RHBA-2011:0865 - Bug Fix Advisory

Topic

Updated ipa packages that fix several bugs are now available for Red Hat
Enterprise Linux 6.

Description

Red Hat Enterprise Identity (IPA) is a centralized authentication, identity
management and authorization solution for both traditional and cloud based
enterprise environments. It integrates components of the Red Hat Directory
Server, MIT Kerberos, Red Hat Certificate System, NTP and DNS. It provides web
browser and command-line interfaces. Its administration tools allow an
administrator to quickly install, set up, and administer a group of IPA servers
to meet the authentication and identity management requirements of the large
scale Linux and Unix deployments.

This update fixes the following bugs:

• When an IPA server was installed and then a replica package for a replica

server was generated, the installation of the replica server failed. With this
update, the installation process waits for the 389DS (389 Directory Server)
tasks to complete before restarting the server, fixing this bug. (BZ#709329)

• Previously, the ipa service was not enabled via the chkconfig tool during the

installation of a replica server. Subsequently, when the replica server was
restarted, the ipa service was not started. With this update, replica servers
are properly configured to start on boot. (BZ#709330)

• After a replica server was installed, the Managed Entries were not properly

configured on replica servers. Subsequently, users had to manually add the
configuration using the ldapmodify tool after the replica installation, and then
restart the services with the "ipactl restart" command. This bug has been fixed
and the configuration is now automatically added as expected. (BZ#709331)

• When a new reverse zone was created via the ipa-replica-prepare script, the

wrong DNS entry was updated, which eventually caused an installation of a
replica server to fail. This bug has been fixed and when the named service is
restarted after a replica package has been created, the correct DNS entries are
now set up for an installation of a replica server. (BZ#709332)

All users of ipa are advised to upgrade to these updated packages, which fix
these bugs.

Solution

Before applying this update, make sure that all previously-released errata
relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use the Red
Hat Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 6.1 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 6.1 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 6.1 s390x
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 6.1 ppc64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386
• Red Hat Enterprise Linux Server - Extended Update Support from RHUI 6.1 x86_64
• Red Hat Enterprise Linux Server - Extended Update Support from RHUI 6.1 i386
• Red Hat Virtual Storage Appliance (from RHUI) 6.1 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x

Fixes

• BZ - 709329 - IPA Replica Installing failing on during replication update
• BZ - 709330 - IPA Replica not started on reboot
• BZ - 709331 - Managed Entry Configuration Not Setup when installing replica server
• BZ - 709332 - IPA Replica Installation Fails - reverse address doesn't match error

CVEs

(none)

References

(none)