Home > Security > Advisories

Advisories

Mandriva Advisories

Package name openldap
Date May 1st, 2003
Advisory ID MDKA-2003:009
Affected versions 8.2, 9.0, 9.1, MNF8.2, CS2.1
Synopsis Updated openldap packages fix multiple bugs

Problem Description

The OpenLDAP packages in Mandrake Linux 9.1 did not properly
migrate data from previous versions. This update provides a fix
that corrects this issue.

The updated packages also correct a problem that has been persistent
in Mandrake Linux for some time. Previously, attempting to use
OpenLDAP for authentication would result in strange system behaviour
because OpenLDAP was using a MD5 hash internally that was incompatible
with the system crypt(3) MD5 hash. This would result in authentication
working with nss_ldap, but not with pam_ldap. If one used ldappasswd
to change a password, authentication would work with pam_ldap but not
nss_ldap. The OpenLDAP packages have been updated to use the crypt(3)
MD5 hash at all times.

As well, if OpenLDAP was used for authentication on Mandrake Linux 9.1,
sshd would segfault when attempting to login as an LDAP user. The
new pam_ldap and nss_ldap packages correct this problem.

WARNING: Users who are currently using pam_ldap with OpenLDAP, and who
have used ldappasswd to change user passwords may have the MD5 hash
that is not compatible with crypt(3) used to store the userPassword.
If this is the case, updating to these packages may require you to, as
root, change the password for each user with a now incompatible
password.

Updated Packages

Mandrakelinux 8.2

 81152a500eba55ac00a6bbade73e8eed  8.2/RPMS/libldap2-2.0.21-4.2mdk.i586.rpm
3d5f6b84cb1fc5c968f1446b5fac03c2  8.2/RPMS/libldap2-devel-2.0.21-4.2mdk.i586.rpm
699e296d6e096e2577f54c20e2b40a0a  8.2/RPMS/libldap2-devel-static-2.0.21-4.2mdk.i586.rpm
b89bfacb5aec5cbe21be0b100c8ae4db  8.2/RPMS/openldap-2.0.21-4.2mdk.i586.rpm
bb2c2e5abdc55cedc9039d8093c4abc8  8.2/RPMS/openldap-back_dnssrv-2.0.21-4.2mdk.i586.rpm
6e62517341700b30ba7cd22ab9e441ce  8.2/RPMS/openldap-back_ldap-2.0.21-4.2mdk.i586.rpm
8d99170673fd6091132c40e57a9d4d2e  8.2/RPMS/openldap-back_passwd-2.0.21-4.2mdk.i586.rpm
437e79c044f9ca9100115e07688a6c8a  8.2/RPMS/openldap-back_sql-2.0.21-4.2mdk.i586.rpm
c13459596a37f2db4f88a1768beb19ac  8.2/RPMS/openldap-clients-2.0.21-4.2mdk.i586.rpm
d50672996002d3934cf3d9a646f12cf0  8.2/RPMS/openldap-guide-2.0.21-4.2mdk.i586.rpm
84bafab30b6fce090855b8f1f4d38dd9  8.2/RPMS/openldap-migration-2.0.21-4.2mdk.i586.rpm
dc09fbe20346172136b8db79aae92723  8.2/RPMS/openldap-servers-2.0.21-4.2mdk.i586.rpm
b36e43857a114a79c46312d19b1f78b0  8.2/SRPMS/openldap-2.0.21-4.2mdk.src.rpm

Mandrakelinux 8.2/PPC

 8d1f3829ff437eb7dc578e04b3121fa7  ppc/8.2/RPMS/libldap2-2.0.21-4.2mdk.ppc.rpm
b47b3498f787ece9a6794d000cdbc334  ppc/8.2/RPMS/libldap2-devel-2.0.21-4.2mdk.ppc.rpm
30046c2c0293dfe6b29da0c1348b08e6  ppc/8.2/RPMS/libldap2-devel-static-2.0.21-4.2mdk.ppc.rpm
5a39af47c4e8305b942a7b8645157b13  ppc/8.2/RPMS/openldap-2.0.21-4.2mdk.ppc.rpm
75c7e21bf9955677f21e87103c8b23f9  ppc/8.2/RPMS/openldap-back_dnssrv-2.0.21-4.2mdk.ppc.rpm
2caf422c849325fa6225980a131b314b  ppc/8.2/RPMS/openldap-back_ldap-2.0.21-4.2mdk.ppc.rpm
85d53c254e8f2bf292b2eb6f5e2658a4  ppc/8.2/RPMS/openldap-back_passwd-2.0.21-4.2mdk.ppc.rpm
063ff5de0735751e1ce28304eba9d787  ppc/8.2/RPMS/openldap-back_sql-2.0.21-4.2mdk.ppc.rpm
2f3394214ac49796ab55ab18924213b9  ppc/8.2/RPMS/openldap-clients-2.0.21-4.2mdk.ppc.rpm
b72e626a45ee45e483521ec4eecd568d  ppc/8.2/RPMS/openldap-guide-2.0.21-4.2mdk.ppc.rpm
5c6965074fb258f70c449ed3efb780cd  ppc/8.2/RPMS/openldap-migration-2.0.21-4.2mdk.ppc.rpm
addad7f22155332a1b4bc11e0af70bcb  ppc/8.2/RPMS/openldap-servers-2.0.21-4.2mdk.ppc.rpm
b36e43857a114a79c46312d19b1f78b0  ppc/8.2/SRPMS/openldap-2.0.21-4.2mdk.src.rpm

Mandrakelinux 9.0

 228062e8f7c51897b28eaeb64f05eb6a  9.0/RPMS/libldap2-2.0.25-7.2mdk.i586.rpm
d38b4c1cb2232ef5e00673ccaacbc0ef  9.0/RPMS/libldap2-devel-2.0.25-7.2mdk.i586.rpm
959b4cee440aa432f4609fe2a6e94833  9.0/RPMS/libldap2-devel-static-2.0.25-7.2mdk.i586.rpm
2a4debaa1a3bc1c1b7e758331c36e1c2  9.0/RPMS/openldap-2.0.25-7.2mdk.i586.rpm
4e4bf480f21493f5fa62e1a8d520cbf0  9.0/RPMS/openldap-back_dnssrv-2.0.25-7.2mdk.i586.rpm
78d24da1251dc2560c4aec810866c17f  9.0/RPMS/openldap-back_ldap-2.0.25-7.2mdk.i586.rpm
d392d2b1350967efa98c02a1a3b232ce  9.0/RPMS/openldap-back_passwd-2.0.25-7.2mdk.i586.rpm
5e747e02a1105d3816155348a387f222  9.0/RPMS/openldap-back_sql-2.0.25-7.2mdk.i586.rpm
8d55caae1ce7aa03b9c1df62deec5a9d  9.0/RPMS/openldap-clients-2.0.25-7.2mdk.i586.rpm
5d845d76ee6bbd3a0516b7263be299d4  9.0/RPMS/openldap-guide-2.0.25-7.2mdk.i586.rpm
20cccb296beb5b57286e2f52f04388f3  9.0/RPMS/openldap-migration-2.0.25-7.2mdk.i586.rpm
a8c118bb205d7ddf54bb5b424f50fdae  9.0/RPMS/openldap-servers-2.0.25-7.2mdk.i586.rpm
00adf85f89898912f3f892bd740808c3  9.0/SRPMS/openldap-2.0.25-7.2mdk.src.rpm

Mandrakelinux 9.1

 881f08c3c26a7007cf53df5f3493e0c2  9.1/RPMS/libldap2-2.0.27-5.3mdk.i586.rpm
8778e8c43c57c217eac05ae52457634c  9.1/RPMS/libldap2-devel-2.0.27-5.3mdk.i586.rpm
38ed2b492286e3b9931907d5447c10d4  9.1/RPMS/libldap2-devel-static-2.0.27-5.3mdk.i586.rpm
a503690c93eeaafdeb85c74459031e78  9.1/RPMS/nss_ldap-204-1.1mdk.i586.rpm
9ddbdc978bc53cc4f47329066340c997  9.1/RPMS/openldap-2.0.27-5.3mdk.i586.rpm
e93d209e416d98921fba0d194efd351d  9.1/RPMS/openldap-back_dnssrv-2.0.27-5.3mdk.i586.rpm
37a9e9f02ed5b7d2d77b20523d18f15b  9.1/RPMS/openldap-back_ldap-2.0.27-5.3mdk.i586.rpm
fbcf0db8fd69f74934175e310f2cda81  9.1/RPMS/openldap-back_passwd-2.0.27-5.3mdk.i586.rpm
7ce7fa324d32730f483919456763120a  9.1/RPMS/openldap-back_sql-2.0.27-5.3mdk.i586.rpm
42e1621795dd0275dfce2cd3a2b26210  9.1/RPMS/openldap-clients-2.0.27-5.3mdk.i586.rpm
5f5b67698144010868de879f1953577b  9.1/RPMS/openldap-guide-2.0.27-5.3mdk.i586.rpm
f134c9ddad9682206413a87877f6681e  9.1/RPMS/openldap-migration-2.0.27-5.3mdk.i586.rpm
f594ce9f9a2e14d52ad582f30b26cb38  9.1/RPMS/openldap-servers-2.0.27-5.3mdk.i586.rpm
215808a6f3f2039a7b66996c098682db  9.1/RPMS/pam_ldap-161-1.1mdk.i586.rpm
d721a84c3f699bd52156a40825113386  9.1/SRPMS/nss_ldap-204-1.1mdk.src.rpm
f25a960ab5dacf247dcb09974db6dba6  9.1/SRPMS/openldap-2.0.27-5.3mdk.src.rpm

Mandrakelinux 9.1/PPC

 fdf3b03329e6ef324203bc26f445f29f  ppc/9.1/RPMS/libldap2-2.0.27-5.3mdk.ppc.rpm
672b0827760098e441d4cc1a473e88bd  ppc/9.1/RPMS/libldap2-devel-2.0.27-5.3mdk.ppc.rpm
0cbe6bbc86b40666d778fe4806d10d75  ppc/9.1/RPMS/libldap2-devel-static-2.0.27-5.3mdk.ppc.rpm
4bd40abc6bfd515c20a86cd14690ec03  ppc/9.1/RPMS/nss_ldap-204-1.1mdk.ppc.rpm
b01f7a882e3671e00998a9ace2266a21  ppc/9.1/RPMS/openldap-2.0.27-5.3mdk.ppc.rpm
803a4f82739f14fcc0ba8cac6535c81a  ppc/9.1/RPMS/openldap-back_dnssrv-2.0.27-5.3mdk.ppc.rpm
82901bfc19b5d5b72ec122451df14ad9  ppc/9.1/RPMS/openldap-back_ldap-2.0.27-5.3mdk.ppc.rpm
fffac70593b316b52fb7bd5c06e751cf  ppc/9.1/RPMS/openldap-back_passwd-2.0.27-5.3mdk.ppc.rpm
eb1682c1cdbb1299f35bd94905d66f1f  ppc/9.1/RPMS/openldap-back_sql-2.0.27-5.3mdk.ppc.rpm
a4da26feb72ab155fc97c650233d9d25  ppc/9.1/RPMS/openldap-clients-2.0.27-5.3mdk.ppc.rpm
d4681c4aae54b2f5334734f5f9a58cf4  ppc/9.1/RPMS/openldap-guide-2.0.27-5.3mdk.ppc.rpm
95df74cec38deea5eeb7f5a275b24099  ppc/9.1/RPMS/openldap-migration-2.0.27-5.3mdk.ppc.rpm
55edbff6830379c4364dda37892e5ffc  ppc/9.1/RPMS/openldap-servers-2.0.27-5.3mdk.ppc.rpm
600f30573d85b798545c5592c19c62c2  ppc/9.1/RPMS/pam_ldap-161-1.1mdk.ppc.rpm
d721a84c3f699bd52156a40825113386  ppc/9.1/SRPMS/nss_ldap-204-1.1mdk.src.rpm
f25a960ab5dacf247dcb09974db6dba6  ppc/9.1/SRPMS/openldap-2.0.27-5.3mdk.src.rpm

Multi Network Firewall 8.2

 81152a500eba55ac00a6bbade73e8eed  mnf8.2/RPMS/libldap2-2.0.21-4.2mdk.i586.rpm
b36e43857a114a79c46312d19b1f78b0  mnf8.2/SRPMS/openldap-2.0.21-4.2mdk.src.rpm

Corporate Server 2.1

 228062e8f7c51897b28eaeb64f05eb6a  corporate/2.1/RPMS/libldap2-2.0.25-7.2mdk.i586.rpm
d38b4c1cb2232ef5e00673ccaacbc0ef  corporate/2.1/RPMS/libldap2-devel-2.0.25-7.2mdk.i586.rpm
959b4cee440aa432f4609fe2a6e94833  corporate/2.1/RPMS/libldap2-devel-static-2.0.25-7.2mdk.i586.rpm
2a4debaa1a3bc1c1b7e758331c36e1c2  corporate/2.1/RPMS/openldap-2.0.25-7.2mdk.i586.rpm
4e4bf480f21493f5fa62e1a8d520cbf0  corporate/2.1/RPMS/openldap-back_dnssrv-2.0.25-7.2mdk.i586.rpm
78d24da1251dc2560c4aec810866c17f  corporate/2.1/RPMS/openldap-back_ldap-2.0.25-7.2mdk.i586.rpm
d392d2b1350967efa98c02a1a3b232ce  corporate/2.1/RPMS/openldap-back_passwd-2.0.25-7.2mdk.i586.rpm
5e747e02a1105d3816155348a387f222  corporate/2.1/RPMS/openldap-back_sql-2.0.25-7.2mdk.i586.rpm
8d55caae1ce7aa03b9c1df62deec5a9d  corporate/2.1/RPMS/openldap-clients-2.0.25-7.2mdk.i586.rpm
5d845d76ee6bbd3a0516b7263be299d4  corporate/2.1/RPMS/openldap-guide-2.0.25-7.2mdk.i586.rpm
20cccb296beb5b57286e2f52f04388f3  corporate/2.1/RPMS/openldap-migration-2.0.25-7.2mdk.i586.rpm
a8c118bb205d7ddf54bb5b424f50fdae  corporate/2.1/RPMS/openldap-servers-2.0.25-7.2mdk.i586.rpm
00adf85f89898912f3f892bd740808c3  corporate/2.1/SRPMS/openldap-2.0.25-7.2mdk.src.rpm

Upgrade

To upgrade automatically, use MandrivaUpdate.


Verification

Please verify the update prior to upgrading to ensure the integrity of the downloaded package. You can do this with the command :

                rpm --checksig package.rpm
                

You can get the GPG public key of the Mandriva Security Team to verify the GPG signature of each RPM.

If you use MandrivaUpdate, the verification of md5 checksum and GPG signature is performed automatically for you.