Product SiteDocumentation Site

1.174. nss-pam-ldapd

1.174.1. RHBA-2011:0796: bug fix update

An updated nss-pam-ldapd package is now available for Red Hat Enterprise Linux 6.
The nss-pam-ldapd provides the nss-pam-ldapd daemon (nslcd) which uses a directory server to look up name service information on behalf of a lightweight nsswitch module.
This updated nss-pam-ldapd package includes fixes for the following bugs:
  • Prior to this update, nslcd did not allow parentheses to be used in a valid name. With this update, the implementation of the "validusers" configuration option has been added and the use of opening and closing parentheses in usernames and groupnames is now allowed. (BZ#690870)
  • Verifying the nss-pam-ldapd package (by executing the "rpm --verify nss-pam-ldapd" command) failed in the /etc/nslcd.conf file due to changes in that configuration file performed after the installation of the package. With this update, post-installation changes in the /etc/nslcd.conf file no longer affect the verification of the nss-pam-ldapd package. (BZ#692225)
  • The nslcd man page syntax contained an error which caused the man page to return the following error message on the standard error output:
    Error parsing *roff command from file /usr/share/man/man8/nslcd.8.gz
    This update fixes the syntax error and the "man nslcd" command no longer returns an error message. (BZ#692496)
  • When nslcd was configured to use multiple LDAP servers, it failed to fall back to a different server in case the primary server could not be reached. This was due to nslcd trying to keep the first connection alive even when the connection was dropped. With this update, nslcd correctly falls back to a different server after loosing connection with the current one. (BZ#692817)
All users of nss-pam-ldapd are advised to upgrade to this updated package, which resolves these issues.