Bug 1174634 – pwdChecker library requires version in pwdCheckModule attribute

Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.

Bug 1174634 - pwdChecker library requires version in pwdCheckModule attribute

Summary:	pwdChecker library requires version in pwdCheckModule attribute

Status:	CLOSED ERRATA

Aliases:	None

Product:	Red Hat Enterprise Linux 7
Classification:	Red Hat
Component:	openldap (Show other bugs)
Sub Component:
Version:	7.1
Hardware:	Unspecified Unspecified

Priority	medium Severity medium
Target Milestone:	rc
Target Release:	---
Assigned To:	Matus Honek
QA Contact:	Patrik Kis
Docs Contact:

URL:
Whiteboard:
Keywords:	EasyFix, Patch

Depends On:
Blocks:
	Show dependency tree / graph

Reported:	2014-12-16 03:02 EST by David Spurek
Modified:	2015-11-19 03:52 EST (History)
CC List:	4 users (show)

See Also:
Fixed In Version:
Doc Type:	Bug Fix
Doc Text:
Story Points:	---
Clone Of:
Environment:
Last Closed:	2015-11-19 03:52:41 EST
Type:	Bug
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

External Trackers
Tracker	ID	Priority	Status	Summary	Last Updated
Red Hat Product Errata	RHSA-2015:2131	normal	SHIPPED_LIVE	Moderate: openldap security, bug fix, and enhancement update	2015-11-19 04:10:21 EST

Groups: None (edit)

Description David Spurek 2014-12-16 03:02:30 EST

Description of problem:
pwdChecker library requires version in pwdCheckModule attribute.

attribute is defined in password policy as
pwdCheckModule: check_password.so

Now 'check_password.so' isn't enought and password modification fails because library isn't found.

In server log I see:
Dec 16 02:34:46 rhel7.example.com slapd[32730]: check_password_quality: lt_dlopen failed: (check_password.so) file not found.
Dec 16 02:34:46 rhel7.example.com slapd[32730]: send_ldap_result: conn=1005 op=1 p=3
Dec 16 02:34:46 rhel7.example.com slapd[32730]: send_ldap_result: err=19 matched="" text="Password fails quality checking policy"

[test]ls /usr/lib64/openldap/check*
/usr/lib64/openldap/check_password.so.1.1

Now I have to add 'check_password.so.1.1' as a value but this may be a problem in the future when version is changed.


Version-Release number of selected component (if applicable):
openldap-2.4.39-3.el7

How reproducible:


Steps to Reproduce:
1.
2.
3.

Actual results:


Expected results:


Additional info:

Comment 1 David Spurek 2014-12-16 03:03:15 EST

Easy solution is add symlink to check_password.so

Comment 3 Jan Synacek 2014-12-17 09:45:43 EST

Fix in Fedora:
http://pkgs.fedoraproject.org/cgit/openldap.git/commit/?id=0625d0e5014f6ddcf02e6d6ffed7fa2ba57fd024

Comment 4 Jan Synacek 2014-12-17 09:46:48 EST

The correct link to the correct commit:
http://pkgs.fedoraproject.org/cgit/openldap.git/commit/?id=4840f8de8ecf8ff5903dc8c6cd6e5e2a88a5ffd2

Comment 10 errata-xmlrpc 2015-11-19 03:52:41 EST

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHSA-2015-2131.html

Note You need to log in before you can comment on or make changes to this bug.