Bump version to 1.4.3.23

Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727) Issue 4759 - Fix coverity issue (#4760) Issue 4656 - Fix cherry pick error around replication enabling Issue 4701 - RFE - Exclude attributes from retro changelog (#4723) (#4746) Issue 4742 - UI - should always use LDAPI path when calling CLI Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732) Issue 4711 - SIGSEV with sync_repl (#4738) Issue 4649 - fix testcase importing ContentSyncPlugin Issue 2736 - Warnings from automatic shebang munging macro Issue 4706 - negative wtime in access log for CMP operations
Update changelog
2021-05-14 13:27:38 -04:00 · 2021-04-09 12:31:20 +02:00 · 2021-04-09 11:46:17 +02:00 · 2021-04-08 21:01:50 +02:00 · 2021-03-19 11:12:50 +01:00 · 2021-03-04 16:57:41 +01:00
3 changed files with 482 additions and 16 deletions
--- a/.gitignore
+++ b/.gitignore
@ -188,3 +188,24 @@
 /389-ds-base-1.4.3.1.tar.bz2
 /jemalloc-5.2.1.tar.bz2
 /389-ds-base-1.4.3.2.tar.bz2
+/389-ds-base-1.4.3.3.tar.bz2
+/389-ds-base-1.4.3.4.tar.bz2
+/389-ds-base-1.4.3.5.tar.bz2
+/389-ds-base-1.4.3.6.tar.bz2
+/389-ds-base-1.4.3.7.tar.bz2
+/389-ds-base-1.4.3.8.tar.bz2
+/389-ds-base-1.4.3.9.tar.bz2
+/389-ds-base-1.4.3.10.tar.bz2
+/389-ds-base-1.4.3.11.tar.bz2
+/389-ds-base-1.4.3.12.tar.bz2
+/389-ds-base-1.4.3.13.tar.bz2
+/389-ds-base-1.4.3.14.tar.bz2
+/389-ds-base-1.4.3.15.tar.bz2
+/389-ds-base-1.4.3.16.tar.bz2
+/389-ds-base-1.4.3.17.tar.bz2
+/389-ds-base-1.4.3.18.tar.bz2
+/389-ds-base-1.4.3.19.tar.bz2
+/389-ds-base-1.4.3.20.tar.bz2
+/389-ds-base-1.4.3.21.tar.bz2
+/389-ds-base-1.4.3.22.tar.bz2
+/389-ds-base-1.4.3.23.tar.bz2
--- a/389-ds-base.spec
+++ b/389-ds-base.spec
@ -44,18 +44,73 @@ ExcludeArch: i686

 Summary:          389 Directory Server (base)
 Name:             389-ds-base
-Version:          1.4.3.2
-Release:          %{?relprefix}1%{?prerel}%{?dist}.1
-License:          GPLv3+
+Version:          1.4.3.23
+Release:          %{?relprefix}1%{?prerel}%{?dist}
+License:          GPLv3+ and MIT and (ASL 2.0 or MIT) and (Unlicense or MIT) and MPLv2.0 and ASL 2.0 and (ASL 2.0 or Boost) and (ASL 2.0 with exceptions or ASL 2.0 or MIT)
 URL:              https://www.port389.org
 Conflicts:        selinux-policy-base < 3.9.8
 Conflicts:        freeipa-server < 4.0.3
 Obsoletes:        %{name} <= 1.4.0.9
 Provides:         ldif2ldbm >= 0

+##### Bundled cargo crates list - START #####
+Provides:  bundled(crate(ansi_term)) = 0.11.0
+Provides:  bundled(crate(atty)) = 0.2.14
+Provides:  bundled(crate(autocfg)) = 1.0.1
+Provides:  bundled(crate(base64)) = 0.10.1
+Provides:  bundled(crate(bitflags)) = 1.2.1
+Provides:  bundled(crate(byteorder)) = 1.4.2
+Provides:  bundled(crate(cbindgen)) = 0.9.1
+Provides:  bundled(crate(cc)) = 1.0.66
+Provides:  bundled(crate(cfg-if)) = 0.1.10
+Provides:  bundled(crate(cfg-if)) = 1.0.0
+Provides:  bundled(crate(clap)) = 2.33.3
+Provides:  bundled(crate(fernet)) = 0.1.3
+Provides:  bundled(crate(foreign-types)) = 0.3.2
+Provides:  bundled(crate(foreign-types-shared)) = 0.1.1
+Provides:  bundled(crate(getrandom)) = 0.1.16
+Provides:  bundled(crate(hermit-abi)) = 0.1.17
+Provides:  bundled(crate(itoa)) = 0.4.7
+Provides:  bundled(crate(lazy_static)) = 1.4.0
+Provides:  bundled(crate(libc)) = 0.2.82
+Provides:  bundled(crate(librnsslapd)) = 0.1.0
+Provides:  bundled(crate(librslapd)) = 0.1.0
+Provides:  bundled(crate(log)) = 0.4.11
+Provides:  bundled(crate(openssl)) = 0.10.32
+Provides:  bundled(crate(openssl-sys)) = 0.9.60
+Provides:  bundled(crate(pkg-config)) = 0.3.19
+Provides:  bundled(crate(ppv-lite86)) = 0.2.10
+Provides:  bundled(crate(proc-macro2)) = 1.0.24
+Provides:  bundled(crate(quote)) = 1.0.8
+Provides:  bundled(crate(rand)) = 0.7.3
+Provides:  bundled(crate(rand_chacha)) = 0.2.2
+Provides:  bundled(crate(rand_core)) = 0.5.1
+Provides:  bundled(crate(rand_hc)) = 0.2.0
+Provides:  bundled(crate(redox_syscall)) = 0.1.57
+Provides:  bundled(crate(remove_dir_all)) = 0.5.3
+Provides:  bundled(crate(rsds)) = 0.1.0
+Provides:  bundled(crate(ryu)) = 1.0.5
+Provides:  bundled(crate(serde)) = 1.0.118
+Provides:  bundled(crate(serde_derive)) = 1.0.118
+Provides:  bundled(crate(serde_json)) = 1.0.61
+Provides:  bundled(crate(slapd)) = 0.1.0
+Provides:  bundled(crate(strsim)) = 0.8.0
+Provides:  bundled(crate(syn)) = 1.0.58
+Provides:  bundled(crate(tempfile)) = 3.1.0
+Provides:  bundled(crate(textwrap)) = 0.11.0
+Provides:  bundled(crate(toml)) = 0.5.8
+Provides:  bundled(crate(unicode-width)) = 0.1.8
+Provides:  bundled(crate(unicode-xid)) = 0.2.1
+Provides:  bundled(crate(vcpkg)) = 0.2.11
+Provides:  bundled(crate(vec_map)) = 0.8.2
+Provides:  bundled(crate(wasi)) = 0.9.0+wasi_snapshot_preview1
+Provides:  bundled(crate(winapi)) = 0.3.9
+Provides:  bundled(crate(winapi-i686-pc-windows-gnu)) = 0.4.0
+Provides:  bundled(crate(winapi-x86_64-pc-windows-gnu)) = 0.4.0
+##### Bundled cargo crates list - END #####
+
 BuildRequires:    nspr-devel
 BuildRequires:    nss-devel >= 3.34
-BuildRequires:    perl-generators
 BuildRequires:    openldap-devel
 BuildRequires:    libdb-devel
 BuildRequires:    cyrus-sasl-devel
@ -131,7 +186,7 @@ Requires:         selinux-policy >= 3.14.1-29

 # the following are needed for some of our scripts
 Requires:         openldap-clients
-Requires:         openssl-perl
+Requires:         /usr/bin/c_rehash
 Requires:         python%{python3_pkgversion}-ldap

 # this is needed to setup SSL if you are not using the
@ -151,10 +206,6 @@ Requires:         libdb-utils
 # Needed for password dictionary checks
 Requires:         cracklib-dicts

-# This picks up libperl.so as a Requires, so we add this versioned one
-Requires:         perl(:MODULE_COMPAT_%(eval "`%{__perl} -V:version`"; echo $version))
-Requires:         perl-Errno >= 1.23-360
-
 # Needed by logconv.pl
 Requires:         perl-DB_File
 Requires:         perl-Archive-Tar
@ -207,10 +258,11 @@ package to be installed with just the -libs package and without the main package

 %if %{use_legacy}
 %package          legacy-tools
-Summary:          Legacy utilities for 389 Directory Server (%{variant})
+Summary:          Legacy utilities for 389 Directory Server
 Obsoletes:        %{name} <= 1.4.0.9
 Requires:         389-ds-base-libs = %{version}-%{release}
 # for setup-ds.pl to support ipv6
+Requires:         perl(:MODULE_COMPAT_%(eval "`%{__perl} -V:version`"; echo $version))
 %if %{use_Socket6}
 Requires:         perl-Socket6
 %else
@ -263,10 +315,9 @@ Summary:  A library for accessing, testing, and configuring the 389 Directory Se
 BuildArch:        noarch
 Requires: openssl
 Requires: iproute
-Requires: bash-completion
+Recommends: bash-completion
 Requires: python%{python3_pkgversion}
 Requires: python%{python3_pkgversion}-distro
-Requires: python%{python3_pkgversion}-pytest
 Requires: python%{python3_pkgversion}-ldap
 Requires: python%{python3_pkgversion}-six
 Requires: python%{python3_pkgversion}-pyasn1
@ -284,7 +335,8 @@ This module contains tools and libraries for accessing, testing,
 %package -n cockpit-389-ds
 Summary:          Cockpit UI Plugin for configuring and administering the 389 Directory Server
 BuildArch:        noarch
-Requires:         cockpit > 200
+Requires:         cockpit
+Requires:         389-ds-base
 Requires:         python%{python3_pkgversion}
 Requires:         python%{python3_pkgversion}-lib389

@ -328,12 +380,30 @@ CLANG_FLAGS="--enable-clang"
 %endif

 %if %{bundle_jemalloc}
+# Override page size, bz #1545539
+# 4K
+%ifarch %ix86 %arm x86_64 s390x
+%define lg_page --with-lg-page=12
+%endif
+
+# 64K
+%ifarch ppc64 ppc64le aarch64
+%define lg_page --with-lg-page=16
+%endif
+
+# Override huge page size on aarch64
+# 2M instead of 512M
+%ifarch aarch64
+%define lg_hugepage --with-lg-hugepage=21
+%endif
+
 # Build jemalloc
 pushd ../%{jemalloc_name}-%{jemalloc_ver}
 %configure \
        --libdir=%{_libdir}/%{pkgname}/lib \
-        --bindir=%{_libdir}/%{pkgname}/bin
-make
+        --bindir=%{_libdir}/%{pkgname}/bin \
+        --enable-prof
+make %{?_smp_mflags}        
 popd
 %endif

@ -618,6 +688,7 @@ exit 0
 %{_libdir}/%{pkgname}/libns-dshttpd-*.so
 %{_libdir}/%{pkgname}/libsds.so.*
 %{_libdir}/%{pkgname}/libldaputil.so.*
+%{_libdir}/%{pkgname}/librewriters.so*
 %if %{bundle_jemalloc}
 %{_libdir}/%{pkgname}/lib/libjemalloc.so.2
 %endif
@ -761,6 +832,380 @@ exit 0
 %doc README.md

 %changelog
+* Fri May 14 2021 Mark Reynolds <mreynolds@redhat.com> - 1.4.3.23-1
+- Bump version to 1.4.3.23
+- Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
+- Issue 4759 - Fix coverity issue (#4760)
+- Issue 4656 - Fix cherry pick error around replication enabling
+- Issue 4701 - RFE - Exclude attributes from retro changelog (#4723) (#4746)
+- Issue 4742 - UI - should always use LDAPI path when calling CLI
+- Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
+- Issue 4711 - SIGSEV with sync_repl (#4738)
+- Issue 4649 - fix testcase importing ContentSyncPlugin
+- Issue 2736 - Warnings from automatic shebang munging macro
+- Issue 4706 - negative wtime in access log for CMP operations
+
+* Fri Apr 09 2021 Simon Pichugin <spichugi@redhat.com> - 1.4.3.22-1.1
+Add Rust bundled Provides and Update License
+
+* Fri Mar 19 2021 Thierry Bordaz <tbordaz@redhat.com> - 1.4.3.22-1
+- Bump version to 1.4.3.22
+- Issue 4671 - UI - Fix browser crashes
+- lib389 - Add ContentSyncPlugin class
+- Issue 4656 - lib389 - fix cherry pick error
+- Issue 4229 - Fix Rust linking
+- Issue 4658 - monitor - connection start date is incorrect
+- Issue 2621 - lib389 - backport ds_supports_new_changelog()
+- Issue 4656 - Make replication CLI backwards compatible with role name change
+- Issue 4656 - Remove problematic language from UI/CLI/lib389
+- Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
+- Issue 4663 - CLI - unable to add objectclass/attribute without x-origin
+
+* Thu Mar 4 2021 Thierry Bordaz <tbordaz@redhat.com> - 1.4.3.21-1
+- Bump version to 1.4.3.21
+- Issue 4169 - UI - updates on the tuning page are not reflected in the UI
+- Issue 4588 - BUG - unable to compile without xcrypt (#4589)
+- Issue 4513 - Fix replication CI test failures (#4557)
+- Issue 4646 - CLI/UI - revise DNA plugin management
+- Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
+- Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
+- Issue 4615 - log message when psearch first exceeds max threads per conn
+
+* Fri Feb 26 2021 Alexander Bokovoy <abokovoy@redhat.com> - 1.4.3.20-2
+- Rebuild now that Dogtag is fixed to work with a fix to Issue 4609
+
+* Fri Feb 12 2021 Mark Reynolds <mreynolds@redhat.com> - 1.4.3.20-1
+- Bump version to 1.4.3.20
+- Issue 4324 - Some architectures the cache line size file does not exist
+- Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
+
+* Wed Feb 10 2021 Thierry Bordaz <tbordaz@redhat.com> - 1.4.3.19-1
+- bump version to 1.4.3.19
+- Issue 4609 - CVE - info disclosure when authenticating
+- Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
+- Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
+- Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
+- Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
+- Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
+- Issue 5442 - Search results are different between RHDS10 and RHDS11
+- Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
+- Issue 4513 - Fix schema test and lib389 task module (#4514)
+- Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
+
+* Fri Jan 15 2021 Mark Reynolds <mreynolds@redhat.com> - 1.4.3.18-1
+- Bump version to 1.4.3.18
+- Issue 4513 - CI Tests - fix test failures
+- Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
+- Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
+- Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
+- Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
+- Issue 4506 - BUG - Fix bounds on fd table population (#4520)
+- Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
+- Issue 4418 - lib389 - fix ldif2db import_cl parameter
+- Issue 4384 - Separate eventq into REALTIME and MONOTONIC
+- Issue 4418 - ldif2db - offline. Warn the user of skipped entries
+- Issue 4414 - disk monitoring - prevent division by zero crash
+- Issue 4507 - Improve csngen testing task (#4508)
+- Issue 4486 - Remove random ldif file generation from import test (#4487)
+- Issue 4489 - Remove return statement from a void function (#4490)
+- Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
+- Issue 4418 - ldif2db - offline. Warn the user of skipped entries
+- Issue 4504 - Fix pytest test_dsconf_replication_monitor (#4505)
+- Issue 4480 - Unexpected info returned to ldap request (#4491)
+- Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
+- Issue 4500 - Add cockpit enabling to dsctl
+- Issue 4272 - RFE - add support for gost-yescrypt for hashing passwords (#4497)
+- Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
+- Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN)
+- Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
+- Issue 4483 - heap-use-after-free in slapi_be_getsuffix
+- Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt (#4437)
+- Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
+- Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
+- Issue 4284 - dsidm fails to delete an organizationalUnit entry
+- Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466)
+
+* Mon Nov 30 2020 Mark Reynolds <mreynolds@redhat.com> - 1.4.3.17-1
+- Bump version to 1.4.3.17
+- Issue 4384 - Use MONOTONIC clock for all timing events and conditions
+- Issue 4449 - Add dsconf replication monitor test case (gitHub issue 4449) in  1.4.3 branch
+- Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
+- Issue 4112 - Added a CI test (#4441)
+- Issue 4460 - BUG  - lib389 should use system tls policy
+- Issue 3657 - Add options to dsctl for dsrc file
+- Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
+- Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
+- Issue 4187 - improve mutex alloc in conntable
+- Issue 3986 - Fix OID change between 10rfc2307 and 10rfc2307compat
+- Issue 3986 - Update 2307compat.ldif
+- Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
+- Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
+- Issue 4427 - do not add referrals for masters with different data generation #2054 (#4427)
+- Issue 2058 - Add keep alive entry after on-line initialization - second version (#4399)
+- Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
+- Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
+- Issue 4428 - Paged Results with Chaining Test Case
+- Issue 4383 - Do not normalize escaped spaces in a DN
+- Issue 4425 - Backport tests from master branch, fix failing tests
+
+* Fri Nov 13 2020 Mark Reynolds <mreynolds@redhat.com> - 1.4.3.16-1
+- Bump version to 1.4.3.16
+- Issue 4432 - After a failed online import the next imports are very slow
+- Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
+- Issue 4429 - NULL dereference in revert_cache()
+- Issue 4391 - DSE config modify does not call be_postop (#4394)
+- Issue 4329 - Sync repl - if a serie of updates target the same entry then the cookie get wrong changenumber (#4356)
+- Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
+- Issue 4415 - unable to query schema if there are extra parenthesis
+- Issue 4350 - One line, fix invalid type error in tls_cacertdir check (#4358)
+- Issue 4350 - dsrc should warn when tls_cacertdir is invalid (#4353)
+- Issue 4351 - improve generated sssd.conf output (#4354)
+
+* Wed Oct 28 2020 Mark Reynolds <mreynolds@redhat.com> - 1.4.3.15-1
+- Bump version to 1.4.3.15
+- Issue 2526 - revert backend validation check
+- Issue 2526 - retrocl backend created out of order
+
+* Mon Oct 26 2020 Mark Reynolds <mreynolds@redhat.com> - 1.4.3.14-1
+- Bump version to 1.4.3.14
+- Issue 2526 - revert API change in slapi_be_getsuffix()
+- Issue 4372 - BUG - Chaining DB did not validate bind mech parameters (#4374)
+- Issue 4334 - RFE - Task timeout may cause larger dataset imports to fail (#4359)
+- Issue 4363 - Sync repl: per thread structure was incorrectly initialized (#4395)
+- Issue 2526 - suffix management in backends incorrect
+- Issue 1199 - Misleading message in access log for idle timeout (#4385)
+- Issue 4295 - Fix a closing quote issue (#4386)
+- Issue 4389 - errors log with incorrectly formatted message parent_update_on_childchange
+- Issue 4297 - On ADD replication URP issue internal searches with filter containing unescaped chars (#4355)
+- Issue 4379 - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service (#4380)
+- Issue 4159 - Healthcheck code DSBLE0002 not returned on disabled suffix
+- Issue 4265 - UI - Make the secondary plugins read-only (#4364)
+- Issue 4361 - RFE - add - dscreate --advanced flag to avoid user confusion
+- Issue 4368 - ds-replcheck crashes when processing glue entries
+- Issue 4366 - lib389 - Fix account status inactivity checks
+- Issue 4360 - password policy max sequence sets is not working as expected
+
+* Mon Oct 5 2020 Mark Reynolds <mreynolds@redhat.com> - 1.4.3.13-1
+- Bump version to 1.4.3.13
+- Issue 4342 - UI - additional fixes for creation instance modal
+- Issue 3996 - Add dsidm rename option (#4338)
+- Issue 4258 - Add server version information to UI
+- Issue 4209 - RFE - add bootstrap credentials to repl agreement (UI update)
+- Issue 4209 - RFE - add bootstrap credentials to repl agreement (CLI update)
+- Issue 4209 - RFE - add bootstrap credentials to repl agreement
+- Issue 4319 - Performance search rate: listener may be erroneously waken up (#4323)
+- Ticket 51190 - SyncRepl plugin provides a wrong cookie
+- Ticket 51253 - dscreate should LDAPI to bootstrap the config
+- Ticket 51228 - Fix lock/unlock wording and lib389 use of methods
+- Ticket 51229 - Server Settings page gets into an unresponsive state
+- Ticket 51165 - Set the operation start time for extended ops
+- Ticket 51228 - Clean up dsidm user status command
+- Ticket 51233 - ds-replcheck crashes in offline mode
+- Ticket 50260 - Fix test according to #51222 fix
+
+* Fri Jul 31 2020 Mark Reynolds <mreynolds@redhat.com> - 1.4.3.12-1
+- Bump version to 1.4.3.12
+- Issue 51222 - It should not be allowed to delete Managed Entry manually
+- Issue 51129 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version
+- Issue 51086 - Fix instance name length for interactive install
+- Issue 51136 - JSON Error output has redundant messages
+- Issue 51059 - If dbhome directory is set online backup fails
+- Issue 51000 - Separate the BDB backend monitors
+- Issue 49300 - entryUSN is duplicated after memberOf operation
+- Issue 50984 - Fix disk_mon_check_diskspace types
+
+* Wed Jul 8 2020 Mark Reynolds <mreynolds@redhat.com> - 1.4.3.11-1
+- Bump version to 1.4.3.11
+- Issue 51192 - Add option to reject internal unindexed searches
+- Issue 51159 - dsidm ou delete fails
+- Issue 51165 - add more logconv stats for the new access log keywords
+- Issue 51188 - db2ldif crashes when LDIF file can't be accessed
+- Issue 51165 - add new access log keywords for wtime and optime
+- Issue 50696 - Fix Allowed and Denied Ciphers lists - WebUI
+- Issue 51169 - UI - attr uniqueness - selecting empty subtree crashes cockpit
+- Issue 49256 - log warning when thread number is very different from autotuned value
+- Issue 51157 - Reindex task may create abandoned index file
+- Issue 51166 - Log an error when a search is fully unindexed
+- Issue 51161 - fix SLE15.2 install issps
+- Issue 51144 - dsctl fails with instance names that contain slapd-
+- Issue 50984 - Memory leaks in disk monitoring
+- Issue 50201 - nsIndexIDListScanLimit accepts any value
+
+* Mon Jun 15 2020 Mark Reynolds <mreynolds@redhat.com> - 1.4.3.10-1
+- Bump version to 1.4.3.10
+- Issue 49859 - A distinguished value can be missing in an entry
+- Issue 50791 - Healthcheck should look for notes=A/F in access log
+- Issue 51072 - Set the default minimum worker threads
+- Issue 50912 - pwdReset can be modified by a user
+- Issue 51100 - Correct numSubordinates value for cn=monitor
+- Issue 51136 - dsctl and dsidm do not errors correctly when using JSON
+- Issue 51132 - Winsync setting winSyncWindowsFilter not working as expected
+- Issue 51072 - improve autotune defaults
+- Issue 50746 - Add option to healthcheck to list all the lint reports
+- Issue 51118 - UI - improve modal validation when creating an instance
+
+* Fri May 29 2020 Mark Reynolds <mreynolds@redhat.com> - 1.4.3.9-1
+- Bump version to 1.4.3.9
+- Issue 50931 - RFE AD filter rewriter for ObjectCategory
+- Issue 51113 - Allow using uid for replication manager entry
+- Issue 51095 - abort operation if CSN can not be generated
+- Issue 51110 - Fix ASAN ODR warnings
+- Issue 51102 - RFE - ds-replcheck - make online timeout configurable
+- Issue 51076 - remove unnecessary slapi entry dups
+- Issue 51086 - Improve dscreate instance name validation
+- Issue 50989 - ignore pid when it is ourself in protect_db
+- Issue 50499 - Fix some npm audit issues
+- Issue 51091 - healthcheck json report fails when mapping tree is deleted
+- Issue 51079 - container pid start and stop issues
+- Issue 50610 - Fix return code when it's nothing to free
+- Issue 51082 - abort when a empty valueset is freed
+- Issue 50610 - memory leaks in dbscan and changelog encryption
+- Issue 51076 - prevent unnecessarily duplication of the target entry
+
+* Fri May 8 2020 Mark Reynolds <mreynolds@redhat.com> - 1.4.3.8-1
+- Bump version to 1.4.3.8
+- Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
+- Issue 51054 - Revise ACI target syntax checking
+- Issue 51068 - deadlock when updating the schema
+- Issue 51060 - unable to set sslVersionMin to TLS1.0
+- Issue 51064 - Unable to install server where IPv6 is disabled
+- Issue 51051 - CLI fix consistency issues with confirmations
+- Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
+- Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
+- Issue 51047 - React deprecating ComponentWillMount
+- Issue 50499 - fix npm audit issues
+- Issue 50545 - Port dbgen.pl to dsctl
+
+* Wed Apr 22 2020 Mark Reynolds <mreynolds@redhat.com> - 1.4.3.7-1
+- Bump version to 1.4.3.7
+- Issue 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
+- Issue 51035 - Heavy StartTLS connection load can randomly fail with err=1
+- Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
+- Issue 51031 - UI - transition between two instances needs improvement
+
+* Thu Apr 16 2020 Mark Reynolds <mreynolds@redhat.com> - 1.4.3.6-1
+- Bump version to 1.4.3.6
+- Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
+- Issue 50931 - RFE AD filter rewriter for ObjectCategory
+- Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
+- Issue 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
+- Issue 51008 - dbhome in containers
+- Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
+- Issue 51014 - slapi_pal.c possible static buffer overflow
+- Issue 50545 - remove dbmon "incr" option from arg parser
+- Issue 50545 - Port dbmon.sh to dsconf
+- Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
+- Issue 49731 - Fix additional issues with setting db home directory by default
+- Issue 50337 - Replace exec() with setattr()
+- Issue 50905 - intermittent SSL hang with rhds
+- Issue 50952 - SSCA lacks basicConstraint:CA
+- Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
+- Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
+
+* Wed Apr 1 2020 Mark Reynolds <mreynolds@redhat.com> - 1.4.3.5-1
+- Bump version to 1.4.3.5
+- Issue 50994 - Fix latest UI bugs found by QE
+- Issue 50933 - rfc2307compat.ldif
+- Issue 50337 - Replace exec() with setattr()
+- Issue 50984 - Memory leaks in disk monitoring
+- Issue 50984 - Memory leaks in disk monitoring
+- Issue 49731 - dscreate fails in silent mode because of db_home_dir
+- Issue 50975 - Revise UI branding with new minimized build
+- Issue 49437 - Fix memory leak with indirect COS
+- Issue 49731 - Do not add db_home_dir to template-dse.ldif
+- Issue 49731 - set and use db_home_directory by default
+- Issue 50971 - fix BSD_SOURCE
+- Issue 50744 - -n option of dbverify does not work
+- Issue 50952 - SSCA lacks basicConstraint:CA
+- Issue 50976 - Clean up Web UI source directory from unused files
+- Issue 50955 - Fix memory leaks in chaining plugin(part 2)
+- Issue 50966 - UI - Database indexes not using typeAhead correctly
+- Issue 50974 - UI - wrong title in "Delete Suffix" popup
+- Issue 50972 - Fix cockpit plugin build
+- Issue 49761 - Fix CI test suite issues
+- Issue 50971 - Support building on FreeBSD.
+- Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
+- Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
+- Issue 50963 - We should bundle *.min.js files of Console
+- Issue 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
+- Issue 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
+- Issue 50954 - buildnum.py - fix date formatting issue
+
+* Mon Mar 16 2020 Mark Reynolds <mreynolds@redhat.com> - 1.4.3.4-1
+- Bump version to 1.4.3.4
+- Issue 50954 - Port buildnum.pl to python(part 2)
+- Issue 50955 - Fix memory leaks in chaining plugin
+- Issue 50954 - Port buildnum.pl to python
+- Issue 50947 - change 00core.ldif objectClasses for openldap migration
+- Issue 50755 - setting nsslapd-db-home-directory is overriding db_directory
+- Issue 50937 - Update CLI for new backend split configuration
+- Issue 50860 - Port Password Policy test cases from TET to python3 pwp.sh
+- Issue 50945 - givenname alias of gn from openldap
+- Issue 50935 - systemd override in lib389 for dscontainer
+- Issue 50499 - Fix npm audit issues
+- Issue 49761 - Fix CI test suite issues
+- Issue 50618 - clean compiler warning and log level
+- Issue 50889 - fix compiler issues
+- Issue 50884 - Health check tool DSEldif check fails
+- Issue 50926 - Remove dual spinner and other UI fixes
+- Issue 50928 - Unable to create a suffix with countryName
+- Issue 50758 - Only Recommend bash-completion, not Require
+- Issue 50923 - Fix a test regression
+- Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
+- Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
+- Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
+- Issue 50919 - Backend delete fails using dsconf
+- Issue 50872 - dsconf can't create GSSAPI replication agreements
+- Issue 50912 - RFE - add password policy attribute pwdReset
+- Issue 50914 - No error returned when adding an entry matching filters for a non existing automember group
+- Issue 50889 - Extract pem files into a private namespace
+- Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
+- Issue 50686 - Port fractional replication test cases from TET to python3 final
+- Issue 49845 - Remove pkgconfig check for libasan
+- Issue:50860 - Port Password Policy test cases from TET to python3 bug624080
+- Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs
+- Issue 50786 - connection table freelist
+- Issue 50618 - support cgroupv2
+- Issue 50900 - Fix cargo offline build
+- Issue 50898 - ldclt core dumped when run with -e genldif option
+
+* Mon Feb 17 2020 Matus Honek <mhonek@redhat.com> - 1.4.3.3-3
+- Bring back the necessary c_rehash util (#1803370)
+
+* Fri Feb 14 2020 Mark Reynolds <mreynolds@redhat.com> - 1.4.3.3-2
+- Bump version to 1.4.3.3-2
+- Remove unneeded perl dependencies
+- Change bash-completion to "Recommends" instead of "Requires"
+
+* Thu Feb 13 2020 Mark Reynolds <mreynolds@redhat.com> - 1.4.3.3-1
+- Bump version to 1.4.3.3
+- Issue 50855 - remove unused file from UI
+- Issue 50855 - UI: Port Server Tab to React
+- Issue 49845 - README does not contain complete information on building
+- Issue 50686 - Port fractional replication test cases from TET to python3 part 1
+- Issue 49623 - cont cenotaph errors on modrdn operations
+- Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
+- Issue 50886 - Typo in the replication debug message
+- Issue 50873 - Fix healthcheck and virtual attr check
+- Issue 50873 - Fix issues with healthcheck tool
+- Issue 50028 - Add a new CI test case
+- Issue 49946 - Add a new CI test case
+- Issue 50117 - Add a new CI test case
+- Issue 50787 - fix implementation of attr unique
+- Issue 50859 - support running only with ldaps socket
+- Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
+- Issue 49624 - cont - DB Deadlock on modrdn appears to corrupt database and entry cache
+- Issue 50867 - Fix minor buildsys issues
+- Issue 50737 - Allow building with rust online without vendoring
+- Issue 50831 - add cargo.lock to allow offline builds
+- Issue 50694 - import PEM certs on startup
+- Issue 50857 - Memory leak in ACI using IP subject
+- Issue 49761 - Fix CI test suite issues
+- Issue 50853 - Fix NULL pointer deref in config setting
+- Issue 50850 - Fix dsctl healthcheck for python36
+- Issue 49990 - Need to enforce a hard maximum limit for file descriptors
+- Issue 48707 - ldapssotoken for authentication
+
 * Tue Jan 28 2020 Fedora Release Engineering <releng@fedoraproject.org> - 1.4.3.2-1.1
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

--- a/2
+++ b/2
@ -1,2 +1,2 @@
-SHA512 (389-ds-base-1.4.3.2.tar.bz2) = e747c96428b0b79cbea6f01c07214b8ee3456b6f5d93fd27da905c56690e370925d70939765d68c43dd74ecd7121bfe61d84314b8127d83dded45186120caa5e
 SHA512 (jemalloc-5.2.1.tar.bz2) = 0bbb77564d767cef0c6fe1b97b705d368ddb360d55596945aea8c3ba5889fbce10479d85ad492c91d987caacdbbdccc706aa3688e321460069f00c05814fae02
+SHA512 (389-ds-base-1.4.3.23.tar.bz2) = 6084ef48e7665a3cbb2953be345bc96bdfe024297610719f2c5a788e9e99f5527702799dd17d5ee1f56fc588d862a51326633e656c0a76678f816da98c318cd0