Fedora 16 Update: slapi-nis-0.28-1.fc16

[updates at fedoraproject.org]

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2011-17313
2011-12-22 21:45:16
--------------------------------------------------------------------------------

Name        : slapi-nis
Product     : Fedora 16
Version     : 0.28
Release     : 1.fc16
URL         : http://slapi-nis.fedorahosted.org/
Summary     : NIS Server and Schema Compatibility plugins for Directory Server
Description :
This package provides two plugins for Red Hat and 389 Directory Server.

The NIS Server plugin allows the directory server to act as a NIS server
for clients, dynamically generating and updating NIS maps according to
its configuration and the contents of the DIT, and serving the results to
clients using the NIS protocol as if it were an ordinary NIS server.

The Schema Compatibility plugin allows the directory server to provide an
alternate view of entries stored in part of the DIT, optionally adding,
dropping, or renaming attribute values, and optionally retrieving values
for attributes from multiple entries in the tree.

--------------------------------------------------------------------------------
Update Information:

389-ds:
fix shutdown crash - fix systemd dirsrv.target - entryusn fix - csn improvements

FreeIPA:
 * Rebuild against thread-safe ldap library.
 * Re-enable web password migration with stricter SE Linux policy
 * Set explicit version requirements for packages FreeIPA depends on
 * This update fixes problems with FreeIPA server and replica installation scripts.

Fixed bugs in *ipa-server-install*:
 * Installation crashed when sslget failed to read a certificate due to sslget bug (#771357)
 * ipaserver-install.log may not be produced under some circumstances

Fixed bugs in *ipa-replica-install*:
 * Script may crash due to invalid Python calls
 * Final service restart may fail if krb5kdc server is started before dirsrv server is up


slapi-nis:
Rebuild SLAPI plugins against thread-safe ldap library.
This update switches the locking method used from NSPR's read-write locks to those provided by libpthread or by the directory server itself. It also makes slightly better use of tcp-wrappers when performing access control checks for NIS clients which connect to the NIS service over TCP, corrects a copy-paste error in an error message, and makes sure to link with libldap_r rather than libldap.
--------------------------------------------------------------------------------
ChangeLog:

* Mon Dec 19 2011 Nalin Dahyabhai <nalin at redhat.com> - 0.28-1
- when configured with --with-ldap=openldap, link with -lldap_r rather
  than -lldap (rmeggins, #769107)
* Tue Dec  6 2011 Nalin Dahyabhai <nalin at redhat.com> - 0.27-1
- when building for 389-ds, use Slapi_RWLocks if they appear to be available
  (the rest of #730394/#730403)
* Fri Aug 12 2011 Nalin Dahyabhai <nalin at redhat.com> - 0.26-1
- when building for 389-ds, use libpthread's read-write locks instead of
  NSPR's (part of #730394/#730403)
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #755725 - 389 programs linked against openldap crash during shutdown
        https://bugzilla.redhat.com/show_bug.cgi?id=755725
  [ 2 ] Bug #769440 - SELinux Denials with HTTP Password Migration
        https://bugzilla.redhat.com/show_bug.cgi?id=769440
  [ 3 ] Bug #730394 - use slapi_rwlock instead of NSPR PR_RWLock directly
        https://bugzilla.redhat.com/show_bug.cgi?id=730394
  [ 4 ] Bug #755754 - Unable to start dirsrv service using systemd
        https://bugzilla.redhat.com/show_bug.cgi?id=755754
  [ 5 ] Bug #745259 - Incorrect entryUSN index under high load in replicated environment
        https://bugzilla.redhat.com/show_bug.cgi?id=745259
  [ 6 ] Bug #751645 - crash when simple paged fails to send entry to client
        https://bugzilla.redhat.com/show_bug.cgi?id=751645
  [ 7 ] Bug #769107 - must recompile slapi plugins with -lldap_r and not -lldap
        https://bugzilla.redhat.com/show_bug.cgi?id=769107
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update slapi-nis' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------