RHBA-2011:0824 - Bug Fix Advisory

Topic

Updated 389-ds-base packages that fix multiple bugs are now available.

Description

389 Directory Server is an LDAPv3 compliant server. The base package
includes the LDAP server and command-line utilities for server
administration.

Bugs fixed in this updated package include:

• Password changes did not replicate because the method used to pass the

changes to consumer servers was rejected on the consumer. This issue has
been corrected, and password changes now replicate as expected.
(BZ#701554)

• Values could be lost when group memberships were synchronized between

389 Directory Server and Active Directory with the Windows Sync feature.
The synchronization and modify operations have been altered to prevent
this issue, allowing group updates to synchronize with Active Directory.
(BZ#701556)

• The ldclt command-line testing tool crashed during LDAP ADD operations

because an LDAP attribute was not set correctly, preventing the creation
of entries that did not already exist. This update allows the LDAP ADD to
proceed correctly. (BZ#701558)

• The server crashed if a long running task was started using the

cn=tasks,cn=config interface and then the server was shut down before the
task completed. This update prevents the server from crashing, but does not
gracefully terminate the task, which can leave the server database in an
inconsistent state. For example, the fixup-memberof.pl script invokes a
tasks to fix up the memberOf attribute in group member entries. If the
server is shut down before the task can complete, some entries may not have
the correct memberOf values. Users should ensure that tasks are complete
before shutting down the server to avoid inconsistency. (BZ#701559)

• When using the Entry USN feature, deleting an entry caused a memory leak

via the entryusn attribute. This update fixes the memory leak. (BZ#701560)

All 389-ds-base users are advised to upgrade to these updated packages,
which addresses these issues.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
http://access.redhat.com/kb/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 6.1 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 6.1 i386
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
• Red Hat Enterprise Linux Server - Extended Update Support from RHUI 6.1 x86_64
• Red Hat Enterprise Linux Server - Extended Update Support from RHUI 6.1 i386
• Red Hat Virtual Storage Appliance (from RHUI) 6.1 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 i386

Fixes

• BZ - 701554 - userpasswd not replicating
• BZ - 701556 - windows sync can lose old multi-valued attribute values when a new value is added
• BZ - 701558 - ldclt core dumps
• BZ - 701559 - Linked attributes callbacks access free'd pointers after close
• BZ - 701560 - memory leak: entryusn value is leaked when an entry is deleted
• BZ - 705837 - 389-ds should only be supported and supplied in channels for i386 and x86_64 Server distributions - RHEL 6.1 0day Advisory

CVEs

(none)

References

(none)