Bug Fix Advisory ipa bug fix and enhancement update

Advisory: RHBA-2013:1651-1
Type: Bug Fix Advisory
Severity: N/A
Issued on: 2013-11-20
Last updated on: 2013-11-20
Affected Products: Red Hat Enterprise Linux Desktop (v. 6)
Red Hat Enterprise Linux HPC Node (v. 6)
Red Hat Enterprise Linux Server (v. 6)
Red Hat Enterprise Linux Workstation (v. 6)

Details

Updated ipa packages that fix several bugs and add two enhancements are now
available for Red Hat Enterprise Linux 6.

Red Hat Identity Management is a centralized authentication, identity management
and authorization solution for both traditional and cloud-based enterprise
environments. It integrates components of the Red Hat Directory Server, MIT
Kerberos, Red Hat Certificate System, NTP, and DNS. It provides web browser and
command-line interfaces. Its administration tools allow an administrator to
quickly install, set up, and administer a group of domain controllers to meet
the authentication and identity management requirements of large-scale Linux and
UNIX deployments.

These updated ipa packages include numerous bug fixes and enhancements. Space
precludes documenting all of these changes in this advisory. Users are directed
to the Red Hat Enterprise Linux 6.5 Technical Notes for information on the most
significant of these changes:

https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/6.5_Technical_Notes/ipa.html#RHBA-2013-1651

Users of ipa are advised to upgrade to these updated packages, which fix these
bugs and add these enhancements.


Solution

Before applying this update, make sure all previously released errata relevant
to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the Red
Hat Network to apply this update are available at
https://access.redhat.com/site/articles/11258

Updated packages

Red Hat Enterprise Linux Desktop (v. 6)

SRPMS:
ipa-3.0.0-37.el6.src.rpm
File outdated by:  RHBA-2017:0781
    MD5: e7929ba821beb9bf08aca967a8900d2d
SHA-256: b57e336998b5bc963538904796a0a73d6a5c21f5c25412f664f1e5064d0ea98f
 
IA-32:
ipa-admintools-3.0.0-37.el6.i686.rpm
File outdated by:  RHBA-2017:0781
    MD5: 0378a6625a66ae0b39a81f0cf4342d13
SHA-256: e9bc6ae9b39328adb124bfa4ab549b2c2848a54dfb8a567ebc7a9855b0e469cc
ipa-client-3.0.0-37.el6.i686.rpm
File outdated by:  RHBA-2017:0781
    MD5: 33a3daa07ed72d5bfc8019519116dc5b
SHA-256: ed3dc61216b4bfd09179ba68f2450d06a686c411d582b8760c6f51b85fe0bcf1
ipa-debuginfo-3.0.0-37.el6.i686.rpm
File outdated by:  RHBA-2017:0781
    MD5: afd834a23ff880d531b8e2f12a23530a
SHA-256: 67afca8f66c6710a4832885b67aca278d9611c2fdc7f1ca25a2c68ca54886e01
ipa-python-3.0.0-37.el6.i686.rpm
File outdated by:  RHBA-2017:0781
    MD5: 8d446a1ba07d3a55653871736b45f1a6
SHA-256: e66019fc5acf77d69282f137950a908b307dfddbdc4dbbe6770942c7e3c284cb
ipa-server-3.0.0-37.el6.i686.rpm
File outdated by:  RHBA-2017:0781
    MD5: 96170f53d0c282e93ea1e7af625aaf33
SHA-256: bb92dadcd243ca5b43b580383d80825b002cc56d640d71d3d59132ffdee55d02
ipa-server-selinux-3.0.0-37.el6.i686.rpm
File outdated by:  RHBA-2017:0781
    MD5: 5d0f648c94083e67ab0396d29d4c5c50
SHA-256: 384714eb6ca89843540c24a097d089380fcb05387ce45a936629eb8f0baea567
ipa-server-trust-ad-3.0.0-37.el6.i686.rpm
File outdated by:  RHBA-2017:0781
    MD5: 2323a4a86b52ebbdf8c993fc46591e43
SHA-256: e1bd8900926afc7e919e17658055800bcbd5c72f8fa56365870cfdf843566870
 
x86_64:
ipa-admintools-3.0.0-37.el6.x86_64.rpm
File outdated by:  RHBA-2017:0781
    MD5: dda28f61009952d7c87d00b25703c64f
SHA-256: d29a248ad567b56b391531a455e7aedab2c8b8aa23afc43bd60cf3ecf4d51768
ipa-client-3.0.0-37.el6.x86_64.rpm
File outdated by:  RHBA-2017:0781
    MD5: a1be4982b74aa658988773129ad1a511
SHA-256: 2fe1af15d4253ec4d43aa0b0c07ea872c1f9913b9be03cfe81b926b62da828d5
ipa-debuginfo-3.0.0-37.el6.x86_64.rpm
File outdated by:  RHBA-2017:0781
    MD5: a1647d714a4e9ac48810649484d1efee
SHA-256: 0f8613d0199a8bbef2ff3d98bf2a75ea2b3979897944b9524e45ed244fa82c59
ipa-python-3.0.0-37.el6.x86_64.rpm
File outdated by:  RHBA-2017:0781
    MD5: ed9fff207a9456043fab7f2b1216f619
SHA-256: bfc7c7abc3600e83be45084b2f2afad225b21f8a11858717b39d4a3e663972ec
ipa-server-3.0.0-37.el6.x86_64.rpm
File outdated by:  RHBA-2017:0781
    MD5: d3ec63117b54c79d0699825273adaf28
SHA-256: 093661e095b59115ee6a4617e31cce3f82d47d4aec6bd5955fa251c4a05394aa
ipa-server-selinux-3.0.0-37.el6.x86_64.rpm
File outdated by:  RHBA-2017:0781
    MD5: 92138841d7c42b90ef134988d46f2887
SHA-256: 047ab53a93829749f3e18ec943b5f78bbdd029caae894638598e7966e24aba8f
ipa-server-trust-ad-3.0.0-37.el6.x86_64.rpm
File outdated by:  RHBA-2017:0781
    MD5: 1baf1e1e387a6b900855884748e2cdf3
SHA-256: 1bda68a0dec067d7bbb13f2e12142b34370072990f1ae57280534470353d3267
 
Red Hat Enterprise Linux HPC Node (v. 6)

SRPMS:
ipa-3.0.0-37.el6.src.rpm
File outdated by:  RHBA-2017:0781
    MD5: e7929ba821beb9bf08aca967a8900d2d
SHA-256: b57e336998b5bc963538904796a0a73d6a5c21f5c25412f664f1e5064d0ea98f
 
x86_64:
ipa-admintools-3.0.0-37.el6.x86_64.rpm
File outdated by:  RHBA-2017:0781
    MD5: dda28f61009952d7c87d00b25703c64f
SHA-256: d29a248ad567b56b391531a455e7aedab2c8b8aa23afc43bd60cf3ecf4d51768
ipa-client-3.0.0-37.el6.x86_64.rpm
File outdated by:  RHBA-2017:0781
    MD5: a1be4982b74aa658988773129ad1a511
SHA-256: 2fe1af15d4253ec4d43aa0b0c07ea872c1f9913b9be03cfe81b926b62da828d5
ipa-debuginfo-3.0.0-37.el6.x86_64.rpm
File outdated by:  RHBA-2017:0781
    MD5: a1647d714a4e9ac48810649484d1efee
SHA-256: 0f8613d0199a8bbef2ff3d98bf2a75ea2b3979897944b9524e45ed244fa82c59
ipa-python-3.0.0-37.el6.x86_64.rpm
File outdated by:  RHBA-2017:0781
    MD5: ed9fff207a9456043fab7f2b1216f619
SHA-256: bfc7c7abc3600e83be45084b2f2afad225b21f8a11858717b39d4a3e663972ec
ipa-server-3.0.0-37.el6.x86_64.rpm
File outdated by:  RHBA-2017:0781
    MD5: d3ec63117b54c79d0699825273adaf28
SHA-256: 093661e095b59115ee6a4617e31cce3f82d47d4aec6bd5955fa251c4a05394aa
ipa-server-selinux-3.0.0-37.el6.x86_64.rpm
File outdated by:  RHBA-2017:0781
    MD5: 92138841d7c42b90ef134988d46f2887
SHA-256: 047ab53a93829749f3e18ec943b5f78bbdd029caae894638598e7966e24aba8f
ipa-server-trust-ad-3.0.0-37.el6.x86_64.rpm
File outdated by:  RHBA-2017:0781
    MD5: 1baf1e1e387a6b900855884748e2cdf3
SHA-256: 1bda68a0dec067d7bbb13f2e12142b34370072990f1ae57280534470353d3267
 
Red Hat Enterprise Linux Server (v. 6)

SRPMS:
ipa-3.0.0-37.el6.src.rpm
File outdated by:  RHBA-2017:0781
    MD5: e7929ba821beb9bf08aca967a8900d2d
SHA-256: b57e336998b5bc963538904796a0a73d6a5c21f5c25412f664f1e5064d0ea98f
 
IA-32:
ipa-admintools-3.0.0-37.el6.i686.rpm
File outdated by:  RHBA-2017:0781
    MD5: 0378a6625a66ae0b39a81f0cf4342d13
SHA-256: e9bc6ae9b39328adb124bfa4ab549b2c2848a54dfb8a567ebc7a9855b0e469cc
ipa-client-3.0.0-37.el6.i686.rpm
File outdated by:  RHBA-2017:0781
    MD5: 33a3daa07ed72d5bfc8019519116dc5b
SHA-256: ed3dc61216b4bfd09179ba68f2450d06a686c411d582b8760c6f51b85fe0bcf1
ipa-debuginfo-3.0.0-37.el6.i686.rpm
File outdated by:  RHBA-2017:0781
    MD5: afd834a23ff880d531b8e2f12a23530a
SHA-256: 67afca8f66c6710a4832885b67aca278d9611c2fdc7f1ca25a2c68ca54886e01
ipa-python-3.0.0-37.el6.i686.rpm
File outdated by:  RHBA-2017:0781
    MD5: 8d446a1ba07d3a55653871736b45f1a6
SHA-256: e66019fc5acf77d69282f137950a908b307dfddbdc4dbbe6770942c7e3c284cb
ipa-server-3.0.0-37.el6.i686.rpm
File outdated by:  RHBA-2017:0781
    MD5: 96170f53d0c282e93ea1e7af625aaf33
SHA-256: bb92dadcd243ca5b43b580383d80825b002cc56d640d71d3d59132ffdee55d02
ipa-server-selinux-3.0.0-37.el6.i686.rpm
File outdated by:  RHBA-2017:0781
    MD5: 5d0f648c94083e67ab0396d29d4c5c50
SHA-256: 384714eb6ca89843540c24a097d089380fcb05387ce45a936629eb8f0baea567
ipa-server-trust-ad-3.0.0-37.el6.i686.rpm
File outdated by:  RHBA-2017:0781
    MD5: 2323a4a86b52ebbdf8c993fc46591e43
SHA-256: e1bd8900926afc7e919e17658055800bcbd5c72f8fa56365870cfdf843566870
 
PPC:
ipa-admintools-3.0.0-37.el6.ppc64.rpm
File outdated by:  RHBA-2017:0781
    MD5: 668c8bd78b7193bd2254b8a68be3e880
SHA-256: bc2b531b6c85bc957aa3ae460626d0a450eae6ef623f143068a96d542c4bab85
ipa-client-3.0.0-37.el6.ppc64.rpm
File outdated by:  RHBA-2017:0781
    MD5: 53b797d5103ac93e16178a596a891383
SHA-256: 623fd7468fdbb4d064cbebac95382cde3ad1bb75eb73f25a6466e7ea4aab2b4a
ipa-debuginfo-3.0.0-37.el6.ppc64.rpm
File outdated by:  RHBA-2017:0781
    MD5: 0679802ef67c5cc6c1f403fd223f1da4
SHA-256: 0d73938302a5a12548653ae30c32fee1e6a1c48380c04eb1c218d721d2eae03b
ipa-python-3.0.0-37.el6.ppc64.rpm
File outdated by:  RHBA-2017:0781
    MD5: 63df467bf48aca3e78b79519b510f101
SHA-256: 4fa1fbe806b0be382605a99ed88ea0e75e6f8e79227de113852049a39e59f76c
 
s390x:
ipa-admintools-3.0.0-37.el6.s390x.rpm
File outdated by:  RHBA-2017:0781
    MD5: ef02ec1d9f52d5b90d96cb54a8644c02
SHA-256: c41eb16d13135ee5eafdc5ecc75e194fffafabe9f84127e7ab8aaeffbd3f749b
ipa-client-3.0.0-37.el6.s390x.rpm
File outdated by:  RHBA-2017:0781
    MD5: f15413d55504ca89f8a6e32696011099
SHA-256: c84f6132ae388860138d992dafe663276eb558f47d3d7afb445fcbd09f1b35ab
ipa-debuginfo-3.0.0-37.el6.s390x.rpm
File outdated by:  RHBA-2017:0781
    MD5: 82c96aa8b3746c2714d330792143aec1
SHA-256: e2d848e3a80ae8a235bbcdd542e1a4e822522ee8f505c0b41110362196121b68
ipa-python-3.0.0-37.el6.s390x.rpm
File outdated by:  RHBA-2017:0781
    MD5: f2fe79b8fef313fe78e2ccd1a7ccd9af
SHA-256: b5e73ff94915cdfa47eb2f5b27b1b08d222bda3d7bbddf9a39035d1c132b0323
 
x86_64:
ipa-admintools-3.0.0-37.el6.x86_64.rpm
File outdated by:  RHBA-2017:0781
    MD5: dda28f61009952d7c87d00b25703c64f
SHA-256: d29a248ad567b56b391531a455e7aedab2c8b8aa23afc43bd60cf3ecf4d51768
ipa-client-3.0.0-37.el6.x86_64.rpm
File outdated by:  RHBA-2017:0781
    MD5: a1be4982b74aa658988773129ad1a511
SHA-256: 2fe1af15d4253ec4d43aa0b0c07ea872c1f9913b9be03cfe81b926b62da828d5
ipa-debuginfo-3.0.0-37.el6.x86_64.rpm
File outdated by:  RHBA-2017:0781
    MD5: a1647d714a4e9ac48810649484d1efee
SHA-256: 0f8613d0199a8bbef2ff3d98bf2a75ea2b3979897944b9524e45ed244fa82c59
ipa-python-3.0.0-37.el6.x86_64.rpm
File outdated by:  RHBA-2017:0781
    MD5: ed9fff207a9456043fab7f2b1216f619
SHA-256: bfc7c7abc3600e83be45084b2f2afad225b21f8a11858717b39d4a3e663972ec
ipa-server-3.0.0-37.el6.x86_64.rpm
File outdated by:  RHBA-2017:0781
    MD5: d3ec63117b54c79d0699825273adaf28
SHA-256: 093661e095b59115ee6a4617e31cce3f82d47d4aec6bd5955fa251c4a05394aa
ipa-server-selinux-3.0.0-37.el6.x86_64.rpm
File outdated by:  RHBA-2017:0781
    MD5: 92138841d7c42b90ef134988d46f2887
SHA-256: 047ab53a93829749f3e18ec943b5f78bbdd029caae894638598e7966e24aba8f
ipa-server-trust-ad-3.0.0-37.el6.x86_64.rpm
File outdated by:  RHBA-2017:0781
    MD5: 1baf1e1e387a6b900855884748e2cdf3
SHA-256: 1bda68a0dec067d7bbb13f2e12142b34370072990f1ae57280534470353d3267
 
Red Hat Enterprise Linux Workstation (v. 6)

SRPMS:
ipa-3.0.0-37.el6.src.rpm
File outdated by:  RHBA-2017:0781
    MD5: e7929ba821beb9bf08aca967a8900d2d
SHA-256: b57e336998b5bc963538904796a0a73d6a5c21f5c25412f664f1e5064d0ea98f
 
IA-32:
ipa-admintools-3.0.0-37.el6.i686.rpm
File outdated by:  RHBA-2017:0781
    MD5: 0378a6625a66ae0b39a81f0cf4342d13
SHA-256: e9bc6ae9b39328adb124bfa4ab549b2c2848a54dfb8a567ebc7a9855b0e469cc
ipa-client-3.0.0-37.el6.i686.rpm
File outdated by:  RHBA-2017:0781
    MD5: 33a3daa07ed72d5bfc8019519116dc5b
SHA-256: ed3dc61216b4bfd09179ba68f2450d06a686c411d582b8760c6f51b85fe0bcf1
ipa-debuginfo-3.0.0-37.el6.i686.rpm
File outdated by:  RHBA-2017:0781
    MD5: afd834a23ff880d531b8e2f12a23530a
SHA-256: 67afca8f66c6710a4832885b67aca278d9611c2fdc7f1ca25a2c68ca54886e01
ipa-python-3.0.0-37.el6.i686.rpm
File outdated by:  RHBA-2017:0781
    MD5: 8d446a1ba07d3a55653871736b45f1a6
SHA-256: e66019fc5acf77d69282f137950a908b307dfddbdc4dbbe6770942c7e3c284cb
ipa-server-3.0.0-37.el6.i686.rpm
File outdated by:  RHBA-2017:0781
    MD5: 96170f53d0c282e93ea1e7af625aaf33
SHA-256: bb92dadcd243ca5b43b580383d80825b002cc56d640d71d3d59132ffdee55d02
ipa-server-selinux-3.0.0-37.el6.i686.rpm
File outdated by:  RHBA-2017:0781
    MD5: 5d0f648c94083e67ab0396d29d4c5c50
SHA-256: 384714eb6ca89843540c24a097d089380fcb05387ce45a936629eb8f0baea567
ipa-server-trust-ad-3.0.0-37.el6.i686.rpm
File outdated by:  RHBA-2017:0781
    MD5: 2323a4a86b52ebbdf8c993fc46591e43
SHA-256: e1bd8900926afc7e919e17658055800bcbd5c72f8fa56365870cfdf843566870
 
x86_64:
ipa-admintools-3.0.0-37.el6.x86_64.rpm
File outdated by:  RHBA-2017:0781
    MD5: dda28f61009952d7c87d00b25703c64f
SHA-256: d29a248ad567b56b391531a455e7aedab2c8b8aa23afc43bd60cf3ecf4d51768
ipa-client-3.0.0-37.el6.x86_64.rpm
File outdated by:  RHBA-2017:0781
    MD5: a1be4982b74aa658988773129ad1a511
SHA-256: 2fe1af15d4253ec4d43aa0b0c07ea872c1f9913b9be03cfe81b926b62da828d5
ipa-debuginfo-3.0.0-37.el6.x86_64.rpm
File outdated by:  RHBA-2017:0781
    MD5: a1647d714a4e9ac48810649484d1efee
SHA-256: 0f8613d0199a8bbef2ff3d98bf2a75ea2b3979897944b9524e45ed244fa82c59
ipa-python-3.0.0-37.el6.x86_64.rpm
File outdated by:  RHBA-2017:0781
    MD5: ed9fff207a9456043fab7f2b1216f619
SHA-256: bfc7c7abc3600e83be45084b2f2afad225b21f8a11858717b39d4a3e663972ec
ipa-server-3.0.0-37.el6.x86_64.rpm
File outdated by:  RHBA-2017:0781
    MD5: d3ec63117b54c79d0699825273adaf28
SHA-256: 093661e095b59115ee6a4617e31cce3f82d47d4aec6bd5955fa251c4a05394aa
ipa-server-selinux-3.0.0-37.el6.x86_64.rpm
File outdated by:  RHBA-2017:0781
    MD5: 92138841d7c42b90ef134988d46f2887
SHA-256: 047ab53a93829749f3e18ec943b5f78bbdd029caae894638598e7966e24aba8f
ipa-server-trust-ad-3.0.0-37.el6.x86_64.rpm
File outdated by:  RHBA-2017:0781
    MD5: 1baf1e1e387a6b900855884748e2cdf3
SHA-256: 1bda68a0dec067d7bbb13f2e12142b34370072990f1ae57280534470353d3267
 
(The unlinked packages above are only available from the Red Hat Network)

Bugs fixed (see bugzilla for more information)

1001810 - RHEL 6.2 to 6.5 ipa upgrade host/hostgroup commands internal errors
1005448 - RHEL6.5 ipa-replica-manage del unexpected error NoneType after upgrade from 6.2
904119 - Significant decrease in migration performance
905626 - ipa-client-install failed to fall over to replica with master down
906846 - During Migration - If Schema is unavailable migration fails
915745 - Entire 60basev3 schema is not included in update file, other errors
922843 - unattended ipa-client installation fails when anonymous access to LDAP is disabled on IPA servers
924004 - ipa-client-install cannot obtain CA certificate
924009 - Allow client to re-enroll without first unenrolling
924542 - Remove support of the source host from the HBAC on the server side both from UI and CLI
948928 - LDAP upload CA cert sometimes double-encodes the value
950014 - Enrolling a host into IdM/IPA always takes two attempts
952241 - ipa cert automatic renew: wrong trust argument assigned to renewed certs
955698 - [RFE] Better integration with the external provisioning systems - hosts
967870 - Inconsistent replies from FreeIPA to Netlogon ping queries
975431 - IPA PKI cannot publish CRL after upgrade
976716 - FreeIPAs XMLRPC server returns a wrong Content-Type
980409 - Create a trust to an AD 2012 domain not works, backport ticket 3231
983463 - ipa-server may be depend on openssh-clients package
986211 - [RFE] Add an option to edit "Gecos" field from IPA web UI


References



These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from:
https://www.redhat.com/security/team/key/#package

The Red Hat security contact is secalert@redhat.com. More contact details at http://www.redhat.com/security/team/contact/