RHEA-2014:1456 - Product Enhancement Advisory

Topic

New authentication and identity modules for Apache HTTP server are now available
for Red Hat Enterprise Linux 6.

Description

The mod_authnz_pam, mod_intercept_form_submit, and mod_lookup_identity are a set
of Apache HTTP server modules to support authentication and identity functions
for web applications.

The mod_authnz_pam Apache module serves as a PAM authorization module,
supplementing authentication done by other modules, for example mod_auth_kerb.
It can also be used as a full Basic Authentication provider for testing
purposes, running the login and password authentication through the PAM stack.

The mod_intercept_form_submit Apache module intercepts application's login form
submission and runs the PAM authentication.

The mod_lookup_identity Apache module retrieves additional information about the
authenticated user.

This enhancement update adds the mod_authnz_pam, mod_intercept_form_submit,
mod_lookup_identity packages to Red Hat Enterprise Linux 6. (BZ#1075121,
BZ#1075122, BZ#1080478)

All users who require the new authentication and identity modules for Apache
HTTP server are advised to install these new packages.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x

Fixes

• BZ - 1114049 - When sssd_dbus is not running, assertion in the dbus library can cause httpd aborted and coredumped

CVEs

(none)

References

(none)