Compare commits

...
Sign in to create a new pull request.

20 commits

Author SHA1 Message Date
Mark Reynolds
02c8619ddc Bump version to 1.4.4.17
Issue 4927 - rebase lib389 and cockpit in 1.4.4
Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
Issue 4912 - Account Policy plugin does not set the config entry DN
Issue 4796 - Add support for nsslapd-state to CLI & UI
Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
Issue 4169 - backport lib389 cert list fix
Issue 4912 - dsidm command crashing when account policy plugin is enabled
Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
Issue - 4696 - Password hash upgrade on bind (#4840)
Issue 4875 - CLI - Add some verbosity to installer
Issue 4884 - server crashes when dnaInterval attribute is set to zero
Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
Issue 4734 - import of entry with no parent warning (#4735)
Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
Issue 4736 - lib389 - fix regression in certutil error checking
Issue 4736 - CLI - Errors from certutil are not propagated
Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
Issue 4656 - (2nd) Remove problematic language from UI/CLI/lib389
Issue 4262 - Fix Index out of bound in fractional test (#4828)
Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
Issue 4656 - remove problematic language from ds-replcheck
Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
Issue 4506 - Improve SASL logging
Issue 4093 - Fix MEP test case
Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
Issue 4447 - Crash when the Referential Integrity log is manually edited
Issue 4773 - Add CI test for DNA interval assignment
Issue 4750 - Fix compiler warning in retrocl (#4751)
2021-09-20 17:23:48 -04:00
Mark Reynolds
6925de854e Bump version to 1.4.4.16
Issue 4778 - RFE - Allow setting TOD for db compaction and add task
Issue 4623 - RFE - Monitor the current DB locks (#4762)
Issue 4725 - RFE - Update the password policy to support a Temporary Password Rules (#4727)
Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
Issue 4773 - RFE - Enable interval feature of DNA plugin
Issue 4719 - lib389 - fix dsconf passthrough auth bugs
Issue 4764 - replicated operation sometime checks ACI (#4783)
Issue 4781 - There are some typos in man-pages
Issue 3555 - Fix UI audit issue
Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
Issue 4725 - Fix compiler warnings
Issue 4770 - Lower FIPS logging severity
Issue 4759 - Fix coverity issue (#4760)
Issue 4742 - UI - should always use LDAPI path when calling CLI
Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
Issue 4711 - SECURITY FIX - SIGSEV with sync_repl (#4738)
Issue 4637 - ndn cache leak (#4724)
Issue 4577 - Fix ASAN flags in specfile
2021-05-30 11:59:26 -04:00
Mark Reynolds
cfd3078c32 Bump version to 1.4.4.16
Issue 4778 - RFE - Allow setting TOD for db compaction and add task
Issue 4623 - RFE - Monitor the current DB locks (#4762)
Issue 4725 - RFE - Update the password policy to support a Temporary Password Rules (#4727)
Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
Issue 4773 - RFE - Enable interval feature of DNA plugin
Issue 4719 - lib389 - fix dsconf passthrough auth bugs
Issue 4764 - replicated operation sometime checks ACI (#4783)
Issue 4781 - There are some typos in man-pages
Issue 3555 - Fix UI audit issue
Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
Issue 4725 - Fix compiler warnings
Issue 4770 - Lower FIPS logging severity
Issue 4759 - Fix coverity issue (#4760)
Issue 4742 - UI - should always use LDAPI path when calling CLI
Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
Issue 4711 - SECURITY FIX - SIGSEV with sync_repl (#4738)
Issue 4637 - ndn cache leak (#4724)
Issue 4577 - Fix ASAN flags in specfile
2021-05-30 11:55:52 -04:00
Christian Heimes
6e85d53203 Apply DNA plugin patch 2021-05-21 09:07:23 +02:00
Christian Heimes
eed7e0c5b4 Enable interval feature of DNA plugin (resolves: rhbz#1962671) 2021-05-20 16:31:35 +02:00
Viktor Ashirov
851ddfe5ef Fix NVR 2021-05-07 10:57:00 +02:00
Simon Pichugin
b31d78d244 Update changelog 2021-04-09 12:28:02 +02:00
Simon Pichugin
67725a159a Add Rust bundled Provides and Update License 2021-04-09 12:06:34 +02:00
Thierry Bordaz
2e8b7f8573 Bump version to 1.4.4.15
Issue 4700 - Regression in winsync replication agreement (#4712)
Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
Issue 4706 - negative wtime in access log for CMP operations
2021-04-06 12:20:05 +02:00
Thierry Bordaz
eccef0f450 Bump version to 1.4.4.14
Issue 4671 - UI - Fix browser crashes
Issue 4229 - Fix Rust linking
Issue 4658 - monitor - connection start date is incorrect
Issue 4656 - Make replication CLI backwards compatible with role name change
Issue 4656 - Remove problematic language from UI/CLI/lib389
Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
Issue 4661 - RFE - allow importing openldap schemas (#4662)
Issue 4659 - restart after openldap migration to enable plugins (#4660)
Issue 4663 - CLI - unable to add objectclass/attribute without x-origin
Issue 4169 - UI - updates on the tuning page are not reflected in the UI
Issue 4588 - BUG - unable to compile without xcrypt (#4589)
Issue 4513 - Fix replication CI test failures (#4557)
Issue 4646 - CLI/UI - revise DNA plugin management
Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
Issue 4513 - CI - make acl ip address tests more robust
Issue 4619 - remove pytest requirement from lib389
Issue 4615 - log message when psearch first exceeds max threads per conn
2021-03-19 14:29:11 +01:00
Alexander Bokovoy
09f796df3e Rebuild now that Dogtag is fixed to work with a fix to Issue 4609
Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
2021-02-26 21:43:08 +02:00
Mark Reynolds
262c80a63f Bump version to 1.4.4.13
Update dscontainer (#4564)
Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
Issue 4324 - Some architectures the cache line size file does not exist
Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
Issue 4609 - CVE - info disclosure when authenticating
2021-02-12 14:57:30 -05:00
Mark Reynolds
fa1484500e Bump version to 1.4.4.12
Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
Issue 4396 - Minor memory leak in backend (#4558) (#4572)
Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
Issue 5442 - Search results are different between RHDS10 and RHDS11
2021-02-02 11:51:18 -05:00
Mark Reynolds
87a5a3a356 Bump version to 1.4.4.11
Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
Issue 4513 - Fix schema test and lib389 task module (#4514)
Issue 4535 - lib389 - Fix log function in backends.py
Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
2021-01-25 15:07:17 -05:00
Mark Reynolds
da80d7995e Bump version to 1.4.4.10
Issue 4381 - RFE - LDAPI authentication DN rewritter
Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
Issue 4513 - CI Tests - fix test failures
Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
Issue 4506 - BUG - Fix bounds on fd table population (#4520)
Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
Issue 4384 - Separate eventq into REALTIME and MONOTONIC
Issue 4418 - ldif2db - offline. Warn the user of skipped entries
Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
Issue 4414 - disk monitoring - prevent division by zero crash
Issue 4507 - Improve csngen testing task (#4508)
Issue 4498 - BUG - entryuuid replication may not work (#4503)
Issue 4504 - Fix pytest test_dsconf_replication_monitor (#4505)
Issue 4480 - Unexpected info returned to ldap request (#4491)
Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
Issue 4500 - Add cockpit enabling to dsctl
Issue 4272 - RFE - add support for gost-yescrypt for hashing passwords (#4497)
Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
Issue 4483 - heap-use-after-free in slapi_be_getsuffix
Issue 4224 - cleanup specfile after libsds removal
Issue 4421 - Unable to build with Rust enabled in closed environment
Issue 4229 - RFE - Improve rust linking and build performance (#4474)
Issue 4464 - RFE - clang with ds+asan+rust
Issue 4224 - openldap can become confused with entryuuid
Issue 4313 - improve tests and improve readme re refdel
Issue 4313 - fix potential syncrepl data corruption
Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt (#4437)
Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
Issue 4446 - RFE - openldap password hashers
Issue 4403 - RFE - OpenLDAP pw hash migration tests (#4408)
Issue 4410  -RFE - ndn cache with arc in rust
Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
2021-01-14 17:54:23 -05:00
Mark Reynolds
cea399dd5f Bump version to 1.4.4.9
Issue 4105 - Remove python.six (fix regression)
Issue 4384 - Use MONOTONIC clock for all timing events and conditions
Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
Issue 4460 - BUG  - lib389 should use system tls policy
Issue 3657 - Add options to dsctl for dsrc file
Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
Issue 4105 - Remove python.six from lib389 (#4456)
Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
Issue 2054 - do not add referrals for masters with different data generation #2054 (#4427)
Issue 2058 - Add keep alive entry after on-line initialization - second version (#4399)
Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
Issue 4428 - Paged Results with Chaining Test Case
Issue 4383 - Do not normalize escaped spaces in a DN
Issue 4432 - After a failed online import the next imports are very slow
Issue 4404 - build problems at alpine linux
Issue 4316 - performance search rate: useless poll on network send callback (#4424)
Issue 4429 - NULL dereference in revert_cache()
Issue 4391 - DSE config modify does not call be_postop (#4394)
Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
2020-11-30 16:54:07 -05:00
Mark Reynolds
1d308a7ce6 Bump version to 1.4.4.8
Issue 4415 - unable to query schema if there are extra parenthesis
Issue 4176 - CL trimming causes high CPU
2020-11-07 23:01:16 -05:00
Mark Reynolds
f2b6a658a1 Bump version to 1.4.4.7
Issue 2526 - revert backend validation check
Issue 4262 - more perl removal cleanup
Issue 2526 - retrocl backend created out of order
2020-10-28 11:05:31 -04:00
Mark Reynolds
4bc2a66e31 Bump version to 1.4.4.6
Issue 4262 - Remove legacy tools subpackage (final cleanup)
Issue 4262 - Remove legacy tools subpackage (restart instances after rpm install)
Issue 4262 - Remove legacy tools subpackage
Issue 2526 - revert API change in slapi_be_getsuffix()
Issue 4363 - Sync repl: per thread structure was incorrectly initialized (#4395)
Issue 4392 - Update create_test.py
Issue 2820 - Fix CI tests (#4365)
Issue 2526 - suffix management in backends incorrect
Issue 4389 - errors log with incorrectly formatted message parent_update_on_childchange
Issue 4295 - Fix a closing quote issue (#4386)
Issue 1199 - Misleading message in access log for idle timeout (#4385)
Issue 3600 - RFE - openldap migration tooling (#4318)
Issue 4176 - import ldif2cl task should not close all changelogs
Issue 4159 - Healthcheck code DSBLE0002 not returned on disabled suffix
Issue 4379 - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service (#4380)
Issue 4329 - Sync repl - if a serie of updates target the same entry then the cookie get wrong changenumber (#4356)
Issue 3555 - Fix npm audit issues (#4370)
Issue 4372 - BUG - Chaining DB did not validate bind mech parameters (#4374)
Issue 4334 - RFE - Task timeout may cause larger dataset imports to fail (#4359)
Issue 4361 - RFE - add - dscreate --advanced flag to avoid user confusion
Issue 4368 - ds-replcheck crashes when processing glue entries
Issue 4366 - lib389 - Fix account status inactivity checks
Issue 4265 - UI - Make the secondary plugins read-only (#4364)
Issue 4360 - password policy max sequence sets is not working as expected
Issue 4348 - Add tests for dsidm
Issue 4350 - One line, fix invalid type error in tls_cacertdir check (#4358)
2020-10-26 17:15:46 -04:00
Mark Reynolds
004db0a1e0 Bump version to 1.4.4.5
Issue 4347 - log when server requires a restart for a plugin to become active (#4352)
Issue 4297 - On ADD replication URP issue internal searches with filter containing unescaped chars (#4355)
Issue 4350 - dsrc should warn when tls_cacertdir is invalid (#4353)
Issue 4351 - improve generated sssd.conf output (#4354)
Issue 4345 - import self sign cert doc comment (#4346)
Issue 4342 - UI - additional fixes for creation instance modal
Issue 3996 - Add dsidm rename option (#4338)
Issue 4258 - Add server version information to UI
Issue 4326 - entryuuid fixup did not work correctly (#4328)
Issue 4209 - RFE - add bootstrap credentials to repl agreement (upgrade update)
Issue 4209 - RFE - add bootstrap credentials to repl agreement (UI update)
Issue 4209 - RFE - add bootstrap credentials to repl agreement
Issue 4209 - RFE - add bootstrap credentials to repl agreement
Issue 4322 - Fix a source link (#4332)
Issue 4319 - Performance search rate: listener may be erroneously waken up (#4323)
Issue 4322 - Updates old reference to pagure issue (#4321)
Issue 4327 - Update issue templates and README.md
Ticket 51190 - SyncRepl plugin provides a wrong cookie
Ticket 51121 - Remove hardcoded changelog file name
Ticket 51253 - dscreate should LDAPI to bootstrap the config
Ticket 51177 - fix warnings
Ticket 51228 - Fix lock/unlock wording and lib389 use of methods
Ticket 51247 - Container Healthcheck failure
Ticket 51177 - on upgrade configuration handlers
Ticket 51229 - Server Settings page gets into an unresponsive state
Ticket 51189 - integrate changelog in main database - update CLI
Ticket 49562 - integrate changelog database to main database
Ticket 51165 - Set the operation start time for extended ops
Ticket 50933 - Fix OID change between 10rfc2307 and 10rfc2307compat
Ticket 51228 - Clean up dsidm user status command
Ticket 51233 - ds-replcheck crashes in offline mode
Ticket 50260 - Fix test according to #51222 fix
Ticket 50952 - SSCA lacks basicConstraint:CA
Ticket 50933 - enable 2307compat.ldif by default
Ticket 50933 - Update 2307compat.ldif
Ticket 51102 - RFE - ds-replcheck - make online timeout configurable
Ticket 51222 - It should not be allowed to delete Managed Entry manually
Ticket 51129 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version
Ticket 49487 - Restore function that incorrectly removed by last patch
Ticket 49481 - remove unused or unnecessary database plugin functions
Ticket 50746 - Add option to healthcheck to list all the lint reports
Ticket 49487 - Cleanup unused code
Ticket 51086 - Fix instance name length for interactive install
Ticket 51136 - JSON Error output has redundant messages
Ticket 51059 - If dbhome directory is set online backup fails
Ticket 51000 - Separate the BDB backend monitors
Ticket 49300 - entryUSN is duplicated after memberOf operation
Ticket 50984 - Fix disk_mon_check_diskspace types
Ticket 50791 - Healthcheck to find notes=F
2020-10-05 22:06:17 -04:00
3 changed files with 449 additions and 231 deletions

13
.gitignore vendored
View file

@ -196,3 +196,16 @@
/389-ds-base-1.4.4.2.tar.bz2
/389-ds-base-1.4.4.3.tar.bz2
/389-ds-base-1.4.4.4.tar.bz2
/389-ds-base-1.4.4.5.tar.bz2
/389-ds-base-1.4.4.6.tar.bz2
/389-ds-base-1.4.4.7.tar.bz2
/389-ds-base-1.4.4.8.tar.bz2
/389-ds-base-1.4.4.9.tar.bz2
/389-ds-base-1.4.4.10.tar.bz2
/389-ds-base-1.4.4.11.tar.bz2
/389-ds-base-1.4.4.12.tar.bz2
/389-ds-base-1.4.4.13.tar.bz2
/389-ds-base-1.4.4.14.tar.bz2
/389-ds-base-1.4.4.15.tar.bz2
/389-ds-base-1.4.4.16.tar.bz2
/389-ds-base-1.4.4.17.tar.bz2

View file

@ -17,7 +17,6 @@ ExcludeArch: i686
%global use_asan 0
%global use_rust 0
%global use_legacy 1
%global bundle_jemalloc 1
%if %{use_asan}
%global bundle_jemalloc 0
@ -47,15 +46,107 @@ ExcludeArch: i686
Summary: 389 Directory Server (base)
Name: 389-ds-base
Version: 1.4.4.4
Release: %{?relprefix}1%{?prerel}%{?dist}.2
License: GPLv3+
Version: 1.4.4.17
Release: %{?relprefix}1%{?prerel}%{?dist}
License: GPLv3+ and (ASL 2.0 or MIT) and MIT and (Unlicense or MIT) and MPLv2.0 and BSD and ASL 2.0 and (ASL 2.0 or Boost) and (ASL 2.0 with exceptions or ASL 2.0 or MIT)
URL: https://www.port389.org
Conflicts: selinux-policy-base < 3.9.8
Conflicts: freeipa-server < 4.0.3
Obsoletes: %{name} <= 1.4.0.9
Obsoletes: %{name}-legacy-tools < 1.4.4.6
Obsoletes: %{name}-legacy-tools-debuginfo < 1.4.4.6
Provides: ldif2ldbm >= 0
##### Bundled cargo crates list - START #####
Provides: bundled(crate(ahash)) = 0.7.2
Provides: bundled(crate(ansi_term)) = 0.11.0
Provides: bundled(crate(atty)) = 0.2.14
Provides: bundled(crate(autocfg)) = 1.0.1
Provides: bundled(crate(base64)) = 0.13.0
Provides: bundled(crate(bitflags)) = 1.2.1
Provides: bundled(crate(byteorder)) = 1.4.3
Provides: bundled(crate(cbindgen)) = 0.9.1
Provides: bundled(crate(cc)) = 1.0.67
Provides: bundled(crate(cfg-if)) = 1.0.0
Provides: bundled(crate(clap)) = 2.33.3
Provides: bundled(crate(concread)) = 0.2.8
Provides: bundled(crate(crossbeam)) = 0.8.0
Provides: bundled(crate(crossbeam-channel)) = 0.5.0
Provides: bundled(crate(crossbeam-deque)) = 0.8.0
Provides: bundled(crate(crossbeam-epoch)) = 0.9.3
Provides: bundled(crate(crossbeam-queue)) = 0.3.1
Provides: bundled(crate(crossbeam-utils)) = 0.8.3
Provides: bundled(crate(entryuuid)) = 0.1.0
Provides: bundled(crate(entryuuid_syntax)) = 0.1.0
Provides: bundled(crate(fernet)) = 0.1.4
Provides: bundled(crate(foreign-types)) = 0.3.2
Provides: bundled(crate(foreign-types-shared)) = 0.1.1
Provides: bundled(crate(getrandom)) = 0.2.2
Provides: bundled(crate(hermit-abi)) = 0.1.18
Provides: bundled(crate(instant)) = 0.1.9
Provides: bundled(crate(itoa)) = 0.4.7
Provides: bundled(crate(jobserver)) = 0.1.21
Provides: bundled(crate(lazy_static)) = 1.4.0
Provides: bundled(crate(libc)) = 0.2.92
Provides: bundled(crate(librnsslapd)) = 0.1.0
Provides: bundled(crate(librslapd)) = 0.1.0
Provides: bundled(crate(lock_api)) = 0.4.3
Provides: bundled(crate(log)) = 0.4.14
Provides: bundled(crate(memoffset)) = 0.6.3
Provides: bundled(crate(num)) = 0.3.1
Provides: bundled(crate(num-bigint)) = 0.3.2
Provides: bundled(crate(num-complex)) = 0.3.1
Provides: bundled(crate(num-integer)) = 0.1.44
Provides: bundled(crate(num-iter)) = 0.1.42
Provides: bundled(crate(num-rational)) = 0.3.2
Provides: bundled(crate(num-traits)) = 0.2.14
Provides: bundled(crate(once_cell)) = 1.7.2
Provides: bundled(crate(openssl)) = 0.10.33
Provides: bundled(crate(openssl-sys)) = 0.9.61
Provides: bundled(crate(parking_lot)) = 0.11.1
Provides: bundled(crate(parking_lot_core)) = 0.8.3
Provides: bundled(crate(paste)) = 0.1.18
Provides: bundled(crate(paste-impl)) = 0.1.18
Provides: bundled(crate(pkg-config)) = 0.3.19
Provides: bundled(crate(ppv-lite86)) = 0.2.10
Provides: bundled(crate(proc-macro-hack)) = 0.5.19
Provides: bundled(crate(proc-macro2)) = 1.0.26
Provides: bundled(crate(pwdchan)) = 0.1.0
Provides: bundled(crate(quote)) = 1.0.9
Provides: bundled(crate(rand)) = 0.8.3
Provides: bundled(crate(rand_chacha)) = 0.3.0
Provides: bundled(crate(rand_core)) = 0.6.2
Provides: bundled(crate(rand_hc)) = 0.3.0
Provides: bundled(crate(redox_syscall)) = 0.2.5
Provides: bundled(crate(remove_dir_all)) = 0.5.3
Provides: bundled(crate(ryu)) = 1.0.5
Provides: bundled(crate(scopeguard)) = 1.1.0
Provides: bundled(crate(serde)) = 1.0.125
Provides: bundled(crate(serde_derive)) = 1.0.125
Provides: bundled(crate(serde_json)) = 1.0.64
Provides: bundled(crate(slapd)) = 0.1.0
Provides: bundled(crate(slapi_r_plugin)) = 0.1.0
Provides: bundled(crate(smallvec)) = 1.6.1
Provides: bundled(crate(strsim)) = 0.8.0
Provides: bundled(crate(syn)) = 1.0.68
Provides: bundled(crate(synstructure)) = 0.12.4
Provides: bundled(crate(tempfile)) = 3.2.0
Provides: bundled(crate(textwrap)) = 0.11.0
Provides: bundled(crate(toml)) = 0.5.8
Provides: bundled(crate(unicode-width)) = 0.1.8
Provides: bundled(crate(unicode-xid)) = 0.2.1
Provides: bundled(crate(uuid)) = 0.8.2
Provides: bundled(crate(vcpkg)) = 0.2.11
Provides: bundled(crate(vec_map)) = 0.8.2
Provides: bundled(crate(version_check)) = 0.9.3
Provides: bundled(crate(wasi)) = 0.10.2+wasi_snapshot_preview1
Provides: bundled(crate(winapi)) = 0.3.9
Provides: bundled(crate(winapi-i686-pc-windows-gnu)) = 0.4.0
Provides: bundled(crate(winapi-x86_64-pc-windows-gnu)) = 0.4.0
Provides: bundled(crate(zeroize)) = 1.2.0
Provides: bundled(crate(zeroize_derive)) = 1.0.1
##### Bundled cargo crates list - END #####
BuildRequires: nspr-devel
BuildRequires: nss-devel >= 3.34
BuildRequires: openldap-devel
@ -119,8 +210,6 @@ BuildRequires: python%{python3_pkgversion}-policycoreutils
# For cockpit
%if %{use_cockpit}
BuildRequires: rsync
BuildRequires: npm
BuildRequires: nodejs
%endif
Requires: %{name}-libs = %{version}-%{release}
@ -193,6 +282,7 @@ BuildRequires: pcre-devel
BuildRequires: libtalloc-devel
BuildRequires: libevent-devel
BuildRequires: libtevent-devel
BuildRequires: make
Requires: krb5-libs
Requires: libevent
BuildRequires: systemd-devel
@ -205,33 +295,6 @@ Core libraries for the 389 Directory Server base package. These libraries
are used by the main package and the -devel package. This allows the -devel
package to be installed with just the -libs package and without the main package.
%if %{use_legacy}
%package legacy-tools
Summary: Legacy utilities for 389 Directory Server
Obsoletes: %{name} <= 1.4.0.9
Requires: 389-ds-base-libs = %{version}-%{release}
# for setup-ds.pl to support ipv6
Requires: perl(:MODULE_COMPAT_%(eval "`%{__perl} -V:version`"; echo $version))
%if %{use_Socket6}
Requires: perl-Socket6
%else
Requires: perl-Socket
%endif
Requires: perl-NetAddr-IP
# use_openldap assumes perl-Mozilla-LDAP is built with openldap support
Requires: perl-Mozilla-LDAP
# for setup-ds.pl
Requires: bind-utils
%global __provides_exclude_from %{_libdir}/%{pkgname}/perl
%global __requires_exclude perl\\((DSCreate|DSMigration|DSUpdate|DSUtil|Dialog|DialogManager|FileConn|Inf|Migration|Resource|Setup|SetupLog)
%{?perl_default_filter}
%description legacy-tools
Legacy (and deprecated) utilities for 389 Directory Server. This includes
the old account management and task scripts. These are deprecated in favour of
the dscreate, dsctl, dsconf and dsidm tools.
%endif
%package devel
Summary: Development libraries for 389 Directory Server
Requires: %{name}-libs = %{version}-%{release}
@ -267,7 +330,6 @@ Requires: iproute
Recommends: bash-completion
Requires: python%{python3_pkgversion}
Requires: python%{python3_pkgversion}-distro
Requires: python%{python3_pkgversion}-pytest
Requires: python%{python3_pkgversion}-ldap
Requires: python%{python3_pkgversion}-six
Requires: python%{python3_pkgversion}-pyasn1
@ -296,7 +358,7 @@ A cockpit UI Plugin for configuring and administering the 389 Directory Server
%endif
%prep
%setup -q -n %{name}-%{version}%{?prerel}
%autosetup -p1 -v -n %{name}-%{version}%{?prerel}
%if %{bundle_jemalloc}
%setup -q -n %{name}-%{version}%{?prerel} -T -D -b 3
@ -319,12 +381,6 @@ ASAN_FLAGS="--enable-asan --enable-debug"
RUST_FLAGS="--enable-rust"
%endif
%if %{use_legacy}
LEGACY_FLAGS="--enable-legacy --enable-perl"
%else
LEGACY_FLAGS="--disable-legacy --disable-perl"
%endif
%if !%{use_cockpit}
COCKPIT_FLAGS="--disable-cockpit"
%endif
@ -375,7 +431,7 @@ autoreconf -fiv
--with-systemdsystemconfdir=%{_sysconfdir}/systemd/system \
--with-systemdgroupname=%{groupname} \
--libexecdir=%{_libexecdir}/%{pkgname} \
$NSSARGS $ASAN_FLAGS $RUST_FLAGS $CLANG_FLAGS $LEGACY_FLAGS $COCKPIT_FLAGS \
$NSSARGS $ASAN_FLAGS $RUST_FLAGS $CLANG_FLAGS $COCKPIT_FLAGS \
--enable-cmocka \
--enable-perl
@ -425,14 +481,13 @@ mkdir -p $RPM_BUILD_ROOT/var/lock/%{pkgname}
# for systemd
mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/systemd/system/%{groupname}.wants
#remove libtool archives and static libs
find %{buildroot} -type f -name "*.la" -delete
find %{buildroot} -type f -name "*.a" -delete
%if %{use_legacy}
# make sure perl scripts have a proper shebang
sed -i -e 's|#{{PERL-EXEC}}|#!/usr/bin/perl|' $RPM_BUILD_ROOT%{_datadir}/%{pkgname}/script-templates/template-*.pl
%endif
# remove libtool archives and static libs
rm -f $RPM_BUILD_ROOT%{_libdir}/%{pkgname}/*.a
rm -f $RPM_BUILD_ROOT%{_libdir}/%{pkgname}/*.la
rm -f $RPM_BUILD_ROOT%{_libdir}/%{pkgname}/plugins/*.a
rm -f $RPM_BUILD_ROOT%{_libdir}/%{pkgname}/plugins/*.la
rm -f $RPM_BUILD_ROOT%{_libdir}/libsvrcore.a
rm -f $RPM_BUILD_ROOT%{_libdir}/libsvrcore.la
%if %{bundle_jemalloc}
pushd ../%{jemalloc_name}-%{jemalloc_ver}
@ -477,6 +532,41 @@ fi
# Reload our sysctl before we restart (if we can)
sysctl --system &> $output; true
# Gather the running instances so we can restart them
instbase="%{_sysconfdir}/%{pkgname}"
ninst=0
for dir in $instbase/slapd-* ; do
echo dir = $dir >> $output 2>&1 || :
if [ ! -d "$dir" ] ; then continue ; fi
case "$dir" in *.removed) continue ;; esac
basename=`basename $dir`
inst="%{pkgname}@`echo $basename | sed -e 's/slapd-//g'`"
echo found instance $inst - getting status >> $output 2>&1 || :
if /bin/systemctl -q is-active $inst ; then
echo instance $inst is running >> $output 2>&1 || :
instances="$instances $inst"
else
echo instance $inst is not running >> $output 2>&1 || :
fi
ninst=`expr $ninst + 1`
done
if [ $ninst -eq 0 ] ; then
echo no instances to upgrade >> $output 2>&1 || :
exit 0 # have no instances to upgrade - just skip the rest
else
# restart running instances
echo shutting down all instances . . . >> $output 2>&1 || :
for inst in $instances ; do
echo stopping instance $inst >> $output 2>&1 || :
/bin/systemctl stop $inst >> $output 2>&1 || :
done
for inst in $instances ; do
echo starting instance $inst >> $output 2>&1 || :
/bin/systemctl start $inst >> $output 2>&1 || :
done
fi
%preun
if [ $1 -eq 0 ]; then # Final removal
# remove instance specific service files/links
@ -497,72 +587,8 @@ fi
%postun snmp
%systemd_postun_with_restart %{pkgname}-snmp.service
%if %{use_legacy}
%post legacy-tools
# START UPGRADE SCRIPT
if [ -n "$DEBUGPOSTTRANS" ] ; then
output=$DEBUGPOSTTRANS
output2=${DEBUGPOSTTRANS}.upgrade
else
output=/dev/null
output2=/dev/null
fi
# find all instances
instances="" # instances that require a restart after upgrade
ninst=0 # number of instances found in total
echo looking for instances in %{_sysconfdir}/%{pkgname} > $output 2>&1 || :
instbase="%{_sysconfdir}/%{pkgname}"
for dir in $instbase/slapd-* ; do
echo dir = $dir >> $output 2>&1 || :
if [ ! -d "$dir" ] ; then continue ; fi
case "$dir" in *.removed) continue ;; esac
basename=`basename $dir`
inst="%{pkgname}@`echo $basename | sed -e 's/slapd-//g'`"
echo found instance $inst - getting status >> $output 2>&1 || :
if /bin/systemctl -q is-active $inst ; then
echo instance $inst is running >> $output 2>&1 || :
instances="$instances $inst"
else
echo instance $inst is not running >> $output 2>&1 || :
fi
ninst=`expr $ninst + 1`
done
if [ $ninst -eq 0 ] ; then
echo no instances to upgrade >> $output 2>&1 || :
exit 0 # have no instances to upgrade - just skip the rest
fi
# shutdown all instances
echo shutting down all instances . . . >> $output 2>&1 || :
for inst in $instances ; do
echo stopping instance $inst >> $output 2>&1 || :
/bin/systemctl stop $inst >> $output 2>&1 || :
done
echo remove pid files . . . >> $output 2>&1 || :
/bin/rm -f /var/run/%{pkgname}*.pid /var/run/%{pkgname}*.startpid
# do the upgrade
echo upgrading instances . . . >> $output 2>&1 || :
DEBUGPOSTSETUPOPT=`/usr/bin/echo $DEBUGPOSTSETUP | /usr/bin/sed -e "s/[^d]//g"`
if [ -n "$DEBUGPOSTSETUPOPT" ] ; then
%{_sbindir}/setup-ds.pl -$DEBUGPOSTSETUPOPT -u -s General.UpdateMode=offline >> $output 2>&1 || :
else
%{_sbindir}/setup-ds.pl -u -s General.UpdateMode=offline >> $output 2>&1 || :
fi
# restart instances that require it
for inst in $instances ; do
echo restarting instance $inst >> $output 2>&1 || :
/bin/systemctl start $inst >> $output 2>&1 || :
done
#END UPGRADE
%endif
exit 0
%files
%if %{bundle_jemalloc}
%doc LICENSE LICENSE.GPLv3+ LICENSE.openssl README.jemalloc
@ -592,11 +618,11 @@ exit 0
%{_mandir}/man1/logconv.pl.1.gz
%{_bindir}/pwdhash
%{_mandir}/man1/pwdhash.1.gz
%{_bindir}/readnsstate
%{_mandir}/man1/readnsstate.1.gz
#%caps(CAP_NET_BIND_SERVICE=pe) {_sbindir}/ns-slapd
%{_sbindir}/ns-slapd
%{_mandir}/man8/ns-slapd.8.gz
%{_sbindir}/openldap_to_ds
%{_mandir}/man8/openldap_to_ds.8.gz
%{_libexecdir}/%{pkgname}/ds_systemd_ask_password_acl
%{_mandir}/man5/99user.ldif.5.gz
%{_mandir}/man5/certmap.conf.5.gz
@ -634,11 +660,9 @@ exit 0
%{_libdir}/libsvrcore.so
%{_libdir}/%{pkgname}/libslapd.so
%{_libdir}/%{pkgname}/libns-dshttpd.so
%{_libdir}/%{pkgname}/libsds.so
%{_libdir}/%{pkgname}/libldaputil.so
%{_libdir}/pkgconfig/svrcore.pc
%{_libdir}/pkgconfig/dirsrv.pc
%{_libdir}/pkgconfig/libsds.pc
%files libs
%doc LICENSE LICENSE.GPLv3+ LICENSE.openssl README.devel
@ -646,7 +670,6 @@ exit 0
%{_libdir}/libsvrcore.so.*
%{_libdir}/%{pkgname}/libslapd.so.*
%{_libdir}/%{pkgname}/libns-dshttpd-*.so
%{_libdir}/%{pkgname}/libsds.so.*
%{_libdir}/%{pkgname}/libldaputil.so.*
%{_libdir}/%{pkgname}/librewriters.so*
%if %{bundle_jemalloc}
@ -656,117 +679,6 @@ exit 0
%{_libdir}/%{pkgname}/librsds.so
%endif
%if %{use_legacy}
%files legacy-tools
%doc LICENSE LICENSE.GPLv3+ LICENSE.openssl README.devel
%{_bindir}/infadd
%{_mandir}/man1/infadd.1.gz
%{_bindir}/ldif
%{_mandir}/man1/ldif.1.gz
%{_bindir}/migratecred
%{_mandir}/man1/migratecred.1.gz
%{_bindir}/mmldif
%{_mandir}/man1/mmldif.1.gz
%{_bindir}/rsearch
%{_mandir}/man1/rsearch.1.gz
%{_libexecdir}/%{pkgname}/ds_selinux_enabled
%{_libexecdir}/%{pkgname}/ds_selinux_port_query
%config(noreplace)%{_sysconfdir}/%{pkgname}/config/template-initconfig
%{_mandir}/man5/template-initconfig.5.gz
%{_datadir}/%{pkgname}/properties/*.res
%{_datadir}/%{pkgname}/script-templates
%{_datadir}/%{pkgname}/updates
%{_sbindir}/ldif2ldap
%{_mandir}/man8/ldif2ldap.8.gz
%{_sbindir}/bak2db
%{_mandir}/man8/bak2db.8.gz
%{_sbindir}/db2bak
%{_mandir}/man8/db2bak.8.gz
%{_sbindir}/db2index
%{_mandir}/man8/db2index.8.gz
%{_sbindir}/db2ldif
%{_mandir}/man8/db2ldif.8.gz
%{_sbindir}/dbverify
%{_mandir}/man8/dbverify.8.gz
%{_sbindir}/ldif2db
%{_mandir}/man8/ldif2db.8.gz
%{_sbindir}/restart-dirsrv
%{_mandir}/man8/restart-dirsrv.8.gz
%{_sbindir}/start-dirsrv
%{_mandir}/man8/start-dirsrv.8.gz
%{_sbindir}/status-dirsrv
%{_mandir}/man8/status-dirsrv.8.gz
%{_sbindir}/stop-dirsrv
%{_mandir}/man8/stop-dirsrv.8.gz
%{_sbindir}/upgradedb
%{_mandir}/man8/upgradedb.8.gz
%{_sbindir}/vlvindex
%{_mandir}/man8/vlvindex.8.gz
%{_sbindir}/monitor
%{_mandir}/man8/monitor.8.gz
%{_sbindir}/dbmon.sh
%{_mandir}/man8/dbmon.sh.8.gz
%{_sbindir}/dn2rdn
%{_mandir}/man8/dn2rdn.8.gz
%{_sbindir}/restoreconfig
%{_mandir}/man8/restoreconfig.8.gz
%{_sbindir}/saveconfig
%{_mandir}/man8/saveconfig.8.gz
%{_sbindir}/suffix2instance
%{_mandir}/man8/suffix2instance.8.gz
%{_sbindir}/upgradednformat
%{_mandir}/man8/upgradednformat.8.gz
%{_mandir}/man1/dbgen.pl.1.gz
%{_bindir}/repl-monitor
%{_mandir}/man1/repl-monitor.1.gz
%{_bindir}/repl-monitor.pl
%{_mandir}/man1/repl-monitor.pl.1.gz
%{_bindir}/cl-dump
%{_mandir}/man1/cl-dump.1.gz
%{_bindir}/cl-dump.pl
%{_mandir}/man1/cl-dump.pl.1.gz
%{_bindir}/dbgen.pl
%{_mandir}/man8/bak2db.pl.8.gz
%{_sbindir}/bak2db.pl
%{_sbindir}/cleanallruv.pl
%{_mandir}/man8/cleanallruv.pl.8.gz
%{_sbindir}/db2bak.pl
%{_mandir}/man8/db2bak.pl.8.gz
%{_sbindir}/db2index.pl
%{_mandir}/man8/db2index.pl.8.gz
%{_sbindir}/db2ldif.pl
%{_mandir}/man8/db2ldif.pl.8.gz
%{_sbindir}/fixup-linkedattrs.pl
%{_mandir}/man8/fixup-linkedattrs.pl.8.gz
%{_sbindir}/fixup-memberof.pl
%{_mandir}/man8/fixup-memberof.pl.8.gz
%{_sbindir}/ldif2db.pl
%{_mandir}/man8/ldif2db.pl.8.gz
%{_sbindir}/migrate-ds.pl
%{_mandir}/man8/migrate-ds.pl.8.gz
%{_sbindir}/ns-accountstatus.pl
%{_mandir}/man8/ns-accountstatus.pl.8.gz
%{_sbindir}/ns-activate.pl
%{_mandir}/man8/ns-activate.pl.8.gz
%{_sbindir}/ns-inactivate.pl
%{_mandir}/man8/ns-inactivate.pl.8.gz
%{_sbindir}/ns-newpwpolicy.pl
%{_mandir}/man8/ns-newpwpolicy.pl.8.gz
%{_sbindir}/remove-ds.pl
%{_mandir}/man8/remove-ds.pl.8.gz
%{_sbindir}/schema-reload.pl
%{_mandir}/man8/schema-reload.pl.8.gz
%{_sbindir}/setup-ds.pl
%{_mandir}/man8/setup-ds.pl.8.gz
%{_sbindir}/syntax-validate.pl
%{_mandir}/man8/syntax-validate.pl.8.gz
%{_sbindir}/usn-tombstone-cleanup.pl
%{_mandir}/man8/usn-tombstone-cleanup.pl.8.gz
%{_sbindir}/verify-db.pl
%{_mandir}/man8/verify-db.pl.8.gz
%{_libdir}/%{pkgname}/perl
%endif
%files snmp
%doc LICENSE LICENSE.GPLv3+ LICENSE.openssl README.devel
%config(noreplace)%{_sysconfdir}/%{pkgname}/config/ldap-agent.conf
@ -794,6 +706,299 @@ exit 0
%endif
%changelog
* Mon Sep 20 2021 Mark Reynolds <mreynolds@redhat.com> - 1.4.4.17-1
- Bump version to 1.4.4.17
- Issue 4927 - rebase lib389 and cockpit in 1.4.4
- Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
- Issue 4912 - Account Policy plugin does not set the config entry DN
- Issue 4796 - Add support for nsslapd-state to CLI & UI
- Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
- Issue 4169 - backport lib389 cert list fix
- Issue 4912 - dsidm command crashing when account policy plugin is enabled
- Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
- Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
- Issue - 4696 - Password hash upgrade on bind (#4840)
- Issue 4875 - CLI - Add some verbosity to installer
- Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
- Issue 4734 - import of entry with no parent warning (#4735)
- Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
- Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
- Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
- Issue 4736 - lib389 - fix regression in certutil error checking
- Issue 4736 - CLI - Errors from certutil are not propagated
- Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
- Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
- Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
- Issue 4656 - (2nd) Remove problematic language from UI/CLI/lib389
- Issue 4262 - Fix Index out of bound in fractional test (#4828)
- Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
- Issue 4656 - remove problematic language from ds-replcheck
- Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
- Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
- Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
- Issue 4506 - Improve SASL logging
- Issue 4093 - Fix MEP test case
- Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
- Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
- Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
- Issue 4447 - Crash when the Referential Integrity log is manually edited
- Issue 4773 - Add CI test for DNA interval assignment
- Issue 4750 - Fix compiler warning in retrocl (#4751)
* Sun May 30 2021 Mark Reynolds <mreynolds@redhat.com> - 1.4.4.16-1
- Bump version to 1.4.4.16
- Issue 4778 - RFE - Allow setting TOD for db compaction and add task
- Issue 4623 - RFE - Monitor the current DB locks (#4762)
- Issue 4725 - RFE - Update the password policy to support a Temporary Password Rules (#4727)
- Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
- Issue 4773 - RFE - Enable interval feature of DNA plugin
- Issue 4719 - lib389 - fix dsconf passthrough auth bugs
- Issue 4764 - replicated operation sometime checks ACI (#4783)
- Issue 4781 - There are some typos in man-pages
- Issue 3555 - Fix UI audit issue
- Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
- Issue 4725 - Fix compiler warnings
- Issue 4770 - Lower FIPS logging severity
- Issue 4759 - Fix coverity issue (#4760)
- Issue 4742 - UI - should always use LDAPI path when calling CLI
- Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
- Issue 4711 - SECURITY FIX - SIGSEV with sync_repl (#4738)
- Issue 4637 - ndn cache leak (#4724)
- Issue 4577 - Fix ASAN flags in specfile
* Fri May 21 2021 Christian Heimes <cheimes@redhat.com> - 1.4.4.15-4
- Apply DNA plugin patch
* Thu May 20 2021 Christian Heimes <cheimes@redhat.com> - 1.4.4.15-3
- Enable interval feature of DNA plugin (resolves: rhbz#1962671)
* Fri May 07 2021 Viktor Ashirov <vashirov@redhat.com> - 1.4.4.15-2
- Rebuilt to fix NVR
* Fri Apr 09 2021 Simon Pichugin <spichugi@redhat.com> - 1.4.4.15-1.1
- Add Rust bundled Provides and Update License
* Tue Apr 06 2021 Thierry Bordaz <tbordaz@redhat.com> 1.4.4.15-1
- Bump version to 1.4.4.15
- Issue 4700 - Regression in winsync replication agreement (#4712)
- Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
- Issue 4706 - negative wtime in access log for CMP operations
* Fri Mar 19 2021 Thierry Bordaz <tbordaz@redhat.com> 1.4.4.14-1
- Bump version to 1.4.4.14
- Issue 4671 - UI - Fix browser crashes
- Issue 4229 - Fix Rust linking
- Issue 4658 - monitor - connection start date is incorrect
- Issue 4656 - Make replication CLI backwards compatible with role name change
- Issue 4656 - Remove problematic language from UI/CLI/lib389
- Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
- Issue 4661 - RFE - allow importing openldap schemas (#4662)
- Issue 4659 - restart after openldap migration to enable plugins (#4660)
- Issue 4663 - CLI - unable to add objectclass/attribute without x-origin
- Issue 4169 - UI - updates on the tuning page are not reflected in the UI
- Issue 4588 - BUG - unable to compile without xcrypt (#4589)
- Issue 4513 - Fix replication CI test failures (#4557)
- Issue 4646 - CLI/UI - revise DNA plugin management
- Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
- Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
- Issue 4513 - CI - make acl ip address tests more robust
- Issue 4619 - remove pytest requirement from lib389
- Issue 4615 - log message when psearch first exceeds max threads per conn
* Fri Feb 26 2021 Alexander Bokovoy <abokovoy@redhat.com> 1.4.4.13-2
- Rebuild now that Dogtag is fixed to work with a fix to Issue 4609
* Fri Feb 12 2021 Mark Reynolds <mreynolds@redhat.com> - 1.4.4.13-1
- Bump version to 1.4.4.13
- Update dscontainer (#4564)
- Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
- Issue 4324 - Some architectures the cache line size file does not exist
- Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
- Issue 4609 - CVE - info disclosure when authenticating
* Tue Feb 2 2021 Mark Reynolds <mreynolds@redhat.com> - 1.4.4.12-1
- Bump version to 1.4.4.12
- Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
- Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
- Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
- Issue 4396 - Minor memory leak in backend (#4558) (#4572)
- Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
- Issue 5442 - Search results are different between RHDS10 and RHDS11
* Mon Jan 25 2021 Mark Reynolds <mreynolds@redhat.com> - 1.4.4.11-1
- Bump version to 1.4.4.11
- Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
- Issue 4513 - Fix schema test and lib389 task module (#4514)
- Issue 4535 - lib389 - Fix log function in backends.py
- Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
* Thu Jan 14 2021 Mark Reynolds <mreynolds@redhat.com> - 1.4.4.10-1
- Bump version to 1.4.4.10
- Issue 4381 - RFE - LDAPI authentication DN rewritter
- Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
- Issue 4513 - CI Tests - fix test failures
- Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
- Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
- Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
- Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
- Issue 4506 - BUG - Fix bounds on fd table population (#4520)
- Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
- Issue 4384 - Separate eventq into REALTIME and MONOTONIC
- Issue 4418 - ldif2db - offline. Warn the user of skipped entries
- Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
- Issue 4414 - disk monitoring - prevent division by zero crash
- Issue 4507 - Improve csngen testing task (#4508)
- Issue 4498 - BUG - entryuuid replication may not work (#4503)
- Issue 4504 - Fix pytest test_dsconf_replication_monitor (#4505)
- Issue 4480 - Unexpected info returned to ldap request (#4491)
- Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
- Issue 4500 - Add cockpit enabling to dsctl
- Issue 4272 - RFE - add support for gost-yescrypt for hashing passwords (#4497)
- Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
- Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
- Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
- Issue 4483 - heap-use-after-free in slapi_be_getsuffix
- Issue 4224 - cleanup specfile after libsds removal
- Issue 4421 - Unable to build with Rust enabled in closed environment
- Issue 4229 - RFE - Improve rust linking and build performance (#4474)
- Issue 4464 - RFE - clang with ds+asan+rust
- Issue 4224 - openldap can become confused with entryuuid
- Issue 4313 - improve tests and improve readme re refdel
- Issue 4313 - fix potential syncrepl data corruption
- Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt (#4437)
- Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
- Issue 4446 - RFE - openldap password hashers
- Issue 4403 - RFE - OpenLDAP pw hash migration tests (#4408)
- Issue 4410 -RFE - ndn cache with arc in rust
- Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
- Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
* Mon Nov 30 2020 Mark Reynolds <mreynolds@redhat.com> - 1.4.4.9-1
- Bump version to 1.4.4.9
- Issue 4105 - Remove python.six (fix regression)
- Issue 4384 - Use MONOTONIC clock for all timing events and conditions
- Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
- Issue 4460 - BUG - lib389 should use system tls policy
- Issue 3657 - Add options to dsctl for dsrc file
- Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
- Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
- Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
- Issue 4105 - Remove python.six from lib389 (#4456)
- Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
- Issue 2054 - do not add referrals for masters with different data generation #2054 (#4427)
- Issue 2058 - Add keep alive entry after on-line initialization - second version (#4399)
- Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
- Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
- Issue 4428 - Paged Results with Chaining Test Case
- Issue 4383 - Do not normalize escaped spaces in a DN
- Issue 4432 - After a failed online import the next imports are very slow
- Issue 4404 - build problems at alpine linux
- Issue 4316 - performance search rate: useless poll on network send callback (#4424)
- Issue 4429 - NULL dereference in revert_cache()
- Issue 4391 - DSE config modify does not call be_postop (#4394)
- Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
* Sat Nov 7 2020 Mark Reynolds <mreynolds@redhat.com> - 1.4.4.8-1
- Bump version to 1.4.4.8
- Issue 4415 - unable to query schema if there are extra parenthesis
- Issue 4176 - CL trimming causes high CPU
* Wed Oct 28 2020 Mark Reynolds <mreynolds@redhat.com> - 1.4.4.7-1
- Bump version to 1.4.4.7
- Issue 2526 - revert backend validation check
- Issue 4262 - more perl removal cleanup
- Issue 2526 - retrocl backend created out of order
* Mon Oct 26 2020 Mark Reynolds <mreynolds@redhat.com> - 1.4.4.6-1
- Bump version to 1.4.4.6
- Issue 4262 - Remove legacy tools subpackage (final cleanup)
- Issue 4262 - Remove legacy tools subpackage (restart instances after rpm install)
- Issue 4262 - Remove legacy tools subpackage
- Issue 2526 - revert API change in slapi_be_getsuffix()
- Issue 4363 - Sync repl: per thread structure was incorrectly initialized (#4395)
- Issue 4392 - Update create_test.py
- Issue 2820 - Fix CI tests (#4365)
- Issue 2526 - suffix management in backends incorrect
- Issue 4389 - errors log with incorrectly formatted message parent_update_on_childchange
- Issue 4295 - Fix a closing quote issue (#4386)
- Issue 1199 - Misleading message in access log for idle timeout (#4385)
- Issue 3600 - RFE - openldap migration tooling (#4318)
- Issue 4176 - import ldif2cl task should not close all changelogs
- Issue 4159 - Healthcheck code DSBLE0002 not returned on disabled suffix
- Issue 4379 - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service (#4380)
- Issue 4329 - Sync repl - if a serie of updates target the same entry then the cookie get wrong changenumber (#4356)
- Issue 3555 - Fix npm audit issues (#4370)
- Issue 4372 - BUG - Chaining DB did not validate bind mech parameters (#4374)
- Issue 4334 - RFE - Task timeout may cause larger dataset imports to fail (#4359)
- Issue 4361 - RFE - add - dscreate --advanced flag to avoid user confusion
- Issue 4368 - ds-replcheck crashes when processing glue entries
- Issue 4366 - lib389 - Fix account status inactivity checks
- Issue 4265 - UI - Make the secondary plugins read-only (#4364)
- Issue 4360 - password policy max sequence sets is not working as expected
- Issue 4348 - Add tests for dsidm
- Issue 4350 - One line, fix invalid type error in tls_cacertdir check (#4358)
* Mon Oct 5 2020 Mark Reynolds <mreynolds@redhat.com> - 1.4.4.5-1
- Bump version to 1.4.4.5
- Issue 4347 - log when server requires a restart for a plugin to become active (#4352)
- Issue 4297 - On ADD replication URP issue internal searches with filter containing unescaped chars (#4355)
- Issue 4350 - dsrc should warn when tls_cacertdir is invalid (#4353)
- Issue 4351 - improve generated sssd.conf output (#4354)
- Issue 4345 - import self sign cert doc comment (#4346)
- Issue 4342 - UI - additional fixes for creation instance modal
- Issue 3996 - Add dsidm rename option (#4338)
- Issue 4258 - Add server version information to UI
- Issue 4326 - entryuuid fixup did not work correctly (#4328)
- Issue 4209 - RFE - add bootstrap credentials to repl agreement (upgrade update)
- Issue 4209 - RFE - add bootstrap credentials to repl agreement (UI update)
- Issue 4209 - RFE - add bootstrap credentials to repl agreement
- Issue 4209 - RFE - add bootstrap credentials to repl agreement
- Issue 4322 - Fix a source link (#4332)
- Issue 4319 - Performance search rate: listener may be erroneously waken up (#4323)
- Issue 4322 - Updates old reference to pagure issue (#4321)
- Issue 4327 - Update issue templates and README.md
- Ticket 51190 - SyncRepl plugin provides a wrong cookie
- Ticket 51121 - Remove hardcoded changelog file name
- Ticket 51253 - dscreate should LDAPI to bootstrap the config
- Ticket 51177 - fix warnings
- Ticket 51228 - Fix lock/unlock wording and lib389 use of methods
- Ticket 51247 - Container Healthcheck failure
- Ticket 51177 - on upgrade configuration handlers
- Ticket 51229 - Server Settings page gets into an unresponsive state
- Ticket 51189 - integrate changelog in main database - update CLI
- Ticket 49562 - integrate changelog database to main database
- Ticket 51165 - Set the operation start time for extended ops
- Ticket 50933 - Fix OID change between 10rfc2307 and 10rfc2307compat
- Ticket 51228 - Clean up dsidm user status command
- Ticket 51233 - ds-replcheck crashes in offline mode
- Ticket 50260 - Fix test according to #51222 fix
- Ticket 50952 - SSCA lacks basicConstraint:CA
- Ticket 50933 - enable 2307compat.ldif by default
- Ticket 50933 - Update 2307compat.ldif
- Ticket 51102 - RFE - ds-replcheck - make online timeout configurable
- Ticket 51222 - It should not be allowed to delete Managed Entry manually
- Ticket 51129 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version
- Ticket 49487 - Restore function that incorrectly removed by last patch
- Ticket 49481 - remove unused or unnecessary database plugin functions
- Ticket 50746 - Add option to healthcheck to list all the lint reports
- Ticket 49487 - Cleanup unused code
- Ticket 51086 - Fix instance name length for interactive install
- Ticket 51136 - JSON Error output has redundant messages
- Ticket 51059 - If dbhome directory is set online backup fails
- Ticket 51000 - Separate the BDB backend monitors
- Ticket 49300 - entryUSN is duplicated after memberOf operation
- Ticket 50984 - Fix disk_mon_check_diskspace types
- Ticket 50791 - Healthcheck to find notes=F
<<<<<<< HEAD
=======
* Tue Sep 29 22:52:34 CEST 2020 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.4.4.4-1.4
- Rebuilt for libevent 2.1.12 (attempt #2)
* Tue Sep 29 20:25:49 CEST 2020 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.4.4.4-1.3
- Rebuilt for libevent 2.1.12
>>>>>>> 1aab708... Bump version to 1.4.4.6
* Thu Aug 27 2020 Josef Řídký <jridky@redhat.com> - 1.4.4.4-1.2
- Rebuilt for new net-snmp release

View file

@ -1,2 +1,2 @@
SHA512 (389-ds-base-1.4.4.17.tar.bz2) = ee06ff24c7b0edaea25b286f195b44a70d000aee7ca6f8c4c4b2be9c5e357f000d7c9242863e54f3e01dc4600543c9c00e4d345dbf65539179a2428e94b3287e
SHA512 (jemalloc-5.2.1.tar.bz2) = 0bbb77564d767cef0c6fe1b97b705d368ddb360d55596945aea8c3ba5889fbce10479d85ad492c91d987caacdbbdccc706aa3688e321460069f00c05814fae02
SHA512 (389-ds-base-1.4.4.4.tar.bz2) = e819a736ba30a1b2c35a180dac9815b7f90d1de32050c87f4fd996596ab466b603deca3ab0701eaf4753e820a23dc53f67f68a35397bbbbe41cf655b4a679bef