Bump version to 2.2.9-2

Issue 5853 - Revert MSRV check (#5908)

.gitignore

@@ -216,3 +216,10 @@
 /jemalloc-5.3.0.tar.bz2
 /389-ds-base-2.2.1.tar.bz2
 /389-ds-base-2.2.2.tar.bz2
+/389-ds-base-2.2.3.tar.bz2
+/389-ds-base-2.2.4.tar.bz2
+/389-ds-base-2.2.5.tar.bz2
+/389-ds-base-2.2.6.tar.bz2
+/389-ds-base-2.2.7.tar.bz2
+/389-ds-base-2.2.8.tar.bz2
+/389-ds-base-2.2.9.tar.bz2

0001-Issue-5853-Revert-MSRV-check-5908.patch

@@ -0,0 +1,109 @@
+From 66876813aa7e96ae2c15241c1fc32772e08e41e4 Mon Sep 17 00:00:00 2001
+From: Simon Pichugin <spichugi@redhat.com>
+Date: Wed, 23 Aug 2023 15:37:25 -0700
+Subject: [PATCH] Issue 5853 - Revert MSRV check (#5908)
+
+Description: We should be careful with rust-version manifest field
+on older 389-ds-base versions as it's harder to predict at which
+point in time Rust was updated in some older environments.
+
+Related: https://github.com/389ds/389-ds-base/issues/5861
+
+Reviewed by: @vashirov (Thanks!)
+---
+ src/librnsslapd/Cargo.toml              | 1 -
+ src/librslapd/Cargo.toml                | 1 -
+ src/plugins/entryuuid/Cargo.toml        | 1 -
+ src/plugins/entryuuid_syntax/Cargo.toml | 1 -
+ src/plugins/pwdchan/Cargo.toml          | 1 -
+ src/slapd/Cargo.toml                    | 1 -
+ src/slapi_r_plugin/Cargo.toml           | 1 -
+ 7 files changed, 7 deletions(-)
+
+diff --git a/src/librnsslapd/Cargo.toml b/src/librnsslapd/Cargo.toml
+index c18ab7fc8..11bb9afe7 100644
+--- a/src/librnsslapd/Cargo.toml
++++ b/src/librnsslapd/Cargo.toml
+@@ -2,7 +2,6 @@
+ name = "librnsslapd"
+ version = "0.1.0"
+ authors = ["William Brown <william@blackhats.net.au>"]
+-rust-version = "1.70"
+ edition = "2018"
+ build = "build.rs"
+ 
+diff --git a/src/librslapd/Cargo.toml b/src/librslapd/Cargo.toml
+index fb445c251..15c00a47b 100644
+--- a/src/librslapd/Cargo.toml
++++ b/src/librslapd/Cargo.toml
+@@ -2,7 +2,6 @@
+ name = "librslapd"
+ version = "0.1.0"
+ authors = ["William Brown <william@blackhats.net.au>"]
+-rust-version = "1.70"
+ edition = "2018"
+ build = "build.rs"
+ 
+diff --git a/src/plugins/entryuuid/Cargo.toml b/src/plugins/entryuuid/Cargo.toml
+index f0d8e9f2a..c43d7a771 100644
+--- a/src/plugins/entryuuid/Cargo.toml
++++ b/src/plugins/entryuuid/Cargo.toml
+@@ -2,7 +2,6 @@
+ name = "entryuuid"
+ version = "0.1.0"
+ authors = ["William Brown <william@blackhats.net.au>"]
+-rust-version = "1.70"
+ edition = "2018"
+ 
+ # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
+diff --git a/src/plugins/entryuuid_syntax/Cargo.toml b/src/plugins/entryuuid_syntax/Cargo.toml
+index d80b59bf1..f7d3d64c9 100644
+--- a/src/plugins/entryuuid_syntax/Cargo.toml
++++ b/src/plugins/entryuuid_syntax/Cargo.toml
+@@ -2,7 +2,6 @@
+ name = "entryuuid_syntax"
+ version = "0.1.0"
+ authors = ["William Brown <william@blackhats.net.au>"]
+-rust-version = "1.70"
+ edition = "2018"
+ 
+ # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
+diff --git a/src/plugins/pwdchan/Cargo.toml b/src/plugins/pwdchan/Cargo.toml
+index 3cda69f22..40d8a54aa 100644
+--- a/src/plugins/pwdchan/Cargo.toml
++++ b/src/plugins/pwdchan/Cargo.toml
+@@ -2,7 +2,6 @@
+ name = "pwdchan"
+ version = "0.1.0"
+ authors = ["William Brown <william@blackhats.net.au>"]
+-rust-version = "1.70"
+ edition = "2018"
+ 
+ # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
+diff --git a/src/slapd/Cargo.toml b/src/slapd/Cargo.toml
+index 39b6fdd1d..a18cb7626 100644
+--- a/src/slapd/Cargo.toml
++++ b/src/slapd/Cargo.toml
+@@ -2,7 +2,6 @@
+ name = "slapd"
+ version = "0.1.0"
+ authors = ["William Brown <william@blackhats.net.au>"]
+-rust-version = "1.70"
+ edition = "2018"
+ 
+ # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
+diff --git a/src/slapi_r_plugin/Cargo.toml b/src/slapi_r_plugin/Cargo.toml
+index 024bd464a..9d197ec85 100644
+--- a/src/slapi_r_plugin/Cargo.toml
++++ b/src/slapi_r_plugin/Cargo.toml
+@@ -2,7 +2,6 @@
+ name = "slapi_r_plugin"
+ version = "0.1.0"
+ authors = ["William Brown <william@blackhats.net.au>"]
+-rust-version = "1.70"
+ edition = "2018"
+ build = "build.rs"
+ 
+-- 
+2.41.0
+

389-ds-base.spec

@@ -9,7 +9,6 @@ ExcludeArch: i686
 %global use_Socket6 0
 
 %global use_asan 0
-%global use_rust 1
 %global bundle_jemalloc 1
 %if %{use_asan}
 %global bundle_jemalloc 0
@@ -46,9 +45,9 @@ ExcludeArch: i686
 
 Summary:          389 Directory Server (base)
 Name:             389-ds-base
-Version:          2.2.2
-Release:          3%{?dist}
-License:          GPLv3+ and (ASL 2.0 or MIT) and MIT and (Unlicense or MIT) and MPLv2.0 and BSD and ASL 2.0 and (ASL 2.0 or Boost) and (ASL 2.0 with exceptions or ASL 2.0 or MIT)
+Version:          2.2.9
+Release:          2%{?dist}
+License:          GPLv3+ and (ASL 2.0 or MIT) and MIT and (0BSD or MIT or ASL 2.0) and (Unlicense or MIT) and MPLv2.0 and BSD and (ASL 2.0 with exceptions or ASL 2.0 or MIT) and (MIT or zlib or ASL 2.0) and ASL 2.0 and (ASL 2.0 or Boost) and ((MIT or ASL 2.0) and Unicode-DFS-2016)
 URL:              https://www.port389.org
 Conflicts:        selinux-policy-base < 3.9.8
 Conflicts:        freeipa-server < 4.0.3
@@ -58,82 +57,94 @@ Obsoletes:        %{name}-legacy-tools-debuginfo < 1.4.4.6
 Provides:         ldif2ldbm >= 0
 
 ##### Bundled cargo crates list - START #####
+Provides:  bundled(crate(addr2line)) = 0.20.0
+Provides:  bundled(crate(adler)) = 1.0.2
 Provides:  bundled(crate(ahash)) = 0.7.6
 Provides:  bundled(crate(ansi_term)) = 0.12.1
 Provides:  bundled(crate(atty)) = 0.2.14
 Provides:  bundled(crate(autocfg)) = 1.1.0
-Provides:  bundled(crate(base64)) = 0.13.0
+Provides:  bundled(crate(backtrace)) = 0.3.68
+Provides:  bundled(crate(base64)) = 0.13.1
 Provides:  bundled(crate(bitflags)) = 1.3.2
+Provides:  bundled(crate(bitflags)) = 2.3.3
 Provides:  bundled(crate(byteorder)) = 1.4.3
 Provides:  bundled(crate(cbindgen)) = 0.9.1
-Provides:  bundled(crate(cc)) = 1.0.73
+Provides:  bundled(crate(cc)) = 1.0.81
 Provides:  bundled(crate(cfg-if)) = 1.0.0
 Provides:  bundled(crate(clap)) = 2.34.0
 Provides:  bundled(crate(concread)) = 0.2.21
-Provides:  bundled(crate(crossbeam)) = 0.8.1
-Provides:  bundled(crate(crossbeam-channel)) = 0.5.5
-Provides:  bundled(crate(crossbeam-deque)) = 0.8.1
-Provides:  bundled(crate(crossbeam-epoch)) = 0.9.9
-Provides:  bundled(crate(crossbeam-queue)) = 0.3.5
-Provides:  bundled(crate(crossbeam-utils)) = 0.8.10
+Provides:  bundled(crate(crossbeam)) = 0.8.2
+Provides:  bundled(crate(crossbeam-channel)) = 0.5.8
+Provides:  bundled(crate(crossbeam-deque)) = 0.8.3
+Provides:  bundled(crate(crossbeam-epoch)) = 0.9.15
+Provides:  bundled(crate(crossbeam-queue)) = 0.3.8
+Provides:  bundled(crate(crossbeam-utils)) = 0.8.16
 Provides:  bundled(crate(entryuuid)) = 0.1.0
 Provides:  bundled(crate(entryuuid_syntax)) = 0.1.0
-Provides:  bundled(crate(fastrand)) = 1.7.0
+Provides:  bundled(crate(errno)) = 0.3.2
+Provides:  bundled(crate(errno-dragonfly)) = 0.1.2
+Provides:  bundled(crate(fastrand)) = 2.0.0
 Provides:  bundled(crate(fernet)) = 0.1.4
 Provides:  bundled(crate(foreign-types)) = 0.3.2
 Provides:  bundled(crate(foreign-types-shared)) = 0.1.1
-Provides:  bundled(crate(getrandom)) = 0.2.7
-Provides:  bundled(crate(hashbrown)) = 0.11.2
+Provides:  bundled(crate(getrandom)) = 0.2.10
+Provides:  bundled(crate(gimli)) = 0.27.3
+Provides:  bundled(crate(hashbrown)) = 0.12.3
 Provides:  bundled(crate(hermit-abi)) = 0.1.19
 Provides:  bundled(crate(instant)) = 0.1.12
-Provides:  bundled(crate(itoa)) = 1.0.2
-Provides:  bundled(crate(jobserver)) = 0.1.24
-Provides:  bundled(crate(libc)) = 0.2.126
+Provides:  bundled(crate(itoa)) = 1.0.9
+Provides:  bundled(crate(jobserver)) = 0.1.26
+Provides:  bundled(crate(libc)) = 0.2.147
 Provides:  bundled(crate(librnsslapd)) = 0.1.0
 Provides:  bundled(crate(librslapd)) = 0.1.0
-Provides:  bundled(crate(lock_api)) = 0.4.7
-Provides:  bundled(crate(log)) = 0.4.17
-Provides:  bundled(crate(lru)) = 0.7.7
-Provides:  bundled(crate(memoffset)) = 0.6.5
-Provides:  bundled(crate(once_cell)) = 1.13.0
-Provides:  bundled(crate(openssl)) = 0.10.40
-Provides:  bundled(crate(openssl-macros)) = 0.1.0
-Provides:  bundled(crate(openssl-sys)) = 0.9.74
+Provides:  bundled(crate(linux-raw-sys)) = 0.4.5
+Provides:  bundled(crate(lock_api)) = 0.4.10
+Provides:  bundled(crate(log)) = 0.4.19
+Provides:  bundled(crate(lru)) = 0.7.8
+Provides:  bundled(crate(memchr)) = 2.5.0
+Provides:  bundled(crate(memoffset)) = 0.9.0
+Provides:  bundled(crate(miniz_oxide)) = 0.7.1
+Provides:  bundled(crate(object)) = 0.31.1
+Provides:  bundled(crate(once_cell)) = 1.18.0
+Provides:  bundled(crate(openssl)) = 0.10.55
+Provides:  bundled(crate(openssl-macros)) = 0.1.1
+Provides:  bundled(crate(openssl-sys)) = 0.9.90
 Provides:  bundled(crate(parking_lot)) = 0.11.2
-Provides:  bundled(crate(parking_lot_core)) = 0.8.5
+Provides:  bundled(crate(parking_lot_core)) = 0.8.6
 Provides:  bundled(crate(paste)) = 0.1.18
 Provides:  bundled(crate(paste-impl)) = 0.1.18
-Provides:  bundled(crate(pin-project-lite)) = 0.2.9
-Provides:  bundled(crate(pkg-config)) = 0.3.25
-Provides:  bundled(crate(ppv-lite86)) = 0.2.16
-Provides:  bundled(crate(proc-macro-hack)) = 0.5.19
-Provides:  bundled(crate(proc-macro2)) = 1.0.40
+Provides:  bundled(crate(pin-project-lite)) = 0.2.10
+Provides:  bundled(crate(pkg-config)) = 0.3.27
+Provides:  bundled(crate(ppv-lite86)) = 0.2.17
+Provides:  bundled(crate(proc-macro-hack)) = 0.5.20+deprecated
+Provides:  bundled(crate(proc-macro2)) = 1.0.66
 Provides:  bundled(crate(pwdchan)) = 0.1.0
-Provides:  bundled(crate(quote)) = 1.0.20
+Provides:  bundled(crate(quote)) = 1.0.32
 Provides:  bundled(crate(rand)) = 0.8.5
 Provides:  bundled(crate(rand_chacha)) = 0.3.1
-Provides:  bundled(crate(rand_core)) = 0.6.3
-Provides:  bundled(crate(redox_syscall)) = 0.2.13
-Provides:  bundled(crate(remove_dir_all)) = 0.5.3
-Provides:  bundled(crate(ryu)) = 1.0.10
-Provides:  bundled(crate(scopeguard)) = 1.1.0
-Provides:  bundled(crate(serde)) = 1.0.138
-Provides:  bundled(crate(serde_derive)) = 1.0.138
-Provides:  bundled(crate(serde_json)) = 1.0.82
+Provides:  bundled(crate(rand_core)) = 0.6.4
+Provides:  bundled(crate(redox_syscall)) = 0.2.16
+Provides:  bundled(crate(redox_syscall)) = 0.3.5
+Provides:  bundled(crate(rustc-demangle)) = 0.1.23
+Provides:  bundled(crate(rustix)) = 0.38.6
+Provides:  bundled(crate(ryu)) = 1.0.15
+Provides:  bundled(crate(scopeguard)) = 1.2.0
+Provides:  bundled(crate(serde)) = 1.0.180
+Provides:  bundled(crate(serde_derive)) = 1.0.180
+Provides:  bundled(crate(serde_json)) = 1.0.104
 Provides:  bundled(crate(slapd)) = 0.1.0
 Provides:  bundled(crate(slapi_r_plugin)) = 0.1.0
-Provides:  bundled(crate(smallvec)) = 1.9.0
+Provides:  bundled(crate(smallvec)) = 1.11.0
 Provides:  bundled(crate(strsim)) = 0.8.0
-Provides:  bundled(crate(syn)) = 1.0.98
-Provides:  bundled(crate(synstructure)) = 0.12.6
-Provides:  bundled(crate(tempfile)) = 3.3.0
+Provides:  bundled(crate(syn)) = 1.0.109
+Provides:  bundled(crate(syn)) = 2.0.28
+Provides:  bundled(crate(tempfile)) = 3.7.0
 Provides:  bundled(crate(textwrap)) = 0.11.0
-Provides:  bundled(crate(tokio)) = 1.19.2
-Provides:  bundled(crate(tokio-macros)) = 1.8.0
-Provides:  bundled(crate(toml)) = 0.5.9
-Provides:  bundled(crate(unicode-ident)) = 1.0.1
-Provides:  bundled(crate(unicode-width)) = 0.1.9
-Provides:  bundled(crate(unicode-xid)) = 0.2.3
+Provides:  bundled(crate(tokio)) = 1.29.1
+Provides:  bundled(crate(tokio-macros)) = 2.1.0
+Provides:  bundled(crate(toml)) = 0.5.11
+Provides:  bundled(crate(unicode-ident)) = 1.0.11
+Provides:  bundled(crate(unicode-width)) = 0.1.10
 Provides:  bundled(crate(uuid)) = 0.8.2
 Provides:  bundled(crate(vcpkg)) = 0.2.15
 Provides:  bundled(crate(vec_map)) = 0.8.2
@@ -142,8 +153,17 @@ Provides:  bundled(crate(wasi)) = 0.11.0+wasi_snapshot_preview1
 Provides:  bundled(crate(winapi)) = 0.3.9
 Provides:  bundled(crate(winapi-i686-pc-windows-gnu)) = 0.4.0
 Provides:  bundled(crate(winapi-x86_64-pc-windows-gnu)) = 0.4.0
-Provides:  bundled(crate(zeroize)) = 1.5.6
-Provides:  bundled(crate(zeroize_derive)) = 1.3.2
+Provides:  bundled(crate(windows-sys)) = 0.48.0
+Provides:  bundled(crate(windows-targets)) = 0.48.1
+Provides:  bundled(crate(windows_aarch64_gnullvm)) = 0.48.0
+Provides:  bundled(crate(windows_aarch64_msvc)) = 0.48.0
+Provides:  bundled(crate(windows_i686_gnu)) = 0.48.0
+Provides:  bundled(crate(windows_i686_msvc)) = 0.48.0
+Provides:  bundled(crate(windows_x86_64_gnu)) = 0.48.0
+Provides:  bundled(crate(windows_x86_64_gnullvm)) = 0.48.0
+Provides:  bundled(crate(windows_x86_64_msvc)) = 0.48.0
+Provides:  bundled(crate(zeroize)) = 1.6.0
+Provides:  bundled(crate(zeroize_derive)) = 1.4.2
 ##### Bundled cargo crates list - END #####
 
 BuildRequires:    nspr-devel >= 4.32
@@ -154,8 +174,9 @@ BuildRequires:    libdb-devel
 BuildRequires:    cyrus-sasl-devel
 BuildRequires:    icu
 BuildRequires:    libicu-devel
-BuildRequires:    pcre-devel
+BuildRequires:    pcre2-devel
 BuildRequires:    cracklib-devel
+BuildRequires:    json-c-devel
 %if %{use_clang}
 BuildRequires:    libatomic
 BuildRequires:    clang
@@ -173,17 +194,17 @@ BuildRequires:    openssl-devel
 BuildRequires:    pam-devel
 BuildRequires:    systemd-units
 BuildRequires:    systemd-devel
+BuildRequires:    systemd-rpm-macros
+%{?sysusers_requires_compat}
 %if %{use_asan}
 BuildRequires:    libasan
 %endif
-# If rust is enabled
-%if %{use_rust}
 BuildRequires:    cargo
 BuildRequires:    rust
-%endif
 BuildRequires:    pkgconfig
 BuildRequires:    pkgconfig(systemd)
 BuildRequires:    pkgconfig(krb5)
+BuildRequires:    pkgconfig(libpcre2-8)
 
 # Needed to support regeneration of the autotool artifacts.
 BuildRequires:    autoconf
@@ -206,6 +227,7 @@ BuildRequires:    python%{python3_pkgversion}-argcomplete
 BuildRequires:    python%{python3_pkgversion}-argparse-manpage
 BuildRequires:    python%{python3_pkgversion}-libselinux
 BuildRequires:    python%{python3_pkgversion}-policycoreutils
+BuildRequires:    python%{python3_pkgversion}-cryptography
 
 # For cockpit
 %if %{use_cockpit}
@@ -228,6 +250,7 @@ Requires:         /usr/bin/c_rehash
 Requires:         python%{python3_pkgversion}-ldap
 Requires:         acl
 Requires:         zlib
+Requires:         json-c
 
 # this is needed to setup SSL if you are not using the
 # administration server package
@@ -267,11 +290,9 @@ Source2:          %{name}-devel.README
 %if %{bundle_jemalloc}
 Source3:          https://github.com/jemalloc/%{jemalloc_name}/releases/download/%{jemalloc_ver}/%{jemalloc_name}-%{jemalloc_ver}.tar.bz2
 %endif
+Source4:          389-ds-base.sysusers
 
-# Remove this after rust-1.56 lands in repos
-%if 0%{?rhel} == 8
-Patch0:           concread-use-2018-edition.patch
-%endif
+Patch0:           0001-Issue-5853-Revert-MSRV-check-5908.patch
 
 %description
 389 Directory Server is an LDAPv3 compliant server.  The base package includes
@@ -290,7 +311,7 @@ BuildRequires:    openldap-devel
 BuildRequires:    libdb-devel
 BuildRequires:    cyrus-sasl-devel
 BuildRequires:    libicu-devel
-BuildRequires:    pcre-devel
+BuildRequires:    pcre2-devel
 BuildRequires:    libtalloc-devel
 BuildRequires:    libevent-devel
 BuildRequires:    libtevent-devel
@@ -350,6 +371,7 @@ Requires: python%{python3_pkgversion}-dateutil
 Requires: python%{python3_pkgversion}-argcomplete
 Requires: python%{python3_pkgversion}-libselinux
 Requires: python%{python3_pkgversion}-setuptools
+Requires: python%{python3_pkgversion}-cryptography
 %{?python_provide:%python_provide python%{python3_pkgversion}-lib389}
 
 %description -n python%{python3_pkgversion}-lib389
@@ -382,16 +404,12 @@ cp %{SOURCE2} README.devel
 
 OPENLDAP_FLAG="--with-openldap"
 %{?with_tmpfiles_d: TMPFILES_FLAG="--with-tmpfiles-d=%{with_tmpfiles_d}"}
-# hack hack hack https://bugzilla.redhat.com/show_bug.cgi?id=833529
-NSSARGS="--with-nss-lib=%{_libdir} --with-nss-inc=%{_includedir}/nss3"
 
 %if %{use_asan}
 ASAN_FLAGS="--enable-asan --enable-debug"
 %endif
 
-%if %{use_rust}
-RUST_FLAGS="--enable-rust --enable-rust-offline"
-%endif
+RUST_FLAGS="--enable-rust-offline"
 
 %if !%{use_cockpit}
 COCKPIT_FLAGS="--disable-cockpit"
@@ -443,10 +461,9 @@ autoreconf -fiv
            --with-systemdsystemconfdir=%{_sysconfdir}/systemd/system \
            --with-systemdgroupname=%{groupname}  \
            --libexecdir=%{_libexecdir}/%{pkgname} \
-           $NSSARGS $ASAN_FLAGS $RUST_FLAGS $CLANG_FLAGS $COCKPIT_FLAGS \
+           $ASAN_FLAGS $RUST_FLAGS $CLANG_FLAGS $COCKPIT_FLAGS \
            --enable-cmocka \
-           --with-libldap-r=no \
-           --enable-perl
+           --with-libldap-r=no
 
 # lib389
 pushd ./src/lib389
@@ -492,6 +509,7 @@ mkdir -p $RPM_BUILD_ROOT/var/lock/%{pkgname}
 
 # for systemd
 mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/systemd/system/%{groupname}.wants
+install -p -D -m 0644 %{SOURCE4} %{buildroot}%{_sysusersdir}/389-ds-base.conf
 
 # remove libtool archives and static libs
 rm -f $RPM_BUILD_ROOT%{_libdir}/%{pkgname}/*.a
@@ -526,20 +544,8 @@ fi
 
 # https://fedoraproject.org/wiki/Packaging:UsersAndGroups#Soft_static_allocation
 # Soft static allocation for UID and GID
-USERNAME="dirsrv"
-ALLOCATED_UID=389
-GROUPNAME="dirsrv"
-ALLOCATED_GID=389
-HOMEDIR="/usr/share/dirsrv"
-
-getent group $GROUPNAME >/dev/null || /usr/sbin/groupadd -f -g $ALLOCATED_GID -r $GROUPNAME
-if ! getent passwd $USERNAME >/dev/null ; then
-    if ! getent passwd $ALLOCATED_UID >/dev/null ; then
-      /usr/sbin/useradd -r -u $ALLOCATED_UID -g $GROUPNAME -d $HOMEDIR -s /sbin/nologin -c "user for 389-ds-base" $USERNAME
-    else
-      /usr/sbin/useradd -r -g $GROUPNAME -d $HOMEDIR -s /sbin/nologin -c "user for 389-ds-base" $USERNAME
-    fi
-fi
+# sysusers.d format https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format
+%sysusers_create_compat %{SOURCE4}
 
 # Reload our sysctl before we restart (if we can)
 sysctl --system &> $output; true
@@ -613,6 +619,7 @@ exit 0
 %config(noreplace)%{_sysconfdir}/%{pkgname}/schema/*.ldif
 %dir %{_sysconfdir}/%{pkgname}/config
 %dir %{_sysconfdir}/systemd/system/%{groupname}.wants
+%{_sysusersdir}/389-ds-base.conf
 %config(noreplace)%{_sysconfdir}/%{pkgname}/config/slapd-collations.conf
 %config(noreplace)%{_sysconfdir}/%{pkgname}/config/certmap.conf
 %{_datadir}/%{pkgname}
@@ -716,6 +723,214 @@ exit 0
 %endif
 
 %changelog
+* Sat Oct 07 2023 Viktor Ashirov <vashirov@redhat.com> - 2.2.9-2
+- Issue 5853 - Revert MSRV check (#5908)
+
+* Thu Aug 3 2023 Mark Reynolds <mreynolds@redhat.com> - 2.2.9-1
+- Bump version to 2.2.9
+- Issue 5729 - Memory leak in factory_create_extension (#5814)
+- Issue 5877 - test_basic_ldapagent breaks test_setup_ds_as_non_root* tests
+- Issue 5853 - Update Cargo.lock and fix minor warning (#5854)
+- Issue 5867 - lib389 should use filter for tarfile as recommended by PEP 706 (#5868)
+- Issue 5864 - Server fails to start after reboot because it's unable to access nsslapd-rundir
+- Issue 5856 - SyntaxWarning: invalid escape sequence '\,'
+- Issue 5859 - dbscan fails with AttributeError: 'list' object has no attribute 'extends'
+- Issue 4551 - Paged search impacts performance (#5838)
+- Issue 4169 - UI - Fix retrochangelog and schema Typeaheads (#5837)
+- issue 5833 - dsconf monitor backend fails on lmdb (#5835)
+- Issue 3555 - UI - Fix audit issue with npm - semver and word-wrap
+- Issue 5752 - RFE - Provide a history for LastLoginTime (#5807)
+- Issue 5793 - UI - fix suffix selection in export modal
+- Issue 5825 - healthcheck - password storage scheme warning needs more info
+- Issue 5822 - Allow empty export path for db2ldif
+- Issue 5755 - Massive memory leaking on update operations (#5824)
+- Issue 5551 - Almost empty and not loaded ns-slapd high cpu load
+- Issue 5722 - RFE When a filter contains 'nsrole', improve response time by rewriting the filter (#5723)
+- Issue 5755 - The Massive memory leaking on update operations (#5803)
+- Issue 5752 - CI - Add more tests for lastLoginHistorySize RFE (#5802)
+- Issue 2375 - CLI - Healthcheck - revise and add new checks
+- Issue 5781 - Bug handling return code of pre-extended operation plugin.
+- Issue 5646 - Various memory leaks (#5725)
+- Issue 5789 - Improve ds-replcheck error handling
+- Issue 5642 - Build fails against setuptools 67.0.0
+- Issue 5778 - UI - Remove error message if .dsrc is missing
+- Issue 5751 - Cleanallruv task crashes on consumer (#5775)
+- Issue 5743 - Disabling replica crashes the server (#5746)
+
+* Thu May 18 2023 Mark Reynolds <mreynolds@redhat.com> - 2.2.8-1
+- Bump version to 2.2.8
+- Issue 5752 - RFE - Provide a history for LastLoginTime (#5753)
+- Issue 5770 - RFE - Extend Password Adminstrators to allow skipping password info updates
+- Issue 5768 - CLI/UI - cert checks are too strict, and other issues
+- Issue 5765 - Improve installer selinux handling
+- Issue 5643 - Memory leak in entryrdn during delete (#5717)
+- Issue 152  - RFE - Add support for LDAP alias entries
+- Issue 5052 - BUG - Custom filters prevented entry deletion (#5060)
+- Issue 5704 - crash in sync_refresh_initial_content (#5720)
+- Issue 5738 - RFE - UI - Read/write replication monitor info to .dsrc file
+- Issue 5749 - RFE - Allow Account Policy Plugin to handle inactivity and expiration at the same time
+
+* Wed Apr 26 2023 Viktor Ashirov <vashirov@redhat.com> - 2.2.7-2
+- Fix a typo in Requires
+
+* Tue Apr 25 2023 Mark Reynolds <mreynolds@redhat.com> - 2.2.7-1
+- Bump version to 2.2.7
+- Issue 5734 - RFE - Exclude pwdFailureTime and ContextCSN (#5735)
+- Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727)
+- Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
+- Issue 5710 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (#5711)
+- Issue 1081 - Stop schema replication from overwriting x-origin
+- Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699)
+- Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692)
+- Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691)
+- Issue 5687 - UI - sensitive information disclosure
+- Issue 4583 - Update specfile to skip checks of ASAN builds
+- Issue 5550 - dsconf monitor crashes with Error math domain error (#5553)
+- Issue 3604 - UI - Add support for Subject Alternative Names in CSR
+- Issue 5600 - buffer overflow when enabling sync repl plugin when dynamic plugins is enabled
+- Fix build break
+- Issue 5640 - Update logconv for new logging format
+- Issue 5545 - A random crash in import over lmdb (#5546)
+- Issue 5490 - tombstone in entryrdn index with lmdb but not with bdb (#5498)
+- Issue 5408 - lmdb import is slow (#5481)
+- Issue 5162 - CI - fix error message for invalid pem file
+- Issue 5598 - In 2.x, SRCH throughput drops by 10% because of handling of referral (#5604)
+- Issue 5671 - covscan - clang warning (#5672)
+- Issue 5267 - CI - Fix issues with nsslapd-return-original-entrydn
+- Issue 5666 - CLI - Add timeout parameter for tasks
+- Issue 5567 - CLI - make ldifgen use the same default ldif name for all options
+- Issue 5162 - Lib389 - verify certificate type before adding
+- Issue 5630 - CLI - need to add logging filter for stdout
+- Issue 5646 - CLI/UI - do not hardcode password storage schemes
+- Issue 5640 - Update logconv for new logging format
+- Issue 5652 - Libasan crash in replication/cascading_test (#5659)
+- Issue 5658 - CLI - unable to add attribute with matching rule
+- Issue 5653 - covscan - fix invalid dereference
+- Issue 5648 - Covscan - Compiler warnings (#5651)
+- Issue 5630 - CLI - error messages should goto stderr
+- Issue 2435 - RFE - Raise IDL Scan Limit to INT_MAX (#5639)
+- Issue 5632 - CLI - improve error handling with db2ldif
+- Issue 5578 - dscreate ds-root does not normaile paths (#5613)
+- Issue 5560 - dscreate run by non superuser set defaults requiring superuser privilege (#5579)
+- Issue 5624 - RFE - UI - export certificates, and import text base64 encoded certificates
+- Issue 4293 - RFE - CLI - add dsrc options for setting user and group subtrees
+- Issue 5497 - boolean attributes should be case insensitive
+
+* Tue Mar 07 2023 Simon Pichugin <spichugi@redhat.com> - 2.2.6-2
+- Use systemd-sysusers for dirsrv user and group (#2176257)
+
+* Mon Jan 23 2023 Mark Reynolds <mreynolds@redhat.com> - 2.2.6-1
+- Bump version to 2.2.6
+- Issue 5607, 5351, 5611 - UI/CLI - fix various issues
+- Issue 5608 - UI - need to replace some "const" with "let"
+- Issue 3604 - Create a private key/CSR with dsconf/Cockpit (#5584)
+- Issue 5602 - UI - browser crash when trying to modify read-only variable
+- Issue 5581 - UI - Support cockpit dark theme
+- Issue 5593 - CLI - dsidm account subtree-status fails with TypeError
+- Issue 5591 - BUG - Segfault in cl5configtrim with invalid confi (#5592)
+- Fix latest npm audit failures
+- Issue 5599 - CI - webui tests randomly fail
+- Issue 5348 - RFE - CLI - add functionality to do bulk updates to entries
+- Issue 5526 - RFE - Improve saslauthd migration options (#5528)
+- Issue 5588 - Fix CI tests
+- Issue 5585 - lib389 password policy DN handling is incorrect (#5587)
+- Issue 5521 - UI - Update plugins for new split PAM and LDAP pass thru auth
+
+* Tue Jan 3 2023 Mark Reynolds <mreynolds@redhat.com> - 2.2.5-1
+- Bump version to 2.2.5
+- Issue 5236 - UI add specialized group edit modal
+- Issue 5278 - CLI - dsidm asks for the old password on password reset
+- Issue 5531 - CI - use universal_lines in capture_output
+- Issue 5505 - Fix compiler warning (#5506)
+- Issue 3615 - CLI - prevent virtual attribute indexing
+- Issue 5413 - Allow multiple MemberOf fixup tasks with different bases/filters
+- Issue 5561 - Nightly tests are failing
+- Issue 5521 - RFE - split pass through auth cli
+- Issue 5521 - BUG - Pam PTA multiple issues
+- Issue 5544 - Increase default task TTL
+- Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
+- Issue 5539 - Make logger's parameter name unified (#5540)
+- Issue 3729 - (cont) RFE Extend log of operations statistics in access log (#5538)
+- Issue 5534 - Fix a rebase typo (#5537)
+- Issue 5534 - Add copyright text to the repository file
+
+* Fri Nov 18 2022 Mark Reynolds <mreynolds@redhat.com> - 2.2.4-1
+- Bump version to 2.2.4
+- Issue 5532 - Make db compaction TOD day more robust.
+- Issue 3729 - RFE Extend log of operations statistics in access log (#5508)
+- Issue 5529 - UI - Fix npm vulnerability in loader-utils
+- Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
+- Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
+- Issue 5510 - remove twalk_r dependency to build on RHEL8 (#5516)
+- Issue 5162 - RFE - CLI allow adding CA certificate bundles
+- Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)
+- Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
+- Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
+- Issue 5502 - RFE - Add option to display entry attributes in audit log
+- Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)
+- Issue 5367 - RFE - store full DN in database record
+- Issue 5495 - RFE - skip dds during migration. (#5496)
+- Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
+- Issue 5368 - Retro Changelog trimming does not work (#5486)
+- Issue 5487 - Fix various issues with logconv.pl
+- Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
+- Issue 5478 - Random crash in connection code during server shutdown (#5479)
+- Issue 3061 - RFE - Add password policy debug log level
+- Issue 4324 - Revert recursive pthread mutex usage in factory.c
+- Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264)
+- Issue 4324 - Revert recursive pthread mutex change (#5463)
+- Issue 5465 - Fix dbscan linking (#5466)
+- Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
+- Issue 5453 - UI/CLI - Changing Root DN breaks UI
+- Issue 5446 - Fix some covscan issues (#5451)
+- Issue 4308 - checking if an entry is a referral is expensive
+- Issue 5447 - UI - add NDN max cache size to UI
+- Issue 5443 - UI - disable save button while saving
+- Issue 5413 - Allow only one MemberOf fixup task at a time
+- Issue 5158 - entryuuid fixup tasks fails in replicated topology (#5439)
+- Issue 4592 - dscreate error with custom dir_path (#5434)
+
+* Tue Sep 20 2022 Mark Reynolds <mreynolds@redhat.com> - 2.2.3-2
+- Bump verrsion to 2.2.3-2
+- Replace pcre-delvel requirment with pcre2-devel
+
+* Thu Sep 1 2022 Mark Reynolds <mreynolds@redhat.com> - 2.2.3-1
+- Bump verrsion to 2.2.3
+- Issue 5012 - Migrate pcre to pcre2 - remove match limit
+- Update CI tests
+- Issue 5356 - Make Rust non-optional and update default password storage scheme
+- Issue 5012 - Migrate pcre to pcre2
+- Issue 5428 - Fix regression with nscpEntryWsi computation
+- Fix missing 'not' in description (closes #5423) (#5424)
+- Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
+- Issue 3903 - fix repl keep alive event interval
+- Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
+- Issue 5415 - Hostname when set to localhost causing failures in other tests
+- Issue 5412 - lib389 - do not set backend name to lowercase
+- Issue 5407 - sync_repl crashes if enabled while dynamic plugin is enabled (#5411)
+- Issue 5385 - LMDB - import crash in rdncache_add_elem (#5406)
+- Issue 5403 - Memory leak in conntection table mulit list (#5404)
+- Issue 3903 - keep alive update event starts too soon
+- Issue 5397 - Fix various memory leaks
+- Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
+- Issue 3903 - Supplier should do periodic updates
+- Issue 5377 - Code cleanup: Fix Covscan invalid reference (#5393)
+- Issue 5394 - configure doesn't check for lmdb and json-c
+- Issue 5392 - dscreate fails when using alternative ports in the SELinux hi_reserved_port_t label range
+- Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
+- Issue 5388 - fix use-after-free and deadcode
+- Issue 5383 - UI - Various fixes and RFE's for UI
+- Issue 4656 - Remove problematic language from source code
+- Issue 5380 - Separate cleanAllRUV code into new file
+- Issue 5322 - optime & wtime on rejected connections is not properly set
+- Issue 5335 - RFE - Add Security Audit Log
+- Issue 5375 - CI - disable TLS hostname checking
+- Issue 981  - Managed Entries betxnpreoperation - transaction not aborted on managed entry failure (#5369)
+- Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
+- Issue 5371 - Update npm and cargo packages
+- Issue 3069 - Support ECDSA private keys for TLS (#5365)
+- Issue 5290 - Importing certificate chain files via "import-server-key-cert" no longer works (#5293)
+
 * Mon Aug 01 2022 Frantisek Zatloukal <fzatlouk@redhat.com> - 2.2.2-3
 - Rebuilt for ICU 71.1
 

389-ds-base.sysusers

@@ -0,0 +1,3 @@
+#Type Name     ID             GECOS                   Home directory       Shell
+g     dirsrv   389
+u     dirsrv   389:389        "user for 389-ds-base"  /usr/share/dirsrv/   /sbin/nologin

sources

@@ -1,2 +1,2 @@
+SHA512 (389-ds-base-2.2.9.tar.bz2) = dbaec071a1ae2c7519b1bf47a73c576625b443f0832abf8017e1fc6492a6e236a15a4968bb512239e76decf974f78e9d098af810fb49d0767363afaf84981f45
 SHA512 (jemalloc-5.3.0.tar.bz2) = 22907bb052096e2caffb6e4e23548aecc5cc9283dce476896a2b1127eee64170e3562fa2e7db9571298814a7a2c7df6e8d1fbe152bd3f3b0c1abec22a2de34b1
-SHA512 (389-ds-base-2.2.2.tar.bz2) = 96572dbd5dfb9fb10d353613cc367b8f761f1958d217c7e381a58e9cea13169884453a3f70f7da68289298669371968282c7fdf292c520f389bc2daa394355db