- Issued:
- 2011-12-06
- Updated:
- 2011-12-06
RHBA-2011:1715 - Bug Fix Advisory
Synopsis
bind-dyndb-ldap bug fix update
Type/Severity
Bug Fix Advisory
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory.
Topic
An updated bind-dyndb-ldap package that fixes several bugs is now available for
Red Hat Enterprise Linux 6.
Description
The dynamic LDAP (Lightweight Directory Access Protocol) back end is a plug-in
for BIND that provides an LDAP database back-end capabilities. It features
support for dynamic updates and internal caching to lift the load off of the
LDAP server.
This update fixes the following bugs:
- Previously, the bind-dyndb-ldap plug-in could faile to honor the selected
authentication method because it did not call the ldap_bind() function on
reconnection. Consequently, the plug-in connected to the LDAP server
anonymously. With this update, the ldap_bind() function is executed on
reconnection and the plug-in uses the correct authentication method in the
described scenario. (BZ#742368)
- The bind-dyndb-ldap plug-in failed to load new zones from the LDAP server
runtime. This update adds the zone_refresh parameter to the plug-in which
controls how often the zone check is performed. (BZ#707255)
- The bind-dyndb-ldap plug-in could fail to connect to the LDAP server. This
happened when the LDAP server was using localhost and FreeIPA installation was
using a name different from the machine hostname. This update adds to the
plug-in the ldap_hostname option, which can be used to set the correct LDAP
server hostname. (BZ#745045)
- The "named" process could have remained unresponsive due to a race condition
in the bind-dyndb-ldap plug-in. With this update, the race condition has been
resolved and the problem no longer occurs. (BZ#727856)
All users of bind-dyndb-ldap are advised to upgrade to this updated package,
which fixes these bugs.
Solution
Before applying this update, make sure all previously-released errata
relevant to your system have been applied.
This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259
Affected Products
- Red Hat Enterprise Linux Server 6 x86_64
- Red Hat Enterprise Linux Server 6 i386
- Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
- Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
- Red Hat Enterprise Linux Workstation 6 x86_64
- Red Hat Enterprise Linux Workstation 6 i386
- Red Hat Enterprise Linux for IBM z Systems 6 s390x
- Red Hat Enterprise Linux for Power, big endian 6 ppc64
- Red Hat Enterprise Linux Server from RHUI 6 x86_64
- Red Hat Enterprise Linux Server from RHUI 6 i386
- Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x
- Red Hat Enterprise Linux Server - Retired Extended Life Cycle Support 6 x86_64
Fixes
- BZ - 667729 - Allow specifying query and transfer policy settings for a zone
- BZ - 707255 - Add support for loading new zones from LDAP
- BZ - 727856 - bind-dyndb-ldap: race condition in semaphore_wait() function
- BZ - 742368 - Sometimes the plugin reconnects anonymously to ldap
CVEs
(none)
References
(none)
Red Hat Enterprise Linux Server 6
SRPM | |
---|---|
bind-dyndb-ldap-0.2.0-7.el6.src.rpm | SHA-256: 3212cf6ffe436be71a63f5179704d987ea1dbd38deaf322cddd4d381c7ea577c |
x86_64 | |
bind-dyndb-ldap-0.2.0-7.el6.x86_64.rpm | SHA-256: 93926af4f94953fd67ebe6179e763f4f21f57a5a2180820193fb331b5d633b74 |
bind-dyndb-ldap-debuginfo-0.2.0-7.el6.x86_64.rpm | SHA-256: 174e8d1b753d0dc14270fcf3ac6374f0fa525af996f3c79b227a230cef631cf6 |
i386 | |
bind-dyndb-ldap-0.2.0-7.el6.i686.rpm | SHA-256: fa05af4bcc2215f39a9ba9eed7a7bbd3ce3fe0d07192f5ff2c8d6442d77740fd |
bind-dyndb-ldap-debuginfo-0.2.0-7.el6.i686.rpm | SHA-256: 735d5124143fe6927e70afdb4302d927b621d5aac0abcd1a5f1ce213db3a7b02 |
Red Hat Enterprise Linux Server from RHUI 6
SRPM | |
---|---|
bind-dyndb-ldap-0.2.0-7.el6.src.rpm | SHA-256: 3212cf6ffe436be71a63f5179704d987ea1dbd38deaf322cddd4d381c7ea577c |
x86_64 | |
bind-dyndb-ldap-0.2.0-7.el6.x86_64.rpm | SHA-256: 93926af4f94953fd67ebe6179e763f4f21f57a5a2180820193fb331b5d633b74 |
bind-dyndb-ldap-debuginfo-0.2.0-7.el6.x86_64.rpm | SHA-256: 174e8d1b753d0dc14270fcf3ac6374f0fa525af996f3c79b227a230cef631cf6 |
i386 | |
bind-dyndb-ldap-0.2.0-7.el6.i686.rpm | SHA-256: fa05af4bcc2215f39a9ba9eed7a7bbd3ce3fe0d07192f5ff2c8d6442d77740fd |
bind-dyndb-ldap-debuginfo-0.2.0-7.el6.i686.rpm | SHA-256: 735d5124143fe6927e70afdb4302d927b621d5aac0abcd1a5f1ce213db3a7b02 |
Red Hat Enterprise Linux Server - Extended Life Cycle Support 6
SRPM | |
---|---|
bind-dyndb-ldap-0.2.0-7.el6.src.rpm | SHA-256: 3212cf6ffe436be71a63f5179704d987ea1dbd38deaf322cddd4d381c7ea577c |
x86_64 | |
bind-dyndb-ldap-0.2.0-7.el6.x86_64.rpm | SHA-256: 93926af4f94953fd67ebe6179e763f4f21f57a5a2180820193fb331b5d633b74 |
bind-dyndb-ldap-debuginfo-0.2.0-7.el6.x86_64.rpm | SHA-256: 174e8d1b753d0dc14270fcf3ac6374f0fa525af996f3c79b227a230cef631cf6 |
i386 | |
bind-dyndb-ldap-0.2.0-7.el6.i686.rpm | SHA-256: fa05af4bcc2215f39a9ba9eed7a7bbd3ce3fe0d07192f5ff2c8d6442d77740fd |
bind-dyndb-ldap-debuginfo-0.2.0-7.el6.i686.rpm | SHA-256: 735d5124143fe6927e70afdb4302d927b621d5aac0abcd1a5f1ce213db3a7b02 |
Red Hat Enterprise Linux Workstation 6
SRPM | |
---|---|
bind-dyndb-ldap-0.2.0-7.el6.src.rpm | SHA-256: 3212cf6ffe436be71a63f5179704d987ea1dbd38deaf322cddd4d381c7ea577c |
x86_64 | |
bind-dyndb-ldap-0.2.0-7.el6.x86_64.rpm | SHA-256: 93926af4f94953fd67ebe6179e763f4f21f57a5a2180820193fb331b5d633b74 |
bind-dyndb-ldap-debuginfo-0.2.0-7.el6.x86_64.rpm | SHA-256: 174e8d1b753d0dc14270fcf3ac6374f0fa525af996f3c79b227a230cef631cf6 |
i386 | |
bind-dyndb-ldap-0.2.0-7.el6.i686.rpm | SHA-256: fa05af4bcc2215f39a9ba9eed7a7bbd3ce3fe0d07192f5ff2c8d6442d77740fd |
bind-dyndb-ldap-debuginfo-0.2.0-7.el6.i686.rpm | SHA-256: 735d5124143fe6927e70afdb4302d927b621d5aac0abcd1a5f1ce213db3a7b02 |
Red Hat Enterprise Linux for IBM z Systems 6
SRPM | |
---|---|
bind-dyndb-ldap-0.2.0-7.el6.src.rpm | SHA-256: 3212cf6ffe436be71a63f5179704d987ea1dbd38deaf322cddd4d381c7ea577c |
s390x | |
bind-dyndb-ldap-0.2.0-7.el6.s390x.rpm | SHA-256: fb40f834c6154143ffc8da03b701a844da9031d5a5c47b11ca08b0376bcdbb7d |
bind-dyndb-ldap-debuginfo-0.2.0-7.el6.s390x.rpm | SHA-256: 43e5a52e97de8318791930bac917bf5899c8c13f789c4a2b96fa5fe1fb7ef7ad |
Red Hat Enterprise Linux for Power, big endian 6
SRPM | |
---|---|
bind-dyndb-ldap-0.2.0-7.el6.src.rpm | SHA-256: 3212cf6ffe436be71a63f5179704d987ea1dbd38deaf322cddd4d381c7ea577c |
ppc64 | |
bind-dyndb-ldap-0.2.0-7.el6.ppc64.rpm | SHA-256: eaa9e6efe3150ae624ee057520424b312ea1ac6817d245390c6406f8d585c311 |
bind-dyndb-ldap-debuginfo-0.2.0-7.el6.ppc64.rpm | SHA-256: a802776c85b66d95c001ea6ff757ff5ee54180f5eb0560a74bd87fcbefe32a3d |
Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6
SRPM | |
---|---|
bind-dyndb-ldap-0.2.0-7.el6.src.rpm | SHA-256: 3212cf6ffe436be71a63f5179704d987ea1dbd38deaf322cddd4d381c7ea577c |
s390x | |
bind-dyndb-ldap-0.2.0-7.el6.s390x.rpm | SHA-256: fb40f834c6154143ffc8da03b701a844da9031d5a5c47b11ca08b0376bcdbb7d |
bind-dyndb-ldap-debuginfo-0.2.0-7.el6.s390x.rpm | SHA-256: 43e5a52e97de8318791930bac917bf5899c8c13f789c4a2b96fa5fe1fb7ef7ad |
Red Hat Enterprise Linux Server - Retired Extended Life Cycle Support 6
SRPM | |
---|---|
bind-dyndb-ldap-0.2.0-7.el6.src.rpm | SHA-256: 3212cf6ffe436be71a63f5179704d987ea1dbd38deaf322cddd4d381c7ea577c |
x86_64 | |
bind-dyndb-ldap-0.2.0-7.el6.x86_64.rpm | SHA-256: 93926af4f94953fd67ebe6179e763f4f21f57a5a2180820193fb331b5d633b74 |
bind-dyndb-ldap-debuginfo-0.2.0-7.el6.x86_64.rpm | SHA-256: 174e8d1b753d0dc14270fcf3ac6374f0fa525af996f3c79b227a230cef631cf6 |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.