Red Hat Product Errata RHBA-2020:1083 - Bug Fix Advisory
Issued:
2020-03-31
Updated:
2020-03-31

RHBA-2020:1083 - Bug Fix Advisory

Synopsis

ipa bug fix and enhancement update

Type/Severity

Bug Fix Advisory

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for ipa is now available for Red Hat Enterprise Linux 7.

Description

For detailed information on changes in this release, see the Red Hat
Enterprise Linux 7.8 Release Notes linked from the References section.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server 7 x86_64
  • Red Hat Enterprise Linux Workstation 7 x86_64
  • Red Hat Enterprise Linux Desktop 7 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 7 s390x
  • Red Hat Enterprise Linux for Power, big endian 7 ppc64
  • Red Hat Enterprise Linux for Scientific Computing 7 x86_64
  • Red Hat Enterprise Linux for Power, little endian 7 ppc64le

Fixes

  • BZ - 1512952 - cert renewal is failing when ipa ca cert is renewed from self-signed > external ca > self-sign
  • BZ - 1544470 - cn=cacert could show expired certificate
  • BZ - 1581583 - Error message should be more useful while ipa-backup fails for insufficient space
  • BZ - 1632351 - remove "last init status" from ipa-replica-manage list <node> if it's None.
  • BZ - 1636765 - ipa-restore set wrong file permissions and ownership for /var/log/dirsrv/slapd-<instance> directory
  • BZ - 1702426 - ipa-server-common expected file permissions in package don't match runtime permissions
  • BZ - 1711172 - Removing TLSv1.0, TLSv1.1 from nss.conf
  • BZ - 1714076 - Issue with adding multiple RHEL 7 IPA replica to RHEL 6 IPA master
  • BZ - 1714921 - x509.Name -> ipapython.dn.DN does not handle multi-valued RDNs
  • BZ - 1720952 - Cannot modify TTL with ipa dnsrecord-mod --ttl alone on command line
  • BZ - 1721550 - Staged user is not being recognized if the user entry doesn't have an objectClass "posixaccount"
  • BZ - 1727304 - Restrict cipher lists used by openssl connections
  • BZ - 1733075 - Rebase IPA to latest 4.6.x version
  • BZ - 1733209 - ipa-client-automount needs option to specify domain
  • BZ - 1733265 - IPA webgui incorrectly display number of entries in ID views
  • BZ - 1744926 - Error loading module '/usr/lib64/samba/pdb/ipasam.so': /usr/lib64/samba/pdb/ipasam.so: undefined symbol: DEBUGLEVEL_CLASS
  • BZ - 1745108 - Bug 1497334 invalidating single-label domains introduces regression of usage for customers
  • BZ - 1749788 - ipa host-find --pkey-only includes SSH keys in output
  • BZ - 1751951 - When master's IP address does not resolve to its name, ipa-replica-install fails
  • BZ - 1752005 - Keyrings should not be used in containerized environment
  • BZ - 1754494 - ipa-replica-install does not enforce --server option
  • BZ - 1755223 - Sub-CA key replication failure
  • BZ - 1762317 - ipa-backup command is failing on rhel-7.8
  • BZ - 1773550 - IPA upgrade fails for latest ipa package when adtrust is installed
  • BZ - 1778777 - After upgrade AD Trust Agents were removed from LDAP

CVEs

(none)

Red Hat Enterprise Linux Server 7

SRPM
ipa-4.6.6-11.el7.src.rpm SHA-256: 8c6c8913ef103499e57f2d85cddc85278438bf591c7bc7a6dd58813c42dbf1f0
x86_64
ipa-client-4.6.6-11.el7.x86_64.rpm SHA-256: 3261a1c2fdd259e7415504c81062fab01c038887b9c7454f99df1ec258529fe6
ipa-client-common-4.6.6-11.el7.noarch.rpm SHA-256: 0c39b7c8eea038fcf2fe6ee472d513a73c2a89da426fd2cdc947f7ece4bb1161
ipa-common-4.6.6-11.el7.noarch.rpm SHA-256: c6507560ac2c01c4f445b75384f8ed32e5339fbfcd4a29bf2de6528b27675b46
ipa-debuginfo-4.6.6-11.el7.x86_64.rpm SHA-256: cc816d3bab309898c01ca53105f58dd12d7626ae2acae376b51b915b10f61364
ipa-python-compat-4.6.6-11.el7.noarch.rpm SHA-256: 4df90172d088501a58d81d13bfdb46aaa3dd1a172f9d0b36dae3c57ae70a9d16
ipa-server-4.6.6-11.el7.x86_64.rpm SHA-256: ee9279f60d4ff1327d4299caec27248adc70bf17002e066905c9e04585d62098
ipa-server-common-4.6.6-11.el7.noarch.rpm SHA-256: d2088411d22fc72836fe15dd882f3cf28dc289aa69e5b3245134fc43c0a465b1
ipa-server-dns-4.6.6-11.el7.noarch.rpm SHA-256: c1ff2fd9c9d0b253db6b36f802f0b386fdb17af1cef2996ca9032e42af47a621
ipa-server-trust-ad-4.6.6-11.el7.x86_64.rpm SHA-256: 04ed12bff937eed1597879ad9255f8cdedc989cfccce2360c7fb61cacd2af560
python2-ipaclient-4.6.6-11.el7.noarch.rpm SHA-256: e88a00158beddec7db5b2400d601316ec7339667c65d5ecac910acaec4983c5c
python2-ipalib-4.6.6-11.el7.noarch.rpm SHA-256: 656d70861719bc8f42cac29b3a6ac15c3aeab1da32130f20ad0327bc88770523
python2-ipaserver-4.6.6-11.el7.noarch.rpm SHA-256: f6c9df9069eae0c9d0c80528356781214de872e93bd0014fec412152383cb28c

Red Hat Enterprise Linux Workstation 7

SRPM
ipa-4.6.6-11.el7.src.rpm SHA-256: 8c6c8913ef103499e57f2d85cddc85278438bf591c7bc7a6dd58813c42dbf1f0
x86_64
ipa-client-4.6.6-11.el7.x86_64.rpm SHA-256: 3261a1c2fdd259e7415504c81062fab01c038887b9c7454f99df1ec258529fe6
ipa-client-common-4.6.6-11.el7.noarch.rpm SHA-256: 0c39b7c8eea038fcf2fe6ee472d513a73c2a89da426fd2cdc947f7ece4bb1161
ipa-common-4.6.6-11.el7.noarch.rpm SHA-256: c6507560ac2c01c4f445b75384f8ed32e5339fbfcd4a29bf2de6528b27675b46
ipa-debuginfo-4.6.6-11.el7.x86_64.rpm SHA-256: cc816d3bab309898c01ca53105f58dd12d7626ae2acae376b51b915b10f61364
ipa-python-compat-4.6.6-11.el7.noarch.rpm SHA-256: 4df90172d088501a58d81d13bfdb46aaa3dd1a172f9d0b36dae3c57ae70a9d16
ipa-server-4.6.6-11.el7.x86_64.rpm SHA-256: ee9279f60d4ff1327d4299caec27248adc70bf17002e066905c9e04585d62098
ipa-server-common-4.6.6-11.el7.noarch.rpm SHA-256: d2088411d22fc72836fe15dd882f3cf28dc289aa69e5b3245134fc43c0a465b1
ipa-server-dns-4.6.6-11.el7.noarch.rpm SHA-256: c1ff2fd9c9d0b253db6b36f802f0b386fdb17af1cef2996ca9032e42af47a621
ipa-server-trust-ad-4.6.6-11.el7.x86_64.rpm SHA-256: 04ed12bff937eed1597879ad9255f8cdedc989cfccce2360c7fb61cacd2af560
python2-ipaclient-4.6.6-11.el7.noarch.rpm SHA-256: e88a00158beddec7db5b2400d601316ec7339667c65d5ecac910acaec4983c5c
python2-ipalib-4.6.6-11.el7.noarch.rpm SHA-256: 656d70861719bc8f42cac29b3a6ac15c3aeab1da32130f20ad0327bc88770523
python2-ipaserver-4.6.6-11.el7.noarch.rpm SHA-256: f6c9df9069eae0c9d0c80528356781214de872e93bd0014fec412152383cb28c

Red Hat Enterprise Linux Desktop 7

SRPM
ipa-4.6.6-11.el7.src.rpm SHA-256: 8c6c8913ef103499e57f2d85cddc85278438bf591c7bc7a6dd58813c42dbf1f0
x86_64
ipa-client-4.6.6-11.el7.x86_64.rpm SHA-256: 3261a1c2fdd259e7415504c81062fab01c038887b9c7454f99df1ec258529fe6
ipa-client-common-4.6.6-11.el7.noarch.rpm SHA-256: 0c39b7c8eea038fcf2fe6ee472d513a73c2a89da426fd2cdc947f7ece4bb1161
ipa-common-4.6.6-11.el7.noarch.rpm SHA-256: c6507560ac2c01c4f445b75384f8ed32e5339fbfcd4a29bf2de6528b27675b46
ipa-debuginfo-4.6.6-11.el7.x86_64.rpm SHA-256: cc816d3bab309898c01ca53105f58dd12d7626ae2acae376b51b915b10f61364
ipa-debuginfo-4.6.6-11.el7.x86_64.rpm SHA-256: cc816d3bab309898c01ca53105f58dd12d7626ae2acae376b51b915b10f61364
ipa-python-compat-4.6.6-11.el7.noarch.rpm SHA-256: 4df90172d088501a58d81d13bfdb46aaa3dd1a172f9d0b36dae3c57ae70a9d16
ipa-server-4.6.6-11.el7.x86_64.rpm SHA-256: ee9279f60d4ff1327d4299caec27248adc70bf17002e066905c9e04585d62098
ipa-server-common-4.6.6-11.el7.noarch.rpm SHA-256: d2088411d22fc72836fe15dd882f3cf28dc289aa69e5b3245134fc43c0a465b1
ipa-server-dns-4.6.6-11.el7.noarch.rpm SHA-256: c1ff2fd9c9d0b253db6b36f802f0b386fdb17af1cef2996ca9032e42af47a621
ipa-server-trust-ad-4.6.6-11.el7.x86_64.rpm SHA-256: 04ed12bff937eed1597879ad9255f8cdedc989cfccce2360c7fb61cacd2af560
python2-ipaclient-4.6.6-11.el7.noarch.rpm SHA-256: e88a00158beddec7db5b2400d601316ec7339667c65d5ecac910acaec4983c5c
python2-ipalib-4.6.6-11.el7.noarch.rpm SHA-256: 656d70861719bc8f42cac29b3a6ac15c3aeab1da32130f20ad0327bc88770523
python2-ipaserver-4.6.6-11.el7.noarch.rpm SHA-256: f6c9df9069eae0c9d0c80528356781214de872e93bd0014fec412152383cb28c

Red Hat Enterprise Linux for IBM z Systems 7

SRPM
ipa-4.6.6-11.el7.src.rpm SHA-256: 8c6c8913ef103499e57f2d85cddc85278438bf591c7bc7a6dd58813c42dbf1f0
s390x
ipa-client-4.6.6-11.el7.s390x.rpm SHA-256: f32eed97175fc82be9cb75dccf37b25203f6c05e2cf78fa57108fd3b7d1b6bf5
ipa-client-common-4.6.6-11.el7.noarch.rpm SHA-256: 0c39b7c8eea038fcf2fe6ee472d513a73c2a89da426fd2cdc947f7ece4bb1161
ipa-common-4.6.6-11.el7.noarch.rpm SHA-256: c6507560ac2c01c4f445b75384f8ed32e5339fbfcd4a29bf2de6528b27675b46
ipa-debuginfo-4.6.6-11.el7.s390x.rpm SHA-256: 86ccc124d12974255a91eb0a2ffa47fedf59c86d54b15194013d0c8660e2fd7f
ipa-python-compat-4.6.6-11.el7.noarch.rpm SHA-256: 4df90172d088501a58d81d13bfdb46aaa3dd1a172f9d0b36dae3c57ae70a9d16
python2-ipaclient-4.6.6-11.el7.noarch.rpm SHA-256: e88a00158beddec7db5b2400d601316ec7339667c65d5ecac910acaec4983c5c
python2-ipalib-4.6.6-11.el7.noarch.rpm SHA-256: 656d70861719bc8f42cac29b3a6ac15c3aeab1da32130f20ad0327bc88770523

Red Hat Enterprise Linux for Power, big endian 7

SRPM
ipa-4.6.6-11.el7.src.rpm SHA-256: 8c6c8913ef103499e57f2d85cddc85278438bf591c7bc7a6dd58813c42dbf1f0
ppc64
ipa-client-4.6.6-11.el7.ppc64.rpm SHA-256: b7bd95125d532a52b9707df59e988522c59a88182028c355354101e6ab9c8dd8
ipa-client-common-4.6.6-11.el7.noarch.rpm SHA-256: 0c39b7c8eea038fcf2fe6ee472d513a73c2a89da426fd2cdc947f7ece4bb1161
ipa-common-4.6.6-11.el7.noarch.rpm SHA-256: c6507560ac2c01c4f445b75384f8ed32e5339fbfcd4a29bf2de6528b27675b46
ipa-debuginfo-4.6.6-11.el7.ppc64.rpm SHA-256: ab4ded8b0dfe4e11922012be67a136a65665bf40b586baa03ee830598911a844
ipa-python-compat-4.6.6-11.el7.noarch.rpm SHA-256: 4df90172d088501a58d81d13bfdb46aaa3dd1a172f9d0b36dae3c57ae70a9d16
python2-ipaclient-4.6.6-11.el7.noarch.rpm SHA-256: e88a00158beddec7db5b2400d601316ec7339667c65d5ecac910acaec4983c5c
python2-ipalib-4.6.6-11.el7.noarch.rpm SHA-256: 656d70861719bc8f42cac29b3a6ac15c3aeab1da32130f20ad0327bc88770523

Red Hat Enterprise Linux for Scientific Computing 7

SRPM
ipa-4.6.6-11.el7.src.rpm SHA-256: 8c6c8913ef103499e57f2d85cddc85278438bf591c7bc7a6dd58813c42dbf1f0
x86_64
ipa-client-4.6.6-11.el7.x86_64.rpm SHA-256: 3261a1c2fdd259e7415504c81062fab01c038887b9c7454f99df1ec258529fe6
ipa-client-common-4.6.6-11.el7.noarch.rpm SHA-256: 0c39b7c8eea038fcf2fe6ee472d513a73c2a89da426fd2cdc947f7ece4bb1161
ipa-common-4.6.6-11.el7.noarch.rpm SHA-256: c6507560ac2c01c4f445b75384f8ed32e5339fbfcd4a29bf2de6528b27675b46
ipa-debuginfo-4.6.6-11.el7.x86_64.rpm SHA-256: cc816d3bab309898c01ca53105f58dd12d7626ae2acae376b51b915b10f61364
ipa-debuginfo-4.6.6-11.el7.x86_64.rpm SHA-256: cc816d3bab309898c01ca53105f58dd12d7626ae2acae376b51b915b10f61364
ipa-python-compat-4.6.6-11.el7.noarch.rpm SHA-256: 4df90172d088501a58d81d13bfdb46aaa3dd1a172f9d0b36dae3c57ae70a9d16
ipa-server-4.6.6-11.el7.x86_64.rpm SHA-256: ee9279f60d4ff1327d4299caec27248adc70bf17002e066905c9e04585d62098
ipa-server-common-4.6.6-11.el7.noarch.rpm SHA-256: d2088411d22fc72836fe15dd882f3cf28dc289aa69e5b3245134fc43c0a465b1
ipa-server-dns-4.6.6-11.el7.noarch.rpm SHA-256: c1ff2fd9c9d0b253db6b36f802f0b386fdb17af1cef2996ca9032e42af47a621
ipa-server-trust-ad-4.6.6-11.el7.x86_64.rpm SHA-256: 04ed12bff937eed1597879ad9255f8cdedc989cfccce2360c7fb61cacd2af560
python2-ipaclient-4.6.6-11.el7.noarch.rpm SHA-256: e88a00158beddec7db5b2400d601316ec7339667c65d5ecac910acaec4983c5c
python2-ipalib-4.6.6-11.el7.noarch.rpm SHA-256: 656d70861719bc8f42cac29b3a6ac15c3aeab1da32130f20ad0327bc88770523
python2-ipaserver-4.6.6-11.el7.noarch.rpm SHA-256: f6c9df9069eae0c9d0c80528356781214de872e93bd0014fec412152383cb28c

Red Hat Enterprise Linux for Power, little endian 7

SRPM
ipa-4.6.6-11.el7.src.rpm SHA-256: 8c6c8913ef103499e57f2d85cddc85278438bf591c7bc7a6dd58813c42dbf1f0
ppc64le
ipa-client-4.6.6-11.el7.ppc64le.rpm SHA-256: 494f57b3f55d912e3cfac40db9ddd8acaa0661530ccb211322707f8c6db5aeb7
ipa-client-common-4.6.6-11.el7.noarch.rpm SHA-256: 0c39b7c8eea038fcf2fe6ee472d513a73c2a89da426fd2cdc947f7ece4bb1161
ipa-common-4.6.6-11.el7.noarch.rpm SHA-256: c6507560ac2c01c4f445b75384f8ed32e5339fbfcd4a29bf2de6528b27675b46
ipa-debuginfo-4.6.6-11.el7.ppc64le.rpm SHA-256: e910463322aef851a46250683a8aac9dea6710eff0a8043580a8ab906f3053a1
ipa-python-compat-4.6.6-11.el7.noarch.rpm SHA-256: 4df90172d088501a58d81d13bfdb46aaa3dd1a172f9d0b36dae3c57ae70a9d16
python2-ipaclient-4.6.6-11.el7.noarch.rpm SHA-256: e88a00158beddec7db5b2400d601316ec7339667c65d5ecac910acaec4983c5c
python2-ipalib-4.6.6-11.el7.noarch.rpm SHA-256: 656d70861719bc8f42cac29b3a6ac15c3aeab1da32130f20ad0327bc88770523

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.