RHBA-2012:0931 - Bug Fix Advisory

Topic

Updated authconfig packages that fix multiple bugs and add two enhancements are
now available for Red Hat Enterprise Linux 6.

Description

The authconfig packages provide a command line utility and a GUI application
that can configure a workstation to be a client for certain network user
information and authentication schemes, and other user information and
authentication related options.

This update fixes the following bugs:

• Prior to this update, SSSD configuration files failed to parse if the files

were not correctly formatted. As a consequence, the authconfig utility could
abort unexpectedly. With this update, the error is correctly handled, the
configuration file is backed up, and a new file is created. (BZ#689717)

• Prior to this update, the man page "authconfig(8)" referred to non-existing

obsolete configuration files. This update modifies the man page to point to
configuration files that are currently modified by authconfig. (BZ#708850)

• Prior to this update, a deprecated "krb_kdcip" option was set instead of the

"krb5_server" option when the SSSD configuration was updated. This update
modifies the SSSD configuration setting to use the "krb5_server" option to set
the Kerberos KDC server address. (BZ#749700)

• Prior to this update, the authconfig command always returned the exit value

"1" when the "--savebackup" option was used, due to handling of nonexisting
configuration files on the system. With this update, the exit value is "0" if
the configuration backup succeeds even if some configuration files which can be
handled by authconfig, are not present on the system. (BZ#755975)

This update also adds the following enhancements:

• Prior to this update, the authconfig utility did not support the SSSD

configuration with the IPA backend. This update allows to join an IPAv2 domain
with the system via the ipa-client-install command. (BZ#731094)

• With this update, the nss_sss module is also used in the "services" entry of

the nsswitch.conf file when configuring this file. (BZ#804615)

All users of authconfig are advised to upgrade to these updated packages, which
fix these bugs and add these enhancements.

Solution

Before applying this update, make sure that all previously-released errata
relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use the Red Hat
Network to apply this update are available at
https://access.redhat.com/knowledge/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux for Scientific Computing 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension (for IBM z Systems) 6 s390x

Fixes

• BZ - 689717 - Catch parsing errors from SSSD config parser correctly
• BZ - 731094 - Authconfig should support configuring SSSD with IPA back end
• BZ - 749700 - configuration uses the deprecated option 'krb5_kdcip' to specify the KDC
• BZ - 755975 - authconfig --savebackup returns 1 instead of 0
• BZ - 804615 - AUthconfig should add 'sss' to the 'services' line of nsswitch.conf

CVEs

(none)

References

(none)