openldap bug fix and enhancement update

Advisory:	RHBA-2012:0155-1
Type:	Bug Fix Advisory
Severity:	N/A
Issued on:	2012-02-20
Last updated on:	2012-02-20
Affected Products:	RHEL Desktop Workstation (v. 5 client) Red Hat Enterprise Linux (v. 5 server) Red Hat Enterprise Linux Desktop (v. 5 client)

Details

Updated openldap packages that fix several bugs and add an enhancement are now
available for Red Hat Enterprise Linux 5.

OpenLDAP is an open source suite of LDAP (Lightweight Directory Access Protocol)
applications and development tools. LDAP is a set of protocols for accessing
directory services (usually phone book style information, but other information
is possible) over the Internet, similar to the way DNS (Domain Name System)
information is propagated over the Internet. The openldap package contains
configuration files, libraries, and documentation for OpenLDAP.

These updated openldap packages include numerous bug fixes and enhancements.
Space precludes documenting all of these changes in this advisory. Users are
directed to the Red Hat Enterprise Linux 5.8 Technical Notes for information on
the most significant of these changes:

https://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/5/html/5.8_Technical_Notes/openldap.html#RHBA-2012-0155

All users of openldap are advised to upgrade to these updated packages, which
provide numerous bug fixes and enhancements.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259

Updated packages

RHEL Desktop Workstation (v. 5 client)

SRPMS:
openldap-2.3.43-25.el5.src.rpm File outdated by: RHBA-2012:1071	`MD5: 87561e9248cfeb4f7d244040e5873a89 SHA-256: c80131c3a9002e44a10d9a8869b3a7aa17641f73308c8c6ba6fa71060db1ae9e`

IA-32:
openldap-devel-2.3.43-25.el5.i386.rpm File outdated by: RHBA-2012:1071	`MD5: a2486965b6218d71ae3380c59f1221f0 SHA-256: 8a650d6847197400b57a1c486912286c5326054a64edfc631c94516ce65e3215`
openldap-servers-2.3.43-25.el5.i386.rpm File outdated by: RHBA-2012:1071	`MD5: bd5c8405211baea84614d635ec7ba0d4 SHA-256: 829037ca62d4f4fb94049798cdd8fb8b2d03f612baadc09e526922e17e488154`
openldap-servers-overlays-2.3.43-25.el5.i386.rpm File outdated by: RHBA-2012:1071	`MD5: 64a14b5fe892a18a2075c89b6d857260 SHA-256: 6632d88d138fcccebc2b3af98df92d4556bb11dfeef338030bd4046be5ed34c6`
openldap-servers-sql-2.3.43-25.el5.i386.rpm File outdated by: RHBA-2012:1071	`MD5: 18613ab1b03b894fd45ae1cb80ade6e3 SHA-256: ae368e294102d4615a13f115442e8e03f07de72be3314748ec2247fbd5e623af`

x86_64:
openldap-devel-2.3.43-25.el5.i386.rpm File outdated by: RHBA-2012:1071	`MD5: a2486965b6218d71ae3380c59f1221f0 SHA-256: 8a650d6847197400b57a1c486912286c5326054a64edfc631c94516ce65e3215`
openldap-devel-2.3.43-25.el5.x86_64.rpm File outdated by: RHBA-2012:1071	`MD5: 61b9bc28bc3523256454a573db59b8bc SHA-256: f6ee1bc258aac673701c69ad761e62041c0ff03e6c1dd068534d61a64102360c`
openldap-servers-2.3.43-25.el5.x86_64.rpm File outdated by: RHBA-2012:1071	`MD5: 7ea0ec89ce74bd154511467c5b0d25e7 SHA-256: fa441f2b5ea2adb33513503f2ba9af22eacdf2e65d10d86aac3c09403b395189`
openldap-servers-overlays-2.3.43-25.el5.x86_64.rpm File outdated by: RHBA-2012:1071	`MD5: d82d1b9925bc86b208b5a3abc41ea8f2 SHA-256: afc88d3d03b0037c3024bbdfa0908718a7b28a5c6a12ae6f13e61ebd030bba92`
openldap-servers-sql-2.3.43-25.el5.x86_64.rpm File outdated by: RHBA-2012:1071	`MD5: 736a5455fb43ad05085b335e938a097c SHA-256: 50211df6d713ccaa1a025c20bad49b8c2449ee6494d389980cfdfa6ae772b780`

Red Hat Enterprise Linux (v. 5 server)

SRPMS:
openldap-2.3.43-25.el5.src.rpm File outdated by: RHBA-2012:1071	`MD5: 87561e9248cfeb4f7d244040e5873a89 SHA-256: c80131c3a9002e44a10d9a8869b3a7aa17641f73308c8c6ba6fa71060db1ae9e`

IA-32:
compat-openldap-2.3.43_2.2.29-25.el5.i386.rpm File outdated by: RHBA-2012:1071	`MD5: 892c534bb1a026c3ad6ac668d5576006 SHA-256: 72a0f672f16d1f3bd22f159a140b4f2bd9dcf24e424b212044f00a5e4bdc80f6`
openldap-2.3.43-25.el5.i386.rpm File outdated by: RHBA-2012:1071	`MD5: 68257c8fccfe780e029ff44fb7a45e23 SHA-256: e2e5ac1fee439ab320c0179cba5b20a3593c709ea55f18df0be89be147920ad3`
openldap-clients-2.3.43-25.el5.i386.rpm File outdated by: RHBA-2012:1071	`MD5: f96d0b24bacb601b1da3ffe15d198252 SHA-256: a99e93f0a0426f3e9618b3da75e88d0d9ec3e60efb0a8fa3eb53e8c19fcb292e`
openldap-devel-2.3.43-25.el5.i386.rpm File outdated by: RHBA-2012:1071	`MD5: a2486965b6218d71ae3380c59f1221f0 SHA-256: 8a650d6847197400b57a1c486912286c5326054a64edfc631c94516ce65e3215`
openldap-servers-2.3.43-25.el5.i386.rpm File outdated by: RHBA-2012:1071	`MD5: bd5c8405211baea84614d635ec7ba0d4 SHA-256: 829037ca62d4f4fb94049798cdd8fb8b2d03f612baadc09e526922e17e488154`
openldap-servers-overlays-2.3.43-25.el5.i386.rpm File outdated by: RHBA-2012:1071	`MD5: 64a14b5fe892a18a2075c89b6d857260 SHA-256: 6632d88d138fcccebc2b3af98df92d4556bb11dfeef338030bd4046be5ed34c6`
openldap-servers-sql-2.3.43-25.el5.i386.rpm File outdated by: RHBA-2012:1071	`MD5: 18613ab1b03b894fd45ae1cb80ade6e3 SHA-256: ae368e294102d4615a13f115442e8e03f07de72be3314748ec2247fbd5e623af`

IA-64:
compat-openldap-2.3.43_2.2.29-25.el5.i386.rpm File outdated by: RHBA-2012:1071	`MD5: 892c534bb1a026c3ad6ac668d5576006 SHA-256: 72a0f672f16d1f3bd22f159a140b4f2bd9dcf24e424b212044f00a5e4bdc80f6`
compat-openldap-2.3.43_2.2.29-25.el5.ia64.rpm File outdated by: RHBA-2012:1071	`MD5: c3a1e1a32fcef0d35cc19812046f81c6 SHA-256: e78cd3e893bce3529988d14679689bdf87d134fb6c26631004942ab470f67cc6`
openldap-2.3.43-25.el5.i386.rpm File outdated by: RHBA-2012:1071	`MD5: 68257c8fccfe780e029ff44fb7a45e23 SHA-256: e2e5ac1fee439ab320c0179cba5b20a3593c709ea55f18df0be89be147920ad3`
openldap-2.3.43-25.el5.ia64.rpm File outdated by: RHBA-2012:1071	`MD5: b3ca509644e3a59e87d15f56f20effb5 SHA-256: fcd0103691edb687a32eb656cd7dfac5880b1c7b6f6162a6364575f860d1e96e`
openldap-clients-2.3.43-25.el5.ia64.rpm File outdated by: RHBA-2012:1071	`MD5: 03b77d65653e7795f5f175a5aeb1c397 SHA-256: e3e7389dc37c4a1148a583433cc7fc25ce965c5ca2401c07e638691b241dba81`
openldap-devel-2.3.43-25.el5.ia64.rpm File outdated by: RHBA-2012:1071	`MD5: 083428ae4a094b33ec52ba09a8601539 SHA-256: 3d5c8667696242e031acaac7017ae03557ba98c092a97ca871ca8f463dee0f55`
openldap-servers-2.3.43-25.el5.ia64.rpm File outdated by: RHBA-2012:1071	`MD5: cbe3ee5243aa9a91762da4de30f45dcb SHA-256: e0cd5475b469b0fca1c4a2ca8b1b26a31f6f67886b252eceae7898f85cc42304`
openldap-servers-overlays-2.3.43-25.el5.ia64.rpm File outdated by: RHBA-2012:1071	`MD5: 38fedaf56a645c2ad251ca3ef39ff89a SHA-256: 17f5c10165227117bd7885f7406b46ef8f8b47060a5609513c018def8d2080c1`
openldap-servers-sql-2.3.43-25.el5.ia64.rpm File outdated by: RHBA-2012:1071	`MD5: ec130e841b8860cc539e83eda15a127c SHA-256: f47a92095fce90dde0fab89b970f86ffb41e3bb51ee6c637ea777e4ac7a5e55a`

PPC:
compat-openldap-2.3.43_2.2.29-25.el5.ppc.rpm File outdated by: RHBA-2012:1071	`MD5: 1250bef05e79af34c7fe8bea8a6b77ed SHA-256: e7cd373f4fe541f2f1ef61a7124d812c7061774e19e4840c9fde9782a2b88e37`
compat-openldap-2.3.43_2.2.29-25.el5.ppc64.rpm File outdated by: RHBA-2012:1071	`MD5: 6a0ca76468a4914c8d0a41ff2d11c204 SHA-256: 40ea1f3a5f60dfec7b1705943eef467bf108c5bf585827cd95a29dee6eb18634`
openldap-2.3.43-25.el5.ppc.rpm File outdated by: RHBA-2012:1071	`MD5: de14b9bafb3e264aea6c05c69e8831d9 SHA-256: 39a696cb01fbf518ec1a1ddc8e06ac5937cf58add021c85d5e7fc60ecc2c74d6`
openldap-2.3.43-25.el5.ppc64.rpm File outdated by: RHBA-2012:1071	`MD5: d216da708b5b48e580349b07dc2a005c SHA-256: e5e664e845cdbaff3480eb815c2be2714b0348c333a2461b371214bec9a64cea`
openldap-clients-2.3.43-25.el5.ppc.rpm File outdated by: RHBA-2012:1071	`MD5: 69aa40cfa63a30f685258dd79f961e2e SHA-256: 0b0abe2500b427eee5dd6d440d962b7f08b355ecd21641074e2eb705b6f383c9`
openldap-devel-2.3.43-25.el5.ppc.rpm File outdated by: RHBA-2012:1071	`MD5: 62b6e169a9996d3e1fc45fafb9ad78c7 SHA-256: 859db9c4ea312dc42afe644c8f14c759cf212f1573370eb555f0e433337b5ce2`
openldap-devel-2.3.43-25.el5.ppc64.rpm File outdated by: RHBA-2012:1071	`MD5: cf625a7cd278619e256bdfdc14b88dc6 SHA-256: 769071b3568fb9efe1bcd279442af151a02687090ad2995cb9f9b13ebd65f18a`
openldap-servers-2.3.43-25.el5.ppc.rpm File outdated by: RHBA-2012:1071	`MD5: ee7f71ea8040d054f2056c7081166f87 SHA-256: 3a106ccbfb865a65f48a5cc51212986a1033ddf392dd0302a99135011f728819`
openldap-servers-overlays-2.3.43-25.el5.ppc.rpm File outdated by: RHBA-2012:1071	`MD5: 2f42dc89054406717cee31b645c46544 SHA-256: dc42b48f357f7b319e85a2cd8fb2e627d290a2777917dab011c21bcdc4337d73`
openldap-servers-sql-2.3.43-25.el5.ppc.rpm File outdated by: RHBA-2012:1071	`MD5: 94ed20d0954f030335fd43f686f35fd1 SHA-256: 8e2dd8cca8d6d13d169f3d8e915337d121f819714fef22e1c345d3b34351b167`

s390x:
compat-openldap-2.3.43_2.2.29-25.el5.s390.rpm File outdated by: RHBA-2012:1071	`MD5: f206003a1f77245120966d6a92393d56 SHA-256: 565484db2d7d4b9eccfe0ae76856c70716da5a3def4d49b259f3b9546e512afa`
compat-openldap-2.3.43_2.2.29-25.el5.s390x.rpm File outdated by: RHBA-2012:1071	`MD5: 0f5e47123ebe4e3227a712dcae756583 SHA-256: 11759a3498c448f09003156eca744fc48030b426e3e604d4906c5c9faef2f8fc`
openldap-2.3.43-25.el5.s390.rpm File outdated by: RHBA-2012:1071	`MD5: 9789d1e6dd0cc7bcc10b94e05c0476e0 SHA-256: f5e5cec3cb9f2c40ca252ca1a6ceea7104efde38dfef630667a369229d102ac5`
openldap-2.3.43-25.el5.s390x.rpm File outdated by: RHBA-2012:1071	`MD5: 2a04af3cad2ebf32606490f382ae943c SHA-256: 6bb422efcbd7dadebcb14c0ea56ec0e7306a76a615591c9df697fde86d586d4c`
openldap-clients-2.3.43-25.el5.s390x.rpm File outdated by: RHBA-2012:1071	`MD5: 38693de107be3ed91842de2d1dbc2570 SHA-256: 0301a293878ddf34a3273501b108b4e0da76d9df568fddea682dfc7a88628300`
openldap-devel-2.3.43-25.el5.s390.rpm File outdated by: RHBA-2012:1071	`MD5: 4b1c97acb5688f45828c877756475c48 SHA-256: c76ec642759d1b7bbc9914fb1b0bdbbd7e4229648df6f24fce8fa73dc9a11e72`
openldap-devel-2.3.43-25.el5.s390x.rpm File outdated by: RHBA-2012:1071	`MD5: 4acc621c24add680e7754ab1aeb166a9 SHA-256: f33b06644dec99ecf009080f715c624a3c430a874da7cc3429b48fd5f51bc88b`
openldap-servers-2.3.43-25.el5.s390x.rpm File outdated by: RHBA-2012:1071	`MD5: 847da9f51da3e893a61e019178551c2c SHA-256: bbdcf6223c11a9256cfb71cbf24d9047db4b0987d113327e7a0c0dc8d633794a`
openldap-servers-overlays-2.3.43-25.el5.s390x.rpm File outdated by: RHBA-2012:1071	`MD5: 07630950e754859b1ae61cf66922afd1 SHA-256: 174f183961060f29be6a85afc809e126922e881aeb90b475f2eebac04890343c`
openldap-servers-sql-2.3.43-25.el5.s390x.rpm File outdated by: RHBA-2012:1071	`MD5: 1d6e23a96a8b5612fb9615aa4b81defb SHA-256: 3be6d1604e5c2fffbb7092831f3e869047c4d7d3c5d480f73a2ffd75b84fe67d`

x86_64:
compat-openldap-2.3.43_2.2.29-25.el5.i386.rpm File outdated by: RHBA-2012:1071	`MD5: 892c534bb1a026c3ad6ac668d5576006 SHA-256: 72a0f672f16d1f3bd22f159a140b4f2bd9dcf24e424b212044f00a5e4bdc80f6`
compat-openldap-2.3.43_2.2.29-25.el5.x86_64.rpm File outdated by: RHBA-2012:1071	`MD5: 8f2966184019e0d3124f2b5472b3fd04 SHA-256: d44a390c04afd23761652fd5d8216d50ad52b11c52db2387aa339137814e3c88`
openldap-2.3.43-25.el5.i386.rpm File outdated by: RHBA-2012:1071	`MD5: 68257c8fccfe780e029ff44fb7a45e23 SHA-256: e2e5ac1fee439ab320c0179cba5b20a3593c709ea55f18df0be89be147920ad3`
openldap-2.3.43-25.el5.x86_64.rpm File outdated by: RHBA-2012:1071	`MD5: 3dc73bb695ec8c7e35e8145d7c64fb97 SHA-256: c0af0916d6dbba6ab6c55ed07e1faedf5914deff4c99875d20486110ee5f1ca0`
openldap-clients-2.3.43-25.el5.x86_64.rpm File outdated by: RHBA-2012:1071	`MD5: d99256644cb2c1e90fa538531f29c14a SHA-256: 242f702106c9e75e65f664132ad9e68a3d132556b201ff9ce361afe343793810`
openldap-devel-2.3.43-25.el5.i386.rpm File outdated by: RHBA-2012:1071	`MD5: a2486965b6218d71ae3380c59f1221f0 SHA-256: 8a650d6847197400b57a1c486912286c5326054a64edfc631c94516ce65e3215`
openldap-devel-2.3.43-25.el5.x86_64.rpm File outdated by: RHBA-2012:1071	`MD5: 61b9bc28bc3523256454a573db59b8bc SHA-256: f6ee1bc258aac673701c69ad761e62041c0ff03e6c1dd068534d61a64102360c`
openldap-servers-2.3.43-25.el5.x86_64.rpm File outdated by: RHBA-2012:1071	`MD5: 7ea0ec89ce74bd154511467c5b0d25e7 SHA-256: fa441f2b5ea2adb33513503f2ba9af22eacdf2e65d10d86aac3c09403b395189`
openldap-servers-overlays-2.3.43-25.el5.x86_64.rpm File outdated by: RHBA-2012:1071	`MD5: d82d1b9925bc86b208b5a3abc41ea8f2 SHA-256: afc88d3d03b0037c3024bbdfa0908718a7b28a5c6a12ae6f13e61ebd030bba92`
openldap-servers-sql-2.3.43-25.el5.x86_64.rpm File outdated by: RHBA-2012:1071	`MD5: 736a5455fb43ad05085b335e938a097c SHA-256: 50211df6d713ccaa1a025c20bad49b8c2449ee6494d389980cfdfa6ae772b780`

Red Hat Enterprise Linux Desktop (v. 5 client)

SRPMS:
openldap-2.3.43-25.el5.src.rpm File outdated by: RHBA-2012:1071	`MD5: 87561e9248cfeb4f7d244040e5873a89 SHA-256: c80131c3a9002e44a10d9a8869b3a7aa17641f73308c8c6ba6fa71060db1ae9e`

IA-32:
compat-openldap-2.3.43_2.2.29-25.el5.i386.rpm File outdated by: RHBA-2012:1071	`MD5: 892c534bb1a026c3ad6ac668d5576006 SHA-256: 72a0f672f16d1f3bd22f159a140b4f2bd9dcf24e424b212044f00a5e4bdc80f6`
openldap-2.3.43-25.el5.i386.rpm File outdated by: RHBA-2012:1071	`MD5: 68257c8fccfe780e029ff44fb7a45e23 SHA-256: e2e5ac1fee439ab320c0179cba5b20a3593c709ea55f18df0be89be147920ad3`
openldap-clients-2.3.43-25.el5.i386.rpm File outdated by: RHBA-2012:1071	`MD5: f96d0b24bacb601b1da3ffe15d198252 SHA-256: a99e93f0a0426f3e9618b3da75e88d0d9ec3e60efb0a8fa3eb53e8c19fcb292e`

x86_64:
compat-openldap-2.3.43_2.2.29-25.el5.i386.rpm File outdated by: RHBA-2012:1071	`MD5: 892c534bb1a026c3ad6ac668d5576006 SHA-256: 72a0f672f16d1f3bd22f159a140b4f2bd9dcf24e424b212044f00a5e4bdc80f6`
compat-openldap-2.3.43_2.2.29-25.el5.x86_64.rpm File outdated by: RHBA-2012:1071	`MD5: 8f2966184019e0d3124f2b5472b3fd04 SHA-256: d44a390c04afd23761652fd5d8216d50ad52b11c52db2387aa339137814e3c88`
openldap-2.3.43-25.el5.i386.rpm File outdated by: RHBA-2012:1071	`MD5: 68257c8fccfe780e029ff44fb7a45e23 SHA-256: e2e5ac1fee439ab320c0179cba5b20a3593c709ea55f18df0be89be147920ad3`
openldap-2.3.43-25.el5.x86_64.rpm File outdated by: RHBA-2012:1071	`MD5: 3dc73bb695ec8c7e35e8145d7c64fb97 SHA-256: c0af0916d6dbba6ab6c55ed07e1faedf5914deff4c99875d20486110ee5f1ca0`
openldap-clients-2.3.43-25.el5.x86_64.rpm File outdated by: RHBA-2012:1071	`MD5: d99256644cb2c1e90fa538531f29c14a SHA-256: 242f702106c9e75e65f664132ad9e68a3d132556b201ff9ce361afe343793810`

(The unlinked packages above are only available from the Red Hat Network)

Bugs fixed (see bugzilla for more information)

563148 - Migration: migrate_all_offline.sh can't handle duplicate entries
591419 - OpenLDAP connection freeze when using TLS
604092 - Init script is working wrong if database recovery is needed
609722 - libldap ignores a directory of CA certificates if any of them can't be read
655133 - function ldap_init_fd() not provided by openldap
665951 - OpenLDAP slapd(8) with ppolicy crash while replace-deleting userPassword attribute
684630 - OpenLDAP packages lack debug data
699652 - Document preferred use of TLS_CACERT instead of TLS_CACERTDIR to specify Certificate Authorities
732381 - strict aliasing warnings during package build
738768 - initscript marked as %config incorrectly

References

https://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/5/html/5.8_Technical_Notes/openldap.html#RHBA-2012-0155

These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from:
https://www.redhat.com/security/team/key/#package