エラータID: AXBA:2018-3232:03

2018/06/29 Friday - 16:48
Asianux Server 7 for x86_64

The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources.

This update fixes the following bugs:

* Previously, if a large group was requested through the sssd_nss_ex interface, the buffer used inside the SSSD had to be relocated to be able to hold all the group members. However, when SSSD wanted to free this buffer, it used the address of the original memory, not the reallocated one. Because SSSD freed the original memory address, not the new one returned by the function that reallocates the memory, the Asianux Directory Server (RHDS) sometimes terminated unexpectedly. The reason for this is that the sssd API is called from the context of RHDS. With this update, the SSSD code has been modified to free the reallocated memory. As a result, no crash that would manifest as a crash of RHDS happens in the SSSD code. (BZ#1570527)

* The sssd_nss module calls a free function when the lifetime of a netgroup representation expires. Additionally, administrators can manually expire netgroups using the sssd_cache utility. However, after this manual expiration, SSSD called the function again when the lifetime expired. As a consequence, the function was called twice and resulted in a double-free memory error. With this update, the free function is no longer called when the administrator uses the sssd_cache utility. Instead it removes the netgroup from the list of known netgroups and later, when the netgroup reaches its lifetime, it is removed from memory. As a result, the double-free error no longer occurs. (BZ#1579703)

* Previously, an RPM macro that is supposed to restart SSSD after an upgrade was placed into a section where the condition that enables this scriptlet was never true. As a consequence, the sssd service did not restart automatically during the upgrade from 7.4 to 7.5. With this update, the sssd service is now restarted explicitly instead of using the macro that was previously used. As a result, the sssd service now restarts after an upgrade. (BZ#1579780)

* Previously, the new Samba version in Asianux Server 7.5 used a newer version of the idmap plug-in interface and SSSD still provided a plug-in with an older version. If Samba was configured to use SSSD's idmap plug-in, smdb and winbind services failed to start due to the version mismatch. With this update, SSSD provides a plug-in with a matching version. As a result, smdb and winbind run as expected. (BZ#1580281)

* Previously, when the sssd_be process searched for Identity Management (IDM) groups that contained external, typically Active Directory, groups as their members, it allocated the result on a memory context that was used through the lifetime of sssd_be. As a consequence, the memory usage of sssd_be was continuously growing. With this update, more appropriate memory context owns the memory and frees it when necessary. As a result, sssd_be memory usage no longer grows with searching for IDM groups with external members. (BZ#1583746)


Update packages.




  1. sssd-1.16.0-19.el7.5.src.rpm
    MD5: f38d78de9db0924ec919a8ffe5dd86ac
    SHA-256: 119967c6fede4ce7cc3bd580fb78f23243ca48a20d24167e9914406af4ac14f0
    Size: 5.98 MB

Asianux Server 7 for x86_64
  1. libipa_hbac-1.16.0-19.el7.5.x86_64.rpm
    MD5: dec3c81049e12e2808bfa1934b97b399
    SHA-256: 828d02993bc8e7f62b41c53ddc9e1f60008d552368a72963f6626ec6157c9441
    Size: 136.64 kB
  2. libsss_autofs-1.16.0-19.el7.5.x86_64.rpm
    MD5: 6c2ab3625fba11ae4d56b0a118e45aa8
    SHA-256: 5213934a4af8259e3623a40ff081cf78d7b96157524cad8d82a4c57c68730407
    Size: 138.61 kB
  3. libsss_certmap-1.16.0-19.el7.5.x86_64.rpm
    MD5: e5126a39840ba09a71f9522dfeedaeec
    SHA-256: c8d9caae7e461331de2e317531e67e2bc61474a2ac013a05f652eb7177706c38
    Size: 165.48 kB
  4. libsss_idmap-1.16.0-19.el7.5.x86_64.rpm
    MD5: 0704338fd84d35b143368e55d38931ec
    SHA-256: 0f67c271d9c47b7aea5e6717e9274ac8b4ae0707d86a1cec42f7cc592e88ccf3
    Size: 141.38 kB
  5. libsss_nss_idmap-1.16.0-19.el7.5.x86_64.rpm
    MD5: aac3c2e8c401c4e5e40b74a8ff0a5383
    SHA-256: 5a10945476a5956fb7b8415c099ccdc102a2866377b9010c4c505b3b80f0ce90
    Size: 147.47 kB
  6. libsss_simpleifp-1.16.0-19.el7.5.x86_64.rpm
    MD5: a23066b147aacf782844de17181f3662
    SHA-256: 7f6887cffb796caf5e3f6bde0ff48ee5d8dfd5b0b6c3e5a7449ba130800ed139
    Size: 127.43 kB
  7. libsss_sudo-1.16.0-19.el7.5.x86_64.rpm
    MD5: 3c12a80666a11e8594e933e0fbca1b09
    SHA-256: 268c0a3507f118ce9e8865fd3114bc6289c01c3b52f71eadf66a28369e0d37fb
    Size: 137.03 kB
  8. python-libipa_hbac-1.16.0-19.el7.5.x86_64.rpm
    MD5: e7084442571615015f04c97228c45e90
    SHA-256: 7649df1f401f2452600e47dcbd5449ae6a224d2b849ef0c8ea56d9c8a5267772
    Size: 129.66 kB
  9. python-libsss_nss_idmap-1.16.0-19.el7.5.x86_64.rpm
    MD5: 6abddd1e20e126dab6b795825c779f4e
    SHA-256: 34b4d5408d63f8090ae90eb73180b94d23da0bed9f51f2c1c5aa82a90be91b03
    Size: 122.40 kB
  10. python-sss-1.16.0-19.el7.5.x86_64.rpm
    MD5: 57d1f5d6c35e2bed32c94c48dbb823e3
    SHA-256: 137d5a074297affa9f1a773f8778b8096a3287ded52c8cee6f75f4e16f2ccce3
    Size: 142.55 kB
  11. python-sssdconfig-1.16.0-19.el7.5.noarch.rpm
    MD5: d2a2cb6cb8d0f596e282ba44d4e582df
    SHA-256: c3defb92b9efab802754c5fd2e16e6d153eda3230882a9edd09fff84b850162b
    Size: 163.08 kB
  12. python-sss-murmur-1.16.0-19.el7.5.x86_64.rpm
    MD5: ec852475887795032624d401d029b5ea
    SHA-256: 41399a8638360d125301f2a1b237640d83158bbc73a61d3c2b3d0ffc0adbf4ac
    Size: 119.57 kB
  13. sssd-1.16.0-19.el7.5.x86_64.rpm
    MD5: f9249e8a0f89cbf809bbd9c157656627
    SHA-256: 05eabf0671b07c31e1479a1c71c0dbe9d3193ef36370a8b0a65436f0f6436f08
    Size: 128.48 kB
  14. sssd-ad-1.16.0-19.el7.5.x86_64.rpm
    MD5: e755590409557eff19bebbc3a931f927
    SHA-256: 2e06dcd713a0cc6b80dead3849f03ca5f23148cde5e1bd17c87e97fe6d59cb4d
    Size: 254.07 kB
  15. sssd-client-1.16.0-19.el7.5.x86_64.rpm
    MD5: 1ccc835a99b315059a521028a26519ce
    SHA-256: ed774f586d5aae66d6307fcad642c73bbdcb8b9563357e0046bf2983ac3197db
    Size: 194.69 kB
  16. sssd-common-1.16.0-19.el7.5.x86_64.rpm
    MD5: 2b6259f1de9798ed6c5889e142aacf1b
    SHA-256: 293350ebe3e6e03396b723131c8c6648ede74fd19d79d798410d5df01ec51d09
    Size: 1.36 MB
  17. sssd-common-pac-1.16.0-19.el7.5.x86_64.rpm
    MD5: 702780e129efa6a17d9290d7fa1bba4a
    SHA-256: 31f8e12670290bec022569da30e4115a0f78b4b5a5c79ec5d9d71048baf6bfbe
    Size: 198.62 kB
  18. sssd-dbus-1.16.0-19.el7.5.x86_64.rpm
    MD5: 89d2dabaa4b6d364e524fa722f488a8a
    SHA-256: ffc3a48107c10638fb684b52a22e90a40843b166384e9672207bf60a295f8caa
    Size: 235.24 kB
  19. sssd-ipa-1.16.0-19.el7.5.x86_64.rpm
    MD5: 1116c3ca12c5e3524d00b60987b555f7
    SHA-256: 303a192521dad3f0b6cd14c9e639cfc79846ce95a561cfd6a1aa50a4b5e02f9e
    Size: 342.84 kB
  20. sssd-kcm-1.16.0-19.el7.5.x86_64.rpm
    MD5: 2defc99352abd4a15eacc4fd9fc3475c
    SHA-256: d8645833fdcf2aadf940b669d3c29278a126169197554395d380cdc8a7ad6b32
    Size: 243.01 kB
  21. sssd-krb5-1.16.0-19.el7.5.x86_64.rpm
    MD5: 31ad9dee9ccbf3c95944ee0d489b7deb
    SHA-256: acf86bf9dc850df8e89243043ba10e67854f7b2967029609668434377595ede7
    Size: 170.04 kB
  22. sssd-krb5-common-1.16.0-19.el7.5.x86_64.rpm
    MD5: 7c3ee82bc6bac5f93c57e8b3c590928e
    SHA-256: 19baef3f1bd3391fe6993a2b33e2efc43095978ba158d2512cbf60dc71a1c928
    Size: 202.19 kB
  23. sssd-ldap-1.16.0-19.el7.5.x86_64.rpm
    MD5: 684f7df75b169f4bd97b1512ddbd3030
    SHA-256: 034bb6264cc9cefda45d5493421155cffafa7bd9176d13b122f517fb7b469cb3
    Size: 239.25 kB
  24. sssd-libwbclient-1.16.0-19.el7.5.x86_64.rpm
    MD5: 9b0bf171aafd3903e62aad2de4d7c6f3
    SHA-256: 25bca1de7eda3c3c6cca70dae5613145cd9fc48f89df49ee3bda3b21f2104950
    Size: 130.34 kB
  25. sssd-polkit-rules-1.16.0-19.el7.5.x86_64.rpm
    MD5: d9a577fc03ed083440c486ca2891bed3
    SHA-256: 71d532a61bc905fb99dd10897b473f59261c59e895144846ebb7435325f5fb7d
    Size: 116.45 kB
  26. sssd-proxy-1.16.0-19.el7.5.x86_64.rpm
    MD5: 97360ef0a9343a30322d3b25aa0036d2
    SHA-256: 5590a66c6ce588a5863ac8ebb25ec281232eebd0e294f5251b89d738dd8774ae
    Size: 163.18 kB
  27. sssd-tools-1.16.0-19.el7.5.x86_64.rpm
    MD5: 20366c99b903de68cc74e42a3aeab9ff
    SHA-256: 6d0eb01ba6d4c5c995b2048759d04e96b74861a7b93ea642c898c96917d5fcb2
    Size: 396.62 kB
  28. sssd-winbind-idmap-1.16.0-19.el7.5.x86_64.rpm
    MD5: 9cad368b10291a48969a031c2f53ce2e
    SHA-256: eae5730c137aed8172a811984602f7dd9aca9d57c2ce724bafc0536b9422bc68
    Size: 123.36 kB
  29. libipa_hbac-1.16.0-19.el7.5.i686.rpm
    MD5: c9d578bdda38ec3890a11552ddedb60e
    SHA-256: 0327c127499a8a446fbaf3222e085d2c113d7dfd8dbf248f9ec97b7e4d73877f
    Size: 136.50 kB
  30. libsss_certmap-1.16.0-19.el7.5.i686.rpm
    MD5: 9bddc016e6e4ab85622039d1fc2ae36e
    SHA-256: 5bfcf7f88f715ad8b70517660afa3d1af673c91cc53ebc4b5d7510ea6a3bd605
    Size: 164.76 kB
  31. libsss_idmap-1.16.0-19.el7.5.i686.rpm
    MD5: f5e27f42d999d26877579cfe09bdaf5f
    SHA-256: 9cdf6d3a556d583bf695a2f83ae81f2d9f88568b14d347929a3a81b6757220c5
    Size: 141.87 kB
  32. libsss_nss_idmap-1.16.0-19.el7.5.i686.rpm
    MD5: 072642950af517ac33fae199f20f68bf
    SHA-256: bc27f0d36d6b912d343845f709488b3f9c8bcc1a98dced8cf4a3dd0da8abf551
    Size: 147.76 kB
  33. libsss_simpleifp-1.16.0-19.el7.5.i686.rpm
    MD5: f9394b5f53d66ca574f4f5798340f19e
    SHA-256: 1159299b406254f77dd10c95da98548ea24bab05069f176ab80e081ff87eef3a
    Size: 127.55 kB
  34. sssd-client-1.16.0-19.el7.5.i686.rpm
    MD5: f46e28e8a49de0219c04f5114c014c8a
    SHA-256: 7e4e66da3a245736453afe7a9d18b79f6f9313a13213d70698717a2b52704bc0
    Size: 194.55 kB