RHBA-2016:1210 - Bug Fix Advisory

Topic

Updated Red Hat Directory Server packages that fix several bugs are now available for Red Hat Directory Server 9.

Description

Red Hat Directory Server is an LDAPv3-compliant directory server. The suite of packages includes the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration, the Administration Server HTTP agent package, and the GUI console packages.

The following packages have been upgraded to version RHDS9.1.2.: 389-ds-console, 389-admin-console, 389-admin, 389-adminutil, 389-console, redhat-ds-console, redhat-admin-console, redhat-ds-admin, idm-console-framework, redhat-ds, redhat-ds-base, and redhat-idm-console. The most notable bug fixes include:

• Certificate files are backed up before upgrading Red Hat Directory Server, and then restored afterwards. Due to a bug, ownership and file mode information for these files was previously changed upon restore, requiring a manual fix to correct permissions. This bug has been fixed, and ownership and file mode information is now preserved during upgrade. (BZ#1260445)
• Red Hat Directory Console window coordinates are stored in user preferences in the "o=netscaperoot" suffix. Previously, if the Directory Console was used by the same user on two different systems with different monitor setups, it was possible for the coordinates to be off screen on one of them, and consequently the Directory Console window could be hidden after logging in. This update adds a check which compares saved window coordinates with the current screen size, and resets the window location if currently outside the screen, which ensures the window is always visible. (BZ#1261524)
• Previously, Red Hat Directory Server Console required Java 6 (java-1.6.0). This update raises the minimum requirements to Java 8 (java-1.8.0). (BZ#1304595)
• The "remove-ds-admin.pl" script previously attempted to reset files in the Administration Server configuration directory by removing existing, possibly customized files, and moving back defaults from a backup directory which was generated before by the "setup-ds-admin.pl" script. If the "remove-ds-admin.pl" script was run repeatedly, or if it was run once without previously running "setup-ds-admin.pl", the configuration files were removed and not restored, which then caused any following attempts to run "setup-ds-admin.pl" to fail. With this update, instead of removing existing configuration files, the "remove-ds-admin.pl" only overwrites them from backup if available, and the "setup-ds-admin.pl" script can no longer fail due to missing configuration files. (BZ#1334480)
• Description of the obsolete "Security level" option has been removed from the Red Hat Directory Server Administration Express help system. (BZ#1234441)

Users of Red Hat Directory Server are advised to upgrade to these updated packages, which fix these bugs and add these enhancements.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Directory Server 9 x86_64
• Red Hat Directory Server 9 i386

Fixes

• BZ - 1234441 - Security info from Help should be removed
• BZ - 1261524 - Console window could be hidden after login via consoles on multiple hosts
• BZ - 1304595 - Console -- Update Java dependency to 1.8
• BZ - 1334480 - running remove-ds-admin.pl multiple times will make it so you cannot install DS

CVEs

(none)

References

• http://www.redhat.com/security/updates/classification/#normal