RHBA-2010:0971 - Bug Fix Advisory

Topic

Updated sssd packages that fix various bugs are now available for Red Hat
Enterprise Linux 6.

Description

The System Security Services Daemon (SSSD) provides a set of daemons to manage
access to remote directories and authentication mechanisms. It provides an NSS
and PAM interface toward the system and a pluggable backend system to connect to
multiple different account sources. It is also the basis to provide client
auditing and policy services for projects like FreeIPA.

This update fixes the following bugs:

• During an upgrade of the sssd package, the package manager restarts the sssd

service to ensure the running instance is properly replaced with the newer
version. However, prior to this update, a race condition could occur upon the
service shutdown, causing the parent process not to wait for its children to
terminate. When this happened, these running sub-processes may have prevented
sssd from starting again. With this update, the sssd service has been corrected
to wait for the children processes to terminate, so that it can be restarted as
expected. (BZ#658374)

• On 32-bit architectures, running the "getent passwd" command on a username

with a very large user or group identifier (that is, UID or GID greater than
2147483647) resulted in an empty output. With this update, the underlying source
code has been modified to address this issue, and the getent command now returns
the expected output. (BZ#660585)

• Previously, shutting down the sssd service (either by using the "service sssd

stop" command, or with the SIGTERM signal) could cause the service to stop
responding. This error has been fixed, and sssd no longer fails to shut down.
(BZ#660592)

All users of sssd are advised to upgrade to these updated packages, which
resolve these issues.

Solution

Before applying this update, make sure that all previously-released errata
relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use the Red
Hat Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension (for IBM z Systems) 6 s390x

Fixes

• BZ - 658374 - sssd stops on upgrade
• BZ - 660585 - 'getent passwd <username>' returns nothing if its uidNumber gt 2147483647.
• BZ - 660592 - SSSD shutdown sometimes hangs

CVEs

(none)

References

(none)