Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Patches » RHBA-2013:0078-01

Overview

Id RHBA-2013:0078-01
Name Red Hat 2013:0078-01 RHBA mod_auth_kerb bug fix and enhancement update for RHEL 5 x86
Vendor Name red_hat
Product None
Content Type Recommended Recommended
Language(s)
Operating System(s) Linux 
Released On 07 Jan 2013 12:00:00

RHBA-2013:0078-01

Red Hat 2013:0078-01 RHBA mod_auth_kerb bug fix and enhancement update for RHEL 5 x86

Vendor Name

red_hat

Product

None

Released On

07 Jan 2013 12:00:00

Url

https://rhn.redhat.com/errata/RHBA-2013-0078.html

Description

LSAC(v2)
The mod_auth_kerb package provides a module for the Apache HTTP Server designed to provide Kerberos authentication over HTTP. The module supports the Negotiate authentication method, which performs full Kerberos authentication based on ticket exchanges. These updated mod_auth_kerb packages provide fixes for the following bugs: * Prior to this update, the mod_auth_kerb source RPM could not be built by a non-root user. This was because the httpd-devel package places the apxs utility, which is needed to build the mod_auth_kerb package, into the /usr/sbin directory. This directory is not specified in the PATH variable for non-root users. With this update, the apxs utility is defined as being placed in the /usr/bin directory in the "mod_auth_kerb.spec" file, and the mod_auth_kerb SRPM can now be successfully built by non-root users. (BZ#456662) * The "mod_auth_kerb" module did not use the Kerberos libraries in a thread-safe way. Therefore, if mod_auth_kerb ran under a multi-threaded Apache HTTP Server, authentication requests could terminate unexpectedly with a segmentation fault. With this update, the thread-safety problem has been fixed, and crashes no longer occur under these circumstances. (BZ#734098) In addition, these updated mod_auth_kerb packages provide the following enhancement: * The "KrbLocalUserMapping" Apache directive has been added to allow Kerberos principal names to be mapped to system user names. (BZ#446670) Users are advised to upgrade to these updated mod_auth_kerb packages, which fix these bugs and add this enhancement.

Related Resources

Related Vulnerabilities

None

Related Patches

None

Superseded Patches


Last Updated: 27 May 2016 11:16:09