RHEA-2009:0455 - Product Enhancement Advisory

Topic

Enhanced Red Hat Directory Server and related packages are now available.

Description

Red Hat Directory Server is an LDAPv3-compliant directory server. The
redhat-ds-base package includes the LDAP server and command line utilities
for server administration.

These updated Red Hat Directory Server packages have many new features:

• Added SASL Kerberos and Start TLS support for server connections,

including replication, chaining, Windows synchronization, and pass-through
authentication. Configuration attributes have been added or expanded to
enable the new server connection types.

• Added supported for Unix sockets (LDAPI) and autobind. With this update,

Directory Server's LDAP operations can run over Unix sockets. Enabling
LDAPI also allows the Directory Server to use autobind to authenticate
logged in Unix users to the Directory Server automatically, based on
their Unix credentials.

• Added the Distributed Numeric Assignment Plug-in to automatically manage

and assign number values for attributes. This also simplifies number range
management for multimaster replication.

• Added the MemberOf Plug-in and entry attributes to reflect group

membership in user entries automatically. Group membership is defined in
the group entry itself. The MemberOf Plug-in adds and manages a new
attribute, memberOf, on user entries so that user entries show all of the
groups to which the user is a member.

• Enabled dynamic schema reloads. Custom schema files can be added to an

instance and loaded on the fly by running a schema reload task or a new
schema reload script.

• Created two new cn=tasks entries for schema reload and memberOf tasks.

Each task has its own entry under the cn=tasks,cn=config
configuration entry in the server's DSE. A new task entry can be added,
with task-specific attributes, to initiate the task. As soon as the task
is completed, the task entry is removed.

• Enhanced the Get Effective Rights extended operation to allow options

for non-existent and operational attributes. A get effective rights
search returns the access permissions that one directory user has to a
directory entry or entries. This update adds additional flags to return
the rights for non-existent attributes and operational attributes for
the entry.

• Supports 64-bit integers for performance counters, even on 32-bit

systems. Several server, database, and SNMP counters had upper range
restrictions of 32-bit integers, but these could cycle too quickly for
accurate statistics monitoring on high-performance systems. Additionally, a
new configuration attribute was added to turn counters off and on.

• Added a new parameter to set the frequency that the Directory Servers

sends synchronization updates to an Active Directory sync peer.

• Added a new parameter to enable or disable unauthenticated binds. It is

possible for a users to attempt to bind to the directory using a username
but without giving a password. The server previously allowed that
unauthenticated bind to continue as an anonymous bind. The new parameter
allows administrators to set whether to allow anonymous access or cause
the bind attempt to fail.

These packages also contain many bug fixes for major features in Red Hat
Directory Server, including replication, synchronization, setup and
migration, command-line tools, the Java console, the admin server, and
password policy.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

To update all RPMs for your particular architecture, run:

rpm -Fvh [filenames]

where [filenames] is a list of the RPMs you wish to upgrade. Only those
RPMs which are currently installed will be updated. Those RPMs which are
not installed but included in the list will not be updated. Note that you
can also use wildcards (*.rpm) if your current directory *only* contains the
desired RPMs.

Please note that this update is also available via Red Hat Network. Many
people find this an easier way to apply updates. To use Red Hat Network,
launch the Red Hat Update Agent with the following command:

up2date

This will start an interactive process that will result in the appropriate
RPMs being upgraded on your system.

Affected Products

• Red Hat Directory Server 8 x86_64
• Red Hat Directory Server 8 i386

Fixes

CVEs

(none)

References

(none)