Bump version to 2.3.7-2

Fedora Linux 38 with cockpit installed generates an error with 389-ds (#2242654)
Issue 5853 - Revert MSRV check (#5908)

.gitignore

@@ -219,3 +219,8 @@
 /389-ds-base-2.3.0.tar.bz2
 /389-ds-base-2.3.1.tar.bz2
 /389-ds-base-2.3.2.tar.bz2
+/389-ds-base-2.3.3.tar.bz2
+/389-ds-base-2.3.4.tar.bz2
+/389-ds-base-2.3.5.tar.bz2
+/389-ds-base-2.3.6.tar.bz2
+/389-ds-base-2.3.7.tar.bz2

0001-Issue-5853-Revert-MSRV-check-5908.patch

@@ -0,0 +1,109 @@
+From 66876813aa7e96ae2c15241c1fc32772e08e41e4 Mon Sep 17 00:00:00 2001
+From: Simon Pichugin <spichugi@redhat.com>
+Date: Wed, 23 Aug 2023 15:37:25 -0700
+Subject: [PATCH] Issue 5853 - Revert MSRV check (#5908)
+
+Description: We should be careful with rust-version manifest field
+on older 389-ds-base versions as it's harder to predict at which
+point in time Rust was updated in some older environments.
+
+Related: https://github.com/389ds/389-ds-base/issues/5861
+
+Reviewed by: @vashirov (Thanks!)
+---
+ src/librnsslapd/Cargo.toml              | 1 -
+ src/librslapd/Cargo.toml                | 1 -
+ src/plugins/entryuuid/Cargo.toml        | 1 -
+ src/plugins/entryuuid_syntax/Cargo.toml | 1 -
+ src/plugins/pwdchan/Cargo.toml          | 1 -
+ src/slapd/Cargo.toml                    | 1 -
+ src/slapi_r_plugin/Cargo.toml           | 1 -
+ 7 files changed, 7 deletions(-)
+
+diff --git a/src/librnsslapd/Cargo.toml b/src/librnsslapd/Cargo.toml
+index c18ab7fc8..11bb9afe7 100644
+--- a/src/librnsslapd/Cargo.toml
++++ b/src/librnsslapd/Cargo.toml
+@@ -2,7 +2,6 @@
+ name = "librnsslapd"
+ version = "0.1.0"
+ authors = ["William Brown <william@blackhats.net.au>"]
+-rust-version = "1.70"
+ edition = "2018"
+ build = "build.rs"
+ 
+diff --git a/src/librslapd/Cargo.toml b/src/librslapd/Cargo.toml
+index fb445c251..15c00a47b 100644
+--- a/src/librslapd/Cargo.toml
++++ b/src/librslapd/Cargo.toml
+@@ -2,7 +2,6 @@
+ name = "librslapd"
+ version = "0.1.0"
+ authors = ["William Brown <william@blackhats.net.au>"]
+-rust-version = "1.70"
+ edition = "2018"
+ build = "build.rs"
+ 
+diff --git a/src/plugins/entryuuid/Cargo.toml b/src/plugins/entryuuid/Cargo.toml
+index f0d8e9f2a..c43d7a771 100644
+--- a/src/plugins/entryuuid/Cargo.toml
++++ b/src/plugins/entryuuid/Cargo.toml
+@@ -2,7 +2,6 @@
+ name = "entryuuid"
+ version = "0.1.0"
+ authors = ["William Brown <william@blackhats.net.au>"]
+-rust-version = "1.70"
+ edition = "2018"
+ 
+ # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
+diff --git a/src/plugins/entryuuid_syntax/Cargo.toml b/src/plugins/entryuuid_syntax/Cargo.toml
+index d80b59bf1..f7d3d64c9 100644
+--- a/src/plugins/entryuuid_syntax/Cargo.toml
++++ b/src/plugins/entryuuid_syntax/Cargo.toml
+@@ -2,7 +2,6 @@
+ name = "entryuuid_syntax"
+ version = "0.1.0"
+ authors = ["William Brown <william@blackhats.net.au>"]
+-rust-version = "1.70"
+ edition = "2018"
+ 
+ # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
+diff --git a/src/plugins/pwdchan/Cargo.toml b/src/plugins/pwdchan/Cargo.toml
+index 3cda69f22..40d8a54aa 100644
+--- a/src/plugins/pwdchan/Cargo.toml
++++ b/src/plugins/pwdchan/Cargo.toml
+@@ -2,7 +2,6 @@
+ name = "pwdchan"
+ version = "0.1.0"
+ authors = ["William Brown <william@blackhats.net.au>"]
+-rust-version = "1.70"
+ edition = "2018"
+ 
+ # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
+diff --git a/src/slapd/Cargo.toml b/src/slapd/Cargo.toml
+index 39b6fdd1d..a18cb7626 100644
+--- a/src/slapd/Cargo.toml
++++ b/src/slapd/Cargo.toml
+@@ -2,7 +2,6 @@
+ name = "slapd"
+ version = "0.1.0"
+ authors = ["William Brown <william@blackhats.net.au>"]
+-rust-version = "1.70"
+ edition = "2018"
+ 
+ # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
+diff --git a/src/slapi_r_plugin/Cargo.toml b/src/slapi_r_plugin/Cargo.toml
+index 024bd464a..9d197ec85 100644
+--- a/src/slapi_r_plugin/Cargo.toml
++++ b/src/slapi_r_plugin/Cargo.toml
+@@ -2,7 +2,6 @@
+ name = "slapi_r_plugin"
+ version = "0.1.0"
+ authors = ["William Brown <william@blackhats.net.au>"]
+-rust-version = "1.70"
+ edition = "2018"
+ build = "build.rs"
+ 
+-- 
+2.41.0
+

389-ds-base.spec

@@ -45,9 +45,9 @@ ExcludeArch: i686
 
 Summary:          389 Directory Server (base)
 Name:             389-ds-base
-Version:          2.3.2
-Release:          1%{?dist}
-License:          GPLv3+ and (ASL 2.0 or MIT)
+Version:          2.3.7
+Release:          2%{?dist}
+License:          GPLv3+ and MIT and (Unlicense or MIT) and (ASL 2.0 or MIT) and (ASL 2.0 or Boost) and (MIT or zlib or ASL 2.0) and (ASL 2.0 with exceptions or ASL 2.0 or MIT) and MPLv2.0 and ASL 2.0 and ((MIT or ASL 2.0) and Unicode-DFS-2016) and BSD and (0BSD or MIT or ASL 2.0)
 URL:              https://www.port389.org
 Conflicts:        selinux-policy-base < 3.9.8
 Conflicts:        freeipa-server < 4.0.3
@@ -57,82 +57,94 @@ Obsoletes:        %{name}-legacy-tools-debuginfo < 1.4.4.6
 Provides:         ldif2ldbm >= 0
 
 ##### Bundled cargo crates list - START #####
+Provides:  bundled(crate(addr2line)) = 0.20.0
+Provides:  bundled(crate(adler)) = 1.0.2
 Provides:  bundled(crate(ahash)) = 0.7.6
 Provides:  bundled(crate(ansi_term)) = 0.12.1
 Provides:  bundled(crate(atty)) = 0.2.14
 Provides:  bundled(crate(autocfg)) = 1.1.0
+Provides:  bundled(crate(backtrace)) = 0.3.68
 Provides:  bundled(crate(base64)) = 0.13.1
 Provides:  bundled(crate(bitflags)) = 1.3.2
+Provides:  bundled(crate(bitflags)) = 2.3.3
 Provides:  bundled(crate(byteorder)) = 1.4.3
 Provides:  bundled(crate(cbindgen)) = 0.9.1
-Provides:  bundled(crate(cc)) = 1.0.78
+Provides:  bundled(crate(cc)) = 1.0.82
 Provides:  bundled(crate(cfg-if)) = 1.0.0
 Provides:  bundled(crate(clap)) = 2.34.0
 Provides:  bundled(crate(concread)) = 0.2.21
 Provides:  bundled(crate(crossbeam)) = 0.8.2
-Provides:  bundled(crate(crossbeam-channel)) = 0.5.6
-Provides:  bundled(crate(crossbeam-deque)) = 0.8.2
-Provides:  bundled(crate(crossbeam-epoch)) = 0.9.13
+Provides:  bundled(crate(crossbeam-channel)) = 0.5.8
+Provides:  bundled(crate(crossbeam-deque)) = 0.8.3
+Provides:  bundled(crate(crossbeam-epoch)) = 0.9.15
 Provides:  bundled(crate(crossbeam-queue)) = 0.3.8
-Provides:  bundled(crate(crossbeam-utils)) = 0.8.14
+Provides:  bundled(crate(crossbeam-utils)) = 0.8.16
 Provides:  bundled(crate(entryuuid)) = 0.1.0
 Provides:  bundled(crate(entryuuid_syntax)) = 0.1.0
-Provides:  bundled(crate(fastrand)) = 1.8.0
+Provides:  bundled(crate(errno)) = 0.3.2
+Provides:  bundled(crate(errno-dragonfly)) = 0.1.2
+Provides:  bundled(crate(fastrand)) = 2.0.0
 Provides:  bundled(crate(fernet)) = 0.1.4
 Provides:  bundled(crate(foreign-types)) = 0.3.2
 Provides:  bundled(crate(foreign-types-shared)) = 0.1.1
-Provides:  bundled(crate(getrandom)) = 0.2.8
+Provides:  bundled(crate(getrandom)) = 0.2.10
+Provides:  bundled(crate(gimli)) = 0.27.3
 Provides:  bundled(crate(hashbrown)) = 0.12.3
 Provides:  bundled(crate(hermit-abi)) = 0.1.19
 Provides:  bundled(crate(instant)) = 0.1.12
-Provides:  bundled(crate(itoa)) = 1.0.5
-Provides:  bundled(crate(jobserver)) = 0.1.25
-Provides:  bundled(crate(libc)) = 0.2.139
+Provides:  bundled(crate(itoa)) = 1.0.9
+Provides:  bundled(crate(jobserver)) = 0.1.26
+Provides:  bundled(crate(libc)) = 0.2.147
 Provides:  bundled(crate(librnsslapd)) = 0.1.0
 Provides:  bundled(crate(librslapd)) = 0.1.0
-Provides:  bundled(crate(lock_api)) = 0.4.9
-Provides:  bundled(crate(log)) = 0.4.17
+Provides:  bundled(crate(linux-raw-sys)) = 0.4.5
+Provides:  bundled(crate(lock_api)) = 0.4.10
+Provides:  bundled(crate(log)) = 0.4.19
 Provides:  bundled(crate(lru)) = 0.7.8
-Provides:  bundled(crate(memoffset)) = 0.7.1
-Provides:  bundled(crate(once_cell)) = 1.17.0
-Provides:  bundled(crate(openssl)) = 0.10.45
-Provides:  bundled(crate(openssl-macros)) = 0.1.0
-Provides:  bundled(crate(openssl-sys)) = 0.9.80
+Provides:  bundled(crate(memchr)) = 2.5.0
+Provides:  bundled(crate(memoffset)) = 0.9.0
+Provides:  bundled(crate(miniz_oxide)) = 0.7.1
+Provides:  bundled(crate(object)) = 0.31.1
+Provides:  bundled(crate(once_cell)) = 1.18.0
+Provides:  bundled(crate(openssl)) = 0.10.56
+Provides:  bundled(crate(openssl-macros)) = 0.1.1
+Provides:  bundled(crate(openssl-sys)) = 0.9.91
 Provides:  bundled(crate(parking_lot)) = 0.11.2
 Provides:  bundled(crate(parking_lot_core)) = 0.8.6
 Provides:  bundled(crate(paste)) = 0.1.18
 Provides:  bundled(crate(paste-impl)) = 0.1.18
-Provides:  bundled(crate(pin-project-lite)) = 0.2.9
-Provides:  bundled(crate(pkg-config)) = 0.3.26
+Provides:  bundled(crate(pin-project-lite)) = 0.2.11
+Provides:  bundled(crate(pkg-config)) = 0.3.27
 Provides:  bundled(crate(ppv-lite86)) = 0.2.17
 Provides:  bundled(crate(proc-macro-hack)) = 0.5.20+deprecated
-Provides:  bundled(crate(proc-macro2)) = 1.0.50
+Provides:  bundled(crate(proc-macro2)) = 1.0.66
 Provides:  bundled(crate(pwdchan)) = 0.1.0
-Provides:  bundled(crate(quote)) = 1.0.23
+Provides:  bundled(crate(quote)) = 1.0.32
 Provides:  bundled(crate(rand)) = 0.8.5
 Provides:  bundled(crate(rand_chacha)) = 0.3.1
 Provides:  bundled(crate(rand_core)) = 0.6.4
 Provides:  bundled(crate(redox_syscall)) = 0.2.16
-Provides:  bundled(crate(remove_dir_all)) = 0.5.3
-Provides:  bundled(crate(ryu)) = 1.0.12
-Provides:  bundled(crate(scopeguard)) = 1.1.0
-Provides:  bundled(crate(serde)) = 1.0.152
-Provides:  bundled(crate(serde_derive)) = 1.0.152
-Provides:  bundled(crate(serde_json)) = 1.0.91
+Provides:  bundled(crate(redox_syscall)) = 0.3.5
+Provides:  bundled(crate(rustc-demangle)) = 0.1.23
+Provides:  bundled(crate(rustix)) = 0.38.7
+Provides:  bundled(crate(ryu)) = 1.0.15
+Provides:  bundled(crate(scopeguard)) = 1.2.0
+Provides:  bundled(crate(serde)) = 1.0.183
+Provides:  bundled(crate(serde_derive)) = 1.0.183
+Provides:  bundled(crate(serde_json)) = 1.0.104
 Provides:  bundled(crate(slapd)) = 0.1.0
 Provides:  bundled(crate(slapi_r_plugin)) = 0.1.0
-Provides:  bundled(crate(smallvec)) = 1.10.0
+Provides:  bundled(crate(smallvec)) = 1.11.0
 Provides:  bundled(crate(strsim)) = 0.8.0
-Provides:  bundled(crate(syn)) = 1.0.107
-Provides:  bundled(crate(synstructure)) = 0.12.6
-Provides:  bundled(crate(tempfile)) = 3.3.0
+Provides:  bundled(crate(syn)) = 1.0.109
+Provides:  bundled(crate(syn)) = 2.0.28
+Provides:  bundled(crate(tempfile)) = 3.7.1
 Provides:  bundled(crate(textwrap)) = 0.11.0
-Provides:  bundled(crate(tokio)) = 1.24.2
-Provides:  bundled(crate(tokio-macros)) = 1.8.2
+Provides:  bundled(crate(tokio)) = 1.29.1
+Provides:  bundled(crate(tokio-macros)) = 2.1.0
 Provides:  bundled(crate(toml)) = 0.5.11
-Provides:  bundled(crate(unicode-ident)) = 1.0.6
+Provides:  bundled(crate(unicode-ident)) = 1.0.11
 Provides:  bundled(crate(unicode-width)) = 0.1.10
-Provides:  bundled(crate(unicode-xid)) = 0.2.4
 Provides:  bundled(crate(uuid)) = 0.8.2
 Provides:  bundled(crate(vcpkg)) = 0.2.15
 Provides:  bundled(crate(vec_map)) = 0.8.2
@@ -141,16 +153,17 @@ Provides:  bundled(crate(wasi)) = 0.11.0+wasi_snapshot_preview1
 Provides:  bundled(crate(winapi)) = 0.3.9
 Provides:  bundled(crate(winapi-i686-pc-windows-gnu)) = 0.4.0
 Provides:  bundled(crate(winapi-x86_64-pc-windows-gnu)) = 0.4.0
-Provides:  bundled(crate(windows-sys)) = 0.42.0
-Provides:  bundled(crate(windows_aarch64_gnullvm)) = 0.42.1
-Provides:  bundled(crate(windows_aarch64_msvc)) = 0.42.1
-Provides:  bundled(crate(windows_i686_gnu)) = 0.42.1
-Provides:  bundled(crate(windows_i686_msvc)) = 0.42.1
-Provides:  bundled(crate(windows_x86_64_gnu)) = 0.42.1
-Provides:  bundled(crate(windows_x86_64_gnullvm)) = 0.42.1
-Provides:  bundled(crate(windows_x86_64_msvc)) = 0.42.1
-Provides:  bundled(crate(zeroize)) = 1.5.7
-Provides:  bundled(crate(zeroize_derive)) = 1.3.3
+Provides:  bundled(crate(windows-sys)) = 0.48.0
+Provides:  bundled(crate(windows-targets)) = 0.48.1
+Provides:  bundled(crate(windows_aarch64_gnullvm)) = 0.48.0
+Provides:  bundled(crate(windows_aarch64_msvc)) = 0.48.0
+Provides:  bundled(crate(windows_i686_gnu)) = 0.48.0
+Provides:  bundled(crate(windows_i686_msvc)) = 0.48.0
+Provides:  bundled(crate(windows_x86_64_gnu)) = 0.48.0
+Provides:  bundled(crate(windows_x86_64_gnullvm)) = 0.48.0
+Provides:  bundled(crate(windows_x86_64_msvc)) = 0.48.0
+Provides:  bundled(crate(zeroize)) = 1.6.0
+Provides:  bundled(crate(zeroize_derive)) = 1.4.2
 ##### Bundled cargo crates list - END #####
 
 BuildRequires:    nspr-devel >= 4.32
@@ -181,6 +194,8 @@ BuildRequires:    openssl-devel
 BuildRequires:    pam-devel
 BuildRequires:    systemd-units
 BuildRequires:    systemd-devel
+BuildRequires:    systemd-rpm-macros
+%{?sysusers_requires_compat}
 %if %{use_asan}
 BuildRequires:    libasan
 %endif
@@ -212,6 +227,7 @@ BuildRequires:    python%{python3_pkgversion}-argcomplete
 BuildRequires:    python%{python3_pkgversion}-argparse-manpage
 BuildRequires:    python%{python3_pkgversion}-libselinux
 BuildRequires:    python%{python3_pkgversion}-policycoreutils
+BuildRequires:    python%{python3_pkgversion}-cryptography
 
 # For cockpit
 %if %{use_cockpit}
@@ -274,6 +290,9 @@ Source2:          %{name}-devel.README
 %if %{bundle_jemalloc}
 Source3:          https://github.com/jemalloc/%{jemalloc_name}/releases/download/%{jemalloc_ver}/%{jemalloc_name}-%{jemalloc_ver}.tar.bz2
 %endif
+Source4:          389-ds-base.sysusers
+
+Patch0:           0001-Issue-5853-Revert-MSRV-check-5908.patch
 
 %description
 389 Directory Server is an LDAPv3 compliant server.  The base package includes
@@ -352,6 +371,7 @@ Requires: python%{python3_pkgversion}-dateutil
 Requires: python%{python3_pkgversion}-argcomplete
 Requires: python%{python3_pkgversion}-libselinux
 Requires: python%{python3_pkgversion}-setuptools
+Requires: python%{python3_pkgversion}-cryptography
 %{?python_provide:%python_provide python%{python3_pkgversion}-lib389}
 
 %description -n python%{python3_pkgversion}-lib389
@@ -384,14 +404,12 @@ cp %{SOURCE2} README.devel
 
 OPENLDAP_FLAG="--with-openldap"
 %{?with_tmpfiles_d: TMPFILES_FLAG="--with-tmpfiles-d=%{with_tmpfiles_d}"}
-# hack hack hack https://bugzilla.redhat.com/show_bug.cgi?id=833529
-NSSARGS="--with-nss-lib=%{_libdir} --with-nss-inc=%{_includedir}/nss3"
 
 %if %{use_asan}
 ASAN_FLAGS="--enable-asan --enable-debug"
 %endif
 
-RUST_FLAGS="--enable-rust --enable-rust-offline"
+RUST_FLAGS="--enable-rust-offline"
 
 %if !%{use_cockpit}
 COCKPIT_FLAGS="--disable-cockpit"
@@ -443,10 +461,9 @@ autoreconf -fiv
            --with-systemdsystemconfdir=%{_sysconfdir}/systemd/system \
            --with-systemdgroupname=%{groupname}  \
            --libexecdir=%{_libexecdir}/%{pkgname} \
-           $NSSARGS $ASAN_FLAGS $RUST_FLAGS $CLANG_FLAGS $COCKPIT_FLAGS \
+           $ASAN_FLAGS $RUST_FLAGS $CLANG_FLAGS $COCKPIT_FLAGS \
            --enable-cmocka \
-           --with-libldap-r=no \
-           --enable-perl
+           --with-libldap-r=no
 
 # lib389
 pushd ./src/lib389
@@ -486,12 +503,20 @@ pushd src/lib389
 %py3_install
 popd
 
+# Register CLI tools for bash completion
+for clitool in dsconf dsctl dsidm dscreate ds-replcheck
+do
+    register-python-argcomplete "${clitool}" > "${clitool}"
+    install -p -m 0644 -D -t '%{buildroot}%{bash_completions_dir}' "${clitool}"
+done
+
 mkdir -p $RPM_BUILD_ROOT/var/log/%{pkgname}
 mkdir -p $RPM_BUILD_ROOT/var/lib/%{pkgname}
 mkdir -p $RPM_BUILD_ROOT/var/lock/%{pkgname}
 
 # for systemd
 mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/systemd/system/%{groupname}.wants
+install -p -D -m 0644 %{SOURCE4} %{buildroot}%{_sysusersdir}/389-ds-base.conf
 
 # remove libtool archives and static libs
 rm -f $RPM_BUILD_ROOT%{_libdir}/%{pkgname}/*.a
@@ -526,20 +551,8 @@ fi
 
 # https://fedoraproject.org/wiki/Packaging:UsersAndGroups#Soft_static_allocation
 # Soft static allocation for UID and GID
-USERNAME="dirsrv"
-ALLOCATED_UID=389
-GROUPNAME="dirsrv"
-ALLOCATED_GID=389
-HOMEDIR="/usr/share/dirsrv"
-
-getent group $GROUPNAME >/dev/null || /usr/sbin/groupadd -f -g $ALLOCATED_GID -r $GROUPNAME
-if ! getent passwd $USERNAME >/dev/null ; then
-    if ! getent passwd $ALLOCATED_UID >/dev/null ; then
-      /usr/sbin/useradd -r -u $ALLOCATED_UID -g $GROUPNAME -d $HOMEDIR -s /sbin/nologin -c "user for 389-ds-base" $USERNAME
-    else
-      /usr/sbin/useradd -r -g $GROUPNAME -d $HOMEDIR -s /sbin/nologin -c "user for 389-ds-base" $USERNAME
-    fi
-fi
+# sysusers.d format https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format
+%sysusers_create_compat %{SOURCE4}
 
 # Reload our sysctl before we restart (if we can)
 sysctl --system &> $output; true
@@ -613,6 +626,7 @@ exit 0
 %config(noreplace)%{_sysconfdir}/%{pkgname}/schema/*.ldif
 %dir %{_sysconfdir}/%{pkgname}/config
 %dir %{_sysconfdir}/systemd/system/%{groupname}.wants
+%{_sysusersdir}/389-ds-base.conf
 %config(noreplace)%{_sysconfdir}/%{pkgname}/config/slapd-collations.conf
 %config(noreplace)%{_sysconfdir}/%{pkgname}/config/certmap.conf
 %{_datadir}/%{pkgname}
@@ -622,6 +636,7 @@ exit 0
 %{_mandir}/man1/dbscan.1.gz
 %{_bindir}/ds-replcheck
 %{_mandir}/man1/ds-replcheck.1.gz
+%{bash_completions_dir}/ds-replcheck
 %{_bindir}/ds-logpipe.py
 %{_mandir}/man1/ds-logpipe.py.1.gz
 %{_bindir}/ldclt
@@ -708,6 +723,10 @@ exit 0
 %{_sbindir}/dsidm
 %{_mandir}/man8/dsidm.8.gz
 %{_libexecdir}/%{pkgname}/dscontainer
+%{bash_completions_dir}/dsctl
+%{bash_completions_dir}/dsconf
+%{bash_completions_dir}/dscreate
+%{bash_completions_dir}/dsidm
 
 %if %{use_cockpit}
 %files -n cockpit-389-ds -f cockpit.list
@@ -716,6 +735,136 @@ exit 0
 %endif
 
 %changelog
+* Sat Oct 07 2023 Viktor Ashirov <vashirov@redhat.com> - 2.3.7-2
+- Fedora Linux 38 with cockpit installed generates an error with 389-ds (#2242654)
+- Issue 5853 - Revert MSRV check (#5908)
+
+* Wed Aug 9 2023 Thierry Bordaz <tbordaz@redhat.com> - 2.3.7-1
+- bump version to 2.3.7
+- Issue 4551 - Part 2 - Fix build warning of previous PR (#5888)
+- Issue 5834 - AccountPolicyPlugin erroring for some users (#5866)
+- Issue 5872 - part 2 - fix is_dbi regression (#5887)
+- Issue 5848 - dsconf should prevent setting the replicaID for hub and consumer roles (#5849)
+- Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
+- Issue 5883 - Remove connection mutex contention risk on autobind (#5886)
+- Issue 5872 - `dbscan()` in lib389 can return bytes
+
+* Thu Aug 3 2023 Mark Reynolds <mreynolds@redhat.com> - 2.3.6-1
+- bump version to 2.3.6
+- Issue 5729 - Memory leak in factory_create_extension (#5814)
+- Issue 5877 - test_basic_ldapagent breaks test_setup_ds_as_non_root* tests
+- Issue 5853 - Update Cargo.lock and fix minor warning (#5854)
+- Issue 5867 - lib389 should use filter for tarfile as recommended by PEP 706 (#5868)
+- Issue 5864 - Server fails to start after reboot because it's unable to access nsslapd-rundir
+- Issue 5856 - SyntaxWarning: invalid escape sequence '\,'
+- Issue 5859 - dbscan fails with AttributeError: 'list' object has no attribute 'extends'
+- Issue 4551 - Paged search impacts performance (#5838)
+- Issue 4169 - UI - Fix retrochangelog and schema Typeaheads (#5837)
+- issue 5833 - dsconf monitor backend fails on lmdb (#5835)
+- Issue 3555 - UI - Fix audit issue with npm - stylelint (#5836)
+
+* Mon Jul 24 2023 <mreynolds@redhat.com> - 2.3.5-2
+- Bump version to to 2.3.5-2
+- Add the bash completion scripts to the appropriate files section
+
+* Mon Jul 10 2023 Mark Reynolds <mreynolds@redhat.com> - 2.3.5-1
+- Bump version to 2.3.5
+- Issue 5752 - RFE - Provide a history for LastLoginTime (#5807)
+- Issue 5793 - UI - fix suffix selection in export modal
+- Issue 5793 - UI - Fix minor crashes (#5827)
+- Issue 5825 - healthcheck - password storage scheme warning needs more info
+- Issue 5822 - Allow empty export path for db2ldif
+- Issue 5755 - Massive memory leaking on update operations (#5824)
+- Issue 5551 - Almost empty and not loaded ns-slapd high cpu load
+- Issue 5156 - RFE that implement slapi_memberof (#5694)
+- Issue 5722 - RFE When a filter contains 'nsrole', improve response time by rewriting the filter (#5723)
+- Issue 5755 - The Massive memory leaking on update operations (#5803)
+- Issue 5752 - CI - Add more tests for lastLoginHistorySize RFE (#5802)
+- Issue 2375 - CLI - Healthcheck - revise and add new checks
+- Issue 5793 - UI - movce from webpack to esbuild bundler
+- Issue 5781 - Bug handling return code of pre-extended operation plugin.
+- Issue 5785 - move bash completion to post section of specfile
+- Issue 5646 - Various memory leaks (#5725)
+- Issue 5789 - Improve ds-replcheck error handling
+- Issue 5786 - CLI - registers tools for bash completion
+- Issue 5778 - UI - Remove error message if .dsrc is missing
+- Issue 4758 - Add tests for WebUI
+- Issue 5751 - Cleanallruv task crashes on consumer (#5775)
+- Issue 5743 - Disabling replica crashes the server (#5746)
+
+* Thu May 18 2023 Mark Reynolds <mreynolds@redhat.com> - 2.3.4-1
+- Bump version to 2.3.4
+- Issue 5752 - RFE - Provide a history for LastLoginTime (#5753)
+- Issue 5770 - RFE - Extend Password Adminstrators to allow skipping password info updates
+- Issue 5768 - CLI/UI - cert checks are too strict, and other issues
+- Issue 5765 - Improve installer selinux handling
+- Issue 5643 - Memory leak in entryrdn during delete (#5717)
+- Issue 152  - RFE - Add support for LDAP alias entries
+- Issue 5052 - BUG - Custom filters prevented entry deletion (#5060)
+- Issue 5704 - crash in sync_refresh_initial_content (#5720)
+- Issue 5738 - RFE - UI - Read/write replication monitor info to .dsrc file
+- Issue 5749 - RFE - Allow Account Policy Plugin to handle inactivity and expiration at the same time
+- Issue 2562 - Copy config files into backup directory
+
+* Tue Apr 25 2023 Mark Reynolds <mreynolds@redhat.com> - 2.3.3-1
+- Bump version to 2.3.3
+- Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727)
+- Issue 5718 - Memory leak in connection table (#5719)
+- Issue 5705 - Add config parameter to close client conns on failed bind (#5712)
+- Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
+- Issue 5701 - CLI - Fix referral mode setting (#5708)
+- Bump openssl from 0.10.45 to 0.10.48 in /src (#5709)
+- Issue 5710 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (#5711)
+- Issue 5697 - Obsolete nsslapd-ldapimaprootdn attribute (#5698)
+- Issue 1081 - Stop schema replication from overwriting x-origin
+- Issue 4812 - Listener thread does not scale with a high num of established connections (#5706)
+- Issue 4812 - Listener thread does not scale with a high num of established connections (#5681)
+- Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699)
+- Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692)
+- Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691)
+- Issue 5687 - UI - sensitive information disclosure
+- Issue 5661 - LMDB hangs while Rebuilding the replication changelog RUV (#5676)
+- Issue 5554 - Add more tests to security_basic_test suite
+- Issue 4583 - Update specfile to skip checks of ASAN builds
+- Issue 4758 - Add tests for WebUI
+- Issue 3604 - UI - Add support for Subject Alternative Names in CSR
+- Issue 5600 - buffer overflow when enabling sync repl plugin when dynamic plugins is enabled
+- Issue 5640 - Update logconv for new logging format
+- Issue 5162 - CI - fix error message for invalid pem file
+- Issue 5598 - In 2.x, SRCH throughput drops by 10% because of handling of referral (#5604)
+- Issue 5671 - covscan - clang warning (#5672)
+- Issue 5267 - CI - Fix issues with nsslapd-return-original-entrydn
+- Issue 5666 - CLI - Add timeout parameter for tasks
+- Issue 5567 - CLI - make ldifgen use the same default ldif name for all options
+- Issue 5647 - Fix unused variable warning from previous commit (#5670)
+- Issue 5162 - Lib389 - verify certificate type before adding
+- Issue 5642 - Build fails against setuptools 67.0.0
+- Issue 5630 - CLI - need to add logging filter for stdout
+- Issue 5646 - CLI/UI - do not hardcode password storage schemes
+- Issue 5640 - Update logconv for new logging format
+- issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
+- Issue 5658 - CLI - unable to add attribute with matching rule
+- Issue 5653 - covscan - fix invalid dereference
+- Issue 5652 - Libasan crash in replication/cascading_test (#5659)
+- Issue 5628 - Handle graceful timeout in CI tests (#5657)
+- Issue 5648 - Covscan - Compiler warnings (#5651)
+- Issue 5630 - CLI - error messages should goto stderr
+- Issue 2435 - RFE - Raise IDL Scan Limit to INT_MAX (#5639)
+- Issue 5632 - CLI - improve error handling with db2ldif
+- Issue 5517 - Replication conflict CI test sometime fails (#5518)
+- Issue 5634 - Deprecated warning related to github action workflow code (#5635)
+- Issue 5637 - Covscan - fix Buffer Overflows (#5638)
+- Issue 5624 - RFE - UI - export certificates, and import text base64 encoded certificates
+- Bump tokio from 1.24.1 to 1.25.0 in /src (#5629)
+- Issue 4577 - Add LMDB pytest github action (#5627)
+- Issue 4293 - RFE - CLI - add dsrc options for setting user and group subtrees
+- Remove stale libevent(-devel) dependency
+- Issue 5578 - dscreate ds-root does not normaile paths (#5613)
+- Issue 5497 - boolean attributes should be case insensitive
+
+* Tue Mar 07 2023 Simon Pichugin <spichugi@redhat.com> - 2.3.2-2
+- Use systemd-sysusers for dirsrv user and group (#2176256)
+
 * Mon Jan 23 2023 Mark Reynolds <mreynolds@redhat.com> - 2.3.2-1
 - Bump version to 2.3.2
 - Issue 5547 - automember plugin improvements

389-ds-base.sysusers

@@ -0,0 +1,3 @@
+#Type Name     ID             GECOS                   Home directory       Shell
+g     dirsrv   389
+u     dirsrv   389:389        "user for 389-ds-base"  /usr/share/dirsrv/   /sbin/nologin

sources

@@ -1,2 +1,2 @@
+SHA512 (389-ds-base-2.3.7.tar.bz2) = d7e8b5608d038bb8a1cbdb447d8048fe48c84931bc2dada009cc8ed831d7c2c4223fe23cb1642b33a57df254def4d31830f62032a8b0b26e39c34a3a94452e9d
 SHA512 (jemalloc-5.3.0.tar.bz2) = 22907bb052096e2caffb6e4e23548aecc5cc9283dce476896a2b1127eee64170e3562fa2e7db9571298814a7a2c7df6e8d1fbe152bd3f3b0c1abec22a2de34b1
-SHA512 (389-ds-base-2.3.2.tar.bz2) = 20bf8e2ce1781886e62a9500cdf709d11b860f0f61de44ecb1be7c3a6be1fe306783b6eeb3e37933f494c640dd140e247a4a266091ffd81cf00f58af37e6577e