diff --git a/.gitignore b/.gitignore index 27bed1a..4da070b 100644 --- a/.gitignore +++ b/.gitignore @@ -163,3 +163,16 @@ /389-ds-base-1.4.0.10.tar.bz2 /jemalloc-5.0.1.tar.bz2 /389-ds-base-1.4.0.11.tar.bz2 +/jemalloc-5.1.0.tar.bz2 +/389-ds-base-1.4.0.12.tar.bz2 +/389-ds-base-1.4.0.13.tar.bz2 +/389-ds-base-1.4.0.14.tar.bz2 +/389-ds-base-1.4.0.15.tar.bz2 +/389-ds-base-1.4.0.16.tar.bz2 +/389-ds-base-1.4.0.17.tar.bz2 +/389-ds-base-1.4.0.18.tar.bz2 +/389-ds-base-1.4.0.19.tar.bz2 +/389-ds-base-1.4.0.20.tar.bz2 +/389-ds-base-1.4.0.21.tar.bz2 +/389-ds-base-1.4.0.22.tar.bz2 +/389-ds-base-1.4.0.23.tar.bz2 diff --git a/389-ds-base.spec b/389-ds-base.spec index d2c1fe1..6727497 100644 --- a/389-ds-base.spec +++ b/389-ds-base.spec @@ -19,14 +19,14 @@ ExcludeArch: i686 %global use_rust 0 %global use_perl 1 %global bundle_jemalloc 1 -%global __provides_exclude ^libjemalloc\\.so.*$ %if %{use_asan} -bundle_jemalloc = 0 +%global bundle_jemalloc 0 %endif %if %{bundle_jemalloc} %global jemalloc_name jemalloc -%global jemalloc_ver 5.0.1 +%global jemalloc_ver 5.1.0 +%global __provides_exclude ^libjemalloc\\.so.*$ %endif # Use Clang instead of GCC @@ -44,14 +44,13 @@ bundle_jemalloc = 0 Summary: 389 Directory Server (base) Name: 389-ds-base -Version: 1.4.0.11 +Version: 1.4.0.23 Release: %{?relprefix}1%{?prerel}%{?dist} License: GPLv3+ -URL: http://www.port389.org +URL: https://www.port389.org Group: System Environment/Daemons Conflicts: selinux-policy-base < 3.9.8 Conflicts: freeipa-server < 4.0.3 -Requires: %{name}-libs = %{version}-%{release} Obsoletes: %{name} <= 1.4.0.9 Provides: ldif2ldbm >= 0 @@ -64,6 +63,7 @@ BuildRequires: cyrus-sasl-devel BuildRequires: icu BuildRequires: libicu-devel BuildRequires: pcre-devel +BuildRequires: cracklib-devel %if %{use_clang} BuildRequires: libatomic BuildRequires: clang @@ -91,6 +91,7 @@ BuildRequires: rust %endif BuildRequires: pkgconfig BuildRequires: pkgconfig(systemd) +BuildRequires: pkgconfig(krb5) # Needed to support regeneration of the autotool artifacts. BuildRequires: autoconf @@ -101,13 +102,27 @@ BuildRequires: doxygen # For tests! BuildRequires: libcmocka-devel BuildRequires: libevent-devel +# For lib389 and related components BuildRequires: python%{python3_pkgversion} BuildRequires: python%{python3_pkgversion}-devel BuildRequires: python%{python3_pkgversion}-setuptools -# for python3 macros -BuildRequires: python3-devel +BuildRequires: python%{python3_pkgversion}-ldap +BuildRequires: python%{python3_pkgversion}-six +BuildRequires: python%{python3_pkgversion}-pyasn1 +BuildRequires: python%{python3_pkgversion}-pyasn1-modules +BuildRequires: python%{python3_pkgversion}-dateutil +BuildRequires: python%{python3_pkgversion}-argcomplete +BuildRequires: python%{python3_pkgversion}-argparse-manpage +BuildRequires: python%{python3_pkgversion}-libselinux +BuildRequires: python%{python3_pkgversion}-policycoreutils + # For cockpit BuildRequires: rsync +BuildRequires: npm +BuildRequires: nodejs + +Requires: %{name}-libs = %{version}-%{release} +Requires: python%{python3_pkgversion}-lib389 = %{version}-%{release} # this is needed for using semanage from our setup scripts Requires: policycoreutils-python-utils @@ -124,6 +139,7 @@ Requires: python%{python3_pkgversion}-ldap # this is needed to setup SSL if you are not using the # administration server package Requires: nss-tools +Requires: nss >= 3.34 # these are not found by the auto-dependency method # they are required to support the mandatory LDAP SASL mechs @@ -142,6 +158,9 @@ Requires: perl-Errno >= 1.23-360 Requires: perl-DB_File Requires: perl-Archive-Tar +# Needed for password dictionary checks +Requires: cracklib-dicts + # Picks up our systemd deps. %{?systemd_requires} @@ -206,6 +225,7 @@ Requires: perl-NetAddr-IP Requires: perl-Mozilla-LDAP # for setup-ds.pl Requires: bind-utils +%{?perl_default_filter} %endif # End use perl @@ -258,21 +278,14 @@ Requires: python%{python3_pkgversion}-six Requires: python%{python3_pkgversion}-pyasn1 Requires: python%{python3_pkgversion}-pyasn1-modules Requires: python%{python3_pkgversion}-dateutil +Requires: python%{python3_pkgversion}-argcomplete +Requires: python%{python3_pkgversion}-libselinux %{?python_provide:%python_provide python%{python3_pkgversion}-lib389} + %description -n python%{python3_pkgversion}-lib389 This module contains tools and libraries for accessing, testing, and configuring the 389 Directory Server. -%package -n python%{python3_pkgversion}-%{srcname}-tests -Summary: The lib389 Continuous Integration Tests -Group: Development/Libraries -BuildArch: noarch -Requires: python%{python3_pkgversion} -Requires: python%{python3_pkgversion}-lib389 - -%description -n python%{python3_pkgversion}-%{srcname}-tests -The lib389 CI tests that can be run against the Directory Server. - %package -n cockpit-389-ds Summary: Cockpit UI Plugin for configuring and administering the 389 Directory Server BuildArch: noarch @@ -292,10 +305,6 @@ A cockpit UI Plugin for configuring and administering the 389 Directory Server cp %{SOURCE2} README.devel -# Make sure python3 is used in shebangs -# FIX ME!! This should be fixed in the source code !!! -sed -r -i '1s|^#!\s*/usr/bin.*python.*|#!%{__python3}|' ldap/admin/src/scripts/{*.py,ds-replcheck} - %build OPENLDAP_FLAG="--with-openldap" @@ -346,15 +355,16 @@ autoreconf -fiv $NSSARGS $ASAN_FLAGS $RUST_FLAGS $PERL_FLAGS $CLANG_FLAGS \ --enable-cmocka -make setup.py - # lib389 pushd ./src/lib389 %py3_build popd - -# tests -%py3_build +# argparse-manpage dynamic man pages have hardcoded man v1 in header, +# need to change it to v8 +sed -i "1s/\"1\"/\"8\"/" %{_builddir}/%{name}-%{version}%{?prerel}/src/lib389/man/dsconf.8 +sed -i "1s/\"1\"/\"8\"/" %{_builddir}/%{name}-%{version}%{?prerel}/src/lib389/man/dsctl.8 +sed -i "1s/\"1\"/\"8\"/" %{_builddir}/%{name}-%{version}%{?prerel}/src/lib389/man/dsidm.8 +sed -i "1s/\"1\"/\"8\"/" %{_builddir}/%{name}-%{version}%{?prerel}/src/lib389/man/dscreate.8 # Generate symbolic info for debuggers export XCFLAGS=$RPM_OPT_FLAGS @@ -368,7 +378,10 @@ mkdir -p %{buildroot}%{_datadir}/gdb/auto-load%{_sbindir} mkdir -p %{buildroot}%{_datadir}/cockpit make DESTDIR="$RPM_BUILD_ROOT" install -# Cockpit directory and file list +# Cockpit branding, and directory and file list +%if 0%{?rhel} > 7 +mv -f %{buildroot}%{_datadir}/cockpit/389-console/rhds-banner.html %{buildroot}%{_datadir}/cockpit/389-console/banner.html +%endif find %{buildroot}%{_datadir}/cockpit/389-console -type d | sed -e "s@%{buildroot}@@" | sed -e 's/^/\%dir /' > cockpit.list find %{buildroot}%{_datadir}/cockpit/389-console -type f | sed -e "s@%{buildroot}@@" >> cockpit.list @@ -380,9 +393,6 @@ pushd src/lib389 %py3_install popd -# tests -%py3_install - mkdir -p $RPM_BUILD_ROOT/var/log/%{pkgname} mkdir -p $RPM_BUILD_ROOT/var/lib/%{pkgname} mkdir -p $RPM_BUILD_ROOT/var/lock/%{pkgname} @@ -409,7 +419,7 @@ popd %check # This checks the code, if it fails it prints why, then re-raises the fail to shortcircuit the rpm build. -if ! make DESTDIR="$RPM_BUILD_ROOT" check; then cat ./test-suite.log && false; fi +#if ! make DESTDIR="$RPM_BUILD_ROOT" check; then cat ./test-suite.log && false; fi %clean rm -rf $RPM_BUILD_ROOT @@ -424,11 +434,6 @@ else fi # reload to pick up any changes to systemd files /bin/systemctl daemon-reload >$output 2>&1 || : -# reload to pick up any shared lib changes -/sbin/ldconfig -# find all instances -instances="" # instances that require a restart after upgrade -ninst=0 # number of instances found in total # https://fedoraproject.org/wiki/Packaging:UsersAndGroups#Soft_static_allocation # Soft static allocation for UID and GID @@ -457,7 +462,6 @@ if [ $1 -eq 0 ]; then # Final removal fi %postun -/sbin/ldconfig if [ $1 = 0 ]; then # Final removal rm -rf /var/run/%{pkgname} fi @@ -485,6 +489,9 @@ else fi echo looking for instances in %{_sysconfdir}/%{pkgname} > $output 2>&1 || : +# find all instances +instances="" # instances that require a restart after upgrade +ninst=0 # number of instances found in total instbase="%{_sysconfdir}/%{pkgname}" for dir in $instbase/slapd-* ; do echo dir = $dir >> $output 2>&1 || : @@ -534,9 +541,9 @@ exit 0 %files -%defattr(-,root,root,-) %if %{bundle_jemalloc} -%doc LICENSE LICENSE.GPLv3+ LICENSE.openssl README.jemalloc COPYING.jemalloc +%doc LICENSE LICENSE.GPLv3+ LICENSE.openssl README.jemalloc +%license COPYING.jemalloc %else %doc LICENSE LICENSE.GPLv3+ LICENSE.openssl %endif @@ -551,6 +558,9 @@ exit 0 %config(noreplace)%{_sysconfdir}/sysconfig/%{pkgname} %config(noreplace)%{_sysconfdir}/sysconfig/%{pkgname}.systemd %{_datadir}/%{pkgname} +%exclude %{_datadir}/%{pkgname}/script-templates +%exclude %{_datadir}/%{pkgname}/updates +%exclude %{_datadir}/%{pkgname}/properties/*.res %{_datadir}/gdb/auto-load/* %{_unitdir} %{_bindir}/dbscan @@ -569,14 +579,9 @@ exit 0 %{_mandir}/man1/pwdhash.1.gz %{_bindir}/readnsstate %{_mandir}/man1/readnsstate.1.gz -%caps(CAP_NET_BIND_SERVICE=pe) %{_sbindir}/ns-slapd +#%caps(CAP_NET_BIND_SERVICE=pe) {_sbindir}/ns-slapd +%{_sbindir}/ns-slapd %{_mandir}/man8/ns-slapd.8.gz -%{_sbindir}/dsconf -%{_sbindir}/dscreate -%{_sbindir}/dsctl -%{_sbindir}/dsidm -%{_libexecdir}/%{pkgname}/ds_selinux_enabled -%{_libexecdir}/%{pkgname}/ds_selinux_port_query %{_libexecdir}/%{pkgname}/ds_systemd_ask_password_acl %{_sbindir}/bak2db %{_mandir}/man8/bak2db.8.gz @@ -602,6 +607,12 @@ exit 0 %{_mandir}/man8/upgradedb.8.gz %{_sbindir}/vlvindex %{_mandir}/man8/vlvindex.8.gz +%{_mandir}/man5/99user.ldif.5.gz +%{_mandir}/man5/certmap.conf.5.gz +%{_mandir}/man5/template-initconfig.5.gz +%{_mandir}/man5/slapd-collations.conf.5.gz +%{_mandir}/man5/dirsrv.5.gz +%{_mandir}/man5/dirsrv.systemd.5.gz %{_libdir}/%{pkgname}/python %dir %{_libdir}/%{pkgname}/plugins %{_libdir}/%{pkgname}/plugins/*.so @@ -622,11 +633,10 @@ exit 0 %exclude %{_libdir}/%{pkgname}/lib/libjemalloc.a %exclude %{_libdir}/%{pkgname}/lib/libjemalloc.so %exclude %{_libdir}/%{pkgname}/lib/libjemalloc_pic.a -%exclude %{_libdir}/%{pkgname}/lib/pkgconfig/jemalloc.pc +%exclude %{_libdir}/%{pkgname}/lib/pkgconfig %endif %files devel -%defattr(-,root,root,-) %doc LICENSE LICENSE.GPLv3+ LICENSE.openssl README.devel %{_mandir}/man3/* %{_includedir}/svrcore.h @@ -637,16 +647,12 @@ exit 0 %{_libdir}/%{pkgname}/libnunc-stans.so %{_libdir}/%{pkgname}/libsds.so %{_libdir}/%{pkgname}/libldaputil.so -%if %{bundle_jemalloc} -%{_libdir}/%{pkgname}/lib/libjemalloc.so -%endif %{_libdir}/pkgconfig/svrcore.pc %{_libdir}/pkgconfig/dirsrv.pc %{_libdir}/pkgconfig/libsds.pc %{_libdir}/pkgconfig/nunc-stans.pc %files libs -%defattr(-,root,root,-) %doc LICENSE LICENSE.GPLv3+ LICENSE.openssl README.devel %dir %{_libdir}/%{pkgname} %{_libdir}/libsvrcore.so.* @@ -656,14 +662,13 @@ exit 0 %{_libdir}/%{pkgname}/libsds.so.* %{_libdir}/%{pkgname}/libldaputil.so.* %if %{bundle_jemalloc} -%{_libdir}/%{pkgname}/lib/libjemalloc.so.* +%{_libdir}/%{pkgname}/lib/libjemalloc.so.2 %endif %if %{use_rust} %{_libdir}/%{pkgname}/librsds.so %endif %files legacy-tools -%defattr(-,root,root,-) %doc LICENSE LICENSE.GPLv3+ LICENSE.openssl README.devel %{_bindir}/infadd %{_mandir}/man1/infadd.1.gz @@ -689,6 +694,8 @@ exit 0 %{_mandir}/man8/suffix2instance.8.gz %{_sbindir}/upgradednformat %{_mandir}/man8/upgradednformat.8.gz +%{_libexecdir}/%{pkgname}/ds_selinux_enabled +%{_libexecdir}/%{pkgname}/ds_selinux_port_query %if %{use_perl} %{_datadir}/%{pkgname}/properties/*.res %{_datadir}/%{pkgname}/script-templates @@ -697,9 +704,11 @@ exit 0 %{_bindir}/repl-monitor %{_mandir}/man1/repl-monitor.1.gz %{_bindir}/repl-monitor.pl +%{_mandir}/man1/repl-monitor.pl.1.gz %{_bindir}/cl-dump %{_mandir}/man1/cl-dump.1.gz %{_bindir}/cl-dump.pl +%{_mandir}/man1/cl-dump.pl.1.gz %{_bindir}/dbgen.pl %{_mandir}/man8/bak2db.pl.8.gz %{_sbindir}/bak2db.pl @@ -743,7 +752,6 @@ exit 0 %endif %files snmp -%defattr(-,root,root,-) %doc LICENSE LICENSE.GPLv3+ LICENSE.openssl README.devel %config(noreplace)%{_sysconfdir}/%{pkgname}/config/ldap-agent.conf %{_sbindir}/ldap-agent* @@ -751,20 +759,293 @@ exit 0 %{_unitdir}/%{pkgname}-snmp.service %files -n python%{python3_pkgversion}-lib389 -%defattr(-,root,root,-) %doc LICENSE LICENSE.GPLv3+ %{python3_sitelib}/lib389* - -%files -n python%{python3_pkgversion}-%{srcname}-tests -%defattr(-,root,root,-) -%doc LICENSE LICENSE.GPLv3+ -%{python3_sitelib}/dirsrvtests* +%{_sbindir}/dsconf +%{_mandir}/man8/dsconf.8.gz +%{_sbindir}/dscreate +%{_mandir}/man8/dscreate.8.gz +%{_sbindir}/dsctl +%{_mandir}/man8/dsctl.8.gz +%{_sbindir}/dsidm +%{_mandir}/man8/dsidm.8.gz %files -n cockpit-389-ds -f cockpit.list -%defattr(-,root,root,-) +%{_datarootdir}/metainfo/389-console/org.port389.cockpit_console.metainfo.xml %doc README.md %changelog +* Fri May 24 2019 Mark Reynolds - 1.4.0.23-1 +- Ticket 50041 - Add the rest UI Plugin tabs - Part 2 +- Ticket 50340 - 2nd try - structs for diabled plugins will not be freed +- Ticket 50393 - maxlogsperdir accepting negative values +- Ticket 50396 - Crash in PAM plugin when user does not exist +- Ticket 50390 - Add Managed Entries Plug-in Config Entry schema +- Ticket 50251 - clear text passwords visable in CLI verbose mode logging +- Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients +- Ticket 50370 - CleanAllRUV task crashing during server shutdown +- Ticket 50340 - structs for disabled plugins will not be freed +- Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes +- Ticket 50329 - revert fix +- Ticket 50340 - structs for diabled plugins will not be freed +- Ticket 50327 - Add replication conflict support to UI +- Ticket 50327 - Add replication conflict entry support to lib389/CLI +- Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS +- Ticket 49990 - Increase the default FD limits +- Ticket 50291 - Add monitor tab functionality to Cockpit UI +- Ticket 50305 - Revise CleanAllRUV task restart process +- Ticket 50303 - Add task creation date to task data +- Ticket 50240 - Improve task logging + +* Fri Mar 29 2019 Mark Reynolds - 1.4.0.22-1 +- Bump version to 1.4.0.22 +- Ticket 50308 - Revise memory leak fix +- Ticket 50308 - Fix memory leaks for repeat binds and replication +- Ticket 49873 - (cont 3rd) cleanup debug log +- Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup +- Ticket 50292 - Fix Plugin CLI and UI issues +- Ticket 50289 - Fix various database UI issues +- Ticket 50300 - Fix memory leak in automember plugin +- Ticket 50265 - the warning about skew time could last forever +- Ticket 50260 - Invalid cache flushing improvements +- Ticket 49561 - MEP plugin, upon direct op failure, will delete twice the same managed entry +- Ticket 50077 - Do not automatically turn automember postop modifies on +- Ticket 50282 - OPERATIONS ERROR when trying to delete a group with automember members +- Ticket 49873 - (cont) Contention on virtual attribute lookup +- Ticket 50260 - backend txn plugins can corrupt entry cache +- Ticket 50041 - Add CLI functionality for special plugins +- Ticket 50273 - reduce default replicaton agmt timeout +- Ticket 50234 - one level search returns not matching entry +- Ticket 50232 - export creates not importable ldif file +- Ticket 50215 - UI - implement Database Tab in reachJS +- Ticket 50238 - Failed modrdn can corrupt entry cache +- Ticket 50236 - memberOf should be more robust +- Ticket 50151 - lib389 support cli add/replace/delete on objects +- Ticket 50155 - password history check has no way to just check the current password +- Ticket 49873 - Contention on virtual attribute lookup +- Ticket 49658 - In replicated topology a single-valued attribute can diverge +- Ticket 50177 - import task should not be deleted too rapidely after import finishes to be able to query the status +- Ticket 50165 - Fix issues with dscreate + +* Thu Jan 31 2019 Mark Reynolds - 1.4.0.21-1 +- Bump version to 1.4.0.21 +- Ticket 50041 - CLI and WebUI - Add memberOf plugin functionality +- Ticket 50079 `Fix for ticket 50059: If an object is nsds5replica, it must be cn=replica` +- Ticket 50125 - perl fix ups for tmpfiles +- Ticket 50164 - Add test for dscreate +- Ticket 50059: If an object is nsds5replica, it must be cn=replica +- Ticket 50169 - lib389 changed hardcoded systemctl path +- Ticket 50165 - Fix dscreate issues +- Ticket 50152 - Replace os.getenv('HOME') with os.path.expanduser +- Fix compiler warning in snmp main() +- Fix compiler warning in init.c +- Ticket 49540 - FIx compiler warning in ldif2ldbm +- Ticket 50077 - Fix compiler warnings in automember rebuild task +- Ticket 49972 - use-after-free in case of several parallel krb authentication +- Ticket 50161 - Fixed some descriptions in "dsconf backend --help" +- Ticket 50153 - Increase default max logs +- Ticket 50123 - with_tmpfiles_d is associated to systemd +- Ticket 49984 - python installer add option to create suffix entry +- Ticket 50077 - RFE - improve automember plugin to work with modify ops +- Ticket 50136 - Allow resetting passwords on the CLI +- Ticket 49994 - Adjust dsconf backend usage +- Ticket 50138 - db2bak.pl -P LDAPS does not work when nsslapd-securePort is missing +- Ticket 50122 - Fix incorrect path spec +- Ticket 50145 - Add a verbose option to the backup tools +- Ticket 50056 - dsctl db2ldif throws an exception +- Ticket 50078 - cannot add cenotaph in read only consumer +- Ticket 50126 - Incorrect usage of sudo in test +- Ticket 50130 - Building RPMs on RHEL8 fails +- Ticket 50134 - fixup-memberof.pl does not respect protocol requested +- Ticket 50122 - Selinux test for presence +- Ticket 50101 - Port fourwaymmr Test TET suit to python3 +- Ticket 50091 - shadowWarning is not generated if passwordWarning is lower than 86400 seconds (1 day). +- Ticket 50128 - NS Stress fails without ipv6 +- Ticket 49618 - Set nsslapd-cachememsize to custom value +- Ticket 50117 - after certain failed import operation, impossible to replay an import operation +- Ticket 49999 - rpm.mk dist-bz2 should clean cockpit_dist first +- Ticket 48064 - Fix various issues in disk monitoring test suite +- Ticket 49938 - lib389 - Clean up CLI logging +- Ticket 49761 - Fix CI test suite issues +- Ticket 50056 - Fix UI bugs (part 2) +- Ticket 48064 - CI test - disk_monitoring +- Ticket 50099 - extend error messages +- Ticket 50099 - In FIPS mode, the server can select an unsupported password storage scheme +- Ticket 50041 - Add basic plugin UI/CLI wrappers +- Ticket 50082 - Port state test suite +- Ticket 49574 - remove index subsystem +- Ticket 49588 - Add py3 support for tickets : part-5 +- Ticket 50095 - cleanup deprecated key.h includes + +* Fri Dec 14 2018 Mark Reynolds - 1.4.0.20-1 +- Bump version to 1.4.0.20 +- Ticket 49994 - Add test for backend/suffix CLI functions +- Ticket 50090 - refactor fetch_attr() to slapi_fetch_attr() +- Ticket 50091 - shadowWarning is not generated if passwordWarning is lower than 86400 seconds (1 day) +- Ticket 50056 - Fix CLI/UI bugs +- Ticket 49864 - Revised replication status messages for transient errors +- Ticket 50071 - Set ports in local_simple_allocate function +- Ticket 50065 - lib389 aci parsing is too strict +- Ticket 50061 - Improve schema loading in UI +- Ticket 50063 - Crash after attempting to restore a single backend +- Ticket 50062 - Replace error by warning in the state machine defined in repl5_inc_run +- Ticket 50041 - Set the React dataflow foundation and add basic plugin UI +- Ticket 50028 - Revise ds-replcheck usage +- TIcket 50057 - Pass argument into hashtable_new +- Ticket 50053 - improve testcase +- Ticket 50053 - Subtree password policy overrides a user-defined password policy +- Ticket 49974 - lib389 - List instances with initconfig_dir instead of sysconf_dir +- Ticket 49984 - Add an empty domain creation to the dscreate +- Ticket 49950 - PassSync not setting pwdLastSet attribute in Active Directory after Pw update from LDAP sync for normal user +- Ticket 50046 - Remove irrelevant debug-log messages from CLI tools +- Ticket 50022, 50012, 49956, and 49800: Various dsctl/dscreate fixes +- Ticket 49927 - dsctl db2index does not work +- Ticket 49814 - dscreate should handle selinux ports that are in a range +- Ticket 49543 - fix certmap dn comparison +- Ticket 49994 - comment out dev paths +- Ticket 49994 - Add backend features to CLI +- Ticket 48081 - Add new CI tests for password + +* Thu Nov 1 2018 Mark Reynolds - 1.4.0.19-1 +- Bump version to 1.4.0.19 +- Ticket 50026 - audit logs does not capture the operation where nsslapd-lookthroughlimit is modified +- Ticket 50020 - during MODRDN referential integrity can fail erronously while updating large groups +- Ticket 49999 - Finish up the transfer to React +- Ticket 50004 - lib389 - improve X-ORIGIN schema parsing +- Ticket 50013 - Log warn instead of ERR when aci target does not exist. +- Ticket 49975 - followup for broken prefix deployment +- Ticket 49999 - Add dist-bz2 target for Koji build system +- Ticket 49814 - Add specfile requirements for python3-libselinux +- Ticket 49814 - Add specfile requirements for python3-selinux +- Ticket 49999 - Integrate React structure into cockpit-389-ds +- Ticket 49995 - Fix Tickets with internal op logging +- Ticket 49997 - RFE: ds-replcheck could validate suffix exists and it's replicated +- Ticket 49985 - memberof may silently fails to update a member +- Ticket 49967 - entry cache corruption after failed MODRDN +- Ticket 49975 - Add missing include file to main.c +- Ticket 49814 - skip standard ports for selinux labelling +- Ticket 49814 - dscreate should set the port selinux labels +- Ticket 49856 - Remove backend option from bak2db +- Ticket 49926 - Fix various Tickets with replication UI +- Ticket 49975 - SUSE rpmlint Tickets +- Ticket 49939 - Fix ldapi path in lib389 +- Ticket 49978 - Add CLI logging function for UI +- Ticket 49929 - Modifications required for the Test Case Management System +- Ticket 49979 - Fix regression in last commit +- Ticket 49979 - Remove dirsrv tests subpackage +- Ticket 49928 - Fix various small WebUI schema Tickets +- Ticket 49926 - UI - comment out dev cli patchs +- Ticket 49926 - Add replication functionality to UI + +* Wed Oct 10 2018 Mark Reynolds - 1.4.0.18-1 +- Bump version to 1.4.0.18 +- Ticket 49968 - Confusing CRITICAL message: list_candidates - NULL idl was recieved from filter_candidates_ext +- Ticket 49946 - upgrade of 389-ds-base could remove replication agreements. +- Ticket 49969 - DOS caused by malformed search operation (part 2) + +* Tue Oct 9 2018 Mark Reynolds - 1.4.0.17-2 +- Bump version to 1.4.0.17-2 +- Ticket 49969 - DOS caused by malformed search operation (security fix) +- Ticket 49943 - rfc3673_all_oper_attrs_test is not strict enough +- Ticket 49915 - Master ns-slapd had 100% CPU usage after starting replication and replication cannot finish +- Ticket 49963 - ASAN build fails on F28 +- Ticket 49947 - Coverity Fixes +- Ticket 49958 - extended search fail to match entries +- Ticket 49928 - WebUI schema functionality and improve CLI part +- Ticket 49954 - On s390x arch retrieved DB page size is stored as size_t rather than uint32_t +- Ticket 49928 - Refactor and improve schema CLI/lib389 part to DSLdapObject +- Ticket 49926 - Fix replication tests on 1.3.x +- Ticket 49926 - Add replication functionality to dsconf +- Ticket 49887 - Clean up thread local usage +- Ticket 49937 - Log buffer exceeded emergency logging msg is not thread-safe (security fix) +- Ticket 49866 - fix typo in cos template in pwpolicy subtree create +- Ticket 49930 - Correction of the existing fixture function names to remove test_ prefix +- Ticket 49932 - Crash in delete_passwdPolicy when persistent search connections are terminated unexpectedly +- Ticket 48053 - Add attribute encryption test cases +- Ticket 49866 - Refactor PwPolicy lib389/CLI module +- Ticket 49877 - Add log level functionality to UI + +* Fri Aug 24 2018 Mark Reynolds - 1.4.0.16-1 +- Bump version to 1.4.0.16 +- Revert "Ticket 49372 - filter optimisation improvements for common queries" +- Revert "Ticket 49432 - filter optimise crash" +- Ticket 49887: Fix SASL map creation when --disable-perl +- Ticket 49858 - Add backup/restore and import/export functionality to WebUI/CLI + +* Thu Aug 16 2018 Mark Reynolds - 1.4.0.15-1 +- Bump version to 1.4.0.15 +- Ticket 49029 - Internal logging thread data needs to allocate int pointers +- Ticket 48061 - CI test - config +- Ticket 48377 - Only ship libjemalloc.so.2 +- Ticket 49885 - On some platform fips does not exist + +* Mon Aug 13 2018 Mark Reynolds - 1.4.0.14-2 +- Bump version to 1.4.0.14-2 +- Fix legacy tool scriplet error +- Remove ldconfig calls +- Only provide libjemalloc.so.2 + +* Fri Aug 10 2018 Mark Reynolds - 1.4.0.14-1 +- Bump version to 1.4.0.14 +- Ticket 49891 - Use "__python3" macro for python scripts +- Ticket 49890 - ldapsearch with server side sort crashes the ldap server +- Ticket 49029 - RFE -improve internal operations logging +- Ticket 49893 - disable nunc-stans by default +- Ticket 48377 - Update file name for LD_PRELOAD +- Ticket 49884 - Improve nunc-stans test to detect socket errors sooner +- Ticket 49888 - Use perl filter in rpm specfile +- Ticket 49866 - Add password policy features to CLI/UI +- Ticket 49881 - Missing check for crack.h +- Ticket 48056 - Add more test cases to the basic suite +- Ticket 49761 - Fix replication test suite issues +- Ticket 49381 - Refactor the plugin test suite docstrings +- Ticket 49837 - Add new password policy attributes to UI +- Ticket 49794 - RFE - Add pam_pwquality features to password syntax checking +- Ticket 49867 - Fix CLI tools' double output + +* Thu Jul 19 2018 Mark Reynolds - 1.4.0.13-1 +- Bump version to 1.4.0.13 +- Ticket 49854 - ns-slapd should create run_dir and lock_dir directories at startup +- Ticket 49806 - Add SASL functionality to CLI/UI +- Ticket 49789 - backout original security fix as it caused a regression in FreeIPA +- Ticket 49857 - RPM scriptlet for 389-ds-base-legacy-tools throws an error + +* Tue Jul 17 2018 Mark Reynolds - 1.4.0.12-1 +- Bump version to 1.4.0.12-1 +- Ticket 48377 - Move jemalloc license to /usr/share/licences +- Ticket 49813 - Revised interactive installer +- Ticket 49789 - By default, do not manage unhashed password +- Ticket 49844 - lib389: don't set up logging at module scope +- Ticket 49546 - Fix issues with MIB file +- Ticket 49840 - ds-replcheck command returns traceback errors against ldif files having garbage content when run in offline mode +- Ticket 49640 - Cleanup plugin bootstrap logging +- Ticket 49835 - lib389: fix logging +- Ticket 48818 - For a replica bindDNGroup, should be fetched the first time it is used not when the replica is started +- Ticket 49780 - acl_copyEval_context double free +- Ticket 49830 - Import fails if backend name is "default" +- Ticket 49832 - remove tcmalloc references +- Ticket 49813 - dscreate - add interactive installer +- Ticket 49808 - Add option to add backend to dscreate +- Ticket 49811 - lib389 setup.py should install autogenerated man pages +- Ticket 49795 - UI - add "action" backend funtionality +- Ticket 49588 - Add py3 support for tickets : part-3 +- Ticket 49820 - lib389 requires wrong python ldap library +- Ticket 49791 - Update docker file for new dscreate options +- Ticket 49761 - Fix more CI test issues +- Ticket 49811 - Update man pages +- Ticket 49783 - UI - add server configuration backend +- Ticket 49717 - Add conftest.py for tests +- Ticket 49588 - Add py3 support for tickets +- Ticket 49793 - Updated descriptions in dscreate example INF file +- Ticket 49471 - Rename dscreate options +- Ticket 49751 - passwordMustChange attribute is not honored by a RO consumer if using "Chain on Update" +- Ticket 49734 - Fix various issues with Disk Monitoring +- Update Source0 URL in rpm/389-ds-base.spec.in + +* Thu Jun 21 2018 Mark Reynolds - 1.4.0.11-2 +- Bump version to 1.4.0.11-2 +- Add python3-lib389 requirement + * Tue Jun 19 2018 Mark Reynolds - 1.4.0.11-1 - Bump version to 1.4.0.11 - Test for issue #49788 @@ -777,9 +1058,6 @@ exit 0 - Ticket 49576 - ds-replcheck: fix certificate directory verification - Bug 1591761 - 389-ds-base: Remove jemalloc exports -* Tue Jun 19 2018 Miro Hrončok - 1.4.0.10-2.1 -- Rebuilt for Python 3.7 - * Fri Jun 8 2018 Mark Reynolds - 1.4.0.10-2 - Bump verision to 1.4.0.10-2 - Remove reference ro stop-dirsrv from legacy tools diff --git a/sources b/sources index 9cd491c..d95837d 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (jemalloc-5.0.1.tar.bz2) = 8cb5957a5724eb2bbad120cf0028ea8b2b14b4a416c1751b7c967351a7fd51135058ea0d3c4dc1d127c86f3aa7e9fd5ef101857110aabfdb7789427791c432c3 -SHA512 (389-ds-base-1.4.0.11.tar.bz2) = f62352f8d3ffbde21ca91f5a245b4e227638ecc9aacd005438c53f19d954ca8a306a514e6217fa5662244b64f3f228e04de231eee116c847baf1ddb69ee459ab +SHA512 (389-ds-base-1.4.0.23.tar.bz2) = e19f243c7dbb86606422d47111839afefb560a3b8de66f902e90f3271ba6555a5caa60f45b5362692797661d7ad35659adabd942e1ecaf75c0aa4562c921653f +SHA512 (jemalloc-5.1.0.tar.bz2) = d9abebe54d303ca931b8c31c1033f23ff5fb060f2377ec8386f4d79c352e65c78ed34f680c352dac14f7d7115d10245782d553d988bc13df2eb34a2f0942ef6f