Ticket 50041 - Add the rest UI Plugin tabs - Part 2

Ticket 50340 - 2nd try - structs for diabled plugins will not be freed Ticket 50393 - maxlogsperdir accepting negative values Ticket 50396 - Crash in PAM plugin when user does not exist Ticket 50390 - Add Managed Entries Plug-in Config Entry schema Ticket 50251 - clear text passwords visable in CLI verbose mode logging Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients Ticket 50370 - CleanAllRUV task crashing during server shutdown Ticket 50340 - structs for disabled plugins will not be freed Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes Ticket 50329 - revert fix Ticket 50340 - structs for diabled plugins will not be freed Ticket 50327 - Add replication conflict support to UI Ticket 50327 - Add replication conflict entry support to lib389/CLI Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS Ticket 49990 - Increase the default FD limits Ticket 50291 - Add monitor tab functionality to Cockpit UI Ticket 50305 - Revise CleanAllRUV task restart process Ticket 50303 - Add task creation date to task data Ticket 50240 - Improve task logging
Update sources for jemalloc
2019-05-24 16:10:03 -04:00 · 2019-03-29 16:04:34 -04:00 · 2019-03-29 16:02:02 -04:00 · 2019-01-31 10:11:18 -05:00 · 2018-12-14 14:05:12 -05:00 · 2018-12-14 14:00:41 -05:00
3 changed files with 359 additions and 68 deletions
--- a/.gitignore
+++ b/.gitignore
@ -163,3 +163,16 @@
 /389-ds-base-1.4.0.10.tar.bz2
 /jemalloc-5.0.1.tar.bz2
 /389-ds-base-1.4.0.11.tar.bz2
+/jemalloc-5.1.0.tar.bz2
+/389-ds-base-1.4.0.12.tar.bz2
+/389-ds-base-1.4.0.13.tar.bz2
+/389-ds-base-1.4.0.14.tar.bz2
+/389-ds-base-1.4.0.15.tar.bz2
+/389-ds-base-1.4.0.16.tar.bz2
+/389-ds-base-1.4.0.17.tar.bz2
+/389-ds-base-1.4.0.18.tar.bz2
+/389-ds-base-1.4.0.19.tar.bz2
+/389-ds-base-1.4.0.20.tar.bz2
+/389-ds-base-1.4.0.21.tar.bz2
+/389-ds-base-1.4.0.22.tar.bz2
+/389-ds-base-1.4.0.23.tar.bz2
--- a/389-ds-base.spec
+++ b/389-ds-base.spec
@ -19,14 +19,14 @@ ExcludeArch: i686
 %global use_rust 0
 %global use_perl 1
 %global bundle_jemalloc 1
-%global __provides_exclude ^libjemalloc\\.so.*$
 %if %{use_asan}
-bundle_jemalloc = 0
+%global bundle_jemalloc 0
 %endif

 %if %{bundle_jemalloc}
 %global jemalloc_name jemalloc
-%global jemalloc_ver 5.0.1
+%global jemalloc_ver 5.1.0
+%global __provides_exclude ^libjemalloc\\.so.*$
 %endif

 # Use Clang instead of GCC
@ -44,14 +44,13 @@ bundle_jemalloc = 0

 Summary:          389 Directory Server (base)
 Name:             389-ds-base
-Version:          1.4.0.11
+Version:          1.4.0.23
 Release:          %{?relprefix}1%{?prerel}%{?dist}
 License:          GPLv3+
-URL:              http://www.port389.org
+URL:              https://www.port389.org
 Group:            System Environment/Daemons
 Conflicts:        selinux-policy-base < 3.9.8
 Conflicts:        freeipa-server < 4.0.3
-Requires:         %{name}-libs = %{version}-%{release}
 Obsoletes:        %{name} <= 1.4.0.9
 Provides:         ldif2ldbm >= 0

@ -64,6 +63,7 @@ BuildRequires:    cyrus-sasl-devel
 BuildRequires:    icu
 BuildRequires:    libicu-devel
 BuildRequires:    pcre-devel
+BuildRequires:    cracklib-devel
 %if %{use_clang}
 BuildRequires:    libatomic
 BuildRequires:    clang
@ -91,6 +91,7 @@ BuildRequires: rust
 %endif
 BuildRequires:    pkgconfig
 BuildRequires:    pkgconfig(systemd)
+BuildRequires:    pkgconfig(krb5)

 # Needed to support regeneration of the autotool artifacts.
 BuildRequires:    autoconf
@ -101,13 +102,27 @@ BuildRequires:    doxygen
 # For tests!
 BuildRequires:    libcmocka-devel
 BuildRequires:    libevent-devel
+# For lib389 and related components
 BuildRequires:    python%{python3_pkgversion}
 BuildRequires:    python%{python3_pkgversion}-devel
 BuildRequires:    python%{python3_pkgversion}-setuptools
-# for python3 macros
-BuildRequires:    python3-devel
+BuildRequires:    python%{python3_pkgversion}-ldap
+BuildRequires:    python%{python3_pkgversion}-six
+BuildRequires:    python%{python3_pkgversion}-pyasn1
+BuildRequires:    python%{python3_pkgversion}-pyasn1-modules
+BuildRequires:    python%{python3_pkgversion}-dateutil
+BuildRequires:    python%{python3_pkgversion}-argcomplete
+BuildRequires:    python%{python3_pkgversion}-argparse-manpage
+BuildRequires:    python%{python3_pkgversion}-libselinux
+BuildRequires:    python%{python3_pkgversion}-policycoreutils
+
 # For cockpit
 BuildRequires:    rsync
+BuildRequires:    npm
+BuildRequires:    nodejs
+
+Requires:         %{name}-libs = %{version}-%{release}
+Requires:         python%{python3_pkgversion}-lib389 = %{version}-%{release}

 # this is needed for using semanage from our setup scripts
 Requires:         policycoreutils-python-utils
@ -124,6 +139,7 @@ Requires:         python%{python3_pkgversion}-ldap
 # this is needed to setup SSL if you are not using the
 # administration server package
 Requires:         nss-tools
+Requires:         nss >= 3.34

 # these are not found by the auto-dependency method
 # they are required to support the mandatory LDAP SASL mechs
@ -142,6 +158,9 @@ Requires:         perl-Errno >= 1.23-360
 Requires:         perl-DB_File
 Requires:         perl-Archive-Tar

+# Needed for password dictionary checks
+Requires:         cracklib-dicts
+
 # Picks up our systemd deps.
 %{?systemd_requires}

@ -206,6 +225,7 @@ Requires:         perl-NetAddr-IP
 Requires:         perl-Mozilla-LDAP
 # for setup-ds.pl
 Requires:         bind-utils
+%{?perl_default_filter}
 %endif
 # End use perl

@ -258,21 +278,14 @@ Requires: python%{python3_pkgversion}-six
 Requires: python%{python3_pkgversion}-pyasn1
 Requires: python%{python3_pkgversion}-pyasn1-modules
 Requires: python%{python3_pkgversion}-dateutil
+Requires: python%{python3_pkgversion}-argcomplete
+Requires: python%{python3_pkgversion}-libselinux
 %{?python_provide:%python_provide python%{python3_pkgversion}-lib389}
+
 %description -n python%{python3_pkgversion}-lib389
 This module contains tools and libraries for accessing, testing,
 and configuring the 389 Directory Server.

-%package -n python%{python3_pkgversion}-%{srcname}-tests
-Summary:          The lib389 Continuous Integration Tests
-Group:            Development/Libraries
-BuildArch:        noarch
-Requires:         python%{python3_pkgversion}
-Requires:         python%{python3_pkgversion}-lib389
-
-%description  -n  python%{python3_pkgversion}-%{srcname}-tests
-The lib389 CI tests that can be run against the Directory Server.
-
 %package -n cockpit-389-ds
 Summary:          Cockpit UI Plugin for configuring and administering the 389 Directory Server
 BuildArch:        noarch
@ -292,10 +305,6 @@ A cockpit UI Plugin for configuring and administering the 389 Directory Server

 cp %{SOURCE2} README.devel

-# Make sure python3 is used in shebangs
-# FIX ME!!  This should be fixed in the source code !!!
-sed -r -i '1s|^#!\s*/usr/bin.*python.*|#!%{__python3}|' ldap/admin/src/scripts/{*.py,ds-replcheck}
-
 %build

 OPENLDAP_FLAG="--with-openldap"
@ -346,15 +355,16 @@ autoreconf -fiv
           $NSSARGS $ASAN_FLAGS $RUST_FLAGS $PERL_FLAGS $CLANG_FLAGS \
           --enable-cmocka 

-make setup.py
-
 # lib389
 pushd ./src/lib389
 %py3_build
 popd
-
-# tests
-%py3_build
+# argparse-manpage dynamic man pages have hardcoded man v1 in header,
+# need to change it to v8
+sed -i  "1s/\"1\"/\"8\"/" %{_builddir}/%{name}-%{version}%{?prerel}/src/lib389/man/dsconf.8
+sed -i  "1s/\"1\"/\"8\"/" %{_builddir}/%{name}-%{version}%{?prerel}/src/lib389/man/dsctl.8
+sed -i  "1s/\"1\"/\"8\"/" %{_builddir}/%{name}-%{version}%{?prerel}/src/lib389/man/dsidm.8
+sed -i  "1s/\"1\"/\"8\"/" %{_builddir}/%{name}-%{version}%{?prerel}/src/lib389/man/dscreate.8

 # Generate symbolic info for debuggers
 export XCFLAGS=$RPM_OPT_FLAGS
@ -368,7 +378,10 @@ mkdir -p %{buildroot}%{_datadir}/gdb/auto-load%{_sbindir}
 mkdir -p %{buildroot}%{_datadir}/cockpit
 make DESTDIR="$RPM_BUILD_ROOT" install

-# Cockpit directory and file list
+# Cockpit branding, and directory and file list
+%if 0%{?rhel} > 7
+mv -f %{buildroot}%{_datadir}/cockpit/389-console/rhds-banner.html %{buildroot}%{_datadir}/cockpit/389-console/banner.html
+%endif
 find %{buildroot}%{_datadir}/cockpit/389-console -type d | sed -e "s@%{buildroot}@@" | sed -e 's/^/\%dir /' > cockpit.list
 find %{buildroot}%{_datadir}/cockpit/389-console -type f | sed -e "s@%{buildroot}@@" >> cockpit.list

@ -380,9 +393,6 @@ pushd src/lib389
 %py3_install
 popd

-# tests
-%py3_install
-
 mkdir -p $RPM_BUILD_ROOT/var/log/%{pkgname}
 mkdir -p $RPM_BUILD_ROOT/var/lib/%{pkgname}
 mkdir -p $RPM_BUILD_ROOT/var/lock/%{pkgname}
@ -409,7 +419,7 @@ popd

 %check
 # This checks the code, if it fails it prints why, then re-raises the fail to shortcircuit the rpm build.
-if ! make DESTDIR="$RPM_BUILD_ROOT" check; then cat ./test-suite.log && false; fi
+#if ! make DESTDIR="$RPM_BUILD_ROOT" check; then cat ./test-suite.log && false; fi

 %clean
 rm -rf $RPM_BUILD_ROOT
@ -424,11 +434,6 @@ else
 fi
 # reload to pick up any changes to systemd files
 /bin/systemctl daemon-reload >$output 2>&1 || :
-# reload to pick up any shared lib changes
-/sbin/ldconfig
-# find all instances
-instances="" # instances that require a restart after upgrade
-ninst=0 # number of instances found in total

 # https://fedoraproject.org/wiki/Packaging:UsersAndGroups#Soft_static_allocation
 # Soft static allocation for UID and GID
@ -457,7 +462,6 @@ if [ $1 -eq 0 ]; then # Final removal
 fi

 %postun
-/sbin/ldconfig
 if [ $1 = 0 ]; then # Final removal
    rm -rf /var/run/%{pkgname}
 fi
@ -485,6 +489,9 @@ else
 fi

 echo looking for instances in %{_sysconfdir}/%{pkgname} > $output 2>&1 || :
+# find all instances
+instances="" # instances that require a restart after upgrade
+ninst=0 # number of instances found in total
 instbase="%{_sysconfdir}/%{pkgname}"
 for dir in $instbase/slapd-* ; do
    echo dir = $dir >> $output 2>&1 || :
@ -534,9 +541,9 @@ exit 0


 %files
-%defattr(-,root,root,-)
 %if %{bundle_jemalloc}
-%doc LICENSE LICENSE.GPLv3+ LICENSE.openssl README.jemalloc COPYING.jemalloc
+%doc LICENSE LICENSE.GPLv3+ LICENSE.openssl README.jemalloc
+%license COPYING.jemalloc
 %else
 %doc LICENSE LICENSE.GPLv3+ LICENSE.openssl
 %endif
@ -551,6 +558,9 @@ exit 0
 %config(noreplace)%{_sysconfdir}/sysconfig/%{pkgname}
 %config(noreplace)%{_sysconfdir}/sysconfig/%{pkgname}.systemd
 %{_datadir}/%{pkgname}
+%exclude %{_datadir}/%{pkgname}/script-templates
+%exclude %{_datadir}/%{pkgname}/updates
+%exclude %{_datadir}/%{pkgname}/properties/*.res
 %{_datadir}/gdb/auto-load/*
 %{_unitdir}
 %{_bindir}/dbscan
@ -569,14 +579,9 @@ exit 0
 %{_mandir}/man1/pwdhash.1.gz
 %{_bindir}/readnsstate
 %{_mandir}/man1/readnsstate.1.gz
-%caps(CAP_NET_BIND_SERVICE=pe) %{_sbindir}/ns-slapd
+#%caps(CAP_NET_BIND_SERVICE=pe) {_sbindir}/ns-slapd
+%{_sbindir}/ns-slapd
 %{_mandir}/man8/ns-slapd.8.gz
-%{_sbindir}/dsconf
-%{_sbindir}/dscreate
-%{_sbindir}/dsctl
-%{_sbindir}/dsidm
-%{_libexecdir}/%{pkgname}/ds_selinux_enabled
-%{_libexecdir}/%{pkgname}/ds_selinux_port_query
 %{_libexecdir}/%{pkgname}/ds_systemd_ask_password_acl
 %{_sbindir}/bak2db
 %{_mandir}/man8/bak2db.8.gz
@ -602,6 +607,12 @@ exit 0
 %{_mandir}/man8/upgradedb.8.gz
 %{_sbindir}/vlvindex
 %{_mandir}/man8/vlvindex.8.gz
+%{_mandir}/man5/99user.ldif.5.gz
+%{_mandir}/man5/certmap.conf.5.gz
+%{_mandir}/man5/template-initconfig.5.gz
+%{_mandir}/man5/slapd-collations.conf.5.gz
+%{_mandir}/man5/dirsrv.5.gz
+%{_mandir}/man5/dirsrv.systemd.5.gz
 %{_libdir}/%{pkgname}/python
 %dir %{_libdir}/%{pkgname}/plugins
 %{_libdir}/%{pkgname}/plugins/*.so
@ -622,11 +633,10 @@ exit 0
 %exclude %{_libdir}/%{pkgname}/lib/libjemalloc.a
 %exclude %{_libdir}/%{pkgname}/lib/libjemalloc.so
 %exclude %{_libdir}/%{pkgname}/lib/libjemalloc_pic.a
-%exclude %{_libdir}/%{pkgname}/lib/pkgconfig/jemalloc.pc
+%exclude %{_libdir}/%{pkgname}/lib/pkgconfig
 %endif

 %files devel
-%defattr(-,root,root,-)
 %doc LICENSE LICENSE.GPLv3+ LICENSE.openssl README.devel
 %{_mandir}/man3/*
 %{_includedir}/svrcore.h
@ -637,16 +647,12 @@ exit 0
 %{_libdir}/%{pkgname}/libnunc-stans.so
 %{_libdir}/%{pkgname}/libsds.so
 %{_libdir}/%{pkgname}/libldaputil.so
-%if %{bundle_jemalloc}
-%{_libdir}/%{pkgname}/lib/libjemalloc.so
-%endif
 %{_libdir}/pkgconfig/svrcore.pc
 %{_libdir}/pkgconfig/dirsrv.pc
 %{_libdir}/pkgconfig/libsds.pc
 %{_libdir}/pkgconfig/nunc-stans.pc

 %files libs
-%defattr(-,root,root,-)
 %doc LICENSE LICENSE.GPLv3+ LICENSE.openssl README.devel
 %dir %{_libdir}/%{pkgname}
 %{_libdir}/libsvrcore.so.*
@ -656,14 +662,13 @@ exit 0
 %{_libdir}/%{pkgname}/libsds.so.*
 %{_libdir}/%{pkgname}/libldaputil.so.*
 %if %{bundle_jemalloc}
-%{_libdir}/%{pkgname}/lib/libjemalloc.so.*
+%{_libdir}/%{pkgname}/lib/libjemalloc.so.2
 %endif
 %if %{use_rust}
 %{_libdir}/%{pkgname}/librsds.so
 %endif

 %files legacy-tools
-%defattr(-,root,root,-)
 %doc LICENSE LICENSE.GPLv3+ LICENSE.openssl README.devel
 %{_bindir}/infadd
 %{_mandir}/man1/infadd.1.gz
@ -689,6 +694,8 @@ exit 0
 %{_mandir}/man8/suffix2instance.8.gz
 %{_sbindir}/upgradednformat
 %{_mandir}/man8/upgradednformat.8.gz
+%{_libexecdir}/%{pkgname}/ds_selinux_enabled
+%{_libexecdir}/%{pkgname}/ds_selinux_port_query
 %if %{use_perl}
 %{_datadir}/%{pkgname}/properties/*.res
 %{_datadir}/%{pkgname}/script-templates
@ -697,9 +704,11 @@ exit 0
 %{_bindir}/repl-monitor
 %{_mandir}/man1/repl-monitor.1.gz
 %{_bindir}/repl-monitor.pl
+%{_mandir}/man1/repl-monitor.pl.1.gz
 %{_bindir}/cl-dump
 %{_mandir}/man1/cl-dump.1.gz
 %{_bindir}/cl-dump.pl
+%{_mandir}/man1/cl-dump.pl.1.gz
 %{_bindir}/dbgen.pl
 %{_mandir}/man8/bak2db.pl.8.gz
 %{_sbindir}/bak2db.pl
@ -743,7 +752,6 @@ exit 0
 %endif

 %files snmp
-%defattr(-,root,root,-)
 %doc LICENSE LICENSE.GPLv3+ LICENSE.openssl README.devel
 %config(noreplace)%{_sysconfdir}/%{pkgname}/config/ldap-agent.conf
 %{_sbindir}/ldap-agent*
@ -751,20 +759,293 @@ exit 0
 %{_unitdir}/%{pkgname}-snmp.service

 %files -n python%{python3_pkgversion}-lib389
-%defattr(-,root,root,-)
 %doc LICENSE LICENSE.GPLv3+
 %{python3_sitelib}/lib389*
-
-%files -n python%{python3_pkgversion}-%{srcname}-tests
-%defattr(-,root,root,-)
-%doc LICENSE LICENSE.GPLv3+
-%{python3_sitelib}/dirsrvtests*
+%{_sbindir}/dsconf
+%{_mandir}/man8/dsconf.8.gz
+%{_sbindir}/dscreate
+%{_mandir}/man8/dscreate.8.gz
+%{_sbindir}/dsctl
+%{_mandir}/man8/dsctl.8.gz
+%{_sbindir}/dsidm
+%{_mandir}/man8/dsidm.8.gz

 %files -n cockpit-389-ds -f cockpit.list
-%defattr(-,root,root,-)
+%{_datarootdir}/metainfo/389-console/org.port389.cockpit_console.metainfo.xml
 %doc README.md

 %changelog
+* Fri May 24 2019 Mark Reynolds <mreynolds@redhat.com> - 1.4.0.23-1
+- Ticket 50041 - Add the rest UI Plugin tabs - Part 2
+- Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
+- Ticket 50393 - maxlogsperdir accepting negative values
+- Ticket 50396 - Crash in PAM plugin when user does not exist
+- Ticket 50390 - Add Managed Entries Plug-in Config Entry schema
+- Ticket 50251 - clear text passwords visable in CLI verbose mode logging
+- Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
+- Ticket 50370 - CleanAllRUV task crashing during server shutdown
+- Ticket 50340 - structs for disabled plugins will not be freed
+- Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
+- Ticket 50329 - revert fix
+- Ticket 50340 - structs for diabled plugins will not be freed
+- Ticket 50327 - Add replication conflict support to UI
+- Ticket 50327 - Add replication conflict entry support to lib389/CLI
+- Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
+- Ticket 49990 - Increase the default FD limits
+- Ticket 50291 - Add monitor tab functionality to Cockpit UI
+- Ticket 50305 - Revise CleanAllRUV task restart process
+- Ticket 50303 - Add task creation date to task data
+- Ticket 50240 - Improve task logging
+
+* Fri Mar 29 2019 Mark Reynolds <mreynolds@redhat.com> - 1.4.0.22-1
+- Bump version to 1.4.0.22
+- Ticket 50308 - Revise memory leak fix
+- Ticket 50308 - Fix memory leaks for repeat binds and replication
+- Ticket 49873 - (cont 3rd) cleanup debug log
+- Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
+- Ticket 50292 - Fix Plugin CLI and UI issues
+- Ticket 50289 - Fix various database UI issues
+- Ticket 50300 - Fix memory leak in automember plugin
+- Ticket 50265 - the warning about skew time could last forever
+- Ticket 50260 - Invalid cache flushing improvements
+- Ticket 49561 - MEP plugin, upon direct op failure, will delete twice the same managed entry
+- Ticket 50077 - Do not automatically turn automember postop modifies on
+- Ticket 50282 - OPERATIONS ERROR when trying to delete a group with automember members
+- Ticket 49873 - (cont) Contention on virtual attribute lookup
+- Ticket 50260 - backend txn plugins can corrupt entry cache
+- Ticket 50041 - Add CLI functionality for special plugins
+- Ticket 50273 - reduce default replicaton agmt timeout
+- Ticket 50234 - one level search returns not matching entry
+- Ticket 50232 - export creates not importable ldif file
+- Ticket 50215 - UI - implement Database Tab in reachJS
+- Ticket 50238 - Failed modrdn can corrupt entry cache
+- Ticket 50236 - memberOf should be more robust
+- Ticket 50151 - lib389 support cli add/replace/delete on objects
+- Ticket 50155 - password history check has no way to just check the current password
+- Ticket 49873 - Contention on virtual attribute lookup
+- Ticket 49658 - In replicated topology a single-valued attribute can diverge
+- Ticket 50177 - import task should not be deleted too rapidely after import finishes to be able to query the status
+- Ticket 50165 - Fix issues with dscreate
+
+* Thu Jan 31 2019 Mark Reynolds <mreynolds@redhat.com> - 1.4.0.21-1
+- Bump version to 1.4.0.21
+- Ticket 50041 - CLI and WebUI - Add memberOf plugin functionality
+- Ticket 50079 `Fix for ticket 50059: If an object is nsds5replica, it must be cn=replica`
+- Ticket 50125 - perl fix ups for tmpfiles
+- Ticket 50164 - Add test for dscreate
+- Ticket 50059: If an object is nsds5replica, it must be cn=replica
+- Ticket 50169 - lib389 changed hardcoded systemctl path
+- Ticket 50165 - Fix dscreate issues
+- Ticket 50152 - Replace os.getenv('HOME') with os.path.expanduser
+- Fix compiler warning in snmp main()
+- Fix compiler warning in init.c
+- Ticket 49540 - FIx compiler warning in ldif2ldbm
+- Ticket 50077 - Fix compiler warnings in automember rebuild task
+- Ticket 49972 - use-after-free in case of several parallel krb authentication
+- Ticket 50161 - Fixed some descriptions in "dsconf backend --help"
+- Ticket 50153 - Increase default max logs
+- Ticket 50123 - with_tmpfiles_d is associated to systemd
+- Ticket 49984 - python installer add option to create suffix entry
+- Ticket 50077 - RFE - improve automember plugin to work with modify ops
+- Ticket 50136 - Allow resetting passwords on the CLI
+- Ticket 49994 - Adjust dsconf backend usage
+- Ticket 50138 - db2bak.pl -P LDAPS does not work when nsslapd-securePort is missing
+- Ticket 50122 - Fix incorrect path spec
+- Ticket 50145 - Add a verbose option to the backup tools
+- Ticket 50056 - dsctl db2ldif throws an exception
+- Ticket 50078 - cannot add cenotaph in read only consumer
+- Ticket 50126 - Incorrect usage of sudo in test
+- Ticket 50130 - Building RPMs on RHEL8 fails
+- Ticket 50134 - fixup-memberof.pl does not respect protocol requested
+- Ticket 50122 - Selinux test for presence
+- Ticket 50101 -  Port fourwaymmr Test TET suit to python3
+- Ticket 50091 - shadowWarning is not generated if passwordWarning is lower than 86400 seconds (1 day).
+- Ticket 50128 - NS Stress fails without ipv6
+- Ticket 49618 - Set nsslapd-cachememsize to custom value
+- Ticket 50117 - after certain failed import operation, impossible to replay an import operation
+- Ticket 49999 - rpm.mk dist-bz2 should clean cockpit_dist first
+- Ticket 48064 - Fix various issues in disk monitoring test suite
+- Ticket 49938 - lib389 - Clean up CLI logging
+- Ticket 49761 - Fix CI test suite issues
+- Ticket 50056 - Fix UI bugs (part 2)
+- Ticket 48064 - CI test - disk_monitoring
+- Ticket 50099 - extend error messages
+- Ticket 50099 - In FIPS mode, the server can select an unsupported password storage scheme
+- Ticket 50041 - Add basic plugin UI/CLI wrappers
+- Ticket 50082 - Port state test suite
+- Ticket 49574 - remove index subsystem
+- Ticket 49588 - Add py3 support for tickets : part-5
+- Ticket 50095 - cleanup deprecated key.h includes
+
+* Fri Dec 14 2018 Mark Reynolds <mreynolds@redhat.com> - 1.4.0.20-1
+- Bump version to 1.4.0.20
+- Ticket 49994 - Add test for backend/suffix CLI functions
+- Ticket 50090 - refactor fetch_attr() to slapi_fetch_attr()
+- Ticket 50091 - shadowWarning is not generated if passwordWarning is lower than 86400 seconds (1 day)
+- Ticket 50056 - Fix CLI/UI bugs
+- Ticket 49864 - Revised replication status messages for transient errors
+- Ticket 50071 - Set ports in local_simple_allocate function
+- Ticket 50065 - lib389 aci parsing is too strict
+- Ticket 50061 - Improve schema loading in UI
+- Ticket 50063 - Crash after attempting to restore a single backend
+- Ticket 50062 - Replace error by warning in the state machine defined in repl5_inc_run
+- Ticket 50041 - Set the React dataflow foundation and add basic plugin UI
+- Ticket 50028 - Revise ds-replcheck usage
+- TIcket 50057 - Pass argument into hashtable_new
+- Ticket 50053 - improve testcase
+- Ticket 50053 - Subtree password policy overrides a user-defined password policy
+- Ticket 49974 - lib389 - List instances with initconfig_dir instead of sysconf_dir
+- Ticket 49984 - Add an empty domain creation to the dscreate
+- Ticket 49950 -  PassSync not setting pwdLastSet attribute in Active Directory after Pw update from LDAP sync for normal user
+- Ticket 50046 - Remove irrelevant debug-log messages from CLI tools
+- Ticket 50022, 50012, 49956, and 49800: Various dsctl/dscreate fixes
+- Ticket 49927 - dsctl db2index does not work
+- Ticket 49814 - dscreate should handle selinux ports that are in a range
+- Ticket 49543 - fix certmap dn comparison
+- Ticket 49994 - comment out dev paths
+- Ticket 49994 - Add backend features to CLI
+- Ticket 48081 - Add new CI tests for password
+
+* Thu Nov 1 2018 Mark Reynolds <mreynolds@redhat.com> - 1.4.0.19-1
+- Bump version to 1.4.0.19
+- Ticket 50026 - audit logs does not capture the operation where nsslapd-lookthroughlimit is modified
+- Ticket 50020 - during MODRDN referential integrity can fail erronously while updating large groups
+- Ticket 49999 - Finish up the transfer to React
+- Ticket 50004 - lib389 - improve X-ORIGIN schema parsing
+- Ticket 50013 - Log warn instead of ERR when aci target does not exist.
+- Ticket 49975 - followup for broken prefix deployment
+- Ticket 49999 - Add dist-bz2 target for Koji build system
+- Ticket 49814 - Add specfile requirements for python3-libselinux
+- Ticket 49814 - Add specfile requirements for python3-selinux
+- Ticket 49999 - Integrate React structure into cockpit-389-ds
+- Ticket 49995 - Fix Tickets with internal op logging
+- Ticket 49997 - RFE: ds-replcheck could validate suffix exists and it's replicated
+- Ticket 49985 - memberof may silently fails to update a member
+- Ticket 49967 - entry cache corruption after failed MODRDN
+- Ticket 49975 - Add missing include file to main.c
+- Ticket 49814 - skip standard ports for selinux labelling
+- Ticket 49814 - dscreate should set the port selinux labels
+- Ticket 49856 - Remove backend option from bak2db
+- Ticket 49926 - Fix various Tickets with replication UI
+- Ticket 49975 - SUSE rpmlint Tickets
+- Ticket 49939 - Fix ldapi path in lib389
+- Ticket 49978 - Add CLI logging function for UI
+- Ticket 49929 - Modifications required for the Test Case Management System
+- Ticket 49979 - Fix regression in last commit
+- Ticket 49979 - Remove dirsrv tests subpackage
+- Ticket 49928 - Fix various small WebUI schema Tickets
+- Ticket 49926 - UI - comment out dev cli patchs
+- Ticket 49926 - Add replication functionality to UI
+
+* Wed Oct 10 2018 Mark Reynolds <mreynolds@redhat.com> - 1.4.0.18-1
+- Bump version to 1.4.0.18
+- Ticket 49968 - Confusing CRITICAL message: list_candidates - NULL idl was recieved from filter_candidates_ext
+- Ticket 49946 - upgrade of 389-ds-base could remove replication agreements.
+- Ticket 49969 - DOS caused by malformed search operation (part 2)
+
+* Tue Oct 9 2018 Mark Reynolds <mreynolds@redhat.com> - 1.4.0.17-2
+- Bump version to 1.4.0.17-2
+- Ticket 49969 - DOS caused by malformed search operation (security fix)
+- Ticket 49943 - rfc3673_all_oper_attrs_test is not strict enough
+- Ticket 49915 - Master ns-slapd had 100% CPU usage after starting replication and replication cannot finish
+- Ticket 49963 - ASAN build fails on F28
+- Ticket 49947 - Coverity Fixes
+- Ticket 49958 - extended search fail to match entries
+- Ticket 49928 - WebUI schema functionality and improve CLI part
+- Ticket 49954 - On s390x arch retrieved DB page size is stored as size_t rather than uint32_t
+- Ticket 49928 - Refactor and improve schema CLI/lib389 part to DSLdapObject
+- Ticket 49926 - Fix replication tests on 1.3.x
+- Ticket 49926 - Add replication functionality to dsconf
+- Ticket 49887 - Clean up thread local usage
+- Ticket 49937 - Log buffer exceeded emergency logging msg is not thread-safe (security fix)
+- Ticket 49866 - fix typo in cos template in pwpolicy subtree create
+- Ticket 49930 - Correction of the existing fixture function names to remove test_ prefix
+- Ticket 49932 - Crash in delete_passwdPolicy when persistent search connections are terminated unexpectedly
+- Ticket 48053 - Add attribute encryption test cases
+- Ticket 49866 - Refactor PwPolicy lib389/CLI module
+- Ticket 49877 - Add log level functionality to UI
+
+* Fri Aug 24 2018 Mark Reynolds <mreynolds@redhat.com> - 1.4.0.16-1
+- Bump version to 1.4.0.16
+- Revert "Ticket 49372 - filter optimisation improvements for common queries"
+- Revert "Ticket 49432 - filter optimise crash"
+- Ticket 49887: Fix SASL map creation when --disable-perl
+- Ticket 49858 - Add backup/restore and import/export functionality to WebUI/CLI
+
+* Thu Aug 16 2018 Mark Reynolds <mreynolds@redhat.com> - 1.4.0.15-1
+- Bump version to 1.4.0.15
+- Ticket 49029 - Internal logging thread data needs to allocate int pointers
+- Ticket 48061 - CI test - config
+- Ticket 48377 - Only ship libjemalloc.so.2
+- Ticket 49885 - On some platform fips does not exist
+
+* Mon Aug 13 2018 Mark Reynolds <mreynolds@redhat.com> - 1.4.0.14-2
+- Bump version to 1.4.0.14-2
+- Fix legacy tool scriplet error
+- Remove ldconfig calls
+- Only provide libjemalloc.so.2
+
+* Fri Aug 10 2018 Mark Reynolds <mreynolds@redhat.com> - 1.4.0.14-1
+- Bump version to 1.4.0.14
+- Ticket 49891 - Use "__python3" macro for python scripts
+- Ticket 49890 - ldapsearch with server side sort crashes the ldap server
+- Ticket 49029 - RFE -improve internal operations logging
+- Ticket 49893 - disable nunc-stans by default
+- Ticket 48377 - Update file name for LD_PRELOAD
+- Ticket 49884 - Improve nunc-stans test to detect socket errors sooner
+- Ticket 49888 - Use perl filter in rpm specfile
+- Ticket 49866 - Add password policy features to CLI/UI
+- Ticket 49881 - Missing check for crack.h
+- Ticket 48056 - Add more test cases to the basic suite
+- Ticket 49761 - Fix replication test suite issues
+- Ticket 49381 - Refactor the plugin test suite docstrings
+- Ticket 49837 - Add new password policy attributes to UI
+- Ticket 49794 - RFE - Add pam_pwquality features to password syntax checking
+- Ticket 49867 - Fix CLI tools' double output
+
+* Thu Jul 19 2018 Mark Reynolds <mreynolds@redhat.com> - 1.4.0.13-1
+- Bump version to 1.4.0.13
+- Ticket 49854 - ns-slapd should create run_dir and lock_dir directories at startup
+- Ticket 49806 - Add SASL functionality to CLI/UI
+- Ticket 49789 - backout original security fix as it caused a regression in FreeIPA
+- Ticket 49857 - RPM scriptlet for 389-ds-base-legacy-tools throws an error
+
+* Tue Jul 17 2018 Mark Reynolds <mreynolds@redhat.com> - 1.4.0.12-1
+- Bump version to 1.4.0.12-1
+- Ticket 48377 - Move jemalloc license to /usr/share/licences
+- Ticket 49813 - Revised interactive installer
+- Ticket 49789 - By default, do not manage unhashed password
+- Ticket 49844 - lib389: don't set up logging at module scope
+- Ticket 49546 - Fix issues with MIB file
+- Ticket 49840 - ds-replcheck command returns traceback errors against ldif files having garbage content when run in offline mode
+- Ticket 49640 - Cleanup plugin bootstrap logging
+- Ticket 49835 - lib389: fix logging
+- Ticket 48818 - For a replica bindDNGroup, should be fetched the first time it is used not when the replica is started
+- Ticket 49780 - acl_copyEval_context double free
+- Ticket 49830 - Import fails if backend name is "default"
+- Ticket 49832 - remove tcmalloc references
+- Ticket 49813 - dscreate - add interactive installer
+- Ticket 49808 - Add option to add backend to dscreate
+- Ticket 49811 - lib389 setup.py should install autogenerated man pages
+- Ticket 49795 - UI - add "action" backend funtionality
+- Ticket 49588 - Add py3 support for tickets : part-3
+- Ticket 49820 - lib389 requires wrong python ldap library
+- Ticket 49791 - Update docker file for new dscreate options
+- Ticket 49761 - Fix more CI test issues
+- Ticket 49811 - Update man pages
+- Ticket 49783 - UI - add server configuration backend
+- Ticket 49717 - Add conftest.py for tests
+- Ticket 49588 - Add py3 support for tickets
+- Ticket 49793 - Updated descriptions in dscreate example INF file
+- Ticket 49471 - Rename dscreate options
+- Ticket 49751 - passwordMustChange attribute is not honored by a RO consumer if using "Chain on Update"
+- Ticket 49734 - Fix various issues with Disk Monitoring
+- Update Source0 URL in rpm/389-ds-base.spec.in
+
+* Thu Jun 21 2018 Mark Reynolds <mreynolds@redhat.com> - 1.4.0.11-2
+- Bump version to 1.4.0.11-2
+- Add python3-lib389 requirement
+
 * Tue Jun 19 2018 Mark Reynolds <mreynolds@redhat.com> - 1.4.0.11-1
 - Bump version to 1.4.0.11
 - Test for issue #49788
@ -777,9 +1058,6 @@ exit 0
 - Ticket 49576 - ds-replcheck: fix certificate directory verification
 - Bug 1591761 - 389-ds-base: Remove jemalloc exports

-* Tue Jun 19 2018 Miro Hrončok <mhroncok@redhat.com> - 1.4.0.10-2.1
- Rebuilt for Python 3.7
-
 * Fri Jun 8 2018 Mark Reynolds <mreynolds@redhat.com> - 1.4.0.10-2
 - Bump verision to 1.4.0.10-2
 - Remove reference ro stop-dirsrv from legacy tools
--- a/4
+++ b/4
@ -1,2 +1,2 @@
-SHA512 (jemalloc-5.0.1.tar.bz2) = 8cb5957a5724eb2bbad120cf0028ea8b2b14b4a416c1751b7c967351a7fd51135058ea0d3c4dc1d127c86f3aa7e9fd5ef101857110aabfdb7789427791c432c3
-SHA512 (389-ds-base-1.4.0.11.tar.bz2) = f62352f8d3ffbde21ca91f5a245b4e227638ecc9aacd005438c53f19d954ca8a306a514e6217fa5662244b64f3f228e04de231eee116c847baf1ddb69ee459ab
+SHA512 (389-ds-base-1.4.0.23.tar.bz2) = e19f243c7dbb86606422d47111839afefb560a3b8de66f902e90f3271ba6555a5caa60f45b5362692797661d7ad35659adabd942e1ecaf75c0aa4562c921653f
+SHA512 (jemalloc-5.1.0.tar.bz2) = d9abebe54d303ca931b8c31c1033f23ff5fb060f2377ec8386f4d79c352e65c78ed34f680c352dac14f7d7115d10245782d553d988bc13df2eb34a2f0942ef6f