RHBA-2011:0796 - Bug Fix Advisory

Topic

An updated nss-pam-ldapd package is now available for Red Hat Enterprise Linux
6.

Description

The nss-pam-ldapd provides the nss-pam-ldapd daemon (nslcd) which uses a
directory server to look up name service information on behalf of a lightweight
nsswitch module.

This updated nss-pam-ldapd package includes fixes for the following bugs:

• Prior to this update, nslcd did not allow parentheses to be used in a valid

name. With this update, the implementation of the "validusers" configuration
option has been added and the use of opening and closing parentheses in
usernames and groupnames is now allowed. (BZ#690870)

• Verifying the nss-pam-ldapd package (by executing the "rpm --verify

nss-pam-ldapd" command) failed in the /etc/nslcd.conf file due to changes in
that configuration file performed after the installation of the package. With
this update, post-installation changes in the /etc/nslcd.conf file no longer
affect the verification of the nss-pam-ldapd package. (BZ#692225)

• The nslcd man page syntax contained an error which caused the man page to

return the following error message on the standard error output:

Error parsing *roff command from file /usr/share/man/man8/nslcd.8.gz

This update fixes the syntax error and the "man nslcd" command no longer returns
an error message. (BZ#692496)

• When nslcd was configured to use multiple LDAP servers, it failed to fall back

to a different server in case the primary server could not be reached. This was
due to nslcd trying to keep the first connection alive even when the connection
was dropped. With this update, nslcd correctly falls back to a different server
after loosing connection with the current one. (BZ#692817)

All users of nss-pam-ldapd are advised to upgrade to this updated package, which
resolves these issues.

Solution

Before applying this update, make sure that all previously-released errata
relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use the Red Hat
Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension (for IBM z Systems) 6 s390x

Fixes

• BZ - 690870 - allow parens in a valid name
• BZ - 692225 - rpm --verify fails on /etc/nslcd.conf
• BZ - 692496 - nss-pam-ldapd: troff syntax error in the man page of nslcd
• BZ - 692817 - nslcd does not fallback to additional LDAP servers

CVEs

(none)

References

(none)