nss_ldap-253-12AXS3

The nss_ldap package contains the nss_ldap and pam_ldap modules. The nss_ldap module is a plug-in which allows applications to retrieve information about users and groups from a directory server. The pam_ldap module allows PAM-aware applications to use a directory server to verify user passwords.
Fixed bugs:
- Race condition in nss_ldap, when used in applications that are linked against the pthread library and fork after a call to nss_ldap, might send user data to the wrong process because of improper handling of the LDAP connection.
NOTE: this issue was originally reported for Dovecot with the wrong mailboxes being returned, but other applications might also be affected.
- Automatic DNS discovery of the LDAP server does not work
- pam_ldap tries to change passwords twice
- add dbus,radvd,tomcat,radiusd,news,mailman to the default list of nss_initgroups_ignoreusers
- resize the supplemental GID array when it gets too large and an array size limit isn't set