Recommended update for sssd

Announcement ID: SUSE-RU-2018:3086-1
Rating: moderate
References:
Affected Products:
  • Security Module for SUSE Linux Enterprise 11 11-SP3
  • SLES for SAP Applications 11-SP4
  • SUSE Linux Enterprise Server 11 SP4
  • SUSE Linux Enterprise Software Development Kit 11 SP4

An update that has three fixes can now be installed.

Description:

This update for provides the following fixes:

  • Fix a problem with the caching of groups that could cause lookups to return an incomplete set of groups for some particular users when connecting to a Active Directory domain. (bsc#1082568)

This updates also brings an additional sssd-openssl1 variant for the SLE11 Security Module.

This allows using sssd in TLS 1.2 environments. (FATE#321222 bsc#990288 bsc#1109291)

To enable it, install the "sssd-openssl1" package instead of "sssd".

Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

  • SUSE Linux Enterprise Software Development Kit 11 SP4
    zypper in -t patch sdksp4-sssd-13811=1
  • Security Module for SUSE Linux Enterprise 11 11-SP3
    zypper in -t patch secsp3-sssd-13811=1
  • SUSE Linux Enterprise Server 11 SP4
    zypper in -t patch slessp4-sssd-13811=1
  • SLES for SAP Applications 11-SP4
    zypper in -t patch slessp4-sssd-13811=1

Package List:

  • SUSE Linux Enterprise Software Development Kit 11 SP4 (s390x x86_64 i586 ppc64 ia64)
    • libsss_idmap-devel-1.9.4-0.34.12.1
    • libsss_sudo-devel-1.9.4-0.34.12.1
  • Security Module for SUSE Linux Enterprise 11 11-SP3 (s390x x86_64 i586 ppc64 ia64)
    • sssd-openssl1-tools-1.9.4-0.34.12.1
    • sssd-openssl1-1.9.4-0.34.12.1
    • python-sssd-config-openssl1-1.9.4-0.34.12.1
  • Security Module for SUSE Linux Enterprise 11 11-SP3 (ia64)
    • sssd-openssl1-x86-1.9.4-0.34.12.1
  • Security Module for SUSE Linux Enterprise 11 11-SP3 (ppc64 s390x x86_64)
    • sssd-openssl1-32bit-1.9.4-0.34.12.1
  • SUSE Linux Enterprise Server 11 SP4 (s390x x86_64 i586 ppc64 ia64)
    • sssd-1.9.4-0.34.12.1
    • python-sssd-config-1.9.4-0.34.12.1
    • sssd-tools-1.9.4-0.34.12.1
    • libsss_idmap0-1.9.4-0.34.12.1
  • SUSE Linux Enterprise Server 11 SP4 (ppc64 s390x x86_64)
    • sssd-32bit-1.9.4-0.34.12.1
  • SLES for SAP Applications 11-SP4 (ppc64 x86_64)
    • sssd-tools-1.9.4-0.34.12.1
    • libsss_idmap0-1.9.4-0.34.12.1
    • sssd-32bit-1.9.4-0.34.12.1
    • python-sssd-config-1.9.4-0.34.12.1
    • sssd-1.9.4-0.34.12.1

References: