Added the new systemd macros
https://fedorahosted.org/389/ticket/431
Reviewed by: richm(Thanks!)
(cherry picked from commit 81c22d34f83c294f67adbafd1af142bea0b13a69)
Ticket #173 ds-logpipe.py script's man page and script help should be updated for -t option.
Ticket #196 RFE: Interpret IPV6 addresses for ACIs, replication, and chaining
Ticket #218 RFE - Make RIP working with Replicated Entries
Ticket #328 make sure all internal search filters are properly escaped
Ticket #329 389-admin build fails on F-18 with new apache
Ticket #344 deadlock in replica_write_ruv
Ticket #351 use betxn plugins by default
Ticket #352 make cos, roles, views betxn aware
Ticket #356 logconv.pl - RFE - track bind info
Ticket #365 Audit log - clear text password in user changes
Ticket #370 Opening merge qualifier CoS entry using RHDS console changes the entry.
Ticket #372 Setting nsslapd-listenhost or nsslapd-securelistenhost breaks ACI processing
Ticket #386 Overconsumption of memory with large cachememsize and heavy use of ldapmodify
Ticket #402 unhashedTicket #userTicket #password in entry extension
Ticket #408 Create a normalized dn cache
Ticket #453 db2index with -tattrname:type,type fails
Ticket #461 fix build problem with mozldap c sdk
Ticket #462 add test for include file mntent.h
Ticket #463 different parameters of getmntent in Solaris
Trac Ticket #470 - 389 prevents from adding a posixaccount with userpassword after schema reload
Ticket 477 - CLEANALLRUV if there are only winsync agmts task will hang
Ticket 457 - dirsrv init script returns 0 even when few or all instances fail to start
Ticket 473 - change VERSION.sh to have console version be major.minor
Ticket 475 - Root DN Access Control - improve value checking for config
Trac Ticket #466 - entry_apply_mod - ADD: Failed to set unhashed#user#password to extension
Ticket 474 - Root DN Access Control - days allowed not working correctly
Ticket 467 - CLEANALLRUV abort task should be able to ignore down replicas
0b79915 fix compiler warnings in ticket 374 code
Ticket 452 - automember rebuild task adds users to groups that do not match the configuration scope
Ticket 450 - CLEANALLRUV task gets stuck on winsync replication agreement
Ticket 386 - large memory growth with ldapmodify(heap fragmentation)
this patch doesn't fix the bug - it allows us to experiment with
different values of mxfast
Ticket #374 - consumer can go into total update mode for no reason
1) plugin config ldif must contain pluginid, etc. during upgrade or it
will fail due to schema errors
2) posix winsync should have a lower precedence (25) than the default (50)
so that it will be run first
3) posix winsync should support the Winsync API v3 - the v2 functions are
just stubs for now - but the precedence cb is active
8e5087a Coverity defects - 13089: Dereference after null check ldbm_back_delete
- Trac Ticket #437 - variable dn should not be used in ldbm_back_delete
- ba1f5b2 fix coverity resource leak in windows_plugin_add
- e3e81db Simplify program flow: change while loops to for
- a0d5dc0 Fix logic errors: del_mod should be latched (might not be last mod), and avoid skipping add-mods (int value 0)
- 0808f7e Simplify program flow: make adduids/moduids/deluids action blocks all similar
- 77eb760 Simplify program flow: eliminate unnecessary continue
- c9e9db7 Memory leaks: unmatched slapi_attr_get_valueset and slapi_value_new
- a4ca0cc Change "return"s in modGroupMembership to "break"s to avoid leaking
- d49035c Factorize into new isPosixGroup function
- 3b61c03 coverity - posix winsync mem leaks, null check, deadcode, null ref, use after free
- 33ce2a9 fix mem leaks with parent dn log message, setting winsync windows domain
- Ticket #440 - periodic dirsync timed event causes server to loop repeatedly
- Ticket #355 - winsync should not delete entry that appears to be out of scope
- Ticket 436 - nsds5ReplicaEnabled can be set with any invalid values.
- 487932d coverity - mbo dead code - winsync leaks, deadcode, null check, test code
- 2734a71 CLEANALLRUV coverity fixes
- Ticket #426 - support posix schema for user and group sync
- Ticket #430 - server to server ssl client auth broken with latest openldap
Ticket 429 - added nsslapd-readonly to DS schema
Ticket 403 - fix CLEANALLRUV regression from last commit
Trac Ticket #346 - Slow ldapmodify operation time for large quantities of multi-valued attribute values
Ticket #425 - support multiple winsync plugins
Ticket 403 - cleanallruv coverity fixes
Ticket 407 - memory leak in dna plugin
Ticket 403 - CLEANALLRUV feature
Ticket 413 - "Server is unwilling to perform" when running ldapmodify on nsds5ReplicaStripAttrs
3168f04 Coverity defects
5ff0a02 COVERITY FIXES
Ticket #388 - Improve replication agreement status messages
0760116 Update the slapi-plugin documentation on new slapi functions, and added a slapi function for checking on shutdowns
Ticket #369 - restore of replica ldif file on second master after deleting two records shows only 1 deletion
Ticket #409 - Report during startup if nsslapd-cachememsize is too small
Ticket #412 - memberof performance enhancement
12813: Uninitialized pointer read string_values2keys
Ticket #346 - Slow ldapmodify operation time for large quantities of multi-valued attribute values
Ticket #346 - Slow ldapmodify operation time for large quantities of multi-valued attribute values
Ticket #410 - Referential integrity plug-in does not work when update interval is not zero
Ticket #406 - Impossible to rename entry (modrdn) with Attribute Uniqueness plugin enabled
Ticket #405 - referint modrdn not working if case is different
Ticket 399 - slapi_ldap_bind() doesn't check bind results
Ticket #378 - audit log does not log unhashed password: enabled, by default.
Ticket #378 - unhashed#user#password visible after changing password
Ticket #365 - passwords in clear text in the audit log
Ticket #387 - managed entry sometimes doesn't delete the managed entry
5903815 improve txn test index handling
Ticket #360 - ldapmodify returns Operations error - fix delete caching
bcfa9e3 Coverity Fix
Trac Ticket #335 - transaction retries need to be cache aware
Ticket #389 - ADD operations not in audit log
44cdc84 fix coverity issues with uninit vals, no return checking
1b4b9d5 Ticket 368 - Make the cleanAllRUV task one step
8f17da5 Ticket #110 - RFE limiting root DN by host, IP, time of day, day of week
NRUV
Ticket #360 - ldapmodify returns Operations error
Ticket #321 - krbExtraData is being null modified and replicated on each ssh login
Trac Ticket #359 - Database RUV could mismatch the one in changelog under the stress
Ticket #361: Bad DNs in ACIs can segfault ns-slapd
Trac Ticket #338 - letters in object's cn get converted to lowercase when renaming object
Ticket #337 - Improve CLEANRUV task
(cherry picked from commit 21635dcd44f96846bb8158963508374f489a355c)
Ticket #351 - use betxn plugins by default
revert - make no plugins betxn by default - too great a risk
for deadlocks until we can test this better
Ticket #348 - crash in ldap_initialize with multiple threads
fixes PR_Init problem in ldclt
- f227f11 Suppress alert on unavailable port with forced setup
- Ticket #353 - coverity 12625-12629 - leaks, dead code, unchecked return
- Ticket #351 - use betxn plugins by default
- Trac Ticket #345 - db deadlock return should not log error
- Ticket #348 - crash in ldap_initialize with multiple threads
- Ticket #214 - Adding Replication agreement should complain if required nsds5ReplicaCredentials not supplied
- Ticket #207 - [RFE] enable attribute that tracks when a password was last set
- Ticket #216 - RFE - Disable replication agreements
- Ticket #337 - RFE - Improve CLEANRUV functionality
- Ticket #326 - MemberOf plugin should work on all backends
- Trac Ticket #19 - Convert entryUSN plugin to transaction aware type
- Ticket #347 - IPA dirsvr seg-fault during system longevity test
- Trac Ticket #310 - Avoid calling escape_string() for logged DNs
- Trac Ticket #338 - letters in object's cn get converted to lowercase when renaming object
- Ticket #183 - passwordMaxFailure should lockout password one sooner
- Trac Ticket #335 - transaction retries need to be cache aware
- Ticket #336 - [abrt] 389-ds-base-1.2.10.4-2.fc16: index_range_read_ext: Process /usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV)
- Ticket #325 - logconv.pl : use of getopts to parse command line options
- Ticket #336 - [abrt] 389-ds-base-1.2.10.4-2.fc16: index_range_read_ext: Process /usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV)
- 554e29d Coverity Fixes
- Trac Ticket #46 - (additional 2) setup-ds-admin.pl does not like ipv6 only hostnames
- Ticket #183 - passwordMaxFailure should lockout password one sooner - and should be configurable to avoid regressions
- Ticket #315 - small fix to libglobs
- Ticket #315 - ns-slapd exits/crashes if /var fills up
- Ticket #20 - Allow automember to work on entries that have already been added
- Trac Ticket #45 - Fine Grained Password policy: if passwordHistory is on, deleting the password fails.
453eb97 schema def must have DESC '' - close paren must be preceded by space
Trac Ticket #46 - (additional) setup-ds-admin.pl does not like ipv6 only hostnames
Ticket #331 - transaction errors with db 4.3 and db 4.2
Ticket #261 - Add Solaris i386
Ticket #316 and Ticket #70 - add post add/mod and AD add callback hooks
Ticket #324 - Sync with group attribute containing () fails
Ticket #319 - ldap-agent crashes on start with signal SIGSEGV
77cacd9 coverity 12606 Logically dead code
Trac Ticket #303 - make DNA range requests work with transactions
Ticket #320 - allow most plugins to be betxn plugins
Ticket #24 - Add nsTLS1 to the DS schema
Ticket #271 - Slow shutdown when you have 100+ replication agreements
TIcket #285 - compilation fixes for '--format-security'
Ticket 211 - Avoid preop range requests non-DNA operations
Ticket #271 - replication code cleanup
Ticket 317 - RHDS fractional replication with excluded password policy attributes leads to wrong error messages.
Ticket #308 - Automembership plugin fails if data and config area mixed in the plugin configuration
Ticket #292 - logconv.pl reporting unindexed search with different search base than shown in access logs
6f8680a coverity 12563 Read from pointer after free (fix 2)
e6a9b22 coverity 12563 Read from pointer after free
245d494 Config changes fail because of unknown attribute "internalModifiersname"
Ticket #191 - Implement SO_KEEPALIVE in network calls
Ticket #289 - allow betxn plugin config changes
93adf5f destroy the entry cache and dn cache in the dse post op delete callback
e2532d8 init txn thread private data for all database modes
Ticket #291 - cannot use & in a sasl map search filter
6bf6e79 Schema Reload crash fix
60b2d12 Fixing compiler warnings
Trac Ticket #260 - 389 DS does not support multiple paging controls on a single connection
Ticket #302 - use thread local storage for internalModifiersName & internalCreatorsName
fdcc256 Minor bug fix introcuded by commit 69c9f3bf7dd9fe2cadd5eae0ab72ce218b78820e
Ticket #306 - void function cannot return value
ticket 181 - Allow PAM passthru plug-in to have multiple config entries
ticket 211 - Use of uninitialized variables in ldbm_back_modify()
Ticket #74 - Add schema for DNA plugin (RFE)
Ticket #301 - implement transaction support using thread local storage
Ticket #211 - dnaNextValue gets incremented even if the user addition fails
144af59 coverity uninit var and resource leak
Trac Ticket #34 - remove-ds.pl does not remove everything
Trac Ticket #169 - allow 389 to use db5
bc78101 fix compiler warning in acct policy plugin
Trac Ticket #84 - 389 Directory Server Unnecessary Checkpoints
Trac Ticket #27 - SASL/PLAIN binds do not work
Ticket #129 - Should only update modifyTimestamp/modifiersName on MODIFYops
Ticket #17 - new replication optimizations
https://fedorahosted.org/389/ticket/46https://fedorahosted.org/389/ticket/66
Fix Description:
Adding IPv6 friendly perl packages to Requires list:
Requires: perl-Socket
or
Requires: perl-Socket6
depending upon the perl Socket module availability.
Adding gcc-c++ to the build dependency
BuildRequires: gcc-c++
changelog:
- Ticket #46 - (revised) setup-ds-admin.pl does not like ipv6 only hostnames
- Ticket #66 - 389-ds-base spec file does not have a BuildRequires on gcc-c++
b05139b memleak in normalize_mods2bvals
c0eea24 memleak in mep_parse_config_entry
90bc9eb handle null smods
Ticket #305 - Certain CMP operations hang or cause ns-slapd to crash
Ticket #306 - void function cannot return value
ticket 304 - Fix kernel version checking in dsktune
Trac Ticket #298 - crash when replicating orphaned tombstone entry
Ticket #281 - TLS not working with latest openldap
Trac Ticket #290 - server hangs during shutdown if betxn pre/post op fails
Trac Ticket #26 - Please support setting defaultNamingContext in the rootdse
Ticket #281 - TLS not working with latest openldap
Ticket #280 - extensible binary filters do not work
Ticket #279 - filter normalization does not use matching rules
Trac Ticket #275 - Invalid read reported by valgrind
Ticket #277 - cannot set repl referrals or state
Ticket #278 - Schema replication update failed: Invalid syntax
Ticket #39 - Account Policy Plugin does not work for simple binds when PAM Pass Through Auth plugin is enabled
Ticket #13 - slapd process exits when put the database on read only mode while updates are coming to the server
Ticket #87 - Manpages fixes
c493fb4 fix a couple of minor coverity issues
Ticket #55 - Limit of 1024 characters for nsMatchingRule
Trac Ticket #274 - Reindexing entryrdn fails if ancestors are also tombstoned
Ticket #6 - protocol error from proxied auth operation
Ticket #38 - nisDomain schema is incorrect
Ticket #273 - ruv tombstone searches don't work after reindex entryrdn
Ticket #29 - Samba3-schema is missing sambaTrustedDomainPassword
Ticket #22 - RFE: Support sendmail LDAP routing schema
Ticket #161 - Review and address latest Coverity issues
Ticket #140 - incorrect memset parameters
Trac Ticket 35 - Log not clear enough on schema errors
Trac Ticket 139 - eliminate the use of char *dn in favor of Slapi_DN *dn
Trac Ticket #52 - FQDN set to nsslapd-listenhost makes the server start fail if IPv4-mapped-IPv6 address is given
fixes for systemd - remove .pid files after shutting down servers
Ticket #263 - add systemd include directive
Ticket #264 - upgrade needs better check for "server is running"
(cherry picked from commit 7dfddf14e3e83bc1ad68c3fd1182344f60b4a132)
Ticket #262 - pid file not removed with systemd
Ticket #50 - server should not call a plugin after the plugin close function is called
Ticket #18 - Data inconsitency during replication
Ticket #49 - better handling for server shutdown while long running tasks are active
Ticket #15 - Get rid of rwlock.h/rwlock.c and just use slapi_rwlock instead
Ticket #257 - repl-monitor doesn't work if leftmost hostnames are the same
Ticket #12 - 389 DS DNA Plugin / Replication failing on GSSAPI
6aaeb77 add a hack to disable sasl hostname canonicalization
Ticket 168 - minssf should not apply to rootdse
Ticket #177 - logconv.pl doesn't detect restarts
Ticket #159 - Managed Entry Plugin runs against managed entries upon any update without validating
Ticket 75 - Unconfigure plugin opperations are being called.
Ticket 26 - Please support setting defaultNamingContext in the rootdse.
Ticket #71 - unable to delete managed entry config
Ticket #167 - Mixing transaction and non-transaction plugins can cause deadlock
Ticket #256 - debug build assertion in ACL_EvalDestroy()
Ticket #4 - bak2db gets stuck in infinite loop
Ticket #162 - Infinite loop / spin inside strcmpi_fast, acl_read_access_allowed_on_attr, server DoS
Ticket #3: acl cache overflown problem
Ticket 1 - pre-normalize filter and pre-compile substring regex - and other optimizations
Ticket 2 - If node entries are tombstone'd, subordinate entries fail to get the full DN.
Bug 755725 - 389 programs linked against openldap crash during shutdown
Bug 755754 - Unable to start dirsrv service using systemd
Bug 745259 - Incorrect entryUSN index under high load in replicated environment
d439e3a use slapi_hexchar2int and slapi_str_to_u8 everywhere
5910551 csn_init_as_string should not use sscanf
b53ba00 reduce calls to csn_as_string and slapi_log_error
c897267 fix member variable name error in slapi_uniqueIDFormat
66808e5 uniqueid formatting - use slapi_u8_to_hex instead of sprintf
580a875 csn_as_string - use slapi_uN_to_hex instead of sprintf
Bug 751645 - crash when simple paged fails to send entry to client
Bug 752155 - Use restorecon after creating init script lock file
Bug 751495 - 'setup-ds.pl -u' fails with undefined routine 'updateSystemD'
Bug 750625 750624 750622 744946 Coverity issues
Bug 748575 - part 2 - rhds81 modrdn operation and 100% cpu use in replication
Bug 748575 - rhds81 modrn operation and 100% cpu use in replication
Bug 745259 - Incorrect entryUSN index under high load in replicated environment
f639711 Reduce the number of DN normalization
c06a8fa Keep unhashed password psuedo-attribute in the adding entry
Bug 744945 - nsslapd-counters attribute value cannot be set to "off"
8d3b921 Use new PLUGIN_CONFIG_ENTRY feature to allow switching between txn and regular
d316a67 Change referential integrity to be a betxnpostoperation plugin
Bug 741744 - part3 - MOD operations with chained delete/add get back error 53
1d2f5a0 make memberof transaction aware and able to be a betxnpostoperation plug in
b6d3ba7 pass the plugin config entry to the plugin init function
28f7bfb set the ENTRY_POST_OP for modrdn betxnpostoperation plugins
Bug 743966 - Compiler warnings in account usability plugin
resource limits for simple paged results
Bug 740942 - allow resource limits to be set for paged searches independently of limits for other searches/operations
Bug 741744 - MOD operations with chained delete/add get back error 53 on backend config
Bug 742324 - allow nsslapd-idlistscanlimit to be set dynamically and per-user
Bug 722292 - (cov#11030) Leak of mapped_sdn in winsync rename code
Bug 703990 - cross-platform - Support upgrade from Red Hat Directory Server
Introducing an environment variable USE_VALGRIND to clean up the entry cache and dn cache on exit.
389-ds-base-1.2.9.7 - bugfix update
Bug 733103 - large targetattr list with syntax errors cause server to crash or hang
Bug 633803 - passwordisglobalpolicy attribute brakes TLS chaining
Bug 732541 - Ignore error 32 when adding automember config
Bug 728592 - Allow ns-slapd to start with an invalid server cert
