RHBA-2015:0512 - Bug Fix Advisory

Topic

Updated authconfig packages that fix several bugs are now available for Red Hat
Enterprise Linux 7.

Description

The authconfig packages contain a command line utility and a GUI application
that can configure a workstation to be a client for certain network user
information and authentication schemes and other user information and
authentication related options.

This update fixes the following bugs:

• The authconfig manual page has been updated with information on conditions for

successful starting and enabling of the sssd service. (BZ#1072395)

• This update fixes the warning message displayed when attempting to use

authconfig with the samba-windbind package not installed on the system to
mention the correct package name. (BZ#1084997)

• Prior to this update, the authconfig utility overwrote all the LDAP base

settings in the nslcd.conf file if there were multiple specific LDAP bases
set. With this update, authconfig ignores the specific LDAP bases and
reads and overwrites only the general LDAP base value. (BZ#1087733)

• This update adds a dependency on the policycoreutils package to authconfig.

(BZ#1094297)

• Previously, when attempting to add an incorrectly formed IPv6 URI to the

/etc/openldap/ldap.conf file, authconfig displayed a warning message, removed
the malformed URI but did not update the file with the new URI. This behavior
has been modified, and now it is possible to add an incorrect IPv6 URI to
/etc/openldap/ldap.conf. (BZ#1111081)

• With this update, authconfig has been modified to keep altfile

specification entries in the /etc/nsswitch.conf file. (BZ#1134084)

• In some cases the authconfig utility was not able to properly detect whether

SSSD or Winbind should be enabled. As a consequence, these daemons were stopped
when authconfig was run although they should not have been effected. With this
update, authconfig no longer changes the state nor restarts the services whose
configuration is not changed. (BZ#1134458)

• Previously, the ipa-client-install command used for the IPAv2 domain join was

interactively asking for input. When called from the authconfig-gtk GUI, the
user could not interact with it, and thus the domain join operation failed. With
this update, the authconfig GUI uses the "ipa-client-install --unattended"
command, so it no longer tries to interact with the user. As a result, the IPAv2
domain join operation can now successfully complete. (BZ#1134474)

• Prior to this update, it was not possible to specify multiple LDAP servers

with the authconfig command. This bug has been fixed, and multiple LDAP servers
can now be specified as expected. (BZ#1142830)

Users of authconfig are advised to upgrade to these updated packages, which fix
these bugs.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 7 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.7 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.6 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.5 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.4 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.3 x86_64
• Red Hat Enterprise Linux Server - AUS 7.7 x86_64
• Red Hat Enterprise Linux Server - AUS 7.6 x86_64
• Red Hat Enterprise Linux Server - AUS 7.4 x86_64
• Red Hat Enterprise Linux Server - AUS 7.3 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
• Red Hat Enterprise Linux Workstation 7 x86_64
• Red Hat Enterprise Linux Desktop 7 x86_64
• Red Hat Enterprise Linux for IBM z Systems 7 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.7 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.6 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.5 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.4 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.3 s390x
• Red Hat Enterprise Linux for Power, big endian 7 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.7 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.6 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.5 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.4 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.3 ppc64
• Red Hat Enterprise Linux for Scientific Computing 7 x86_64
• Red Hat Enterprise Linux Server from RHUI 7 x86_64
• Red Hat Enterprise Linux Server - TUS 7.7 x86_64
• Red Hat Enterprise Linux Server - TUS 7.6 x86_64
• Red Hat Enterprise Linux Server - TUS 7.3 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x
• Red Hat Enterprise Linux EUS Compute Node 7.7 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.6 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.5 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.4 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.3 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.7 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.6 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.4 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.3 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64

Fixes

• BZ - 1084997 - [authconfig-gtk] when using winbind authconfig oddly warns about samba-winbind-clients
• BZ - 1094297 - authconfig fails if package policycoreutils is missing
• BZ - 1111081 - Authconfig doesn't add incorrect IPv6 URI syntax to /etc/openldap/ldap.conf
• BZ - 1134084 - Removes "altfiles" from configuration
• BZ - 1142830 - Can not select multiple LDAP servers with authconfig

CVEs

(none)

References

(none)