Synopsis

bind-dyndb-ldap bug fix update

Type/Severity

Bug Fix Advisory

Topic

Updated bind-dyndb-ldap packages that fix several bugs are now available for Red
Hat Enterprise Linux 6.

Description

The dynamic LDAP back-end is a plug-in for BIND that provides back-end
capabilities to LDAP databases. It features support for dynamic updates and
internal caching that helps to reduce the load on LDAP servers.

This update fixes the following bugs:

• Previously, the bind-dyndb-ldap plug-in did not handle DNS zones without the
  "idnsUpdatePolicy" attribute properly, which led to a harmless, but misleading
  error message:
  

zone serial ([zone serial]) unchanged. zone may fail to transfer to slaves.

This message was logged after each zone reload or potentially after each change
in the affected DNS zone. The bind-dyndb-ldap plug-in has been fixed, so that it
no longer prints any error message if the "idnsUpdatePolicy" attribute is not
defined in the DNS zone. (BZ#908780)

• Previously, the bind-dyndb-ldap plug-in processed update policies with the
  "zonesub" match-type incorrectly, which led to the BIND daemon terminating
  unexpectedly during the processing of the update-policy parameter. The
  bind-dyndb-ldap plug-in has been fixed to process update-policy with the
  "zonesub" match-type correctly, and so it no longer crashes in this scenario.
  (BZ#921167)
  
• The bind-dyndb-ldap plug-in processed settings too early, which led to the
  BIND daemon terminating unexpectedly with an assertion failure during startup or
  reload. The bind-dyndb-ldap plug-in has been fixed to process its options later,
  and so no longer crashes during startup or reload. (BZ#923113)
  
• Prior to this update, the bind-dyndb-ldap plug-in with the default
  configuration did not establish enough connections to LDAP server for the
  pointer record (PTR) synchronization feature and, consequently, the PTR record
  synchronization failed. With this update, the default number of connections has
  been raised to four, and the PTR record synchronization now works as expected.
  (BZ#1010396)
  

Users of bind-dyndb-ldap are advised to upgrade to these updated packages, which
fix these bugs.

Solution

Before applying this update, make sure all previously released errata relevant
to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the Red
Hat Network to apply this update are available at
https://access.redhat.com/site/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386

Fixes

• BZ - 908780 - Zone without idnsUpdatePolicy causes error message during each zone_refresh
• BZ - 921167 - update-policy with match type 'zonesub' crashes BIND with bind-dyndb-ldap
• BZ - 923113 - Potential crash during startup/reload if global configuration options are set
• BZ - 1010396 - PTR record synchronization can deadlock if connection count <= 2 (only plugin versions < 3.0)

CVEs

(none)

References

(none)

Red Hat Enterprise Linux Server 6

SRPM
bind-dyndb-ldap-2.3-5.el6.src.rpm	SHA-256: 93ed1ace0c67e5dff136c4edcb96648ea97b73da6044da6803fc1da9debeb9f7
x86_64
bind-dyndb-ldap-2.3-5.el6.x86_64.rpm	SHA-256: 4b5da5c8c086bb208325bf2a098193a628d21a5a061565fa0a9599fe4b368b27
bind-dyndb-ldap-debuginfo-2.3-5.el6.x86_64.rpm	SHA-256: 021df3020fd14cdd16bf438a5d39523366adb01b04f1e70558f0c0fd4eaa94c8
i386
bind-dyndb-ldap-2.3-5.el6.i686.rpm	SHA-256: d57bdc0762b984f2e4e16db19c03ee190ebda518d148298aac6eaf7001075a56
bind-dyndb-ldap-debuginfo-2.3-5.el6.i686.rpm	SHA-256: 7968a91c2850d5aad76570143596e57856b075d4bd59db85f675cb53dbb7db3d

Red Hat Enterprise Linux Workstation 6

SRPM
bind-dyndb-ldap-2.3-5.el6.src.rpm	SHA-256: 93ed1ace0c67e5dff136c4edcb96648ea97b73da6044da6803fc1da9debeb9f7
x86_64
bind-dyndb-ldap-2.3-5.el6.x86_64.rpm	SHA-256: 4b5da5c8c086bb208325bf2a098193a628d21a5a061565fa0a9599fe4b368b27
bind-dyndb-ldap-debuginfo-2.3-5.el6.x86_64.rpm	SHA-256: 021df3020fd14cdd16bf438a5d39523366adb01b04f1e70558f0c0fd4eaa94c8
i386
bind-dyndb-ldap-2.3-5.el6.i686.rpm	SHA-256: d57bdc0762b984f2e4e16db19c03ee190ebda518d148298aac6eaf7001075a56
bind-dyndb-ldap-debuginfo-2.3-5.el6.i686.rpm	SHA-256: 7968a91c2850d5aad76570143596e57856b075d4bd59db85f675cb53dbb7db3d

Red Hat Enterprise Linux for IBM z Systems 6

SRPM
bind-dyndb-ldap-2.3-5.el6.src.rpm	SHA-256: 93ed1ace0c67e5dff136c4edcb96648ea97b73da6044da6803fc1da9debeb9f7
s390x
bind-dyndb-ldap-2.3-5.el6.s390x.rpm	SHA-256: 551c4f42159fe1a0a6ab6719b07a955a025a37cdd0a4dd29ef5c70e75f5977ae
bind-dyndb-ldap-debuginfo-2.3-5.el6.s390x.rpm	SHA-256: 730d371b444cc1603a4c2c8d839e351b34f0e50edbafab008eb2e3fe2e940d2d

Red Hat Enterprise Linux for Power, big endian 6

SRPM
bind-dyndb-ldap-2.3-5.el6.src.rpm	SHA-256: 93ed1ace0c67e5dff136c4edcb96648ea97b73da6044da6803fc1da9debeb9f7
ppc64
bind-dyndb-ldap-2.3-5.el6.ppc64.rpm	SHA-256: ba8339d841ebe32f633bbb800bdb29745d80df7936bd82fe46107bedb250652a
bind-dyndb-ldap-debuginfo-2.3-5.el6.ppc64.rpm	SHA-256: 4cdfcb8d5696744c22af3faa83bc0ec61751503e528f314aba910bdeb037d0a2

Red Hat Enterprise Linux Server from RHUI 6

SRPM
bind-dyndb-ldap-2.3-5.el6.src.rpm	SHA-256: 93ed1ace0c67e5dff136c4edcb96648ea97b73da6044da6803fc1da9debeb9f7
x86_64
bind-dyndb-ldap-2.3-5.el6.x86_64.rpm	SHA-256: 4b5da5c8c086bb208325bf2a098193a628d21a5a061565fa0a9599fe4b368b27
bind-dyndb-ldap-debuginfo-2.3-5.el6.x86_64.rpm	SHA-256: 021df3020fd14cdd16bf438a5d39523366adb01b04f1e70558f0c0fd4eaa94c8
i386
bind-dyndb-ldap-2.3-5.el6.i686.rpm	SHA-256: d57bdc0762b984f2e4e16db19c03ee190ebda518d148298aac6eaf7001075a56
bind-dyndb-ldap-debuginfo-2.3-5.el6.i686.rpm	SHA-256: 7968a91c2850d5aad76570143596e57856b075d4bd59db85f675cb53dbb7db3d