diff --git a/.gitignore b/.gitignore index 3bb3760..77744f1 100644 --- a/.gitignore +++ b/.gitignore @@ -174,3 +174,23 @@ /389-ds-base-1.4.0.19.tar.bz2 /389-ds-base-1.4.0.20.tar.bz2 /389-ds-base-1.4.1.1.tar.bz2 +/389-ds-base-1.4.1.2.tar.bz2 +/389-ds-base-1.4.1.3.tar.bz2 +/389-ds-base-1.4.1.4.tar.bz2 +/389-ds-base-1.4.1.5.tar.bz2 +/jemalloc-5.2.0.tar.bz2 +/389-ds-base-1.4.1.6.tar.bz2 +/389-ds-base-1.4.1.7.tar.bz2 +/389-ds-base-1.4.1.8.tar.bz2 +/389-ds-base-1.4.1.9.tar.bz2 +/389-ds-base-1.4.1.10.tar.bz2 +/389-ds-base-1.4.1.11.tar.bz2 +/389-ds-base-1.4.1.12.tar.bz2 +/389-ds-base-1.4.1.13.tar.bz2 +/jemalloc-5.2.1.tar.bz2 +/389-ds-base-1.4.1.14.tar.bz2 +/389-ds-base-1.4.1.15.tar.bz2 +/389-ds-base-1.4.1.16.tar.bz2 +/389-ds-base-1.4.1.17.tar.bz2 +/389-ds-base-1.4.1.18.tar.bz2 +/389-ds-base-1.4.1.19.tar.bz2 diff --git a/389-ds-base.spec b/389-ds-base.spec index d83c878..c5c411e 100644 --- a/389-ds-base.spec +++ b/389-ds-base.spec @@ -25,10 +25,11 @@ ExcludeArch: i686 %if %{bundle_jemalloc} %global jemalloc_name jemalloc -%global jemalloc_ver 5.1.0 +%global jemalloc_ver 5.2.1 %global __provides_exclude ^libjemalloc\\.so.*$ %endif + # Use Clang instead of GCC %global use_clang 0 @@ -44,8 +45,8 @@ ExcludeArch: i686 Summary: 389 Directory Server (base) Name: 389-ds-base -Version: 1.4.1.1 -Release: %{?relprefix}1%{?prerel}%{?dist}.1 +Version: 1.4.1.19 +Release: %{?relprefix}1%{?prerel}%{?dist} License: GPLv3+ URL: https://www.port389.org Conflicts: selinux-policy-base < 3.9.8 @@ -90,6 +91,7 @@ BuildRequires: rust %endif BuildRequires: pkgconfig BuildRequires: pkgconfig(systemd) +BuildRequires: pkgconfig(krb5) # Needed to support regeneration of the autotool artifacts. BuildRequires: autoconf @@ -101,7 +103,6 @@ BuildRequires: doxygen BuildRequires: libcmocka-devel BuildRequires: libevent-devel # For lib389 and related components -BuildRequires: python%{python3_pkgversion} BuildRequires: python%{python3_pkgversion}-devel BuildRequires: python%{python3_pkgversion}-setuptools BuildRequires: python%{python3_pkgversion}-ldap @@ -113,6 +114,7 @@ BuildRequires: python%{python3_pkgversion}-argcomplete BuildRequires: python%{python3_pkgversion}-argparse-manpage BuildRequires: python%{python3_pkgversion}-libselinux BuildRequires: python%{python3_pkgversion}-policycoreutils +BuildRequires: python%{python3_pkgversion}-packaging # For cockpit BuildRequires: rsync @@ -148,6 +150,9 @@ Requires: cyrus-sasl-plain # this is needed for verify-db.pl Requires: libdb-utils +# Needed for password dictionary checks +Requires: cracklib-dicts + # This picks up libperl.so as a Requires, so we add this versioned one Requires: perl(:MODULE_COMPAT_%(eval "`%{__perl} -V:version`"; echo $version)) Requires: perl-Errno >= 1.23-360 @@ -203,9 +208,9 @@ are used by the main package and the -devel package. This allows the -devel package to be installed with just the -libs package and without the main package. %package legacy-tools -Summary: Legacy utilities for 389 Directory Server (%{variant}) +Summary: Legacy utilities for 389 Directory Server Obsoletes: %{name} <= 1.4.0.9 -Requires: %{name} = %{version}-%{release} +Requires: 389-ds-base-libs = %{version}-%{release} %if %{use_perl} # for setup-ds.pl to support ipv6 %if %{use_Socket6} @@ -257,8 +262,6 @@ SNMP Agent for the 389 Directory Server base package. %package -n python%{python3_pkgversion}-lib389 Summary: A library for accessing, testing, and configuring the 389 Directory Server BuildArch: noarch -Requires: krb5-workstation -Requires: krb5-server Requires: openssl Requires: iproute Requires: python%{python3_pkgversion} @@ -270,6 +273,8 @@ Requires: python%{python3_pkgversion}-pyasn1-modules Requires: python%{python3_pkgversion}-dateutil Requires: python%{python3_pkgversion}-argcomplete Requires: python%{python3_pkgversion}-libselinux +Requires: python%{python3_pkgversion}-setuptools +Recommends: bash-completion %{?python_provide:%python_provide python%{python3_pkgversion}-lib389} %description -n python%{python3_pkgversion}-lib389 @@ -279,7 +284,8 @@ This module contains tools and libraries for accessing, testing, %package -n cockpit-389-ds Summary: Cockpit UI Plugin for configuring and administering the 389 Directory Server BuildArch: noarch -Requires: cockpit +Requires: cockpit > 200 +Requires: 389-ds-base Requires: python%{python3_pkgversion} Requires: python%{python3_pkgversion}-lib389 @@ -321,12 +327,30 @@ CLANG_FLAGS="--enable-clang" %endif %if %{bundle_jemalloc} +# Override page size, bz #1545539 +# 4K +%ifarch %ix86 %arm x86_64 s390x +%define lg_page --with-lg-page=12 +%endif + +# 64K +%ifarch ppc64 ppc64le aarch64 +%define lg_page --with-lg-page=16 +%endif + +# Override huge page size on aarch64 +# 2M instead of 512M +%ifarch aarch64 +%define lg_hugepage --with-lg-hugepage=21 +%endif + # Build jemalloc pushd ../%{jemalloc_name}-%{jemalloc_ver} %configure \ --libdir=%{_libdir}/%{pkgname}/lib \ - --bindir=%{_libdir}/%{pkgname}/bin -make + --bindir=%{_libdir}/%{pkgname}/bin \ + --enable-prof +make %{?_smp_mflags} popd %endif @@ -336,14 +360,16 @@ popd # Rebuild the autotool artifacts now. autoreconf -fiv -%configure --enable-autobind --with-selinux $OPENLDAP_FLAG $TMPFILES_FLAG \ +%configure --enable-autobind --with-selinux $TMPFILES_FLAG \ --with-systemd \ --with-systemdsystemunitdir=%{_unitdir} \ --with-systemdsystemconfdir=%{_sysconfdir}/systemd/system \ --with-systemdgroupname=%{groupname} \ --libexecdir=%{_libexecdir}/%{pkgname} \ $NSSARGS $ASAN_FLAGS $RUST_FLAGS $PERL_FLAGS $CLANG_FLAGS \ - --enable-cmocka + --enable-cmocka \ + --enable-perl + # lib389 pushd ./src/lib389 @@ -542,9 +568,6 @@ exit 0 %dir %{_sysconfdir}/systemd/system/%{groupname}.wants %config(noreplace)%{_sysconfdir}/%{pkgname}/config/slapd-collations.conf %config(noreplace)%{_sysconfdir}/%{pkgname}/config/certmap.conf -%config(noreplace)%{_sysconfdir}/%{pkgname}/config/template-initconfig -%config(noreplace)%{_sysconfdir}/sysconfig/%{pkgname} -%config(noreplace)%{_sysconfdir}/sysconfig/%{pkgname}.systemd %{_datadir}/%{pkgname} %exclude %{_datadir}/%{pkgname}/script-templates %exclude %{_datadir}/%{pkgname}/updates @@ -583,21 +606,12 @@ exit 0 %{_mandir}/man8/dbverify.8.gz %{_sbindir}/ldif2db %{_mandir}/man8/ldif2db.8.gz -%{_sbindir}/restart-dirsrv -%{_mandir}/man8/restart-dirsrv.8.gz -%{_sbindir}/start-dirsrv -%{_mandir}/man8/start-dirsrv.8.gz -%{_sbindir}/status-dirsrv -%{_mandir}/man8/status-dirsrv.8.gz -%{_sbindir}/stop-dirsrv -%{_mandir}/man8/stop-dirsrv.8.gz %{_sbindir}/upgradedb %{_mandir}/man8/upgradedb.8.gz %{_sbindir}/vlvindex %{_mandir}/man8/vlvindex.8.gz %{_mandir}/man5/99user.ldif.5.gz %{_mandir}/man5/certmap.conf.5.gz -%{_mandir}/man5/template-initconfig.5.gz %{_mandir}/man5/slapd-collations.conf.5.gz %{_mandir}/man5/dirsrv.5.gz %{_mandir}/man5/dirsrv.systemd.5.gz @@ -684,7 +698,17 @@ exit 0 %{_mandir}/man8/upgradednformat.8.gz %{_libexecdir}/%{pkgname}/ds_selinux_enabled %{_libexecdir}/%{pkgname}/ds_selinux_port_query +%{_sbindir}/restart-dirsrv +%{_mandir}/man8/restart-dirsrv.8.gz +%{_sbindir}/start-dirsrv +%{_mandir}/man8/start-dirsrv.8.gz +%{_sbindir}/status-dirsrv +%{_mandir}/man8/status-dirsrv.8.gz +%{_sbindir}/stop-dirsrv +%{_mandir}/man8/stop-dirsrv.8.gz %if %{use_perl} +%config(noreplace)%{_sysconfdir}/%{pkgname}/config/template-initconfig +%{_mandir}/man5/template-initconfig.5.gz %{_datadir}/%{pkgname}/properties/*.res %{_datadir}/%{pkgname}/script-templates %{_datadir}/%{pkgname}/updates @@ -757,12 +781,442 @@ exit 0 %{_mandir}/man8/dsctl.8.gz %{_sbindir}/dsidm %{_mandir}/man8/dsidm.8.gz +%{_sbindir}/dscontainer %files -n cockpit-389-ds -f cockpit.list -%{_datarootdir}/metainfo/389-console/org.cockpit-project.389-console.metainfo.xml +%{_datarootdir}/metainfo/389-console/org.port389.cockpit_console.metainfo.xml %doc README.md %changelog +* Fri May 8 2020 Mark Reynolds - 1.4.1.19-1 +- Bump version to 1.4.1.19 +- Issue 50787 - fix implementation of attr unique +- Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema +- Issue 51068 - deadlock when updating the schema +- Issue 51060 - unable to set sslVersionMin to TLS1.0 +- Issue 51064 - Unable to install server where IPv6 is disabled +- Issue 51051 - CLI fix consistency issues with confirmations +- Issue 51047 - React deprecating ComponentWillMount +- Issue 50499 - fix npm audit issues +- Issue 51035 - Heavy StartTLS connection load can randomly fail with err=1 +- Issue 51031 - UI - transition between two instances needs improvement + +* Thu Apr 16 2020 Mark Reynolds - 1.4.1.18-1 +- Bump version to 1.4.1.18 +- Issue 50337 - Replace exec() with setattr() +- Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code +- Issue 50905 - intermittent SSL hang with rhds +- Issue 50952 - SSCA lacks basicConstraint:CA +- Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given +- Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value + +* Wed Apr 1 2020 Mark Reynolds - 1.4.1.17-1 +- Bump version to 1.4.1.17 +- Issue 50994 - Fix latest UI bugs found by QE +- Issue 50337 - Replace exec() with setattr() +- Issue 50984 - Memory leaks in disk monitoring +- Issue 50975 - Revise UI branding with new minimized build +- Issue 49437 - Fix memory leak with indirect COS +- Issue 50976 - Clean up Web UI source directory from unused files +- Issue 50744 - -n option of dbverify does not work +- Issue 50952 - SSCA lacks basicConstraint:CA +- Issue 50966 - UI - Database indexes not using typeAhead correctly +- Issue 50974 - UI - wrong title in "Delete Suffix" popup +- Issue 50972 - Fix cockpit plugin build +- Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted +- Issue 50963 - We should bundle *.min.js files of Console + +* Mon Mar 16 2020 Mark Reynolds - 1.4.1.16-1 +- Bump version to 1.4.1.16 +- Issue 50499 - Fix npm audit issues +- Issue 50884 - Health check tool DSEldif check fails +- Issue 50926 - Remove dual spinner and other UI fixes +- Issue 50928 - Unable to create a suffix with countryName +- Issue 50758 - Only Recommend bash-completion, not Require +- Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code +- Issue 50919 - Backend delete fails using dsconf +- Issue 50872 - dsconf can't create GSSAPI replication agreements +- Issue 50914 - No error returned when adding an entry matching filters for a non existing automember group +- Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before +- Issue 50898 - ldclt core dumped when run with -e genldif option + +* Thu Feb 13 2020 Mark Reynolds - 1.4.1.15-1 +- Bump version to 1.4.1.15 +- Issue 50855 - remove unused file from UI +- Issue 50855 - UI: Port Server Tab to React +- Issue 50636 - Crash during sasl bind +- Issue 49623 - cenotaph errors on modrdn operations (part 2) +- Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled +- Issue 50886 - Typo in the replication debug message +- Issue 50873 - Fix healthcheck and virtual attr check +- Issue 50873 - Fix issues with healthcheck tool +- Issue 50857 - Memory leak in ACI using IP subject +- Issue 49624 - DB Deadlock on modrdn appears to corrupt database and entry cache (part 2) +- Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name +- Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined" +- Issue 50798 - incorrect bytes in format string(fix import issue) +- Issue 50798 - incorrect bytes in format string +- Issue 50850 - Fix dsctl healthcheck for python36 +- Issue 49990 - Need to enforce a hard maximum limit for file descriptors + +* Thu Jan 23 2020 Mark Reynolds - 1.4.1.14-1 +- Bump version to 1.4.1.14 +- Issue 49254 - Fix compiler failures and warnings +- Issue 50349 - additional fix: filter schema check must handle subtypes +- Issue 50836 - Port Schema UI tab to React +- Issue 50842 - Decrease 389-console Cockpit component size +- Issue 50790 - Add result text when filter is invalid +- Issue 50834 - Incorrectly setting the NSS default SSL version max +- Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free +- Issue 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10 +- Issue 50599 - Fix memory leak when removing db region files +- Issue 49395 - Set the default TLS version min to TLS1.2 +- Issue 50818 - dsconf pwdpolicy get error +- Issue 50599 - Remove db region files prior to db recovery +- Issue 50816 - dsconf allows the root password to be set to nothing + +* Mon Jan 13 2020 Mark Reynolds - 1.4.1.13-1 +- Bump version to 1.4.1.13 +- Issue 50545 - Add the new replication monitor functionality to UI +- Issue 50806 - Fix minor issues in lib389 health checks +- Issue 50754 - Add Restore Change Log option to CLI +- Issue 50667 - dsctl -l did not respect PREFIX +- Issue 50780 - More CLI fixes +- Issue 50780 - Fix UI issues +- Issue 50779 - lib389 - conflict compare fails for DN's with spaces +- Issue 50499 - Fix npm audit issues +- Issue 50758 - Need to enable CLI arg completion +- Issue 50709 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10 + +* Mon Dec 9 2019 Mark Reynolds - 1.4.1.12-2 +- Bump version to 1.4.1.12-2 +- Fix python-argcomplete tinkering + +* Fri Dec 6 2019 Mark Reynolds - 1.4.1.12-1 +- Bump version to 1.4.1.12 +- Issue 50586 - lib389 - Fix DSEldif long line processing + +* Fri Dec 6 2019 Mark Reynolds - 1.4.1.11-1 +- Bump version to 1.4.1.11 +- Issue 50499 - Fix npm audit issues +- Issue 50753 - Dumping the changelog to a file doesn't work +- Issue 50734 - lib389 creates non-SSCA cert DBs with misleading README.txt +- Issue 50736 - RetroCL trimming may crash at shutdown if trimming configuration is invalid +- Issue 50439 - Update docker integration for Fedora +- Issue 50747 - Port readnsstate to dsctl +- Issue 50745 - ns-slapd hangs during CleanAllRUV tests +- Issue 50758 - Enable CLI arg completion +- Issue 50701 - Fix type in lint report +- Issue 50701 - Add additional healthchecks to dsconf +- Issue 50711 - `dsconf security` lacks option for setting nsTLSAllowClientRenegotiation attribute +- Issue 50499 - Fix npm audit issues +- Issue 50634 - Fix CLI error parsing for non-string values + +* Wed Nov 13 2019 Mark Reynolds - 1.4.1.10-2 +- Bump version to 1.4.1.10-2 +- Fix specfile dependancy for python packaging + +* Wed Nov 13 2019 Mark Reynolds - 1.4.1.10-1 +- Bump version to 1.4.1.10 +- Issue 50712 - Version comparison doesn't work correctly on git builds +- Issue 50706 - Missing lib389 dependency - packaging +- Issue 50499 - Fix npm audit issues +- Issue 50699 - Add Disk Monitor to CLI and UI +- Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes +- Issue 50696 - Fix various UI bugs +- Issue 50689 - Failed db restore task does not report an error + +>>>>>>> fdea6d0... Bump version to 1.4.1.10 +* Fri Nov 1 2019 Mark Reynolds - 1.4.1.9-1 +- Bump version to 1.4.1.9 +- Issue 50592 - Port Replication Tab to ReactJS +- Issue 49850 - cont -fix crash in ldbm_non_leaf +- Issue 50634 - Clean up CLI errors output - Fix wrong exception +- Issue 50634 - Clean up CLI errors output +- Issue 49850 - ldbm_get_nonleaf_ids() slow for databases with many non-leaf entries +- Issue 50655 - access log etime is not properly formatted +- Issue 50653 - objectclass parsing fails to log error message text +- Issue 50646 - Improve task handling during shutdowns +- Issue 50622 - ds_selinux_enabled may crash on suse +- Issue 50499 - Fix npm audit issues + +* Tue Oct 15 2019 Mark Reynolds - 1.4.1.8-4 +- Bump version to 1.4.1.8-4 +- Remove perl filter provides/requires as its causes more regressions + +* Fri Sep 27 2019 Mark Reynolds - 1.4.1.8-3 +- Bump version to 1.4.1.8-3 +- Fix perl filter provides/requires + +* Thu Sep 26 2019 Mark Reynolds - 1.4.1.8-2 +- Bump version to 1.4.1.8-2 +- Revert perl filter as it broke legacy tools + +* Thu Sep 26 2019 Mark Reynolds - 1.4.1.8-1 +- Bump version to 1.4.1.8 +- Issue 50545 - Port repl-monitor.pl to lib389 CLI +- Issue 50620 - Fix regressions from 50506 (slapi_enry_attr_get_ref) + +* Tue Sep 17 2019 Mark Reynolds - 1.4.1.7-1 +- Bump version to 1.4.1.7 +- Issue 50581 - ns-slapd crashes during ldapi search +- Issue 50604 - Fix UI validation +- Issue 50593 - Investigate URP handling on standalone instance +- Issue 50506 - Fix regression for relication stripattrs +- Issue 50546 - fix more UI issues(part 2) +- Issue 50546 - fix more UI issues +- Issue 50546 - Fix various issues in UI +- Issue 50576 - Same proc uid/gid maps to rootdn for ldapi sasl +- Issue 50567, 50568 - strict host check disable and display container version +- Issue 50550 - DS installer debug messages leaking to ipa-server-install +- Issue 50545 - Port fixup-memberuid and add the functionality to CLI and UI +- Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted +- Issue 50578 - Add SKIP_AUDIT_CI flag for Cockpit builds +- Issue 50349 - filter schema validation +- Issue 48055 - CI test-(Plugin configuration should throw proper error messages if not configured properly) +- Issue 49324 - idl_new fix assert +- Issue 50564 - Fix rust libraries by default and improve docker +- Issue 50206 - Refactor lock, unlock and status of dsidm account/role +- Issue 49324 - idl_new report index name in error conditions +- Issue 49761 - Fix CI test suite issues +- Issue 50506 - Fix regression from slapi_entry_attr_get_ref refactor +- Issue 50499 - Audit fix - Update npm 'eslint-utils' version +- Issue 49624 - modrdn silently fails if DB deadlock occurs +- Issue 50542 - fix crash in filter tests +- Issue 49761 - Fix CI test suite issues +- Issue 50542 - Entry cache contention during base search +- Issue 50462 - Fix CI tests +- Issue 50490 - objects and memory leaks +- Issue 50538 - Move CI test to individual file +- Issue 50538 - cleanAllRUV task limit is not enforced for replicated tasks +- Issue 50536 - Audit log heading written to log after every update +- Issue 50525 - nsslapd-defaultnamingcontext does not change when the assigned suffix gets deleted +- Issue 50534 - CLI change schema edit subcommand to replace +- Issue 50506 - cont Fix invalid frees from pointer reference calls +- Issue 50507 - Fix Cockpit UI styling for PF4 +- Issue 48851 - investigate and port TET matching rules filter tests(indexing final) +- Issue 48851 - Add more test cases to the match test suite(mode replace) +- Issue 50530 - Directory Server not RFC 4511 compliant with requested attr "1.1" +- Issue 50529 - LDAP server returning PWP controls in different sequence +- Issue 50506 - Fix invalid frees from pointer reference calls. +- Issue 50506 - Replace slapi_entry_attr_get_charptr() with slapi_entry_attr_get_ref() +- Issue 50521 - Add regressions in CI tests +- Issue 50510 - etime can contain invalid nanosecond value +- Issue 50488 - Create a monitor for disk space usagedisk-space-mon +- Issue 50511 - lib389 PosixGroups type can not handle rdn properly +- Issue 50508 - UI - fix local password policy form + +* Wed Jul 24 2019 Fedora Release Engineering - 1.4.1.6-1.1 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild + +* Fri Jul 19 2019 Mark Reynolds - 1.4.1.6-1 +- Bump version to 1.4.1.6 +- Issue 50355 - SSL version min and max not correctly applied +- Issue 50497 - Port cl-dump.pl tool to Python using lib389 +- Issue 48851 - investigate and port TET matching rules filter tests(Final) +- Issue 50417 - fix regression from previous commit +- Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file +- Issue 50325 - Add Security tab to UI +- Issue 49789 - By default, do not manage unhashed password +- Issue 49421 - Implement password hash upgrade on bind. +- Issue 49421 - on bind password upgrade proof of concept +- Issue 50493 - connection_is_free to trylock +- Issue 50459 - Correct issue with allocation state +- Issue 50499 - Fix audit issues and remove jquery from the whitelist +- Issue 50459 - c_mutex to use pthread_mutex to allow ns sharing +- Issue 50484 - Add a release build dockerfile and dscontainer improvements +- Issue 50486 - Update jemalloc to 5.2.0 + +* Mon Jul 8 2019 Mark Reynolds - 1.4.1.5-1 +- Bump version to 1.4.1.5 +- Issue 50431 - Fix regression from coverity fix (crash in memberOf plugin) +- Issue 49239 - Add a new CI test case +- Issue 49997 - Add a new CI test case +- Issue 50177 - Add a new CI test case, also added fixes in lib389 +- Issue 49761 - Fix CI test suite issues +- Issue 50474 - Unify result codes for add and modify of repl5 config +- Issue 50472 - memory leak with encryption +- Issue 50462 - Fix Root DN access control plugin CI tests +- Issue 50462 - Fix CI tests +- Issue 50217 - Implement dsconf security section +- Issue 48851 - Add more test cases to the match test suite. +- Issue 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients +- Issue 50439 - fix waitpid issue when pid does not exist +- Issue 50454 - Fix Cockpit UI branding +- Issue 48851 - investigate and port TET matching rules filter tests(index) +- Issue 49232 - Truncate the message when buffer capacity is exceeded + +* Tue Jun 18 2019 Mark Reynolds - 1.4.1.4-1 +- Bump version to 1.4.1.4 +- Issue 49361 - Use IPv6 friendly network functions +- Issue 48851 - Investigate and port TET matching rules filter tests(bug772777) +- Issue 50446 - NameError: name 'ds_is_older' is not defined +- Issue 49602 - Revise replication status messages +- Issue 50439 - Update docker integration to work out of source directory +- Issue 50037 - revert path changes as it breaks prefix/rpm builds +- Issue 50431 - Fix regression from coverity fix +- Issue 50370 - CleanAllRUV task crashing during server shutdown +- Issue 48851 - investigate and port TET matching rules filter tests(match) +- Issue 50417 - Fix missing quote in some legacy tools +- Issue 50431 - Fix covscan warnings +- Revert "Issue 49960 - Core schema contains strings instead of numer oids" +- Issue 50426 - nsSSL3Ciphers is limited to 1024 characters +- Issue 50052 - Fix rpm.mk according to audit-ci change +- Issue 50365 - PIDFile= references path below legacy directory /var/run/ +- Issue 50428 - Log the actual base DN when the search fails with "invalid attribute request" +- Issue 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS +- Issue 50417 - Revise legacy tool scripts to work with new systemd changes +- Issue 48851 - Add more search filters to vfilter_simple test suite +- Issue 49761 - Fix CI test suite issues +- Issue 49875 - Move SystemD service config to a drop-in file +- Issue 50413 - ds-replcheck - Always display the Result Summary +- Issue 50052 - Add package-lock.json and use "npm ci" +- Issue 48851 - investigate and port TET matching rules filter tests(vfilter simple) +- Issue 50355 - NSS can change the requested SSL min and max versions +- Issue 48851 - investigate and port TET matching rules filter tests(vfilter_ld) +- Issue 50390 - Add Managed Entries Plug-in Config Entry schema +- Issue 49730 - Remove unused Mozilla ldapsdk variables + +* Fri May 24 2019 Mark Reynolds - 1.4.1.3-1 +- Bump version to 1.4.1.3 +- Issue 49761 - Fix CI test suite issues +- Issue 50041 - Add the rest UI Plugin tabs - Part 2 +- Issue 50340 - 2nd try - structs for diabled plugins will not be freed +- Issue 50403 - Instance creation fails on 1.3.9 using perl utils and latest lib389 +- Issue 50389 - ns-slapd craches while two threads are polling the same connection +- Issue 48851 - investigate and port TET matching rules filter tests(scanlimit) +- Issue 50037 - lib389 fails to install in venv under non-root user +- Issue 50112 - Port ACI test suit from TET to python3(userattr) +- Issue 50393 - maxlogsperdir accepting negative values +- Issue 50112 - Port ACI test suit from TET to python3(roledn) +- Issue 49960 - Core schema contains strings instead of numer oids +- Issue 50396 - Crash in PAM plugin when user does not exist +- Issue 50387 - enable_tls() should label ports with ldap_port_t +- Issue 50390 - Add Managed Entries Plug-in Config Entry schema +- Issue 50306 - Fix regression with maxbersize +- Issue 50384 - Missing dependency: cracklib-dicts +- Issue 49029 - [RFE] improve internal operations logging +- Issue 49761 - Fix CI test suite issues +- Issue 50374 - dsdim posixgroup create fails with ERROR +- Issue 50251 - clear text passwords visable in CLI verbose mode logging +- Issue 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients +- Issue 48851 - investigate and port TET matching rules filter tests +- Issue 50220 - attr_encryption test suite failing +- Issue 50370 - CleanAllRUV task crashing during server shutdown +- Issue 50340 - structs for disabled plugins will not be freed +- Issue 50164 - Add test for dscreate to basic test suite +- Issue 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes +- Issue 49730 - MozLDAP bindings have been unsupported for a while +- Issue 50353 - Categorize tests by tiers +- Issue 50303 - Add creation date to task data +- Issue 50358 - Create a Bitwise Plugin class in plugins.py +- Remove the nss3 path prefix from the cert.h C preprocessor source file inclusion +- Issue 50329 - revert fix +- Issue 50112 - Port ACI test suit from TET to python3(keyaci) +- Issue 50344 - tidy rpm vs build systemd flag handling +- Issue 50067 - Fix krb5 dependency in a specfile +- Issue 50340 - structs for diabled plugins will not be freed +- Issue 50327 - Add replication conflict support to UI +- Issue 50327 - Add replication conflict entry support to lib389/CLI +- Issue 50329 - improve connection default parameters +- Issue 50313 - Add a NestedRole type to lib389 +- Issue 50112 - Port ACI test suit from TET to python3(Delete and Add) +- Issue 49390, 50019 - support cn=config compare operations +- Issue 50041 - Add the rest UI Plugin tabs - Part 1 +- Issue 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS +- Issue 49990 - Increase the default FD limits +- Issue 50306 - (cont typo) Move connection config inside struct +- Issue 50291 - Add monitor tab functionality to Cockpit UI +- Issue 50317 - fix ds-backtrace issue on latest gdb +- Issue 50305 - Revise CleanAllRUV task restart process +- Issue 49915 - Fix typo +- Issue 50026 - Audit log does not capture the operation where nsslapd-lookthroughlimit is modified +- Issue 49899 - fix pin.txt and pwdfile permissions +- Issue 49915 - Add regression test +- Issue 50303 - Add task creation date to task data +- Issue 50306 - Move connection config inside struct +- Issue 50240 - Improve task logging +- Issue 50032 - Fix deprecation warnings in tests +- Issue 50310 - fix sasl header include +- Issue 49390 - improve compare and cn=config compare tests + +* Wed Apr 03 2019 Adam Williamson - 1.4.1.2-3 +- Rebuild without changes to be newer than 1.4.1.2-1 (see #1694990) + +* Fri Mar 29 2019 Mark Reynolds - 1.4.1.2-2 +- Bump version to 1.4.1.2-2 +- Fix lib389 python requirement + +* Fri Mar 29 2019 Mark Reynolds - 1.4.1.2-1 +- Bump version to 1.4.1.2-1 +- Ticket 50308 - Revise memory leak fix +- Ticket 50308 - Fix memory leaks for repeat binds and replication +- Ticket 40067 - Use PKG_CHECK_MODULES to detect libraries +- Ticket 49873 - (cont 3rd) cleanup debug log +- Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup +- Ticket 50292 - Fix Plugin CLI and UI issues +- Ticket 50112 - Port ACI test suit from TET to python3(misc and syntax) +- Ticket 50289 - Fix various database UI issues +- Ticket 49463 - After cleanALLruv, replication is looping on keep alive DEL +- Ticket 50300 - Fix memory leak in automember plugin +- Ticket 50265 - the warning about skew time could last forever +- Ticket 50260 - Invalid cache flushing improvements +- Ticket 49561 - MEP plugin, upon direct op failure, will delete twice the same managed entry +- Ticket 50077 - Do not automatically turn automember postop modifies on +- Ticket 50282 - OPERATIONS ERROR when trying to delete a group with automember members +- Ticket 49715 - extend account functionality +- Ticket 49873 - (cont) Contention on virtual attribute lookup +- Ticket 50260 - backend txn plugins can corrupt entry cache +- Ticket 50255 - Port password policy test to use DSLdapObject +- Ticket 49667 - 49668 - remove old spec files +- Ticket 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present +- Ticket 50112 - Port ACI test suit from TET to python3(Search) +- Ticket 50259 - implement dn construction test +- Ticket 50273 - reduce default replicaton agmt timeout +- Ticket 50208 - lib389- Fix issue with list all instances +- Ticket 50112 - Port ACI test suit from TET to python3(Global Group) +- Ticket 50041 - Add CLI functionality for special plugins +- Ticket 50263 - LDAPS port not listening after installation +- Ticket 49575 - Indicate autosize value errors and corrective actions +- Ticket 50137 - create should not check in non-stateful mode for exist +- Ticket 49655 - remove doap file +- Ticket 50197 - Fix dscreate regression +- Ticket 50234 - one level search returns not matching entry +- Ticket 50257 - lib389 - password policy user vs subtree checks are broken +- Ticket 50253 - Making an nsManagedRoleDefinition type in src/lib389/lib389/idm/nsrole.py +- Ticket 49029 - [RFE] improve internal operations logging +- Ticket 50230 - improve ioerror msg when not root/dirsrv +- Ticket 50246 - Fix the regression in old control tools +- Ticket 50197 - Container integration part 2 +- Ticket 50197 - Container init tools +- Ticket 50232 - export creates not importable ldif file +- Ticket 50215 - UI - implement Database Tab in reachJS +- Ticket 50243 - refint modrdn stress test +- Ticket 50238 - Failed modrdn can corrupt entry cache +- Ticket 50236 - memberOf should be more robust +- Ticket 50213 - fix list instance issue +- Ticket 50219 - Add generic filter to DSLdapObjects +- Ticket 50227 - Making an cosClassicDefinition type in src/lib389/lib389/cos.py +- Ticket 50112 - Port ACI test suit from TET to python3(modify) +- Ticket 50224 - warnings on deprecated API usage +- Ticket 50112 - Port ACI test suit from TET to python3(valueaci) +- Ticket 50112 - Port ACI test suit from TET to python3(Aci Atter) +- Ticket 50208 - make instances mark off based on dse.ldif not sysconfig +- Ticket 50170 - composable object types for nsRole in lib389 +- Ticket 50199 - disable perl by default +- Ticket 50211 - Making an actual Anonymous type in lib389/idm/account.py +- Ticket 50155 - password history check has no way to just check the current password +- Ticket 49873 - Contention on virtual attribute lookup +- Ticket 50197 - Container integration improvements +- Ticket 50195 - improve selinux error messages in interactive +- Ticket 49658 - In replicated topology a single-valued attribute can diverge +- Ticket 50111 - Use pkg-config to detect icu +- Ticket 50165 - Fix issues with dscreate +- Ticket 50177 - import task should not be deleted too rapidely after import finishes to be able to query the status +- Ticket 50140 - Use high ports in container installs +- Ticket 50184 - Add cli tool parity to dsconf/dsctl +- Ticket 50159 - sssd and config display + * Thu Jan 31 2019 Fedora Release Engineering - 1.4.1.1-1.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild diff --git a/sources b/sources index 437ce4a..083b179 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (389-ds-base-1.4.1.1.tar.bz2) = ba32f0923cb9e45f86cc17086ed4d362f274bb7ca49a43e647eb04e78128c3610c881db7426e256ccb082ac0a5dc598436b2437d068212182c0823e2fb3859dc -SHA512 (jemalloc-5.1.0.tar.bz2) = d9abebe54d303ca931b8c31c1033f23ff5fb060f2377ec8386f4d79c352e65c78ed34f680c352dac14f7d7115d10245782d553d988bc13df2eb34a2f0942ef6f +SHA512 (389-ds-base-1.4.1.19.tar.bz2) = 3aeb73d24dc3fcbb987514b374b3f0fa25c83893a6e97eeecaab598acf17de3201ca93bd7aa4e779073f7145cea95fd7017f73b0357a459b9df230bd8956ce8f +SHA512 (jemalloc-5.2.1.tar.bz2) = 0bbb77564d767cef0c6fe1b97b705d368ddb360d55596945aea8c3ba5889fbce10479d85ad492c91d987caacdbbdccc706aa3688e321460069f00c05814fae02