Bug 1313797
| Summary: | NIS account passwords not disabled when nsAccountLock is TRUE | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 7 | Reporter: | Jaroslav Reznik <jreznik> |
| Component: | slapi-nis | Assignee: | Alexander Bokovoy <abokovoy> |
| Status: | CLOSED ERRATA | QA Contact: | Namita Soman <nsoman> |
| Severity: | urgent | Docs Contact: | |
| Priority: | urgent | ||
| Version: | 7.3 | CC: | abokovoy, ekeck, ksiddiqu, mkosek, nsoman, pbokoc, rcritten |
| Target Milestone: | rc | Keywords: | ZStream |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | slapi-nis-0.54-7.el7_2 | Doc Type: | Bug Fix |
| Doc Text: |
Previously, NIS server support in Red Hat Enterprise Linux Identity Management did not properly propagate information about lockout status of a user to NIS clients. This caused users which were locked out by an IdM administrator to still be able to log in via NIS if the NIS shadow map was enabled in addition to the passwd map. With this update, the NIS server is updated to correctly propagate lockout status information to clients, and systems using both NIS passwd and shadow maps correctly deny access to users which are locked out from IdM.
|
Story Points: | --- |
| Clone Of: | 1298481 | Environment: | |
| Last Closed: | 2016-05-12 09:57:55 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 1298481 | ||
| Bug Blocks: | |||
|
Description
Jaroslav Reznik
2016-03-02 11:12:40 UTC
Verified IPA and slapi-nis version: ========================== [root@auto-hv-01-guest06 ~]# rpm -q ipa-server slapi-nis ipa-server-4.2.0-15.el7_2.12.x86_64 slapi-nis-0.54-7.el7_2.x86_64 [root@auto-hv-01-guest06 ~]# IPA Master: =========== [root@auto-hv-01-guest06 ~]# ipa user-disable testuser1 --------------------------------- Disabled user account "testuser1" --------------------------------- [root@auto-hv-01-guest06 ~]# ipa user-enable testuser1 -------------------------------- Enabled user account "testuser1" -------------------------------- [root@auto-hv-01-guest06 ~]# NIS Client: =========== [root@auto-hv-01-guest02 ~]# ypcat passwd testuser1:*:531800001:531800001:test user1:/home/testuser1:/bin/sh admin:*:531800000:531800000:Administrator:/home/admin:/bin/bash [root@auto-hv-01-guest02 ~]# ypcat passwd testuser1:!!*:531800001:531800001:test user1:/home/testuser1:/bin/sh admin:*:531800000:531800000:Administrator:/home/admin:/bin/bash [root@auto-hv-01-guest02 ~]# ypcat passwd testuser1:*:531800001:531800001:test user1:/home/testuser1:/bin/sh admin:*:531800000:531800000:Administrator:/home/admin:/bin/bash [root@auto-hv-01-guest02 ~]# Doc text added. Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://rhn.redhat.com/errata/RHBA-2016-1043.html |