- Issued:
- 2020-03-31
- Updated:
- 2020-03-31
RHBA-2020:1083 - Bug Fix Advisory
Synopsis
ipa bug fix and enhancement update
Type/Severity
Bug Fix Advisory
Topic
An update for ipa is now available for Red Hat Enterprise Linux 7.
Description
For detailed information on changes in this release, see the Red Hat
Enterprise Linux 7.8 Release Notes linked from the References section.
Solution
Before applying this update, make sure all previously released errata
relevant to your system have been applied.
For details on how to apply this update, refer to:
https://access.redhat.com/articles/11258
Affected Products
- Red Hat Enterprise Linux Server 7 x86_64
- Red Hat Enterprise Linux Workstation 7 x86_64
- Red Hat Enterprise Linux Desktop 7 x86_64
- Red Hat Enterprise Linux for IBM z Systems 7 s390x
- Red Hat Enterprise Linux for Power, big endian 7 ppc64
- Red Hat Enterprise Linux for Scientific Computing 7 x86_64
- Red Hat Enterprise Linux for Power, little endian 7 ppc64le
Fixes
- BZ - 1512952 - cert renewal is failing when ipa ca cert is renewed from self-signed > external ca > self-sign
- BZ - 1544470 - cn=cacert could show expired certificate
- BZ - 1581583 - Error message should be more useful while ipa-backup fails for insufficient space
- BZ - 1632351 - remove "last init status" from ipa-replica-manage list <node> if it's None.
- BZ - 1636765 - ipa-restore set wrong file permissions and ownership for /var/log/dirsrv/slapd-<instance> directory
- BZ - 1702426 - ipa-server-common expected file permissions in package don't match runtime permissions
- BZ - 1711172 - Removing TLSv1.0, TLSv1.1 from nss.conf
- BZ - 1714076 - Issue with adding multiple RHEL 7 IPA replica to RHEL 6 IPA master
- BZ - 1714921 - x509.Name -> ipapython.dn.DN does not handle multi-valued RDNs
- BZ - 1720952 - Cannot modify TTL with ipa dnsrecord-mod --ttl alone on command line
- BZ - 1721550 - Staged user is not being recognized if the user entry doesn't have an objectClass "posixaccount"
- BZ - 1727304 - Restrict cipher lists used by openssl connections
- BZ - 1733075 - Rebase IPA to latest 4.6.x version
- BZ - 1733209 - ipa-client-automount needs option to specify domain
- BZ - 1733265 - IPA webgui incorrectly display number of entries in ID views
- BZ - 1744926 - Error loading module '/usr/lib64/samba/pdb/ipasam.so': /usr/lib64/samba/pdb/ipasam.so: undefined symbol: DEBUGLEVEL_CLASS
- BZ - 1745108 - Bug 1497334 invalidating single-label domains introduces regression of usage for customers
- BZ - 1749788 - ipa host-find --pkey-only includes SSH keys in output
- BZ - 1751951 - When master's IP address does not resolve to its name, ipa-replica-install fails
- BZ - 1752005 - Keyrings should not be used in containerized environment
- BZ - 1754494 - ipa-replica-install does not enforce --server option
- BZ - 1755223 - Sub-CA key replication failure
- BZ - 1762317 - ipa-backup command is failing on rhel-7.8
- BZ - 1773550 - IPA upgrade fails for latest ipa package when adtrust is installed
- BZ - 1778777 - After upgrade AD Trust Agents were removed from LDAP
CVEs
(none)
References
Note:
More recent versions of these packages may be available.
Click a package name for more details.
Red Hat Enterprise Linux Server 7
| SRPM | |
|---|---|
| ipa-4.6.6-11.el7.src.rpm | SHA-256: 8c6c8913ef103499e57f2d85cddc85278438bf591c7bc7a6dd58813c42dbf1f0 |
| x86_64 | |
| ipa-client-4.6.6-11.el7.x86_64.rpm | SHA-256: 3261a1c2fdd259e7415504c81062fab01c038887b9c7454f99df1ec258529fe6 |
| ipa-client-common-4.6.6-11.el7.noarch.rpm | SHA-256: 0c39b7c8eea038fcf2fe6ee472d513a73c2a89da426fd2cdc947f7ece4bb1161 |
| ipa-common-4.6.6-11.el7.noarch.rpm | SHA-256: c6507560ac2c01c4f445b75384f8ed32e5339fbfcd4a29bf2de6528b27675b46 |
| ipa-debuginfo-4.6.6-11.el7.x86_64.rpm | SHA-256: cc816d3bab309898c01ca53105f58dd12d7626ae2acae376b51b915b10f61364 |
| ipa-python-compat-4.6.6-11.el7.noarch.rpm | SHA-256: 4df90172d088501a58d81d13bfdb46aaa3dd1a172f9d0b36dae3c57ae70a9d16 |
| ipa-server-4.6.6-11.el7.x86_64.rpm | SHA-256: ee9279f60d4ff1327d4299caec27248adc70bf17002e066905c9e04585d62098 |
| ipa-server-common-4.6.6-11.el7.noarch.rpm | SHA-256: d2088411d22fc72836fe15dd882f3cf28dc289aa69e5b3245134fc43c0a465b1 |
| ipa-server-dns-4.6.6-11.el7.noarch.rpm | SHA-256: c1ff2fd9c9d0b253db6b36f802f0b386fdb17af1cef2996ca9032e42af47a621 |
| ipa-server-trust-ad-4.6.6-11.el7.x86_64.rpm | SHA-256: 04ed12bff937eed1597879ad9255f8cdedc989cfccce2360c7fb61cacd2af560 |
| python2-ipaclient-4.6.6-11.el7.noarch.rpm | SHA-256: e88a00158beddec7db5b2400d601316ec7339667c65d5ecac910acaec4983c5c |
| python2-ipalib-4.6.6-11.el7.noarch.rpm | SHA-256: 656d70861719bc8f42cac29b3a6ac15c3aeab1da32130f20ad0327bc88770523 |
| python2-ipaserver-4.6.6-11.el7.noarch.rpm | SHA-256: f6c9df9069eae0c9d0c80528356781214de872e93bd0014fec412152383cb28c |
Red Hat Enterprise Linux Workstation 7
| SRPM | |
|---|---|
| ipa-4.6.6-11.el7.src.rpm | SHA-256: 8c6c8913ef103499e57f2d85cddc85278438bf591c7bc7a6dd58813c42dbf1f0 |
| x86_64 | |
| ipa-client-4.6.6-11.el7.x86_64.rpm | SHA-256: 3261a1c2fdd259e7415504c81062fab01c038887b9c7454f99df1ec258529fe6 |
| ipa-client-common-4.6.6-11.el7.noarch.rpm | SHA-256: 0c39b7c8eea038fcf2fe6ee472d513a73c2a89da426fd2cdc947f7ece4bb1161 |
| ipa-common-4.6.6-11.el7.noarch.rpm | SHA-256: c6507560ac2c01c4f445b75384f8ed32e5339fbfcd4a29bf2de6528b27675b46 |
| ipa-debuginfo-4.6.6-11.el7.x86_64.rpm | SHA-256: cc816d3bab309898c01ca53105f58dd12d7626ae2acae376b51b915b10f61364 |
| ipa-python-compat-4.6.6-11.el7.noarch.rpm | SHA-256: 4df90172d088501a58d81d13bfdb46aaa3dd1a172f9d0b36dae3c57ae70a9d16 |
| ipa-server-4.6.6-11.el7.x86_64.rpm | SHA-256: ee9279f60d4ff1327d4299caec27248adc70bf17002e066905c9e04585d62098 |
| ipa-server-common-4.6.6-11.el7.noarch.rpm | SHA-256: d2088411d22fc72836fe15dd882f3cf28dc289aa69e5b3245134fc43c0a465b1 |
| ipa-server-dns-4.6.6-11.el7.noarch.rpm | SHA-256: c1ff2fd9c9d0b253db6b36f802f0b386fdb17af1cef2996ca9032e42af47a621 |
| ipa-server-trust-ad-4.6.6-11.el7.x86_64.rpm | SHA-256: 04ed12bff937eed1597879ad9255f8cdedc989cfccce2360c7fb61cacd2af560 |
| python2-ipaclient-4.6.6-11.el7.noarch.rpm | SHA-256: e88a00158beddec7db5b2400d601316ec7339667c65d5ecac910acaec4983c5c |
| python2-ipalib-4.6.6-11.el7.noarch.rpm | SHA-256: 656d70861719bc8f42cac29b3a6ac15c3aeab1da32130f20ad0327bc88770523 |
| python2-ipaserver-4.6.6-11.el7.noarch.rpm | SHA-256: f6c9df9069eae0c9d0c80528356781214de872e93bd0014fec412152383cb28c |
Red Hat Enterprise Linux Desktop 7
| SRPM | |
|---|---|
| ipa-4.6.6-11.el7.src.rpm | SHA-256: 8c6c8913ef103499e57f2d85cddc85278438bf591c7bc7a6dd58813c42dbf1f0 |
| x86_64 | |
| ipa-client-4.6.6-11.el7.x86_64.rpm | SHA-256: 3261a1c2fdd259e7415504c81062fab01c038887b9c7454f99df1ec258529fe6 |
| ipa-client-common-4.6.6-11.el7.noarch.rpm | SHA-256: 0c39b7c8eea038fcf2fe6ee472d513a73c2a89da426fd2cdc947f7ece4bb1161 |
| ipa-common-4.6.6-11.el7.noarch.rpm | SHA-256: c6507560ac2c01c4f445b75384f8ed32e5339fbfcd4a29bf2de6528b27675b46 |
| ipa-debuginfo-4.6.6-11.el7.x86_64.rpm | SHA-256: cc816d3bab309898c01ca53105f58dd12d7626ae2acae376b51b915b10f61364 |
| ipa-debuginfo-4.6.6-11.el7.x86_64.rpm | SHA-256: cc816d3bab309898c01ca53105f58dd12d7626ae2acae376b51b915b10f61364 |
| ipa-python-compat-4.6.6-11.el7.noarch.rpm | SHA-256: 4df90172d088501a58d81d13bfdb46aaa3dd1a172f9d0b36dae3c57ae70a9d16 |
| ipa-server-4.6.6-11.el7.x86_64.rpm | SHA-256: ee9279f60d4ff1327d4299caec27248adc70bf17002e066905c9e04585d62098 |
| ipa-server-common-4.6.6-11.el7.noarch.rpm | SHA-256: d2088411d22fc72836fe15dd882f3cf28dc289aa69e5b3245134fc43c0a465b1 |
| ipa-server-dns-4.6.6-11.el7.noarch.rpm | SHA-256: c1ff2fd9c9d0b253db6b36f802f0b386fdb17af1cef2996ca9032e42af47a621 |
| ipa-server-trust-ad-4.6.6-11.el7.x86_64.rpm | SHA-256: 04ed12bff937eed1597879ad9255f8cdedc989cfccce2360c7fb61cacd2af560 |
| python2-ipaclient-4.6.6-11.el7.noarch.rpm | SHA-256: e88a00158beddec7db5b2400d601316ec7339667c65d5ecac910acaec4983c5c |
| python2-ipalib-4.6.6-11.el7.noarch.rpm | SHA-256: 656d70861719bc8f42cac29b3a6ac15c3aeab1da32130f20ad0327bc88770523 |
| python2-ipaserver-4.6.6-11.el7.noarch.rpm | SHA-256: f6c9df9069eae0c9d0c80528356781214de872e93bd0014fec412152383cb28c |
Red Hat Enterprise Linux for IBM z Systems 7
| SRPM | |
|---|---|
| ipa-4.6.6-11.el7.src.rpm | SHA-256: 8c6c8913ef103499e57f2d85cddc85278438bf591c7bc7a6dd58813c42dbf1f0 |
| s390x | |
| ipa-client-4.6.6-11.el7.s390x.rpm | SHA-256: f32eed97175fc82be9cb75dccf37b25203f6c05e2cf78fa57108fd3b7d1b6bf5 |
| ipa-client-common-4.6.6-11.el7.noarch.rpm | SHA-256: 0c39b7c8eea038fcf2fe6ee472d513a73c2a89da426fd2cdc947f7ece4bb1161 |
| ipa-common-4.6.6-11.el7.noarch.rpm | SHA-256: c6507560ac2c01c4f445b75384f8ed32e5339fbfcd4a29bf2de6528b27675b46 |
| ipa-debuginfo-4.6.6-11.el7.s390x.rpm | SHA-256: 86ccc124d12974255a91eb0a2ffa47fedf59c86d54b15194013d0c8660e2fd7f |
| ipa-python-compat-4.6.6-11.el7.noarch.rpm | SHA-256: 4df90172d088501a58d81d13bfdb46aaa3dd1a172f9d0b36dae3c57ae70a9d16 |
| python2-ipaclient-4.6.6-11.el7.noarch.rpm | SHA-256: e88a00158beddec7db5b2400d601316ec7339667c65d5ecac910acaec4983c5c |
| python2-ipalib-4.6.6-11.el7.noarch.rpm | SHA-256: 656d70861719bc8f42cac29b3a6ac15c3aeab1da32130f20ad0327bc88770523 |
Red Hat Enterprise Linux for Power, big endian 7
| SRPM | |
|---|---|
| ipa-4.6.6-11.el7.src.rpm | SHA-256: 8c6c8913ef103499e57f2d85cddc85278438bf591c7bc7a6dd58813c42dbf1f0 |
| ppc64 | |
| ipa-client-4.6.6-11.el7.ppc64.rpm | SHA-256: b7bd95125d532a52b9707df59e988522c59a88182028c355354101e6ab9c8dd8 |
| ipa-client-common-4.6.6-11.el7.noarch.rpm | SHA-256: 0c39b7c8eea038fcf2fe6ee472d513a73c2a89da426fd2cdc947f7ece4bb1161 |
| ipa-common-4.6.6-11.el7.noarch.rpm | SHA-256: c6507560ac2c01c4f445b75384f8ed32e5339fbfcd4a29bf2de6528b27675b46 |
| ipa-debuginfo-4.6.6-11.el7.ppc64.rpm | SHA-256: ab4ded8b0dfe4e11922012be67a136a65665bf40b586baa03ee830598911a844 |
| ipa-python-compat-4.6.6-11.el7.noarch.rpm | SHA-256: 4df90172d088501a58d81d13bfdb46aaa3dd1a172f9d0b36dae3c57ae70a9d16 |
| python2-ipaclient-4.6.6-11.el7.noarch.rpm | SHA-256: e88a00158beddec7db5b2400d601316ec7339667c65d5ecac910acaec4983c5c |
| python2-ipalib-4.6.6-11.el7.noarch.rpm | SHA-256: 656d70861719bc8f42cac29b3a6ac15c3aeab1da32130f20ad0327bc88770523 |
Red Hat Enterprise Linux for Scientific Computing 7
| SRPM | |
|---|---|
| ipa-4.6.6-11.el7.src.rpm | SHA-256: 8c6c8913ef103499e57f2d85cddc85278438bf591c7bc7a6dd58813c42dbf1f0 |
| x86_64 | |
| ipa-client-4.6.6-11.el7.x86_64.rpm | SHA-256: 3261a1c2fdd259e7415504c81062fab01c038887b9c7454f99df1ec258529fe6 |
| ipa-client-common-4.6.6-11.el7.noarch.rpm | SHA-256: 0c39b7c8eea038fcf2fe6ee472d513a73c2a89da426fd2cdc947f7ece4bb1161 |
| ipa-common-4.6.6-11.el7.noarch.rpm | SHA-256: c6507560ac2c01c4f445b75384f8ed32e5339fbfcd4a29bf2de6528b27675b46 |
| ipa-debuginfo-4.6.6-11.el7.x86_64.rpm | SHA-256: cc816d3bab309898c01ca53105f58dd12d7626ae2acae376b51b915b10f61364 |
| ipa-debuginfo-4.6.6-11.el7.x86_64.rpm | SHA-256: cc816d3bab309898c01ca53105f58dd12d7626ae2acae376b51b915b10f61364 |
| ipa-python-compat-4.6.6-11.el7.noarch.rpm | SHA-256: 4df90172d088501a58d81d13bfdb46aaa3dd1a172f9d0b36dae3c57ae70a9d16 |
| ipa-server-4.6.6-11.el7.x86_64.rpm | SHA-256: ee9279f60d4ff1327d4299caec27248adc70bf17002e066905c9e04585d62098 |
| ipa-server-common-4.6.6-11.el7.noarch.rpm | SHA-256: d2088411d22fc72836fe15dd882f3cf28dc289aa69e5b3245134fc43c0a465b1 |
| ipa-server-dns-4.6.6-11.el7.noarch.rpm | SHA-256: c1ff2fd9c9d0b253db6b36f802f0b386fdb17af1cef2996ca9032e42af47a621 |
| ipa-server-trust-ad-4.6.6-11.el7.x86_64.rpm | SHA-256: 04ed12bff937eed1597879ad9255f8cdedc989cfccce2360c7fb61cacd2af560 |
| python2-ipaclient-4.6.6-11.el7.noarch.rpm | SHA-256: e88a00158beddec7db5b2400d601316ec7339667c65d5ecac910acaec4983c5c |
| python2-ipalib-4.6.6-11.el7.noarch.rpm | SHA-256: 656d70861719bc8f42cac29b3a6ac15c3aeab1da32130f20ad0327bc88770523 |
| python2-ipaserver-4.6.6-11.el7.noarch.rpm | SHA-256: f6c9df9069eae0c9d0c80528356781214de872e93bd0014fec412152383cb28c |
Red Hat Enterprise Linux for Power, little endian 7
| SRPM | |
|---|---|
| ipa-4.6.6-11.el7.src.rpm | SHA-256: 8c6c8913ef103499e57f2d85cddc85278438bf591c7bc7a6dd58813c42dbf1f0 |
| ppc64le | |
| ipa-client-4.6.6-11.el7.ppc64le.rpm | SHA-256: 494f57b3f55d912e3cfac40db9ddd8acaa0661530ccb211322707f8c6db5aeb7 |
| ipa-client-common-4.6.6-11.el7.noarch.rpm | SHA-256: 0c39b7c8eea038fcf2fe6ee472d513a73c2a89da426fd2cdc947f7ece4bb1161 |
| ipa-common-4.6.6-11.el7.noarch.rpm | SHA-256: c6507560ac2c01c4f445b75384f8ed32e5339fbfcd4a29bf2de6528b27675b46 |
| ipa-debuginfo-4.6.6-11.el7.ppc64le.rpm | SHA-256: e910463322aef851a46250683a8aac9dea6710eff0a8043580a8ab906f3053a1 |
| ipa-python-compat-4.6.6-11.el7.noarch.rpm | SHA-256: 4df90172d088501a58d81d13bfdb46aaa3dd1a172f9d0b36dae3c57ae70a9d16 |
| python2-ipaclient-4.6.6-11.el7.noarch.rpm | SHA-256: e88a00158beddec7db5b2400d601316ec7339667c65d5ecac910acaec4983c5c |
| python2-ipalib-4.6.6-11.el7.noarch.rpm | SHA-256: 656d70861719bc8f42cac29b3a6ac15c3aeab1da32130f20ad0327bc88770523 |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.