Linux Desktop 4 i386
• Red Hat Enterprise Linux for IBM z Systems 4 s390x
• Red Hat Enterprise Linux for IBM z Systems 4 s390
• Red Hat Enterprise Linux for Power, big endian 4 ppc

Fixes

• BZ - 171165 - openldap should give useful error messages on permissions problems
• BZ - 177731 - Set access rules not working in OpenLDAP 2.2.13
• BZ - 192861 - Database crash everytime unclean shutdown occured
• BZ - 195920 - slapd deadlock when adding entries
• BZ - 197802 - Crashes when port number is too high
• BZ - 213167 - Should /etc/rc.sysinit delete /var/lib/ldap/*/__db.*?
• BZ - 215294 - [PATCH] [RHEL4] ldapsearch subentries GSSAPI failure.
• BZ - 217228 - openldap-2.2.13-6.4E does not build
• BZ - 242666 - Wrong init script
• BZ - 244687 - slapd does not create .pid file
• BZ - 244772 - slaptest & slapd segmentation fault when restricting pagedResults

CVEs

(none)

References

(none)