Mod_Authz_Ldap; Rhba-2009:0305: Bug Fix Update; Mod_Nss; Rhea-2009:0403: Enhancement Update - Red Hat ENTERPRISE LINUX 5.4 - TECHNICAL NOTES Manual

1.145. mod_authz_ldap

1.145.1. RHBA-2009:0305: bug fix update

Note
This update has already been released (prior to the GA of this release) as FASTRACK
RHBA-2009:0305
errata
An updated mod_authz_ldap package that fixes a bug is now available.
mod_authz_ldap is a module for the Apache HTTP Server which provides support for authenticating
users against an LDAP database.
This updated mod_authz_ldap package fixes a bug which resulted in random data being logged to
the access_log instead of the appropriate string when the "AuthzLDAPSetAuthorization" directive was
used.
All users of mod_authz_ldap are advised to upgrade to this updated package, which resolves this
issue.

1.146. mod_nss

1.146.1. RHEA-2009:0403: enhancement update

Note
This update has already been released (prior to the GA of this release) as errata
RHEA-2009:0403
An enhanced mod_nss package is now available.
mod_nss provides strong cryptography for the Apache Web server via the Secure Sockets Layer
(SSL) and Transport Layer Security (TLS) protocols, using the Network Security Services (NSS)
security library.
This update back-ports the PassphraseDialog "defer" configuration option in NSS. When this
parameter is set to "defer", only those tokens listed in the file are authenticated at startup. With the
"builtin" and "file" options for the PassphraseDialog parameter, all tokens are authenticated, even if the
token password is not defined. That can cause an authentication failure which prevents the Apache
server from starting.

1.146.2. RHBA-2009:1365: bug fix update

An update mod_nss package that fixes a bug in proxy handling is now available.
mod_nss provides strong cryptography for the Apache Web server via the Secure Sockets Layer
(SSL) and Transport Layer Security (TLS) protocols, using the Network Security Services (NSS)
security library.
1217
1218
mod_authz_ldap
169