RHBA-2009:1378 - Bug Fix Advisory

Topic

Updated krb5 packages which fix several bugs and adds enhancements are now
available for Red Hat Enterprise Linux 5.

Description

Kerberos 5 is a network authentication system which authenticates clients
and servers to each other using symmetric key encryption and a trusted
third party, the KDC.

These updated packages address the following bugs:

• one of the error messages printed by the "ksu" command contained a

spelling error ("geting"). This has been corrected. (BZ#462890)

• several dozen spelling errors across 21 krb5-related manual pages were

corrected. (BZ#499190)

• this update no longer attempts to create a keytab for use by the kadmin

service when the service is started; doing so is redundant and may
interfere with third-party password-changing services such as those
provided by IPA. (BZ#473151)

• with this update an attempt to load a database dump into a database which

has not been created will cause kdb5_util to create the database.
(BZ#442879)

• this update now correctly reports an error if an attempt to use rcp to

copy data to a remote system encounters an error as the file is closed.
(BZ#461902)

These new packages also add the following enhancements:

• the "ksu" command can now perform PAM account and session management for

the target user. (BZ#477033)

• the Kerberos-aware rsh, rlogin, telnet, and ftp services can now set the

PAM_RHOST item for users who log in or connect to a server remotely.
(BZ#479071)

All users of the krb5 workstation utilities and services are advised to
update to these packages which address these issues and add this
enhancement.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 442879 - Kerberos replication problems (RHEL5 master -> RHEL5 slave)
• BZ - 461902 - rcp does not return ENOSPC error on full NFS-File system
• BZ - 462890 - typo in "ksu: Server not found in Kerberos database while geting credentials from kdc"
• BZ - 473151 - stop setting up a kadmind keytab
• BZ - 479071 - [from RHEL4][RFE][PATCH] PAM_RHOST enabling KRB utilities
• BZ - 499190 - typo error in man pages

CVEs

(none)

References

(none)