Bug 595842
Summary: | krb5's libgssrpc/kadmin/kadmind needs to support IPv6 connections | ||
---|---|---|---|
Product: | Red Hat Enterprise Linux 6 | Reporter: | Nalin Dahyabhai <nalin> |
Component: | krb5 | Assignee: | Nalin Dahyabhai <nalin> |
Status: | CLOSED ERRATA | QA Contact: | BaseOS QE Security Team <qe-baseos-security> |
Severity: | medium | Docs Contact: | |
Priority: | medium | ||
Version: | 6.0 | CC: | dpal, fnadge, jlayton, jplans, rwheeler, steved, woodard |
Target Milestone: | rc | ||
Target Release: | --- | ||
Hardware: | All | ||
OS: | Linux | ||
URL: | http://krbdev.mit.edu/rt/Ticket/Display.html?id=6746 | ||
Whiteboard: | |||
Fixed In Version: | krb5-1.9-1.el6 | Doc Type: | Bug Fix |
Doc Text: |
This field is the basis of the errata or release note for this bug. It can also be used for change logs.
The Technical Note template, known as CCFR, is as follows:
Cause
The gssrpc library included in the krb5 package, and applications such as kadmin and kadmind which use it, are not able to make or accept connections using IPv6.
Consequence
On systems where a kadmin client/server pair do not both have IPv4 addresses, the kadmin client is not able to connect to the kadmind server, even if the hosts on which they are running have IPv6 addresses configured.
Fix
The kadmin server was modified to also listen for connections from clients over IPv6, and the kadmin client was modified to attempt connections using both IPv4 and IPv6 addresses, as available, when attempting to connect to a server.
|
Story Points: | --- |
Clone Of: | Environment: | ||
Last Closed: | 2011-05-19 13:11:50 UTC | Type: | --- |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: | |||
Bug Depends On: | |||
Bug Blocks: | 519903, 594247 |
Description
Nalin Dahyabhai
2010-05-25 18:35:04 UTC
Technical note added. If any revisions are required, please edit the "Technical Notes" field accordingly. All revisions will be proofread by the Engineering Content Services team. New Contents: This field is the basis of the errata or release note for this bug. It can also be used for change logs. The Technical Note template, known as CCFR, is as follows: Cause What actions or circumstances cause this bug to present. Consequence What happens when the bug presents. Fix What was done to fix the bug. Technical note updated. If any revisions are required, please edit the "Technical Notes" field accordingly. All revisions will be proofread by the Engineering Content Services team. Diffed Contents: @@ -3,8 +3,8 @@ The Technical Note template, known as CCFR, is as follows: Cause - What actions or circumstances cause this bug to present. + The gssrpc library included in the krb5 package, and applications such as kadmin and kadmind which use it, are not able to make or accept connections using IPv6. Consequence - What happens when the bug presents. + On systems where a kadmin client/server pair do not both have IPv4 addresses, the kadmin client is not able to connect to the kadmind server, even if the hosts on which they are running have IPv6 addresses configured. Fix - What was done to fix the bug.+ The kadmin server was modified to also listen for connections from clients over IPv6, and the kadmin client was modified to attempt connections using both IPv4 and IPv6 addresses, as available, when attempting to connect to a server. An advisory has been issued which should help the problem described in this bug report. This report is therefore being closed with a resolution of ERRATA. For more information on therefore solution and/or where to find the updated files, please follow the link below. You may reopen this bug report if the solution does not work for you. http://rhn.redhat.com/errata/RHBA-2011-0571.html |