- Resolves: RHEL-1681 - [RFE] Log buffering for all log types
- Resolves: RHEL-5141 - [RFE] For each request, a ldap client can assign an identifier to be added in the logs
- Resolves: RHEL-38917 - dscreate interactive install shows a traceback when mdb is selected
- Resolves: RHEL-42485 - [RFE] pbkdf2 hardcoded parameters should be turned into configuration options
- Resolves: RHEL-59513 - [RFE] Port logconv.pl to python
- Resolves: RHEL-61253 - Make online import more robust
- Resolves: RHEL-69819 - "Duplicated DN detected" errors when creating indexes or importing entries. [rhel-10.0]
- Resolves: RHEL-70122 - Crash in attrlist_find() when the Account Policy plugin is enabled.
- Resolves: RHEL-74149 - backup/restore broken
- Resolves: RHEL-74154 - If an entry RDN is identical to the suffix, then Entryrdn gets broken during a reindex
- Resolves: RHEL-74159 - Crash during bind when acct policy plugin does not have "alwaysrecordlogin" set
- Resolves: RHEL-74164 - On replica consumer, account policy plugin fails to manage the last login history
- Resolves: RHEL-76020 - IPA LDAP error code T3 when no exceeded time limit from a paged search result [rhel-10]
- Resolves: RHEL-76838 - Unlocked and locked users having same error output
- Resolves: RHEL-76841 - Healthcheck tool should warn admin about creating a substring index on membership attribute
Resolves: RHEL-46801 - unauthenticated user can trigger a DoS by sending a specific extended search request
Resolves: RHEL-40940 - Malformed userPassword hash may cause Denial of Service
Resolves: RHEL-33336 - potential denial of service via specially crafted kerberos AS-REQ request
Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
Issue 3555 - Remove audit-ci from dependencies (#6056)
Issue 6052 - Paged results test sets hostname to `localhost` on test collection
Issue 6051 - Drop unused pytest markers
Issue 6049 - lmdb - changelog is wrongly recreated by reindex task (#6050)
Issue 6047 - Add a check for tagged commits
Issue 6041 - dscreate ds-root - accepts relative path (#6042)
Switch default backend to lmdb and bump version to 3.0 (#6013)
Issue 6032 - Replication broken after backup restore (#6035)
Issue 6037 - Server crash at startup in vlvIndex_delete (#6038)
Issue 6034 - Change replica_id from str to int
Issue 6028 - vlv index keys inconsistencies (#6031)
Issue 5989 - RFE support of inChain Matching Rule (#5990)
Issue 6022 - lmdb inconsistency between vlv index and vlv cache names (#6026)
Issue 6015 - Fix typo remeber (#6014)
Issue 6016 - Pin upload/download artifacts action to v3
Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
Issue 4673 - Update Rust crates
Issue 6004 - idletimeout may be ignored (#6005)
Issue 5954 - Disable Transparent Huge Pages
Issue 5997 - test_inactivty_and_expiration CI testcase is wrong (#5999)
Issue 5993 - Fix several race condition around CI tests (#5996)
Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
Bump openssl from 0.10.55 to 0.10.60 in /src (#5995)
Issue 5980 - Improve instance startup failure handling (#5991)
Issue 5976 - Fix freeipa install regression with lmdb (#5977)
Issue 5984 - Crash when paged result search are abandoned - fix2 (#5987)
Issue 5984 - Crash when paged result search are abandoned (#5985)
Issue 5947 - CI test_vlv_recreation_reindex fails on LMDB (#5979)
Issue 5989 - RFE support of inChain Matching Rule (#5990)
Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
Issue 5954 - Disable Transparent Huge Pages
Issue 5984 - Crash when paged result search are abandoned - fix2 (#5987)
Issue 5984 - Crash when paged result search are abandoned (#5985)
Issue 5971 - CLI - Fix password prompt for repl status (#5972)
Issue 5973 - Fix fedora cop RawHide builds (#5974)
Revert "Issue 5761 - Worker thread dynamic management (#5796)" (#5970)
Issue 5966 - CLI - Custom schema object is removed on a failed edit (#5967)
Issue 5786 - Update permissions for Release workflow
Issue 5960 - Subpackages should have more strict interdependencies
Issue 3555 - UI - Fix audit issue with npm - babel/traverse (#5959)
Issue 4843 - Fix dscreate create-template issue (#5950)
bugfix for --passwd-file not working on latest version (#5934)
Issue 5843 - dsconf / dscreate should be able to handle lmdb parameters (#5943)
Bump postcss from 8.4.24 to 8.4.31 in /src/cockpit/389-console (#5945)
Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
issue 5924 - ASAN server build crash when looping opening/closing connections (#5926)
Issue 1925 - Add a CI test (#5936)
Issue 5732 - Localizing Cockpit's 389ds Plugin using CockpitPoPlugin (#5764)
Issue 1870 - Add a CI test (#5929)
Issue 843 - Add a warning to slapi_valueset_add_value_ext (#5925)
Issue 5761 - Worker thread dynamic management (#5796)
Issue 1802 - Improve ldclt man page (#5928)
Issue 1456 - Add a CI test that verifies there is no issue (#5927)
Issue 1317 - Add a CI test (#5923)
Issue 1081 - CI - Add more tests for overwriting x-origin issue (#5815)
Issue 1115 - Add a CI test (#5913)
Issue 5848 - Fix condition and add a CI test (#5916)
Issue 5848 - Fix condition and add a CI test (#5916)
Issue 5914 - UI - server settings page validation improvements and db index fixes
Issue 5909 - Multi listener hang with 20k connections (#5917)
Issue 5902 - Fix previous commit regression (#5919)
pass instance correctly to ds_is_older (#5903)
Issue 5909 - Multi listener hang with 20k connections (#5910)
Issue 5722 - improve testcase (#5904)
Issue 5203 - outdated version in provided metadata for lib389
Bug Description:
issue 5890 part 2 - Need a tester for testing multiple listening thread feature (#5897)
Issue i5846 - Crash when lmdb import is aborted (#5881)
Issue 5894 - lmdb import error fails with Could not store the entry (#5895)
Issue 5890 - Need a tester for testing multiple listening thread feature (#5891)
Issue 5082 - slugify: ModuleNotFoundError when running test cases
Issue 4551 - Part 2 - Fix build warning of previous PR (#5888)
Issue 5834 - AccountPolicyPlugin erroring for some users (#5866)
Issue 5872 - part 2 - fix is_dbi regression (#5887)
Issue 4758 - Add tests for WebUI
Issue 5848 - dsconf should prevent setting the replicaID for hub and consumer roles (#5849)
Issue 5883 - Remove connection mutex contention risk on autobind (#5886)
Issue 5872 - `dbscan()` in lib389 can return bytes
Issue 5156 - RFE that implement slapi_memberof (#5694)
Issue 5734 - RFE - Exclude pwdFailureTime and ContextCSN (#5735)
Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727)
Issue 4758 - Add tests for WebUI
Issue 5718 - Memory leak in connection table (#5719)
Issue 5705 - Add config parameter to close client conns on failed bind (#5712)
Issue 4758 - Add tests for WebUI
Issue 5643 - Memory leak in entryrdn during delete (#5717)
Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
Issue 5701 - CLI - Fix referral mode setting (#5708)
Bump openssl from 0.10.45 to 0.10.48 in /src (#5709)
Issue 5710 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (#5711)
Issue 5697 - Obsolete nsslapd-ldapimaprootdn attribute (#5698)
Issue 1081 - Stop schema replication from overwriting x-origin
Issue 4812 - Listener thread does not scale with a high num of established connections (#5706)
Issue 4812 - Listener thread does not scale with a high num of established connections (#5681)
Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699)
Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692)
Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691)
Issue 5687 - UI - sensitive information disclosure
Issue 5661 - LMDB hangs while Rebuilding the replication changelog RUV (#5676)
Issue 5554 - Add more tests to security_basic_test suite
Issue 4583 - Update specfile to skip checks of ASAN builds
Issue 4758 - Add tests for WebUI
Issue 3604 - UI - Add support for Subject Alternative Names in CSR
Issue 5600 - buffer overflow when enabling sync repl plugin when dynamic plugins is enabled
Issue 5640 - Update logconv for new logging format
Issue 5162 - CI - fix error message for invalid pem file
Issue 5598 - In 2.x, SRCH throughput drops by 10% because of handling of referral (#5604)
Issue 5671 - covscan - clang warning (#5672)
Issue 5267 - CI - Fix issues with nsslapd-return-original-entrydn
Issue 5666 - CLI - Add timeout parameter for tasks
Issue 5567 - CLI - make ldifgen use the same default ldif name for all options
Issue 5647 - Fix unused variable warning from previous commit (#5670)
Issue 5162 - Lib389 - verify certificate type before adding
Issue 5642 - Build fails against setuptools 67.0.0
Issue 5630 - CLI - need to add logging filter for stdout
Issue 5646 - CLI/UI - do not hardcode password storage schemes
Issue 5640 - Update logconv for new logging format
issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
Issue 5658 - CLI - unable to add attribute with matching rule
Issue 5653 - covscan - fix invalid dereference
Issue 5652 - Libasan crash in replication/cascading_test (#5659)
Issue 5628 - Handle graceful timeout in CI tests (#5657)
Issue 5648 - Covscan - Compiler warnings (#5651)
Issue 5630 - CLI - error messages should goto stderr
Issue 2435 - RFE - Raise IDL Scan Limit to INT_MAX (#5639)
Issue 5632 - CLI - improve error handling with db2ldif
Issue 5517 - Replication conflict CI test sometime fails (#5518)
Issue 5634 - Deprecated warning related to github action workflow code (#5635)
Issue 5637 - Covscan - fix Buffer Overflows (#5638)
Issue 5624 - RFE - UI - export certificates, and import text base64 encoded certificates
Bump tokio from 1.24.1 to 1.25.0 in /src (#5629)
Issue 4577 - Add LMDB pytest github action (#5627)
Issue 4293 - RFE - CLI - add dsrc options for setting user and group subtrees
Remove stale libevent(-devel) dependency
Issue 5578 - dscreate ds-root does not normaile paths (#5613)
Issue 5497 - boolean attributes should be case insensitive
Issue 5012 - Migrate pcre to pcre2 - remove match limit
Issue 5356 - Make Rust non-optional and update default password storage scheme
Issue 5012 - Migrate pcre to pcre2
Issue 5428 - Fix regression with nscpEntryWsi computation
Fix missing 'not' in description (closes#5423) (#5424)
Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
Issue 3903 - fix repl keep alive event interval
Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
Issue 5415 - Hostname when set to localhost causing failures in other tests
Issue 5412 - lib389 - do not set backend name to lowercase
Issue 5407 - sync_repl crashes if enabled while dynamic plugin is enabled (#5411)
Issue 5385 - LMDB - import crash in rdncache_add_elem (#5406)
Issue 5403 - Memory leak in conntection table mulit list (#5404)
Issue 3903 - keep alive update event starts too soon
Issue 5397 - Fix various memory leaks
Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
Issue 3903 - Supplier should do periodic updates
Issue 5377 - Code cleanup: Fix Covscan invalid reference (#5393)
Issue 5394 - configure doesn't check for lmdb and json-c
Issue 5392 - dscreate fails when using alternative ports in the SELinux hi_reserved_port_t label range
Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
Issue 5388 - fix use-after-free and deadcode
Issue 5383 - UI - Various fixes and RFE's for UI
Issue 4656 - Remove problematic language from source code
Issue 5380 - Separate cleanAllRUV code into new file
Issue 5322 - optime & wtime on rejected connections is not properly set
Issue 5335 - RFE - Add Security Audit Log
Issue 5375 - CI - disable TLS hostname checking
Issue 981 - Managed Entries betxnpreoperation - transaction not aborted on managed entry failure (#5369)
Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
Issue 5371 - Update npm and cargo packages
Issue 3069 - Support ECDSA private keys for TLS (#5365)
Issue 5290 - Importing certificate chain files via "import-server-key-cert" no longer works (#5293)
Issue 5221 - fix covscan (#5359)
Issue 5294 - Report Portal 5 is not processing an XML file with (#5358)
Issue 5353 - CLI - dsconf backend export breaks with multiple backends
Issue 5346 - New connection table fails with ASAN failures (#5350)
Issue 5345 - BUG - openldap migration fails when ppolicy is active (#5347)
Issue 5323 - BUG - improve skipping of monitor db (#5340)
Issue 5329 - Improve replication extended op logging
Issue 5343 - Various improvements to winsync
Issue 4932 - CLI - add parser aliases to long arg names
Issue 5332 - BUG - normalise filter as intended
Issue 5327 - Validate test metadata
Issue 4812 - Scalability with high number of connections (#5090)
Issue 4348 - Add tests for dsidm
Issue 5333 - 389-ds-base fails to build with Python 3.11
Issue 5332 - BUG - normalise filter as intended
Issue 5327 - Validate test metadata
Issue 4348 - Add tests for dsidm
Bump crossbeam-utils from 0.8.6 to 0.8.8 in /src
Issue 5333 - 389-ds-base fails to build with Python 3.11
During mass rebuilds NVR is bumped by rpmdev-bumpspec. But it can't
handle complex Release: fields such as ours, that has %{prerel} and
%{relprefix} macros. It adds .1 after the %{dist} macro instead of
increasing the release number.
The issue for rpmdev-bumpspec is unsolved since 2012:
https://pagure.io/rpmdevtools/issue/18
These macros are unused by us and only cause issues when NVR is bumped.
So let's remove them.
Issue 5230 - Race condition in RHDS disk monitoring functions
Issue 4299 - UI - Add CoS funtionality (#5196)
Issue 5225 - UI - impossible to manually set entry cache
Issue 5186 - UI - Fix SASL Mapping regex test feature
Issue 5221 - User with expired password can still login with full privledges
Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
Issue 5200 - dscontainer should use environment variables with DS_ prefix
Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
Issue 5051 - RFE - ADSync flatten tree (#5192)
Issue 5188 - UI - LDAP editor - add entry and group types
Issue 5184 - memberOf does not work correctly with multiple include scopes
Issue 5162 - BUG - error on importing chain files (#5164)
Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)
Issue 5122 - dsconf instance backend suffix set doesn't accept backend name (#5178)
Issue 5032 - Fix configure option in specfile (#5174)
Issue 5176 - CI rewriter fails when libslapd.so.0 does not exist (#5177)
Issue 5160 - BUG - x- prefix in descr-oid can confuse oid parser (#5161)
Issue 5137 - RFE - improve sssd conf output (#5138)
Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
Issue 5145 - Fix covscan errors
Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
Issue 4299 - UI - Add Role funtionality (#5163)
Issue 5050 - bdb bulk op fails if fs page size > 8K (#5150)
Issue 5149 - Build failure on EL8 - undefined reference to `twalk_r'
Issue 5142 - CLI - dsctl dbgen is broken
Issue 4678 - Added test cases
Issue 5230 - Race condition in RHDS disk monitoring functions
Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
Issue 4970 - Add support for recursively deleting subentries
Issue 4299 - UI - Add CoS funtionality (#5196)
Issue 5225 - UI - impossible to manually set entry cache
Issue 5186 - UI - Fix SASL Mapping regex test feature
Issue 5221 - User with expired password can still login with full privledges
Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
Issue 5214 - CI Test tests/suites/replication/virtual_attribute_replication_test.py (#5215)
Issue 5197 - Build break in lib389 with INSTALL_PREFIX (#5198)
Issue 5200 - dscontainer should use environment variables with DS_ prefix
Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
Issue 5051 - RFE - ADSync flatten tree (#5192)
Issue 5188 - UI - LDAP editor - add entry and group types
Issue 5184 - memberOf does not work correctly with multiple include scopes
Issue 5162 - BUG - error on importing chain files (#5164)
Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)
Issue 5122 - dsconf instance backend suffix set doesn't accept backend name (#5178)
Issue 5032 - Fix configure option in specfile (#5174)
Issue 5176 - CI rewriter fails when libslapd.so.0 does not exist (#5177)
Issue 5160 - BUG - x- prefix in descr-oid can confuse oid parser (#5161)
Issue 5137 - RFE - improve sssd conf output (#5138)
Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
Issue 5145 - Fix covscan errors
Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
Issue 4299 - UI - Add Role funtionality (#5163)
Issue 5050 - bdb bulk op fails if fs page size > 8K (#5150)
Issue 5149 - Build failure on EL8 - undefined reference to `twalk_r'
Issue 5142 - CLI - dsctl dbgen is broken
Issue 4678 - Added test cases
