Bug 537793 - Double bind in autofs LDAP code breaks interop with some LDAP servers
Summary: Double bind in autofs LDAP code breaks interop with some LDAP servers
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Linux 5
Classification: Red Hat
Component: autofs
Version: 5.3
Hardware: All
OS: Linux
medium
medium
Target Milestone: rc
: ---
Assignee: Ian Kent
QA Contact: qe-baseos-daemons
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2009-11-16 11:43 UTC by Ian McLeod
Modified: 2018-10-27 15:37 UTC (History)
6 users (show)

Fixed In Version: autofs-5.0.1-0.rc2.133.el5
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2010-03-30 08:37:02 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)
Patch to eliminate extra bind in LDAP code (5.41 KB, patch)
2009-11-16 11:45 UTC, Ian McLeod
no flags Details | Diff


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2010:0265 0 normal SHIPPED_LIVE autofs bug fix update 2010-03-29 12:54:19 UTC

Description Ian McLeod 2009-11-16 11:43:49 UTC
Description of problem:

The existing autofs packages in RHEL5 fail to interoperate with the Sun LDAP server.  As part of a customer interaction outside of this BZ, Ian Kent has identified the root cause.  From Ian's attached patch:

"During the sasl authentication (and possible authentication method
selection) we establish a connection and then dispose of it and then
bind again. This is a little inefficient but some servers don't like
to bind again using the same LDAP handle and authentication fails
when it should succeed. We should use the authentication connection
once we get it and not perform another re-connect later. "

This patch was successfully tested against a Sun LDAP server on a customer site.  It resolves the issue.

Comment 1 Ian McLeod 2009-11-16 11:45:20 UTC
Created attachment 369671 [details]
Patch to eliminate extra bind in LDAP code

Patch as referenced in the comments.

Comment 6 Chris Ward 2010-02-11 10:23:48 UTC
~~ Attention Customers and Partners - RHEL 5.5 Beta is now available on RHN ~~

RHEL 5.5 Beta has been released! There should be a fix present in this 
release that addresses your request. Please test and report back results 
here, by March 3rd 2010 (2010-03-03) or sooner.

Upon successful verification of this request, post your results and update 
the Verified field in Bugzilla with the appropriate value.

If you encounter any issues while testing, please describe them and set 
this bug into NEED_INFO. If you encounter new defects or have additional 
patch(es) to request for inclusion, please clone this bug per each request
and escalate through your support representative.

Comment 8 errata-xmlrpc 2010-03-30 08:37:02 UTC
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on therefore solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

http://rhn.redhat.com/errata/RHBA-2010-0265.html


Note You need to log in before you can comment on or make changes to this bug.