Bump version to 1.4.0.31

Issue 50499 - Fix npm audit issues
Issue 50699 - Add Disk Monitor to CLI and UI
Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
Issue 50696 - Fix various UI bugs
Issue 50689 - Failed db restore task does not report an error

.gitignore

@@ -167,3 +167,21 @@
 /389-ds-base-1.4.0.12.tar.bz2
 /389-ds-base-1.4.0.13.tar.bz2
 /389-ds-base-1.4.0.14.tar.bz2
+/389-ds-base-1.4.0.15.tar.bz2
+/389-ds-base-1.4.0.16.tar.bz2
+/389-ds-base-1.4.0.17.tar.bz2
+/389-ds-base-1.4.0.18.tar.bz2
+/389-ds-base-1.4.0.19.tar.bz2
+/389-ds-base-1.4.0.20.tar.bz2
+/389-ds-base-1.4.0.21.tar.bz2
+/389-ds-base-1.4.0.22.tar.bz2
+/389-ds-base-1.4.0.23.tar.bz2
+/389-ds-base-1.4.0.24.tar.bz2
+/389-ds-base-1.4.0.25.tar.bz2
+/389-ds-base-1.4.0.26.tar.bz2
+/389-ds-base-1.4.0.27.tar.bz2
+/jemalloc-5.2.0.tar.bz2
+/389-ds-base-1.4.0.28.tar.bz2
+/389-ds-base-1.4.0.29.tar.bz2
+/389-ds-base-1.4.0.30.tar.bz2
+/389-ds-base-1.4.0.31.tar.bz2

389-ds-base.spec

@@ -25,7 +25,7 @@ ExcludeArch: i686
 
 %if %{bundle_jemalloc}
 %global jemalloc_name jemalloc
-%global jemalloc_ver 5.1.0
+%global jemalloc_ver 5.2.0
 %global __provides_exclude ^libjemalloc\\.so.*$
 %endif
 
@@ -44,10 +44,10 @@ ExcludeArch: i686
 
 Summary:          389 Directory Server (base)
 Name:             389-ds-base
-Version:          1.4.0.14
-Release:          %{?relprefix}2%{?prerel}%{?dist}
+Version:          1.4.0.31
+Release:          %{?relprefix}1%{?prerel}%{?dist}
 License:          GPLv3+
-URL:              http://www.port389.org
+URL:              https://www.port389.org
 Group:            System Environment/Daemons
 Conflicts:        selinux-policy-base < 3.9.8
 Conflicts:        freeipa-server < 4.0.3
@@ -91,6 +91,7 @@ BuildRequires: rust
 %endif
 BuildRequires:    pkgconfig
 BuildRequires:    pkgconfig(systemd)
+BuildRequires:    pkgconfig(krb5)
 
 # Needed to support regeneration of the autotool artifacts.
 BuildRequires:    autoconf
@@ -112,9 +113,14 @@ BuildRequires:    python%{python3_pkgversion}-pyasn1-modules
 BuildRequires:    python%{python3_pkgversion}-dateutil
 BuildRequires:    python%{python3_pkgversion}-argcomplete
 BuildRequires:    python%{python3_pkgversion}-argparse-manpage
+BuildRequires:    python%{python3_pkgversion}-libselinux
+BuildRequires:    python%{python3_pkgversion}-policycoreutils
+BuildRequires:    python%{python3_pkgversion}-packaging
 
 # For cockpit
 BuildRequires:    rsync
+BuildRequires:    npm
+BuildRequires:    nodejs
 
 Requires:         %{name}-libs = %{version}-%{release}
 Requires:         python%{python3_pkgversion}-lib389 = %{version}-%{release}
@@ -153,6 +159,9 @@ Requires:         perl-Errno >= 1.23-360
 Requires:         perl-DB_File
 Requires:         perl-Archive-Tar
 
+# Needed for password dictionary checks
+Requires:         cracklib-dicts
+
 # Picks up our systemd deps.
 %{?systemd_requires}
 
@@ -264,29 +273,19 @@ Requires: krb5-server
 Requires: openssl
 Requires: iproute
 Requires: python%{python3_pkgversion}
-Requires: python%{python3_pkgversion}-pytest
 Requires: python%{python3_pkgversion}-ldap
 Requires: python%{python3_pkgversion}-six
 Requires: python%{python3_pkgversion}-pyasn1
 Requires: python%{python3_pkgversion}-pyasn1-modules
 Requires: python%{python3_pkgversion}-dateutil
 Requires: python%{python3_pkgversion}-argcomplete
+Requires: python%{python3_pkgversion}-libselinux
 %{?python_provide:%python_provide python%{python3_pkgversion}-lib389}
 
 %description -n python%{python3_pkgversion}-lib389
 This module contains tools and libraries for accessing, testing,
  and configuring the 389 Directory Server.
 
-%package -n python%{python3_pkgversion}-%{srcname}-tests
-Summary:          The lib389 Continuous Integration Tests
-Group:            Development/Libraries
-BuildArch:        noarch
-Requires:         python%{python3_pkgversion}
-Requires:         python%{python3_pkgversion}-lib389
-
-%description  -n  python%{python3_pkgversion}-%{srcname}-tests
-The lib389 CI tests that can be run against the Directory Server.
-
 %package -n cockpit-389-ds
 Summary:          Cockpit UI Plugin for configuring and administering the 389 Directory Server
 BuildArch:        noarch
@@ -306,10 +305,6 @@ A cockpit UI Plugin for configuring and administering the 389 Directory Server
 
 cp %{SOURCE2} README.devel
 
-# Make sure python3 is used in shebangs
-sed -r -i '1s|^#!\s*/usr/bin.*python.*|#!%{__python3}|' ldap/admin/src/scripts/{*.py,ds-replcheck}
-
-
 %build
 
 OPENLDAP_FLAG="--with-openldap"
@@ -360,8 +355,6 @@ autoreconf -fiv
            $NSSARGS $ASAN_FLAGS $RUST_FLAGS $PERL_FLAGS $CLANG_FLAGS \
            --enable-cmocka 
 
-make setup.py
-
 # lib389
 pushd ./src/lib389
 %py3_build
@@ -373,9 +366,6 @@ sed -i  "1s/\"1\"/\"8\"/" %{_builddir}/%{name}-%{version}%{?prerel}/src/lib389/m
 sed -i  "1s/\"1\"/\"8\"/" %{_builddir}/%{name}-%{version}%{?prerel}/src/lib389/man/dsidm.8
 sed -i  "1s/\"1\"/\"8\"/" %{_builddir}/%{name}-%{version}%{?prerel}/src/lib389/man/dscreate.8
 
-# tests
-%py3_build
-
 # Generate symbolic info for debuggers
 export XCFLAGS=$RPM_OPT_FLAGS
 
@@ -388,7 +378,10 @@ mkdir -p %{buildroot}%{_datadir}/gdb/auto-load%{_sbindir}
 mkdir -p %{buildroot}%{_datadir}/cockpit
 make DESTDIR="$RPM_BUILD_ROOT" install
 
-# Cockpit directory and file list
+# Cockpit branding, and directory and file list
+%if 0%{?rhel} > 7
+mv -f %{buildroot}%{_datadir}/cockpit/389-console/rhds-banner.html %{buildroot}%{_datadir}/cockpit/389-console/banner.html
+%endif
 find %{buildroot}%{_datadir}/cockpit/389-console -type d | sed -e "s@%{buildroot}@@" | sed -e 's/^/\%dir /' > cockpit.list
 find %{buildroot}%{_datadir}/cockpit/389-console -type f | sed -e "s@%{buildroot}@@" >> cockpit.list
 
@@ -400,9 +393,6 @@ pushd src/lib389
 %py3_install
 popd
 
-# tests
-%py3_install
-
 mkdir -p $RPM_BUILD_ROOT/var/log/%{pkgname}
 mkdir -p $RPM_BUILD_ROOT/var/lib/%{pkgname}
 mkdir -p $RPM_BUILD_ROOT/var/lock/%{pkgname}
@@ -566,8 +556,6 @@ exit 0
 %config(noreplace)%{_sysconfdir}/%{pkgname}/config/slapd-collations.conf
 %config(noreplace)%{_sysconfdir}/%{pkgname}/config/certmap.conf
 %config(noreplace)%{_sysconfdir}/%{pkgname}/config/template-initconfig
-%config(noreplace)%{_sysconfdir}/sysconfig/%{pkgname}
-%config(noreplace)%{_sysconfdir}/sysconfig/%{pkgname}.systemd
 %{_datadir}/%{pkgname}
 %exclude %{_datadir}/%{pkgname}/script-templates
 %exclude %{_datadir}/%{pkgname}/updates
@@ -590,10 +578,9 @@ exit 0
 %{_mandir}/man1/pwdhash.1.gz
 %{_bindir}/readnsstate
 %{_mandir}/man1/readnsstate.1.gz
-%caps(CAP_NET_BIND_SERVICE=pe) %{_sbindir}/ns-slapd
+#%caps(CAP_NET_BIND_SERVICE=pe) {_sbindir}/ns-slapd
+%{_sbindir}/ns-slapd
 %{_mandir}/man8/ns-slapd.8.gz
-%{_libexecdir}/%{pkgname}/ds_selinux_enabled
-%{_libexecdir}/%{pkgname}/ds_selinux_port_query
 %{_libexecdir}/%{pkgname}/ds_systemd_ask_password_acl
 %{_sbindir}/bak2db
 %{_mandir}/man8/bak2db.8.gz
@@ -706,6 +693,8 @@ exit 0
 %{_mandir}/man8/suffix2instance.8.gz
 %{_sbindir}/upgradednformat
 %{_mandir}/man8/upgradednformat.8.gz
+%{_libexecdir}/%{pkgname}/ds_selinux_enabled
+%{_libexecdir}/%{pkgname}/ds_selinux_port_query
 %if %{use_perl}
 %{_datadir}/%{pkgname}/properties/*.res
 %{_datadir}/%{pkgname}/script-templates
@@ -780,14 +769,289 @@ exit 0
 %{_sbindir}/dsidm
 %{_mandir}/man8/dsidm.8.gz
 
-%files -n python%{python3_pkgversion}-%{srcname}-tests
-%doc LICENSE LICENSE.GPLv3+
-%{python3_sitelib}/dirsrvtests*
-
 %files -n cockpit-389-ds -f cockpit.list
+%{_datarootdir}/metainfo/389-console/org.port389.cockpit_console.metainfo.xml
 %doc README.md
 
 %changelog
+* Wed Nov 13 2019 Mark Reynolds <mreynolds@redhat.com> - 1.4.0.31-1
+- Bump version to 1.4.0.31
+- Issue 50499 - Fix npm audit issues
+- Issue 50699 - Add Disk Monitor to CLI and UI
+- Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
+- Issue 50696 - Fix various UI bugs
+- Issue 50689 - Failed db restore task does not report an error
+
+* Fri Nov 1 2019 Mark Reynolds <mreynolds@redhat.com> - 1.4.0.30-1
+- Bump version to 1.4.0.30
+- Issue 50592 - Fix cherry-pick error
+
+* Fri Nov 1 2019 Mark Reynolds <mreynolds@redhat.com> - 1.4.0.29-1
+- Bump version to 1.4.0.29
+- Issue 50592 - Port Replication Tab to ReactJS
+- Issue 50067 - Fix krb5 dependency in a specfile
+- Issue 50545 - Port repl-monitor.pl to lib389 CLI
+- Issue 50497 - Port cl-dump.pl tool to Python using lib389
+- Issue 49850 - cont -fix crash in ldbm_non_leaf
+- Issue 50634 - Clean up CLI errors output - Fix wrong exception
+- Issue 50634 - Clean up CLI errors output
+- Issue 49850 - ldbm_get_nonleaf_ids() slow for databases with many non-leaf entries
+- Issue 50655 - access log etime is not properly formatted
+- Issue 50653 - objectclass parsing fails to log error message text
+- Issue 50646 - Improve task handling during shutdowns
+- Issue 50622 - ds_selinux_enabled may crash on suse
+
+* Tue Sep 17 2019 Mark Reynolds <mreynolds@redhat.com> - 1.4.0.28-1
+- Bump version to 1.4.0.28
+- Issue 50581 - ns-slapd crashes during ldapi search
+- Issue 50499 - Audit fix - Update npm 'eslint-utils' version
+- Issue 49624 - modrdn silently fails if DB deadlock occurs
+- Issue 50542 - Fix crash in filter tests
+- Issue 49232 - Truncate the message when buffer capacity is exceeded
+- Issue 50542 - Entry cache contention during base search
+- Issue 50538 - cleanAllRUV task limit is not enforced for replicated tasks
+- Issue 50536 - Audit log heading written to log after every update
+- Issue 50525 - nsslapd-defaultnamingcontext does not change when the assigned suffix gets deleted
+- Issue 50534 - CLI change schema edit subcommand to replace
+- Issue 50534 - backport UI schema editing fix
+
+* Tue Aug 6 2019 Mark Reynolds <mreynolds@redhat.com> - 1.4.0.27-1
+- Bump version to 1.4.0.27
+- Issue 50208 - make instances mark off based on dse.ldif not sysconfig
+- Issue 50530 - Directory Server not RFC 4511 compliant with requested attr "1.1"
+- Issue 50529 - LDAP server returning PWP controls in different sequence
+- Issue 50508 - UI - fix local password policy form
+
+* Fri Jul 19 2019 Mark Reynolds <mreynolds@redhat.com> - 1.4.0.26-1
+- Bump version to 1.4.0.26
+- Issue 50499 - Fix audit issues and remove jquery from the whitelist
+- Issue 50355 - SSL version min and max not correctly applied
+- Issue 50325 - Add Security tab to UI
+- Issue 50177 - Add a new CI test case, also added fixes in lib389
+
+* Mon Jul 8 2019 Mark Reynolds <mreynolds@redhat.com> - 1.4.0.25-1
+- Bump version to 1.4.0.25
+- Issue 50431 - Fix regression from coverity fix
+
+* Tue Jun 25 2019 Mark Reynolds <mreynolds@redhat.com> - 1.4.0.24-1
+- Bump version to 1.4.0.24
+- Issue 50052 - Fix rpm.mk according to audit-ci change
+- Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
+- Issue 50041 - Add the rest UI Plugin tabs - Part 1
+- Issue 50217 - Implement dsconf security section
+- Issue 49602 - Revise replication status messages
+- Issue 50431 - Fix regression from coverity fix
+- Issue 50431 - Fix covscan warnings
+- Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
+- Issue 50428 - Log the actual base DN when the search fails with "invalid attribute request"
+- Issue 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
+- Issue 50413 - ds-replcheck - Always display the Result Summary
+- Issue 50355 - NSS can change the requested SSL min and max versions
+
+* Fri May 24 2019 Mark Reynolds <mreynolds@redhat.com> - 1.4.0.23-1
+- Ticket 50041 - Add the rest UI Plugin tabs - Part 2
+- Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
+- Ticket 50393 - maxlogsperdir accepting negative values
+- Ticket 50396 - Crash in PAM plugin when user does not exist
+- Ticket 50390 - Add Managed Entries Plug-in Config Entry schema
+- Ticket 50251 - clear text passwords visable in CLI verbose mode logging
+- Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
+- Ticket 50370 - CleanAllRUV task crashing during server shutdown
+- Ticket 50340 - structs for disabled plugins will not be freed
+- Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
+- Ticket 50329 - revert fix
+- Ticket 50340 - structs for diabled plugins will not be freed
+- Ticket 50327 - Add replication conflict support to UI
+- Ticket 50327 - Add replication conflict entry support to lib389/CLI
+- Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
+- Ticket 49990 - Increase the default FD limits
+- Ticket 50291 - Add monitor tab functionality to Cockpit UI
+- Ticket 50305 - Revise CleanAllRUV task restart process
+- Ticket 50303 - Add task creation date to task data
+- Ticket 50240 - Improve task logging
+
+* Fri Mar 29 2019 Mark Reynolds <mreynolds@redhat.com> - 1.4.0.22-1
+- Bump version to 1.4.0.22
+- Ticket 50308 - Revise memory leak fix
+- Ticket 50308 - Fix memory leaks for repeat binds and replication
+- Ticket 49873 - (cont 3rd) cleanup debug log
+- Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
+- Ticket 50292 - Fix Plugin CLI and UI issues
+- Ticket 50289 - Fix various database UI issues
+- Ticket 50300 - Fix memory leak in automember plugin
+- Ticket 50265 - the warning about skew time could last forever
+- Ticket 50260 - Invalid cache flushing improvements
+- Ticket 49561 - MEP plugin, upon direct op failure, will delete twice the same managed entry
+- Ticket 50077 - Do not automatically turn automember postop modifies on
+- Ticket 50282 - OPERATIONS ERROR when trying to delete a group with automember members
+- Ticket 49873 - (cont) Contention on virtual attribute lookup
+- Ticket 50260 - backend txn plugins can corrupt entry cache
+- Ticket 50041 - Add CLI functionality for special plugins
+- Ticket 50273 - reduce default replicaton agmt timeout
+- Ticket 50234 - one level search returns not matching entry
+- Ticket 50232 - export creates not importable ldif file
+- Ticket 50215 - UI - implement Database Tab in reachJS
+- Ticket 50238 - Failed modrdn can corrupt entry cache
+- Ticket 50236 - memberOf should be more robust
+- Ticket 50151 - lib389 support cli add/replace/delete on objects
+- Ticket 50155 - password history check has no way to just check the current password
+- Ticket 49873 - Contention on virtual attribute lookup
+- Ticket 49658 - In replicated topology a single-valued attribute can diverge
+- Ticket 50177 - import task should not be deleted too rapidely after import finishes to be able to query the status
+- Ticket 50165 - Fix issues with dscreate
+
+* Thu Jan 31 2019 Mark Reynolds <mreynolds@redhat.com> - 1.4.0.21-1
+- Bump version to 1.4.0.21
+- Ticket 50041 - CLI and WebUI - Add memberOf plugin functionality
+- Ticket 50079 `Fix for ticket 50059: If an object is nsds5replica, it must be cn=replica`
+- Ticket 50125 - perl fix ups for tmpfiles
+- Ticket 50164 - Add test for dscreate
+- Ticket 50059: If an object is nsds5replica, it must be cn=replica
+- Ticket 50169 - lib389 changed hardcoded systemctl path
+- Ticket 50165 - Fix dscreate issues
+- Ticket 50152 - Replace os.getenv('HOME') with os.path.expanduser
+- Fix compiler warning in snmp main()
+- Fix compiler warning in init.c
+- Ticket 49540 - FIx compiler warning in ldif2ldbm
+- Ticket 50077 - Fix compiler warnings in automember rebuild task
+- Ticket 49972 - use-after-free in case of several parallel krb authentication
+- Ticket 50161 - Fixed some descriptions in "dsconf backend --help"
+- Ticket 50153 - Increase default max logs
+- Ticket 50123 - with_tmpfiles_d is associated to systemd
+- Ticket 49984 - python installer add option to create suffix entry
+- Ticket 50077 - RFE - improve automember plugin to work with modify ops
+- Ticket 50136 - Allow resetting passwords on the CLI
+- Ticket 49994 - Adjust dsconf backend usage
+- Ticket 50138 - db2bak.pl -P LDAPS does not work when nsslapd-securePort is missing
+- Ticket 50122 - Fix incorrect path spec
+- Ticket 50145 - Add a verbose option to the backup tools
+- Ticket 50056 - dsctl db2ldif throws an exception
+- Ticket 50078 - cannot add cenotaph in read only consumer
+- Ticket 50126 - Incorrect usage of sudo in test
+- Ticket 50130 - Building RPMs on RHEL8 fails
+- Ticket 50134 - fixup-memberof.pl does not respect protocol requested
+- Ticket 50122 - Selinux test for presence
+- Ticket 50101 -  Port fourwaymmr Test TET suit to python3
+- Ticket 50091 - shadowWarning is not generated if passwordWarning is lower than 86400 seconds (1 day).
+- Ticket 50128 - NS Stress fails without ipv6
+- Ticket 49618 - Set nsslapd-cachememsize to custom value
+- Ticket 50117 - after certain failed import operation, impossible to replay an import operation
+- Ticket 49999 - rpm.mk dist-bz2 should clean cockpit_dist first
+- Ticket 48064 - Fix various issues in disk monitoring test suite
+- Ticket 49938 - lib389 - Clean up CLI logging
+- Ticket 49761 - Fix CI test suite issues
+- Ticket 50056 - Fix UI bugs (part 2)
+- Ticket 48064 - CI test - disk_monitoring
+- Ticket 50099 - extend error messages
+- Ticket 50099 - In FIPS mode, the server can select an unsupported password storage scheme
+- Ticket 50041 - Add basic plugin UI/CLI wrappers
+- Ticket 50082 - Port state test suite
+- Ticket 49574 - remove index subsystem
+- Ticket 49588 - Add py3 support for tickets : part-5
+- Ticket 50095 - cleanup deprecated key.h includes
+
+* Fri Dec 14 2018 Mark Reynolds <mreynolds@redhat.com> - 1.4.0.20-1
+- Bump version to 1.4.0.20
+- Ticket 49994 - Add test for backend/suffix CLI functions
+- Ticket 50090 - refactor fetch_attr() to slapi_fetch_attr()
+- Ticket 50091 - shadowWarning is not generated if passwordWarning is lower than 86400 seconds (1 day)
+- Ticket 50056 - Fix CLI/UI bugs
+- Ticket 49864 - Revised replication status messages for transient errors
+- Ticket 50071 - Set ports in local_simple_allocate function
+- Ticket 50065 - lib389 aci parsing is too strict
+- Ticket 50061 - Improve schema loading in UI
+- Ticket 50063 - Crash after attempting to restore a single backend
+- Ticket 50062 - Replace error by warning in the state machine defined in repl5_inc_run
+- Ticket 50041 - Set the React dataflow foundation and add basic plugin UI
+- Ticket 50028 - Revise ds-replcheck usage
+- TIcket 50057 - Pass argument into hashtable_new
+- Ticket 50053 - improve testcase
+- Ticket 50053 - Subtree password policy overrides a user-defined password policy
+- Ticket 49974 - lib389 - List instances with initconfig_dir instead of sysconf_dir
+- Ticket 49984 - Add an empty domain creation to the dscreate
+- Ticket 49950 -  PassSync not setting pwdLastSet attribute in Active Directory after Pw update from LDAP sync for normal user
+- Ticket 50046 - Remove irrelevant debug-log messages from CLI tools
+- Ticket 50022, 50012, 49956, and 49800: Various dsctl/dscreate fixes
+- Ticket 49927 - dsctl db2index does not work
+- Ticket 49814 - dscreate should handle selinux ports that are in a range
+- Ticket 49543 - fix certmap dn comparison
+- Ticket 49994 - comment out dev paths
+- Ticket 49994 - Add backend features to CLI
+- Ticket 48081 - Add new CI tests for password
+
+* Thu Nov 1 2018 Mark Reynolds <mreynolds@redhat.com> - 1.4.0.19-1
+- Bump version to 1.4.0.19
+- Ticket 50026 - audit logs does not capture the operation where nsslapd-lookthroughlimit is modified
+- Ticket 50020 - during MODRDN referential integrity can fail erronously while updating large groups
+- Ticket 49999 - Finish up the transfer to React
+- Ticket 50004 - lib389 - improve X-ORIGIN schema parsing
+- Ticket 50013 - Log warn instead of ERR when aci target does not exist.
+- Ticket 49975 - followup for broken prefix deployment
+- Ticket 49999 - Add dist-bz2 target for Koji build system
+- Ticket 49814 - Add specfile requirements for python3-libselinux
+- Ticket 49814 - Add specfile requirements for python3-selinux
+- Ticket 49999 - Integrate React structure into cockpit-389-ds
+- Ticket 49995 - Fix Tickets with internal op logging
+- Ticket 49997 - RFE: ds-replcheck could validate suffix exists and it's replicated
+- Ticket 49985 - memberof may silently fails to update a member
+- Ticket 49967 - entry cache corruption after failed MODRDN
+- Ticket 49975 - Add missing include file to main.c
+- Ticket 49814 - skip standard ports for selinux labelling
+- Ticket 49814 - dscreate should set the port selinux labels
+- Ticket 49856 - Remove backend option from bak2db
+- Ticket 49926 - Fix various Tickets with replication UI
+- Ticket 49975 - SUSE rpmlint Tickets
+- Ticket 49939 - Fix ldapi path in lib389
+- Ticket 49978 - Add CLI logging function for UI
+- Ticket 49929 - Modifications required for the Test Case Management System
+- Ticket 49979 - Fix regression in last commit
+- Ticket 49979 - Remove dirsrv tests subpackage
+- Ticket 49928 - Fix various small WebUI schema Tickets
+- Ticket 49926 - UI - comment out dev cli patchs
+- Ticket 49926 - Add replication functionality to UI
+
+* Wed Oct 10 2018 Mark Reynolds <mreynolds@redhat.com> - 1.4.0.18-1
+- Bump version to 1.4.0.18
+- Ticket 49968 - Confusing CRITICAL message: list_candidates - NULL idl was recieved from filter_candidates_ext
+- Ticket 49946 - upgrade of 389-ds-base could remove replication agreements.
+- Ticket 49969 - DOS caused by malformed search operation (part 2)
+
+* Tue Oct 9 2018 Mark Reynolds <mreynolds@redhat.com> - 1.4.0.17-2
+- Bump version to 1.4.0.17-2
+- Ticket 49969 - DOS caused by malformed search operation (security fix)
+- Ticket 49943 - rfc3673_all_oper_attrs_test is not strict enough
+- Ticket 49915 - Master ns-slapd had 100% CPU usage after starting replication and replication cannot finish
+- Ticket 49963 - ASAN build fails on F28
+- Ticket 49947 - Coverity Fixes
+- Ticket 49958 - extended search fail to match entries
+- Ticket 49928 - WebUI schema functionality and improve CLI part
+- Ticket 49954 - On s390x arch retrieved DB page size is stored as size_t rather than uint32_t
+- Ticket 49928 - Refactor and improve schema CLI/lib389 part to DSLdapObject
+- Ticket 49926 - Fix replication tests on 1.3.x
+- Ticket 49926 - Add replication functionality to dsconf
+- Ticket 49887 - Clean up thread local usage
+- Ticket 49937 - Log buffer exceeded emergency logging msg is not thread-safe (security fix)
+- Ticket 49866 - fix typo in cos template in pwpolicy subtree create
+- Ticket 49930 - Correction of the existing fixture function names to remove test_ prefix
+- Ticket 49932 - Crash in delete_passwdPolicy when persistent search connections are terminated unexpectedly
+- Ticket 48053 - Add attribute encryption test cases
+- Ticket 49866 - Refactor PwPolicy lib389/CLI module
+- Ticket 49877 - Add log level functionality to UI
+
+* Fri Aug 24 2018 Mark Reynolds <mreynolds@redhat.com> - 1.4.0.16-1
+- Bump version to 1.4.0.16
+- Revert "Ticket 49372 - filter optimisation improvements for common queries"
+- Revert "Ticket 49432 - filter optimise crash"
+- Ticket 49887: Fix SASL map creation when --disable-perl
+- Ticket 49858 - Add backup/restore and import/export functionality to WebUI/CLI
+
+* Thu Aug 16 2018 Mark Reynolds <mreynolds@redhat.com> - 1.4.0.15-1
+- Bump version to 1.4.0.15
+- Ticket 49029 - Internal logging thread data needs to allocate int pointers
+- Ticket 48061 : CI test - config
+- Ticket 48377 - Only ship libjemalloc.so.2
+- Ticket 49885 - On some platform fips does not exist
+
 * Mon Aug 13 2018 Mark Reynolds <mreynolds@redhat.com> - 1.4.0.14-2
 - Bump version to 1.4.0.14-2
 - Fix legacy tool scriplet error

sources

@@ -1,2 +1,2 @@
-SHA512 (jemalloc-5.1.0.tar.bz2) = d9abebe54d303ca931b8c31c1033f23ff5fb060f2377ec8386f4d79c352e65c78ed34f680c352dac14f7d7115d10245782d553d988bc13df2eb34a2f0942ef6f
-SHA512 (389-ds-base-1.4.0.14.tar.bz2) = b23c785c88347901cb006c3aa9dc81d190c9ca85cf3b65a1cf4dfbd3f4e050cd1b1448f32a9a8ad4b96fb6cc5f5bc55a67a4857adc4cd4dc6bea014bb8d5f1c7
+SHA512 (389-ds-base-1.4.0.31.tar.bz2) = 519d6fbd2b78732e6d2f4588ad556f6cd9083f11a56aed8c2b0cb836ae481c10bd19f2a8296aaa9213e089512428e4e7cec802dfcd3717111085d21ef422f332
+SHA512 (jemalloc-5.2.0.tar.bz2) = e3be4d534770126caf10f2684aed9fe4ba1422dd47625fe50343cfb750f26eff869fcc7d1e30a96dd6c73f6614c4bbcd560fd24fc26b55ac731c43e60fd05234