Bump version to 2.2.1

Issue 5323 - BUG - Fix issue in mdb tests with monitor (#5326)
Issue 5170 - BUG - incorrect behaviour of filter test (#5315)
Issue 5324 - plugin acceptance test needs hardening
Issue 5319 - dsctl_tls_test.py fails with openssl-3.x
Issue 5323 - BUG - migrating database for monitoring interface lead to crash (#5321)
Issue 5304 - Need a compatibility option about sub suffix handling (#5310)
Issue 5313 - dbgen test uses deprecated -h HOST and -p PORT options for ldapmodify
Issue 5311 - Missing Requires for acl in the spec file
Issue 5305 - OpenLDAP version autodetection doesn't work
Issue 5307 - VERSION_PREREL is not set correctly in CI builds
Issue 5302 - Release tarballs don't contain cockpit webapp
Issue 5170 - RFE - improve filter logging to assist debugging (#5301)
Issue 5299 - jemalloc 5.3 released
Issue 5175 - Remove stale zlib-devel dependency declaration (#5173)
Issue 5294 - Report Portal 5 is not processing test results XML file
Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
Issue  379 - RFE - Compress rotated logs (fix linker)
Issue  379 - RFE - Compress rotated logs
Issue 5281 - HIGH - basic test does not run
Issue 5284 - Replication broken after password change (#5286)
Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
Issue 5170 - RFE - Filter optimiser (#5171)
Issue 5276 - CLI - improve task handling
Issue 5126 - Memory leak in slapi_ldap_get_lderrno (#5153)
Issue 3 - ansible-ds - Prefix handling fix (#5275)
Issue 5273 - CLI - add arg completer for instance name
Issue 2893 - CLI - dscreate - add options for setting up replication
Issue 4866 - CLI - when enabling replication set changelog trimming by default
Issue 5241 - UI - Add account locking missing functionality (#5251)
Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
Issue 4904 - Fix various small issues
lib389 prerequisite for ansible-ds (#5253)
Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
Issue 5210 - Python undefined names in lib389
Issue 5065 - Crash in suite plugins - test_dna_max_value (#5108)
Issue 5247 - BUG - Missing attributes in samba schema (#5248)
Issue 5242- Craft message may crash the server (#5243)
Issue 4775 -plugin entryuuid failing (#5229)
Issue 5239 - Nightly copr builds are broken
Issue 5237 - audit-ci: Cannot convert undefined or null to object
Issue 5234 - UI - rename Users and Groups tab
Issue 5227 - UI - No way to move back to Get Started step (#5233)
Issue 5217 - Simplify instance creation and administration by non root user (#5224)

.gitignore

@@ -213,3 +213,5 @@
 /389-ds-base-2.1.0.tar.bz2
 /389-ds-base-2.2.0.tar.bz2
 /389-ds-base-2.1.1.tar.bz2
+/jemalloc-5.3.0.tar.bz2
+/389-ds-base-2.2.1.tar.bz2

389-ds-base.spec

@@ -17,7 +17,7 @@ ExcludeArch: i686
 
 %if %{bundle_jemalloc}
 %global jemalloc_name jemalloc
-%global jemalloc_ver 5.2.1
+%global jemalloc_ver 5.3.0
 %global __provides_exclude ^libjemalloc\\.so.*$
 %endif
 
@@ -46,7 +46,7 @@ ExcludeArch: i686
 
 Summary:          389 Directory Server (base)
 Name:             389-ds-base
-Version:          2.1.1
+Version:          2.2.1
 Release:          1%{?dist}
 License:          GPLv3+ and (ASL 2.0 or MIT) and MIT and (Unlicense or MIT) and MPLv2.0 and BSD and ASL 2.0 and (ASL 2.0 or Boost)
 URL:              https://www.port389.org
@@ -145,8 +145,8 @@ Provides:  bundled(crate(zeroize)) = 1.5.4
 Provides:  bundled(crate(zeroize_derive)) = 1.3.2
 ##### Bundled cargo crates list - END #####
 
-BuildRequires:    nspr-devel
-BuildRequires:    nss-devel >= 3.34
+BuildRequires:    nspr-devel >= 4.32
+BuildRequires:    nss-devel >= 3.67.0-7
 BuildRequires:    openldap-devel
 BuildRequires:    lmdb-devel
 BuildRequires:    libdb-devel
@@ -227,11 +227,13 @@ Requires:         openldap-clients
 Requires:         /usr/bin/c_rehash
 Requires:         python%{python3_pkgversion}-ldap
 Requires:         acl
+Requires:         zlib
 
 # this is needed to setup SSL if you are not using the
 # administration server package
 Requires:         nss-tools
-Requires:         nss >= 3.34
+Requires:         nss >= 3.67.0-7
+Requires:         nspr >= 4.32
 
 # these are not found by the auto-dependency method
 # they are required to support the mandatory LDAP SASL mechs
@@ -714,169 +716,52 @@ exit 0
 %endif
 
 %changelog
-* Wed Mar 23 2022 Mark Reynolds <mreynolds@redhat.com> - 2.1.1-1
-- Bump version to 2.1.1
-- Issue 5230 - Race condition in RHDS disk monitoring functions
-- Issue 4299 - UI - Add CoS funtionality (#5196)
-- Issue 5225 - UI - impossible to manually set entry cache
-- Issue 5186 - UI - Fix SASL Mapping regex test feature
-- Issue 5221 - User with expired password can still login with full privledges
-- Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
-- Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
-- Issue 5200 - dscontainer should use environment variables with DS_ prefix
-- Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
-- Issue 5051 - RFE - ADSync flatten tree (#5192)
-- Issue 5188 - UI - LDAP editor - add entry and group types
-- Issue 5184 - memberOf does not work correctly with multiple include scopes
-- Issue 5162 - BUG - error on importing chain files (#5164)
-- Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
-- Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)
-- Issue 5122 - dsconf instance backend suffix set doesn't accept backend name (#5178)
-- Issue 5032 - Fix configure option in specfile (#5174)
-- Issue 5176 - CI rewriter fails when libslapd.so.0 does not exist (#5177)
-- Issue 5160 - BUG - x- prefix in descr-oid can confuse oid parser (#5161)
-- Issue 5137 - RFE - improve sssd conf output (#5138)
-- Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
-- Issue 5145 - Fix covscan errors
-- Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
-- Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
-- Issue 4299 - UI - Add Role funtionality (#5163)
-- Issue 5050 - bdb bulk op fails if fs page size > 8K (#5150)
-- Issue 5149 - Build failure on EL8 - undefined reference to `twalk_r'
-- Issue 5142 - CLI - dsctl dbgen is broken
-- Issue 4678 - Added test cases
-
-* Wed Feb 2 2022 Mark Reynolds <mreynolds@redhat.com> - 2.1.0-1
-- Bump version to 2.1.0-1
-- Issue 4299 - UI - fix minor issues with ldap editor (table view)
-- Issue 4299 - UI - fix minor issues with ldap editor
-- Issue 5103 - UI - Add support for TPR to web console (#5111)
-- Issue 2790 - RFE - set db home directory to /dev/shm by default
-- Issue 5127 - ds_selinux_restorecon.sh: always exit 0
-- Issue 5135 - UI - Disk monitoring threshold does update properly
-- Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
-- Issue 5132 - Update Rust crate lru to fix CVE
-- Issue 3555 - UI - fix audit issue with npm nanoid
-- Issue 4299 - UI - Add ACI editing features
-- Issue 5127 - run restorecon on /dev/shm at server startup
-- Issue 5124 - dscontainer fails to create an instance
-- Issue 5098 - Multiple issues around replication and CI test test_online_reinit_may_hang (#5109)
-- Issue 4939 - Redesign LMDB import (#5071)
-- Issue 5113 - Increase timestamp precision for development builds
-- Issue 5115 - AttributeError: type object 'build_manpages' has no attribute 'build_manpages'
-- Issue 5117 - Revert skipif line from CI test (#5118)
-- Issue 5102 - BUG - container may fail with bare uid/gid (#5110)
-- Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)
-- Issue 5105 - During a bind, if the target entry is not reachable the operation may complete without sending result (#5107)
-- Issue 5074 - retro changelog cli updates (#5075)
-- Issue 3584 - Add is_fips check to password tests (#5100)
-- Issue 5095 - sync-repl with openldap may send truncated syncUUID (#5099)
-- Issue 5032 - Fix OpenLDAP version check (#5091)
-- Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
-- Issue 2929 - Fix github warnings
-- Issue 5053 - Improve GitHub Actions debugging
-- Issue 5088 - dsctl dblib broken because of a merge issue (#5089)
-- Issue 5079 - BUG - multiple ways to specific primary (#5087)
-- Issue 5085 - Race condition about snmp collator at startup (#5086)
-- Issue 5082 - slugify: ModuleNotFoundError when running test cases
-- Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail (#5003)
-- Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
-- Issue 5049 - ns-slapd crash in replication/acceptance_test.py (#5063)
-- Issue 4890 - Need cli to easely get simple performance statistics (#4891)
-- Issue 5011 - test_replica_backup_and_restore random failure (#5066)
-- Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
-- Issue 5018 - RFE - openSUSE systemd hardening (#5019)
-- Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
-- Issue 5055 - Improve core dump detection and collection in PR CI
-- Issue 4994 - Revert retrocl dependency workaround (#4995)
-- Issue 5046 - BUG - update concread (#5047)
-- Issue 5043 - BUG - Result must be used compiler warning (#5045)
-- Issue 4312 - performance search rate: contention on global monitoring counters (#4940)
-- Issue 5034 - is_dbi contains an invalid debug message that trigger failure in import_tests (#5035)
-- Issue 5029 - Unbind generates incorrent closed error message (#5030)
-- Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
-- Issue 4931 - RFE: dsidm - add creation of service accounts
-- Issue 5024 - BUG - windows ro replica sigsegv (#5027)
-- Issue 4758 - Add tests for WebUI
-- Issue 5032 - OpenLDAP is not shipped with non-threaded version of libldap (#5033)
-- Issue 5038 - BUG - dsconf tls may fail due to incorrect cert path (#5039)
-- Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
-- Issue 5011 - test_replica_backup_and_restore random failure (#5028)
-- Issue 5025 - RFE - remove useless logging (#5026)
-- Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
-- Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
-- Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import (#5017)
-- Issue 5014 - UI - Add group creation to LDAP editor
-- Issue 5006 - UI - LDAP editor tree not being properly updated
-- Issue 4923 - issue about LMDB dbi versus txn handling (#4924)
-- Issue 5001 - Update CI test for new availableSASLMechs attribute
-- Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
-- Issue 5001 - Fix next round of UI bugs:
-- Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
-- Issue 4734 - ldif2db - import of entry with no parent doesnt generate a warning
-- Issue 4778 - [RFE] Schedule execution of "compactdb" at specific date/time
-- Issue 4978 - use more portable python command for checking containers
-- Issue 4990 - CI tests: improve robustness of fourwaymmr (#4991)
-- Issue 4992 - BUG - slapd.socket container fix (#4993)
-- Issue 4984 - BUG - pid file handling (#4986)
-- Issue 4460 - python3-lib389 ignore the configuration parameters from … (#4906)
-- Issue 4982 - BUG - missing inttypes.h (#4983)
-- Issue 4758 - Add tests for WebUI
-- Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
-- Issue 4096 - Missing perl dependencies for logconv.pl
-- Issue 4758 - Add tests for WebUI
-- Issue 4978 - make installer robust
-- Issue 4898 - Implement bdb to lmdb CLI migration tools (#4952)
-- Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
-- Issue 4973 - update snmp to use /run/dirsrv for PID file
-- Issue 4973 - installer changes permissions on /run
-- Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
-- Issue 4962 - Fix various UI bugs - Plugins (#4969)
-- Issue 4092 - systemd-tmpfiles warnings
-- Issue 4956 - Automember allows invalid regex, and does not log proper error
-- Issue 4731 - Promoting/demoting a replica can crash the server
-- Issue 4962 - Fix various UI bugs part 1
-- Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
-- Issue 4943 - Fix csn generator to limit time skew drift (#4946)
-- Issue 4954 - pytest is killed by OOM killer when the whole test suite is executed
-- Issue 2790 - Set db home directory by default
-- Issue 4299 - Merge LDAP editor code into Cockpit UI
-- Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
-- Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
-- Issue 4896 - improve CI tests report in case of SERVER_DOWN exception (#4897)
-- Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
-- Issue 4847 - BUG - potential deadlock in replica (#4936)
-- Issue 4513 - fix ACI CI tests involving ip/hostname rules
-- Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
-- Issue 4916 - Memory leak in ldap-agent
-- Issue 4656 DS Remove problematic language from CLI tools and UI (#4893)
-- Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
-- Issue 4912 - Account Policy plugin does not set the config entry DN
-- Issue 4863 - typoes in logconv.pl
-- Issue 4796 - Add support for nsslapd-state to CLI & UI
-- Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
-- Issue 4914 - BUG - resolve duplicate stderr with clang (#4915)
-- Issue 4912 - dsidm command crashing when account policy plugin is enabled
-- Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
-- Issue 4577 - Add GitHub actions
-- Issue 4901 - Add COPR integration
-- Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
-- Issue 4889 - bdb lock deadlock while reindex/import vlv index (#4892)
-- Issue 4773 - Extend CI tests for DNA interval assignment
-- Issue 4887 - UI - fix minor regression from camelCase fixup
-- Issue 4887 - UI - Update webpack.config.js and package.json
-- Issue 4725 [RFE] DS - Update the password policy to support Temporary Password Rules (#4853)
-- Issue 4149 - UI - Migrate the remaining components to PF4
-- Issue 4169 - Migrate Replication & Schema tabs to PF4
-- Issue 4875 - CLI - Add some verbosity to installer
-- Issue 4884 - server crashes when dnaInterval attribute is set to zero
-- Issue 4880: Revert removed_config_49298_test.py wrongly modified by issue 4699 (#4881)
-- Issue 4699 - backend redesign phase 4 - db-mdb plugin implementation (#4716)
-- Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
-- Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
-- Issue 4775 - Add entryuuid CLI and Fixup (#4776)
-- Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
-- Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
-- Issue 4096 - Missing perl dependencies for logconv.pl
-- Issue 4736 - lib389 - fix regression in certutil error checking
+* Fri Jun 3 2022 Mark Reynolds <mreynolds@redhat.com> - 2.2.1-1
+- Bump version to 2.2.1
+- Issue 5323 - BUG - Fix issue in mdb tests with monitor (#5326)
+- Issue 5170 - BUG - incorrect behaviour of filter test (#5315)
+- Issue 5324 - plugin acceptance test needs hardening
+- Issue 5319 - dsctl_tls_test.py fails with openssl-3.x
+- Issue 5323 - BUG - migrating database for monitoring interface lead to crash (#5321)
+- Issue 5304 - Need a compatibility option about sub suffix handling (#5310)
+- Issue 5313 - dbgen test uses deprecated -h HOST and -p PORT options for ldapmodify
+- Issue 5311 - Missing Requires for acl in the spec file
+- Issue 5305 - OpenLDAP version autodetection doesn't work
+- Issue 5307 - VERSION_PREREL is not set correctly in CI builds
+- Issue 5302 - Release tarballs don't contain cockpit webapp
+- Issue 5170 - RFE - improve filter logging to assist debugging (#5301)
+- Issue 5299 - jemalloc 5.3 released
+- Issue 5175 - Remove stale zlib-devel dependency declaration (#5173)
+- Issue 5294 - Report Portal 5 is not processing test results XML file
+- Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
+- Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
+- Issue  379 - RFE - Compress rotated logs (fix linker)
+- Issue  379 - RFE - Compress rotated logs
+- Issue 5281 - HIGH - basic test does not run
+- Issue 5284 - Replication broken after password change (#5286)
+- Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
+- Issue 5170 - RFE - Filter optimiser (#5171)
+- Issue 5276 - CLI - improve task handling
+- Issue 5126 - Memory leak in slapi_ldap_get_lderrno (#5153)
+- Issue 3 - ansible-ds - Prefix handling fix (#5275)
+- Issue 5273 - CLI - add arg completer for instance name
+- Issue 2893 - CLI - dscreate - add options for setting up replication
+- Issue 4866 - CLI - when enabling replication set changelog trimming by default
+- Issue 5241 - UI - Add account locking missing functionality (#5251)
+- Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
+- Issue 4904 - Fix various small issues
+- lib389 prerequisite for ansible-ds (#5253)
+- Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
+- Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
+- Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
+- Issue 5210 - Python undefined names in lib389
+- Issue 5065 - Crash in suite plugins - test_dna_max_value (#5108)
+- Issue 5247 - BUG - Missing attributes in samba schema (#5248)
+- Issue 5242- Craft message may crash the server (#5243)
+- Issue 4775 -plugin entryuuid failing (#5229)
+- Issue 5239 - Nightly copr builds are broken
+- Issue 5237 - audit-ci: Cannot convert undefined or null to object
+- Issue 5234 - UI - rename Users and Groups tab
+- Issue 5227 - UI - No way to move back to Get Started step (#5233)
+- Issue 5217 - Simplify instance creation and administration by non root user (#5224)
 

sources

@@ -1,2 +1,2 @@
-SHA512 (389-ds-base-2.1.1.tar.bz2) = 38feb135847ef409e03642433a84aea84b65f7c0d55cae35e71ff3c541e2c33bb5c1b207096438c7578db7ec98ce8b3fa3a0282d3ca0637ad9e593bc324fb78c
-SHA512 (jemalloc-5.2.1.tar.bz2) = 0bbb77564d767cef0c6fe1b97b705d368ddb360d55596945aea8c3ba5889fbce10479d85ad492c91d987caacdbbdccc706aa3688e321460069f00c05814fae02
+SHA512 (jemalloc-5.3.0.tar.bz2) = 22907bb052096e2caffb6e4e23548aecc5cc9283dce476896a2b1127eee64170e3562fa2e7db9571298814a7a2c7df6e8d1fbe152bd3f3b0c1abec22a2de34b1
+SHA512 (389-ds-base-2.2.1.tar.bz2) = 9408cf689b874e862f81c8e1fdd75788fbc5f9a3f5b1f9b0327248448f0f4115d03d0c0f6ce03ef3e12dde8f982641440d61e0420f5e359af2bd53ec1d36dbc9