On December the 30th we have updated the following packages on our IPA
servers:
Package list:
0:ipa-client-4.9.6-10.0.1.module+el8.5.0+20451+6c55862e.x86_64
0:ipa-client-common-4.9.6-10.0.1.module+el8.5.0+20451+6c55862e.noarch
0:ipa-common-4.9.6-10.0.1.module+el8.5.0+20451+6c55862e.noarch
0:ipa-selinux-4.9.6-10.0.1.module+el8.5.0+20451+6c55862e.noarch
0:ipa-server-4.9.6-10.0.1.module+el8.5.0+20451+6c55862e.x86_64
0:ipa-server-common-4.9.6-10.0.1.module+el8.5.0+20451+6c55862e.noarch
0:ipa-server-trust-ad-4.9.6-10.0.1.module+el8.5.0+20451+6c55862e.x86_64
0:python3-ipaclient-4.9.6-10.0.1.module+el8.5.0+20451+6c55862e.noarch
0:python3-ipalib-4.9.6-10.0.1.module+el8.5.0+20451+6c55862e.noarch
0:python3-ipaserver-4.9.6-10.0.1.module+el8.5.0+20451+6c55862e.noarch
0:389-ds-base-1.4.3.23-12.module+el8.5.0+20461+fe0fe228.x86_64
0:389-ds-base-libs-1.4.3.23-12.module+el8.5.0+20461+fe0fe228.x86_64
0:python3-lib389-1.4.3.23-12.module+el8.5.0+20461+fe0fe228.noarch
0:systemd-239-51.0.1.el8_5.3.x86_64
0:systemd-libs-239-51.0.1.el8_5.3.x86_64
0:systemd-pam-239-51.0.1.el8_5.3.x86_64
0:systemd-udev-239-51.0.1.el8_5.3.x86_64
0:kernel-4.18.0-348.7.1.el8_5.x86_64
0:kernel-core-4.18.0-348.7.1.el8_5.x86_64
0:kernel-modules-4.18.0-348.7.1.el8_5.x86_64
0:kernel-tools-4.18.0-348.7.1.el8_5.x86_64
0:kernel-tools-libs-4.18.0-348.7.1.el8_5.x86_64
0:kexec-tools-2.0.20-57.0.3.el8_5.1.x86_64
0:libipa_hbac-2.5.2-2.0.1.el8_5.3.x86_64
0:libsss_autofs-2.5.2-2.0.1.el8_5.3.x86_64
0:libsss_certmap-2.5.2-2.0.1.el8_5.3.x86_64
0:libsss_idmap-2.5.2-2.0.1.el8_5.3.x86_64
0:libsss_nss_idmap-2.5.2-2.0.1.el8_5.3.x86_64
0:libsss_simpleifp-2.5.2-2.0.1.el8_5.3.x86_64
0:libsss_sudo-2.5.2-2.0.1.el8_5.3.x86_64
1:openssl-1.1.1k-5.el8_5.x86_64
1:openssl-libs-1.1.1k-5.el8_5.x86_64
1:openssl-perl-1.1.1k-5.el8_5.x86_64
0:oraclelinux-release-el8-1.0-21.el8.x86_64
0:python3-libipa_hbac-2.5.2-2.0.1.el8_5.3.x86_64
0:python3-libsss_nss_idmap-2.5.2-2.0.1.el8_5.3.x86_64
0:python3-perf-4.18.0-348.7.1.el8_5.x86_64
0:python3-sss-2.5.2-2.0.1.el8_5.3.x86_64
0:python3-sss-murmur-2.5.2-2.0.1.el8_5.3.x86_64
0:python3-sssdconfig-2.5.2-2.0.1.el8_5.3.noarch
0:selinux-policy-3.14.3-80.0.2.el8_5.2.noarch
0:selinux-policy-targeted-3.14.3-80.0.2.el8_5.2.noarch
0:sssd-client-2.5.2-2.0.1.el8_5.3.x86_64
0:sssd-common-2.5.2-2.0.1.el8_5.3.x86_64
0:sssd-common-pac-2.5.2-2.0.1.el8_5.3.x86_64
0:sssd-dbus-2.5.2-2.0.1.el8_5.3.x86_64
0:sssd-ipa-2.5.2-2.0.1.el8_5.3.x86_64
0:sssd-kcm-2.5.2-2.0.1.el8_5.3.x86_64
0:sssd-krb5-common-2.5.2-2.0.1.el8_5.3.x86_64
0:sssd-nfs-idmap-2.5.2-2.0.1.el8_5.3.x86_64
0:sssd-tools-2.5.2-2.0.1.el8_5.3.x86_64
0:sssd-winbind-idmap-2.5.2-2.0.1.el8_5.3.x86_64
0:systemd-239-51.0.1.el8_5.2.x86_64
0:systemd-libs-239-51.0.1.el8_5.2.x86_64
0:systemd-pam-239-51.0.1.el8_5.2.x86_64
0:systemd-udev-239-51.0.1.el8_5.2.x86_64
0:kernel-uek-5.4.17-2136.302.6.1.el8uek.x86_64
After having updated these packages some of our ipa users (including
admin) were not able to log in anymore. Fortunately, some users still
worked allowing us to reset the passwords of the respective users.
Can this be update related or is it just a coincidence? We had to reset
the passwords and no time to hunt the problem down. But what can
possibly have caused this?
Cheers,
Ronald