- To prevent SLE-16 pulling in non LTS branches (which is what we run in tumbleweed), we have to
downgrade to an LTS branch so that anytime SLE-16 pulls, it's always something at least
maintainable. Short term this means some fun for "updates", but it avoids the problem.
- Downgrade to version 3.1.4+64845ffd9:
* Issue 7194 - Repl Log Analysis - Add CSN propagation details (#7195)
* Issue 7213 - MDB_BAD_VALSIZE error while handling VLV (#7214)
* Issue 7027 - (2nd) 389-ds-base OpenScanHub Leaks Detected (#7211)
* Issue 7184 - argparse.HelpFormatter _format_actions_usage() is deprecated
* Issue 7198 - Web console doesn't show sub-suffix when parent-suffix points to an entry (#7202)
* Issue 7189 - DSBLE0007 generates incorrect remediation commands for scan limits
* Bump lodash from 4.17.21 to 4.17.23 in /src/cockpit/389-console (#7203)
* Issue 7172 - (2nd) Index ordering mismatch after upgrade (#7180)
* Issue 7172 - Index ordering mismatch after upgrade (#7173)
* Issue 7108 - Fix shutdown crash in entry cache destruction (#7163)
* Issue - Revise paged result search locking
* Issue 7096 - During replication online total init the function idl_id_is_in_idlist is not scaling with large database (#7145)
* Issue 7160 - Add lib389 version sync check to configure (#7165)
* Issue 7166 - db_config_set asserts because of dynamic list (#7167)
* Sync lib389 version to 3.1.4 (#7161)
* Issue 7150 - Compressed access log rotations skipped, accesslog-list out of sync (#7151)
* Bump version to 3.1.4
OBS-URL: https://build.opensuse.org/request/show/1330837
OBS-URL: https://build.opensuse.org/package/show/network:ldap/389-ds?expand=0&rev=219
- Move librobdb.so from devel to main package
- Update to version 3.1.3~git111.e953ee704:
* Issue 7023 - UI - if first instance that is loaded is stopped it breaks parts of the UI
* Issue 6753 - Removing ticket 47714 test and porting to DSLdapObject (#6946)
* Issue 7027 - 389-ds-base OpenScanHub Leaks Detected (#7028)
* Issue 6753 - Removing ticket 47676 test and porting to DSLdapObject (#6938)
* Issue 6966 - On large DB, unlimited IDL scan limit reduce the SRCH performance (#6967)
OBS-URL: https://build.opensuse.org/request/show/1309713
OBS-URL: https://build.opensuse.org/package/show/network:ldap/389-ds?expand=0&rev=215
- bsc#1242666 - CVE-2025-3416 - openssl use after free
- Update to version 3.1.2~git90.2bc7250be:
* Issue 6764 - statistics about index lookup report a wrong duration (#6765)
* Issue 6753 - Port ticket test 47560
* Issue 4989 - Confusing error message from dsconf plugin set --enabled (#6750)
* Issue 6614 - CLI - Error when trying to display global DB stats with LMDB (#6622)
* Issue 6276 - UI - schema editing and memberof shared config not working correctly
* Issue 6734 - BUG - format strings may not contain backslash (#6749)
* Issue 6736 - Exception thrown by dsconf instance repl get_ruv (#6742)
* Issue 6501 - CLI - dsidm role rename was not working
* Issue 6744 - BUG - memory accounting is not always enabled (#6745)
* Issue 6492/6493 - CLI - dsdim can not create nested/filtered roles
* Issue #6740 Certificate verify fails in FIPS mode
* Issue 6603 - Release tarballs ship a different Cargo.lock
* Issue 6743 - CLI - dsidm add option to list DN's
* Issue 6595 - Regression test in betxn_test.py failing due to busy LDAP server (#6709)
* Issue 6669 - logconv.py updates (#6673)
* Issue 5356 - Set DEFAULT_PASSWORD_STORAGE_SCHEME to PBKDF2-SHA512 in tests
* Issue 6735 - CLI - dsidm provide option to set decription when creating an entry
* Bump tokio from 1.43.0 to 1.44.2 in /src (#6732)
* Issue 6728 - CLI - Issue with user rename operation (#6729)
* Issue 6515 - CLI - dsidm get_dn does not return JSON format
* Issue 6660 - UI - Replication Monitoring Lag Report Feature (#6661)
* Bump openssl from 0.10.70 to 0.10.72 in /src (#6730)
* Issue 6713 - ns-slapd crash during mdb offline import (#6714)
* Issue 6720 - Remove BDB attribute from MDB DB Monitor (#6721)
* Issue 6715 - dsconf backend replication monitor fails if replica id starts with 0 (#6716)
* Issue 6562 - Fix issues around slapi_filter_sprintf (#6725)
* Issue 6481 - When ports that are in use are used to update a DS instance the error message is not helpful (#6723)
OBS-URL: https://build.opensuse.org/request/show/1275072
OBS-URL: https://build.opensuse.org/package/show/network:ldap/389-ds?expand=0&rev=207
- bsc#1229948 - CVE-2024-43806 - rustix::fs::Dir iterator with the linux_raw backend can cause memory explosion
- Update to version 3.1.1~git13.a9c7ff9:
* Issue 2472 - Add a CI test (#6314)
* Issue 6276 - Schema lib389 object is not keeping custom schema data upon editing (#6279)
* Issue 3555 - UI - Fix audit issue with npm - micromatch (#6310)
* Issue 5843 - Fix size formatting in dscreate output and enhance tests (#6309)
* Issue 6301 - Fix long delay when setting replication agreement with dsconf (#6303)
* Issue 6280 - Changelog trims updates from a given RID even if a consumer has not received any of them (#6281)
* Issue 6296 - basic_test.py::test_conn_limits fails in main branch (#6300)
* Issue 6295 - test_password_modify_non_utf8 should set default password storage scheme
* Issue 6294 - Nightly copr builds are failing
* Issue 6288 - dsidm crash with account policy when alt-state-attr is disabled (#6292)
* Issue 2324 - Add a CI test (#6289)
* Issue 6284 - BUG - freelist ordering causes high wtime (#6285)
* Issue 6282 - BUG - out of tree build fails (#6283)
OBS-URL: https://build.opensuse.org/request/show/1198618
OBS-URL: https://build.opensuse.org/package/show/network:ldap/389-ds?expand=0&rev=197
- Update to version 3.0.1~git1.1f95b57:
* Issue 6061 - Certificate lifetime displayed as NaN
* Bump version to 3.0.1
* Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
* Issue 3555 - Remove audit-ci from dependencies (#6056)
* Issue 6052 - Paged results test sets hostname to `localhost` on test collection
* Issue 6051 - Drop unused pytest markers
* Issue 6049 - lmdb - changelog is wrongly recreated by reindex task (#6050)
* Issue 6047 - Add a check for tagged commits
* Issue 6041 - dscreate ds-root - accepts relative path (#6042)
* Switch default backend to lmdb and bump version to 3.0 (#6013)
* Issue 6032 - Replication broken after backup restore (#6035)
* Issue 6037 - Server crash at startup in vlvIndex_delete (#6038)
* Issue 6034 - Change replica_id from str to int
OBS-URL: https://build.opensuse.org/request/show/1143538
OBS-URL: https://build.opensuse.org/package/show/network:ldap/389-ds?expand=0&rev=187
- Update to version 2.4.0~git126.5936946:
* Issue 6028 - vlv index keys inconsistencies (#6031)
* Issue 5989 - RFE support of inChain Matching Rule (#5990)
* Issue 6022 - lmdb inconsistency between vlv index and vlv cache names (#6026)
* Issue 6015 - Fix typo remeber (#6014)
* Issue 6016 - Pin upload/download artifacts action to v3
* Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
* Issue 4673 - Update Rust crates
* Issue 6004 - idletimeout may be ignored (#6005)
* Issue 5954 - Disable Transparent Huge Pages
* Issue 5997 - test_inactivty_and_expiration CI testcase is wrong (#5999)
* Issue 5993 - Fix several race condition around CI tests (#5996)
* Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
* Bump openssl from 0.10.55 to 0.10.60 in /src (#5995)
OBS-URL: https://build.opensuse.org/request/show/1139335
OBS-URL: https://build.opensuse.org/package/show/network:ldap/389-ds?expand=0&rev=185
- Update to version 2.4.0~git113.84a845c:
* Issue 5980 - Improve instance startup failure handling (#5991)
* Issue 5976 - Fix freeipa install regression with lmdb (#5977)
* Issue 5984 - Crash when paged result search are abandoned - fix2 (#5987)
* Issue 5984 - Crash when paged result search are abandoned (#5985)
* Issue 5947 - CI test_vlv_recreation_reindex fails on LMDB (#5979)
* Bump version to 2.5.0
* Issue 5971 - CLI - Fix password prompt for repl status (#5972)
* Issue 5973 - Fix fedora cop RawHide builds (#5974)
* Revert "Issue 5761 - Worker thread dynamic management (#5796)" (#5970)
* Issue 5966 - CLI - Custom schema object is removed on a failed edit (#5967)
* Issue 5786 - Update permissions for Release workflow
* Issue 5960 - Subpackages should have more strict interdependencies
* Issue 3555 - UI - Fix audit issue with npm - babel/traverse (#5959)
* Issue 4843 - Fix dscreate create-template issue (#5950)
* bugfix for --passwd-file not working on latest version (#5934)
* Issue 5843 - dsconf / dscreate should be able to handle lmdb parameters (#5943)
* Bump postcss from 8.4.24 to 8.4.31 in /src/cockpit/389-console (#5945)
* Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
* issue 5924 - ASAN server build crash when looping opening/closing connections (#5926)
* Issue 1925 - Add a CI test (#5936)
* Issue 5732 - Localizing Cockpit's 389ds Plugin using CockpitPoPlugin (#5764)
* Issue 1870 - Add a CI test (#5929)
* Issue 843 - Add a warning to slapi_valueset_add_value_ext (#5925)
* Issue 5761 - Worker thread dynamic management (#5796)
* Issue 1802 - Improve ldclt man page (#5928)
* Issue 1456 - Add a CI test that verifies there is no issue (#5927)
* Issue 1317 - Add a CI test (#5923)
* Issue 1081 - CI - Add more tests for overwriting x-origin issue (#5815)
* Issue 1115 - Add a CI test (#5913)
OBS-URL: https://build.opensuse.org/request/show/1129686
OBS-URL: https://build.opensuse.org/package/show/network:ldap/389-ds?expand=0&rev=182
- Update to version 2.4.0~git69.89c2de5:
* Issue 4551 - Part 2 - Fix build warning of previous PR (#5888)
* Issue 5834 - AccountPolicyPlugin erroring for some users (#5866)
* Issue 5872 - part 2 - fix is_dbi regression (#5887)
* Issue 4758 - Add tests for WebUI
* Issue 5848 - dsconf should prevent setting the replicaID for hub and consumer roles (#5849)
* Issue 5883 - Remove connection mutex contention risk on autobind (#5886)
* Issue 5872 - `dbscan()` in lib389 can return bytes
* Bump version to 2.4.3
* Issue 5729 - Memory leak in factory_create_extension (#5814)
* Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
Most relevant is https://github.com/389ds/389-ds-base/pull/5854 - which makes 389-ds build again for Tumbleweed
OBS-URL: https://build.opensuse.org/request/show/1103271
OBS-URL: https://build.opensuse.org/package/show/network:ldap/389-ds?expand=0&rev=179
- Update to version 2.0.10~git0.21dd2802c:
* Bump version to 2.0.10
* Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
* Issue 4912 - Account Policy plugin does not set the config entry DN
* Issue 4863 - typoes in logconv.pl
* Issue 4796 - Add support for nsslapd-state to CLI & UI
* Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
* Issue 4912 - dsidm command crashing when account policy plugin is enabled
* Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
* Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
* Issue 4887 - UI - fix minor regression from camelCase fixup
* Bump version to 2.0.9
* Issue 4887 - UI - Update webpack.config.js and package.json
* Issue 4149 - UI - Migrate the remaining components to PF4
* Issue 4875 - CLI - Add some verbosity to installer
* Issue 4884 - server crashes when dnaInterval attribute is set to zero
OBS-URL: https://build.opensuse.org/request/show/920471
OBS-URL: https://build.opensuse.org/package/show/network:ldap/389-ds?expand=0&rev=137
- Update to version 2.0.8~git0.553f26c87:
* Bump version to 2.0.8
* Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
* Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
* Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
* Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
* Issue 4736 - lib389 - fix regression in certutil error checking
* Issue 4861 - Improve instructions in custom.conf for memory leak detection
* Issue 4859 - Don't version libns-dshttpd
* Issue 4169 - Migrate Replication & Schema tabs to PF4
* Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
* Issue 4736 - CLI - Errors from certutil are not propagated
* Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
* Issue 4848 - Force to require nss version greater or equal as the version available at the build time
* Issue - 4696 - Password hash upgrade on bind (#4840)
* Bump version to 2.0.7
* Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
* Issue 4603 - Reindexing a single backend (#4831)
* Issue 4169 - UI - migrate Server Tab forms to PF4
* Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
* Issue 4820 - RFE - control flow integrity (#4821)
* Issue 4706 - negative wtime for compare operations (#4780)
* Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
* Issue 4262 - Fix Index out of bound in fractional test (#4828)
* Issue 4826 - Filter argparse-manpage from autogenerated requires
* Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
* Issue 2820 - Fix CI test suite issues
* Bump version to 2.0.6
OBS-URL: https://build.opensuse.org/request/show/913910
OBS-URL: https://build.opensuse.org/package/show/network:ldap/389-ds?expand=0&rev=136
- Update to version 2.0.6~git0.d81dc6c90:
* Bump version to 2.0.6
* Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
* Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
* Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
* Issue 4414 - disk monitoring - prevent division by zero crash
* Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
* Issue 4656 - Fix replication plugin rename dependency issues
* Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
* Issue 4506 - Improve SASL logging
* Issue 4709 - Fix double free in dbscan
* Issue 4093 - Fix MEP test case
* Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
* Issue 4791 - Missing dependency for RetroCL RFE (#4792)
* Issue 4794 - BUG - don't capture container output (#4798)
* Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
* Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
* Issue 4169 - UI Migrate checkbox to PF4 (#4769)
* Issue 4447 - Crash when the Referential Integrity log is manually edited
* Issue 4773 - Add CI test for DNA interval assignment
* Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
* Issue 4379 - fixing regression in test_info_disclosure
* Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
* Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
* Issue 4575 Update test docstrings metadata
* Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
* removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
* Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
OBS-URL: https://build.opensuse.org/request/show/904654
OBS-URL: https://build.opensuse.org/package/show/network:ldap/389-ds?expand=0&rev=134
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
* Bump version to 2.0.1
* Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
* Issue 4391 - DSE config modify does not call be_postop (#4394)
* Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
* Issue 4176 - CL trimming causes high CPU
* ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
* Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
* Bump version to 2.0.0
* Bump version to 1.4.5.0
OBS-URL: https://build.opensuse.org/request/show/852767
OBS-URL: https://build.opensuse.org/package/show/network:ldap/389-ds?expand=0&rev=120
- Update to version 1.4.4.8~git0.bf454ad07:
* Bump version to 1.4.4.8
* Issue 4415 - unable to query schema if there are extra parenthesis
* Issue 4176 - CL trimming causes high CPU
* Bump version to 1.4.4.7
* Issue 2526 - revert backend validation check
* Issue 4262 - more perl removal cleanup
* Issue 2526 - retrocl backend created out of order
* Bump version to 1.4.4.6
* Issue 4262 - Remove legacy tools subpackage (final cleanup)
- Add missing dependency on gawk
OBS-URL: https://build.opensuse.org/request/show/847970
OBS-URL: https://build.opensuse.org/package/show/network:ldap/389-ds?expand=0&rev=118
- Update to version 1.4.4.4~git0.318a3ce0c:
* Bump version to 1.4.4.4
* Ticket 51175 - resolve plugin name leaking
* Issue 51187 - UI - stop importing Cockpit's PF css
* Issue 51192 - Add option to reject internal unindexed searches
* Issue 50840 - Fix test docstrings metadata-1
* Issue 50840 - Fix test docstrings metadata
* Ticket 50980 - fix foo_filter_rewrite
* Issue 51165 - add more logconv stats for the new access log keywords
* Issue 50928 - Unable to create a suffix with countryName either via dscreate or the admin console
* Issue 51188 - db2ldif crashes when LDIF file can't be accessed
* Issue 50545 - Port remaining legacy tools to new python CLI
* Issue 51165 - add new access log keywords for wtime and optime
* Issue : 49761 - Fix CI test suite issues ( Port remaning acceptance test suit part 1)
* Issue: 51070 - Port Import TET module to python3 part2
* Issue:51142 - Port manage Entry TET suit to python 3 part 1
* Issue: 50860 - Port Password Policy test cases from TET to python3 final
* Issue 50696 - Fix Allowed and Denied Ciphers lists - WebUI
* Issue 51169 - UI - attr uniqueness - selecting empty subtree crashes cockpit
* Issue 49256 - log warning when thread number is very different from autotuned value
* Issue 51157 - Reindex task may create abandoned index file
* Issue 50873 - Fix issues with healthcheck tool
* Issue:50860 - Port Password Policy test cases from TET to python3 part2
* Issue 51166 - Log an error when a search is fully unindexed
* Ticket 50544 - OpenLDAP syncrepl compatability
* Ticket 51161 - fix SLE15.2 install issps
* Issue 49999 - rpm.mk build-cockpit should clean cockpit_dist first
* Issue 51144 - dsctl fails with instance names that contain slapd-
* Issue 51155 - Fix OID for sambaConfig objectclass
* Ticket 51159 - dsidm ou delete fails
OBS-URL: https://build.opensuse.org/request/show/820587
OBS-URL: https://build.opensuse.org/package/show/network:ldap/389-ds?expand=0&rev=114
- Update to version 1.4.4.2~git0.debc684ad:
* Bump version to 1.4.4.2
* Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
* Issue 51054 - Revise ACI target syntax checking
* Ticket 51068 - deadlock when updating the schema
* Issue 51042 - try to use both c_rehash and openssl rehash
* Issue 51042 - switch from c_rehash to openssl rehash
* Issue 50992 - Bump jemalloc version and enable profiling
* Issue 51060 - unable to set sslVersionMin to TLS1.0
* Issue 51064 - Unable to install server where IPv6 is disabled
* Issue 51051 - CLI fix consistency issues with confirmations
* Issue 50655 - etime displayed has an order of magnitude 10 times smaller than it should be
* Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
* Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
* Issue 49761 - Fix CI tests
* Issue 51047 - React deprecating ComponentWillMount
* Issue 50499 - fix npm audit issues
* Issue 50545 - Port dbgen.pl to dsctl
* Issue 51027 - Test passwordHistory is not rewritten on a fail attempt
OBS-URL: https://build.opensuse.org/request/show/802797
OBS-URL: https://build.opensuse.org/package/show/network:ldap/389-ds?expand=0&rev=110
- Update to version 1.4.4.1~git0.2333d75d5:
* Bump version to 1.4.4.1
* Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
* Ticket 50877 - task to run tests of csn generator
* Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
* Issue: 48055 - CI test - automember_plugin(part3)
* Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
* Issue 51031 UI - transition between two instances needs improvement
- Update to version 1.4.4.0~git0.5fc54f434:
* Bump version to 1.4.4
* Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
* Ticket 50931 - RFE AD filter rewriter for ObjectCategory
* Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
* Ticket 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
* Ticket 51008 - dbhome in containers
* Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
* Ticket 51014 - slapi_pal.c possible static buffer overflow
* Issue 50545 - remove dbmon "incr" option from arg parser
* Issue 50545 - Port dbmon.sh to dsconf
* Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
* Issue 49731 - Fix additional issues with setting db home directory by default
* Issue 50337 - Replace exec() with setattr()
* Ticket 50905 - intermittent SSL hang with rhds
* Issue 50952 - SSCA lacks basicConstraint:CA
* Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
* Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
- Update to version 1.4.3.5~git0.fc95cf3ad:
* Bump version to 1.4.3.5
OBS-URL: https://build.opensuse.org/request/show/796368
OBS-URL: https://build.opensuse.org/package/show/network:ldap/389-ds?expand=0&rev=108
- Remove 0001-fix-cargo-build.patch as it has been included upstream
- Update to version 1.4.3.4~git0.3422d6574:
* Bump version to 1.4.3.4
* Issue 50954 - Port buildnum.pl to python(part 2)
* Issue 50955 - Fix memory leaks in chaining plugin
* Issue 50954 - Port buildnum.pl to python
* Ticket 50947 - change 00core.ldif objectClasses for openldap migration
* Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
* Issue 50937 - Update CLI for new backend split configuration
* Issue: 50860 - Port Password Policy test cases from TET to python3 pwp.sh
* Ticket 50945 - givenname alias of gn from openldap
* Ticket 50935 - systemd override in lib389 for dscontainer
* Issue 50499 - Fix npm audit issues
* Issue 49761 - Fix CI test suite issues
* Ticket 50618 - clean compiler warning and log level
* Ticket 50889 - fix compiler issues
* Issue 50884 - Health check tool DSEldif check fails
* Issue 50926 - Remove dual spinner and other UI fixes
* Issue 50928 - Unable to create a suffix with countryName
* Issue 50758 - Only Recommend bash-completion, not Require
* Issue 50923 - Fix a test regression
* Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
* Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
* Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
* Issue 50919 - Backend delete fails using dsconf
* Issue 50872 - dsconf can't create GSSAPI replication agreements
* Issue 50912 - RFE - add password policy attribute pwdReset
* Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
* Ticket 50889 - Extract pem files into a private namespace
* Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
OBS-URL: https://build.opensuse.org/request/show/785750
OBS-URL: https://build.opensuse.org/package/show/network:ldap/389-ds?expand=0&rev=106
- Add requirement on openssl for rust-openssl as part of ldaptokens
- Add rust vendored libs
- Add 0001-fix-cargo-build.patch to fix minor rust build issues
- Update to version 1.4.3.3~git0.776c6edf5:
* Bump version to 1.4.3.3
* Issue 50855 - remove unused file from UI
* Issue 50855 - UI: Port Server Tab to React
* Issue 49845 - README does not contain complete information on building
* Issue: 50686 - Port fractional replication test cases from TET to python3 part 1
* Ticket - 49623-cont cenotaph errors on modrdn operations
* Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
* Issue 50886 - Typo in the replication debug message
* Issue 50873 - Fix healthcheck and virtual attr check
* Issue 50873 - Fix issues with healthcheck tool
* Issue 50028 - Add a new CI test case
* Issue 49946 - Add a new CI test case
* Issue 50117 - Add a new CI test case
* Ticket 50787 - fix implementation of attr unique
* Ticket 50859 - support running only with ldaps socket
* Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
* Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
* Issue 50867 - Fix minor buildsys issues
* Issue 50737 - Allow building with rust online without vendoring
* Ticket 50831 add cargo.lock to allow offline builds
* Ticket 50694 - import PEM certs on startup
* Ticket 50857 - Memory leak in ACI using IP subject
* Issue 49761 - Fix CI test suite issues
* Issue 50853 - Fix NULL pointer deref in config setting
* Issue 50850 - Fix dsctl healthcheck for python36
* Issue 49990 - Need to enforce a hard maximum limit for file descriptors
OBS-URL: https://build.opensuse.org/request/show/777489
OBS-URL: https://build.opensuse.org/package/show/network:ldap/389-ds?expand=0&rev=102
- Update to version 1.4.3.1~git0.a08202a5b:
* Bump version to 1.4.3.1
* Ticket 50798 - incorrect bytes in format string
* Issue 50545 - Add the new replication monitor functionality to UI
* Issue 50806 - Fix minor issues in lib389 health checks
* Issue: 50690 - Port Password Storage test cases from TET to python3 part 1
* Issue 49761 - Fix CI test suite issues
* Issue 49761 - Fix CI test suite issues
* Issue 50754 - Add Restore Change Log option to CLI
* Issue: 48055 - CI test - automember_plugin(part2)
* Ticket 50667 - dsctl -l did not respect PREFIX
* Issue 50780 - More CLI fixes
* Ticket 50649 - lib389 without defaults.inf
* Issue 50780 - Fix UI issues
* Ticket 50727 - correct mistaken options in filter validation patch
* Issue 50779 - lib389 - conflict compare fails for DN's with spaces
* Set branch version to 1.4.3.0
* Ticket #49761 - Fix CI test suite issues
* Issue 50499 - Fix npm audit issues
* Issue 50774 - Account.enroll_certificate() should not check for DS version
* Issue 50771 - 1.4.2.5 doesn't compile due to error ModuleNotFoundError: No module named 'pkg_resources.extern'
* Issue 50758 - Need to enable CLI arg completion
* Ticket 50709: Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
* Issue: 50690 - Port Password Storage test cases from TET to python3(create required types in password_plugins)
* Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match index)
* Issue 50761 - Parametrized tests are missing ':parametrized' value
OBS-URL: https://build.opensuse.org/request/show/765973
OBS-URL: https://build.opensuse.org/package/show/network:ldap/389-ds?expand=0&rev=100
- Update to version 1.4.2.5~git0.d52700340:
* Bump version to 1.4.2.5
* Issue 50747 - Port readnsstate to dsctl
* Issue 50758 - Enable CLI arg completion
* Issue 50753 - Dumping the changelog to a file doesn't work
* Ticket 50745: ns-slapd hangs during CleanAllRUV tests
* Issue 50734 - lib389 creates non-SSCA cert DBs with misleading README.txt
* Issue: 48851 - investigate and port TET matching rules filter tests(cert)
* Issue: 50443 - Create a module in lib389 to Convert a byte sequence to a properly escaped for LDAP
* Ticket 50664 - DS can fail to recover if an empty directory exists in db
* Ticket 50736 - RetroCL trimming may crash at shutdown if trimming configuration is invalid
* Ticket 50741 - bdb_start - Detected Disorderly Shutdown last time Directory Server was running
* Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
* Issue 50701 - Fix type in lint report
* Ticket 50729 - add support for gssapi tests on suse
* Issue 50701 - Add additional healthchecks to dsconf
* Issue 50711 - `dsconf security` lacks option for setting nsTLSAllowClientRenegotiation attribute
* Issue 50439 - Update docker integration for Fedora
* Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match)
* Issue 50499 - Fix npm audit issues
* Issue 50722 - Test IDs are not unique
* Issue 50712 - Version comparison doesn't work correctly on git builds
* Issue 50499 - Fix npm audit issues
* Issue 50706 - Missing lib389 dependency - packaging
OBS-URL: https://build.opensuse.org/request/show/755695
OBS-URL: https://build.opensuse.org/package/show/network:ldap/389-ds?expand=0&rev=98
- Update to version 1.4.2.3~git0.129914357:
* Bump version to 1.4.2.3
* Issue 50592 - Port Replication Tab to ReactJS
* Issue 50680 - Remove branding from upstream spec file
* Issue 50669 - Remove nunc-stans in favour of reworking current conn code (add.)
* Issue: 48055 - CI test - automember_plugin(part1)
* Issue 50677 - Map subtree searches with NULL base to default naming context
* Issue 50669 - Fix RPM build
* Ticket 50669 - remove nunc-stans
* Ticket 49850 cont -fix crash in ldbm_non_leaf
* Issue 50634 - Clean up CLI errors output - Fix wrong exception
* Issue 50660 - Build failure on Fedora 31
* Issue 50634 - Clean up CLI errors output
* Issue: 48851 - Investigate and port TET matching rules filter tests(match more test cases)
* Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
* Issue 49850 - ldbm_get_nonleaf_ids() slow for databases with many non-leaf entries
* Issue 50655 - access log etime is not properly formatted
* Issue 50653 - objectclass parsing fails to log error message text
* Issue 50646 - Improve task handling during shutdowns
* Add new test suite to test migration between RHDS versions
* Ticket 50627 - Support platforms without pytest_html
* Ticket 49476 - backend refactoring phase1, fix failing tests
* Ticket 49476 - refactor ldbm backend to allow replacement of BDB
* Ticket - 50349 - additional fix: filter schema check must handle subtypes
* Issue: 48851 - investigate and port TET matching rules filter tests(indexing more test cases)
* Issue 50638 - RecursionError: maximum recursion depth exceeded while calling a Python object
* Ticket 50636 - Crash during sasl bind
* Ticket 50632 - Add ensure attr state so that diffs are easier from 389-ds-portal
* Ticket 50619 - extend commands to have more modify options
OBS-URL: https://build.opensuse.org/request/show/747463
OBS-URL: https://build.opensuse.org/package/show/network:ldap/389-ds?expand=0&rev=92
- Update to version 1.4.2.2~git0.d41ef935b:
* Issue 50627 - Add ASAN logs to HTML report
* Issue 50545 - Port repl-monitor.pl to lib389 CLI
* Ticket 50622 - ds_selinux_enabled may crash on suse
* Ticket 50595 - remove syslog.target requirement
* Ticket 50617 - disable cargo lock
* Issue 50620 - Fix regressions from 50506 (slapi_enry_attr_get_ref)
* Issue 50615 - Log current test name to journald
* Ticket: 50610 memory leak in dbscan
* Bump version to 1.4.2.1
* Ticket 50581 - ns-slapd crashes during ldapi search
* Issue 50604 - Fix UI validation
* ticket 50510 - etime can contain invalid nanosecond value
* Ticket 50593 Investigate URP handling on standalone instance
* Issue 50506 - Fix regression for relication stripattrs
* Issue 50580 - Perl can't be disabled in configure
* Ticket 50584, 49212 - docker healthcheck and configuration
* Issue 50546 - fix more UI issues(part 2)
* Do not use comparision with "is" for empty value
* Issue 50546 - fix more UI issues
* Issue 50586 - lib389 - Fix DSEldif long line processing
* Issue 50173 - Add the validate-syntax task to the dsconf schema
* Issue 50546 - Fix various issues in UI
* Bump version to 1.4.2.0
* Ticket 50576 - Same proc uid/gid maps to rootdn for ldapi sasl
* Ticket 50567, 50568 - strict host check disable and display container version
* Issue 50550 - DS installer debug messages leaking to ipa-server-install
* Issue 50545 - Port fixup-memberuid and add the functionality to CLI and UI
* Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
OBS-URL: https://build.opensuse.org/request/show/733947
OBS-URL: https://build.opensuse.org/package/show/network:ldap/389-ds?expand=0&rev=90
- Fix spec file discrepencies from SLE
- Update to correct license issue in spec file
- Update to simplify rust option selection
- Update to version 1.4.1.6~git0.5ac5a8aad:
* Bump version to 1.4.1.6
* Issue 50355 - SSL version min and max not correctly applied
* Issue 50497 - Port cl-dump.pl tool to Python using lib389
* Issue: 48851 - investigate and port TET matching rules filter tests(Final)
* correction to fix for #50417
* Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
* Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
* Issue 50325 - Add Security tab to UI
* Ticket 49789 - By default, do not manage unhashed password
* Ticket 49421 - Implement password hash upgrade on bind.
* Ticket 49421 - on bind password upgrade proof of concept
* Ticket 50493 - connection_is_free to trylock
* Ticket 50459 - Correct issue with allocation state
* Issue 50499 - Fix audit issues and remove jquery from the whitelist
* Ticket 50459 - c_mutex to use pthread_mutex to allow ns sharing
* Ticket 50484 - Add a release build dockerfile and dscontainer improvements
* Issue 50486 - Update jemalloc to 5.2.0
- Update to version 1.4.1.5~git0.748334143:
* Bump version to 1.4.1.5
* Issue 50431 - Fix regression from coverity fix
* Issue 49239 - Add a new CI test case
* Issue 49997 - Add a new CI test case
* Issue 50177 - Add a new CI test case, also added fixes in lib389
OBS-URL: https://build.opensuse.org/request/show/722519
OBS-URL: https://build.opensuse.org/package/show/network:ldap/389-ds?expand=0&rev=84
- Update to version 1.4.1.3~git0.1f1119d4b:
* Bump version to 1.4.1.3
* Issue 49761 - Fix CI test suite issues
* Issue 50041 - Add the rest UI Plugin tabs - Part 2
* Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
* Issue 50403 - Instance creation fails on 1.3.9 using perl utils and latest lib389
* Ticket 50389 - ns-slapd craches while two threads are polling the same connection
* Issue: 48851 - investigate and port TET matching rules filter tests(scanlimit)
* Issue 50037 - lib389 fails to install in venv under non-root user
* Issue: 50112 - Port ACI test suit from TET to python3(userattr)
* Ticket 50393 - maxlogsperdir accepting negative values
* Issue: 50112 - Port ACI test suit from TET to python3(roledn)
* Issue 49960 - Core schema contains strings instead of numer oids
* Ticket 50396 - Crash in PAM plugin when user does not exist
* Issue 50387 - enable_tls() should label ports with ldap_port_t
* Issue 50390 - Add Managed Entries Plug-in Config Entry schema
* Ticket 50306 - Fix regression with maxbersize
* Issue 50384 - Missing dependency: cracklib-dicts
* Issue 49029 - [RFE] improve internal operations logging
* Issue 49761 - Fix CI test suite issues
* Issue - 50374 dsdim posixgroup create fails with ERROR
* Ticket 50251 - clear text passwords visable in CLI verbose mode logging
* Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
* Issue:48851 - investigate and port TET matching rules filter tests
* Issue 50220 - attr_encryption test suite failing
* Ticket 50370 - CleanAllRUV task crashing during server shutdown
* Ticket 50340 cont - structs for disabled plugins will not be freed
* Fix missing import
* Issue 50164 - Add test for dscreate to basic test suite
* Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
OBS-URL: https://build.opensuse.org/request/show/705516
OBS-URL: https://build.opensuse.org/package/show/network:ldap/389-ds?expand=0&rev=83
- Update to version 1.4.1.2~git0.9a126614a:
* Removes sysconfig from RPM as we no longer create it to detect
instance existance or settings. Older installs will still have
their sysconfig parsed, but new installs should use systemd
environment variables.
* Bump version to 1.4.1.2
* Ticket 50308 - Revise memory leak fix
* Ticket 50308 - Fix memory leaks for repeat binds and replication
* Use PKG_CHECK_MODULES to detect the systemd library
* Use PKG_CHECK_MODULES to detect the kerberos library
* Use pkg-config from the host system to better support cross-compiling
* Use PKG_CHECK_MODULES to detect the libsasl2 library
* configure.ac: Add missing comma to an AC_ARG_ENABLE macro
* configure.ac: Remove unpaired parentheses from two help strings
* m4/doxygen.m4: Fix spelling of Doxygen in a message
* Use PKG_CHECK_MODULES to detect the pcre library
* Use PKG_CHECK_MODULES to detect the cmocka library
* Use PKG_CHECK_MODULES to detect the nss library
* Use PKG_CHECK_MODULES to detect the nspr library
* Use PKG_CHECK_MODULES to detect the event library
* Ticket 49873 - (cont 3rd) cleanup debug log
* Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
* Issue 50292 - Fix Plugin CLI and UI issues
* Issue:50112 - Port ACI test suit from TET to python3(misc and syntax)
* Ticket 50289 - Fix various database UI issues
* Ticket 49463 After cleanALLruv, replication is looping on keep alive DEL
* Ticket 50300 - Fix memory leak in automember plugin
* Ticket 50265: the warning about skew time could last forever
* Ticket 50260 - Invalid cache flushing improvements
* Ticket 49561 - MEP plugin, upon direct op failure, will delete twice the same managed entry
OBS-URL: https://build.opensuse.org/request/show/690489
OBS-URL: https://build.opensuse.org/package/show/network:ldap/389-ds?expand=0&rev=80
- Updates to 389-ds.spec
- Make lib389 a requirement of 389-ds installs
- Disable shell script wrappers that have be replaced by dsctl/dsconf
- Disable perl in spec file build. For replacement tools see:
http://www.port389.org/docs/389ds/FAQ/legacy-command-changes.html
- Remove patches that have been merged by upstream
- Removed: 0001-init_fhs.patch - merged by upstream
- Removed: 0002-use-python2-for-selinux-detection.patch - merged
by upstream
- Removed: drop-caps.patch - merged by upstream
- Commented requires and recommendes in 389-ds.spec
- cyrus-sasl-plain added as a requirement as it is the only plaintext
or start TLS secure method for password auth (LDAPS is always secure)
- cyrus-sasl-gssapi moved to recommends as it is not always required
- cyrus-sasl-digestmd5 moved to recommends, as it is insecure and not
always required
- openldap2-client moved to recommends on lib389 as a supplement to
ldap command line tools that we provide, but not necessary
- python3-selinux and python3-policycoreutils moved to recommends
as they are not required, and only give "nice to have" features
during install of an instance
- Update to version 1.4.1.1~git0.af9bb7206:
* Bump version to 1.4.1.1
* Ticket 50151 - lib389 support cli add/replace/delete on objects
* Issue 50041 - CLI and WebUI - Add memberOf plugin functionality
* Bump version to 1.4.1.0
* Ticket 50125 - perl fix ups for tmpfiles
* Ticket 50164 - Add test for dscreate
* Fix for ticket 50059: If an object is nsds5replica, it must be cn=replica
* Ticket 50169 - lib389 changed hardcoded systemctl path
OBS-URL: https://build.opensuse.org/request/show/670480
OBS-URL: https://build.opensuse.org/package/show/network:ldap/389-ds?expand=0&rev=75
