RHEA-2011:0631 - Product Enhancement Advisory

Topic

New ipa packages are now available for Red Hat Enterprise Linux 6.

Description

Red Hat Enterprise Identity (IPA) is a centralized authentication, identity
management and authorization solution for both traditional and cloud based
enterprise environments.  It integrates components of the Red Hat Directory
Server, MIT Kerberos, Red Hat Certificate System, NTP and DNS. It provides
web browser and command-line interfaces. Its administration tools allow an
administrator to quickly install, set up, and administer a group of IPA
servers to meet the authentication and identity management requirements of
the large scale Linux and Unix deployments.

This enhancement update adds new ipa packages to Red Hat Enterprise Linux
6. (BZ#658275)

All users requiring ipa should install these newly-released packages, which
add these enhancements.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension (for IBM z Systems) 6 s390x

Fixes

• BZ - 627711 - ipa-client-install certmonger, nss-ldap and nscd failures
• BZ - 671058 - ipa2 - ipa-server-install fails on pkisilent - xml parsing string -- ?
• BZ - 675282 - Rebase ipa to FreeIPA v2.0.0 rc2
• BZ - 675336 - ipa-client RPM does not pull in proper dependencies
• BZ - 675352 - Unable to create encrypted connection with kerberos
• BZ - 675789 - Profile caIPAserviceCert Not Found
• BZ - 680201 - IPA server installation fails with: Ensure that user "dirsrv" has read and write permissions on /var/run/dirsrv
• BZ - 681334 - Uninstalling ipa-client doesn't remove cert
• BZ - 681338 - Uninstalling ipa-client doesn't clear keytab on server, if DNS record is not found
• BZ - 684269 - ns-slapd SELinux port errors
• BZ - 688622 - mixed case hostname can cause issues and confusion
• BZ - 688931 - Run ipa-ldap-updater on upgrades, or warn that it needs to be run
• BZ - 688934 - Wait for Directory Service ports to open
• BZ - 689452 - Internal Error and trace back when adding DNS AAAA record
• BZ - 690595 - Uninitialized variable in ipapwd_encoding.c
• BZ - 691883 - Error: CRITICAL Failed to remove SELinux rule for port 7390 when uninstalling server
• BZ - 692945 - postalcode for user not being added correctly with ipa user-add or user-mod
• BZ - 692978 - Use of ORDERING in IPA schema
• BZ - 697583 - Can not enable ipa-nis-manage plugin

CVEs

(none)

References

(none)