- Issued:
- 2011-05-19
- Updated:
- 2011-05-19
RHBA-2011:0595 - Bug Fix Advisory
Synopsis
authconfig bug fix and enhancement update
Type/Severity
Bug Fix Advisory
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory.
Topic
Updated authconfig packages that fix several bugs and add an enhancement are now
available.
Description
The authconfig package contains a command line utility and a GUI application
that can configure a workstation to be a client for certain network user
information and authentication schemes and other user information and
authentication related options.
These updated authconfig packages provide fixes for the following bugs:
- Prior to this update, authconfig unnecessarily restarted the user information
and authentication services even though there were no configuration changes that
would require the restart. With this update, services are no longer restarted
unless explicitly required. (BZ#595261)
- The authentication configuration utility did not keep the "Require smart card
for login" check box set when Kerberos was also enabled. When the check box was
checked and the configuration was saved with the "Apply" button, the system
would correctly require smart card for login. However, on the subsequent run of
the authentication configuration utility the check box would be unchecked again
and it was necessary to check it again to keep the option switched on. With this
update, the "Require smart card for login" stays checked even after subsequent
runs of the authentication configuration utility. (BZ#620475)
- The authentication configuration tool GUI incorrectly duplicated its window
when the "Revert" button was pressed. This update fixes the duplicity problem.
(BZ#621632)
- In some cases, when multiple configuration files with the same configuration
settings contained different configuration values for a setting, the
configuration files contents were not properly synchronized with authconfig.
With this update, the synchronization works as expected. (BZ#624159)
- The authentication configuration tool GUI allowed to choose user identity and
authentication schemes which require packages that are not installed on the
system by default. With this update, certain identity and authentication schemes
cannot be configured when they are not installed on the system. (BZ#639747)
- The authconfig textual user interface incorrectly required the nss-pam-ldap
package to be installed when the configuration used SSSD for LDAP user
identification. With this update, the nss-pam-ldap package is not required in
such a case. (BZ#663882)
- Prior to this update, the authentication configuration tool overwrote the
cache_credentials value to "True" in the SSSD configuration file
(/etc/sssd/sssd.conf) if the configuration allowed using SSSD for the network
user information and authentication services. With this update, the
"cache_credentials" parameter is no longer overwritten in the aforementioned
case. (BZ#674844)
- The "system-config-authentication" command crashed when executed in an
environment without the X server running. With this update, a proper error
message is printed in the aforementioned case. (BZ#676333)
In addition, these updated authconfig packages provide the following
enhancement:
- The authconfig package has been upgraded to upstream version 6.1.12, which
provides a number of bug fixes and enhancements over the previous version. This
version also adds new options: "--enableforcelegacy" and "--disableforcelegacy".
These options allow the user to use legacy LDAP and Kerberos user identity and
authentication modules instead of the SSSD modules. (BZ#655910)
Users are advised to upgrade to these updated authconfig packages, which resolve
these issues and add this enhancement.
Solution
Before applying this update, make sure that all previously-released errata
relevant to your system have been applied.
This update is available via Red Hat Network. Details on how to use the Red Hat
Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259
Affected Products
- Red Hat Enterprise Linux Server 6 x86_64
- Red Hat Enterprise Linux Server 6 i386
- Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
- Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
- Red Hat Enterprise Linux Workstation 6 x86_64
- Red Hat Enterprise Linux Workstation 6 i386
- Red Hat Enterprise Linux Desktop 6 x86_64
- Red Hat Enterprise Linux Desktop 6 i386
- Red Hat Enterprise Linux for IBM z Systems 6 s390x
- Red Hat Enterprise Linux for Power, big endian 6 ppc64
- Red Hat Enterprise Linux for Scientific Computing 6 x86_64
- Red Hat Enterprise Linux Server from RHUI 6 x86_64
- Red Hat Enterprise Linux Server from RHUI 6 i386
- Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x
- Red Hat Enterprise Linux Server - Retired Extended Life Cycle Support 6 x86_64
Fixes
- BZ - 620475 - Smart card authentication: 'Require smartcard login' Checkbox gets unchecked.
- BZ - 621632 - Revert button is more like Reproduce button
- BZ - 624159 - authconfig doesn't always add missing settings in one file when it's reading multiple files
- BZ - 639747 - installation allows winbind as auth choice - but system incapable of using winbind!
- BZ - 663882 - authconfig-tui asks for nss-pam-ldapd when sssd is used
- BZ - 674844 - authconfig-tui/gtk does not have option to disable "cache_credentials" and always enables
- BZ - 676333 - RuntimeError: could not open display
CVEs
(none)
References
(none)
Red Hat Enterprise Linux Server 6
SRPM | |
---|---|
authconfig-6.1.12-5.el6.src.rpm | SHA-256: 121df294faa348a589e4571f9b8813f2e725b0e0a51afec0f28efb4dd3462b1a |
x86_64 | |
authconfig-6.1.12-5.el6.x86_64.rpm | SHA-256: 056f7b6a846c22e82b499398396065cf7d34a5818eefa9dc8bd652592725b622 |
authconfig-debuginfo-6.1.12-5.el6.x86_64.rpm | SHA-256: 21408c6965535e4a3e1549ccdc5e939e82f1763770a87efc718b09e01a036ecf |
authconfig-gtk-6.1.12-5.el6.x86_64.rpm | SHA-256: 614d5b45557015c7eeaea64995d71c419f99e0825e98aaf28b0afafe22d1a73c |
i386 | |
authconfig-6.1.12-5.el6.i686.rpm | SHA-256: 4dd94bcfc8e4ea7beba2c285b095f0fc740af6e45d40bdbf0cdbec239cc758ea |
authconfig-debuginfo-6.1.12-5.el6.i686.rpm | SHA-256: 35c1f9512af0a3f6f1d9c17f87ea4118ace217dfa3ddaa3199e2d576f01eb3b6 |
authconfig-gtk-6.1.12-5.el6.i686.rpm | SHA-256: 33aac265b426aa8e4370f44e1b2ea2ef1cd457c1d421825c0a651b74652a7405 |
Red Hat Enterprise Linux Server - Extended Life Cycle Support 6
SRPM | |
---|---|
authconfig-6.1.12-5.el6.src.rpm | SHA-256: 121df294faa348a589e4571f9b8813f2e725b0e0a51afec0f28efb4dd3462b1a |
x86_64 | |
authconfig-6.1.12-5.el6.x86_64.rpm | SHA-256: 056f7b6a846c22e82b499398396065cf7d34a5818eefa9dc8bd652592725b622 |
authconfig-debuginfo-6.1.12-5.el6.x86_64.rpm | SHA-256: 21408c6965535e4a3e1549ccdc5e939e82f1763770a87efc718b09e01a036ecf |
authconfig-gtk-6.1.12-5.el6.x86_64.rpm | SHA-256: 614d5b45557015c7eeaea64995d71c419f99e0825e98aaf28b0afafe22d1a73c |
i386 | |
authconfig-6.1.12-5.el6.i686.rpm | SHA-256: 4dd94bcfc8e4ea7beba2c285b095f0fc740af6e45d40bdbf0cdbec239cc758ea |
authconfig-debuginfo-6.1.12-5.el6.i686.rpm | SHA-256: 35c1f9512af0a3f6f1d9c17f87ea4118ace217dfa3ddaa3199e2d576f01eb3b6 |
authconfig-gtk-6.1.12-5.el6.i686.rpm | SHA-256: 33aac265b426aa8e4370f44e1b2ea2ef1cd457c1d421825c0a651b74652a7405 |
Red Hat Enterprise Linux Workstation 6
SRPM | |
---|---|
authconfig-6.1.12-5.el6.src.rpm | SHA-256: 121df294faa348a589e4571f9b8813f2e725b0e0a51afec0f28efb4dd3462b1a |
x86_64 | |
authconfig-6.1.12-5.el6.x86_64.rpm | SHA-256: 056f7b6a846c22e82b499398396065cf7d34a5818eefa9dc8bd652592725b622 |
authconfig-debuginfo-6.1.12-5.el6.x86_64.rpm | SHA-256: 21408c6965535e4a3e1549ccdc5e939e82f1763770a87efc718b09e01a036ecf |
authconfig-gtk-6.1.12-5.el6.x86_64.rpm | SHA-256: 614d5b45557015c7eeaea64995d71c419f99e0825e98aaf28b0afafe22d1a73c |
i386 | |
authconfig-6.1.12-5.el6.i686.rpm | SHA-256: 4dd94bcfc8e4ea7beba2c285b095f0fc740af6e45d40bdbf0cdbec239cc758ea |
authconfig-debuginfo-6.1.12-5.el6.i686.rpm | SHA-256: 35c1f9512af0a3f6f1d9c17f87ea4118ace217dfa3ddaa3199e2d576f01eb3b6 |
authconfig-gtk-6.1.12-5.el6.i686.rpm | SHA-256: 33aac265b426aa8e4370f44e1b2ea2ef1cd457c1d421825c0a651b74652a7405 |
Red Hat Enterprise Linux Desktop 6
SRPM | |
---|---|
authconfig-6.1.12-5.el6.src.rpm | SHA-256: 121df294faa348a589e4571f9b8813f2e725b0e0a51afec0f28efb4dd3462b1a |
x86_64 | |
authconfig-6.1.12-5.el6.x86_64.rpm | SHA-256: 056f7b6a846c22e82b499398396065cf7d34a5818eefa9dc8bd652592725b622 |
authconfig-debuginfo-6.1.12-5.el6.x86_64.rpm | SHA-256: 21408c6965535e4a3e1549ccdc5e939e82f1763770a87efc718b09e01a036ecf |
authconfig-gtk-6.1.12-5.el6.x86_64.rpm | SHA-256: 614d5b45557015c7eeaea64995d71c419f99e0825e98aaf28b0afafe22d1a73c |
i386 | |
authconfig-6.1.12-5.el6.i686.rpm | SHA-256: 4dd94bcfc8e4ea7beba2c285b095f0fc740af6e45d40bdbf0cdbec239cc758ea |
authconfig-debuginfo-6.1.12-5.el6.i686.rpm | SHA-256: 35c1f9512af0a3f6f1d9c17f87ea4118ace217dfa3ddaa3199e2d576f01eb3b6 |
authconfig-gtk-6.1.12-5.el6.i686.rpm | SHA-256: 33aac265b426aa8e4370f44e1b2ea2ef1cd457c1d421825c0a651b74652a7405 |
Red Hat Enterprise Linux for IBM z Systems 6
SRPM | |
---|---|
authconfig-6.1.12-5.el6.src.rpm | SHA-256: 121df294faa348a589e4571f9b8813f2e725b0e0a51afec0f28efb4dd3462b1a |
s390x | |
authconfig-6.1.12-5.el6.s390x.rpm | SHA-256: fdd651ecf8848b513c67a438166bdd3ece546cf690e3d40e54637de43808ac16 |
authconfig-debuginfo-6.1.12-5.el6.s390x.rpm | SHA-256: fea5900fa6e9ab339df1c710ecd8b9206c3c72fa0fdfba0892f9c98ce83a1dca |
authconfig-gtk-6.1.12-5.el6.s390x.rpm | SHA-256: 20068f1e98315825aee0ca217f2463638a89416227115da3b78adcc631e778ab |
Red Hat Enterprise Linux for Power, big endian 6
SRPM | |
---|---|
authconfig-6.1.12-5.el6.src.rpm | SHA-256: 121df294faa348a589e4571f9b8813f2e725b0e0a51afec0f28efb4dd3462b1a |
ppc64 | |
authconfig-6.1.12-5.el6.ppc64.rpm | SHA-256: 49ab6a3b903e326dd76ea279594882f51c40a9918fe60eff16cb796b2ff37d25 |
authconfig-debuginfo-6.1.12-5.el6.ppc64.rpm | SHA-256: e7032a9726ff7cc3f9d621fb3c240fdbef6bd1c125033ecf8204070337fa435c |
authconfig-gtk-6.1.12-5.el6.ppc64.rpm | SHA-256: 59e0d94c41b1120484c909f850272735c3f5ef12bbdde3d015622de94d6d1978 |
Red Hat Enterprise Linux for Scientific Computing 6
SRPM | |
---|---|
authconfig-6.1.12-5.el6.src.rpm | SHA-256: 121df294faa348a589e4571f9b8813f2e725b0e0a51afec0f28efb4dd3462b1a |
x86_64 | |
authconfig-6.1.12-5.el6.x86_64.rpm | SHA-256: 056f7b6a846c22e82b499398396065cf7d34a5818eefa9dc8bd652592725b622 |
authconfig-debuginfo-6.1.12-5.el6.x86_64.rpm | SHA-256: 21408c6965535e4a3e1549ccdc5e939e82f1763770a87efc718b09e01a036ecf |
authconfig-debuginfo-6.1.12-5.el6.x86_64.rpm | SHA-256: 21408c6965535e4a3e1549ccdc5e939e82f1763770a87efc718b09e01a036ecf |
authconfig-gtk-6.1.12-5.el6.x86_64.rpm | SHA-256: 614d5b45557015c7eeaea64995d71c419f99e0825e98aaf28b0afafe22d1a73c |
Red Hat Enterprise Linux Server from RHUI 6
SRPM | |
---|---|
authconfig-6.1.12-5.el6.src.rpm | SHA-256: 121df294faa348a589e4571f9b8813f2e725b0e0a51afec0f28efb4dd3462b1a |
x86_64 | |
authconfig-6.1.12-5.el6.x86_64.rpm | SHA-256: 056f7b6a846c22e82b499398396065cf7d34a5818eefa9dc8bd652592725b622 |
authconfig-debuginfo-6.1.12-5.el6.x86_64.rpm | SHA-256: 21408c6965535e4a3e1549ccdc5e939e82f1763770a87efc718b09e01a036ecf |
authconfig-gtk-6.1.12-5.el6.x86_64.rpm | SHA-256: 614d5b45557015c7eeaea64995d71c419f99e0825e98aaf28b0afafe22d1a73c |
i386 | |
authconfig-6.1.12-5.el6.i686.rpm | SHA-256: 4dd94bcfc8e4ea7beba2c285b095f0fc740af6e45d40bdbf0cdbec239cc758ea |
authconfig-debuginfo-6.1.12-5.el6.i686.rpm | SHA-256: 35c1f9512af0a3f6f1d9c17f87ea4118ace217dfa3ddaa3199e2d576f01eb3b6 |
authconfig-gtk-6.1.12-5.el6.i686.rpm | SHA-256: 33aac265b426aa8e4370f44e1b2ea2ef1cd457c1d421825c0a651b74652a7405 |
Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6
SRPM | |
---|---|
authconfig-6.1.12-5.el6.src.rpm | SHA-256: 121df294faa348a589e4571f9b8813f2e725b0e0a51afec0f28efb4dd3462b1a |
s390x | |
authconfig-6.1.12-5.el6.s390x.rpm | SHA-256: fdd651ecf8848b513c67a438166bdd3ece546cf690e3d40e54637de43808ac16 |
authconfig-debuginfo-6.1.12-5.el6.s390x.rpm | SHA-256: fea5900fa6e9ab339df1c710ecd8b9206c3c72fa0fdfba0892f9c98ce83a1dca |
authconfig-gtk-6.1.12-5.el6.s390x.rpm | SHA-256: 20068f1e98315825aee0ca217f2463638a89416227115da3b78adcc631e778ab |
Red Hat Enterprise Linux Server - Retired Extended Life Cycle Support 6
SRPM | |
---|---|
authconfig-6.1.12-5.el6.src.rpm | SHA-256: 121df294faa348a589e4571f9b8813f2e725b0e0a51afec0f28efb4dd3462b1a |
x86_64 | |
authconfig-6.1.12-5.el6.x86_64.rpm | SHA-256: 056f7b6a846c22e82b499398396065cf7d34a5818eefa9dc8bd652592725b622 |
authconfig-debuginfo-6.1.12-5.el6.x86_64.rpm | SHA-256: 21408c6965535e4a3e1549ccdc5e939e82f1763770a87efc718b09e01a036ecf |
authconfig-gtk-6.1.12-5.el6.x86_64.rpm | SHA-256: 614d5b45557015c7eeaea64995d71c419f99e0825e98aaf28b0afafe22d1a73c |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.