RHEA-2016:2798 - Product Enhancement Advisory

Topic

Updated ovirt-engine-extension-aaa-ldap and ovirt-engine-extension-aaa-ldap-setup 1.2.2 packages that fix several bugs
and adds various enhancements is now available.

Description

The ovirt-engine-extension-aaa-ldap extension allows users to customize their external directory setup easily. The ovirt-engine-extension-aaa-ldap extension supports many different LDAP server types, and an interactive setup script is provided to assist you with the setup for most LDAP types.

Changes to the ovirt-engine-extension-aaa-ldap component:

• Red Hat Enterprise Linux 6 used mod_auth_kerb to setup Kerberos SSO, but this module has been deprecated; mod_auth_gssapi is used instead. This update ensures mod_auth_gssapi and mod_session is used, and that example configurations have been updated.

For existing customers, mod_auth_kerb will continue to work with previous versions of Red Hat Enterprise Virtualization. (BZ#1388083)

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Virtualization 4.0 x86_64
• Red Hat Virtualization for IBM Power LE 4 for RHEL 7 x86_64

Fixes

• BZ - 1388083 - Use mod_auth_gssapi and mod_session instead of mod_auth_kerb for Kerberos SSO
• BZ - 1390150 - Rebase ovirt-engine-extension-aaa-ldap to 1.2.2

CVEs

(none)

References

(none)