From 45a63367298e591c660c438d00958c8820a376b9 Mon Sep 17 00:00:00 2001 From: Mark Reynolds Date: Wed, 23 Mar 2022 11:42:10 -0400 Subject: [PATCH 01/14] Bump version to 2.1.1 Issue 5230 - Race condition in RHDS disk monitoring functions Issue 4299 - UI - Add CoS funtionality (#5196) Issue 5225 - UI - impossible to manually set entry cache Issue 5186 - UI - Fix SASL Mapping regex test feature Issue 5221 - User with expired password can still login with full privledges Issue 5218 - double-free of the virtual attribute context in persistent search (#5219) Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194) Issue 5200 - dscontainer should use environment variables with DS_ prefix Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn Issue 5051 - RFE - ADSync flatten tree (#5192) Issue 5188 - UI - LDAP editor - add entry and group types Issue 5184 - memberOf does not work correctly with multiple include scopes Issue 5162 - BUG - error on importing chain files (#5164) Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179) Issue 5122 - dsconf instance backend suffix set doesn't accept backend name (#5178) Issue 5032 - Fix configure option in specfile (#5174) Issue 5176 - CI rewriter fails when libslapd.so.0 does not exist (#5177) Issue 5160 - BUG - x- prefix in descr-oid can confuse oid parser (#5161) Issue 5137 - RFE - improve sssd conf output (#5138) Issue 5102 - BUG - container may fail with bare uid/gid (#5140) Issue 5145 - Fix covscan errors Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task Issue 4299 - UI - Add Role funtionality (#5163) Issue 5050 - bdb bulk op fails if fs page size > 8K (#5150) Issue 5149 - Build failure on EL8 - undefined reference to `twalk_r' Issue 5142 - CLI - dsctl dbgen is broken Issue 4678 - Added test cases --- .gitignore | 2 + 389-ds-base.spec | 169 +++++++++-------------------------------------- sources | 2 +- 3 files changed, 36 insertions(+), 137 deletions(-) diff --git a/.gitignore b/.gitignore index c92b5f1..d00f37a 100644 --- a/.gitignore +++ b/.gitignore @@ -211,3 +211,5 @@ /389-ds-base-2.0.12.tar.bz2 /389-ds-base-2.0.13.tar.bz2 /389-ds-base-2.1.0.tar.bz2 +/389-ds-base-2.2.0.tar.bz2 +/389-ds-base-2.1.1.tar.bz2 diff --git a/389-ds-base.spec b/389-ds-base.spec index 0c48ffd..8d74e55 100644 --- a/389-ds-base.spec +++ b/389-ds-base.spec @@ -53,7 +53,7 @@ ExcludeArch: i686 Summary: 389 Directory Server (base) Name: 389-ds-base -Version: 2.1.0 +Version: 2.1.1 Release: %{?relprefix}1%{?prerel}%{?dist} License: GPLv3+ URL: https://www.port389.org @@ -450,8 +450,7 @@ autoreconf -fiv --libexecdir=%{_libexecdir}/%{pkgname} \ $NSSARGS $ASAN_FLAGS $RUST_FLAGS $CLANG_FLAGS $COCKPIT_FLAGS \ --enable-cmocka \ - --with-libldap-r=no \ - --enable-perl + --with-libldap-r=no # lib389 pushd ./src/lib389 @@ -721,137 +720,35 @@ exit 0 %endif %changelog -* Wed Feb 2 2022 Mark Reynolds - 2.1.0-1 -- Bump version to 2.1.0-1 -- Issue 4299 - UI - fix minor issues with ldap editor (table view) -- Issue 4299 - UI - fix minor issues with ldap editor -- Issue 5103 - UI - Add support for TPR to web console (#5111) -- Issue 2790 - RFE - set db home directory to /dev/shm by default -- Issue 5127 - ds_selinux_restorecon.sh: always exit 0 -- Issue 5135 - UI - Disk monitoring threshold does update properly -- Issue 5129 - BUG - Incorrect fn signature in add_index (#5130) -- Issue 5132 - Update Rust crate lru to fix CVE -- Issue 3555 - UI - fix audit issue with npm nanoid -- Issue 4299 - UI - Add ACI editing features -- Issue 5127 - run restorecon on /dev/shm at server startup -- Issue 5124 - dscontainer fails to create an instance -- Issue 5098 - Multiple issues around replication and CI test test_online_reinit_may_hang (#5109) -- Issue 4939 - Redesign LMDB import (#5071) -- Issue 5113 - Increase timestamp precision for development builds -- Issue 5115 - AttributeError: type object 'build_manpages' has no attribute 'build_manpages' -- Issue 5117 - Revert skipif line from CI test (#5118) -- Issue 5102 - BUG - container may fail with bare uid/gid (#5110) -- Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078) -- Issue 5105 - During a bind, if the target entry is not reachable the operation may complete without sending result (#5107) -- Issue 5074 - retro changelog cli updates (#5075) -- Issue 3584 - Add is_fips check to password tests (#5100) -- Issue 5095 - sync-repl with openldap may send truncated syncUUID (#5099) -- Issue 5032 - Fix OpenLDAP version check (#5091) -- Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094) -- Issue 2929 - Fix github warnings -- Issue 5053 - Improve GitHub Actions debugging -- Issue 5088 - dsctl dblib broken because of a merge issue (#5089) -- Issue 5079 - BUG - multiple ways to specific primary (#5087) -- Issue 5085 - Race condition about snmp collator at startup (#5086) -- Issue 5082 - slugify: ModuleNotFoundError when running test cases -- Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail (#5003) -- Issue 5037 - in OpenQA changelog trimming can crashes (#5070) -- Issue 5049 - ns-slapd crash in replication/acceptance_test.py (#5063) -- Issue 4890 - Need cli to easely get simple performance statistics (#4891) -- Issue 5011 - test_replica_backup_and_restore random failure (#5066) -- Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality -- Issue 5018 - RFE - openSUSE systemd hardening (#5019) -- Issue 4962 - Fix various UI bugs - Database and Backups (#5044) -- Issue 5055 - Improve core dump detection and collection in PR CI -- Issue 4994 - Revert retrocl dependency workaround (#4995) -- Issue 5046 - BUG - update concread (#5047) -- Issue 5043 - BUG - Result must be used compiler warning (#5045) -- Issue 4312 - performance search rate: contention on global monitoring counters (#4940) -- Issue 5034 - is_dbi contains an invalid debug message that trigger failure in import_tests (#5035) -- Issue 5029 - Unbind generates incorrent closed error message (#5030) -- Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections -- Issue 4931 - RFE: dsidm - add creation of service accounts -- Issue 5024 - BUG - windows ro replica sigsegv (#5027) -- Issue 4758 - Add tests for WebUI -- Issue 5032 - OpenLDAP is not shipped with non-threaded version of libldap (#5033) -- Issue 5038 - BUG - dsconf tls may fail due to incorrect cert path (#5039) -- Issue 5020 - BUG - improve clarity of posix win sync logging (#5021) -- Issue 5011 - test_replica_backup_and_restore random failure (#5028) -- Issue 5025 - RFE - remove useless logging (#5026) -- Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009) -- Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016) -- Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import (#5017) -- Issue 5014 - UI - Add group creation to LDAP editor -- Issue 5006 - UI - LDAP editor tree not being properly updated -- Issue 4923 - issue about LMDB dbi versus txn handling (#4924) -- Issue 5001 - Update CI test for new availableSASLMechs attribute -- Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail. -- Issue 5001 - Fix next round of UI bugs: -- Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000) -- Issue 4734 - ldif2db - import of entry with no parent doesnt generate a warning -- Issue 4778 - [RFE] Schedule execution of "compactdb" at specific date/time -- Issue 4978 - use more portable python command for checking containers -- Issue 4990 - CI tests: improve robustness of fourwaymmr (#4991) -- Issue 4992 - BUG - slapd.socket container fix (#4993) -- Issue 4984 - BUG - pid file handling (#4986) -- Issue 4460 - python3-lib389 ignore the configuration parameters from … (#4906) -- Issue 4982 - BUG - missing inttypes.h (#4983) -- Issue 4758 - Add tests for WebUI -- Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981) -- Issue 4096 - Missing perl dependencies for logconv.pl -- Issue 4758 - Add tests for WebUI -- Issue 4978 - make installer robust -- Issue 4898 - Implement bdb to lmdb CLI migration tools (#4952) -- Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import -- Issue 4973 - update snmp to use /run/dirsrv for PID file -- Issue 4973 - installer changes permissions on /run -- Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960) -- Issue 4962 - Fix various UI bugs - Plugins (#4969) -- Issue 4092 - systemd-tmpfiles warnings -- Issue 4956 - Automember allows invalid regex, and does not log proper error -- Issue 4731 - Promoting/demoting a replica can crash the server -- Issue 4962 - Fix various UI bugs part 1 -- Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949) -- Issue 4943 - Fix csn generator to limit time skew drift (#4946) -- Issue 4954 - pytest is killed by OOM killer when the whole test suite is executed -- Issue 2790 - Set db home directory by default -- Issue 4299 - Merge LDAP editor code into Cockpit UI -- Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace -- Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922) -- Issue 4896 - improve CI tests report in case of SERVER_DOWN exception (#4897) -- Issue 4678 - RFE automatique disable of virtual attribute checking (#4918) -- Issue 4847 - BUG - potential deadlock in replica (#4936) -- Issue 4513 - fix ACI CI tests involving ip/hostname rules -- Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926) -- Issue 4916 - Memory leak in ldap-agent -- Issue 4656 DS Remove problematic language from CLI tools and UI (#4893) -- Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.) -- Issue 4912 - Account Policy plugin does not set the config entry DN -- Issue 4863 - typoes in logconv.pl -- Issue 4796 - Add support for nsslapd-state to CLI & UI -- Issue 4894 - IPA failure in ipa user-del --preserve (#4907) -- Issue 4914 - BUG - resolve duplicate stderr with clang (#4915) -- Issue 4912 - dsidm command crashing when account policy plugin is enabled -- Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index -- Issue 4577 - Add GitHub actions -- Issue 4901 - Add COPR integration -- Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks -- Issue 4889 - bdb lock deadlock while reindex/import vlv index (#4892) -- Issue 4773 - Extend CI tests for DNA interval assignment -- Issue 4887 - UI - fix minor regression from camelCase fixup -- Issue 4887 - UI - Update webpack.config.js and package.json -- Issue 4725 [RFE] DS - Update the password policy to support Temporary Password Rules (#4853) -- Issue 4149 - UI - Migrate the remaining components to PF4 -- Issue 4169 - Migrate Replication & Schema tabs to PF4 -- Issue 4875 - CLI - Add some verbosity to installer -- Issue 4884 - server crashes when dnaInterval attribute is set to zero -- Issue 4880: Revert removed_config_49298_test.py wrongly modified by issue 4699 (#4881) -- Issue 4699 - backend redesign phase 4 - db-mdb plugin implementation (#4716) -- Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878) -- Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876) -- Issue 4775 - Add entryuuid CLI and Fixup (#4776) -- Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871) -- Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867) -- Issue 4096 - Missing perl dependencies for logconv.pl -- Issue 4736 - lib389 - fix regression in certutil error checking +* Wed Mar 23 2022 Mark Reynolds - 2.1.1-1 +- Bump version to 2.1.1 +- Issue 5230 - Race condition in RHDS disk monitoring functions +- Issue 4299 - UI - Add CoS funtionality (#5196) +- Issue 5225 - UI - impossible to manually set entry cache +- Issue 5186 - UI - Fix SASL Mapping regex test feature +- Issue 5221 - User with expired password can still login with full privledges +- Issue 5218 - double-free of the virtual attribute context in persistent search (#5219) +- Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194) +- Issue 5200 - dscontainer should use environment variables with DS_ prefix +- Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn +- Issue 5051 - RFE - ADSync flatten tree (#5192) +- Issue 5188 - UI - LDAP editor - add entry and group types +- Issue 5184 - memberOf does not work correctly with multiple include scopes +- Issue 5162 - BUG - error on importing chain files (#5164) +- Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements +- Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179) +- Issue 5122 - dsconf instance backend suffix set doesn't accept backend name (#5178) +- Issue 5032 - Fix configure option in specfile (#5174) +- Issue 5176 - CI rewriter fails when libslapd.so.0 does not exist (#5177) +- Issue 5160 - BUG - x- prefix in descr-oid can confuse oid parser (#5161) +- Issue 5137 - RFE - improve sssd conf output (#5138) +- Issue 5102 - BUG - container may fail with bare uid/gid (#5140) +- Issue 5145 - Fix covscan errors +- Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs +- Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task +- Issue 4299 - UI - Add Role funtionality (#5163) +- Issue 5050 - bdb bulk op fails if fs page size > 8K (#5150) +- Issue 5149 - Build failure on EL8 - undefined reference to `twalk_r' +- Issue 5142 - CLI - dsctl dbgen is broken +- Issue 4678 - Added test cases diff --git a/sources b/sources index 7b86ec0..3e8875d 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (389-ds-base-2.1.0.tar.bz2) = 496195b848566a0ccee272f06a041e2f764a5c8f3d84651a0fc3c7ca9128102ac6e8a8c9ae0945ce1742f39006daa724e394d0481d7c494a9701bf6c8709be51 +SHA512 (389-ds-base-2.1.1.tar.bz2) = 38feb135847ef409e03642433a84aea84b65f7c0d55cae35e71ff3c541e2c33bb5c1b207096438c7578db7ec98ce8b3fa3a0282d3ca0637ad9e593bc324fb78c SHA512 (jemalloc-5.2.1.tar.bz2) = 0bbb77564d767cef0c6fe1b97b705d368ddb360d55596945aea8c3ba5889fbce10479d85ad492c91d987caacdbbdccc706aa3688e321460069f00c05814fae02 From eea9ea6345955baad6367fc9731b5e7f3a03744e Mon Sep 17 00:00:00 2001 From: spike Date: Tue, 10 May 2022 17:21:32 +0200 Subject: [PATCH 02/14] Add 'acl' requires for setfacl (#2057436) --- 389-ds-base.spec | 1 + 1 file changed, 1 insertion(+) diff --git a/389-ds-base.spec b/389-ds-base.spec index 8d74e55..19a3fb3 100644 --- a/389-ds-base.spec +++ b/389-ds-base.spec @@ -234,6 +234,7 @@ Requires: selinux-policy >= 3.14.1-29 Requires: openldap-clients Requires: /usr/bin/c_rehash Requires: python%{python3_pkgversion}-ldap +Requires: acl # this is needed to setup SSL if you are not using the # administration server package From 34577034a00360f8260cd11a92ae92e99682d8be Mon Sep 17 00:00:00 2001 From: Viktor Ashirov Date: Mon, 30 May 2022 09:31:07 +0200 Subject: [PATCH 03/14] Missing requires for acl (Resolves rhbz#2057436) --- 389-ds-base.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/389-ds-base.spec b/389-ds-base.spec index 19a3fb3..fe4d539 100644 --- a/389-ds-base.spec +++ b/389-ds-base.spec @@ -54,7 +54,7 @@ ExcludeArch: i686 Summary: 389 Directory Server (base) Name: 389-ds-base Version: 2.1.1 -Release: %{?relprefix}1%{?prerel}%{?dist} +Release: %{?relprefix}2%{?prerel}%{?dist} License: GPLv3+ URL: https://www.port389.org Conflicts: selinux-policy-base < 3.9.8 @@ -721,6 +721,9 @@ exit 0 %endif %changelog +* Mon May 30 2022 Viktor Ashirov - 2.1.1-2 +- Missing requires for acl (Resolves rhbz#2057436) + * Wed Mar 23 2022 Mark Reynolds - 2.1.1-1 - Bump version to 2.1.1 - Issue 5230 - Race condition in RHDS disk monitoring functions From 1170e077ddf2ccaf684bde773a8b30d62b8933dc Mon Sep 17 00:00:00 2001 From: Viktor Ashirov Date: Thu, 2 Jun 2022 10:03:30 +0200 Subject: [PATCH 04/14] Update tests.yml Change upstream repo URL and remove 389-ds-base-legacy-tools package that is no longer present. --- tests/tests.yml | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/tests/tests.yml b/tests/tests.yml index 4643f2f..1878c82 100644 --- a/tests/tests.yml +++ b/tests/tests.yml @@ -2,7 +2,7 @@ - hosts: localhost remote_user: root vars: - ds_repo_url: https://pagure.io/389-ds-base.git + ds_repo_url: https://github.com/389ds/389-ds-base.git ds_repo_dir: ds ds_tests: "{{ ds_repo_dir }}/dirsrvtests/tests" pytest: py.test-3 @@ -24,4 +24,3 @@ - python3-pytest - 389-ds-base - 389-ds-base-snmp - - 389-ds-base-legacy-tools From bf94788fa29a9a69f906feb20e14c005c6582e5b Mon Sep 17 00:00:00 2001 From: Viktor Ashirov Date: Thu, 2 Jun 2022 10:32:20 +0200 Subject: [PATCH 05/14] Remove unused relprefix and prerel macros that break rpmdev-bumpspec logic During mass rebuilds NVR is bumped by rpmdev-bumpspec. But it can't handle complex Release: fields such as ours, that has %{prerel} and %{relprefix} macros. It adds .1 after the %{dist} macro instead of increasing the release number. The issue for rpmdev-bumpspec is unsolved since 2012: https://pagure.io/rpmdevtools/issue/18 These macros are unused by us and only cause issues when NVR is bumped. So let's remove them. --- 389-ds-base.spec | 29 +++++++++++------------------ 1 file changed, 11 insertions(+), 18 deletions(-) diff --git a/389-ds-base.spec b/389-ds-base.spec index fe4d539..6758394 100644 --- a/389-ds-base.spec +++ b/389-ds-base.spec @@ -5,13 +5,6 @@ # Exclude i686 bit arches ExcludeArch: i686 -# for a pre-release, define the prerel field e.g. .a1 .rc2 - comment out for official release -# also remove the space between % and global - this space is needed because -# fedpkg verrel stupidly ignores comment lines -#% global prerel .rc3 -# also need the relprefix field for a pre-release e.g. .0 - also comment out for official release -#% global relprefix 0. - # If perl-Socket-2.000 or newer is available, set 0 to use_Socket6. %global use_Socket6 0 @@ -54,7 +47,7 @@ ExcludeArch: i686 Summary: 389 Directory Server (base) Name: 389-ds-base Version: 2.1.1 -Release: %{?relprefix}2%{?prerel}%{?dist} +Release: 2%{?dist} License: GPLv3+ URL: https://www.port389.org Conflicts: selinux-policy-base < 3.9.8 @@ -266,7 +259,7 @@ Requires: perl-sigtrap Obsoletes: %{name} <= 1.3.5.4 -Source0: https://releases.pagure.org/389-ds-base/%{name}-%{version}%{?prerel}.tar.bz2 +Source0: https://releases.pagure.org/389-ds-base/%{name}-%{version}.tar.bz2 # 389-ds-git.sh should be used to generate the source tarball from git Source1: %{name}-git.sh Source2: %{name}-devel.README @@ -376,10 +369,10 @@ A cockpit UI Plugin for configuring and administering the 389 Directory Server %endif %prep -%autosetup -p1 -v -n %{name}-%{version}%{?prerel} +%autosetup -p1 -v -n %{name}-%{version} %if %{bundle_jemalloc} -%setup -q -n %{name}-%{version}%{?prerel} -T -D -b 3 +%setup -q -n %{name}-%{version} -T -D -b 3 %endif cp %{SOURCE2} README.devel @@ -459,10 +452,10 @@ pushd ./src/lib389 popd # argparse-manpage dynamic man pages have hardcoded man v1 in header, # need to change it to v8 -sed -i "1s/\"1\"/\"8\"/" %{_builddir}/%{name}-%{version}%{?prerel}/src/lib389/man/dsconf.8 -sed -i "1s/\"1\"/\"8\"/" %{_builddir}/%{name}-%{version}%{?prerel}/src/lib389/man/dsctl.8 -sed -i "1s/\"1\"/\"8\"/" %{_builddir}/%{name}-%{version}%{?prerel}/src/lib389/man/dsidm.8 -sed -i "1s/\"1\"/\"8\"/" %{_builddir}/%{name}-%{version}%{?prerel}/src/lib389/man/dscreate.8 +sed -i "1s/\"1\"/\"8\"/" %{_builddir}/%{name}-%{version}/src/lib389/man/dsconf.8 +sed -i "1s/\"1\"/\"8\"/" %{_builddir}/%{name}-%{version}/src/lib389/man/dsctl.8 +sed -i "1s/\"1\"/\"8\"/" %{_builddir}/%{name}-%{version}/src/lib389/man/dsidm.8 +sed -i "1s/\"1\"/\"8\"/" %{_builddir}/%{name}-%{version}/src/lib389/man/dscreate.8 # Generate symbolic info for debuggers export XCFLAGS=$RPM_OPT_FLAGS @@ -484,7 +477,7 @@ find %{buildroot}%{_datadir}/cockpit/389-console -type f | sed -e "s@%{buildroot %endif # Copy in our docs from doxygen. -cp -r %{_builddir}/%{name}-%{version}%{?prerel}/man/man3 $RPM_BUILD_ROOT/%{_mandir}/man3 +cp -r %{_builddir}/%{name}-%{version}/man/man3 $RPM_BUILD_ROOT/%{_mandir}/man3 # lib389 pushd src/lib389 @@ -509,8 +502,8 @@ rm -f $RPM_BUILD_ROOT%{_libdir}/libsvrcore.la %if %{bundle_jemalloc} pushd ../%{jemalloc_name}-%{jemalloc_ver} make DESTDIR="$RPM_BUILD_ROOT" install_lib install_bin -cp -pa COPYING ../%{name}-%{version}%{?prerel}/COPYING.jemalloc -cp -pa README ../%{name}-%{version}%{?prerel}/README.jemalloc +cp -pa COPYING ../%{name}-%{version}/COPYING.jemalloc +cp -pa README ../%{name}-%{version}/README.jemalloc popd %endif From 31b818c739ceee72e0ab4179c879d8efeacf2ba4 Mon Sep 17 00:00:00 2001 From: Mark Reynolds Date: Fri, 3 Jun 2022 16:42:37 -0400 Subject: [PATCH 06/14] Bump version to 2.1.2 Issue 5170 - BUG - incorrect behaviour of filter test (#5315) Issue 5324 - plugin acceptance test needs hardening Issue 5323 - BUG - migrating database for monitoring interface lead to crash (#5321) Issue 5304 - Need a compatibility option about sub suffix handling (#5310) Issue 5302 - Release tarballs don't contain cockpit webapp Issue 5237 - audit-ci: Cannot convert undefined or null to object Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285) Issue 4970 - Add support for recursively deleting subentries Issue 5284 - Replication broken after password change (#5286) Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292) Issue 5170 - RFE - Filter optimiser (#5171) Issue 5276 - CLI - improve task handling Issue 5273 - CLI - add arg completer for instance name Issue 2893 - CLI - dscreate - add options for setting up replication Issue 4866 - CLI - when enabling replication set changelog trimming by default Issue 5241 - UI - Add account locking missing functionality (#5251) Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266) Issue 4904 - Fix various small issues Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261) Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256) Issue 5210 - Python undefined names in lib389 Issue 5247 - BUG - Missing attributes in samba schema (#5248) Issue 5242 - Craft message may crash the server (#5243) Issue 5234 - UI - rename Users and Groups tab Issue 5217 - Simplify instance creation and administration by non root user (#5224) Issue 5227 - UI - No way to move back to Get Started step (#5233) --- .gitignore | 2 ++ 389-ds-base.spec | 44 +++++++++++++++++++++++++++++++++++++------- sources | 4 ++-- 3 files changed, 41 insertions(+), 9 deletions(-) diff --git a/.gitignore b/.gitignore index d00f37a..4ff4247 100644 --- a/.gitignore +++ b/.gitignore @@ -213,3 +213,5 @@ /389-ds-base-2.1.0.tar.bz2 /389-ds-base-2.2.0.tar.bz2 /389-ds-base-2.1.1.tar.bz2 +/jemalloc-5.3.0.tar.bz2 +/389-ds-base-2.1.2.tar.bz2 diff --git a/389-ds-base.spec b/389-ds-base.spec index 6758394..9248f8c 100644 --- a/389-ds-base.spec +++ b/389-ds-base.spec @@ -17,7 +17,7 @@ ExcludeArch: i686 %if %{bundle_jemalloc} %global jemalloc_name jemalloc -%global jemalloc_ver 5.2.1 +%global jemalloc_ver 5.3.0 %global __provides_exclude ^libjemalloc\\.so.*$ %endif @@ -46,8 +46,8 @@ ExcludeArch: i686 Summary: 389 Directory Server (base) Name: 389-ds-base -Version: 2.1.1 -Release: 2%{?dist} +Version: 2.1.2 +Release: 1%{?dist} License: GPLv3+ URL: https://www.port389.org Conflicts: selinux-policy-base < 3.9.8 @@ -146,8 +146,8 @@ Provides: bundled(crate(zeroize)) = 1.5.2 Provides: bundled(crate(zeroize_derive)) = 1.3.1 ##### Bundled cargo crates list - END ##### -BuildRequires: nspr-devel -BuildRequires: nss-devel >= 3.34 +BuildRequires: nspr-devel >= 4.32 +BuildRequires: nss-devel >= 3.67.0-7 BuildRequires: openldap-devel BuildRequires: lmdb-devel BuildRequires: libdb-devel @@ -231,8 +231,9 @@ Requires: acl # this is needed to setup SSL if you are not using the # administration server package -Requires: nss-tools -Requires: nss >= 3.34 +Requires: nspr >= 4.32 +Requires: nss >= 3.67.0-7 + # these are not found by the auto-dependency method # they are required to support the mandatory LDAP SASL mechs @@ -714,6 +715,35 @@ exit 0 %endif %changelog +* Fri Jun 3 2022 Mark Reynolds - 2.1.2-1 +- Bump version to 2.1.2 +- Issue 5170 - BUG - incorrect behaviour of filter test (#5315) +- Issue 5324 - plugin acceptance test needs hardening +- Issue 5323 - BUG - migrating database for monitoring interface lead to crash (#5321) +- Issue 5304 - Need a compatibility option about sub suffix handling (#5310) +- Issue 5302 - Release tarballs don't contain cockpit webapp +- Issue 5237 - audit-ci: Cannot convert undefined or null to object +- Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285) +- Issue 4970 - Add support for recursively deleting subentries +- Issue 5284 - Replication broken after password change (#5286) +- Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292) +- Issue 5170 - RFE - Filter optimiser (#5171) +- Issue 5276 - CLI - improve task handling +- Issue 5273 - CLI - add arg completer for instance name +- Issue 2893 - CLI - dscreate - add options for setting up replication +- Issue 4866 - CLI - when enabling replication set changelog trimming by default +- Issue 5241 - UI - Add account locking missing functionality (#5251) +- Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266) +- Issue 4904 - Fix various small issues +- Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261) +- Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256) +- Issue 5210 - Python undefined names in lib389 +- Issue 5247 - BUG - Missing attributes in samba schema (#5248) +- Issue 5242 - Craft message may crash the server (#5243) +- Issue 5234 - UI - rename Users and Groups tab +- Issue 5217 - Simplify instance creation and administration by non root user (#5224) +- Issue 5227 - UI - No way to move back to Get Started step (#5233) + * Mon May 30 2022 Viktor Ashirov - 2.1.1-2 - Missing requires for acl (Resolves rhbz#2057436) diff --git a/sources b/sources index 3e8875d..5941a68 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (389-ds-base-2.1.1.tar.bz2) = 38feb135847ef409e03642433a84aea84b65f7c0d55cae35e71ff3c541e2c33bb5c1b207096438c7578db7ec98ce8b3fa3a0282d3ca0637ad9e593bc324fb78c -SHA512 (jemalloc-5.2.1.tar.bz2) = 0bbb77564d767cef0c6fe1b97b705d368ddb360d55596945aea8c3ba5889fbce10479d85ad492c91d987caacdbbdccc706aa3688e321460069f00c05814fae02 +SHA512 (jemalloc-5.3.0.tar.bz2) = 22907bb052096e2caffb6e4e23548aecc5cc9283dce476896a2b1127eee64170e3562fa2e7db9571298814a7a2c7df6e8d1fbe152bd3f3b0c1abec22a2de34b1 +SHA512 (389-ds-base-2.1.2.tar.bz2) = 5190e9708e514c7c189479685e00ea59bf341acb83a85931050346fed606d720c82b105dd11ada0a7ae6f2731657f47a6eb769d93ddfff37f5ef3b773ac994e5 From 83914898c3c793db8fc53250f3739132d3ce892f Mon Sep 17 00:00:00 2001 From: Mark Reynolds Date: Tue, 5 Jul 2022 13:17:44 -0400 Subject: [PATCH 07/14] Bump version to 2.1.3 Issue 5221 - fix covscan (#5359) Issue 5353 - CLI - dsconf backend export breaks with multiple backends Issue 5345 - BUG - openldap migration fails when ppolicy is active (#5347) Issue 5323 - BUG - improve skipping of monitor db (#5340) Issue 5323 - BUG - Fix issue in mdb tests with monitor (#5326) Issue 5329 - Improve replication extended op logging Issue 5343 - Various improvements to winsync Issue 4932 - CLI - add parser aliases to long arg names Issue 5332 - BUG - normalise filter as intended Issue 5126 - Memory leak in slapi_ldap_get_lderrno (#5153) Issue 5311 - Missing Requires for acl in the spec file Issue 5333 - 389-ds-base fails to build with Python 3.11 --- .gitignore | 1 + 389-ds-base.spec | 98 ++++++++++++++++++++++++++++-------------------- sources | 2 +- 3 files changed, 59 insertions(+), 42 deletions(-) diff --git a/.gitignore b/.gitignore index 4ff4247..b8ba869 100644 --- a/.gitignore +++ b/.gitignore @@ -215,3 +215,4 @@ /389-ds-base-2.1.1.tar.bz2 /jemalloc-5.3.0.tar.bz2 /389-ds-base-2.1.2.tar.bz2 +/389-ds-base-2.1.3.tar.bz2 diff --git a/389-ds-base.spec b/389-ds-base.spec index 9248f8c..6515ba0 100644 --- a/389-ds-base.spec +++ b/389-ds-base.spec @@ -46,9 +46,9 @@ ExcludeArch: i686 Summary: 389 Directory Server (base) Name: 389-ds-base -Version: 2.1.2 +Version: 2.1.3 Release: 1%{?dist} -License: GPLv3+ +License: GPLv3+ and (ASL 2.0 or MIT) and MIT and (Unlicense or MIT) and MPLv2.0 and BSD and ASL 2.0 and (ASL 2.0 or Boost) and (ASL 2.0 with exceptions or ASL 2.0 or MIT) URL: https://www.port389.org Conflicts: selinux-policy-base < 3.9.8 Conflicts: freeipa-server < 4.0.3 @@ -61,89 +61,89 @@ Provides: ldif2ldbm >= 0 Provides: bundled(crate(ahash)) = 0.7.6 Provides: bundled(crate(ansi_term)) = 0.12.1 Provides: bundled(crate(atty)) = 0.2.14 -Provides: bundled(crate(autocfg)) = 1.0.1 +Provides: bundled(crate(autocfg)) = 1.1.0 Provides: bundled(crate(base64)) = 0.13.0 Provides: bundled(crate(bitflags)) = 1.3.2 Provides: bundled(crate(byteorder)) = 1.4.3 Provides: bundled(crate(cbindgen)) = 0.9.1 -Provides: bundled(crate(cc)) = 1.0.72 +Provides: bundled(crate(cc)) = 1.0.73 Provides: bundled(crate(cfg-if)) = 1.0.0 Provides: bundled(crate(clap)) = 2.34.0 Provides: bundled(crate(concread)) = 0.2.21 Provides: bundled(crate(crossbeam)) = 0.8.1 -Provides: bundled(crate(crossbeam-channel)) = 0.5.2 +Provides: bundled(crate(crossbeam-channel)) = 0.5.5 Provides: bundled(crate(crossbeam-deque)) = 0.8.1 -Provides: bundled(crate(crossbeam-epoch)) = 0.9.6 -Provides: bundled(crate(crossbeam-queue)) = 0.3.3 -Provides: bundled(crate(crossbeam-utils)) = 0.8.6 +Provides: bundled(crate(crossbeam-epoch)) = 0.9.9 +Provides: bundled(crate(crossbeam-queue)) = 0.3.5 +Provides: bundled(crate(crossbeam-utils)) = 0.8.10 Provides: bundled(crate(entryuuid)) = 0.1.0 Provides: bundled(crate(entryuuid_syntax)) = 0.1.0 Provides: bundled(crate(fastrand)) = 1.7.0 Provides: bundled(crate(fernet)) = 0.1.4 Provides: bundled(crate(foreign-types)) = 0.3.2 Provides: bundled(crate(foreign-types-shared)) = 0.1.1 -Provides: bundled(crate(getrandom)) = 0.2.4 +Provides: bundled(crate(getrandom)) = 0.2.7 Provides: bundled(crate(hashbrown)) = 0.11.2 Provides: bundled(crate(hermit-abi)) = 0.1.19 Provides: bundled(crate(instant)) = 0.1.12 -Provides: bundled(crate(itoa)) = 1.0.1 +Provides: bundled(crate(itoa)) = 1.0.2 Provides: bundled(crate(jobserver)) = 0.1.24 -Provides: bundled(crate(lazy_static)) = 1.4.0 -Provides: bundled(crate(libc)) = 0.2.116 +Provides: bundled(crate(libc)) = 0.2.126 Provides: bundled(crate(librnsslapd)) = 0.1.0 Provides: bundled(crate(librslapd)) = 0.1.0 -Provides: bundled(crate(lock_api)) = 0.4.6 -Provides: bundled(crate(log)) = 0.4.14 -Provides: bundled(crate(lru)) = 0.7.2 +Provides: bundled(crate(lock_api)) = 0.4.7 +Provides: bundled(crate(log)) = 0.4.17 +Provides: bundled(crate(lru)) = 0.7.7 Provides: bundled(crate(memoffset)) = 0.6.5 -Provides: bundled(crate(once_cell)) = 1.9.0 -Provides: bundled(crate(openssl)) = 0.10.38 -Provides: bundled(crate(openssl-sys)) = 0.9.72 +Provides: bundled(crate(once_cell)) = 1.13.0 +Provides: bundled(crate(openssl)) = 0.10.40 +Provides: bundled(crate(openssl-macros)) = 0.1.0 +Provides: bundled(crate(openssl-sys)) = 0.9.74 Provides: bundled(crate(parking_lot)) = 0.11.2 Provides: bundled(crate(parking_lot_core)) = 0.8.5 Provides: bundled(crate(paste)) = 0.1.18 Provides: bundled(crate(paste-impl)) = 0.1.18 -Provides: bundled(crate(pin-project-lite)) = 0.2.8 -Provides: bundled(crate(pkg-config)) = 0.3.24 +Provides: bundled(crate(pin-project-lite)) = 0.2.9 +Provides: bundled(crate(pkg-config)) = 0.3.25 Provides: bundled(crate(ppv-lite86)) = 0.2.16 Provides: bundled(crate(proc-macro-hack)) = 0.5.19 -Provides: bundled(crate(proc-macro2)) = 1.0.36 +Provides: bundled(crate(proc-macro2)) = 1.0.40 Provides: bundled(crate(pwdchan)) = 0.1.0 -Provides: bundled(crate(quote)) = 1.0.15 -Provides: bundled(crate(rand)) = 0.8.4 +Provides: bundled(crate(quote)) = 1.0.20 +Provides: bundled(crate(rand)) = 0.8.5 Provides: bundled(crate(rand_chacha)) = 0.3.1 Provides: bundled(crate(rand_core)) = 0.6.3 -Provides: bundled(crate(rand_hc)) = 0.3.1 -Provides: bundled(crate(redox_syscall)) = 0.2.10 +Provides: bundled(crate(redox_syscall)) = 0.2.13 Provides: bundled(crate(remove_dir_all)) = 0.5.3 -Provides: bundled(crate(ryu)) = 1.0.9 +Provides: bundled(crate(ryu)) = 1.0.10 Provides: bundled(crate(scopeguard)) = 1.1.0 -Provides: bundled(crate(serde)) = 1.0.136 -Provides: bundled(crate(serde_derive)) = 1.0.136 -Provides: bundled(crate(serde_json)) = 1.0.78 +Provides: bundled(crate(serde)) = 1.0.138 +Provides: bundled(crate(serde_derive)) = 1.0.138 +Provides: bundled(crate(serde_json)) = 1.0.82 Provides: bundled(crate(slapd)) = 0.1.0 Provides: bundled(crate(slapi_r_plugin)) = 0.1.0 -Provides: bundled(crate(smallvec)) = 1.8.0 +Provides: bundled(crate(smallvec)) = 1.9.0 Provides: bundled(crate(strsim)) = 0.8.0 -Provides: bundled(crate(syn)) = 1.0.86 +Provides: bundled(crate(syn)) = 1.0.98 Provides: bundled(crate(synstructure)) = 0.12.6 Provides: bundled(crate(tempfile)) = 3.3.0 Provides: bundled(crate(textwrap)) = 0.11.0 -Provides: bundled(crate(tokio)) = 1.16.1 -Provides: bundled(crate(tokio-macros)) = 1.7.0 -Provides: bundled(crate(toml)) = 0.5.8 +Provides: bundled(crate(tokio)) = 1.19.2 +Provides: bundled(crate(tokio-macros)) = 1.8.0 +Provides: bundled(crate(toml)) = 0.5.9 +Provides: bundled(crate(unicode-ident)) = 1.0.1 Provides: bundled(crate(unicode-width)) = 0.1.9 -Provides: bundled(crate(unicode-xid)) = 0.2.2 +Provides: bundled(crate(unicode-xid)) = 0.2.3 Provides: bundled(crate(uuid)) = 0.8.2 Provides: bundled(crate(vcpkg)) = 0.2.15 Provides: bundled(crate(vec_map)) = 0.8.2 Provides: bundled(crate(version_check)) = 0.9.4 -Provides: bundled(crate(wasi)) = 0.10.2+wasi_snapshot_preview1 +Provides: bundled(crate(wasi)) = 0.11.0+wasi_snapshot_preview1 Provides: bundled(crate(winapi)) = 0.3.9 Provides: bundled(crate(winapi-i686-pc-windows-gnu)) = 0.4.0 Provides: bundled(crate(winapi-x86_64-pc-windows-gnu)) = 0.4.0 -Provides: bundled(crate(zeroize)) = 1.5.2 -Provides: bundled(crate(zeroize_derive)) = 1.3.1 +Provides: bundled(crate(zeroize)) = 1.5.6 +Provides: bundled(crate(zeroize_derive)) = 1.3.2 ##### Bundled cargo crates list - END ##### BuildRequires: nspr-devel >= 4.32 @@ -214,7 +214,7 @@ BuildRequires: rsync Requires: %{name}-libs = %{version}-%{release} Requires: python%{python3_pkgversion}-lib389 = %{version}-%{release} -Requires: lmdb +Requires: lmdb-libs # this is needed for using semanage from our setup scripts Requires: policycoreutils-python-utils @@ -284,8 +284,9 @@ Please see http://seclists.org/oss-sec/2016/q1/363 for more information. %package libs Summary: Core libraries for 389 Directory Server -BuildRequires: nspr-devel -BuildRequires: nss-devel >= 3.34 +BuildRequires: nspr-devel >= 4.32 +BuildRequires: nss-devel >= 3.67.0-7 + BuildRequires: openldap-devel BuildRequires: libdb-devel BuildRequires: cyrus-sasl-devel @@ -715,6 +716,21 @@ exit 0 %endif %changelog +* Tue Jul 5 2022 Mark Reynolds - 2.1.3-1 +- Bump version to 2.1.3 +- Issue 5221 - fix covscan (#5359) +- Issue 5353 - CLI - dsconf backend export breaks with multiple backends +- Issue 5345 - BUG - openldap migration fails when ppolicy is active (#5347) +- Issue 5323 - BUG - improve skipping of monitor db (#5340) +- Issue 5323 - BUG - Fix issue in mdb tests with monitor (#5326) +- Issue 5329 - Improve replication extended op logging +- Issue 5343 - Various improvements to winsync +- Issue 4932 - CLI - add parser aliases to long arg names +- Issue 5332 - BUG - normalise filter as intended +- Issue 5126 - Memory leak in slapi_ldap_get_lderrno (#5153) +- Issue 5311 - Missing Requires for acl in the spec file +- Issue 5333 - 389-ds-base fails to build with Python 3.11 + * Fri Jun 3 2022 Mark Reynolds - 2.1.2-1 - Bump version to 2.1.2 - Issue 5170 - BUG - incorrect behaviour of filter test (#5315) diff --git a/sources b/sources index 5941a68..eb28dd5 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ SHA512 (jemalloc-5.3.0.tar.bz2) = 22907bb052096e2caffb6e4e23548aecc5cc9283dce476896a2b1127eee64170e3562fa2e7db9571298814a7a2c7df6e8d1fbe152bd3f3b0c1abec22a2de34b1 -SHA512 (389-ds-base-2.1.2.tar.bz2) = 5190e9708e514c7c189479685e00ea59bf341acb83a85931050346fed606d720c82b105dd11ada0a7ae6f2731657f47a6eb769d93ddfff37f5ef3b773ac994e5 +SHA512 (389-ds-base-2.1.3.tar.bz2) = d5942bc84115a9b671931de0667c69291c1465cf405f438f16f452e5e1f13d24b171985ca86399cf0d867ab273d4b80a5896050f7381223ac4b44cc394794e65 From 41d6257044459b2781e514fb269815e8b07d0cc6 Mon Sep 17 00:00:00 2001 From: Mark Reynolds Date: Mon, 25 Jul 2022 14:59:34 -0400 Subject: [PATCH 08/14] Bump version to 2.1.3-2 Add missing nss-tools requirement --- 389-ds-base.spec | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/389-ds-base.spec b/389-ds-base.spec index 6515ba0..264ab95 100644 --- a/389-ds-base.spec +++ b/389-ds-base.spec @@ -47,7 +47,7 @@ ExcludeArch: i686 Summary: 389 Directory Server (base) Name: 389-ds-base Version: 2.1.3 -Release: 1%{?dist} +Release: 2%{?dist} License: GPLv3+ and (ASL 2.0 or MIT) and MIT and (Unlicense or MIT) and MPLv2.0 and BSD and ASL 2.0 and (ASL 2.0 or Boost) and (ASL 2.0 with exceptions or ASL 2.0 or MIT) URL: https://www.port389.org Conflicts: selinux-policy-base < 3.9.8 @@ -233,6 +233,7 @@ Requires: acl # administration server package Requires: nspr >= 4.32 Requires: nss >= 3.67.0-7 +Requires: nss-tools # these are not found by the auto-dependency method @@ -716,6 +717,10 @@ exit 0 %endif %changelog +* Mon Jul 25 2022 Mark Reynolds - 2.1.3-2 +- Bump version to 2.1.3-2 +- Add missing nss-tools requirement + * Tue Jul 5 2022 Mark Reynolds - 2.1.3-1 - Bump version to 2.1.3 - Issue 5221 - fix covscan (#5359) From aba915190394cf16c11606f59a755f53ea1a4a80 Mon Sep 17 00:00:00 2001 From: Mark Reynolds Date: Thu, 28 Jul 2022 12:40:40 -0400 Subject: [PATCH 09/14] Bump version to 2.1.4-1 Issue 5383 - UI - Various fixes and RFE's for UI Issue 4656 - Remove problematic language from source code Issue 5380 - Separate cleanAllRUV code into new file Issue 5322 - optime & wtime on rejected connections is not properly set Issue 5375 - CI - disable TLS hostname checking Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function Issue 5371 - Update npm and cargo packages Issue 3069 - Support ECDSA private keys for TLS (#5365) --- .gitignore | 1 + 389-ds-base.spec | 53 +++++++++++++++++++++++++++++------------------- sources | 2 +- 3 files changed, 34 insertions(+), 22 deletions(-) diff --git a/.gitignore b/.gitignore index b8ba869..294346a 100644 --- a/.gitignore +++ b/.gitignore @@ -216,3 +216,4 @@ /jemalloc-5.3.0.tar.bz2 /389-ds-base-2.1.2.tar.bz2 /389-ds-base-2.1.3.tar.bz2 +/389-ds-base-2.1.4.tar.bz2 diff --git a/389-ds-base.spec b/389-ds-base.spec index 264ab95..d3105c1 100644 --- a/389-ds-base.spec +++ b/389-ds-base.spec @@ -46,9 +46,9 @@ ExcludeArch: i686 Summary: 389 Directory Server (base) Name: 389-ds-base -Version: 2.1.3 -Release: 2%{?dist} -License: GPLv3+ and (ASL 2.0 or MIT) and MIT and (Unlicense or MIT) and MPLv2.0 and BSD and ASL 2.0 and (ASL 2.0 or Boost) and (ASL 2.0 with exceptions or ASL 2.0 or MIT) +Version: 2.1.4 +Release: 1%{?dist} +License: GPLv3+ and (ASL 2.0 or MIT) URL: https://www.port389.org Conflicts: selinux-policy-base < 3.9.8 Conflicts: freeipa-server < 4.0.3 @@ -70,20 +70,20 @@ Provides: bundled(crate(cc)) = 1.0.73 Provides: bundled(crate(cfg-if)) = 1.0.0 Provides: bundled(crate(clap)) = 2.34.0 Provides: bundled(crate(concread)) = 0.2.21 -Provides: bundled(crate(crossbeam)) = 0.8.1 -Provides: bundled(crate(crossbeam-channel)) = 0.5.5 -Provides: bundled(crate(crossbeam-deque)) = 0.8.1 -Provides: bundled(crate(crossbeam-epoch)) = 0.9.9 -Provides: bundled(crate(crossbeam-queue)) = 0.3.5 -Provides: bundled(crate(crossbeam-utils)) = 0.8.10 +Provides: bundled(crate(crossbeam)) = 0.8.2 +Provides: bundled(crate(crossbeam-channel)) = 0.5.6 +Provides: bundled(crate(crossbeam-deque)) = 0.8.2 +Provides: bundled(crate(crossbeam-epoch)) = 0.9.10 +Provides: bundled(crate(crossbeam-queue)) = 0.3.6 +Provides: bundled(crate(crossbeam-utils)) = 0.8.11 Provides: bundled(crate(entryuuid)) = 0.1.0 Provides: bundled(crate(entryuuid_syntax)) = 0.1.0 -Provides: bundled(crate(fastrand)) = 1.7.0 +Provides: bundled(crate(fastrand)) = 1.8.0 Provides: bundled(crate(fernet)) = 0.1.4 Provides: bundled(crate(foreign-types)) = 0.3.2 Provides: bundled(crate(foreign-types-shared)) = 0.1.1 Provides: bundled(crate(getrandom)) = 0.2.7 -Provides: bundled(crate(hashbrown)) = 0.11.2 +Provides: bundled(crate(hashbrown)) = 0.12.3 Provides: bundled(crate(hermit-abi)) = 0.1.19 Provides: bundled(crate(instant)) = 0.1.12 Provides: bundled(crate(itoa)) = 1.0.2 @@ -93,12 +93,12 @@ Provides: bundled(crate(librnsslapd)) = 0.1.0 Provides: bundled(crate(librslapd)) = 0.1.0 Provides: bundled(crate(lock_api)) = 0.4.7 Provides: bundled(crate(log)) = 0.4.17 -Provides: bundled(crate(lru)) = 0.7.7 +Provides: bundled(crate(lru)) = 0.7.8 Provides: bundled(crate(memoffset)) = 0.6.5 Provides: bundled(crate(once_cell)) = 1.13.0 -Provides: bundled(crate(openssl)) = 0.10.40 +Provides: bundled(crate(openssl)) = 0.10.41 Provides: bundled(crate(openssl-macros)) = 0.1.0 -Provides: bundled(crate(openssl-sys)) = 0.9.74 +Provides: bundled(crate(openssl-sys)) = 0.9.75 Provides: bundled(crate(parking_lot)) = 0.11.2 Provides: bundled(crate(parking_lot_core)) = 0.8.5 Provides: bundled(crate(paste)) = 0.1.18 @@ -107,18 +107,18 @@ Provides: bundled(crate(pin-project-lite)) = 0.2.9 Provides: bundled(crate(pkg-config)) = 0.3.25 Provides: bundled(crate(ppv-lite86)) = 0.2.16 Provides: bundled(crate(proc-macro-hack)) = 0.5.19 -Provides: bundled(crate(proc-macro2)) = 1.0.40 +Provides: bundled(crate(proc-macro2)) = 1.0.42 Provides: bundled(crate(pwdchan)) = 0.1.0 Provides: bundled(crate(quote)) = 1.0.20 Provides: bundled(crate(rand)) = 0.8.5 Provides: bundled(crate(rand_chacha)) = 0.3.1 Provides: bundled(crate(rand_core)) = 0.6.3 -Provides: bundled(crate(redox_syscall)) = 0.2.13 +Provides: bundled(crate(redox_syscall)) = 0.2.16 Provides: bundled(crate(remove_dir_all)) = 0.5.3 Provides: bundled(crate(ryu)) = 1.0.10 Provides: bundled(crate(scopeguard)) = 1.1.0 -Provides: bundled(crate(serde)) = 1.0.138 -Provides: bundled(crate(serde_derive)) = 1.0.138 +Provides: bundled(crate(serde)) = 1.0.140 +Provides: bundled(crate(serde_derive)) = 1.0.140 Provides: bundled(crate(serde_json)) = 1.0.82 Provides: bundled(crate(slapd)) = 0.1.0 Provides: bundled(crate(slapi_r_plugin)) = 0.1.0 @@ -128,10 +128,10 @@ Provides: bundled(crate(syn)) = 1.0.98 Provides: bundled(crate(synstructure)) = 0.12.6 Provides: bundled(crate(tempfile)) = 3.3.0 Provides: bundled(crate(textwrap)) = 0.11.0 -Provides: bundled(crate(tokio)) = 1.19.2 +Provides: bundled(crate(tokio)) = 1.20.1 Provides: bundled(crate(tokio-macros)) = 1.8.0 Provides: bundled(crate(toml)) = 0.5.9 -Provides: bundled(crate(unicode-ident)) = 1.0.1 +Provides: bundled(crate(unicode-ident)) = 1.0.2 Provides: bundled(crate(unicode-width)) = 0.1.9 Provides: bundled(crate(unicode-xid)) = 0.2.3 Provides: bundled(crate(uuid)) = 0.8.2 @@ -142,7 +142,7 @@ Provides: bundled(crate(wasi)) = 0.11.0+wasi_snapshot_preview1 Provides: bundled(crate(winapi)) = 0.3.9 Provides: bundled(crate(winapi-i686-pc-windows-gnu)) = 0.4.0 Provides: bundled(crate(winapi-x86_64-pc-windows-gnu)) = 0.4.0 -Provides: bundled(crate(zeroize)) = 1.5.6 +Provides: bundled(crate(zeroize)) = 1.5.7 Provides: bundled(crate(zeroize_derive)) = 1.3.2 ##### Bundled cargo crates list - END ##### @@ -717,6 +717,17 @@ exit 0 %endif %changelog +* Thu Jul 28 2022 Mark Reynolds - 2.1.4-1 +- Bump version to 2.1.4-1 +- Issue 5383 - UI - Various fixes and RFE's for UI +- Issue 4656 - Remove problematic language from source code +- Issue 5380 - Separate cleanAllRUV code into new file +- Issue 5322 - optime & wtime on rejected connections is not properly set +- Issue 5375 - CI - disable TLS hostname checking +- Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function +- Issue 5371 - Update npm and cargo packages +- Issue 3069 - Support ECDSA private keys for TLS (#5365) + * Mon Jul 25 2022 Mark Reynolds - 2.1.3-2 - Bump version to 2.1.3-2 - Add missing nss-tools requirement diff --git a/sources b/sources index eb28dd5..b0ca1fc 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ +SHA512 (389-ds-base-2.1.4.tar.bz2) = b96c146f27482e348bc1bef00d160a32f97a1db6818c6679ecbae69d49d365ecc8fbd1ed4fc15e7b099e3ea45f26058138851a85029372ea8c0b763c63af5e8f SHA512 (jemalloc-5.3.0.tar.bz2) = 22907bb052096e2caffb6e4e23548aecc5cc9283dce476896a2b1127eee64170e3562fa2e7db9571298814a7a2c7df6e8d1fbe152bd3f3b0c1abec22a2de34b1 -SHA512 (389-ds-base-2.1.3.tar.bz2) = d5942bc84115a9b671931de0667c69291c1465cf405f438f16f452e5e1f13d24b171985ca86399cf0d867ab273d4b80a5896050f7381223ac4b44cc394794e65 From 2e2b659b873d50c2e1cbc011545b22cba7fa27a0 Mon Sep 17 00:00:00 2001 From: Mark Reynolds Date: Tue, 23 Aug 2022 12:33:12 -0400 Subject: [PATCH 10/14] Bump version to 2.1.5 Issue 5428 - Fix regression with nscpEntryWsi computation Issue 5423 - CLI - Fix missing 'not' in description Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422) Issue 3903 - fix repl keep alive event interval Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420) Issue 5415 - Hostname when set to localhost causing failures in other tests Issue 5412 - lib389 - do not set backend name to lowercase Issue 5385 - LMDB - import crash in rdncache_add_elem (#5406) Issue 3903 - keep alive update event starts too soon Issue 5397 - Fix various memory leaks Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400) Issue 3903 - Supplier should do periodic updates Issue 5377 - Code cleanup: Fix Covscan invalid reference (#5393) Issue 5392 - dscreate fails when using alternative ports in the SELinux hi_reserved_port_t label range Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387) Issue 5388 - fix use-after-free and deadcode --- .gitignore | 1 + 389-ds-base.spec | 21 ++++++++++++++++++++- sources | 2 +- 3 files changed, 22 insertions(+), 2 deletions(-) diff --git a/.gitignore b/.gitignore index 294346a..8771e42 100644 --- a/.gitignore +++ b/.gitignore @@ -217,3 +217,4 @@ /389-ds-base-2.1.2.tar.bz2 /389-ds-base-2.1.3.tar.bz2 /389-ds-base-2.1.4.tar.bz2 +/389-ds-base-2.1.5.tar.bz2 diff --git a/389-ds-base.spec b/389-ds-base.spec index d3105c1..a933a4f 100644 --- a/389-ds-base.spec +++ b/389-ds-base.spec @@ -46,7 +46,7 @@ ExcludeArch: i686 Summary: 389 Directory Server (base) Name: 389-ds-base -Version: 2.1.4 +Version: 2.1.5 Release: 1%{?dist} License: GPLv3+ and (ASL 2.0 or MIT) URL: https://www.port389.org @@ -717,6 +717,25 @@ exit 0 %endif %changelog +* Tue Aug 23 2022 Mark Reynolds - 2.1.5-1 +- Bump version to 2.1.5 +- Issue 5428 - Fix regression with nscpEntryWsi computation +- Issue 5423 - CLI - Fix missing 'not' in description +- Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422) +- Issue 3903 - fix repl keep alive event interval +- Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420) +- Issue 5415 - Hostname when set to localhost causing failures in other tests +- Issue 5412 - lib389 - do not set backend name to lowercase +- Issue 5385 - LMDB - import crash in rdncache_add_elem (#5406) +- Issue 3903 - keep alive update event starts too soon +- Issue 5397 - Fix various memory leaks +- Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400) +- Issue 3903 - Supplier should do periodic updates +- Issue 5377 - Code cleanup: Fix Covscan invalid reference (#5393) +- Issue 5392 - dscreate fails when using alternative ports in the SELinux hi_reserved_port_t label range +- Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387) +- Issue 5388 - fix use-after-free and deadcode + * Thu Jul 28 2022 Mark Reynolds - 2.1.4-1 - Bump version to 2.1.4-1 - Issue 5383 - UI - Various fixes and RFE's for UI diff --git a/sources b/sources index b0ca1fc..161c99b 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (389-ds-base-2.1.4.tar.bz2) = b96c146f27482e348bc1bef00d160a32f97a1db6818c6679ecbae69d49d365ecc8fbd1ed4fc15e7b099e3ea45f26058138851a85029372ea8c0b763c63af5e8f +SHA512 (389-ds-base-2.1.5.tar.bz2) = 6286964ab9e11992854728013e3e6ac89e5c8f86282ace68138aafbddc7bde935d662857111a85d65cbe37c6a3bff6ae8f351145eb18ebf357c0817420c77fab SHA512 (jemalloc-5.3.0.tar.bz2) = 22907bb052096e2caffb6e4e23548aecc5cc9283dce476896a2b1127eee64170e3562fa2e7db9571298814a7a2c7df6e8d1fbe152bd3f3b0c1abec22a2de34b1 From c633fea1faf95903bd113fcfbd753aab0ad5c8ba Mon Sep 17 00:00:00 2001 From: Mark Reynolds Date: Fri, 18 Nov 2022 10:06:52 -0500 Subject: [PATCH 11/14] Bump version to 2.1.6 Issue 5532 - Make db compaction TOD day more robust. Issue 5529 - UI - Fix npm vulnerability in loader-utils Issue 3555 - UI - fix audit issue with npm loader-utils (#5514) Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement Issue 5510 - remove twalk_r dependency to build on RHEL8 (#5516) Issue 5162 - RFE - CLI allow adding CA certificate bundles Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455) Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513) Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed Issue 5502 - RFE - Add option to display entry attributes in audit log Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501) Issue 5495 - RFE - skip dds during migration. (#5496) Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492) Issue 5368 - Retro Changelog trimming does not work (#5486) Issue 5487 - Fix various issues with logconv.pl Issue 5482 - lib389 - Can not enable replication with a mixed case suffix Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480) Issue 3061 - RFE - Add password policy debug log level Issue 5462 - RFE - add missing default indexes (#5464) Issue 5305 - OpenLDAP version autodetection doesn't work Issue 4324 - Revert recursive pthread mutex usage in factory.c Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264) Issue 4324 - Revert recursive pthread mutex change (#5463) Issue 5465 - Fix dbscan linking (#5466) Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255) Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272) Issue 5453 - UI/CLI - Changing Root DN breaks UI Issue 5446 - Fix some covscan issues (#5451) Issue 5294 - Report Portal 5 is not processing an XML file with (#5358) Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc Issue 4308 - checking if an entry is a referral is expensive Issue 5447 - UI - add NDN max cache size to UI Issue 5443 - UI - disable save button while saving Issue 5413 - Allow only one MemberOf fixup task at a time Issue 5158 - entryuuid fixup tasks fails in replicated topology (#5439) Issue 4592 - dscreate error with custom dir_path (#5434) Issue 5397 - Fix memory leak with the intent filter Issue 5356 - For RUST build update the default password storage scheme --- .gitignore | 1 + 389-ds-base.spec | 97 ++++++++++++++++++++++++++++++++++-------------- sources | 2 +- 3 files changed, 71 insertions(+), 29 deletions(-) diff --git a/.gitignore b/.gitignore index 8771e42..c370c41 100644 --- a/.gitignore +++ b/.gitignore @@ -218,3 +218,4 @@ /389-ds-base-2.1.3.tar.bz2 /389-ds-base-2.1.4.tar.bz2 /389-ds-base-2.1.5.tar.bz2 +/389-ds-base-2.1.6.tar.bz2 diff --git a/389-ds-base.spec b/389-ds-base.spec index a933a4f..453ad35 100644 --- a/389-ds-base.spec +++ b/389-ds-base.spec @@ -46,7 +46,7 @@ ExcludeArch: i686 Summary: 389 Directory Server (base) Name: 389-ds-base -Version: 2.1.5 +Version: 2.1.6 Release: 1%{?dist} License: GPLv3+ and (ASL 2.0 or MIT) URL: https://www.port389.org @@ -62,78 +62,78 @@ Provides: bundled(crate(ahash)) = 0.7.6 Provides: bundled(crate(ansi_term)) = 0.12.1 Provides: bundled(crate(atty)) = 0.2.14 Provides: bundled(crate(autocfg)) = 1.1.0 -Provides: bundled(crate(base64)) = 0.13.0 +Provides: bundled(crate(base64)) = 0.13.1 Provides: bundled(crate(bitflags)) = 1.3.2 Provides: bundled(crate(byteorder)) = 1.4.3 Provides: bundled(crate(cbindgen)) = 0.9.1 -Provides: bundled(crate(cc)) = 1.0.73 +Provides: bundled(crate(cc)) = 1.0.76 Provides: bundled(crate(cfg-if)) = 1.0.0 Provides: bundled(crate(clap)) = 2.34.0 Provides: bundled(crate(concread)) = 0.2.21 Provides: bundled(crate(crossbeam)) = 0.8.2 Provides: bundled(crate(crossbeam-channel)) = 0.5.6 Provides: bundled(crate(crossbeam-deque)) = 0.8.2 -Provides: bundled(crate(crossbeam-epoch)) = 0.9.10 +Provides: bundled(crate(crossbeam-epoch)) = 0.9.11 Provides: bundled(crate(crossbeam-queue)) = 0.3.6 -Provides: bundled(crate(crossbeam-utils)) = 0.8.11 +Provides: bundled(crate(crossbeam-utils)) = 0.8.12 Provides: bundled(crate(entryuuid)) = 0.1.0 Provides: bundled(crate(entryuuid_syntax)) = 0.1.0 Provides: bundled(crate(fastrand)) = 1.8.0 Provides: bundled(crate(fernet)) = 0.1.4 Provides: bundled(crate(foreign-types)) = 0.3.2 Provides: bundled(crate(foreign-types-shared)) = 0.1.1 -Provides: bundled(crate(getrandom)) = 0.2.7 +Provides: bundled(crate(getrandom)) = 0.2.8 Provides: bundled(crate(hashbrown)) = 0.12.3 Provides: bundled(crate(hermit-abi)) = 0.1.19 Provides: bundled(crate(instant)) = 0.1.12 -Provides: bundled(crate(itoa)) = 1.0.2 -Provides: bundled(crate(jobserver)) = 0.1.24 -Provides: bundled(crate(libc)) = 0.2.126 +Provides: bundled(crate(itoa)) = 1.0.4 +Provides: bundled(crate(jobserver)) = 0.1.25 +Provides: bundled(crate(libc)) = 0.2.137 Provides: bundled(crate(librnsslapd)) = 0.1.0 Provides: bundled(crate(librslapd)) = 0.1.0 -Provides: bundled(crate(lock_api)) = 0.4.7 +Provides: bundled(crate(lock_api)) = 0.4.9 Provides: bundled(crate(log)) = 0.4.17 Provides: bundled(crate(lru)) = 0.7.8 Provides: bundled(crate(memoffset)) = 0.6.5 -Provides: bundled(crate(once_cell)) = 1.13.0 -Provides: bundled(crate(openssl)) = 0.10.41 +Provides: bundled(crate(once_cell)) = 1.16.0 +Provides: bundled(crate(openssl)) = 0.10.42 Provides: bundled(crate(openssl-macros)) = 0.1.0 -Provides: bundled(crate(openssl-sys)) = 0.9.75 +Provides: bundled(crate(openssl-sys)) = 0.9.77 Provides: bundled(crate(parking_lot)) = 0.11.2 Provides: bundled(crate(parking_lot_core)) = 0.8.5 Provides: bundled(crate(paste)) = 0.1.18 Provides: bundled(crate(paste-impl)) = 0.1.18 Provides: bundled(crate(pin-project-lite)) = 0.2.9 -Provides: bundled(crate(pkg-config)) = 0.3.25 -Provides: bundled(crate(ppv-lite86)) = 0.2.16 +Provides: bundled(crate(pkg-config)) = 0.3.26 +Provides: bundled(crate(ppv-lite86)) = 0.2.17 Provides: bundled(crate(proc-macro-hack)) = 0.5.19 -Provides: bundled(crate(proc-macro2)) = 1.0.42 +Provides: bundled(crate(proc-macro2)) = 1.0.47 Provides: bundled(crate(pwdchan)) = 0.1.0 -Provides: bundled(crate(quote)) = 1.0.20 +Provides: bundled(crate(quote)) = 1.0.21 Provides: bundled(crate(rand)) = 0.8.5 Provides: bundled(crate(rand_chacha)) = 0.3.1 -Provides: bundled(crate(rand_core)) = 0.6.3 +Provides: bundled(crate(rand_core)) = 0.6.4 Provides: bundled(crate(redox_syscall)) = 0.2.16 Provides: bundled(crate(remove_dir_all)) = 0.5.3 -Provides: bundled(crate(ryu)) = 1.0.10 +Provides: bundled(crate(ryu)) = 1.0.11 Provides: bundled(crate(scopeguard)) = 1.1.0 -Provides: bundled(crate(serde)) = 1.0.140 -Provides: bundled(crate(serde_derive)) = 1.0.140 -Provides: bundled(crate(serde_json)) = 1.0.82 +Provides: bundled(crate(serde)) = 1.0.147 +Provides: bundled(crate(serde_derive)) = 1.0.147 +Provides: bundled(crate(serde_json)) = 1.0.88 Provides: bundled(crate(slapd)) = 0.1.0 Provides: bundled(crate(slapi_r_plugin)) = 0.1.0 -Provides: bundled(crate(smallvec)) = 1.9.0 +Provides: bundled(crate(smallvec)) = 1.10.0 Provides: bundled(crate(strsim)) = 0.8.0 -Provides: bundled(crate(syn)) = 1.0.98 +Provides: bundled(crate(syn)) = 1.0.103 Provides: bundled(crate(synstructure)) = 0.12.6 Provides: bundled(crate(tempfile)) = 3.3.0 Provides: bundled(crate(textwrap)) = 0.11.0 -Provides: bundled(crate(tokio)) = 1.20.1 +Provides: bundled(crate(tokio)) = 1.21.2 Provides: bundled(crate(tokio-macros)) = 1.8.0 Provides: bundled(crate(toml)) = 0.5.9 -Provides: bundled(crate(unicode-ident)) = 1.0.2 -Provides: bundled(crate(unicode-width)) = 0.1.9 -Provides: bundled(crate(unicode-xid)) = 0.2.3 +Provides: bundled(crate(unicode-ident)) = 1.0.5 +Provides: bundled(crate(unicode-width)) = 0.1.10 +Provides: bundled(crate(unicode-xid)) = 0.2.4 Provides: bundled(crate(uuid)) = 0.8.2 Provides: bundled(crate(vcpkg)) = 0.2.15 Provides: bundled(crate(vec_map)) = 0.8.2 @@ -717,6 +717,47 @@ exit 0 %endif %changelog +* Fri Nov 18 2022 Mark Reynolds - 2.1.6-1 +- Bump version to 2.1.6 +- Issue 5532 - Make db compaction TOD day more robust. +- Issue 5529 - UI - Fix npm vulnerability in loader-utils +- Issue 3555 - UI - fix audit issue with npm loader-utils (#5514) +- Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement +- Issue 5510 - remove twalk_r dependency to build on RHEL8 (#5516) +- Issue 5162 - RFE - CLI allow adding CA certificate bundles +- Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455) +- Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513) +- Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed +- Issue 5502 - RFE - Add option to display entry attributes in audit log +- Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501) +- Issue 5495 - RFE - skip dds during migration. (#5496) +- Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492) +- Issue 5368 - Retro Changelog trimming does not work (#5486) +- Issue 5487 - Fix various issues with logconv.pl +- Issue 5482 - lib389 - Can not enable replication with a mixed case suffix +- Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480) +- Issue 3061 - RFE - Add password policy debug log level +- Issue 5462 - RFE - add missing default indexes (#5464) +- Issue 5305 - OpenLDAP version autodetection doesn't work +- Issue 4324 - Revert recursive pthread mutex usage in factory.c +- Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264) +- Issue 4324 - Revert recursive pthread mutex change (#5463) +- Issue 5465 - Fix dbscan linking (#5466) +- Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255) +- Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272) +- Issue 5453 - UI/CLI - Changing Root DN breaks UI +- Issue 5446 - Fix some covscan issues (#5451) +- Issue 5294 - Report Portal 5 is not processing an XML file with (#5358) +- Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc +- Issue 4308 - checking if an entry is a referral is expensive +- Issue 5447 - UI - add NDN max cache size to UI +- Issue 5443 - UI - disable save button while saving +- Issue 5413 - Allow only one MemberOf fixup task at a time +- Issue 5158 - entryuuid fixup tasks fails in replicated topology (#5439) +- Issue 4592 - dscreate error with custom dir_path (#5434) +- Issue 5397 - Fix memory leak with the intent filter +- Issue 5356 - For RUST build update the default password storage scheme + * Tue Aug 23 2022 Mark Reynolds - 2.1.5-1 - Bump version to 2.1.5 - Issue 5428 - Fix regression with nscpEntryWsi computation diff --git a/sources b/sources index 161c99b..bc88c6b 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (389-ds-base-2.1.5.tar.bz2) = 6286964ab9e11992854728013e3e6ac89e5c8f86282ace68138aafbddc7bde935d662857111a85d65cbe37c6a3bff6ae8f351145eb18ebf357c0817420c77fab SHA512 (jemalloc-5.3.0.tar.bz2) = 22907bb052096e2caffb6e4e23548aecc5cc9283dce476896a2b1127eee64170e3562fa2e7db9571298814a7a2c7df6e8d1fbe152bd3f3b0c1abec22a2de34b1 +SHA512 (389-ds-base-2.1.6.tar.bz2) = 22bcde373e830d3bd63f737744268558bbbed414377f9841bee5f5db9d2c815b0f3b4e418026a2bd7927854523185b3613d6988bc23d8d46e53ea32e6ab3e37a From 74e10f147560c1eb99fad868638dde5d43f8c698 Mon Sep 17 00:00:00 2001 From: Mark Reynolds Date: Mon, 23 Jan 2023 14:12:22 -0500 Subject: [PATCH 12/14] Bump version to 2.1.7 Issue 5607, 5351, 5611 - UI/CLI - fix various issues Issue 5608 - UI - need to replace some "const" with "let" Issue 3604 - Create a private key/CSR with dsconf/Cockpit (#5584) Issue 5602 - UI - browser crash when trying to modify read-only variable Issue 5581 - UI - Support cockpit dark theme Issue 5593 - CLI - dsidm account subtree-status fails with TypeError Issue 5591 - BUG - Segfault in cl5configtrim with invalid confi (#5592) Fix latest npm audit failures Issue 5599 - CI - webui tests randomly fail Issue 5348 - RFE - CLI - add functionality to do bulk updates to entries Issue 5526 - RFE - Improve saslauthd migration options (#5528) Issue 5588 - Fix CI tests Issue 5585 - lib389 password policy DN handling is incorrect (#5587) Issue 5521 - UI - Update plugins for new split PAM and LDAP pass thru auth Issue 5236 - UI add specialized group edit modal Issue 5278 - CLI - dsidm asks for the old password on password reset Issue 5531 - CI - use universal_lines in capture_output Issue 5505 - Fix compiler warning (#5506) Issue 3615 - CLI - prevent virtual attribute indexing Issue 5413 - Allow mutliple MemberOf fixup tasks with different bases/filters Issue 5561 - Nightly tests are failing Issue 5521 - RFE - split pass through auth cli Issue 5521 - BUG - Pam PTA multiple issues Issue 5544 - Increase default task TTL Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542) Issue 5539 - Make logger's parameter name unified (#5540) Issue 5534 - Fix a rebase typo (#5537) Issue 5534 - Add copyright text to the repository files --- .gitignore | 1 + 389-ds-base.spec | 89 ++++++++++++++++++++++++++++++++++-------------- sources | 2 +- 3 files changed, 66 insertions(+), 26 deletions(-) diff --git a/.gitignore b/.gitignore index c370c41..523d209 100644 --- a/.gitignore +++ b/.gitignore @@ -219,3 +219,4 @@ /389-ds-base-2.1.4.tar.bz2 /389-ds-base-2.1.5.tar.bz2 /389-ds-base-2.1.6.tar.bz2 +/389-ds-base-2.1.7.tar.bz2 diff --git a/389-ds-base.spec b/389-ds-base.spec index 453ad35..748ffbd 100644 --- a/389-ds-base.spec +++ b/389-ds-base.spec @@ -46,7 +46,7 @@ ExcludeArch: i686 Summary: 389 Directory Server (base) Name: 389-ds-base -Version: 2.1.6 +Version: 2.1.7 Release: 1%{?dist} License: GPLv3+ and (ASL 2.0 or MIT) URL: https://www.port389.org @@ -66,16 +66,16 @@ Provides: bundled(crate(base64)) = 0.13.1 Provides: bundled(crate(bitflags)) = 1.3.2 Provides: bundled(crate(byteorder)) = 1.4.3 Provides: bundled(crate(cbindgen)) = 0.9.1 -Provides: bundled(crate(cc)) = 1.0.76 +Provides: bundled(crate(cc)) = 1.0.78 Provides: bundled(crate(cfg-if)) = 1.0.0 Provides: bundled(crate(clap)) = 2.34.0 Provides: bundled(crate(concread)) = 0.2.21 Provides: bundled(crate(crossbeam)) = 0.8.2 Provides: bundled(crate(crossbeam-channel)) = 0.5.6 Provides: bundled(crate(crossbeam-deque)) = 0.8.2 -Provides: bundled(crate(crossbeam-epoch)) = 0.9.11 -Provides: bundled(crate(crossbeam-queue)) = 0.3.6 -Provides: bundled(crate(crossbeam-utils)) = 0.8.12 +Provides: bundled(crate(crossbeam-epoch)) = 0.9.13 +Provides: bundled(crate(crossbeam-queue)) = 0.3.8 +Provides: bundled(crate(crossbeam-utils)) = 0.8.14 Provides: bundled(crate(entryuuid)) = 0.1.0 Provides: bundled(crate(entryuuid_syntax)) = 0.1.0 Provides: bundled(crate(fastrand)) = 1.8.0 @@ -86,52 +86,52 @@ Provides: bundled(crate(getrandom)) = 0.2.8 Provides: bundled(crate(hashbrown)) = 0.12.3 Provides: bundled(crate(hermit-abi)) = 0.1.19 Provides: bundled(crate(instant)) = 0.1.12 -Provides: bundled(crate(itoa)) = 1.0.4 +Provides: bundled(crate(itoa)) = 1.0.5 Provides: bundled(crate(jobserver)) = 0.1.25 -Provides: bundled(crate(libc)) = 0.2.137 +Provides: bundled(crate(libc)) = 0.2.139 Provides: bundled(crate(librnsslapd)) = 0.1.0 Provides: bundled(crate(librslapd)) = 0.1.0 Provides: bundled(crate(lock_api)) = 0.4.9 Provides: bundled(crate(log)) = 0.4.17 Provides: bundled(crate(lru)) = 0.7.8 -Provides: bundled(crate(memoffset)) = 0.6.5 -Provides: bundled(crate(once_cell)) = 1.16.0 -Provides: bundled(crate(openssl)) = 0.10.42 +Provides: bundled(crate(memoffset)) = 0.7.1 +Provides: bundled(crate(once_cell)) = 1.17.0 +Provides: bundled(crate(openssl)) = 0.10.45 Provides: bundled(crate(openssl-macros)) = 0.1.0 -Provides: bundled(crate(openssl-sys)) = 0.9.77 +Provides: bundled(crate(openssl-sys)) = 0.9.80 Provides: bundled(crate(parking_lot)) = 0.11.2 -Provides: bundled(crate(parking_lot_core)) = 0.8.5 +Provides: bundled(crate(parking_lot_core)) = 0.8.6 Provides: bundled(crate(paste)) = 0.1.18 Provides: bundled(crate(paste-impl)) = 0.1.18 Provides: bundled(crate(pin-project-lite)) = 0.2.9 Provides: bundled(crate(pkg-config)) = 0.3.26 Provides: bundled(crate(ppv-lite86)) = 0.2.17 -Provides: bundled(crate(proc-macro-hack)) = 0.5.19 -Provides: bundled(crate(proc-macro2)) = 1.0.47 +Provides: bundled(crate(proc-macro-hack)) = 0.5.20+deprecated +Provides: bundled(crate(proc-macro2)) = 1.0.50 Provides: bundled(crate(pwdchan)) = 0.1.0 -Provides: bundled(crate(quote)) = 1.0.21 +Provides: bundled(crate(quote)) = 1.0.23 Provides: bundled(crate(rand)) = 0.8.5 Provides: bundled(crate(rand_chacha)) = 0.3.1 Provides: bundled(crate(rand_core)) = 0.6.4 Provides: bundled(crate(redox_syscall)) = 0.2.16 Provides: bundled(crate(remove_dir_all)) = 0.5.3 -Provides: bundled(crate(ryu)) = 1.0.11 +Provides: bundled(crate(ryu)) = 1.0.12 Provides: bundled(crate(scopeguard)) = 1.1.0 -Provides: bundled(crate(serde)) = 1.0.147 -Provides: bundled(crate(serde_derive)) = 1.0.147 -Provides: bundled(crate(serde_json)) = 1.0.88 +Provides: bundled(crate(serde)) = 1.0.152 +Provides: bundled(crate(serde_derive)) = 1.0.152 +Provides: bundled(crate(serde_json)) = 1.0.91 Provides: bundled(crate(slapd)) = 0.1.0 Provides: bundled(crate(slapi_r_plugin)) = 0.1.0 Provides: bundled(crate(smallvec)) = 1.10.0 Provides: bundled(crate(strsim)) = 0.8.0 -Provides: bundled(crate(syn)) = 1.0.103 +Provides: bundled(crate(syn)) = 1.0.107 Provides: bundled(crate(synstructure)) = 0.12.6 Provides: bundled(crate(tempfile)) = 3.3.0 Provides: bundled(crate(textwrap)) = 0.11.0 -Provides: bundled(crate(tokio)) = 1.21.2 -Provides: bundled(crate(tokio-macros)) = 1.8.0 -Provides: bundled(crate(toml)) = 0.5.9 -Provides: bundled(crate(unicode-ident)) = 1.0.5 +Provides: bundled(crate(tokio)) = 1.24.2 +Provides: bundled(crate(tokio-macros)) = 1.8.2 +Provides: bundled(crate(toml)) = 0.5.11 +Provides: bundled(crate(unicode-ident)) = 1.0.6 Provides: bundled(crate(unicode-width)) = 0.1.10 Provides: bundled(crate(unicode-xid)) = 0.2.4 Provides: bundled(crate(uuid)) = 0.8.2 @@ -142,8 +142,16 @@ Provides: bundled(crate(wasi)) = 0.11.0+wasi_snapshot_preview1 Provides: bundled(crate(winapi)) = 0.3.9 Provides: bundled(crate(winapi-i686-pc-windows-gnu)) = 0.4.0 Provides: bundled(crate(winapi-x86_64-pc-windows-gnu)) = 0.4.0 +Provides: bundled(crate(windows-sys)) = 0.42.0 +Provides: bundled(crate(windows_aarch64_gnullvm)) = 0.42.1 +Provides: bundled(crate(windows_aarch64_msvc)) = 0.42.1 +Provides: bundled(crate(windows_i686_gnu)) = 0.42.1 +Provides: bundled(crate(windows_i686_msvc)) = 0.42.1 +Provides: bundled(crate(windows_x86_64_gnu)) = 0.42.1 +Provides: bundled(crate(windows_x86_64_gnullvm)) = 0.42.1 +Provides: bundled(crate(windows_x86_64_msvc)) = 0.42.1 Provides: bundled(crate(zeroize)) = 1.5.7 -Provides: bundled(crate(zeroize_derive)) = 1.3.2 +Provides: bundled(crate(zeroize_derive)) = 1.3.3 ##### Bundled cargo crates list - END ##### BuildRequires: nspr-devel >= 4.32 @@ -717,6 +725,37 @@ exit 0 %endif %changelog +* Mon Jan 23 2023 Mark Reynolds - 2.1.7-1 +- Bump version to 2.1.7 +- Issue 5607, 5351, 5611 - UI/CLI - fix various issues +- Issue 5608 - UI - need to replace some "const" with "let" +- Issue 3604 - Create a private key/CSR with dsconf/Cockpit (#5584) +- Issue 5602 - UI - browser crash when trying to modify read-only variable +- Issue 5581 - UI - Support cockpit dark theme +- Issue 5593 - CLI - dsidm account subtree-status fails with TypeError +- Issue 5591 - BUG - Segfault in cl5configtrim with invalid confi (#5592) +- Fix latest npm audit failures +- Issue 5599 - CI - webui tests randomly fail +- Issue 5348 - RFE - CLI - add functionality to do bulk updates to entries +- Issue 5526 - RFE - Improve saslauthd migration options (#5528) +- Issue 5588 - Fix CI tests +- Issue 5585 - lib389 password policy DN handling is incorrect (#5587) +- Issue 5521 - UI - Update plugins for new split PAM and LDAP pass thru auth +- Issue 5236 - UI add specialized group edit modal +- Issue 5278 - CLI - dsidm asks for the old password on password reset +- Issue 5531 - CI - use universal_lines in capture_output +- Issue 5505 - Fix compiler warning (#5506) +- Issue 3615 - CLI - prevent virtual attribute indexing +- Issue 5413 - Allow mutliple MemberOf fixup tasks with different bases/filters +- Issue 5561 - Nightly tests are failing +- Issue 5521 - RFE - split pass through auth cli +- Issue 5521 - BUG - Pam PTA multiple issues +- Issue 5544 - Increase default task TTL +- Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542) +- Issue 5539 - Make logger's parameter name unified (#5540) +- Issue 5534 - Fix a rebase typo (#5537) +- Issue 5534 - Add copyright text to the repository files + * Fri Nov 18 2022 Mark Reynolds - 2.1.6-1 - Bump version to 2.1.6 - Issue 5532 - Make db compaction TOD day more robust. diff --git a/sources b/sources index bc88c6b..8f6489c 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ +SHA512 (389-ds-base-2.1.7.tar.bz2) = dac534da1e3685084e287100933d2ba2a3a4ea7854a36f2d50da6dc3b492ddf65919c46a70884a062deef88b0e312a52c805f3b8114d6ca4edb88eeceb854b8c SHA512 (jemalloc-5.3.0.tar.bz2) = 22907bb052096e2caffb6e4e23548aecc5cc9283dce476896a2b1127eee64170e3562fa2e7db9571298814a7a2c7df6e8d1fbe152bd3f3b0c1abec22a2de34b1 -SHA512 (389-ds-base-2.1.6.tar.bz2) = 22bcde373e830d3bd63f737744268558bbbed414377f9841bee5f5db9d2c815b0f3b4e418026a2bd7927854523185b3613d6988bc23d8d46e53ea32e6ab3e37a From 5d1bd2e098003765854949f6acca573aeab594c0 Mon Sep 17 00:00:00 2001 From: Simon Pichugin Date: Tue, 28 Feb 2023 11:46:30 -0800 Subject: [PATCH 13/14] Use systemd-sysusers for dirsrv user and group (#2176258) --- 389-ds-base.spec | 26 +++++++++++--------------- 389-ds-base.sysusers | 3 +++ 2 files changed, 14 insertions(+), 15 deletions(-) create mode 100644 389-ds-base.sysusers diff --git a/389-ds-base.spec b/389-ds-base.spec index 748ffbd..3edfda7 100644 --- a/389-ds-base.spec +++ b/389-ds-base.spec @@ -47,7 +47,7 @@ ExcludeArch: i686 Summary: 389 Directory Server (base) Name: 389-ds-base Version: 2.1.7 -Release: 1%{?dist} +Release: 2%{?dist} License: GPLv3+ and (ASL 2.0 or MIT) URL: https://www.port389.org Conflicts: selinux-policy-base < 3.9.8 @@ -181,6 +181,8 @@ BuildRequires: openssl-devel BuildRequires: pam-devel BuildRequires: systemd-units BuildRequires: systemd-devel +BuildRequires: systemd-rpm-macros +%{?sysusers_requires_compat} %if %{use_asan} BuildRequires: libasan %endif @@ -276,6 +278,7 @@ Source2: %{name}-devel.README %if %{bundle_jemalloc} Source3: https://github.com/jemalloc/%{jemalloc_name}/releases/download/%{jemalloc_ver}/%{jemalloc_name}-%{jemalloc_ver}.tar.bz2 %endif +Source4: 389-ds-base.sysusers # Remove this after rust-1.56 lands in repos %if 0%{?rhel} == 8 @@ -501,6 +504,7 @@ mkdir -p $RPM_BUILD_ROOT/var/lock/%{pkgname} # for systemd mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/systemd/system/%{groupname}.wants +install -p -D -m 0644 %{SOURCE4} %{buildroot}%{_sysusersdir}/389-ds-base.conf # remove libtool archives and static libs rm -f $RPM_BUILD_ROOT%{_libdir}/%{pkgname}/*.a @@ -535,20 +539,8 @@ fi # https://fedoraproject.org/wiki/Packaging:UsersAndGroups#Soft_static_allocation # Soft static allocation for UID and GID -USERNAME="dirsrv" -ALLOCATED_UID=389 -GROUPNAME="dirsrv" -ALLOCATED_GID=389 -HOMEDIR="/usr/share/dirsrv" - -getent group $GROUPNAME >/dev/null || /usr/sbin/groupadd -f -g $ALLOCATED_GID -r $GROUPNAME -if ! getent passwd $USERNAME >/dev/null ; then - if ! getent passwd $ALLOCATED_UID >/dev/null ; then - /usr/sbin/useradd -r -u $ALLOCATED_UID -g $GROUPNAME -d $HOMEDIR -s /sbin/nologin -c "user for 389-ds-base" $USERNAME - else - /usr/sbin/useradd -r -g $GROUPNAME -d $HOMEDIR -s /sbin/nologin -c "user for 389-ds-base" $USERNAME - fi -fi +# sysusers.d format https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format +%sysusers_create_compat %{SOURCE4} # Reload our sysctl before we restart (if we can) sysctl --system &> $output; true @@ -622,6 +614,7 @@ exit 0 %config(noreplace)%{_sysconfdir}/%{pkgname}/schema/*.ldif %dir %{_sysconfdir}/%{pkgname}/config %dir %{_sysconfdir}/systemd/system/%{groupname}.wants +%{_sysusersdir}/389-ds-base.conf %config(noreplace)%{_sysconfdir}/%{pkgname}/config/slapd-collations.conf %config(noreplace)%{_sysconfdir}/%{pkgname}/config/certmap.conf %{_datadir}/%{pkgname} @@ -725,6 +718,9 @@ exit 0 %endif %changelog +* Tue Mar 07 2023 Simon Pichugin - 2.1.7-2 +- Use systemd-sysusers for dirsrv user and group (#2176258) + * Mon Jan 23 2023 Mark Reynolds - 2.1.7-1 - Bump version to 2.1.7 - Issue 5607, 5351, 5611 - UI/CLI - fix various issues diff --git a/389-ds-base.sysusers b/389-ds-base.sysusers new file mode 100644 index 0000000..32a3452 --- /dev/null +++ b/389-ds-base.sysusers @@ -0,0 +1,3 @@ +#Type Name ID GECOS Home directory Shell +g dirsrv 389 +u dirsrv 389:389 "user for 389-ds-base" /usr/share/dirsrv/ /sbin/nologin From c49ec9b42e78070f37f367350da3c1d5e9f33d19 Mon Sep 17 00:00:00 2001 From: Mark Reynolds Date: Tue, 25 Apr 2023 12:43:27 -0400 Subject: [PATCH 14/14] Bump version to 2.1.8 Issue 5734 - RFE - Exclude pwdFailureTime and ContextCSN (#5735) Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727) Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations Issue 1081 - Stop schema replication from overwriting x-origin Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699) Issue 5598 - fix testcase Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692) Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691) Issue 5687 - UI - sensitive information disclosure Issue 4583 - Update specfile to skip checks of ASAN builds Issue 5550 - dsconf monitor crashes with Error math domain error (#5553) Issue 3604 - UI - Add support for Subject Alternative Names in CSR Fix build break Issue 5640 - Update logconv for new logging format Issue 5545 - A random crash in import over lmdb (#5546) Issue 5490 - tombstone in entryrdn index with lmdb but not with bdb (#5498) Issue 5408 - lmdb import is slow (#5481) Issue 5162 - CI - fix error message for invalid pem file Issue 5598 - In 2.x, SRCH throughput drops by 10% because of handling of referral (#5604) Issue 5666 - CLI - Add timeout parameter for tasks Issue 5567 - CLI - make ldifgen use the same default ldif name for all options Issue 5162 - Lib389 - verify certificate type before adding Issue 5630 - CLI - need to add logging filter for stdout Issue 5646 - CLI/UI - do not hardcode password storage schemes Issue 5640 - Update logconv for new logging format Issue 5652 - Libasan crash in replication/cascading_test (#5659) Issue 5658 - CLI - unable to add attribute with matching rule Issue 5653 - covscan - fix invalid dereference Issue 5648 - Covscan - Compiler warnings (#5651) Issue 5630 - CLI - error messages should goto stderr Issue 2435 - RFE - Raise IDL Scan Limit to INT_MAX (#5639) Issue 5632 - CLI - improve error handling with db2ldif Issue 5578 - dscreate ds-root does not normaile paths (#5613) Issue 5560 - dscreate run by non superuser set defaults requiring superuser privilege (#5579) Issue 5624 - RFE - UI - export certificates, and import text base64 encoded certificates Issue 4293 - RFE - CLI - add dsrc options for setting user and group subtrees Issue 5497 - boolean attributes should be case insensitive --- .gitignore | 1 + 389-ds-base.spec | 141 +++++++++++++++++++++++++++++++++-------------- sources | 2 +- 3 files changed, 101 insertions(+), 43 deletions(-) diff --git a/.gitignore b/.gitignore index 523d209..b8dcd45 100644 --- a/.gitignore +++ b/.gitignore @@ -220,3 +220,4 @@ /389-ds-base-2.1.5.tar.bz2 /389-ds-base-2.1.6.tar.bz2 /389-ds-base-2.1.7.tar.bz2 +/389-ds-base-2.1.8.tar.bz2 diff --git a/389-ds-base.spec b/389-ds-base.spec index 3edfda7..6d0c65e 100644 --- a/389-ds-base.spec +++ b/389-ds-base.spec @@ -46,9 +46,9 @@ ExcludeArch: i686 Summary: 389 Directory Server (base) Name: 389-ds-base -Version: 2.1.7 -Release: 2%{?dist} -License: GPLv3+ and (ASL 2.0 or MIT) +Version: 2.1.8 +Release: 1%{?dist} +License: GPLv3+ and (ASL 2.0 or MIT) and MIT and (Unlicense or MIT) and MPLv2.0 and BSD and (ASL 2.0 with exceptions or ASL 2.0 or MIT) and ASL 2.0 and (ASL 2.0 or Boost) and ((MIT or ASL 2.0) and Unicode-DFS-2016) URL: https://www.port389.org Conflicts: selinux-policy-base < 3.9.8 Conflicts: freeipa-server < 4.0.3 @@ -66,39 +66,44 @@ Provides: bundled(crate(base64)) = 0.13.1 Provides: bundled(crate(bitflags)) = 1.3.2 Provides: bundled(crate(byteorder)) = 1.4.3 Provides: bundled(crate(cbindgen)) = 0.9.1 -Provides: bundled(crate(cc)) = 1.0.78 +Provides: bundled(crate(cc)) = 1.0.79 Provides: bundled(crate(cfg-if)) = 1.0.0 Provides: bundled(crate(clap)) = 2.34.0 Provides: bundled(crate(concread)) = 0.2.21 Provides: bundled(crate(crossbeam)) = 0.8.2 -Provides: bundled(crate(crossbeam-channel)) = 0.5.6 -Provides: bundled(crate(crossbeam-deque)) = 0.8.2 -Provides: bundled(crate(crossbeam-epoch)) = 0.9.13 +Provides: bundled(crate(crossbeam-channel)) = 0.5.8 +Provides: bundled(crate(crossbeam-deque)) = 0.8.3 +Provides: bundled(crate(crossbeam-epoch)) = 0.9.14 Provides: bundled(crate(crossbeam-queue)) = 0.3.8 -Provides: bundled(crate(crossbeam-utils)) = 0.8.14 +Provides: bundled(crate(crossbeam-utils)) = 0.8.15 Provides: bundled(crate(entryuuid)) = 0.1.0 Provides: bundled(crate(entryuuid_syntax)) = 0.1.0 -Provides: bundled(crate(fastrand)) = 1.8.0 +Provides: bundled(crate(errno)) = 0.3.1 +Provides: bundled(crate(errno-dragonfly)) = 0.1.2 +Provides: bundled(crate(fastrand)) = 1.9.0 Provides: bundled(crate(fernet)) = 0.1.4 Provides: bundled(crate(foreign-types)) = 0.3.2 Provides: bundled(crate(foreign-types-shared)) = 0.1.1 -Provides: bundled(crate(getrandom)) = 0.2.8 +Provides: bundled(crate(getrandom)) = 0.2.9 Provides: bundled(crate(hashbrown)) = 0.12.3 Provides: bundled(crate(hermit-abi)) = 0.1.19 +Provides: bundled(crate(hermit-abi)) = 0.3.1 Provides: bundled(crate(instant)) = 0.1.12 -Provides: bundled(crate(itoa)) = 1.0.5 -Provides: bundled(crate(jobserver)) = 0.1.25 -Provides: bundled(crate(libc)) = 0.2.139 +Provides: bundled(crate(io-lifetimes)) = 1.0.10 +Provides: bundled(crate(itoa)) = 1.0.6 +Provides: bundled(crate(jobserver)) = 0.1.26 +Provides: bundled(crate(libc)) = 0.2.142 Provides: bundled(crate(librnsslapd)) = 0.1.0 Provides: bundled(crate(librslapd)) = 0.1.0 +Provides: bundled(crate(linux-raw-sys)) = 0.3.4 Provides: bundled(crate(lock_api)) = 0.4.9 Provides: bundled(crate(log)) = 0.4.17 Provides: bundled(crate(lru)) = 0.7.8 -Provides: bundled(crate(memoffset)) = 0.7.1 -Provides: bundled(crate(once_cell)) = 1.17.0 -Provides: bundled(crate(openssl)) = 0.10.45 -Provides: bundled(crate(openssl-macros)) = 0.1.0 -Provides: bundled(crate(openssl-sys)) = 0.9.80 +Provides: bundled(crate(memoffset)) = 0.8.0 +Provides: bundled(crate(once_cell)) = 1.17.1 +Provides: bundled(crate(openssl)) = 0.10.52 +Provides: bundled(crate(openssl-macros)) = 0.1.1 +Provides: bundled(crate(openssl-sys)) = 0.9.87 Provides: bundled(crate(parking_lot)) = 0.11.2 Provides: bundled(crate(parking_lot_core)) = 0.8.6 Provides: bundled(crate(paste)) = 0.1.18 @@ -107,33 +112,33 @@ Provides: bundled(crate(pin-project-lite)) = 0.2.9 Provides: bundled(crate(pkg-config)) = 0.3.26 Provides: bundled(crate(ppv-lite86)) = 0.2.17 Provides: bundled(crate(proc-macro-hack)) = 0.5.20+deprecated -Provides: bundled(crate(proc-macro2)) = 1.0.50 +Provides: bundled(crate(proc-macro2)) = 1.0.56 Provides: bundled(crate(pwdchan)) = 0.1.0 -Provides: bundled(crate(quote)) = 1.0.23 +Provides: bundled(crate(quote)) = 1.0.26 Provides: bundled(crate(rand)) = 0.8.5 Provides: bundled(crate(rand_chacha)) = 0.3.1 Provides: bundled(crate(rand_core)) = 0.6.4 Provides: bundled(crate(redox_syscall)) = 0.2.16 -Provides: bundled(crate(remove_dir_all)) = 0.5.3 -Provides: bundled(crate(ryu)) = 1.0.12 +Provides: bundled(crate(redox_syscall)) = 0.3.5 +Provides: bundled(crate(rustix)) = 0.37.14 +Provides: bundled(crate(ryu)) = 1.0.13 Provides: bundled(crate(scopeguard)) = 1.1.0 -Provides: bundled(crate(serde)) = 1.0.152 -Provides: bundled(crate(serde_derive)) = 1.0.152 -Provides: bundled(crate(serde_json)) = 1.0.91 +Provides: bundled(crate(serde)) = 1.0.160 +Provides: bundled(crate(serde_derive)) = 1.0.160 +Provides: bundled(crate(serde_json)) = 1.0.96 Provides: bundled(crate(slapd)) = 0.1.0 Provides: bundled(crate(slapi_r_plugin)) = 0.1.0 Provides: bundled(crate(smallvec)) = 1.10.0 Provides: bundled(crate(strsim)) = 0.8.0 -Provides: bundled(crate(syn)) = 1.0.107 -Provides: bundled(crate(synstructure)) = 0.12.6 -Provides: bundled(crate(tempfile)) = 3.3.0 +Provides: bundled(crate(syn)) = 1.0.109 +Provides: bundled(crate(syn)) = 2.0.15 +Provides: bundled(crate(tempfile)) = 3.5.0 Provides: bundled(crate(textwrap)) = 0.11.0 -Provides: bundled(crate(tokio)) = 1.24.2 -Provides: bundled(crate(tokio-macros)) = 1.8.2 +Provides: bundled(crate(tokio)) = 1.27.0 +Provides: bundled(crate(tokio-macros)) = 2.0.0 Provides: bundled(crate(toml)) = 0.5.11 -Provides: bundled(crate(unicode-ident)) = 1.0.6 +Provides: bundled(crate(unicode-ident)) = 1.0.8 Provides: bundled(crate(unicode-width)) = 0.1.10 -Provides: bundled(crate(unicode-xid)) = 0.2.4 Provides: bundled(crate(uuid)) = 0.8.2 Provides: bundled(crate(vcpkg)) = 0.2.15 Provides: bundled(crate(vec_map)) = 0.8.2 @@ -142,16 +147,26 @@ Provides: bundled(crate(wasi)) = 0.11.0+wasi_snapshot_preview1 Provides: bundled(crate(winapi)) = 0.3.9 Provides: bundled(crate(winapi-i686-pc-windows-gnu)) = 0.4.0 Provides: bundled(crate(winapi-x86_64-pc-windows-gnu)) = 0.4.0 -Provides: bundled(crate(windows-sys)) = 0.42.0 -Provides: bundled(crate(windows_aarch64_gnullvm)) = 0.42.1 -Provides: bundled(crate(windows_aarch64_msvc)) = 0.42.1 -Provides: bundled(crate(windows_i686_gnu)) = 0.42.1 -Provides: bundled(crate(windows_i686_msvc)) = 0.42.1 -Provides: bundled(crate(windows_x86_64_gnu)) = 0.42.1 -Provides: bundled(crate(windows_x86_64_gnullvm)) = 0.42.1 -Provides: bundled(crate(windows_x86_64_msvc)) = 0.42.1 -Provides: bundled(crate(zeroize)) = 1.5.7 -Provides: bundled(crate(zeroize_derive)) = 1.3.3 +Provides: bundled(crate(windows-sys)) = 0.45.0 +Provides: bundled(crate(windows-sys)) = 0.48.0 +Provides: bundled(crate(windows-targets)) = 0.42.2 +Provides: bundled(crate(windows-targets)) = 0.48.0 +Provides: bundled(crate(windows_aarch64_gnullvm)) = 0.42.2 +Provides: bundled(crate(windows_aarch64_gnullvm)) = 0.48.0 +Provides: bundled(crate(windows_aarch64_msvc)) = 0.42.2 +Provides: bundled(crate(windows_aarch64_msvc)) = 0.48.0 +Provides: bundled(crate(windows_i686_gnu)) = 0.42.2 +Provides: bundled(crate(windows_i686_gnu)) = 0.48.0 +Provides: bundled(crate(windows_i686_msvc)) = 0.42.2 +Provides: bundled(crate(windows_i686_msvc)) = 0.48.0 +Provides: bundled(crate(windows_x86_64_gnu)) = 0.42.2 +Provides: bundled(crate(windows_x86_64_gnu)) = 0.48.0 +Provides: bundled(crate(windows_x86_64_gnullvm)) = 0.42.2 +Provides: bundled(crate(windows_x86_64_gnullvm)) = 0.48.0 +Provides: bundled(crate(windows_x86_64_msvc)) = 0.42.2 +Provides: bundled(crate(windows_x86_64_msvc)) = 0.48.0 +Provides: bundled(crate(zeroize)) = 1.6.0 +Provides: bundled(crate(zeroize_derive)) = 1.4.2 ##### Bundled cargo crates list - END ##### BuildRequires: nspr-devel >= 4.32 @@ -216,6 +231,7 @@ BuildRequires: python%{python3_pkgversion}-argcomplete BuildRequires: python%{python3_pkgversion}-argparse-manpage BuildRequires: python%{python3_pkgversion}-libselinux BuildRequires: python%{python3_pkgversion}-policycoreutils +BuildRequires: python%{python3_pkgversion}-cryptography # For cockpit %if %{use_cockpit} @@ -363,6 +379,7 @@ Requires: python%{python3_pkgversion}-dateutil Requires: python%{python3_pkgversion}-argcomplete Requires: python%{python3_pkgversion}-libselinux Requires: python%{python3_pkgversion}-setuptools +Requires: python%{python3_pkgversion}-cryptography %{?python_provide:%python_provide python%{python3_pkgversion}-lib389} %description -n python%{python3_pkgversion}-lib389 @@ -718,6 +735,46 @@ exit 0 %endif %changelog +* Tue Apr 25 2023 Mark Reynolds - 2.1.8-1 +- Bump version to 2.1.8 +- Issue 5734 - RFE - Exclude pwdFailureTime and ContextCSN (#5735) +- Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727) +- Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations +- Issue 1081 - Stop schema replication from overwriting x-origin +- Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699) +- Issue 5598 - fix testcase +- Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692) +- Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691) +- Issue 5687 - UI - sensitive information disclosure +- Issue 4583 - Update specfile to skip checks of ASAN builds +- Issue 5550 - dsconf monitor crashes with Error math domain error (#5553) +- Issue 3604 - UI - Add support for Subject Alternative Names in CSR +- Fix build break +- Issue 5640 - Update logconv for new logging format +- Issue 5545 - A random crash in import over lmdb (#5546) +- Issue 5490 - tombstone in entryrdn index with lmdb but not with bdb (#5498) +- Issue 5408 - lmdb import is slow (#5481) +- Issue 5162 - CI - fix error message for invalid pem file +- Issue 5598 - In 2.x, SRCH throughput drops by 10% because of handling of referral (#5604) +- Issue 5666 - CLI - Add timeout parameter for tasks +- Issue 5567 - CLI - make ldifgen use the same default ldif name for all options +- Issue 5162 - Lib389 - verify certificate type before adding +- Issue 5630 - CLI - need to add logging filter for stdout +- Issue 5646 - CLI/UI - do not hardcode password storage schemes +- Issue 5640 - Update logconv for new logging format +- Issue 5652 - Libasan crash in replication/cascading_test (#5659) +- Issue 5658 - CLI - unable to add attribute with matching rule +- Issue 5653 - covscan - fix invalid dereference +- Issue 5648 - Covscan - Compiler warnings (#5651) +- Issue 5630 - CLI - error messages should goto stderr +- Issue 2435 - RFE - Raise IDL Scan Limit to INT_MAX (#5639) +- Issue 5632 - CLI - improve error handling with db2ldif +- Issue 5578 - dscreate ds-root does not normaile paths (#5613) +- Issue 5560 - dscreate run by non superuser set defaults requiring superuser privilege (#5579) +- Issue 5624 - RFE - UI - export certificates, and import text base64 encoded certificates +- Issue 4293 - RFE - CLI - add dsrc options for setting user and group subtrees +- Issue 5497 - boolean attributes should be case insensitive + * Tue Mar 07 2023 Simon Pichugin - 2.1.7-2 - Use systemd-sysusers for dirsrv user and group (#2176258) diff --git a/sources b/sources index 8f6489c..a98e529 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (389-ds-base-2.1.7.tar.bz2) = dac534da1e3685084e287100933d2ba2a3a4ea7854a36f2d50da6dc3b492ddf65919c46a70884a062deef88b0e312a52c805f3b8114d6ca4edb88eeceb854b8c +SHA512 (389-ds-base-2.1.8.tar.bz2) = 5ce995e4fccdddcd412dacb0269f53869489b20b7e1da3e740bee5cf375515d92c16f43ec7a44f5957c4b03a70b7408d52cf63980cd2f22a3fb2e249ed8c8ee8 SHA512 (jemalloc-5.3.0.tar.bz2) = 22907bb052096e2caffb6e4e23548aecc5cc9283dce476896a2b1127eee64170e3562fa2e7db9571298814a7a2c7df6e8d1fbe152bd3f3b0c1abec22a2de34b1