RHBA-2021:2319 - Bug Fix Advisory

Topic

An update for sssd is now available for Red Hat Enterprise Linux 7.

Description

The System Security Services Daemon (SSSD) service provides a set of
daemons to manage access to remote directories and authentication
mechanisms. It also provides the Name Service Switch (NSS) and the
Pluggable Authentication Modules (PAM) interfaces toward the system, and a
pluggable back-end system to connect to multiple different account sources.

Bug Fix(es) and Enhancement(s):

• Authentication handshake (ldap_install_tls()) fails due to underlying

openssl operation failing with EINTR (BZ#1839972)

• sssd throwing error " Unable to parse name test' [1432158283]: The

internal name format cannot be parsed" at debug_level 2 (BZ#1910131)

• First smart refresh query contains modifyTimestamp even if the

modifyTimestamp is 0. (BZ#1922244)

• SSSD not detecting subdomain from AD forest (7.9z) (BZ#1935685)
• IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7

(BZ#1945552)

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 7 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
• Red Hat Enterprise Linux Workstation 7 x86_64
• Red Hat Enterprise Linux Desktop 7 x86_64
• Red Hat Enterprise Linux for IBM z Systems 7 s390x
• Red Hat Enterprise Linux for Power, big endian 7 ppc64
• Red Hat Enterprise Linux for Scientific Computing 7 x86_64
• Red Hat Enterprise Linux for Power, little endian 7 ppc64le
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x
• Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le

Fixes

• BZ - 1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]
• BZ - 1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
• BZ - 1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
• BZ - 1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]

CVEs

(none)

References

(none)