-------------------------------------------------------------------

Wed Nov 29 00:07:54 UTC 2023 - william.brown@suse.com

​

- bsc#1217581 - Replica ID cannot be specified for consumer and hub roles

- Update to version 2.2.8~git51.3688d68:

  * Issue 5984 - Crash when paged result search are abandoned - fix2 (#5987)

  * Issue 5984 - Crash when paged result search are abandoned (#5985)

  * Issue 5971 - CLI - Fix password prompt for repl status (#5972)

  *  Issue 5956 - After an upgrade the server won't start - nsslapd-connta…  …blesize (#5963)

  * Issue 3555 - UI - Fix audit issue with npm - babel/traverse (#5959)

  * Issue 5966 - CLI - Custom schema object is removed on a failed edit (#5967)

  * Issue 5956 - After an upgrade the server won't start - nsslapd-conntablesize (#5957)

  * issue 5924 - ASAN server build crash when looping opening/closing connections (#5926)

  * Issue 5848 - Fix condition and add a CI test (#5916)

  * Issue 5909 - Multi listener hang with 20k connections (#5917)

  * Issue 5853 - Revert MSRV check (#5908)

  * Issue 5722 - improve testcase (#5904)

  * Bug Description:

  * Issue 5858 - WebUI monitoring test fails to run

​

-------------------------------------------------------------------

Tue Aug 15 04:08:16 UTC 2023 - william.brown@suse.com

​

- bsc#1212726 - SSSD client performance improvements

- Update to version 2.2.8~git37.fdb3bae:

  * Issue 5082 - slugify: ModuleNotFoundError when running test cases

  * Issue 4551 - Part 2 - Fix build warning of previous PR (#5888)

  * Issue 5834 - AccountPolicyPlugin erroring for some users (#5866)

  * Issue 5872 - part 2 - fix is_dbi regression (#5887)

  * Issue 5804 - dtablesize being set to soft maxfiledescriptor limit (#5806)

  * Issue 5848 - dsconf should prevent setting the replicaID for hub and consumer roles (#5849)

  * Issue 5883 - Remove connection mutex contention risk on autobind (#5886)

  * Issue 5872 - `dbscan()` in lib389 can return bytes

  * Bump version to 2.2.9

  * Issue 5729 - Memory leak in factory_create_extension (#5814)

  * Issue 5877 - test_basic_ldapagent breaks test_setup_ds_as_non_root* tests

  * Issue 5853 - Update Cargo.lock and fix minor warning (#5854)

  * Issue 5867 - lib389 should use filter for tarfile as recommended by PEP 706 (#5868)

  * Issue 5864 - Server fails to start after reboot because it's unable to access nsslapd-rundir

  * Issue 5856 - SyntaxWarning: invalid escape sequence '\,'

  * Issue 5859 - dbscan fails with AttributeError: 'list' object has no attribute 'extends'

​

-------------------------------------------------------------------

Fri Jul 21 04:20:07 UTC 2023 - william.brown@suse.com

​

- bsc#1212726 - SSSD client performance improvements

- Update to version 2.2.8~git21.c11e86f:

  * Issue 4551 - Paged search impacts performance (#5838)

  * Issue 4169 - UI - Fix retrochangelog and schema Typeaheads (#5837)

  * issue 5833 - dsconf monitor backend fails on lmdb (#5835)

  * Issue 3555 - UI - Fix audit issue with npm - semver and word-wrap

​

-------------------------------------------------------------------

Tue Jul 11 01:55:15 UTC 2023 - william.brown@suse.com

​

- bsc#1213190 - update for stability patches

- Update to version 2.2.8~git17.48834f1:

  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5807)

  * Issue 5793 - UI - fix suffix selection in export modal

  * Issue 5825 - healthcheck - password storage scheme warning needs more info

  * Issue #5822 - Allow empty export path for db2ldif

  * Issue 5755 - Massive memory leaking on update operations (#5824)

  * Issue 5551 - Almost empty and not loaded ns-slapd high cpu load

  * Issue 5722 - RFE When a filter contains 'nsrole', improve response time by rewriting the filter (#5723)

  * Issue 5755 - The Massive memory leaking on update operations (#5803)

  * Issue 5752 - CI - Add more tests for lastLoginHistorySize RFE (#5802)

  * Issue 2375 - CLI - Healthcheck - revise and add new checks

  * Issue 5781 - Bug handling return code of pre-extended operation plugin.

  * Issue 5646 - Various memory leaks (#5725)

  * Issue 5789 - Improve ds-replcheck error handling

​

-------------------------------------------------------------------

Tue May 30 00:29:53 UTC 2023 - william.brown@suse.com

​

- bsc#1211812 - update for stability patches

- Update to version 2.2.8~git4.1eeaedf:

  * Issue 5642 - Build fails against setuptools 67.0.0

  * Issue 5778 - UI - Remove error message if .dsrc is missing

  * Issue 5751 - Cleanallruv task crashes on consumer (#5775)

  * Issue 5743 - Disabling replica crashes the server (#5746)

  * Bump version to 2.2.8

  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5753)

  * Issue 5770 - RFE - Extend Password Adminstrators to allow skipping password info updates

  * Issue 5768 - CLI/UI - cert checks are too strict, and other issues

  * Issue 5765 - Improve installer selinux handling

  * Issue 5643 - Memory leak in entryrdn during delete (#5717)

  * Issue 152 - RFE - Add support for LDAP alias entries

  * Issue 5052 - BUG - Custom filters prevented entry deletion (#5060)

  * Issue 5704 - crash in sync_refresh_initial_content (#5720)

  * Issue 5738 - RFE - UI - Read/write replication monitor info to .dsrc file

  * Issue 5749 - RFE - Allow Account Policy Plugin to handle inactivity and expiration at the same time

  * Bump version to 2.2.7

​

-------------------------------------------------------------------

Fri Apr 21 00:36:40 UTC 2023 - william.brown@suse.com

​

- bsc#1210462 - OpenLDAP to 389-ds migration - exclude some unsupported attributes.

- Update to version 2.2.6~git40.002a0ca:

  * Issue 5734 - RFE - Exclude pwdFailureTime and ContextCSN (#5735)

  * Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727)

  * Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations

  * Issue 5710 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (#5711)

  * Issue 1081 - Stop schema replication from overwriting x-origin

  * Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699)

  * Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692)

  * Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691)

  * Issue 5687 - UI - sensitive information disclosure

  * Issue 4583 - Update specfile to skip checks of ASAN builds

  * Issue 5550 - dsconf monitor crashes with Error math domain error (#5553)

  * Issue 3604 - UI - Add support for Subject Alternative Names in CSR

  * Issue 5600 - buffer overflow when enabling sync repl plugin when dynamic plugins is enabled

  * Fix build break

  * Issue 5640 - Update logconv for new logging format

  * Issue 5545 - A random crash in import over lmdb (#5546)

  * Issue 5490 - tombstone in entryrdn index with lmdb but not with bdb (#5498)

  * Issue 5408: lmdb import is slow (#5481)

  * Issue 5162 - CI - fix error message for invalid pem file

  * Issue 5598 - In 2.x, SRCH throughput drops by 10% because of handling of referral (#5604)

  * Issue 5671 - covscan - clang warning (#5672)

  * Issue 5267 - CI - Fix issues with nsslapd-return-original-entrydn

  * Issue 5666 - CLI - Add timeout parameter for tasks

  * Issue 5567 - CLI - make ldifgen use the same default ldif name for all options

  * Issue 5162 - Lib389 - verify certificate type before adding

  * Issue 5630 - CLI - need to add logging filter for stdout

  * Issue 5646 - CLI/UI - do not hardcode password storage schemes

  * Issue 5640 - Update logconv for new logging format

  * Issue 5652 - Libasan crash in replication/cascading_test (#5659)

  * Issue 5658 - CLI - unable to add attribute with matching rule

  * Issue 5653 - covscan - fix invalid dereference

  * Issue 5648 - Covscan - Compiler warnings (#5651)

  * Issue 5630 - CLI - error messages should goto stderr

  * Issue 2435 - RFE - Raise IDL Scan Limit to INT_MAX (#5639)

  * Issue 5632 - CLI - improve error handling with db2ldif

  * Issue 5578 - dscreate ds-root does not normaile paths (#5613)

  * Issue 5560 - dscreate run by non superuser set defaults requiring superuser privilege (#5579)

  * Issue 5624 - RFE - UI - export certificates, and import text base64 encoded certificates

  * Issue 4293 - RFE - CLI - add dsrc options for setting user and group subtrees

  * Issue 5497 - boolean attributes should be case insensitive

  * Bump version to 2.2.6

  * Issue 5607, 5351, 5611 - UI/CLI - fix various issues

  * Issue 5608 - UI - need to replace some "const" with "let"

  * Issue 3604 - Create a private key/CSR with dsconf/Cockpit (#5584)

  * Issue 5602 - UI - browser crash when trying to modify read-only variable

  * Issue 5581 - UI - Support cockpit dark theme

​

-------------------------------------------------------------------

Wed Jan 11 01:51:45 UTC 2023 - william.brown@suse.com

​

- bsc#1205996 - prevent segfault in cl5configtrim

- Update to version 2.2.4~git25.c81ee34:

  * Issue 5593 - CLI - dsidm account subtree-status fails with TypeError

  * Issue 5591 - BUG - Segfault in cl5configtrim with invalid confi (#5592)

  * Fix latest npm audit failures

  * Issue 5599 - CI - webui tests randomly fail

  * Issue 5348 - RFE - CLI - add functionality to do bulk updates to entries

​

-------------------------------------------------------------------

Fri Jan 06 01:29:49 UTC 2023 - william.brown@suse.com

​

- bsc#1206563 - improve pam_saslauthd migration handling from openldap

- Update to version 2.2.4~git20.7eba9b9:

  * Issue 5526 - RFE - Improve saslauthd migration options (#5528)

  * Issue 5588 - Fix CI tests

  * Issue 5585 - lib389 password policy DN handling is incorrect (#5587)

  * Issue 5521 - UI - Update plugins for new split PAM and LDAP pass thru auth

  * Bump version to 2.2.5

  * Issue 5236 - UI add specialized group edit modal

  * Issue 5278 - CLI - dsidm asks for the old password on password reset

  * Issue 5531 - CI - use universal_lines in capture_output

  * Issue 5505 - Fix compiler warning (#5506)

  * Issue 3615 - CLI - prevent virtual attribute indexing

  * Issue 5413 - Allow mutliple MemberOf fixup tasks with different bases/filters

  * Issue 5561 - Nightly tests are failing

​

-------------------------------------------------------------------

Tue Dec 06 02:25:05 UTC 2022 - william.brown@suse.com

​

- bsc#1205974 - support pam_saslauthd for authentication pass through

  requirements. See also jsc#PED-2701

- Update to version 2.2.4~git8.8a6e7be:

  * Issue 5521 - RFE - split pass through auth cli

  * Issue 5521 - BUG - Pam PTA multiple issues

  * Issue 5544 - Increase default task TTL

​

-------------------------------------------------------------------

Wed Nov 23 22:50:51 UTC 2022 - william.brown@suse.com

​

- Update to version 2.2.4~git5.d25f9eb:

  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)

  * Issue 5539 - Make logger's parameter name unified (#5540)

  * Issue 3729 - (cont) RFE Extend log of operations statistics in access log (#5538)

  * Issue 5534 - Fix a rebase typo (#5537)

  * Issue 5534 - Add copyright text to the repository files

  * Bump version to 2.2.4

  * Issue 5532 - Make db compaction TOD day more robust.

  * Issue 3729 - RFE Extend log of operations statistics in access log (#5508)

  * Issue 5529 - UI - Fix npm vulnerability in loader-utils

  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)

  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement

  * Issue 5510 - remove twalk_r dependency to build on RHEL8 (#5516)

  * Issue 5162 - RFE - CLI allow adding CA certificate bundles

  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)

  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)

  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed

  * Issue 5502 - RFE - Add option to display entry attributes in audit log

  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)

  * Issue 5367 - RFE - store full DN in database record

​

-------------------------------------------------------------------

Fri Oct 21 03:34:30 UTC 2022 - william.brown@suse.com

​

- Update to version 2.2.3~git20.b1ed566:

  * Issue 5495 - RFE - skip dds during migration. (#5496)

  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)

  * Issue 5368 - Retro Changelog trimming does not work (#5486)

  * Issue 5487 - Fix various issues with logconv.pl

  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix

  * Issue 5478 - Random crash in connection code during server shutdown (#5479)

  * Issue 3061 - RFE - Add password policy debug log level

  * Issue 4324 - Revert recursive pthread mutex usage in factory.c

  * Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264)

  * Issue 4324 - Revert recursive pthread mutex change (#5463)

​

-------------------------------------------------------------------

Fri Oct 21 03:08:36 UTC 2022 - william.brown@suse.com

​

- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services

  is configured.

- Update to version 2.0.16~git52.76ecbe1:

  * Issue 5495 - RFE - skip dds during migration. (#5496)

  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)

  * Issue 5368 - Retro Changelog trimming does not work (#5486)

  * Issue 5487 - Fix various issues with logconv.pl

  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix

  * Issue 4776 - Fix entryuuid fixup task (#5483)

  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)

  * Issue 3061 - RFE - Add password policy debug log level

  * Issue 5462 - RFE - add missing default indexes (#5464)

  * Issue 4324 - Revert recursive pthread mutex usage in factory.c

​

-------------------------------------------------------------------

Mon Sep 26 05:52:46 UTC 2022 - william.brown@suse.com

​

- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption

- Update to version 2.0.16~git37.9a47b3d2:

  * Revert "Issue 5446 - Fix some covscan issues (#5451)"

  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)

  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)

  * Issue 5453 - UI/CLI - Changing Root DN breaks UI

  * Issue 5446 - Fix some covscan issues (#5451)

  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)

  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc

  * Issue 4308 - checking if an entry is a referral is expensive

  * Issue 5447 - UI - add NDN max cache size to UI

  * Issue 5443 - UI - disable save button while saving

  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)

​

-------------------------------------------------------------------

Tue Aug 23 01:50:22 UTC 2022 - william.brown@suse.com

​

- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling

- Update to version 2.0.16~git20.219f047ae:

  * Issue #5423 - Fix missing 'not' in description

  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)

  * Issue 3903 - fix repl keep alive event interval

  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)

  * Issue 5415 - Hostname when set to localhost causing failures in other tests

  * Issue 5412 - lib389 - do not set backend name to lowercase

  * Issue 3903 - keep alive update event starts too soon

  * Issue 5397 - Fix various memory leaks

  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)

  * Issue 3903 - Supplier should do periodic updates

​

-------------------------------------------------------------------

Tue Aug 02 04:30:18 UTC 2022 - william.brown@suse.com

​

- bsc#1197998 - Update sudoers schema to support UTF-8

- Update to version 2.0.16~git9.e2a858a86:

  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)

  * Issue 5383 - UI - Various fixes and RFE's for UI

  * Issue 4656 - Remove problematic language from source code

  * Issue 5380 - Separate cleanAllRUV code into new file

  * Issue 5322 - optime & wtime on rejected connections is not properly set

  * Issue 5375 - CI - disable TLS hostname checking

  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function

  * Issue 5371 - Update npm and cargo packages

  * Issue 3069 - Support ECDSA private keys for TLS (#5365)

  * Bump version to 2.0.16

​

-------------------------------------------------------------------

Wed Jun  8 05:48:39 UTC 2022 - William Brown <william.brown@suse.com>

​

- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch

​

-------------------------------------------------------------------

Tue May 31 01:25:48 UTC 2022 - william.brown@suse.com

​

- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved

  by Issue 5170.

- Update to version 2.0.15~git26.1ea6a6803:

  * Issue 5302 - Release tarballs don't contain cockpit webapp

  * Issue 5237 - audit-ci: Cannot convert undefined or null to object

  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)

  * Issue 4970 - Add support for recursively deleting subentries

  * Issue 5284 - Replication broken after password change (#5286)

  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)

  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'

  * Issue 5170 - RFE - Filter optimiser (#5171)

  * Issue 5276 - CLI - improve task handling

  * Issue 5273 - CLI - add arg completer for instance name

​

-------------------------------------------------------------------

Tue May 03 01:47:13 UTC 2022 - william.brown@suse.com

​

- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start

  due to a missing function definition

- Update to version 2.0.15~git17.498ec3e93:

  * Issue 5273 - CLI - add arg completer for instance name

  * Issue 2893 - CLI - dscreate - add options for setting up replication

  * Issue 4866 - CLI - when enabling replication set changelog trimming by default

  * Issue 5241 - UI - Add account locking missing functionality (#5251)

  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)

  * Issue 5098 - Fix cherry-pick error

  * Fix cherry-pick error

  * Issue 4904 - Fix various small issues

  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)

  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)

  * Issue 5210 - Python undefined names in lib389

  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)

  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'

​

-------------------------------------------------------------------

Thu Mar 31 04:41:36 UTC 2022 - william.brown@suse.com

​

- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS

- Update to version 2.0.15~git4.f46ab49c9:

  * Issue 5242- Craft message may crash the server (#5243)

  * Issue 5234 - UI - rename Users and Groups tab

  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)

  * Issue 5227 - UI - No way to move back to Get Started step (#5233)

  * Bump version to 2.0.15

  * Issue 5230 - Race condition in RHDS disk monitoring functions

  * Issue 4299 - UI - Add CoS funtionality (#5196)

  * Issue 5225 - UI - impossible to manually set entry cache

  * Issue 5186 - UI - Fix SASL Mapping regex test feature

  * Issue 5221 - User with expired password can still login with full privledges

​

-------------------------------------------------------------------

Tue Mar 22 00:21:35 UTC 2022 - william.brown@suse.com

​

- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry

- Update to version 2.0.14~git25.e6431d959:

  * Issue 5221 - User with expired password can still login with full privledges

  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)

  * Issue 5200 - dscontainer should use environment variables with DS_ prefix

  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)

  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn

  * Issue 5188 - UI - LDAP editor - add entry and group types

  * Issue 5184 - memberOf does not work correctly with multiple include scopes

  * Issue 5162 - BUG - error on importing chain files (#5164)

  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements

  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)

​

-------------------------------------------------------------------

Tue Feb 22 00:20:18 UTC 2022 - william.brown@suse.com

​

- fixes bsc#1196425

- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.

- Update to version 2.0.14~git12.d04ffd4b6:

  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)

  * Issue 5137 - RFE - improve sssd conf output (#5138)

  * Issue 5145 - Fix covscan errors

  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs

  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task

  * Issue 4299 - UI - Add Role funtionality (#5163)

  * Issue 5050 - bdb bulk op fails if fs page size > 8K (#5150)

  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)

  * Issue 5142 - CLI - dsctl dbgen is broken

  * Issue 4299 - UI - fix minor issues with ldap editor (table view)

​

-------------------------------------------------------------------

Tue Feb 22 00:20:18 UTC 2022 - william.brown@suse.com

​

- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.

- Update to version 2.0.14~git12.d04ffd4b6:

  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)

  * Issue 5137 - RFE - improve sssd conf output (#5138)

  * Issue 5145 - Fix covscan errors

  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs

  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task

  * Issue 4299 - UI - Add Role funtionality (#5163)

  * Issue 5050 - bdb bulk op fails if fs page size > 8K (#5150)

  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)

  * Issue 5142 - CLI - dsctl dbgen is broken

  * Issue 4299 - UI - fix minor issues with ldap editor (table view)

​

-------------------------------------------------------------------

Tue Jan 25 01:34:10 UTC 2022 - william.brown@suse.com

​

- Update to version 2.0.13~git1.72eb93ac9:

  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)

  * Bump version to 2.0.13

  * Issue 5132 - Update Rust crate lru to fix CVE

  * Issue 3555 - UI - fix audit issue with npm nanoid

  * Issue 4299 - UI - Add ACI editing features

  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality

  * Issue 5127 - run restorecon on /dev/shm at server startup

  * Issue 5124 - dscontainer fails to create an instance

  * Issue 4312 - fix compiler warning

  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'

​

-------------------------------------------------------------------

Mon Jan 10 05:24:08 UTC 2022 - William Brown <william.brown@suse.com>

​

- Resolve boo#1194068 by adding required schema

- Add missing support utils plugin

​

-------------------------------------------------------------------

Mon Jan 10 05:20:23 UTC 2022 - william.brown@suse.com

​

- Update to version 2.0.11~git13.e14935725:

  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)

  * Issue 5079 - BUG - multiple ways to specific primary (#5087)

  * Issue 4992 - BUG - slapd.socket container fix (#4993)

  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)

  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality

  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)

  * Issue 5046 - BUG - update concread (#5047)

  * Issue 5043 - BUG - Result must be used compiler warning (#5045)

  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections

  * Issue 4931 - RFE: dsidm - add creation of service accounts

  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)

  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)

  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)

  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)

  * Issue 5014 - UI - Add group creation to LDAP editor

  * Issue 5006 - UI - LDAP editor tree not being properly updated

  * Issue 5001 - Update CI test for new availableSASLMechs attribute

  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.

  * Issue 5001 - Fix next round of UI bugs:

  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)

  * Issue 4978 - use more portable python command for checking containers

  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)

  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)

  * Issue 4978 - make installer robust

  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import

  * Issue 4973 - update snmp to use /run/dirsrv for PID file

  * Issue 4962 - Fix various UI bugs - Plugins (#4969)

  * Issue 4973 - installer changes permissions on /run

  * Issue 4092 - systemd-tmpfiles warnings

  * Issue 4956 - Automember allows invalid regex, and does not log proper error

  * Issue 4731 - Promoting/demoting a replica can crash the server

  * Issue 4962 - Fix various UI bugs part 1

  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)

  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)

  * Issue 2790 - Set db home directory by default

  * Bump github contianer shm size to 4 gigs

  * Issue 4299 - Merge LDAP editor code into Cockpit UI

  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace

  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)

  * Issue 4847 - BUG - potential deadlock in replica (#4936)

  * Issue 4513 - fix ACI CI tests involving ip/hostname rules

  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)

  * Issue 4916 - Memory leak in ldap-agent

​

-------------------------------------------------------------------

Mon Nov 29 00:23:51 UTC 2021 - William Brown <william.brown@suse.com>

​

- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition

- Add missing dependency on iproute2 for lib389

- Update to version 2.0.10~git0.21dd2802c:

  * Bump version to 2.0.10

  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)

  * Issue 4912 - Account Policy plugin does not set the config entry DN

  * Issue 4863 - typoes in logconv.pl

  * Issue 4796 - Add support for nsslapd-state to CLI & UI

  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)

  * Issue 4912 - dsidm command crashing when account policy plugin is enabled

  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index

  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks

  * Issue 4887 - UI - fix minor regression from camelCase fixup

  * Bump version to 2.0.9

  * Issue 4887 - UI - Update webpack.config.js and package.json

  * Issue 4149 - UI - Migrate the remaining components to PF4

  * Issue 4875 - CLI - Add some verbosity to installer

  * Issue 4884 - server crashes when dnaInterval attribute is set to zero

- Update to version 2.0.8~git0.553f26c87:

  * Bump version to 2.0.8

  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)

  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)

  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)

  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)

  * Issue 4736 - lib389 - fix regression in certutil error checking

  * Issue 4861 - Improve instructions in custom.conf for memory leak detection

  * Issue 4859 - Don't version libns-dshttpd

  * Issue 4169 - Migrate Replication & Schema tabs to PF4

  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )

  * Issue 4736 - CLI - Errors from certutil are not propagated

  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)

  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time

  * Issue - 4696 - Password hash upgrade on bind (#4840)

  * Bump version to 2.0.7

  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog

  * Issue 4603 - Reindexing a single backend (#4831)

  * Issue 4169 - UI - migrate Server Tab forms to PF4

  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)

  * Issue 4820 - RFE - control flow integrity (#4821)

  * Issue 4706 - negative wtime for compare operations (#4780)

  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)

  * Issue 4262 - Fix Index out of bound in fractional test (#4828)

  * Issue 4826 - Filter argparse-manpage from autogenerated requires

  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)

  * Issue 2820 - Fix CI test suite issues

  * Bump version to 2.0.6

- Remove unneeded shadow dependency, no longer required due to

  systemd-sysusers

- Update to version 2.0.6~git0.d81dc6c90:

  * Bump version to 2.0.6

  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions

  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)

  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)

  * Issue 4414 - disk monitoring - prevent division by zero crash

  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)

  * Issue 4656 - Fix replication plugin rename dependency issues

  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins

  * Issue 4506 - Improve SASL logging

  * Issue 4709 - Fix double free in dbscan

  * Issue 4093 - Fix MEP test case

  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)

  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)

  * Issue 4794 - BUG - don't capture container output (#4798)

  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value

  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)

  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)

  * Issue 4447 - Crash when the Referential Integrity log is manually edited

  * Issue 4773 - Add CI test for DNA interval assignment

  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)

  * Issue 4379 - fixing regression in test_info_disclosure

  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service

  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service

  * Issue 4575 Update test docstrings metadata

  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream

  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py

  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream

- Fix requires as openssl cli is required by 389-ds now.

- Add now working CONFIG parameter to sysusers generator

- Update to version 2.0.5~git0.607bfbf16:

  * Bump version to 2.0.5

  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task

  * Issue 4169 - UI - Port plugin tables to PF4

  * Issue 4656 - Allow backward compatilbity for replication plugin name change

  * Issue 4764 - replicated operation sometime checks ACI (#4783)

  * Issue 2820 - Fix CI test suite issues

  * Issue 4781 - There are some typos in man-pages

  * Issue 4773 - Enable interval feature of DNA plugin

  * Issue 4623 - RFE - Monitor the current DB locks (#4762)

  * Issue 3555 - Fix UI audit issue

  * Issue 4725 - Fix compiler warnings

  * Issue 4770 - Lower FIPS logging severity

  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)

  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)

  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)

  * Issue 4759 - Fix coverity issue (#4760)

  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)

  * Issue 4714 - dscontainer fails with rootless podman

  * Issue 4750 - Fix compiler warning in retrocl (#4751)

  * Issue 4742 - UI - should always use LDAPI path when calling CLI

  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4

  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)

  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)

  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)

  * Issue 4711 - SIGSEV with sync_repl (#4738)

  * Issue 4734 - import of entry with no parent warning (#4735)

  * Issue 4729 - GitHub Actions fails to run pytest tests

  * Issue 4656 - Remove problematic language from source code

  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.

  * Issue 4169 - UI - migrate replication tables to PF4

  * Issue 4637 - ndn cache leak (#4724)

  * Issue 4577 - Fix ASAN flags in specfile

  * Issue 4169 - UI - PF4 migration - database tables

  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)

- Recommend openssl(cli) by lib389: admin tools like dscreate can

  call out to /usr/bin/openssl to manage certificates. As the admin

  could decide to manage the certificates differently, we only

  recommend openssl here.

- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:

  * Bump version to 2.0.4

  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)

  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)

  * Issue 4700 - Regression in winsync replication agreement (#4712)

  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)

  * Issue 4169 - UI - migrate monitor tables to PF4

  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)

  * Issue 2736 - remove remaining perl references

  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736

  * Issue 4706 - negative wtime in access log for CMP operations

  * Issue 3585 - LDAP server returning controltype in different sequence

  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)

  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)

  * Issue 4671 - UI - Fix browser crashes

  * Issue 4169 - UI - Add PF4 charts for server stats

  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)

  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)

  * Issue 4229 - Fix Rust linking

  * Issue 4673 - Update Rust crates

  * Issue 4658 - monitor - connection start date is incorrect

  * Issue 4169 - UI - migrate modals to PF4

  * Issue 4656 - remove problematic language from ds-replcheck

  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down

  * Issue 4656 - Remove problematic language from UI/CLI/lib389

  * Issue 4661 - RFE - allow importing openldap schemas (#4662)

  * Issue 4659 - restart after openldap migration to enable plugins (#4660)

  * Merge pull request #4664 from mreynolds389/issue4663

  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)

  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)

  * Issue 4646 - CLI/UI - revise DNA plugin management

  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)

  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)

  * Issue 4169 - UI - Migrate alerts to PF4

  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection

  * Issue 4595 - Paged search lookthroughlimit bug (#4602)

  * Issue 4169 - UI - port charts to PF4

  * Issue 2820 - Fix CI test suite issues

  * Issue 4513 - CI - make acl ip address tests more robust

  * Bump version to 2.0.3

  * Issue 4619 - remove pytest requirement from lib389

  * Issue 4615 - log message when psearch first exceeds max threads per conn

  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)

  * Issue 4324 - Some architectures the cache line size file does not exist

  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)

  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm

  * Update dscontainer (#4564)

  * Issue 4149 - UI - port TreeView and opther components to PF4

  * Issue 4577 - Add GitHub actions

  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)

  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)

  * Issue 4609 - CVE - info disclosure when authenticating

  * Issue 4348 - Add tests for dsidm

  * Issue 4571 - Stale libdb-utils dependency

  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)

  * Issue 4577 - Add GitHub actions

  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)

  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)

  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)

  * Issue 4348 - Add tests for dsidm

  * Issue 4577 - Add GitHub actions

  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)

  * Issue 4093 - fix compiler warnings and update doxygen

  * Issue 4575 - Update test docstrings metadata

  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)

  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)

  * Issue 4513 - Add DS version check to SSL version test (#4570)

  * Issue 5442 - Search results are different between RHDS10 and RHDS11

  * Issue 4396 - Minor memory leak in backend (#4558)

  * Revert "Update metadata for customerscenario in test docstring"

  * Update metadata for customerscenario in test docstring

  * Issue 4513 - Fix replication CI test failures (#4557)

  * Issue 4513 - Fix replication CI test failures (#4557)

  * Issue 4153 - Added a CI test (#4556)

  * Issue 4506 - BUG - fix oob alloc for fds (#4555)

  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation

  * Issue 4506 - Temporary fix for io issues (#4516)

  * Issue 4535 - lib389 - Fix log function in backends.py

  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)

  * Issue 4544 - Compiler warnings on krb5 functions (#4545)

  * Update rpm.mk for RUST tarballs

- small spec cleanup

- As there is no python-* package, the direct use of singlespec

  seems unapplicable. So do not build for all python3.x flavors,

  but only for the main one:

  + Use releavant %python3_ macros.

  + Do not use %python_module, as this pulls in all python

    versions.

- Update to version 2.0.2~git0.6d17ca7df:

  * Bump version to 2.0.2

  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)

  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)

  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated

  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)

  * Issue 4513 - CI Tests - fix test failures

  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)

  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt

  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)

  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)

  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)

  * Issue 4219 - Log internal unindexed searches (notes=A)

  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC

  * Issue 4381 - RFE - LDAPI authentication DN rewritter

  * Issue 4513 - Fix schema test and lib389 task module (#4514)

  * Issue 4414 - disk monitoring - prevent division by zero crash

  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)

  * Issue 4507 - Improve csngen testing task (#4508)

  * Issue 4498 - BUG - entryuuid replication may not work (#4503)

  * Issue 4480 - Unexpected info returned to ldap request (#4491)

  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)

  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)

  * Merge pull request #4501 from mreynolds389/issue4500

  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)

  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)

  * Issue 3522 - Remove DES to AES conversion code

  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)

  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)

  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix

  * Issue 4486 - Remove random ldif file generation from import test (#4487)

  * Issue 4224 - cleanup specfile after libsds removal

  * Issue 4421 - Unable to build with Rust enabled in closed environment

  * Issue 4489 - Remove return statement from a void function (#4490)

  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)

  * Ticket 4224 - openldap can become confused with entryuuid

  * Ticket 4313 - improve tests and improve readme re refdel

  * Ticket 4313 - fix potential syncrepl data corruption

  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)

  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)

  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)

  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)

  * Issue 4446 RFE - openldap password hashers

  * Issue 4284 - dsidm fails to delete an organizationalUnit entry

  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)

  * Issue 4464 - RFE - clang with ds+asan+rust

  * Issue 4105 - Remove python.six (fix regression)

  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions

  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries

  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)

  * Issue 4460 - BUG  - lib389 should use system tls policy

  * Issue 3657 - Add options to dsctl for dsrc file

  * Issue 4454 - RFE - fix version numbers to allow object caching

  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set

  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)

  * Issue 4112 - Added a CI test (#4441)

  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)

  * Issue 4105 - Remove python.six from lib389 (#4456)

  * Fix pytest test collection

  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)

  * Issue 4410 RFE - ndn cache with arc in rust

  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid

  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining

  * Issue 4428 - Paged Results with Chaining Test Case

  * do not add referrals for masters with different data generation #2054 (#4427)

  * Issue 4383 - Do not normalize escaped spaces in a DN

  * Issue 4432 - After a failed online import the next imports are very slow

  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)

  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'

  * Issue 4429 - NULL dereference in revert_cache()

  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)

  * Issue 4407 RFE - remove http client and presence plugin (#4409)

  * build problems at alpine linux

  * Issue 4415 - unable to query schema if there are extra parenthesis

- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed

- Perl has been completly removed in 2.0.0, enable-perl removed and lib389

  is the default. Perl tools have not been included in SUSE since 1.4.1.x

- Update to version 2.0.1~git0.b557f5daa:

  * Bump version to 2.0.1

  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X

  * Issue 4391 - DSE config modify does not call be_postop (#4394)

  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)

  * Issue 4176 - CL trimming causes high CPU

  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)

  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)

  * Bump version to 2.0.0

​

-------------------------------------------------------------------

Tue Sep 21 00:56:43 UTC 2021 - wbrown@suse.de

​

- Update to version 1.4.4.17~git0.5e1e392ae:

  * Bump version to 1.4.4.17

  * Issue 4927 - rebase lib389 and cockpit in 1.4.4

  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)

  * Issue 4912 - Account Policy plugin does not set the config entry DN

  * Issue 4796 - Add support for nsslapd-state to CLI & UI

  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)

  * Issue 4169 - backport lib389 cert list fix

  * Issue 4912 - dsidm command crashing when account policy plugin is enabled

  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index

  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks

​

-------------------------------------------------------------------

Fri Jul 09 04:16:10 UTC 2021 - wbrown@suse.de

​

- bsc#1188151 - Update to 1.4.4.16 patch release

- bsc#1188455 - CVE-2021-3652 - fix crypt handling of locked accounts

- Update to version 389dsbase1.4.4.16~git16.c1926dfc6:

  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)

  * Issue 4656 - (2nd) Remove problematic language from UI/CLI/lib389

  * Issue 4262 - Fix Index out of bound in fractional test (#4828)

  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)

  * Issue 4656 - remove problematic language from ds-replcheck

  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions

  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)

  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)

  * Issue 4506 - Improve SASL logging

  * Issue 4093 - Fix MEP test case

  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)

  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)

  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)

  * Issue 4447 - Crash when the Referential Integrity log is manually edited

  * Issue 4773 - Add CI test for DNA interval assignment

  * Issue 4750 - Fix compiler warning in retrocl (#4751)

​

-------------------------------------------------------------------

Fri Jul 09 04:11:01 UTC 2021 - wbrown@suse.de

​

- Update to version 1.4.4.16~git0.3d31c6c71:

  * Bump version to 1.4.4.16

  * Update npm packages

  * Issue 4719 - lib389 - fix dsconf passthrough auth bugs

  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task

  * Issue 4764 - replicated operation sometime checks ACI (#4783)

  * Issue 4623 - RFE - Monitor the current DB locks (#4762)

  * Issue 4781 - There are some typos in man-pages

  * Issue 4773 - Enable interval feature of DNA plugin

  * Issue 3555 - Fix UI audit issue

  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)

​

-------------------------------------------------------------------

Thu Apr  8 02:37:31 UTC 2021 - William Brown <william.brown@suse.com>

​

- bsc#1184476 - Add supportconfig utility for customer services to capture

  389-ds support information.

​

-------------------------------------------------------------------

Thu Apr 08 01:43:57 UTC 2021 - wbrown@suse.de

​

- Update to version 1.4.4.14~git0.37dc95673:

  * Bump version to 1.4.4.14

  * Issue 4671 - UI - Fix browser crashes

  * Issue 4229 - Fix Rust linking

  * Issue 4658 - monitor - connection start date is incorrect

  * Issue 4656 - Make replication CLI backwards compatible with role name change

  * Issue 4656 - Remove problematic language from UI/CLI/lib389

  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down

  * Issue 4661 - RFE - allow importing openldap schemas (#4662)

  * Issue 4659 - restart after openldap migration to enable plugins (#4660)

  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin

​

-------------------------------------------------------------------

Tue Mar 30 00:34:44 UTC 2021 - wbrown@suse.de

​

- bsc#1184142 - restart after openldap migration so that plugins can correctly

    perform data fix ups.

- Update to version 1.4.4.14~git0.37dc95673:

  * Bump version to 1.4.4.14

  * Issue 4671 - UI - Fix browser crashes

  * Issue 4229 - Fix Rust linking

  * Issue 4658 - monitor - connection start date is incorrect

  * Issue 4656 - Make replication CLI backwards compatible with role name change

  * Issue 4656 - Remove problematic language from UI/CLI/lib389

  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down

  * Issue 4661 - RFE - allow importing openldap schemas (#4662)

  * Issue 4659 - restart after openldap migration to enable plugins (#4660)

  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin

​

-------------------------------------------------------------------

Mon Feb 15 00:11:38 UTC 2021 - wbrown@suse.de

​

- Update to version 389-ds-base-1.4.4.13~git0.6841d693f:

  * Bump version to 1.4.4.13

  * Update dscontainer (#4564)

  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)

  * Issue 4324 - Some architectures the cache line size file does not exist

  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)

  * Issue 4609 - CVE - info disclosure when authenticating

  * Bump version to 1.4.4.12

  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)

  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)

  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)

​

-------------------------------------------------------------------

Wed Feb 03 02:01:39 UTC 2021 - wbrown@suse.de

​

- Update to version 1.4.4.12~git0.7b681e1da:

  * Bump version to 1.4.4.12

  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)

  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)

  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)

  * Issue 4396 - Minor memory leak in backend (#4558) (#4572)

  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)

  * Issue 5442 - Search results are different between RHDS10 and RHDS11

  * Bump version to 1.4.4.11

  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation

  * Issue 4513 - Fix schema test and lib389 task module (#4514)

​

-------------------------------------------------------------------

Mon Jan 18 01:06:59 UTC 2021 - wbrown@suse.de

​

- Upstream fix for bsc#1180847 - openldap_to_ds can fail if the

  backend has no overlays or indexes.

- Remove patches now merged upstream.

  * 0001-Ticket-51260-fix-potential-syncrepl-data-corruption.patch

  * 0002-Ticket-51260-improve-tests-and-improve-readme-re-ref.patch

  * 0003-Ticket-4224-openldap-can-become-confused-with-entryu.patch

  * 0004-Issue-4410-RFE-ndn-cache-with-arc-in-rust.patch

  * 0005-Issue-4403-RFE-OpenLDAP-pw-hash-migration-tests-4408.patch

  * 0006-Issue-4446-RFE-openldap-password-hashers.patch

  * 0007-Issue-4464-RFE-clang-with-ds-asan-rust.patch

  * 0008-Issue-4229-RFE-Improve-rust-linking-and-build-perfor.patch

- Update to version 1.4.4.10~git0.ebdf25251:

  * Bump version to 1.4.4.10

  * Issue 4418 - fix cherry-pick error

  * Issue 4381 - RFE - LDAPI authentication DN rewritter

  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)

  * Issue 4513 - CI Tests - fix test failures

  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)

  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated

  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)

  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)

  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)

​

-------------------------------------------------------------------

Tue Dec 01 02:50:05 UTC 2020 - wbrown@suse.de

​

- Lib389 is a hard requirement in 1.4.4, and perl has been completely

  removed. Reflect this in our spec file.

- Add rebased patches for SUSE Feature Completion: jsc#SLE-11501

  * 0001-Ticket-51260-fix-potential-syncrepl-data-corruption.patch

  * 0002-Ticket-51260-improve-tests-and-improve-readme-re-ref.patch

  * 0003-Ticket-4224-openldap-can-become-confused-with-entryu.patch

  * 0004-Issue-4410-RFE-ndn-cache-with-arc-in-rust.patch

  * 0005-Issue-4403-RFE-OpenLDAP-pw-hash-migration-tests-4408.patch

  * 0006-Issue-4446-RFE-openldap-password-hashers.patch

  * 0007-Issue-4464-RFE-clang-with-ds-asan-rust.patch

  * 0008-Issue-4229-RFE-Improve-rust-linking-and-build-perfor.patch

- Update to version 1.4.4.9~git0.b09e60339:

  * Bump version to 1.4.4.9

  * Issue 4105 - Remove python.six (fix regression)

  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions

  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)

  * Issue 4460 - BUG  - lib389 should use system tls policy

  * Issue 3657 - Add options to dsctl for dsrc file

  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set

  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)

  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)

  * Issue 4105 - Remove python.six from lib389 (#4456)

​

-------------------------------------------------------------------

Thu Nov 12 03:47:16 UTC 2020 - wbrown@suse.de

​

- Update to version 1.4.4.8~git0.bf454ad07:

  * Bump version to 1.4.4.8

  * Issue 4415 - unable to query schema if there are extra parenthesis

  * Issue 4176 - CL trimming causes high CPU

  * Bump version to 1.4.4.7

  * Issue 2526 - revert backend validation check

  * Issue 4262 - more perl removal cleanup

  * Issue 2526 - retrocl backend created out of order

  * Bump version to 1.4.4.6

  * Issue 4262 - Remove legacy tools subpackage (final cleanup)

  * Issue 4262 - Remove legacy tools subpackage (restart instances after rpm install)

​

-------------------------------------------------------------------

Thu Oct 08 23:20:32 UTC 2020 - william.brown@suse.com

​

- Update to version 1.4.4.4~git0.318a3ce0c:

  * Bump version to 1.4.4.4

  * Ticket 51175 - resolve plugin name leaking

  * Issue 51187 - UI - stop importing Cockpit's PF css

  * Issue 51192 - Add option to reject internal unindexed searches

  * Issue 50840 - Fix test docstrings metadata-1

  * Issue 50840 - Fix test docstrings metadata

  * Ticket 50980 - fix foo_filter_rewrite

  * Issue 51165 - add more logconv stats for the new access log keywords

  * Issue 50928 - Unable to create a suffix with countryName either via dscreate or the admin console

  * Issue 51188 - db2ldif crashes when LDIF file can't be accessed

  * Issue 50545 - Port remaining legacy tools to new python CLI

  * Issue 51165 - add new access log keywords for wtime and optime

  * Issue : 49761 - Fix CI test suite issues ( Port remaning acceptance test suit part 1)

  * Issue: 51070 - Port Import TET module to python3 part2

  * Issue:51142 - Port manage Entry TET suit to python 3 part 1

  * Issue: 50860 - Port Password Policy test cases from TET to python3 final

  * Issue 50696 - Fix Allowed and Denied Ciphers lists - WebUI

  * Issue 51169 - UI - attr uniqueness - selecting empty subtree crashes cockpit

  * Issue 49256 - log warning when thread number is very different from autotuned value

  * Issue 51157 - Reindex task may create abandoned index file

  * Issue 50873 - Fix issues with healthcheck tool

  * Issue:50860 - Port Password Policy test cases from TET to python3 part2

  * Issue 51166 - Log an error when a search is fully unindexed

  * Ticket 50544 - OpenLDAP syncrepl compatability

  * Ticket 51161 - fix SLE15.2 install issps

  * Issue 49999 - rpm.mk build-cockpit should clean cockpit_dist first

  * Issue 51144 - dsctl fails with instance names that contain slapd-

  * Issue 51155 - Fix OID for sambaConfig objectclass

  * Ticket 51159 - dsidm ou delete fails

  * Issue 50984 - Memory leaks in disk monitoring

  * Ticket 51131 - improve mutex alloc in conntable

  * Issue 49761 - Fix CI tests

  * Ticket 49859 - A distinguished value can be missing in an entry

  * Issue 50791 - Healthcheck should look for notes=A/F in access log

  * Issue 51072 - Set the default minimum worker threads

  * Ticket 51140 - missing ifdef

  * Issue 50912 - pwdReset can be modified by a user

  * Issue 50781 - Make building cockpit plugin optional

  * Issue 51100 - Correct numSubordinates value for cn=monitor

  * Issue 51136 - dsctl and dsidm do not errors correctly when using JSON

  * Ticket 137 - fix compiler warning

  * Issue 50781 - Make building cockpit plugin optional

  * Issue 51132 - Winsync setting winSyncWindowsFilter not working as expected

  * Ticket 51034 - labeledURIObject

  * Issue 50545 - Port remaining legacy tools to new python CLI

  * Issue 50889 - Extract pem files into a private namespace

  * Ticket 137 - Implement EntryUUID plugin

  * Ticket 51072 - improve autotune defaults

  * Ticket 51115 - enable samba3.ldif by default

  * Issue 51118 - UI - improve modal validation when creating an instance

  * Issue 50746 - Add option to healthcheck to list all the lint reports

  * Bump version to 1.4.4.3

  * Issue 50931 - RFE AD filter rewriter for ObjectCategory

  * Issue: 50860 - Port Password Policy test cases from TET to python3 part1

  * Issue 51113 - Allow using uid for replication manager entry

  * Issue 51095 - abort operation if CSN can not be generated

  * Issue 51110 - Fix ASAN ODR warnings

  * Issue 49850 -ldbm_get_nonleaf_ids() painfully slow for databases with many non-leaf entries

  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable

  * Issue 51076 - remove unnecessary slapi entry dups

  * Issue 51086 - Improve dscreate instance name validation

  * Issue:51070 - Port Import TET module to python3 part1

  * Ticket 51037 - compiler warning

  * Ticket 50989 - ignore pid when it is ourself in protect_db

  * Ticket 51037 - RFE AD filter rewriter for ObjectSID

  * Issue 50499 - Fix some npm audit issues

  * Issue 51091 - healthcheck json report fails when mapping tree is deleted

  * Ticket 51079 - container pid start and stop issues

  * Revert "Issue 51017 - Implement dynamic ds/bz pytest markers"

  * Issue 49761 - Fix CI tests

  * Issue 50610 - Fix return code when it's nothing to free

  * Issue 50610 - memory leaks in dbscan and changelog encryption

  * Issue 51076 - prevent unnecessarily duplication of the target entry

  * Issue 50940 - Permissions of some shipped directories may change over time

  * Issue 50873 - Fix issues with healthcheck tool

  * Issue 51017 - Implement dynamic ds/bz pytest markers

  * Ticket 51082 - abort when a empty valueset is freed

  * Issue:CI test - automember_plugin (Long Duration test)

  * Issue 50201 - nsIndexIDListScanLimit accepts any value

  * Bump version to 1.4.4.2

  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema

  * Issue 51054 - Revise ACI target syntax checking

  * Ticket 51068 - deadlock when updating the schema

  * Issue 51042 - try to use both c_rehash and openssl rehash

  * Issue 51042 - switch from c_rehash to openssl rehash

  * Issue 50992 - Bump jemalloc version and enable profiling

  * Issue 51060 - unable to set sslVersionMin to TLS1.0

  * Issue 51064 - Unable to install server where IPv6 is disabled

  * Issue 51051 - CLI fix consistency issues with confirmations

  * Issue 50655 - etime displayed has an order of magnitude 10 times smaller than it should be

  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now

  * Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev

  * Issue 49761 - Fix CI tests

  * Issue 51047 - React deprecating ComponentWillMount

  * Issue 50499 - fix npm audit issues

  * Issue 50545 - Port dbgen.pl to dsctl

  * Issue 51027 - Test passwordHistory is not rewritten on a fail attempt

  * Bump version to 1.4.4.1

  * Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins

  * Ticket 50877 - task to run tests of csn generator

  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now

  * Issue: 48055 - CI test - automember_plugin(part3)

  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1

  * Issue 51031 UI - transition between two instances needs improvement

  * Bump version to 1.4.4

​

-------------------------------------------------------------------

Sun Aug 02 23:52:12 UTC 2020 - william.brown@suse.com

​

- Update to version 1.4.3.12~git0.9bc042902:

  * Bump version to 1.4.3.12

  * Issue 51222 - It should not be allowed to delete Managed Entry manually

  * Issue 51129 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version

  * Issue 51086 - Fix instance name length for interactive install

  * Issue 51136 - JSON Error output has redundant messages

  * Issue 51059 - If dbhome directory is set online backup fails

  * Issue 51000 - Separate the BDB backend monitors

  * Issue 49300 - entryUSN is duplicated after memberOf operation

  * Issue 50984 - Fix disk_mon_check_diskspace types

​

-------------------------------------------------------------------

Wed Jul 15 04:10:48 UTC 2020 - william.brown@suse.com

​

- Remove patch that is now included in latest release:

  0001-Ticket-51161-fix-SLE15.2-install-issps.patch

- Resolve bsc#1174057 upstream stability and fix rollup.

- Update to version 1.4.3.11~git0.82796f172:

  * Bump version to 1.4.3.11

  * Issue 51192 - Add option to reject internal unindexed searches

  * Ticket 51159 - dsidm ou delete fails

  * Issue 51165 - add more logconv stats for the new access log keywords

  * Issue 51188 - db2ldif crashes when LDIF file can't be accessed

  * Issue 51165 - add new access log keywords for wtime and optime

  * Issue 50696 - Fix Allowed and Denied Ciphers lists - WebUI

  * Issue 51169 - UI - attr uniqueness - selecting empty subtree crashes cockpit

  * Issue 49256 - log warning when thread number is very different from autotuned value

  * Issue 51157 - Reindex task may create abandoned index file

  * Issue 51166 - Log an error when a search is fully unindexed

  * Ticket 51161 - fix SLE15.2 install issps

  * Issue 51144 - dsctl fails with instance names that contain slapd-

  * Issue 50984 - Memory leaks in disk monitoring

  * Issue 50201 - nsIndexIDListScanLimit accepts any value

  * Bump version to 1.4.3.10

  * Ticket 49859 - A distinguished value can be missing in an entry

  * Issue 50791 - Healthcheck should look for notes=A/F in access log

  * Issue 51072 - Set the default minimum worker threads

  * Issue 50912 - pwdReset can be modified by a user

  * Issue 51100 - Correct numSubordinates value for cn=monitor

  * Issue 51136 - dsctl and dsidm do not errors correctly when using JSON

  * Issue 51132 - Winsync setting winSyncWindowsFilter not working as expected

  * Ticket 51072 - improve autotune defaults

  * Issue 50746 - Add option to healthcheck to list all the lint reports

  * Issue 51118 - UI - improve modal validation when creating an instance

​

-------------------------------------------------------------------

Fri Jun 19 01:56:49 UTC 2020 - William Brown <william.brown@suse.com>

​

- Add 0001-Ticket-51161-fix-SLE15.2-install-issps.patch to resolve bsc#1172328

  This corrects a failure to install on SUSE due to incorrect hostname

  generation, and a python 3 utf8 issue that is triggered by systemd.

​

-------------------------------------------------------------------

Mon Jun 01 01:10:10 UTC 2020 - william.brown@suse.com

​

- Update to version 1.4.3.9~git0.3eb8617f6:

  * Bump version to 1.4.3.9

  * Issue 50931 - RFE AD filter rewriter for ObjectCategory

  * Issue 51113 - Allow using uid for replication manager entry

  * Issue 51095 - abort operation if CSN can not be generated

  * Issue 51110 - Fix ASAN ODR warnings

  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable

  * Issue 51076 - remove unnecessary slapi entry dups

  * Issue 51086 - Improve dscreate instance name validation

  * Ticket 50989 - ignore pid when it is ourself in protect_db

  * Issue 50499 - Fix some npm audit issues

  * Issue 51091 - healthcheck json report fails when mapping tree is deleted

  * Ticket 51079 - container pid start and stop issues

  * Issue 50610 - Fix return code when it's nothing to free

  * Ticket 51082 - abort when a empty valueset is freed

  * Issue 50610 - memory leaks in dbscan and changelog encryption

  * Issue 51076 - prevent unnecessarily duplication of the target entry

  * Bump version to 1.4.3.8

  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema

  * Issue 51054 - Revise ACI target syntax checking

  * Ticket 51068 - deadlock when updating the schema

  * Issue 51060 - unable to set sslVersionMin to TLS1.0

  * Issue 51064 - Unable to install server where IPv6 is disabled

  * Issue 51051 - CLI fix consistency issues with confirmations

  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now

  * Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev

  * Issue 51047 - React deprecating ComponentWillMount

  * Issue 50499 - fix npm audit issues

  * Issue 50545 - Port dbgen.pl to dsctl

  * Bump version to 1.4.3.7

  * Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins

  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1

  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now

  * Issue 51031 UI - transition between two instances needs improvement

  * Bump version to 1.4.3.6

  * Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default

  * Ticket 50931 - RFE AD filter rewriter for ObjectCategory

  * Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init

  * Ticket 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator

  * Ticket 51008 - dbhome in containers

  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code

  * Ticket 51014 - slapi_pal.c possible static buffer overflow

  * Issue 50545 - remove dbmon "incr" option from arg parser

  * Issue 50545 - Port dbmon.sh to dsconf

  * Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value

  * Issue 49731 - Fix additional issues with setting db home directory by default

  * Issue 50337 - Replace exec() with setattr()

  * Ticket 50905 - intermittent SSL hang with rhds

  * Issue 50952 - SSCA lacks basicConstraint:CA

  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given

  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value

  * Bump version to 1.4.3.5

  * Issue 50994 - Fix latest UI bugs found by QE

  * Ticket 50933 - rfc2307compat.ldif

  * Issue 50337 - Replace exec() with setattr()

  * Issue 50984 - Memory leaks in disk monitoring

  * Issue 50984 - Memory leaks in disk monitoring

  * Issue 49731 - dscreate fails in silent mode because of db_home_dir

  * Issue 50975 - Revise UI branding with new minimized build

  * Issue 49437 - Fix memory leak with indirect COS

  * Issue 49731 - Do not add db_home_dir to template-dse.ldif

  * Issue 49731 - set and use db_home_directory by default

  * Ticket 50971 - fix BSD_SOURCE

  * -n option of dbverify does not work

  * Issue 50952- SSCA lacks basicConstraint:CA

  * Issue 50976 - Clean up Web UI source directory from unused files

  * Issue 50955 - Fix memory leaks in chaining plugin(part 2)

  * Issue 50966 - UI - Database indexes not using typeAhead correctly

  * Issue 50974 - UI - wrong title in "Delete Suffix" popup

  * Issue 50972 - Fix cockpit plugin build

  * Issue 49761 - Fix CI test suite issues

  * Issue 50971 - Support building on FreeBSD.

  * Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework

  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted

  * Issue 50963 - We should bundle *.min.js files of Console

  * Issue: 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.

  * Issue: 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final

  * Issue 50954 - buildnum.py - fix date formatting issue

  * Bump version to 1.4.3.4

  * Issue 50954 - Port buildnum.pl to python(part 2)

  * Issue 50955 - Fix memory leaks in chaining plugin

  * Issue 50954 - Port buildnum.pl to python

  * Ticket 50947 - change 00core.ldif objectClasses for openldap migration

  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory

  * Issue 50937 - Update CLI for new backend split configuration

  * Issue: 50860 - Port Password Policy test cases from TET to python3 pwp.sh

  * Ticket 50945 - givenname alias of gn from openldap

  * Ticket 50935 - systemd override in lib389 for dscontainer

  * Issue 50499 - Fix npm audit issues

  * Issue 49761 - Fix CI test suite issues

  * Ticket 50618 - clean compiler warning and log level

  * Ticket 50889 - fix compiler issues

  * Issue 50884 -  Health check tool DSEldif check fails

  * Issue 50926 - Remove dual spinner and other UI fixes

  * Issue 50928 - Unable to create a suffix with countryName

  * Issue 50758 - Only Recommend bash-completion, not Require

  * Issue 50923 - Fix a test regression

  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code

  * Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments

  * Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name

  * Issue 50919 - Backend delete fails using dsconf

  * Issue 50872 - dsconf can't create GSSAPI replication agreements

  * Issue 50912 - RFE - add password policy attribute pwdReset

  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group

  * Ticket 50889 - Extract pem files into a private namespace

  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before

  * Issue: 50686 - Port fractional replication test cases from TET to python3 final

  * Issue 49845 - Remove pkgconfig check for libasan

  * Issue:50860 - Port Password Policy test cases from TET to python3 bug624080

  * Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs

  * Ticket 50786 - connection table freelist

  * Ticket 50618 - support cgroupv2

  * Ticket 50900 - Fix cargo offline build

  * Ticket 50898 - ldclt core dumped when run with -e genldif option

  * Bump version to 1.4.3.3

  * Issue 50855 - remove unused file from UI

  * Issue 50855 - UI: Port Server Tab to React

  * Issue 49845 - README does not contain complete information on building

  * Issue: 50686 - Port fractional replication test cases from TET to python3 part 1

  * Ticket - 49623-cont cenotaph errors on modrdn operations

  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled

  * Issue 50886 - Typo in the replication debug message

  * Issue 50873 - Fix healthcheck and virtual attr check

  * Issue 50873 - Fix issues with healthcheck tool

  * Issue 50028 - Add a new CI test case

  * Issue 49946 - Add a new CI test case

  * Issue 50117 - Add a new CI test case

  * Ticket 50787 - fix implementation of attr unique

  * Ticket 50859 - support running only with ldaps socket

  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name

  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache

  * Issue 50867 - Fix minor buildsys issues

  * Issue 50737 - Allow building with rust online without vendoring

  * Ticket 50831 add cargo.lock to allow offline builds

  * Ticket 50694 - import PEM certs on startup

  * Ticket 50857 - Memory leak in ACI using IP subject

  * Issue 49761 - Fix CI test suite issues

  * Issue 50853 - Fix NULL pointer deref in config setting

  * Issue 50850 - Fix dsctl healthcheck for python36

  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors

  * Ticket 48707 - ldapssotoken for authentication

  * Bump version to 1.4.3.2

  * Issue 49254 - Fix compiler failures and warnings

  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown

  * Issue 50836 - Port Schema UI tab to React

  * Issue 50842 - Decrease 389-console Cockpit component size

  * Ticket 50790 - Add result text when filter is invalid

  * Issue 50627 - Add ASAN logs to HTML report

  * Issue 50834 - Incorrectly setting the NSS default SSL version max

  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free

  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10

  * Ticket 50784 - performance testing scripts

  * Issue 50599 - Fix memory leak when removing db region files

  * Issue 49395 - Set the default TLS version min to TLS1.2

  * Issue 50818 - dsconf pwdpolicy get error

  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"

  * Issue 50599 - Remove db region files prior to db recovery

  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/

  * Issue 50816 - dsconf allows the root password to be set to nothing

  * Issue 50798 - incorrect bytes in format string(fix import issue)

  * Bump version to 1.4.3.1

  * Ticket 50798 - incorrect bytes in format string

  * Issue 50545 - Add the new replication monitor functionality to UI

  * Issue 50806 - Fix minor issues in lib389 health checks

  * Issue: 50690 - Port Password Storage test cases from TET to python3 part 1

  * Issue 49761 - Fix CI test suite issues

  * Issue 49761 - Fix CI test suite issues

  * Issue 50754 - Add Restore Change Log option to CLI

  * Issue: 48055 -  CI test - automember_plugin(part2)

  * Ticket 50667 - dsctl -l did not respect PREFIX

  * Issue 50780 - More CLI fixes

  * Ticket 50649 - lib389 without defaults.inf

  * Issue 50780 - Fix UI issues

  * Ticket 50727 - correct mistaken options in filter validation patch

  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces

  * Set branch version to 1.4.3.0

​

-------------------------------------------------------------------

Mon Jun 01 00:22:18 UTC 2020 - william.brown@suse.com

​

- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch

  as it is part of 1.4.2.14

- Update to version 1.4.2.14~git0.5ac5b02ce:

  * Bump version to 1.4.2.14

  * Issue 51113 - Allow using uid for replication manager entry

  * Issue 51095 - abort operation if CSN can not be generated

  * Issue 51110 - Fix ASAN ODR warnings

  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable

  * Issue 51076 - remove unnecessary slapi entry dups

  * Issue 51086 - Improve dscreate instance name validation

  * Ticket 50989 - ignore pid when it is ourself in protect_db

  * Issue 50499 - Fix some npm audit issues

  * Issue 51091 - healthcheck json report fails when mapping tree is deleted

  * Ticket 51079 - container pid start and stop issues

  * Issue 50610 - Fix return code when it's nothing to free

  * Ticket 51082 - abort when a empty valueset is freed

  * Issue 50610 - memory leaks in dbscan and changelog encryption

  * Issue 51076 - prevent unnecessarily duplication of the target entry

  * Issue 50940 - Permissions of some shipped directories may change over time

  * Bump version to 1.4.2.13

  * Ticket 50787 - fix implementation of attr unique

  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema

  * Ticket 51068 - deadlock when updating the schema

  * Issue 51060 - unable to set sslVersionMin to TLS1.0

  * Issue 51064 - Unable to install server where IPv6 is disabled

  * Issue 51051 - CLI fix consistency issues with confirmations

  * Issue 51047 - React deprecating ComponentWillMount

  * Issue 50499 - fix npm audit issues

  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1

  * Issue 51031 UI - transition between two instances needs improvement

  * Bump version to 1.4.2.12

  * Issue 50337 - Replace exec() with setattr()

  * Issue 50545 - the check for the ds version for the backend config was broken

  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code

  * Ticket 51014 - slapi_pal.c possible static buffer overflow

  * Issue 50545 - remove dbmon "incr" option from arg parser

  * Issue 50545 - Port dbmon.sh to dsconf

  * Ticket 50905 - intermittent SSL hang with rhds

  * Issue 50952 - SSCA lacks basicConstraint:CA

  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given

  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value

​

-------------------------------------------------------------------

Tue Apr 07 05:27:28 UTC 2020 - 389-ds-maintainer@suse.de

​

- Patch rollup as described in bsc#1169364

- Add rust vendor.tar.gz as a source - rust is still an optional build

  and will be enabled in the future.

- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will

  not exist in containers with systemd users.

- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to

  resolve a warning found in static analysis in OBS (upstream #51014)

- Update to version 1.4.2.11~git0.aff1a2831:

  * Bump version to 1.4.2.11

  * Issue 50994 - Fix latest UI bugs found by QE

  * Issue 50337 - Replace exec() with setattr()

  * Issue 50984 - Memory leaks in disk monitoring

  * Issue 50975 - Revise UI branding with new minimized build

  * Issue 49437 - Fix memory leak with indirect COS

  * Issue 50976 - Clean up Web UI source directory from unused files

  * Issue 50744 - -n option of dbverify does not work

  * Issue 50952- SSCA lacks basicConstraint:CA

  * Bump version to 1.4.2.10

  * Issue 50966 - UI - Database indexes not using typeAhead correctly

  * Issue 50974 - UI - wrong title in "Delete Suffix" popup

  * Issue 50972 - Fix cockpit plugin build

  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted

  * Issue 50963 - We should bundle *.min.js files of Console

  * Bump version to 1.4.2.9

  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory

  * Issue 50937 - Update CLI for new backend split configuration

  * Issue 50499 - Fix npm audit issues

  * Issue 50884 -  Health check tool DSEldif check fails

  * Issue 50926 - Remove dual spinner and other UI fixes

  * Issue 49845 - Remove pkgconfig check for libasan

  * Issue 50758 - Only Recommend bash-completion, not Require

  * Issue 50928 - Unable to create a suffix with countryName

  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code

  * Issue 50919 - Backend delete fails using dsconf

  * Issue 50872 - dsconf can't create GSSAPI replication agreements

  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group

  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before

  * Ticket 50618 - support cgroupv2

  * Ticket 50898 - ldclt core dumped when run with -e genldif option

​

-------------------------------------------------------------------

Mon Feb 17 22:37:41 UTC 2020 - 389-ds-maintainer@suse.de

​

- Update to version 1.4.2.8~git0.3aaa3e820:

  * Bump version to 1.4.2.8

  * Issue 50855 - remove unused file from UI

  * Issue 50855 - UI: Port Server Tab to React

  * Issue 49845 - README does not contain complete information on building

  * Ticket - 49623-cont cenotaph errors on modrdn operations

  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled

  * Issue 50886 - Typo in the replication debug message

  * Issue 50873 - Fix healthcheck and virtual attr check

  * Issue 50873 - Fix issues with healthcheck tool

  * Ticket 50857 - Memory leak in ACI using IP subject

  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name

  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache

  * Issue 50850 - Fix dsctl healthcheck for python36

  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors

​

-------------------------------------------------------------------

Tue Jan 28 04:11:30 UTC 2020 - 389-ds-maintainer@suse.de

​

- Update to version 1.4.2.7~git0.202953d28:

  * Bump version to 1.4.2.7

  * Issue 49254 - Fix compiler failures and warnings

  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown

  * Issue 50836 - Port Schema UI tab to React

  * Issue 50842 - Decrease 389-console Cockpit component size

  * Ticket 50790 - Add result text when filter is invalid

  * Issue 50834 - Incorrectly setting the NSS default SSL version max

  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free

  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10

  * Issue 50599 - Fix memory leak when removing db region files

  * Issue 49395 - Set the default TLS version min to TLS1.2

  * Issue 50818 - dsconf pwdpolicy get error

  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"

  * Issue 50599 - Remove db region files prior to db recovery

  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/

  * Issue 50816 - dsconf allows the root password to be set to nothing

  * Issue 50798 - incorrect bytes in format string(fix import issue)

​

-------------------------------------------------------------------

Tue Jan 21 03:51:34 UTC 2020 - 389-ds-maintainer@suse.de

​

- Update to version 1.4.2.6~git0.e84bbce3f:

  * Bump version to 1.4.2.6

  * Ticket 50798 - incorrect bytes in format string

  * Issue 50545 - Add the new replication monitor functionality to UI

  * Issue 50806 - Fix minor issues in lib389 health checks

  * Issue 50754 - Add Restore Change Log option to CLI

  * Ticket 50727 - change syntax validate by default in 1.4.2

  * Ticket 50667 - dsctl -l did not respect PREFIX

  * Issue 50780 - More CLI fixes

  * Issue 50780 - Fix UI issues

  * Ticket 50727 - correct mistaken options in filter validation patch

  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces

  * Ticket #49761 - Fix CI test suite issues

  * Issue 50499 - Fix npm audit issues

  * Issue 50774 - Account.enroll_certificate() should not check for DS version

  * Issue 50771 - 1.4.2.5 doesn't compile due to error ModuleNotFoundError: No module named 'pkg_resources.extern'

  * Issue 50758 - Need to enable CLI arg completion

  * Ticket 50709: Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10

  * Issue: 50690 - Port Password Storage test cases from TET to python3(create required types in password_plugins)

  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match index)

  * Issue 50761 - Parametrized tests are missing ':parametrized' value

  * Bump version to 1.4.2.5

  * Issue 50747 - Port readnsstate to dsctl

  * Issue 50758 - Enable CLI arg completion

  * Issue 50753 - Dumping the changelog to a file doesn't work

  * Ticket 50745: ns-slapd hangs during CleanAllRUV tests

  * Issue 50734 - lib389 creates non-SSCA cert DBs with misleading README.txt

  * Issue: 48851 - investigate and port TET matching rules filter tests(cert)

  * Issue: 50443 - Create a module in lib389 to Convert a byte sequence to a properly escaped for LDAP

  * Ticket 50664 - DS can fail to recover if an empty directory exists in db

  * Ticket 50736 - RetroCL trimming may crash at shutdown if trimming configuration is invalid

  * Ticket 50741 - bdb_start - Detected Disorderly Shutdown last time Directory Server was running

  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted

  * Issue 50701 - Fix type in lint report

  * Ticket 50729 - add support for gssapi tests on suse

  * Issue 50701 - Add additional healthchecks to dsconf

  * Issue 50711 - `dsconf security` lacks option for setting nsTLSAllowClientRenegotiation attribute

  * Issue 50439 - Update docker integration for Fedora

  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match)

  * Issue 50499 - Fix npm audit issues

  * Issue 50722 - Test IDs are not unique

  * Issue 50712 - Version comparison doesn't work correctly on git builds

  * Issue 50499 - Fix npm audit issues

  * Issue 50706 - Missing lib389 dependency - packaging

  * Bump version to 1.4.2.4

  * Issue 49761 - Fix CI test suite issues

  * Issue 50634 - Fix CLI error parsing for non-string values

  * Ticket 50659 AddressSanitizer: SEGV ... in bdb_pre_close

  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes

  * Issue 50644 - fix regression with creating sample entries

  * Issue 50699 - Add Disk Monitor to CLI and UI

  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes

  * Issue 50536 - After audit log file is rotated, DS version string is logged after each update

  * Issue #50712 - Version comparison doesn't work correctly on git builds

  * Issue 50706 - Missing lib389 dependency - packaging

  * Issue 49761 - Fix CI test suite issues

  * Issue #50683 - Makefile.am contains unused RPM-related targets

  * Issue 50696 - Fix various UI bugs

  * Update based on Marks feedback

  * Update to mark as skipif

  * Ticket 50641 - Update default aci to allows users to change their own password

  * Ticket 50007, 50648 - improve x509 handling.

  * Issue 50689 - Failed db restore task does not report an error

  * Issue 50199 - Disable perl by default

  * Ticket 50633 - Add cargo vendor support for offline builds

  * Issue 50499 - Fix npm audit issues

  * Bump version to 1.4.2.3

  * Issue 50592 - Port Replication Tab to ReactJS

  * Issue 50680 - Remove branding from upstream spec file

  * Issue 50669 - Remove nunc-stans in favour of reworking current conn code (add.)

  * Issue: 48055 -  CI test - automember_plugin(part1)

  * Issue 50677 - Map subtree searches with NULL base to default naming context

  * Issue 50669 - Fix RPM build

  * Ticket 50669 - remove nunc-stans

  *     Ticket 49850 cont -fix crash in ldbm_non_leaf

  * Issue 50634 - Clean up CLI errors output - Fix wrong exception

  * Issue 50660 - Build failure on Fedora 31

  * Issue 50634 - Clean up CLI errors output

  * Issue: 48851 - Investigate and port TET matching rules filter tests(match more test cases)

  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"

  * Issue 49850 -  ldbm_get_nonleaf_ids() slow for databases with many non-leaf entries

  * Issue 50655 - access log etime is not properly formatted

  * Issue 50653 -  objectclass parsing fails to log error message text

  * Issue 50646 - Improve task handling during shutdowns

  * Add new test suite to test migration between RHDS versions

  * Ticket 50627 - Support platforms without pytest_html

  * Ticket 49476 - backend refactoring phase1, fix failing tests

  * Ticket 49476 - refactor ldbm backend to allow replacement of BDB

  * Ticket - 50349 - additional fix: filter schema check must handle subtypes

  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing more test cases)

  * Issue 50638 - RecursionError: maximum recursion depth exceeded while calling a Python object

  * Ticket 50636 - Crash during sasl bind

  * Ticket 50632 - Add ensure attr state so that diffs are easier from 389-ds-portal

  * Ticket 50619 - extend commands to have more modify options

  * Issue 50499 - Fix npm audit issues

  * bump version to 1.4.2.2

​

-------------------------------------------------------------------

Tue Oct 08 02:04:20 UTC 2019 - 389-ds-maintainer@suse.de

​

- Update to version 1.4.2.2~git0.d41ef935b:

  * Issue 50627 - Add ASAN logs to HTML report

  * Issue 50545 - Port repl-monitor.pl to lib389 CLI