- To prevent SLE-16 pulling in non LTS branches (which is what we run in tumbleweed), we have to
downgrade to an LTS branch so that anytime SLE-16 pulls, it's always something at least
maintainable. Short term this means some fun for "updates", but it avoids the problem.
- Downgrade to version 3.1.4+64845ffd9:
* Issue 7194 - Repl Log Analysis - Add CSN propagation details (#7195)
* Issue 7213 - MDB_BAD_VALSIZE error while handling VLV (#7214)
* Issue 7027 - (2nd) 389-ds-base OpenScanHub Leaks Detected (#7211)
* Issue 7184 - argparse.HelpFormatter _format_actions_usage() is deprecated
* Issue 7198 - Web console doesn't show sub-suffix when parent-suffix points to an entry (#7202)
* Issue 7189 - DSBLE0007 generates incorrect remediation commands for scan limits
* Bump lodash from 4.17.21 to 4.17.23 in /src/cockpit/389-console (#7203)
* Issue 7172 - (2nd) Index ordering mismatch after upgrade (#7180)
* Issue 7172 - Index ordering mismatch after upgrade (#7173)
* Issue 7108 - Fix shutdown crash in entry cache destruction (#7163)
* Issue - Revise paged result search locking
* Issue 7096 - During replication online total init the function idl_id_is_in_idlist is not scaling with large database (#7145)
* Issue 7160 - Add lib389 version sync check to configure (#7165)
* Issue 7166 - db_config_set asserts because of dynamic list (#7167)
* Sync lib389 version to 3.1.4 (#7161)
* Issue 7150 - Compressed access log rotations skipped, accesslog-list out of sync (#7151)
* Bump version to 3.1.4
OBS-URL: https://build.opensuse.org/request/show/1330837
OBS-URL: https://build.opensuse.org/package/show/network:ldap/389-ds?expand=0&rev=219
- Move librobdb.so from devel to main package
- Update to version 3.1.3~git111.e953ee704:
* Issue 7023 - UI - if first instance that is loaded is stopped it breaks parts of the UI
* Issue 6753 - Removing ticket 47714 test and porting to DSLdapObject (#6946)
* Issue 7027 - 389-ds-base OpenScanHub Leaks Detected (#7028)
* Issue 6753 - Removing ticket 47676 test and porting to DSLdapObject (#6938)
* Issue 6966 - On large DB, unlimited IDL scan limit reduce the SRCH performance (#6967)
OBS-URL: https://build.opensuse.org/request/show/1309713
OBS-URL: https://build.opensuse.org/package/show/network:ldap/389-ds?expand=0&rev=215
- bsc#1242666 - CVE-2025-3416 - openssl use after free
- Update to version 3.1.2~git90.2bc7250be:
* Issue 6764 - statistics about index lookup report a wrong duration (#6765)
* Issue 6753 - Port ticket test 47560
* Issue 4989 - Confusing error message from dsconf plugin set --enabled (#6750)
* Issue 6614 - CLI - Error when trying to display global DB stats with LMDB (#6622)
* Issue 6276 - UI - schema editing and memberof shared config not working correctly
* Issue 6734 - BUG - format strings may not contain backslash (#6749)
* Issue 6736 - Exception thrown by dsconf instance repl get_ruv (#6742)
* Issue 6501 - CLI - dsidm role rename was not working
* Issue 6744 - BUG - memory accounting is not always enabled (#6745)
* Issue 6492/6493 - CLI - dsdim can not create nested/filtered roles
* Issue #6740 Certificate verify fails in FIPS mode
* Issue 6603 - Release tarballs ship a different Cargo.lock
* Issue 6743 - CLI - dsidm add option to list DN's
* Issue 6595 - Regression test in betxn_test.py failing due to busy LDAP server (#6709)
* Issue 6669 - logconv.py updates (#6673)
* Issue 5356 - Set DEFAULT_PASSWORD_STORAGE_SCHEME to PBKDF2-SHA512 in tests
* Issue 6735 - CLI - dsidm provide option to set decription when creating an entry
* Bump tokio from 1.43.0 to 1.44.2 in /src (#6732)
* Issue 6728 - CLI - Issue with user rename operation (#6729)
* Issue 6515 - CLI - dsidm get_dn does not return JSON format
* Issue 6660 - UI - Replication Monitoring Lag Report Feature (#6661)
* Bump openssl from 0.10.70 to 0.10.72 in /src (#6730)
* Issue 6713 - ns-slapd crash during mdb offline import (#6714)
* Issue 6720 - Remove BDB attribute from MDB DB Monitor (#6721)
* Issue 6715 - dsconf backend replication monitor fails if replica id starts with 0 (#6716)
* Issue 6562 - Fix issues around slapi_filter_sprintf (#6725)
* Issue 6481 - When ports that are in use are used to update a DS instance the error message is not helpful (#6723)
OBS-URL: https://build.opensuse.org/request/show/1275072
OBS-URL: https://build.opensuse.org/package/show/network:ldap/389-ds?expand=0&rev=207
- bsc#1229948 - CVE-2024-43806 - rustix::fs::Dir iterator with the linux_raw backend can cause memory explosion
- Update to version 3.1.1~git13.a9c7ff9:
* Issue 2472 - Add a CI test (#6314)
* Issue 6276 - Schema lib389 object is not keeping custom schema data upon editing (#6279)
* Issue 3555 - UI - Fix audit issue with npm - micromatch (#6310)
* Issue 5843 - Fix size formatting in dscreate output and enhance tests (#6309)
* Issue 6301 - Fix long delay when setting replication agreement with dsconf (#6303)
* Issue 6280 - Changelog trims updates from a given RID even if a consumer has not received any of them (#6281)
* Issue 6296 - basic_test.py::test_conn_limits fails in main branch (#6300)
* Issue 6295 - test_password_modify_non_utf8 should set default password storage scheme
* Issue 6294 - Nightly copr builds are failing
* Issue 6288 - dsidm crash with account policy when alt-state-attr is disabled (#6292)
* Issue 2324 - Add a CI test (#6289)
* Issue 6284 - BUG - freelist ordering causes high wtime (#6285)
* Issue 6282 - BUG - out of tree build fails (#6283)
OBS-URL: https://build.opensuse.org/request/show/1198618
OBS-URL: https://build.opensuse.org/package/show/network:ldap/389-ds?expand=0&rev=197
- Update to version 3.0.1~git1.1f95b57:
* Issue 6061 - Certificate lifetime displayed as NaN
* Bump version to 3.0.1
* Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
* Issue 3555 - Remove audit-ci from dependencies (#6056)
* Issue 6052 - Paged results test sets hostname to `localhost` on test collection
* Issue 6051 - Drop unused pytest markers
* Issue 6049 - lmdb - changelog is wrongly recreated by reindex task (#6050)
* Issue 6047 - Add a check for tagged commits
* Issue 6041 - dscreate ds-root - accepts relative path (#6042)
* Switch default backend to lmdb and bump version to 3.0 (#6013)
* Issue 6032 - Replication broken after backup restore (#6035)
* Issue 6037 - Server crash at startup in vlvIndex_delete (#6038)
* Issue 6034 - Change replica_id from str to int
OBS-URL: https://build.opensuse.org/request/show/1143538
OBS-URL: https://build.opensuse.org/package/show/network:ldap/389-ds?expand=0&rev=187
- Update to version 2.4.0~git126.5936946:
* Issue 6028 - vlv index keys inconsistencies (#6031)
* Issue 5989 - RFE support of inChain Matching Rule (#5990)
* Issue 6022 - lmdb inconsistency between vlv index and vlv cache names (#6026)
* Issue 6015 - Fix typo remeber (#6014)
* Issue 6016 - Pin upload/download artifacts action to v3
* Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
* Issue 4673 - Update Rust crates
* Issue 6004 - idletimeout may be ignored (#6005)
* Issue 5954 - Disable Transparent Huge Pages
* Issue 5997 - test_inactivty_and_expiration CI testcase is wrong (#5999)
* Issue 5993 - Fix several race condition around CI tests (#5996)
* Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
* Bump openssl from 0.10.55 to 0.10.60 in /src (#5995)
OBS-URL: https://build.opensuse.org/request/show/1139335
OBS-URL: https://build.opensuse.org/package/show/network:ldap/389-ds?expand=0&rev=185
- Update to version 2.4.0~git113.84a845c:
* Issue 5980 - Improve instance startup failure handling (#5991)
* Issue 5976 - Fix freeipa install regression with lmdb (#5977)
* Issue 5984 - Crash when paged result search are abandoned - fix2 (#5987)
* Issue 5984 - Crash when paged result search are abandoned (#5985)
* Issue 5947 - CI test_vlv_recreation_reindex fails on LMDB (#5979)
* Bump version to 2.5.0
* Issue 5971 - CLI - Fix password prompt for repl status (#5972)
* Issue 5973 - Fix fedora cop RawHide builds (#5974)
* Revert "Issue 5761 - Worker thread dynamic management (#5796)" (#5970)
* Issue 5966 - CLI - Custom schema object is removed on a failed edit (#5967)
* Issue 5786 - Update permissions for Release workflow
* Issue 5960 - Subpackages should have more strict interdependencies
* Issue 3555 - UI - Fix audit issue with npm - babel/traverse (#5959)
* Issue 4843 - Fix dscreate create-template issue (#5950)
* bugfix for --passwd-file not working on latest version (#5934)
* Issue 5843 - dsconf / dscreate should be able to handle lmdb parameters (#5943)
* Bump postcss from 8.4.24 to 8.4.31 in /src/cockpit/389-console (#5945)
* Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
* issue 5924 - ASAN server build crash when looping opening/closing connections (#5926)
* Issue 1925 - Add a CI test (#5936)
* Issue 5732 - Localizing Cockpit's 389ds Plugin using CockpitPoPlugin (#5764)
* Issue 1870 - Add a CI test (#5929)
* Issue 843 - Add a warning to slapi_valueset_add_value_ext (#5925)
* Issue 5761 - Worker thread dynamic management (#5796)
* Issue 1802 - Improve ldclt man page (#5928)
* Issue 1456 - Add a CI test that verifies there is no issue (#5927)
* Issue 1317 - Add a CI test (#5923)
* Issue 1081 - CI - Add more tests for overwriting x-origin issue (#5815)
* Issue 1115 - Add a CI test (#5913)
OBS-URL: https://build.opensuse.org/request/show/1129686
OBS-URL: https://build.opensuse.org/package/show/network:ldap/389-ds?expand=0&rev=182
- Update to version 2.4.0~git69.89c2de5:
* Issue 4551 - Part 2 - Fix build warning of previous PR (#5888)
* Issue 5834 - AccountPolicyPlugin erroring for some users (#5866)
* Issue 5872 - part 2 - fix is_dbi regression (#5887)
* Issue 4758 - Add tests for WebUI
* Issue 5848 - dsconf should prevent setting the replicaID for hub and consumer roles (#5849)
* Issue 5883 - Remove connection mutex contention risk on autobind (#5886)
* Issue 5872 - `dbscan()` in lib389 can return bytes
* Bump version to 2.4.3
* Issue 5729 - Memory leak in factory_create_extension (#5814)
* Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
Most relevant is https://github.com/389ds/389-ds-base/pull/5854 - which makes 389-ds build again for Tumbleweed
OBS-URL: https://build.opensuse.org/request/show/1103271
OBS-URL: https://build.opensuse.org/package/show/network:ldap/389-ds?expand=0&rev=179
- bsc#1210027 - apply upstream fix for setuptools
- Update to version 2.3.2~git53.a01e230:
* Issue 5705 - Add config parameter to close client conns on failed bind (#5712)
* Issue 4758 - Add tests for WebUI
* Issue 5643 - Memory leak in entryrdn during delete (#5717)
* Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
* Issue 5701 - CLI - Fix referral mode setting (#5708)
* Bump openssl from 0.10.45 to 0.10.48 in /src (#5709)
* Issue 5710 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (#5711)
* Issue 5697 - Obsolete nsslapd-ldapimaprootdn attribute (#5698)
* Issue 1081 - Stop schema replication from overwriting x-origin
* Issue 4812 - Listener thread does not scale with a high num of established connections (#5706)
- Update to version 2.3.2~git44.5e4551e:
* Issue 4812 - Listener thread does not scale with a high num of established connections (#5706)
* Issue 4812 - Listener thread does not scale with a high num of established connections (#5681)
* Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699)
* Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692)
* Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691)
* Issue 5687 - UI - sensitive information disclosure
* Issue 5661 - LMDB hangs while Rebuilding the replication changelog RUV (#5676)
* Issue 5554 - Add more tests to security_basic_test suite
* Issue 4583 - Update specfile to skip checks of ASAN builds
* Issue 4758 - Add tests for WebUI
OBS-URL: https://build.opensuse.org/request/show/1078309
OBS-URL: https://build.opensuse.org/package/show/network:ldap/389-ds?expand=0&rev=171
- Update to version 2.2.2~git11.f002e9e09:
* Issue 5383 - UI - Various fixes and RFE's for UI
* Issue 4656 - Remove problematic language from source code
* Issue 5380 - Separate cleanAllRUV code into new file
* Issue 5322 - optime & wtime on rejected connections is not properly set
* Issue 5335 - RFE - Add Security Audit Log
* Issue 5375 - CI - disable TLS hostname checking
* Issue 981 Managed Entries betxnpreoperation - transaction not aborted on managed entry failure (#5369)
* Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
* Issue 5371 - Update npm and cargo packages
* Issue 3069 - Support ECDSA private keys for TLS (#5365)
OBS-URL: https://build.opensuse.org/request/show/991627
OBS-URL: https://build.opensuse.org/package/show/network:ldap/389-ds?expand=0&rev=162
- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.1.1~git4.b7f891097:
* Issue 5242- Craft message may crash the server (#5243)
* Issue 5234 - UI - rename Users and Groups tab
* Issue 5217 - Simplify instance creation and administration by non root user (#5224)
* Issue 5227 - UI - No way to move back to Get Started step (#5233)
* Bump version to 2.1.1
* Issue 5230 - Race condition in RHDS disk monitoring functions
* Issue 4299 - UI - Add CoS funtionality (#5196)
* Issue 5225 - UI - impossible to manually set entry cache
* Issue 5186 - UI - Fix SASL Mapping regex test feature
* Issue 5221 - User with expired password can still login with full privledges
OBS-URL: https://build.opensuse.org/request/show/966097
OBS-URL: https://build.opensuse.org/package/show/network:ldap/389-ds?expand=0&rev=147
- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
* Issue 5221 - User with expired password can still login with full privledges
* Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
* Issue 5200 - dscontainer should use environment variables with DS_ prefix
* Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
* Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
* Issue 5188 - UI - LDAP editor - add entry and group types
* Issue 5184 - memberOf does not work correctly with multiple include scopes
* Issue 5162 - BUG - error on importing chain files (#5164)
* Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
* Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)
OBS-URL: https://build.opensuse.org/request/show/963798
OBS-URL: https://build.opensuse.org/package/show/network:ldap/389-ds?expand=0&rev=145
- Update to version 2.0.10~git0.21dd2802c:
* Bump version to 2.0.10
* Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
* Issue 4912 - Account Policy plugin does not set the config entry DN
* Issue 4863 - typoes in logconv.pl
* Issue 4796 - Add support for nsslapd-state to CLI & UI
* Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
* Issue 4912 - dsidm command crashing when account policy plugin is enabled
* Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
* Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
* Issue 4887 - UI - fix minor regression from camelCase fixup
* Bump version to 2.0.9
* Issue 4887 - UI - Update webpack.config.js and package.json
* Issue 4149 - UI - Migrate the remaining components to PF4
* Issue 4875 - CLI - Add some verbosity to installer
* Issue 4884 - server crashes when dnaInterval attribute is set to zero
OBS-URL: https://build.opensuse.org/request/show/920471
OBS-URL: https://build.opensuse.org/package/show/network:ldap/389-ds?expand=0&rev=137
- Update to version 2.0.8~git0.553f26c87:
* Bump version to 2.0.8
* Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
* Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
* Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
* Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
* Issue 4736 - lib389 - fix regression in certutil error checking
* Issue 4861 - Improve instructions in custom.conf for memory leak detection
* Issue 4859 - Don't version libns-dshttpd
* Issue 4169 - Migrate Replication & Schema tabs to PF4
* Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
* Issue 4736 - CLI - Errors from certutil are not propagated
* Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
* Issue 4848 - Force to require nss version greater or equal as the version available at the build time
* Issue - 4696 - Password hash upgrade on bind (#4840)
* Bump version to 2.0.7
* Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
* Issue 4603 - Reindexing a single backend (#4831)
* Issue 4169 - UI - migrate Server Tab forms to PF4
* Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
* Issue 4820 - RFE - control flow integrity (#4821)
* Issue 4706 - negative wtime for compare operations (#4780)
* Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
* Issue 4262 - Fix Index out of bound in fractional test (#4828)
* Issue 4826 - Filter argparse-manpage from autogenerated requires
* Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
* Issue 2820 - Fix CI test suite issues
* Bump version to 2.0.6
OBS-URL: https://build.opensuse.org/request/show/913910
OBS-URL: https://build.opensuse.org/package/show/network:ldap/389-ds?expand=0&rev=136
