Synopsis

mod_auth_kerb bug fix update

Type/Severity

Bug Fix Advisory

Topic

Updated mod_auth_kerb packages that fix one bug are now available for Red Hat
Enterprise Linux 6.

Description

The mod_auth_kerb package provides a module for the Apache HTTP Server designed
to provide Kerberos authentication over HTTP. The module supports the Negotiate
authentication method, which performs full Kerberos authentication based on
ticket exchanges.

This update fixes the following bug:

• Previously, when the KrbLocalUserMapping directive was enabled,
  mod_auth_kerb did not translate a principal name properly if the local
  name was of a higher length. Consequently, the Apache server returned the HTTP
  500 error in such a scenario. A patch has been provided to address this issue
  and the module now correctly translates account names longer than their
  counterpart principal names. (BZ#867153)
  

Users of mod_auth_kerb are advised to upgrade to these updated packages, which
fix this bug.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/knowledge/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux for Scientific Computing 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386

Fixes

• BZ - 867153 - bugfix: mod_auth_kerb wrt KrbLocalUserMapping

CVEs

(none)

References

(none)

Red Hat Enterprise Linux Server 6

SRPM
mod_auth_kerb-5.4-10.el6.src.rpm	SHA-256: 5efdc371a2f842efe542ae9ca398397f757c2e650ad7c2de9529f6d29cc037fd
x86_64
mod_auth_kerb-5.4-10.el6.x86_64.rpm	SHA-256: 6e46ab3dba0295fd7cf6760fe9bb7ba127f519a9ff9bc20c162a8396c7069fdc
mod_auth_kerb-debuginfo-5.4-10.el6.x86_64.rpm	SHA-256: dc272d2546ffb0f962b5915c0c2d7c516a6f560914546166d47192da93428e01
i386
mod_auth_kerb-5.4-10.el6.i686.rpm	SHA-256: d612ecfc55041fbbfaf038f32c14dc43f4ce7804c650eb8e24c8bc98d5979353
mod_auth_kerb-debuginfo-5.4-10.el6.i686.rpm	SHA-256: dbe859fcd76d47d6dd122f09c5e93202772fffe3f0e2e13f3bf428a8085b4d0b

Red Hat Enterprise Linux Workstation 6

SRPM
mod_auth_kerb-5.4-10.el6.src.rpm	SHA-256: 5efdc371a2f842efe542ae9ca398397f757c2e650ad7c2de9529f6d29cc037fd
x86_64
mod_auth_kerb-5.4-10.el6.x86_64.rpm	SHA-256: 6e46ab3dba0295fd7cf6760fe9bb7ba127f519a9ff9bc20c162a8396c7069fdc
mod_auth_kerb-debuginfo-5.4-10.el6.x86_64.rpm	SHA-256: dc272d2546ffb0f962b5915c0c2d7c516a6f560914546166d47192da93428e01
i386
mod_auth_kerb-5.4-10.el6.i686.rpm	SHA-256: d612ecfc55041fbbfaf038f32c14dc43f4ce7804c650eb8e24c8bc98d5979353
mod_auth_kerb-debuginfo-5.4-10.el6.i686.rpm	SHA-256: dbe859fcd76d47d6dd122f09c5e93202772fffe3f0e2e13f3bf428a8085b4d0b

Red Hat Enterprise Linux Desktop 6

SRPM
mod_auth_kerb-5.4-10.el6.src.rpm	SHA-256: 5efdc371a2f842efe542ae9ca398397f757c2e650ad7c2de9529f6d29cc037fd
x86_64
mod_auth_kerb-5.4-10.el6.x86_64.rpm	SHA-256: 6e46ab3dba0295fd7cf6760fe9bb7ba127f519a9ff9bc20c162a8396c7069fdc
mod_auth_kerb-debuginfo-5.4-10.el6.x86_64.rpm	SHA-256: dc272d2546ffb0f962b5915c0c2d7c516a6f560914546166d47192da93428e01
i386
mod_auth_kerb-5.4-10.el6.i686.rpm	SHA-256: d612ecfc55041fbbfaf038f32c14dc43f4ce7804c650eb8e24c8bc98d5979353
mod_auth_kerb-debuginfo-5.4-10.el6.i686.rpm	SHA-256: dbe859fcd76d47d6dd122f09c5e93202772fffe3f0e2e13f3bf428a8085b4d0b

Red Hat Enterprise Linux for IBM z Systems 6

SRPM
mod_auth_kerb-5.4-10.el6.src.rpm	SHA-256: 5efdc371a2f842efe542ae9ca398397f757c2e650ad7c2de9529f6d29cc037fd
s390x
mod_auth_kerb-5.4-10.el6.s390x.rpm	SHA-256: 427c7562f0626c919ebf5a88b5eb3bede58d5d089c539a72888758c100cd79dd
mod_auth_kerb-debuginfo-5.4-10.el6.s390x.rpm	SHA-256: df87db573c7b3ca1a2610db17ef63593a59f6da73e5ffc748c70fe3682a02241

Red Hat Enterprise Linux for Power, big endian 6

SRPM
mod_auth_kerb-5.4-10.el6.src.rpm	SHA-256: 5efdc371a2f842efe542ae9ca398397f757c2e650ad7c2de9529f6d29cc037fd
ppc64
mod_auth_kerb-5.4-10.el6.ppc64.rpm	SHA-256: a9fc6aa86fca7e185a46206b2383c270bd00a7b64cca4174caec95209ed9bf51
mod_auth_kerb-debuginfo-5.4-10.el6.ppc64.rpm	SHA-256: eb9005a4cb22e0b5bea21fdd62ce55de0384d36765738dbcfc56df2b3c8c0ef1

Red Hat Enterprise Linux for Scientific Computing 6

SRPM
mod_auth_kerb-5.4-10.el6.src.rpm	SHA-256: 5efdc371a2f842efe542ae9ca398397f757c2e650ad7c2de9529f6d29cc037fd
x86_64
mod_auth_kerb-5.4-10.el6.x86_64.rpm	SHA-256: 6e46ab3dba0295fd7cf6760fe9bb7ba127f519a9ff9bc20c162a8396c7069fdc
mod_auth_kerb-debuginfo-5.4-10.el6.x86_64.rpm	SHA-256: dc272d2546ffb0f962b5915c0c2d7c516a6f560914546166d47192da93428e01

Red Hat Enterprise Linux Server from RHUI 6

SRPM
mod_auth_kerb-5.4-10.el6.src.rpm	SHA-256: 5efdc371a2f842efe542ae9ca398397f757c2e650ad7c2de9529f6d29cc037fd
x86_64
mod_auth_kerb-5.4-10.el6.x86_64.rpm	SHA-256: 6e46ab3dba0295fd7cf6760fe9bb7ba127f519a9ff9bc20c162a8396c7069fdc
mod_auth_kerb-debuginfo-5.4-10.el6.x86_64.rpm	SHA-256: dc272d2546ffb0f962b5915c0c2d7c516a6f560914546166d47192da93428e01
i386
mod_auth_kerb-5.4-10.el6.i686.rpm	SHA-256: d612ecfc55041fbbfaf038f32c14dc43f4ce7804c650eb8e24c8bc98d5979353
mod_auth_kerb-debuginfo-5.4-10.el6.i686.rpm	SHA-256: dbe859fcd76d47d6dd122f09c5e93202772fffe3f0e2e13f3bf428a8085b4d0b