Bump version to 1.4.1.19

Issue 50787 - fix implementation of attr unique Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema Issue 51068 - deadlock when updating the schema Issue 51060 - unable to set sslVersionMin to TLS1.0 Issue 51064 - Unable to install server where IPv6 is disabled Issue 51051 - CLI fix consistency issues with confirmations Issue 51047 - React deprecating ComponentWillMount Issue 50499 - fix npm audit issues Issue 51035 - Heavy StartTLS connection load can randomly fail with err=1 Issue 51031 - UI - transition between two instances needs improvement
Bump version to 1.4.1.18
2020-05-08 17:41:56 -04:00 · 2020-04-16 18:21:04 -04:00 · 2020-04-01 16:24:13 -04:00 · 2020-04-01 16:21:53 -04:00 · 2020-03-16 12:18:25 -04:00 · 2020-02-13 14:20:25 -05:00
3 changed files with 502 additions and 28 deletions
--- a/.gitignore
+++ b/.gitignore
@ -174,3 +174,23 @@
 /389-ds-base-1.4.0.19.tar.bz2
 /389-ds-base-1.4.0.20.tar.bz2
 /389-ds-base-1.4.1.1.tar.bz2
+/389-ds-base-1.4.1.2.tar.bz2
+/389-ds-base-1.4.1.3.tar.bz2
+/389-ds-base-1.4.1.4.tar.bz2
+/389-ds-base-1.4.1.5.tar.bz2
+/jemalloc-5.2.0.tar.bz2
+/389-ds-base-1.4.1.6.tar.bz2
+/389-ds-base-1.4.1.7.tar.bz2
+/389-ds-base-1.4.1.8.tar.bz2
+/389-ds-base-1.4.1.9.tar.bz2
+/389-ds-base-1.4.1.10.tar.bz2
+/389-ds-base-1.4.1.11.tar.bz2
+/389-ds-base-1.4.1.12.tar.bz2
+/389-ds-base-1.4.1.13.tar.bz2
+/jemalloc-5.2.1.tar.bz2
+/389-ds-base-1.4.1.14.tar.bz2
+/389-ds-base-1.4.1.15.tar.bz2
+/389-ds-base-1.4.1.16.tar.bz2
+/389-ds-base-1.4.1.17.tar.bz2
+/389-ds-base-1.4.1.18.tar.bz2
+/389-ds-base-1.4.1.19.tar.bz2
--- a/389-ds-base.spec
+++ b/389-ds-base.spec
@ -25,10 +25,11 @@ ExcludeArch: i686

 %if %{bundle_jemalloc}
 %global jemalloc_name jemalloc
-%global jemalloc_ver 5.1.0
+%global jemalloc_ver 5.2.1
 %global __provides_exclude ^libjemalloc\\.so.*$
 %endif

+
 # Use Clang instead of GCC
 %global use_clang 0

@ -44,8 +45,8 @@ ExcludeArch: i686

 Summary:          389 Directory Server (base)
 Name:             389-ds-base
-Version:          1.4.1.1
-Release:          %{?relprefix}1%{?prerel}%{?dist}.1
+Version:          1.4.1.19
+Release:          %{?relprefix}1%{?prerel}%{?dist}
 License:          GPLv3+
 URL:              https://www.port389.org
 Conflicts:        selinux-policy-base < 3.9.8
@ -90,6 +91,7 @@ BuildRequires: rust
 %endif
 BuildRequires:    pkgconfig
 BuildRequires:    pkgconfig(systemd)
+BuildRequires:    pkgconfig(krb5)

 # Needed to support regeneration of the autotool artifacts.
 BuildRequires:    autoconf
@ -101,7 +103,6 @@ BuildRequires:    doxygen
 BuildRequires:    libcmocka-devel
 BuildRequires:    libevent-devel
 # For lib389 and related components
-BuildRequires:    python%{python3_pkgversion}
 BuildRequires:    python%{python3_pkgversion}-devel
 BuildRequires:    python%{python3_pkgversion}-setuptools
 BuildRequires:    python%{python3_pkgversion}-ldap
@ -113,6 +114,7 @@ BuildRequires:    python%{python3_pkgversion}-argcomplete
 BuildRequires:    python%{python3_pkgversion}-argparse-manpage
 BuildRequires:    python%{python3_pkgversion}-libselinux
 BuildRequires:    python%{python3_pkgversion}-policycoreutils
+BuildRequires:    python%{python3_pkgversion}-packaging

 # For cockpit
 BuildRequires:    rsync
@ -148,6 +150,9 @@ Requires:         cyrus-sasl-plain
 # this is needed for verify-db.pl
 Requires:         libdb-utils

+# Needed for password dictionary checks
+Requires:         cracklib-dicts
+
 # This picks up libperl.so as a Requires, so we add this versioned one
 Requires:         perl(:MODULE_COMPAT_%(eval "`%{__perl} -V:version`"; echo $version))
 Requires:         perl-Errno >= 1.23-360
@ -203,9 +208,9 @@ are used by the main package and the -devel package.  This allows the -devel
 package to be installed with just the -libs package and without the main package.

 %package          legacy-tools
-Summary:          Legacy utilities for 389 Directory Server (%{variant})
+Summary:          Legacy utilities for 389 Directory Server 
 Obsoletes:        %{name} <= 1.4.0.9
-Requires:         %{name} = %{version}-%{release}
+Requires:         389-ds-base-libs = %{version}-%{release}
 %if %{use_perl}
 # for setup-ds.pl to support ipv6
 %if %{use_Socket6}
@ -257,8 +262,6 @@ SNMP Agent for the 389 Directory Server base package.
 %package -n python%{python3_pkgversion}-lib389
 Summary:  A library for accessing, testing, and configuring the 389 Directory Server
 BuildArch:        noarch
-Requires: krb5-workstation
-Requires: krb5-server
 Requires: openssl
 Requires: iproute
 Requires: python%{python3_pkgversion}
@ -270,6 +273,8 @@ Requires: python%{python3_pkgversion}-pyasn1-modules
 Requires: python%{python3_pkgversion}-dateutil
 Requires: python%{python3_pkgversion}-argcomplete
 Requires: python%{python3_pkgversion}-libselinux
+Requires: python%{python3_pkgversion}-setuptools
+Recommends: bash-completion
 %{?python_provide:%python_provide python%{python3_pkgversion}-lib389}

 %description -n python%{python3_pkgversion}-lib389
@ -279,7 +284,8 @@ This module contains tools and libraries for accessing, testing,
 %package -n cockpit-389-ds
 Summary:          Cockpit UI Plugin for configuring and administering the 389 Directory Server
 BuildArch:        noarch
-Requires:         cockpit
+Requires:         cockpit > 200
+Requires:         389-ds-base
 Requires:         python%{python3_pkgversion}
 Requires:         python%{python3_pkgversion}-lib389

@ -321,12 +327,30 @@ CLANG_FLAGS="--enable-clang"
 %endif

 %if %{bundle_jemalloc}
+# Override page size, bz #1545539
+# 4K
+%ifarch %ix86 %arm x86_64 s390x
+%define lg_page --with-lg-page=12
+%endif
+
+# 64K
+%ifarch ppc64 ppc64le aarch64
+%define lg_page --with-lg-page=16
+%endif
+
+# Override huge page size on aarch64
+# 2M instead of 512M
+%ifarch aarch64
+%define lg_hugepage --with-lg-hugepage=21
+%endif
+
 # Build jemalloc
 pushd ../%{jemalloc_name}-%{jemalloc_ver}
 %configure \
        --libdir=%{_libdir}/%{pkgname}/lib \
-        --bindir=%{_libdir}/%{pkgname}/bin
-make
+        --bindir=%{_libdir}/%{pkgname}/bin \
+        --enable-prof
+make %{?_smp_mflags}
 popd
 %endif

@ -336,14 +360,16 @@ popd
 # Rebuild the autotool artifacts now.
 autoreconf -fiv

-%configure --enable-autobind --with-selinux $OPENLDAP_FLAG $TMPFILES_FLAG \
+%configure --enable-autobind --with-selinux $TMPFILES_FLAG \
           --with-systemd \
           --with-systemdsystemunitdir=%{_unitdir} \
           --with-systemdsystemconfdir=%{_sysconfdir}/systemd/system \
           --with-systemdgroupname=%{groupname}  \
           --libexecdir=%{_libexecdir}/%{pkgname} \
           $NSSARGS $ASAN_FLAGS $RUST_FLAGS $PERL_FLAGS $CLANG_FLAGS \
-           --enable-cmocka 
+           --enable-cmocka \
+           --enable-perl
+

 # lib389
 pushd ./src/lib389
@ -542,9 +568,6 @@ exit 0
 %dir %{_sysconfdir}/systemd/system/%{groupname}.wants
 %config(noreplace)%{_sysconfdir}/%{pkgname}/config/slapd-collations.conf
 %config(noreplace)%{_sysconfdir}/%{pkgname}/config/certmap.conf
-%config(noreplace)%{_sysconfdir}/%{pkgname}/config/template-initconfig
-%config(noreplace)%{_sysconfdir}/sysconfig/%{pkgname}
-%config(noreplace)%{_sysconfdir}/sysconfig/%{pkgname}.systemd
 %{_datadir}/%{pkgname}
 %exclude %{_datadir}/%{pkgname}/script-templates
 %exclude %{_datadir}/%{pkgname}/updates
@ -583,21 +606,12 @@ exit 0
 %{_mandir}/man8/dbverify.8.gz
 %{_sbindir}/ldif2db
 %{_mandir}/man8/ldif2db.8.gz
-%{_sbindir}/restart-dirsrv
-%{_mandir}/man8/restart-dirsrv.8.gz
-%{_sbindir}/start-dirsrv
-%{_mandir}/man8/start-dirsrv.8.gz
-%{_sbindir}/status-dirsrv
-%{_mandir}/man8/status-dirsrv.8.gz
-%{_sbindir}/stop-dirsrv
-%{_mandir}/man8/stop-dirsrv.8.gz
 %{_sbindir}/upgradedb
 %{_mandir}/man8/upgradedb.8.gz
 %{_sbindir}/vlvindex
 %{_mandir}/man8/vlvindex.8.gz
 %{_mandir}/man5/99user.ldif.5.gz
 %{_mandir}/man5/certmap.conf.5.gz
-%{_mandir}/man5/template-initconfig.5.gz
 %{_mandir}/man5/slapd-collations.conf.5.gz
 %{_mandir}/man5/dirsrv.5.gz
 %{_mandir}/man5/dirsrv.systemd.5.gz
@ -684,7 +698,17 @@ exit 0
 %{_mandir}/man8/upgradednformat.8.gz
 %{_libexecdir}/%{pkgname}/ds_selinux_enabled
 %{_libexecdir}/%{pkgname}/ds_selinux_port_query
+%{_sbindir}/restart-dirsrv
+%{_mandir}/man8/restart-dirsrv.8.gz
+%{_sbindir}/start-dirsrv
+%{_mandir}/man8/start-dirsrv.8.gz
+%{_sbindir}/status-dirsrv
+%{_mandir}/man8/status-dirsrv.8.gz
+%{_sbindir}/stop-dirsrv
+%{_mandir}/man8/stop-dirsrv.8.gz
 %if %{use_perl}
+%config(noreplace)%{_sysconfdir}/%{pkgname}/config/template-initconfig
+%{_mandir}/man5/template-initconfig.5.gz
 %{_datadir}/%{pkgname}/properties/*.res
 %{_datadir}/%{pkgname}/script-templates
 %{_datadir}/%{pkgname}/updates
@ -757,12 +781,442 @@ exit 0
 %{_mandir}/man8/dsctl.8.gz
 %{_sbindir}/dsidm
 %{_mandir}/man8/dsidm.8.gz
+%{_sbindir}/dscontainer

 %files -n cockpit-389-ds -f cockpit.list
-%{_datarootdir}/metainfo/389-console/org.cockpit-project.389-console.metainfo.xml
+%{_datarootdir}/metainfo/389-console/org.port389.cockpit_console.metainfo.xml
 %doc README.md

 %changelog
+* Fri May 8 2020 Mark Reynolds <mreynolds@redhat.com> - 1.4.1.19-1
+- Bump version to 1.4.1.19
+- Issue 50787 - fix implementation of attr unique
+- Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
+- Issue 51068 - deadlock when updating the schema
+- Issue 51060 - unable to set sslVersionMin to TLS1.0
+- Issue 51064 - Unable to install server where IPv6 is disabled
+- Issue 51051 - CLI fix consistency issues with confirmations
+- Issue 51047 - React deprecating ComponentWillMount
+- Issue 50499 - fix npm audit issues
+- Issue 51035 - Heavy StartTLS connection load can randomly fail with err=1
+- Issue 51031 - UI - transition between two instances needs improvement
+
+* Thu Apr 16 2020 Mark Reynolds <mreynolds@redhat.com> - 1.4.1.18-1
+- Bump version to 1.4.1.18
+- Issue 50337 - Replace exec() with setattr()
+- Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
+- Issue 50905 - intermittent SSL hang with rhds
+- Issue 50952 - SSCA lacks basicConstraint:CA
+- Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
+- Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
+
+* Wed Apr 1 2020 Mark Reynolds <mreynolds@redhat.com> - 1.4.1.17-1
+- Bump version to 1.4.1.17
+- Issue 50994 - Fix latest UI bugs found by QE
+- Issue 50337 - Replace exec() with setattr()
+- Issue 50984 - Memory leaks in disk monitoring
+- Issue 50975 - Revise UI branding with new minimized build
+- Issue 49437 - Fix memory leak with indirect COS
+- Issue 50976 - Clean up Web UI source directory from unused files
+- Issue 50744 - -n option of dbverify does not work
+- Issue 50952 - SSCA lacks basicConstraint:CA
+- Issue 50966 - UI - Database indexes not using typeAhead correctly
+- Issue 50974 - UI - wrong title in "Delete Suffix" popup
+- Issue 50972 - Fix cockpit plugin build
+- Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
+- Issue 50963 - We should bundle *.min.js files of Console
+
+* Mon Mar 16 2020 Mark Reynolds <mreynolds@redhat.com> - 1.4.1.16-1
+- Bump version to 1.4.1.16
+- Issue 50499 - Fix npm audit issues
+- Issue 50884 - Health check tool DSEldif check fails
+- Issue 50926 - Remove dual spinner and other UI fixes
+- Issue 50928 - Unable to create a suffix with countryName
+- Issue 50758 - Only Recommend bash-completion, not Require
+- Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
+- Issue 50919 - Backend delete fails using dsconf
+- Issue 50872 - dsconf can't create GSSAPI replication agreements
+- Issue 50914 - No error returned when adding an entry matching filters for a non existing automember group
+- Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
+- Issue 50898 - ldclt core dumped when run with -e genldif option
+
+* Thu Feb 13 2020 Mark Reynolds <mreynolds@redhat.com> - 1.4.1.15-1
+- Bump version to 1.4.1.15
+- Issue 50855 - remove unused file from UI
+- Issue 50855 - UI: Port Server Tab to React
+- Issue 50636 - Crash during sasl bind
+- Issue 49623 - cenotaph errors on modrdn operations (part 2)
+- Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
+- Issue 50886 - Typo in the replication debug message
+- Issue 50873 - Fix healthcheck and virtual attr check
+- Issue 50873 - Fix issues with healthcheck tool
+- Issue 50857 - Memory leak in ACI using IP subject
+- Issue 49624 - DB Deadlock on modrdn appears to corrupt database and entry cache (part 2)
+- Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
+- Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
+- Issue 50798 - incorrect bytes in format string(fix import issue)
+- Issue 50798 - incorrect bytes in format string
+- Issue 50850 - Fix dsctl healthcheck for python36
+- Issue 49990 - Need to enforce a hard maximum limit for file descriptors
+
+* Thu Jan 23 2020 Mark Reynolds <mreynolds@redhat.com> - 1.4.1.14-1
+- Bump version to 1.4.1.14
+- Issue 49254 - Fix compiler failures and warnings
+- Issue 50349 - additional fix: filter schema check must handle subtypes
+- Issue 50836 - Port Schema UI tab to React
+- Issue 50842 - Decrease 389-console Cockpit component size
+- Issue 50790 - Add result text when filter is invalid
+- Issue 50834 - Incorrectly setting the NSS default SSL version max
+- Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
+- Issue 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
+- Issue 50599 - Fix memory leak when removing db region files
+- Issue 49395 - Set the default TLS version min to TLS1.2
+- Issue 50818 - dsconf pwdpolicy get error
+- Issue 50599 - Remove db region files prior to db recovery
+- Issue 50816 - dsconf allows the root password to be set to nothing
+
+* Mon Jan 13 2020 Mark Reynolds <mreynolds@redhat.com> - 1.4.1.13-1
+- Bump version to 1.4.1.13
+- Issue 50545 - Add the new replication monitor functionality to UI
+- Issue 50806 - Fix minor issues in lib389 health checks
+- Issue 50754 - Add Restore Change Log option to CLI
+- Issue 50667 - dsctl -l did not respect PREFIX
+- Issue 50780 - More CLI fixes
+- Issue 50780 - Fix UI issues
+- Issue 50779 - lib389 - conflict compare fails for DN's with spaces
+- Issue 50499 - Fix npm audit issues
+- Issue 50758 - Need to enable CLI arg completion
+- Issue 50709 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
+
+* Mon Dec 9 2019 Mark Reynolds <mreynolds@redhat.com> - 1.4.1.12-2
+- Bump version to 1.4.1.12-2
+- Fix python-argcomplete tinkering
+ 
+* Fri Dec 6 2019 Mark Reynolds <mreynolds@redhat.com> - 1.4.1.12-1
+- Bump version to 1.4.1.12
+- Issue 50586 - lib389 - Fix DSEldif long line processing
+
+* Fri Dec 6 2019 Mark Reynolds <mreynolds@redhat.com> - 1.4.1.11-1
+- Bump version to 1.4.1.11
+- Issue 50499 - Fix npm audit issues
+- Issue 50753 - Dumping the changelog to a file doesn't work
+- Issue 50734 - lib389 creates non-SSCA cert DBs with misleading README.txt
+- Issue 50736 - RetroCL trimming may crash at shutdown if trimming configuration is invalid
+- Issue 50439 - Update docker integration for Fedora
+- Issue 50747 - Port readnsstate to dsctl
+- Issue 50745 - ns-slapd hangs during CleanAllRUV tests
+- Issue 50758 - Enable CLI arg completion
+- Issue 50701 - Fix type in lint report
+- Issue 50701 - Add additional healthchecks to dsconf
+- Issue 50711 - `dsconf security` lacks option for setting nsTLSAllowClientRenegotiation attribute
+- Issue 50499 - Fix npm audit issues
+- Issue 50634 - Fix CLI error parsing for non-string values
+
+* Wed Nov 13 2019 Mark Reynolds <mreynolds@redhat.com> - 1.4.1.10-2
+- Bump version to 1.4.1.10-2
+- Fix specfile dependancy for python packaging
+
+* Wed Nov 13 2019 Mark Reynolds <mreynolds@redhat.com> - 1.4.1.10-1
+- Bump version to 1.4.1.10
+- Issue 50712 - Version comparison doesn't work correctly on git builds
+- Issue 50706 - Missing lib389 dependency - packaging
+- Issue 50499 - Fix npm audit issues
+- Issue 50699 - Add Disk Monitor to CLI and UI
+- Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
+- Issue 50696 - Fix various UI bugs
+- Issue 50689 - Failed db restore task does not report an error
+
+>>>>>>> fdea6d0... Bump version to 1.4.1.10
+* Fri Nov 1 2019 Mark Reynolds <mreynolds@redhat.com> - 1.4.1.9-1
+- Bump version to 1.4.1.9
+- Issue 50592 - Port Replication Tab to ReactJS
+- Issue 49850 - cont -fix crash in ldbm_non_leaf
+- Issue 50634 - Clean up CLI errors output - Fix wrong exception
+- Issue 50634 - Clean up CLI errors output
+- Issue 49850 - ldbm_get_nonleaf_ids() slow for databases with many non-leaf entries
+- Issue 50655 - access log etime is not properly formatted
+- Issue 50653 - objectclass parsing fails to log error message text
+- Issue 50646 - Improve task handling during shutdowns
+- Issue 50622 - ds_selinux_enabled may crash on suse
+- Issue 50499 - Fix npm audit issues
+
+* Tue Oct 15 2019 Mark Reynolds <mreynolds@redhat.com> - 1.4.1.8-4
+- Bump version to 1.4.1.8-4
+- Remove perl filter provides/requires as its causes more regressions
+
+* Fri Sep 27 2019 Mark Reynolds <mreynolds@redhat.com> - 1.4.1.8-3
+- Bump version to 1.4.1.8-3
+- Fix perl filter provides/requires
+
+* Thu Sep 26 2019 Mark Reynolds <mreynolds@redhat.com> - 1.4.1.8-2
+- Bump version to 1.4.1.8-2
+- Revert perl filter as it broke legacy tools
+
+* Thu Sep 26 2019 Mark Reynolds <mreynolds@redhat.com> - 1.4.1.8-1
+- Bump version to 1.4.1.8
+- Issue 50545 - Port repl-monitor.pl to lib389 CLI
+- Issue 50620 - Fix regressions from 50506 (slapi_enry_attr_get_ref)
+
+* Tue Sep 17 2019 Mark Reynolds <mreynolds@redhat.com> - 1.4.1.7-1
+- Bump version to 1.4.1.7
+- Issue 50581 - ns-slapd crashes during ldapi search
+- Issue 50604 - Fix UI validation
+- Issue 50593 - Investigate URP handling on standalone instance
+- Issue 50506 - Fix regression for relication stripattrs
+- Issue 50546 - fix more UI issues(part 2)
+- Issue 50546 - fix more UI issues
+- Issue 50546 - Fix various issues in UI
+- Issue 50576 - Same proc uid/gid maps to rootdn for ldapi sasl
+- Issue 50567, 50568 - strict host check disable and display container version
+- Issue 50550 - DS installer debug messages leaking to ipa-server-install
+- Issue 50545 - Port fixup-memberuid and add the functionality to CLI and UI
+- Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
+- Issue 50578 - Add SKIP_AUDIT_CI flag for Cockpit builds
+- Issue 50349 - filter schema validation
+- Issue 48055 - CI test-(Plugin configuration should throw proper error messages if not configured properly)
+- Issue 49324 - idl_new fix assert
+- Issue 50564 - Fix rust libraries by default and improve docker
+- Issue 50206 - Refactor lock, unlock and status of dsidm account/role
+- Issue 49324 - idl_new report index name in error conditions
+- Issue 49761 - Fix CI test suite issues
+- Issue 50506 - Fix regression from slapi_entry_attr_get_ref refactor
+- Issue 50499 - Audit fix - Update npm 'eslint-utils' version
+- Issue 49624 - modrdn silently fails if DB deadlock occurs
+- Issue 50542 - fix crash in filter tests
+- Issue 49761 - Fix CI test suite issues
+- Issue 50542 - Entry cache contention during base search
+- Issue 50462 - Fix CI tests
+- Issue 50490 - objects and memory leaks
+- Issue 50538 - Move CI test to individual file
+- Issue 50538 - cleanAllRUV task limit is not enforced for replicated tasks
+- Issue 50536 - Audit log heading written to log after every update
+- Issue 50525 - nsslapd-defaultnamingcontext does not change when the assigned suffix gets deleted
+- Issue 50534 - CLI change schema edit subcommand to replace
+- Issue 50506 - cont Fix invalid frees from pointer reference calls
+- Issue 50507 - Fix Cockpit UI styling for PF4
+- Issue 48851 - investigate and port TET matching rules filter tests(indexing final)
+- Issue 48851 - Add more test cases to the match test suite(mode replace)
+- Issue 50530 - Directory Server not RFC 4511 compliant with requested attr "1.1"
+- Issue 50529 - LDAP server returning PWP controls in different sequence
+- Issue 50506 - Fix invalid frees from pointer reference calls.
+- Issue 50506 - Replace slapi_entry_attr_get_charptr() with slapi_entry_attr_get_ref()
+- Issue 50521 - Add regressions in CI tests
+- Issue 50510 - etime can contain invalid nanosecond value
+- Issue 50488 - Create a monitor for disk space usagedisk-space-mon
+- Issue 50511 - lib389 PosixGroups type can not handle rdn properly
+- Issue 50508 - UI - fix local password policy form
+
+* Wed Jul 24 2019 Fedora Release Engineering <releng@fedoraproject.org> - 1.4.1.6-1.1
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
+
+* Fri Jul 19 2019 Mark Reynolds <mreynolds@redhat.com> - 1.4.1.6-1
+- Bump version to 1.4.1.6
+- Issue 50355 - SSL version min and max not correctly applied
+- Issue 50497 - Port cl-dump.pl tool to Python using lib389
+- Issue 48851 - investigate and port TET matching rules filter tests(Final)
+- Issue 50417 - fix regression from previous commit
+- Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
+- Issue 50325 - Add Security tab to UI
+- Issue 49789 - By default, do not manage unhashed password
+- Issue 49421 - Implement password hash upgrade on bind.
+- Issue 49421 - on bind password upgrade proof of concept
+- Issue 50493 - connection_is_free to trylock
+- Issue 50459 - Correct issue with allocation state
+- Issue 50499 - Fix audit issues and remove jquery from the whitelist
+- Issue 50459 - c_mutex to use pthread_mutex to allow ns sharing
+- Issue 50484 - Add a release build dockerfile and dscontainer improvements
+- Issue 50486 - Update jemalloc to 5.2.0
+
+* Mon Jul 8 2019 Mark Reynolds <mreynolds@redhat.com> - 1.4.1.5-1
+- Bump version to 1.4.1.5
+- Issue 50431 - Fix regression from coverity fix (crash in memberOf plugin)
+- Issue 49239 - Add a new CI test case
+- Issue 49997 - Add a new CI test case
+- Issue 50177 - Add a new CI test case, also added fixes in lib389
+- Issue 49761 - Fix CI test suite issues
+- Issue 50474 - Unify result codes for add and modify of repl5 config
+- Issue 50472 - memory leak with encryption
+- Issue 50462 - Fix Root DN access control plugin CI tests
+- Issue 50462 - Fix CI tests
+- Issue 50217 - Implement dsconf security section
+- Issue 48851 - Add more test cases to the match test suite.
+- Issue 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
+- Issue 50439 - fix waitpid issue when pid does not exist
+- Issue 50454 - Fix Cockpit UI branding
+- Issue 48851 - investigate and port TET matching rules filter tests(index)
+- Issue 49232 - Truncate the message when buffer capacity is exceeded
+
+* Tue Jun 18 2019 Mark Reynolds <mreynolds@redhat.com> - 1.4.1.4-1
+- Bump version to 1.4.1.4
+- Issue 49361 - Use IPv6 friendly network functions
+- Issue 48851 - Investigate and port TET matching rules filter tests(bug772777)
+- Issue 50446 - NameError: name 'ds_is_older' is not defined
+- Issue 49602 - Revise replication status messages
+- Issue 50439 - Update docker integration to work out of source directory
+- Issue 50037 - revert path changes as it breaks prefix/rpm builds
+- Issue 50431 - Fix regression from coverity fix
+- Issue 50370 - CleanAllRUV task crashing during server shutdown
+- Issue 48851 - investigate and port TET matching rules filter tests(match)
+- Issue 50417 - Fix missing quote in some legacy tools
+- Issue 50431 - Fix covscan warnings
+- Revert "Issue 49960 - Core schema contains strings instead of numer oids"
+- Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
+- Issue 50052 - Fix rpm.mk according to audit-ci change
+- Issue 50365 - PIDFile= references path below legacy directory /var/run/
+- Issue 50428 - Log the actual base DN when the search fails with "invalid attribute request"
+- Issue 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
+- Issue 50417 - Revise legacy tool scripts to work with new systemd changes
+- Issue 48851 - Add more search filters to vfilter_simple test suite
+- Issue 49761 - Fix CI test suite issues
+- Issue 49875 - Move SystemD service config to a drop-in file
+- Issue 50413 - ds-replcheck - Always display the Result Summary
+- Issue 50052 - Add package-lock.json and use "npm ci"
+- Issue 48851 - investigate and port TET matching rules filter tests(vfilter simple)
+- Issue 50355 - NSS can change the requested SSL min and max versions
+- Issue 48851 - investigate and port TET matching rules filter tests(vfilter_ld)
+- Issue 50390 - Add Managed Entries Plug-in Config Entry schema
+- Issue 49730 - Remove unused Mozilla ldapsdk variables
+
+* Fri May 24 2019 Mark Reynolds <mreynolds@redhat.com> - 1.4.1.3-1
+- Bump version to 1.4.1.3
+- Issue 49761 - Fix CI test suite issues
+- Issue 50041 - Add the rest UI Plugin tabs - Part 2
+- Issue 50340 - 2nd try - structs for diabled plugins will not be freed
+- Issue 50403 - Instance creation fails on 1.3.9 using perl utils and latest lib389
+- Issue 50389 - ns-slapd craches while two threads are polling the same connection
+- Issue 48851 - investigate and port TET matching rules filter tests(scanlimit)
+- Issue 50037 - lib389 fails to install in venv under non-root user
+- Issue 50112 - Port ACI test suit from TET to python3(userattr)
+- Issue 50393 - maxlogsperdir accepting negative values
+- Issue 50112 - Port ACI test suit from TET to python3(roledn)
+- Issue 49960 - Core schema contains strings instead of numer oids
+- Issue 50396 - Crash in PAM plugin when user does not exist
+- Issue 50387 - enable_tls() should label ports with ldap_port_t
+- Issue 50390 - Add Managed Entries Plug-in Config Entry schema
+- Issue 50306 - Fix regression with maxbersize
+- Issue 50384 - Missing dependency: cracklib-dicts
+- Issue 49029 - [RFE] improve internal operations logging
+- Issue 49761 - Fix CI test suite issues
+- Issue 50374 - dsdim posixgroup create fails with ERROR
+- Issue 50251 - clear text passwords visable in CLI verbose mode logging
+- Issue 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
+- Issue 48851 - investigate and port TET matching rules filter tests
+- Issue 50220 - attr_encryption test suite failing
+- Issue 50370 -  CleanAllRUV task crashing during server shutdown
+- Issue 50340 - structs for disabled plugins will not be freed
+- Issue 50164 - Add test for dscreate to basic test suite
+- Issue 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
+- Issue 49730 - MozLDAP bindings have been unsupported for a while
+- Issue 50353 - Categorize tests by tiers
+- Issue 50303 - Add creation date to task data
+- Issue 50358 -  Create a Bitwise Plugin class in plugins.py
+- Remove the nss3 path prefix from the cert.h C preprocessor source file inclusion
+- Issue 50329 - revert fix
+- Issue 50112 - Port ACI test suit from TET to python3(keyaci)
+- Issue 50344 - tidy rpm vs build systemd flag handling
+- Issue 50067 - Fix krb5 dependency in a specfile
+- Issue 50340 - structs for diabled plugins will not be freed
+- Issue 50327 - Add replication conflict support to UI
+- Issue 50327 - Add replication conflict entry support to lib389/CLI
+- Issue 50329 - improve connection default parameters
+- Issue 50313 - Add a NestedRole type to lib389
+- Issue 50112 - Port ACI test suit from TET to python3(Delete and  Add)
+- Issue 49390, 50019 - support cn=config compare operations
+- Issue 50041 - Add the rest UI Plugin tabs - Part 1
+- Issue 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
+- Issue 49990 - Increase the default FD limits
+- Issue 50306 - (cont typo) Move connection config inside struct
+- Issue 50291 - Add monitor tab functionality to Cockpit UI
+- Issue 50317 - fix ds-backtrace issue on latest gdb
+- Issue 50305 - Revise CleanAllRUV task restart process
+- Issue 49915 - Fix typo
+- Issue 50026 - Audit log does not capture the operation where nsslapd-lookthroughlimit is modified
+- Issue 49899 - fix pin.txt and pwdfile permissions
+- Issue 49915 - Add regression test
+- Issue 50303 - Add task creation date to task data
+- Issue 50306 - Move connection config inside struct
+- Issue 50240 - Improve task logging
+- Issue 50032 - Fix deprecation warnings in tests
+- Issue 50310 - fix sasl header include
+- Issue 49390 - improve compare and cn=config compare tests
+
+* Wed Apr 03 2019 Adam Williamson <awilliam@redhat.com> - 1.4.1.2-3
+- Rebuild without changes to be newer than 1.4.1.2-1 (see #1694990)
+
+* Fri Mar 29 2019 Mark Reynolds <mreynolds@redhat.com> - 1.4.1.2-2
+- Bump version to 1.4.1.2-2
+- Fix lib389 python requirement
+
+* Fri Mar 29 2019 Mark Reynolds <mreynolds@redhat.com> - 1.4.1.2-1
+- Bump version to 1.4.1.2-1
+- Ticket 50308 - Revise memory leak fix
+- Ticket 50308 - Fix memory leaks for repeat binds and replication
+- Ticket 40067 - Use PKG_CHECK_MODULES to detect libraries
+- Ticket 49873 - (cont 3rd) cleanup debug log
+- Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
+- Ticket 50292 - Fix Plugin CLI and UI issues
+- Ticket 50112 - Port ACI test suit from TET to python3(misc and syntax)
+- Ticket 50289 - Fix various database UI issues
+- Ticket 49463 - After cleanALLruv, replication is looping on keep alive DEL
+- Ticket 50300 - Fix memory leak in automember plugin
+- Ticket 50265 - the warning about skew time could last forever
+- Ticket 50260 - Invalid cache flushing improvements
+- Ticket 49561 - MEP plugin, upon direct op failure, will delete twice the same managed entry
+- Ticket 50077 - Do not automatically turn automember postop modifies on
+- Ticket 50282 - OPERATIONS ERROR when trying to delete a group with automember members
+- Ticket 49715 - extend account functionality
+- Ticket 49873 - (cont) Contention on virtual attribute lookup
+- Ticket 50260 - backend txn plugins can corrupt entry cache
+- Ticket 50255 - Port password policy test to use DSLdapObject
+- Ticket 49667 - 49668 - remove old spec files
+- Ticket 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
+- Ticket 50112 - Port ACI test suit from TET to python3(Search)
+- Ticket 50259 - implement dn construction test
+- Ticket 50273 - reduce default replicaton agmt timeout
+- Ticket 50208 - lib389- Fix issue with list all instances
+- Ticket 50112 - Port ACI test suit from TET to python3(Global Group)
+- Ticket 50041 - Add CLI functionality for special plugins
+- Ticket 50263 - LDAPS port not listening after installation
+- Ticket 49575 - Indicate autosize value errors and corrective actions
+- Ticket 50137 - create should not check in non-stateful mode for exist
+- Ticket 49655 - remove doap file
+- Ticket 50197 - Fix dscreate regression
+- Ticket 50234 - one level search returns not matching entry
+- Ticket 50257 - lib389 - password policy user vs subtree checks are broken
+- Ticket 50253 -  Making an nsManagedRoleDefinition type in src/lib389/lib389/idm/nsrole.py
+- Ticket 49029 - [RFE] improve internal operations logging
+- Ticket 50230 - improve ioerror msg when not root/dirsrv
+- Ticket 50246 - Fix the regression in old control tools
+- Ticket 50197 - Container integration part 2
+- Ticket 50197 - Container init tools
+- Ticket 50232 - export creates not importable ldif file
+- Ticket 50215 - UI - implement Database Tab in reachJS
+- Ticket 50243 - refint modrdn stress test
+- Ticket 50238 - Failed modrdn can corrupt entry cache
+- Ticket 50236 - memberOf should be more robust
+- Ticket 50213 - fix list instance issue
+- Ticket 50219 - Add generic filter to DSLdapObjects
+- Ticket 50227 - Making an cosClassicDefinition type in src/lib389/lib389/cos.py
+- Ticket 50112 - Port ACI test suit from TET to python3(modify)
+- Ticket 50224 - warnings on deprecated API usage
+- Ticket 50112 - Port ACI test suit from TET to python3(valueaci)
+- Ticket 50112 - Port ACI test suit from TET to python3(Aci Atter)
+- Ticket 50208 - make instances mark off based on dse.ldif not sysconfig
+- Ticket 50170 - composable object types for nsRole in lib389
+- Ticket 50199 - disable perl by default
+- Ticket 50211 - Making an actual Anonymous type in lib389/idm/account.py
+- Ticket 50155 - password history check has no way to just check the current password
+- Ticket 49873 - Contention on virtual attribute lookup
+- Ticket 50197 - Container integration improvements
+- Ticket 50195 - improve selinux error messages in interactive
+- Ticket 49658 - In replicated topology a single-valued attribute can diverge
+- Ticket 50111 - Use pkg-config to detect icu
+- Ticket 50165 - Fix issues with dscreate
+- Ticket 50177 - import task should not be deleted too rapidely after import finishes to be able to query the status
+- Ticket 50140 - Use high ports in container installs
+- Ticket 50184 - Add cli tool parity to dsconf/dsctl
+- Ticket 50159 - sssd and config display
+
 * Thu Jan 31 2019 Fedora Release Engineering <releng@fedoraproject.org> - 1.4.1.1-1.1
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild

--- a/4
+++ b/4
@ -1,2 +1,2 @@
-SHA512 (389-ds-base-1.4.1.1.tar.bz2) = ba32f0923cb9e45f86cc17086ed4d362f274bb7ca49a43e647eb04e78128c3610c881db7426e256ccb082ac0a5dc598436b2437d068212182c0823e2fb3859dc
-SHA512 (jemalloc-5.1.0.tar.bz2) = d9abebe54d303ca931b8c31c1033f23ff5fb060f2377ec8386f4d79c352e65c78ed34f680c352dac14f7d7115d10245782d553d988bc13df2eb34a2f0942ef6f
+SHA512 (389-ds-base-1.4.1.19.tar.bz2) = 3aeb73d24dc3fcbb987514b374b3f0fa25c83893a6e97eeecaab598acf17de3201ca93bd7aa4e779073f7145cea95fd7017f73b0357a459b9df230bd8956ce8f
+SHA512 (jemalloc-5.2.1.tar.bz2) = 0bbb77564d767cef0c6fe1b97b705d368ddb360d55596945aea8c3ba5889fbce10479d85ad492c91d987caacdbbdccc706aa3688e321460069f00c05814fae02