Compare commits

...
Sign in to create a new pull request.

14 commits

Author SHA1 Message Date
Mark Reynolds
9db88117a7 Bump version to 2.0.17
Issue 5534 - Add copyright text to the repository files
Issue 5532 - Make db compaction TOD day more robust.
Issue 5529 - UI - Fix npm vulnerability in loader-utils
Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
Issue 5162 - RFE - CLI allow adding CA certificate bundles
Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)
Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
Issue 5502 - RFE - Add option to display entry attributes in audit log
Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)
Issue 5495 - RFE - skip dds during migration. (#5496)
Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
Issue 5368 - Retro Changelog trimming does not work (#5486)
Issue 5487 - Fix various issues with logconv.pl
Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
Issue 4776 - Fix entryuuid fixup task (#5483)
Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
Issue 3061 - RFE - Add password policy debug log level
Issue 5462 - RFE - add missing default indexes (#5464)
Issue 4324 - Revert recursive pthread mutex usage in factory.c
Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264)
Issue 4324 - Revert recursive pthread mutex change (#5463)
Issue 5305 - OpenLDAP version autodetection doesn't work
Issue 5032 - Fix OpenLDAP version check (#5091)
Issue 5032 - OpenLDAP is not shipped with non-threaded version of libldap (#5033) (#5456)
Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
Issue 5453 - UI/CLI - Changing Root DN breaks UI
Issue 5446 - Fix some covscan issues (#5451)
Issue 5294 - Report Portal 5 is not processing an XML file with (#5358)
Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
Issue 4308 - checking if an entry is a referral is expensive
Issue 5447 - UI - add NDN max cache size to UI
Issue 5443 - UI - disable save button while saving
Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)
Issue 5413 - Allow only one MemberOf fixup task at a time
Issue 5158 - entryuuid fixup tasks fails in replicated topology (#5439)
Issue 4592 - dscreate error with custom dir_path (#5434)
Issue 5397 - Fix memory leak with the intent filter
Issue 5356 - For RUST build update the default password storage scheme
Issue 5423 - Fix missing 'not' in description
Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
Issue 3903 - fix repl keep alive event interval
Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
Issue 5415 - Hostname when set to localhost causing failures in other tests
Issue 5412 - lib389 - do not set backend name to lowercase
Issue 3903 - keep alive update event starts too soon
Issue 5397 - Fix various memory leaks
Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
Issue 3903 - Supplier should do periodic updates
Issue 5392 - dscreate fails when using alternative ports in the SELinux hi_reserved_port_t label range
Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
Issue 5383 - UI - Various fixes and RFE's for UI
Issue 4656 - Remove problematic language from source code
Issue 5380 - Separate cleanAllRUV code into new file
Issue 5322 - optime & wtime on rejected connections is not properly set
Issue 5375 - CI - disable TLS hostname checking
Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
Issue 5371 - Update npm and cargo packages
Issue 3069 - Support ECDSA private keys for TLS (#5365)
2022-11-18 10:54:06 -05:00
Mark Reynolds
8d66a29c9a Bump version to 2.0.16
Issue 5221 - fix covscan (#5359)
Issue 4984 - BUG - pid file handling (#4986)
Issue 5353 - CLI - dsconf backend export breaks with multiple backends
Issue 5345 - BUG - openldap migration fails when ppolicy is active (#5347)
Issue 5323 - BUG - improve skipping of monitor db (#5340)
Issue 5323 - BUG - Fix issue in mdb tests with monitor (#5326)
Issue 5329 - Improve replication extended op logging
Issue 5343 - Various improvements to winsync
Issue 4932 - CLI - add parser aliases to long arg names
Issue 5332 - BUG - normalise filter as intended
Issue 5126 - Memory leak in slapi_ldap_get_lderrno (#5153)
Issue 5311 - Missing Requires for acl in the spec file
Issue 5333 - 389-ds-base fails to build with Python 3.11
Issue 5170 - BUG - incorrect behaviour of filter test (#5315)
Issue 5324 - plugin acceptance test needs hardening
Issue 5323 - BUG - migrating database for monitoring interface lead to crash (#5321)
Issue 5304 - Need a compatibility option about sub suffix handling (#5310)
Issue 5302 - Release tarballs don't contain cockpit webapp
Issue 5237 - audit-ci: Cannot convert undefined or null to object
Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
Issue 4970 - Add support for recursively deleting subentries
Issue 5284 - Replication broken after password change (#5286)
Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
Issue 5170 - RFE - Filter optimiser (#5171)
Issue 5276 - CLI - improve task handling
Issue 5273 - CLI - add arg completer for instance name
Issue 2893 - CLI - dscreate - add options for setting up replication
Issue 4866 - CLI - when enabling replication set changelog trimming by default
Issue 5241 - UI - Add account locking missing functionality (#5251)
Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
Issue 5098 - Fix cherry-pick error
Issue 4904 - Fix various small issues
Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
Issue 5210 - Python undefined names in lib389
Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'
Issue 5242 - SECURITY_FIX - Craft message may crash the server (#5243)
Issue 5234 - UI - rename Users and Groups tab
Issue 5217 - Simplify instance creation and administration by non root user (#5224)
Issue 5227 - UI - No way to move back to Get Started step (#5233)
2022-07-05 17:01:57 -04:00
Viktor Ashirov
46c1f7e12d Remove unused relprefix and prerel macros that break rpmdev-bumpspec logic
During mass rebuilds NVR is bumped by rpmdev-bumpspec. But it can't
handle complex Release: fields such as ours, that has  %{prerel} and
%{relprefix} macros. It adds .1 after the %{dist} macro instead of
increasing the release number.
The issue for rpmdev-bumpspec is unsolved since 2012:
https://pagure.io/rpmdevtools/issue/18

These macros are unused by us and only cause issues when NVR is bumped.
So let's remove them.
2022-06-02 10:34:20 +02:00
Viktor Ashirov
1a1a14d9df Update tests.yml
Change upstream repo URL and remove 389-ds-base-legacy-tools package
that is no longer present.
2022-06-02 10:05:13 +02:00
Mark Reynolds
525cd4bba5 Bump version to 2.0.15
Issue 5230 - Race condition in RHDS disk monitoring functions
Issue 4299 - UI - Add CoS funtionality (#5196)
Issue 5225 - UI - impossible to manually set entry cache
Issue 5186 - UI - Fix SASL Mapping regex test feature
Issue 5221 - User with expired password can still login with full privledges
Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
Issue 5200 - dscontainer should use environment variables with DS_ prefix
Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
Issue 5188 - UI - LDAP editor - add entry and group types
Issue 5184 - memberOf does not work correctly with multiple include scopes
Issue 5162 - BUG - error on importing chain files (#5164)
Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)
Issue 5122 - dsconf instance backend suffix set doesn't accept backend name (#5178)
Issue 5160 - BUG - x- prefix in descr-oid can confuse oid parser (#5161)
Issue 5098 - Multiple issues around replication and CI test test_online_reinit_may_hang (#5109)
Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
Issue 5137 - RFE - improve sssd conf output (#5138)
Issue 5145 - Fix covscan errors
Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
Issue 4299 - UI - Add Role funtionality (#5163)
Issue 5050 - bdb bulk op fails if fs page size > 8K (#5150)
Issue 4775 - Add entryuuid CLI and Fixup (#4776)
Issue 5142 - CLI - dsctl dbgen is broken
Issue 4299 - UI - fix minor issues with ldap editor (table view)
Issue 4299 - UI - fix minor issues with ldap editor
Issue 5103 - UI - Add support for TPR to web console (#5111)
2022-03-23 15:27:44 -04:00
Mark Reynolds
1805ece200 Bump version to 2.0.14-1
Issue 5127 - ds_selinux_restorecon.sh: always exit 0
Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
Issue 4992 - BUG - slapd.socket container fix (#4993)
Issue 5079 - BUG - multiple ways to specific primary (#5087)
Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
Issue 5135 - UI - Disk monitoring threshold does update properly
Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
2022-01-27 16:23:20 -05:00
Adam Williamson
d199facc72 Add patch file missing from last commit 2022-01-27 12:31:59 -08:00
Adam Williamson
c4c22eb1f9 Backport #5141, fix startup when directory doesn't exist (#2047323) 2022-01-27 11:25:30 -08:00
Viktor Ashirov
db9f14d264 Use Rust 2018 edition for concread on EL8 2022-01-27 11:25:25 -08:00
Mark Reynolds
48eb2c4121 Bump version to 2.0.13
Issue 5132 - Update Rust crate lru to fix CVE
Issue 3555 - UI - fix audit issue with npm nanoid
Issue 4299 - UI - Add ACI editing features
Issue 4299 - UI - LDAP editor - add "edit" and "rename" functionality
Issue 5127 - run restorecon on /dev/shm at server startup
Issue 5124 - dscontainer fails to create an instance
Issue 4312 - fix compiler warnings
Issue 5115 - AttributeError: type object 'build_manpages' has no attribute 'build_manpages'
Issue 4312 - performance search rate: contention on global monitoring counters (#4940)
Issue 5105 - During a bind, if the target entry is not reachable the operation may complete without sending result (#5107)
Issue 5095 - sync-repl with openldap may send truncated syncUUID (#5099)
Issue 3584 - Add is_fips check to password tests (#5100)
Issue 5074 - retro changelog cli updates (#5075)
Issue 4994 - Revert retrocl dependency workaround (#4995)
2022-01-24 13:58:17 -05:00
Mark Reynolds
aa0fb5ed9f Bump version to 2.0.12-1
Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
Issue 5046 - BUG - update concread (#5047)
Issue 5043 - BUG - Result must be used compiler warning (#5045)
Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
Issue 4931 - RFE: dsidm - add creation of service accounts
Issue 5024 - BUG - windows ro replica sigsegv (#5027)
Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
2021-12-16 17:31:00 -05:00
Mark Reynolds
7a526f2ab2 Bump version to 2.0.11
Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
Issue 5014 - UI - Add group creation to LDAP editor
Issue 5006 - UI - LDAP editor tree not being properly updated
Issue 5001 - Update CI test for new availableSASLMechs attribute
Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
Issue 5001 - Fix next round of UI bugs:
Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
Issue 4978 - use more portable python command for checking containers
Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
Issue 4978 - make installer robust
Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
Issue 4973 - update snmp to use /run/dirsrv for PID file
Issue 4962 - Fix various UI bugs - Plugins (#4969)
Issue 4973 - installer changes permissions on /run
Issue 4092 - systemd-tmpfiles warnings
Issue 4956 - Automember allows invalid regex, and does not log proper error
Issue 4731 - Promoting/demoting a replica can crash the server
Issue 4962 - Fix various UI bugs part 1
Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
Issue 4943 - Fix csn generator to limit time skew drift (#4946)
Issue 2790 - Set db home directory by default
Issue 4299 - Merge LDAP editor code into Cockpit UI
Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
Issue 4847 - BUG - potential deadlock in replica (#4936)
Issue 4513 - fix ACI CI tests involving ip/hostname rules
Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
Issue 4916 - Memory leak in ldap-agent
2021-11-22 21:24:00 -05:00
Viktor Ashirov
01c564bdc9 Use split perl dependencies only on Fedora >= 33 and RHEL >= 9
Resolves rhbz#2016595
2021-11-04 08:48:55 +01:00
Mark Reynolds
3c7b164c19 Bump version to 2.0.10
Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
Issue 4912 - Account Policy plugin does not set the config entry DN
Issue 4863 - typoes in logconv.pl
Issue 4796 - Add support for nsslapd-state to CLI & UI
Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
Issue 4912 - dsidm command crashing when account policy plugin is enabled
Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
Issue 4887 - UI - fix minor regression from camelCase fixup
2021-09-20 10:15:42 -04:00
7 changed files with 361 additions and 287 deletions

9
.gitignore vendored
View file

@ -206,3 +206,12 @@
/389-ds-base-2.0.5.tar.bz2
/389-ds-base-2.0.6.tar.bz2
/389-ds-base-2.0.7.tar.bz2
/389-ds-base-2.0.10.tar.bz2
/389-ds-base-2.0.11.tar.bz2
/389-ds-base-2.0.12.tar.bz2
/389-ds-base-2.0.13.tar.bz2
/389-ds-base-2.0.14.tar.bz2
/389-ds-base-2.0.15.tar.bz2
/jemalloc-5.3.0.tar.bz2
/389-ds-base-2.0.16.tar.bz2
/389-ds-base-2.0.17.tar.bz2

View file

@ -1,182 +0,0 @@
From bbdf47a9252040a5e42e015cb636380b88e9caa8 Mon Sep 17 00:00:00 2001
From: Thierry Bordaz <tbordaz@redhat.com>
Date: Tue, 18 May 2021 19:16:30 +0200
Subject: [PATCH] Issue 4765 - database suffix unexpectdly changed from .db to
.db4 (#4766)
* Issue 4765 - database suffix unexpectdly changed from .db to .db4
* Issue 4765 - database suffix unexpectdly changed from .db to .db4 - fix some compilation warnings
---
ldap/servers/slapd/back-ldbm/back-ldbm.h | 9 ---------
ldap/servers/slapd/back-ldbm/db-bdb/bdb_config.c | 1 +
ldap/servers/slapd/back-ldbm/db-bdb/bdb_layer.c | 5 +++++
ldap/servers/slapd/back-ldbm/db-bdb/bdb_layer.h | 11 +++++++++++
ldap/servers/slapd/back-ldbm/dblayer.c | 9 +++++++++
ldap/servers/slapd/back-ldbm/dblayer.h | 3 +++
ldap/servers/slapd/back-ldbm/proto-back-ldbm.h | 2 ++
ldap/servers/slapd/back-ldbm/vlv_srch.c | 2 +-
8 files changed, 32 insertions(+), 10 deletions(-)
diff --git a/ldap/servers/slapd/back-ldbm/back-ldbm.h b/ldap/servers/slapd/back-ldbm/back-ldbm.h
index ddac99541..50b0996cb 100644
--- a/ldap/servers/slapd/back-ldbm/back-ldbm.h
+++ b/ldap/servers/slapd/back-ldbm/back-ldbm.h
@@ -66,14 +66,6 @@ typedef unsigned short u_int16_t;
#define ID2ENTRY "id2entry" /* main db file name: ID2ENTRY+LDBM_SUFFIX */
-#if 1000 * DB_VERSION_MAJOR + 100 * DB_VERSION_MINOR >= 5000
-#define LDBM_SUFFIX_OLD ".db4"
-#define LDBM_SUFFIX ".db"
-#else
-#define LDBM_SUFFIX_OLD ".db3"
-#define LDBM_SUFFIX ".db4"
-#endif
-
#define MEGABYTE (1024 * 1024)
#define GIGABYTE (1024 * MEGABYTE)
@@ -143,7 +135,6 @@ typedef unsigned short u_int16_t;
#define LDBM_VERSION_40 "Netscape-ldbm/4.0"
#define LDBM_VERSION_30 "Netscape-ldbm/3.0"
#define LDBM_VERSION_31 "Netscape-ldbm/3.1"
-#define LDBM_FILENAME_SUFFIX LDBM_SUFFIX
#define DBVERSION_FILENAME "DBVERSION"
/* 0 here means to let the autotuning reset the value on first run */
/* cache can't get any smaller than this (in bytes) */
diff --git a/ldap/servers/slapd/back-ldbm/db-bdb/bdb_config.c b/ldap/servers/slapd/back-ldbm/db-bdb/bdb_config.c
index 65a2405d8..11a65e806 100644
--- a/ldap/servers/slapd/back-ldbm/db-bdb/bdb_config.c
+++ b/ldap/servers/slapd/back-ldbm/db-bdb/bdb_config.c
@@ -125,6 +125,7 @@ int bdb_init(struct ldbminfo *li, config_info *config_array)
priv->dblayer_dbi_txn_abort_fn = &bdb_dbi_txn_abort;
priv->dblayer_get_entries_count_fn = &bdb_get_entries_count;
priv->dblayer_cursor_get_count_fn = &bdb_public_cursor_get_count;
+ priv->dblayer_get_db_suffix_fn = &bdb_public_get_db_suffix;
bdb_fake_priv = *priv; /* Copy the callbaks for bdb_be() */
return 0;
diff --git a/ldap/servers/slapd/back-ldbm/db-bdb/bdb_layer.c b/ldap/servers/slapd/back-ldbm/db-bdb/bdb_layer.c
index 186c11cc3..455596a92 100644
--- a/ldap/servers/slapd/back-ldbm/db-bdb/bdb_layer.c
+++ b/ldap/servers/slapd/back-ldbm/db-bdb/bdb_layer.c
@@ -6713,3 +6713,8 @@ bdb_public_cursor_get_count(dbi_cursor_t *cursor, dbi_recno_t *count)
int rc = cur->c_count(cur, count, 0);
return bdb_map_error(__FUNCTION__, rc);
}
+
+const char *bdb_public_get_db_suffix(void)
+{
+ return LDBM_FILENAME_SUFFIX;
+}
diff --git a/ldap/servers/slapd/back-ldbm/db-bdb/bdb_layer.h b/ldap/servers/slapd/back-ldbm/db-bdb/bdb_layer.h
index 32430e2af..924656998 100644
--- a/ldap/servers/slapd/back-ldbm/db-bdb/bdb_layer.h
+++ b/ldap/servers/slapd/back-ldbm/db-bdb/bdb_layer.h
@@ -13,6 +13,16 @@
#define BDB_CONFIG(li) ((bdb_config *)(li)->li_dblayer_config)
+#if 1000 * DB_VERSION_MAJOR + 100 * DB_VERSION_MINOR >= 5000
+#define LDBM_SUFFIX_OLD ".db4"
+#define LDBM_SUFFIX ".db"
+#else
+#define LDBM_SUFFIX_OLD ".db3"
+#define LDBM_SUFFIX ".db4"
+#endif
+
+#define LDBM_FILENAME_SUFFIX LDBM_SUFFIX
+
typedef struct bdb_db_env
{
DB_ENV *bdb_DB_ENV;
@@ -133,6 +143,7 @@ dblayer_dbi_txn_commit_fn_t bdb_dbi_txn_commit;
dblayer_dbi_txn_abort_fn_t bdb_dbi_txn_abort;
dblayer_get_entries_count_fn_t bdb_get_entries_count;
dblayer_cursor_get_count_fn_t bdb_public_cursor_get_count;
+dblayer_get_db_suffix_fn_t bdb_public_get_db_suffix;
/* instance functions */
int bdb_instance_cleanup(struct ldbm_instance *inst);
diff --git a/ldap/servers/slapd/back-ldbm/dblayer.c b/ldap/servers/slapd/back-ldbm/dblayer.c
index c5ff6cba9..bf56df42a 100644
--- a/ldap/servers/slapd/back-ldbm/dblayer.c
+++ b/ldap/servers/slapd/back-ldbm/dblayer.c
@@ -1370,3 +1370,12 @@ dblayer_pop_pvt_txn(void)
}
return;
}
+
+const char *
+dblayer_get_db_suffix(Slapi_Backend *be)
+{
+ struct ldbminfo *li = be ? (struct ldbminfo *)be->be_database->plg_private : NULL;
+ dblayer_private *prv = li ? (dblayer_private *)li->li_dblayer_private : NULL;
+
+ return prv ? prv->dblayer_get_db_suffix_fn() : NULL;
+}
diff --git a/ldap/servers/slapd/back-ldbm/dblayer.h b/ldap/servers/slapd/back-ldbm/dblayer.h
index 99acfd1ab..051035f3f 100644
--- a/ldap/servers/slapd/back-ldbm/dblayer.h
+++ b/ldap/servers/slapd/back-ldbm/dblayer.h
@@ -109,6 +109,7 @@ typedef int dblayer_dbi_txn_commit_fn_t(dbi_txn_t *txn);
typedef int dblayer_dbi_txn_abort_fn_t(dbi_txn_t *txn);
typedef int dblayer_get_entries_count_fn_t(dbi_db_t *db, int *count);
typedef int dblayer_cursor_get_count_fn_t(dbi_cursor_t *cursor, dbi_recno_t *count);
+typedef const char *dblayer_get_db_suffix_fn_t(void);
struct dblayer_private
{
@@ -178,6 +179,7 @@ struct dblayer_private
dblayer_dbi_txn_abort_fn_t *dblayer_dbi_txn_abort_fn;
dblayer_get_entries_count_fn_t *dblayer_get_entries_count_fn;
dblayer_cursor_get_count_fn_t *dblayer_cursor_get_count_fn;
+ dblayer_get_db_suffix_fn_t *dblayer_get_db_suffix_fn;
};
#define DBLAYER_PRIV_SET_DATA_DIR 0x1
@@ -188,6 +190,7 @@ back_txn *dblayer_get_pvt_txn(void);
void dblayer_pop_pvt_txn(void);
int dblayer_delete_indices(ldbm_instance *inst);
+const char *dblayer_get_db_suffix(Slapi_Backend *be);
/* Return the last four characters of a string; used for comparing extensions. */
diff --git a/ldap/servers/slapd/back-ldbm/proto-back-ldbm.h b/ldap/servers/slapd/back-ldbm/proto-back-ldbm.h
index 22f2d1103..dbe5dca73 100644
--- a/ldap/servers/slapd/back-ldbm/proto-back-ldbm.h
+++ b/ldap/servers/slapd/back-ldbm/proto-back-ldbm.h
@@ -142,6 +142,8 @@ void dblayer_restore_file_update(struct ldbminfo *li, char *directory);
int dblayer_import_file_init(ldbm_instance *inst);
void dblayer_import_file_update(ldbm_instance *inst);
int dblayer_import_file_check(ldbm_instance *inst);
+const char *dblayer_get_db_suffix(Slapi_Backend *be);
+
/*
* dn2entry.c
diff --git a/ldap/servers/slapd/back-ldbm/vlv_srch.c b/ldap/servers/slapd/back-ldbm/vlv_srch.c
index 4dd3804c9..6fd1b3880 100644
--- a/ldap/servers/slapd/back-ldbm/vlv_srch.c
+++ b/ldap/servers/slapd/back-ldbm/vlv_srch.c
@@ -30,7 +30,6 @@ char *const type_vlvEnabled = "vlvEnabled";
char *const type_vlvUses = "vlvUses";
static const char *file_prefix = "vlv#"; /* '#' used to avoid collision with real attributes */
-static const char *file_suffix = LDBM_FILENAME_SUFFIX;
static int vlvIndex_createfilename(struct vlvIndex *pIndex, char **ppc);
@@ -514,6 +513,7 @@ void
vlvIndex_init(struct vlvIndex *p, backend *be, struct vlvSearch *pSearch, const Slapi_Entry *e)
{
struct ldbminfo *li = (struct ldbminfo *)be->be_database->plg_private;
+ const char *file_suffix = dblayer_get_db_suffix(be);
char *filename = NULL;
if (NULL == p)
--
2.30.2

View file

@ -1,20 +0,0 @@
diff --git a/ldap/servers/plugins/dna/dna.c b/ldap/servers/plugins/dna/dna.c
index bf6b74a99..928a3f54a 100644
--- a/ldap/servers/plugins/dna/dna.c
+++ b/ldap/servers/plugins/dna/dna.c
@@ -1023,7 +1023,6 @@ dna_parse_config_entry(Slapi_PBlock *pb, Slapi_Entry *e, int apply)
/* Set the default interval to 1 */
entry->interval = 1;
-#ifdef DNA_ENABLE_INTERVAL
value = slapi_entry_attr_get_charptr(e, DNA_INTERVAL);
if (value) {
entry->interval = strtoull(value, 0, 0);
@@ -1032,7 +1031,6 @@ dna_parse_config_entry(Slapi_PBlock *pb, Slapi_Entry *e, int apply)
slapi_log_err(SLAPI_LOG_CONFIG, DNA_PLUGIN_SUBSYSTEM,
"dna_parse_config_entry - %s [%" PRIu64 "]\n", DNA_INTERVAL, entry->interval);
-#endif
value = slapi_entry_attr_get_charptr(e, DNA_GENERATE);
if (value) {

View file

@ -5,13 +5,6 @@
# Exclude i686 bit arches
ExcludeArch: i686
# for a pre-release, define the prerel field e.g. .a1 .rc2 - comment out for official release
# also remove the space between % and global - this space is needed because
# fedpkg verrel stupidly ignores comment lines
#% global prerel .rc3
# also need the relprefix field for a pre-release e.g. .0 - also comment out for official release
#% global relprefix 0.
# If perl-Socket-2.000 or newer is available, set 0 to use_Socket6.
%global use_Socket6 0
@ -24,7 +17,7 @@ ExcludeArch: i686
%if %{bundle_jemalloc}
%global jemalloc_name jemalloc
%global jemalloc_ver 5.2.1
%global jemalloc_ver 5.3.0
%global __provides_exclude ^libjemalloc\\.so.*$
%endif
@ -47,11 +40,15 @@ ExcludeArch: i686
# Filter argparse-manpage from autogenerated package Requires
%global __requires_exclude ^python.*argparse-manpage
# Force to require nss version greater or equal as the version available at the build time
# See bz1986327
%define dirsrv_requires_ge() %(LC_ALL="C" echo '%*' | xargs -r rpm -q --qf 'Requires: %%{name} >= %%{epoch}:%%{version}\\n' | sed -e 's/ (none):/ /' -e 's/ 0:/ /' | grep -v "is not")
Summary: 389 Directory Server (base)
Name: 389-ds-base
Version: 2.0.7
Release: %{?relprefix}1%{?prerel}%{?dist}.1
License: GPLv3+ and MIT and (ASL 2.0 or MIT) and (ASL 2.0 or Boost) and MPLv2.0 and ASL 2.0 and BSD and (ASL 2.0 with exceptions or ASL 2.0 or MIT) and (Unlicense or MIT)
Version: 2.0.17
Release: 1%{?dist}
License: GPLv3+ and (ASL 2.0 or MIT)
URL: https://www.port389.org
Conflicts: selinux-policy-base < 3.9.8
Conflicts: freeipa-server < 4.0.3
@ -61,90 +58,96 @@ Obsoletes: %{name}-legacy-tools-debuginfo < 1.4.4.6
Provides: ldif2ldbm >= 0
##### Bundled cargo crates list - START #####
Provides: bundled(crate(ahash)) = 0.7.2
Provides: bundled(crate(ansi_term)) = 0.11.0
Provides: bundled(crate(ahash)) = 0.7.6
Provides: bundled(crate(ansi_term)) = 0.12.1
Provides: bundled(crate(atty)) = 0.2.14
Provides: bundled(crate(autocfg)) = 1.0.1
Provides: bundled(crate(base64)) = 0.13.0
Provides: bundled(crate(bitflags)) = 1.2.1
Provides: bundled(crate(autocfg)) = 1.1.0
Provides: bundled(crate(base64)) = 0.13.1
Provides: bundled(crate(bitflags)) = 1.3.2
Provides: bundled(crate(byteorder)) = 1.4.3
Provides: bundled(crate(cbindgen)) = 0.9.1
Provides: bundled(crate(cc)) = 1.0.67
Provides: bundled(crate(cc)) = 1.0.76
Provides: bundled(crate(cfg-if)) = 1.0.0
Provides: bundled(crate(clap)) = 2.33.3
Provides: bundled(crate(concread)) = 0.2.9
Provides: bundled(crate(crossbeam)) = 0.8.0
Provides: bundled(crate(crossbeam-channel)) = 0.5.1
Provides: bundled(crate(crossbeam-deque)) = 0.8.0
Provides: bundled(crate(crossbeam-epoch)) = 0.9.3
Provides: bundled(crate(crossbeam-queue)) = 0.3.1
Provides: bundled(crate(crossbeam-utils)) = 0.8.3
Provides: bundled(crate(clap)) = 2.34.0
Provides: bundled(crate(concread)) = 0.2.21
Provides: bundled(crate(crossbeam)) = 0.8.2
Provides: bundled(crate(crossbeam-channel)) = 0.5.6
Provides: bundled(crate(crossbeam-deque)) = 0.8.2
Provides: bundled(crate(crossbeam-epoch)) = 0.9.11
Provides: bundled(crate(crossbeam-queue)) = 0.3.6
Provides: bundled(crate(crossbeam-utils)) = 0.8.12
Provides: bundled(crate(entryuuid)) = 0.1.0
Provides: bundled(crate(entryuuid_syntax)) = 0.1.0
Provides: bundled(crate(fastrand)) = 1.8.0
Provides: bundled(crate(fernet)) = 0.1.4
Provides: bundled(crate(foreign-types)) = 0.3.2
Provides: bundled(crate(foreign-types-shared)) = 0.1.1
Provides: bundled(crate(getrandom)) = 0.2.2
Provides: bundled(crate(hermit-abi)) = 0.1.18
Provides: bundled(crate(instant)) = 0.1.9
Provides: bundled(crate(itoa)) = 0.4.7
Provides: bundled(crate(jobserver)) = 0.1.21
Provides: bundled(crate(lazy_static)) = 1.4.0
Provides: bundled(crate(libc)) = 0.2.93
Provides: bundled(crate(getrandom)) = 0.2.8
Provides: bundled(crate(hashbrown)) = 0.12.3
Provides: bundled(crate(hermit-abi)) = 0.1.19
Provides: bundled(crate(instant)) = 0.1.12
Provides: bundled(crate(itoa)) = 1.0.4
Provides: bundled(crate(jobserver)) = 0.1.25
Provides: bundled(crate(libc)) = 0.2.137
Provides: bundled(crate(librnsslapd)) = 0.1.0
Provides: bundled(crate(librslapd)) = 0.1.0
Provides: bundled(crate(lock_api)) = 0.4.3
Provides: bundled(crate(log)) = 0.4.14
Provides: bundled(crate(memoffset)) = 0.6.3
Provides: bundled(crate(once_cell)) = 1.7.2
Provides: bundled(crate(openssl)) = 0.10.33
Provides: bundled(crate(openssl-sys)) = 0.9.61
Provides: bundled(crate(parking_lot)) = 0.11.1
Provides: bundled(crate(parking_lot_core)) = 0.8.3
Provides: bundled(crate(lock_api)) = 0.4.9
Provides: bundled(crate(log)) = 0.4.17
Provides: bundled(crate(lru)) = 0.7.8
Provides: bundled(crate(memoffset)) = 0.6.5
Provides: bundled(crate(once_cell)) = 1.16.0
Provides: bundled(crate(openssl)) = 0.10.42
Provides: bundled(crate(openssl-macros)) = 0.1.0
Provides: bundled(crate(openssl-sys)) = 0.9.77
Provides: bundled(crate(parking_lot)) = 0.11.2
Provides: bundled(crate(parking_lot_core)) = 0.8.5
Provides: bundled(crate(paste)) = 0.1.18
Provides: bundled(crate(paste-impl)) = 0.1.18
Provides: bundled(crate(pkg-config)) = 0.3.19
Provides: bundled(crate(ppv-lite86)) = 0.2.10
Provides: bundled(crate(pin-project-lite)) = 0.2.9
Provides: bundled(crate(pkg-config)) = 0.3.26
Provides: bundled(crate(ppv-lite86)) = 0.2.17
Provides: bundled(crate(proc-macro-hack)) = 0.5.19
Provides: bundled(crate(proc-macro2)) = 1.0.26
Provides: bundled(crate(proc-macro2)) = 1.0.47
Provides: bundled(crate(pwdchan)) = 0.1.0
Provides: bundled(crate(quote)) = 1.0.9
Provides: bundled(crate(rand)) = 0.8.3
Provides: bundled(crate(rand_chacha)) = 0.3.0
Provides: bundled(crate(rand_core)) = 0.6.2
Provides: bundled(crate(rand_hc)) = 0.3.0
Provides: bundled(crate(redox_syscall)) = 0.2.6
Provides: bundled(crate(quote)) = 1.0.21
Provides: bundled(crate(rand)) = 0.8.5
Provides: bundled(crate(rand_chacha)) = 0.3.1
Provides: bundled(crate(rand_core)) = 0.6.4
Provides: bundled(crate(redox_syscall)) = 0.2.16
Provides: bundled(crate(remove_dir_all)) = 0.5.3
Provides: bundled(crate(ryu)) = 1.0.5
Provides: bundled(crate(ryu)) = 1.0.11
Provides: bundled(crate(scopeguard)) = 1.1.0
Provides: bundled(crate(serde)) = 1.0.125
Provides: bundled(crate(serde_derive)) = 1.0.125
Provides: bundled(crate(serde_json)) = 1.0.64
Provides: bundled(crate(serde)) = 1.0.147
Provides: bundled(crate(serde_derive)) = 1.0.147
Provides: bundled(crate(serde_json)) = 1.0.88
Provides: bundled(crate(slapd)) = 0.1.0
Provides: bundled(crate(slapi_r_plugin)) = 0.1.0
Provides: bundled(crate(smallvec)) = 1.6.1
Provides: bundled(crate(smallvec)) = 1.10.0
Provides: bundled(crate(strsim)) = 0.8.0
Provides: bundled(crate(syn)) = 1.0.69
Provides: bundled(crate(synstructure)) = 0.12.4
Provides: bundled(crate(tempfile)) = 3.2.0
Provides: bundled(crate(syn)) = 1.0.103
Provides: bundled(crate(synstructure)) = 0.12.6
Provides: bundled(crate(tempfile)) = 3.3.0
Provides: bundled(crate(textwrap)) = 0.11.0
Provides: bundled(crate(toml)) = 0.5.8
Provides: bundled(crate(unicode-width)) = 0.1.8
Provides: bundled(crate(unicode-xid)) = 0.2.1
Provides: bundled(crate(tokio)) = 1.21.2
Provides: bundled(crate(tokio-macros)) = 1.8.0
Provides: bundled(crate(toml)) = 0.5.9
Provides: bundled(crate(unicode-ident)) = 1.0.5
Provides: bundled(crate(unicode-width)) = 0.1.10
Provides: bundled(crate(unicode-xid)) = 0.2.4
Provides: bundled(crate(uuid)) = 0.8.2
Provides: bundled(crate(vcpkg)) = 0.2.11
Provides: bundled(crate(vcpkg)) = 0.2.15
Provides: bundled(crate(vec_map)) = 0.8.2
Provides: bundled(crate(version_check)) = 0.9.3
Provides: bundled(crate(wasi)) = 0.10.2+wasi_snapshot_preview1
Provides: bundled(crate(version_check)) = 0.9.4
Provides: bundled(crate(wasi)) = 0.11.0+wasi_snapshot_preview1
Provides: bundled(crate(winapi)) = 0.3.9
Provides: bundled(crate(winapi-i686-pc-windows-gnu)) = 0.4.0
Provides: bundled(crate(winapi-x86_64-pc-windows-gnu)) = 0.4.0
Provides: bundled(crate(zeroize)) = 1.2.0
Provides: bundled(crate(zeroize_derive)) = 1.0.1
Provides: bundled(crate(zeroize)) = 1.5.7
Provides: bundled(crate(zeroize_derive)) = 1.3.2
##### Bundled cargo crates list - END #####
BuildRequires: nspr-devel
BuildRequires: nss-devel >= 3.34
BuildRequires: nspr-devel >= 4.32
BuildRequires: nss-devel >= 3.67.0-7
BuildRequires: openldap-devel
BuildRequires: libdb-devel
BuildRequires: cyrus-sasl-devel
@ -222,11 +225,14 @@ Requires: selinux-policy >= 3.14.1-29
Requires: openldap-clients
Requires: /usr/bin/c_rehash
Requires: python%{python3_pkgversion}-ldap
Requires: acl
# this is needed to setup SSL if you are not using the
# administration server package
Requires: nss-tools
Requires: nss >= 3.34
Requires: nspr >= 4.32
Requires: nss >= 3.67.0-7
# these are not found by the auto-dependency method
# they are required to support the mandatory LDAP SASL mechs
@ -243,13 +249,17 @@ Requires: cracklib-dicts
# Needed by logconv.pl
Requires: perl-DB_File
Requires: perl-Archive-Tar
%if 0%{?fedora} >= 33 || 0%{?rhel} >= 9
Requires: perl-debugger
Requires: perl-sigtrap
%endif
# Picks up our systemd deps.
%{?systemd_requires}
Obsoletes: %{name} <= 1.3.5.4
Source0: https://releases.pagure.org/389-ds-base/%{name}-%{version}%{?prerel}.tar.bz2
Source0: https://releases.pagure.org/389-ds-base/%{name}-%{version}.tar.bz2
# 389-ds-git.sh should be used to generate the source tarball from git
Source1: %{name}-git.sh
Source2: %{name}-devel.README
@ -257,6 +267,11 @@ Source2: %{name}-devel.README
Source3: https://github.com/jemalloc/%{jemalloc_name}/releases/download/%{jemalloc_ver}/%{jemalloc_name}-%{jemalloc_ver}.tar.bz2
%endif
# Remove this after rust-1.56 lands in repos
%if 0%{?rhel} == 8
Patch0: concread-use-2018-edition.patch
%endif
%description
389 Directory Server is an LDAPv3 compliant server. The base package includes
the LDAP server and command line utilities for server administration.
@ -268,8 +283,8 @@ Please see http://seclists.org/oss-sec/2016/q1/363 for more information.
%package libs
Summary: Core libraries for 389 Directory Server
BuildRequires: nspr-devel
BuildRequires: nss-devel >= 3.34
BuildRequires: nspr-devel >= 4.32
BuildRequires: nss-devel >= 3.67.0-7
BuildRequires: openldap-devel
BuildRequires: libdb-devel
BuildRequires: cyrus-sasl-devel
@ -354,10 +369,10 @@ A cockpit UI Plugin for configuring and administering the 389 Directory Server
%endif
%prep
%autosetup -p1 -v -n %{name}-%{version}%{?prerel}
%autosetup -p1 -v -n %{name}-%{version}
%if %{bundle_jemalloc}
%setup -q -n %{name}-%{version}%{?prerel} -T -D -b 3
%setup -q -n %{name}-%{version} -T -D -b 3
%endif
cp %{SOURCE2} README.devel
@ -438,10 +453,10 @@ pushd ./src/lib389
popd
# argparse-manpage dynamic man pages have hardcoded man v1 in header,
# need to change it to v8
sed -i "1s/\"1\"/\"8\"/" %{_builddir}/%{name}-%{version}%{?prerel}/src/lib389/man/dsconf.8
sed -i "1s/\"1\"/\"8\"/" %{_builddir}/%{name}-%{version}%{?prerel}/src/lib389/man/dsctl.8
sed -i "1s/\"1\"/\"8\"/" %{_builddir}/%{name}-%{version}%{?prerel}/src/lib389/man/dsidm.8
sed -i "1s/\"1\"/\"8\"/" %{_builddir}/%{name}-%{version}%{?prerel}/src/lib389/man/dscreate.8
sed -i "1s/\"1\"/\"8\"/" %{_builddir}/%{name}-%{version}/src/lib389/man/dsconf.8
sed -i "1s/\"1\"/\"8\"/" %{_builddir}/%{name}-%{version}/src/lib389/man/dsctl.8
sed -i "1s/\"1\"/\"8\"/" %{_builddir}/%{name}-%{version}/src/lib389/man/dsidm.8
sed -i "1s/\"1\"/\"8\"/" %{_builddir}/%{name}-%{version}/src/lib389/man/dscreate.8
# Generate symbolic info for debuggers
export XCFLAGS=$RPM_OPT_FLAGS
@ -463,7 +478,7 @@ find %{buildroot}%{_datadir}/cockpit/389-console -type f | sed -e "s@%{buildroot
%endif
# Copy in our docs from doxygen.
cp -r %{_builddir}/%{name}-%{version}%{?prerel}/man/man3 $RPM_BUILD_ROOT/%{_mandir}/man3
cp -r %{_builddir}/%{name}-%{version}/man/man3 $RPM_BUILD_ROOT/%{_mandir}/man3
# lib389
pushd src/lib389
@ -488,8 +503,8 @@ rm -f $RPM_BUILD_ROOT%{_libdir}/libsvrcore.la
%if %{bundle_jemalloc}
pushd ../%{jemalloc_name}-%{jemalloc_ver}
make DESTDIR="$RPM_BUILD_ROOT" install_lib install_bin
cp -pa COPYING ../%{name}-%{version}%{?prerel}/COPYING.jemalloc
cp -pa README ../%{name}-%{version}%{?prerel}/README.jemalloc
cp -pa COPYING ../%{name}-%{version}/COPYING.jemalloc
cp -pa README ../%{name}-%{version}/README.jemalloc
popd
%endif
@ -620,6 +635,7 @@ exit 0
%{_sbindir}/openldap_to_ds
%{_mandir}/man8/openldap_to_ds.8.gz
%{_libexecdir}/%{pkgname}/ds_systemd_ask_password_acl
%{_libexecdir}/%{pkgname}/ds_selinux_restorecon.sh
%{_mandir}/man5/99user.ldif.5.gz
%{_mandir}/man5/certmap.conf.5.gz
%{_mandir}/man5/slapd-collations.conf.5.gz
@ -665,7 +681,7 @@ exit 0
%dir %{_libdir}/%{pkgname}
%{_libdir}/libsvrcore.so.*
%{_libdir}/%{pkgname}/libslapd.so.*
%{_libdir}/%{pkgname}/libns-dshttpd-*.so
%{_libdir}/%{pkgname}/libns-dshttpd.so.*
%{_libdir}/%{pkgname}/libldaputil.so.*
%{_libdir}/%{pkgname}/librewriters.so*
%if %{bundle_jemalloc}
@ -699,6 +715,239 @@ exit 0
%endif
%changelog
* Fri Nov 18 2022 Mark Reynolds <mreynolds@redhat.com> - 2.0.17-1
- Bump version to 2.0.17
- Issue 5534 - Add copyright text to the repository files
- Issue 5532 - Make db compaction TOD day more robust.
- Issue 5529 - UI - Fix npm vulnerability in loader-utils
- Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
- Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
- Issue 5162 - RFE - CLI allow adding CA certificate bundles
- Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)
- Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
- Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
- Issue 5502 - RFE - Add option to display entry attributes in audit log
- Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)
- Issue 5495 - RFE - skip dds during migration. (#5496)
- Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
- Issue 5368 - Retro Changelog trimming does not work (#5486)
- Issue 5487 - Fix various issues with logconv.pl
- Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
- Issue 4776 - Fix entryuuid fixup task (#5483)
- Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
- Issue 3061 - RFE - Add password policy debug log level
- Issue 5462 - RFE - add missing default indexes (#5464)
- Issue 4324 - Revert recursive pthread mutex usage in factory.c
- Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264)
- Issue 4324 - Revert recursive pthread mutex change (#5463)
- Issue 5305 - OpenLDAP version autodetection doesn't work
- Issue 5032 - Fix OpenLDAP version check (#5091)
- Issue 5032 - OpenLDAP is not shipped with non-threaded version of libldap (#5033) (#5456)
- Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
- Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
- Issue 5453 - UI/CLI - Changing Root DN breaks UI
- Issue 5446 - Fix some covscan issues (#5451)
- Issue 5294 - Report Portal 5 is not processing an XML file with (#5358)
- Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
- Issue 4308 - checking if an entry is a referral is expensive
- Issue 5447 - UI - add NDN max cache size to UI
- Issue 5443 - UI - disable save button while saving
- Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)
- Issue 5413 - Allow only one MemberOf fixup task at a time
- Issue 5158 - entryuuid fixup tasks fails in replicated topology (#5439)
- Issue 4592 - dscreate error with custom dir_path (#5434)
- Issue 5397 - Fix memory leak with the intent filter
- Issue 5356 - For RUST build update the default password storage scheme
- Issue 5423 - Fix missing 'not' in description
- Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
- Issue 3903 - fix repl keep alive event interval
- Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
- Issue 5415 - Hostname when set to localhost causing failures in other tests
- Issue 5412 - lib389 - do not set backend name to lowercase
- Issue 3903 - keep alive update event starts too soon
- Issue 5397 - Fix various memory leaks
- Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
- Issue 3903 - Supplier should do periodic updates
- Issue 5392 - dscreate fails when using alternative ports in the SELinux hi_reserved_port_t label range
- Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
- Issue 5383 - UI - Various fixes and RFE's for UI
- Issue 4656 - Remove problematic language from source code
- Issue 5380 - Separate cleanAllRUV code into new file
- Issue 5322 - optime & wtime on rejected connections is not properly set
- Issue 5375 - CI - disable TLS hostname checking
- Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
- Issue 5371 - Update npm and cargo packages
- Issue 3069 - Support ECDSA private keys for TLS (#5365)
* Tue Jul 5 2022 Mark Reynolds <mreynolds@redhat.com> - 2.0.16-1
- Bump version to 2.0.16
- Issue 5221 - fix covscan (#5359)
- Issue 4984 - BUG - pid file handling (#4986)
- Issue 5353 - CLI - dsconf backend export breaks with multiple backends
- Issue 5345 - BUG - openldap migration fails when ppolicy is active (#5347)
- Issue 5323 - BUG - improve skipping of monitor db (#5340)
- Issue 5323 - BUG - Fix issue in mdb tests with monitor (#5326)
- Issue 5329 - Improve replication extended op logging
- Issue 5343 - Various improvements to winsync
- Issue 4932 - CLI - add parser aliases to long arg names
- Issue 5332 - BUG - normalise filter as intended
- Issue 5126 - Memory leak in slapi_ldap_get_lderrno (#5153)
- Issue 5311 - Missing Requires for acl in the spec file
- Issue 5333 - 389-ds-base fails to build with Python 3.11
- Issue 5170 - BUG - incorrect behaviour of filter test (#5315)
- Issue 5324 - plugin acceptance test needs hardening
- Issue 5323 - BUG - migrating database for monitoring interface lead to crash (#5321)
- Issue 5304 - Need a compatibility option about sub suffix handling (#5310)
- Issue 5302 - Release tarballs don't contain cockpit webapp
- Issue 5237 - audit-ci: Cannot convert undefined or null to object
- Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
- Issue 4970 - Add support for recursively deleting subentries
- Issue 5284 - Replication broken after password change (#5286)
- Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
- Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
- Issue 5170 - RFE - Filter optimiser (#5171)
- Issue 5276 - CLI - improve task handling
- Issue 5273 - CLI - add arg completer for instance name
- Issue 2893 - CLI - dscreate - add options for setting up replication
- Issue 4866 - CLI - when enabling replication set changelog trimming by default
- Issue 5241 - UI - Add account locking missing functionality (#5251)
- Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
- Issue 5098 - Fix cherry-pick error
- Issue 4904 - Fix various small issues
- Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
- Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
- Issue 5210 - Python undefined names in lib389
- Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
- Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'
- Issue 5242 - SECURITY_FIX - Craft message may crash the server (#5243)
- Issue 5234 - UI - rename Users and Groups tab
- Issue 5217 - Simplify instance creation and administration by non root user (#5224)
- Issue 5227 - UI - No way to move back to Get Started step (#5233)
* Wed Mar 23 2022 Mark Reynolds <mreynolds@redhat.com> - 2.0.15-1
- Bump version to 2.0.15
- Issue 5230 - Race condition in RHDS disk monitoring functions
- Issue 4299 - UI - Add CoS funtionality (#5196)
- Issue 5225 - UI - impossible to manually set entry cache
- Issue 5186 - UI - Fix SASL Mapping regex test feature
- Issue 5221 - User with expired password can still login with full privledges
- Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
- Issue 5200 - dscontainer should use environment variables with DS_ prefix
- Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
- Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
- Issue 5188 - UI - LDAP editor - add entry and group types
- Issue 5184 - memberOf does not work correctly with multiple include scopes
- Issue 5162 - BUG - error on importing chain files (#5164)
- Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
- Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)
- Issue 5122 - dsconf instance backend suffix set doesn't accept backend name (#5178)
- Issue 5160 - BUG - x- prefix in descr-oid can confuse oid parser (#5161)
- Issue 5098 - Multiple issues around replication and CI test test_online_reinit_may_hang (#5109)
- Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
- Issue 5137 - RFE - improve sssd conf output (#5138)
- Issue 5145 - Fix covscan errors
- Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
- Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
- Issue 4299 - UI - Add Role funtionality (#5163)
- Issue 5050 - bdb bulk op fails if fs page size > 8K (#5150)
- Issue 4775 - Add entryuuid CLI and Fixup (#4776)
- Issue 5142 - CLI - dsctl dbgen is broken
- Issue 4299 - UI - fix minor issues with ldap editor (table view)
- Issue 4299 - UI - fix minor issues with ldap editor
- Issue 5103 - UI - Add support for TPR to web console (#5111)
* Thu Jan 27 2022 Mark Reynolds <mreynolds@redhat.com> - 2.0.14-1
- Bump version to 2.0.14-1
- Issue 5127 - ds_selinux_restorecon.sh: always exit 0
- Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
- Issue 4992 - BUG - slapd.socket container fix (#4993)
- Issue 5079 - BUG - multiple ways to specific primary (#5087)
- Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
- Issue 5135 - UI - Disk monitoring threshold does update properly
- Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
* Thu Jan 27 2022 Adam Williamson <awilliam@redhat.com> - 2.0.13-2
- Backport PR#5141 to fix startup when a directory doesn't exist (#2047323)
* Mon Jan 24 2022 Mark Reynolds <mreynolds@redhat.com> - 2.0.13-1
- Bump version to 2.0.13
- Issue 5132 - Update Rust crate lru to fix CVE
- Issue 3555 - UI - fix audit issue with npm nanoid
- Issue 4299 - UI - Add ACI editing features
- Issue 4299 - UI - LDAP editor - add "edit" and "rename" functionality
- Issue 5127 - run restorecon on /dev/shm at server startup
- Issue 5124 - dscontainer fails to create an instance
- Issue 4312 - fix compiler warnings
- Issue 5115 - AttributeError: type object 'build_manpages' has no attribute 'build_manpages'
- Issue 4312 - performance search rate: contention on global monitoring counters (#4940)
- Issue 5105 - During a bind, if the target entry is not reachable the operation may complete without sending result (#5107)
- Issue 5095 - sync-repl with openldap may send truncated syncUUID (#5099)
- Issue 3584 - Add is_fips check to password tests (#5100)
- Issue 5074 - retro changelog cli updates (#5075)
- Issue 4994 - Revert retrocl dependency workaround (#4995)
* Thu Dec 16 2021 Mark Reynolds <mreynolds@redhat.com> - 2.0.12-1
- Bump version to 2.0.12-1
- Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
- Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
- Issue 5046 - BUG - update concread (#5047)
- Issue 5043 - BUG - Result must be used compiler warning (#5045)
- Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
- Issue 4931 - RFE: dsidm - add creation of service accounts
- Issue 5024 - BUG - windows ro replica sigsegv (#5027)
- Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
- Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
* Mon Nov 22 2021 Mark Reynolds <mreynolds@redhat.com> - 2.0.11-1
- Bump version to 2.0.11
- Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
- Issue 5014 - UI - Add group creation to LDAP editor
- Issue 5006 - UI - LDAP editor tree not being properly updated
- Issue 5001 - Update CI test for new availableSASLMechs attribute
- Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
- Issue 5001 - Fix next round of UI bugs:
- Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
- Issue 4978 - use more portable python command for checking containers
- Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
- Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
- Issue 4978 - make installer robust
- Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
- Issue 4973 - update snmp to use /run/dirsrv for PID file
- Issue 4962 - Fix various UI bugs - Plugins (#4969)
- Issue 4973 - installer changes permissions on /run
- Issue 4092 - systemd-tmpfiles warnings
- Issue 4956 - Automember allows invalid regex, and does not log proper error
- Issue 4731 - Promoting/demoting a replica can crash the server
- Issue 4962 - Fix various UI bugs part 1
- Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
- Issue 4943 - Fix csn generator to limit time skew drift (#4946)
- Issue 2790 - Set db home directory by default
- Issue 4299 - Merge LDAP editor code into Cockpit UI
- Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
- Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
- Issue 4847 - BUG - potential deadlock in replica (#4936)
- Issue 4513 - fix ACI CI tests involving ip/hostname rules
- Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
- Issue 4916 - Memory leak in ldap-agent
* Thu Nov 04 2021 Viktor Ashirov <vashirov@redhat.com> - 2.0.10-2
- Resolves #rhbz2016595
* Mon Sep 20 2021 Mark Reynolds <mreynolds@redhat.com> - 2.0.10-1
- Bump version to 2.0.10
- Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
- Issue 4912 - Account Policy plugin does not set the config entry DN
- Issue 4863 - typoes in logconv.pl
- Issue 4796 - Add support for nsslapd-state to CLI & UI
- Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
- Issue 4912 - dsidm command crashing when account policy plugin is enabled
- Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
- Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
- Issue 4887 - UI - fix minor regression from camelCase fixup
* Tue Sep 14 2021 Sahana Prasad <sahana@redhat.com> - 2.0.7-1.2
- Rebuilt with OpenSSL 3.0.0
* Wed Jul 21 2021 Fedora Release Engineering <releng@fedoraproject.org> - 2.0.7-1.1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild

File diff suppressed because one or more lines are too long

View file

@ -1,2 +1,2 @@
SHA512 (jemalloc-5.2.1.tar.bz2) = 0bbb77564d767cef0c6fe1b97b705d368ddb360d55596945aea8c3ba5889fbce10479d85ad492c91d987caacdbbdccc706aa3688e321460069f00c05814fae02
SHA512 (389-ds-base-2.0.7.tar.bz2) = 05a307d2bfbf47e60cab236f4b9f931820e33e208579422e85f2823eb19dbd45dbab5758366c1be48cbdcdf5fbf128ab3d6700ec2be1fe61dd63b9b1f855f30f
SHA512 (jemalloc-5.3.0.tar.bz2) = 22907bb052096e2caffb6e4e23548aecc5cc9283dce476896a2b1127eee64170e3562fa2e7db9571298814a7a2c7df6e8d1fbe152bd3f3b0c1abec22a2de34b1
SHA512 (389-ds-base-2.0.17.tar.bz2) = 87070a3ad0cf55a03e8337bf0bb987c775541341a73b7c2b1f329705238715e763f40c55d60002110ecc31dc17684978099b1e7f265cd92472119ed0b84efddf

View file

@ -2,7 +2,7 @@
- hosts: localhost
remote_user: root
vars:
ds_repo_url: https://pagure.io/389-ds-base.git
ds_repo_url: https://github.com/389ds/389-ds-base.git
ds_repo_dir: ds
ds_tests: "{{ ds_repo_dir }}/dirsrvtests/tests"
pytest: py.test-3
@ -24,4 +24,3 @@
- python3-pytest
- 389-ds-base
- 389-ds-base-snmp
- 389-ds-base-legacy-tools