RHBA-2015:1099 - Bug Fix Advisory

Topic

Updated nss_ldap packages that fix a bug are now available for Red Hat
Enterprise Linux 5.

Description

The nss_ldap packages contain the nss_ldap and pam_ldap modules. The nss_ldap
module is a name service switch module, which allows applications to retrieve
information about users and groups from a directory server. The pam_ldap module
allows a directory server to be used by PAM-aware applications to verify user
passwords.

This update fixes the following bug:

• Prior to this update, the nss_ldap utility did not fail over properly on

certain SSL-enabled LDAP server implementations. This caused the queries
processed by the original LDAP server to be aborted and not resumed on an
alternate LDAP server. The nss_ldap failover capabilities have been updated to
prevent this problem from occurring. (BZ#1035945)

All users of nss_ldap are advised to upgrade to these updated packages, which
fix this bug.

Solution

Before applying this update, make sure all previously released errata relevant
to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

CVEs

(none)

References

(none)