fixes for systemd - remove .pid files after shutting down servers
Ticket #263 - add systemd include directive
Ticket #264 - upgrade needs better check for "server is running"
(cherry picked from commit 7dfddf14e3e83bc1ad68c3fd1182344f60b4a132)
Ticket #262 - pid file not removed with systemd
Ticket #50 - server should not call a plugin after the plugin close function is called
Ticket #18 - Data inconsitency during replication
Ticket #49 - better handling for server shutdown while long running tasks are active
Ticket #15 - Get rid of rwlock.h/rwlock.c and just use slapi_rwlock instead
Ticket #257 - repl-monitor doesn't work if leftmost hostnames are the same
Ticket #12 - 389 DS DNA Plugin / Replication failing on GSSAPI
6aaeb77 add a hack to disable sasl hostname canonicalization
Ticket 168 - minssf should not apply to rootdse
Ticket #177 - logconv.pl doesn't detect restarts
Ticket #159 - Managed Entry Plugin runs against managed entries upon any update without validating
Ticket 75 - Unconfigure plugin opperations are being called.
Ticket 26 - Please support setting defaultNamingContext in the rootdse.
Ticket #71 - unable to delete managed entry config
Ticket #167 - Mixing transaction and non-transaction plugins can cause deadlock
Ticket #256 - debug build assertion in ACL_EvalDestroy()
Ticket #4 - bak2db gets stuck in infinite loop
Ticket #162 - Infinite loop / spin inside strcmpi_fast, acl_read_access_allowed_on_attr, server DoS
Ticket #3: acl cache overflown problem
Ticket 1 - pre-normalize filter and pre-compile substring regex - and other optimizations
Ticket 2 - If node entries are tombstone'd, subordinate entries fail to get the full DN.
Bug 755725 - 389 programs linked against openldap crash during shutdown
Bug 755754 - Unable to start dirsrv service using systemd
Bug 745259 - Incorrect entryUSN index under high load in replicated environment
d439e3a use slapi_hexchar2int and slapi_str_to_u8 everywhere
5910551 csn_init_as_string should not use sscanf
b53ba00 reduce calls to csn_as_string and slapi_log_error
c897267 fix member variable name error in slapi_uniqueIDFormat
66808e5 uniqueid formatting - use slapi_u8_to_hex instead of sprintf
580a875 csn_as_string - use slapi_uN_to_hex instead of sprintf
Bug 751645 - crash when simple paged fails to send entry to client
Bug 752155 - Use restorecon after creating init script lock file
Bug 751495 - 'setup-ds.pl -u' fails with undefined routine 'updateSystemD'
Bug 750625 750624 750622 744946 Coverity issues
Bug 748575 - part 2 - rhds81 modrdn operation and 100% cpu use in replication
Bug 748575 - rhds81 modrn operation and 100% cpu use in replication
Bug 745259 - Incorrect entryUSN index under high load in replicated environment
f639711 Reduce the number of DN normalization
c06a8fa Keep unhashed password psuedo-attribute in the adding entry
Bug 744945 - nsslapd-counters attribute value cannot be set to "off"
8d3b921 Use new PLUGIN_CONFIG_ENTRY feature to allow switching between txn and regular
d316a67 Change referential integrity to be a betxnpostoperation plugin
Bug 741744 - part3 - MOD operations with chained delete/add get back error 53
1d2f5a0 make memberof transaction aware and able to be a betxnpostoperation plug in
b6d3ba7 pass the plugin config entry to the plugin init function
28f7bfb set the ENTRY_POST_OP for modrdn betxnpostoperation plugins
Bug 743966 - Compiler warnings in account usability plugin
resource limits for simple paged results
Bug 740942 - allow resource limits to be set for paged searches independently of limits for other searches/operations
Bug 741744 - MOD operations with chained delete/add get back error 53 on backend config
Bug 742324 - allow nsslapd-idlistscanlimit to be set dynamically and per-user
Bug 722292 - (cov#11030) Leak of mapped_sdn in winsync rename code
Bug 703990 - cross-platform - Support upgrade from Red Hat Directory Server
Introducing an environment variable USE_VALGRIND to clean up the entry cache and dn cache on exit.
389-ds-base-1.2.9.7 - bugfix update
Bug 733103 - large targetattr list with syntax errors cause server to crash or hang
Bug 633803 - passwordisglobalpolicy attribute brakes TLS chaining
Bug 732541 - Ignore error 32 when adding automember config
Bug 728592 - Allow ns-slapd to start with an invalid server cert
winsync, upgrade, and ruv/counter bug fixes
Bug 728510 - Run dirsync after sending updates to AD
Bug 729717 - Fatal error messages when syncing deletes from AD
Bug 729369 - upgrade DB to upgrade from entrydn to entryrdn format is not working.
Bug 729378 - delete user subtree container in AD + modify password in DS == DS crash
Bug 723937 - Slapi_Counter API broken on 32-bit F15
fixed again - separate tests for atomic ops and atomic bool cas
the 389-ds-base-1.2.9.1 release
Bug 663752 - Cert renewal for attrcrypt and encchangelog
this was "re-fixed" due to a deadlock condition with cl2ldif task cancel
Bug 725953 - Winsync: DS entries fail to sync to AD, if the User's CN entry contains a comma
Bug 725743 - Make memberOf use PRMonitor for it's operation lock
Bug 725542 - Instance upgrade fails when upgrading 389-ds-base package
Bug 723937 - Slapi_Counter API broken on 32-bit F15
The 1.2.9.0 release - several bug fixes
Bug 720059 - RDN with % can cause crashes or missing entries
Bug 709468 - RSA Authentication Server timeouts when using simple paged results on RHDS 8.2.
Bug 691313 - Need TLS/SSL error messages in repl status and errors log
Bug 712855 - Directory Server 8.2 logs "Netscape Portable Runtime error -5961 (TCP connection reset by peer.)" to error log whereas Directory Server 8.1 did not
Bug 713209 - Update sudo schema
Bug 719069 - clean up compiler warnings in 389-ds-base 1.2.9
Bug 718303 - Intensive updates on masters could break the consumer's cache
Bug 711679 - unresponsive LDAP service when deleting vlv on replica
look for separate openldap ldif library
Split automember regex rules into separate entries
writing Inf file shows SchemaFile = ARRAY(0xhexnum)
add support for ldif files with changetype: add
Bug 716980 - winsync uses old AD entry if new one not found
Bug 697694 - rhds82 - incr update state stop_fatal_error "requires administrator action", with extop_result: 9
bump console version to 1.2.6
Bug 711679 - unresponsive LDAP service when deleting vlv on replica
Bug 703703 - setup-ds-admin.pl asks for legal agreement to a non-existant file
Bug 706209 - LEGAL: RHEL6.1 License issue for 389-ds-base package
Bug 663752 - Cert renewal for attrcrypt and encchangelog
Bug 706179 - DS can not restart after create a new objectClass has entryusn attribute
Bug 711906 - ns-slapd segfaults using suffix referrals
Bug 707384 - only allow FIPS approved cipher suites in FIPS mode
Bug 710377 - Import with chain-on-update crashes ns-slapd
Bug 709826 - Memory leak: when extra referrals configured
389-ds-base-1.2.8.3
Bug 700145 - userpasswd not replicating
Bug 700557 - Linked attrs callbacks access free'd pointers after close
Bug 694336 - Group sync hangs Windows initial Sync
Bug 700215 - ldclt core dumps
Bug 695779 - windows sync can lose old values when a new value is added
Bug 697027 - 12 - minor memory leaks found by Valgrind + TET
389-ds-base-1.2.8.0
Bug 693473 - rhds82 rfe - windows_tot_run to log Sizelimit exceeded instead of LDAP error - -1
Bug 692991 - rhds82 - windows_tot_run: failed to obtain data to send to the consumer; LDAP error - -1
Bug 693466 - Unable to change schema online
Bug 693503 - matching rules do not inherit from superior attribute type
Bug 693455 - nsMatchingRule does not work with multiple values
Bug 693451 - cannot use localized matching rules
Bug 692331 - Segfault on index update during full replication push on 1.2.7.5
389-ds-base-1.2.8.rc4
Bug 668385 - DS pipe log script is executed as many times as the dirsrv serv
ice is restarted
389-ds-base-1.2.8.rc3
Bug 690955 - Mrclone fails due to the replica generation id mismatch
389-ds-base-1.2.8 release candidate 2 - git tag 389-ds-base-1.2.8.rc2
Bug 689537 - (cov#10610) Fix Coverity NULL pointer dereferences
Bug 689866 - ns-newpwpolicy.pl needs to use the new DN format
Bug 681015 - RFE: allow fine grained password policy duration attributes
in days, hours, minutes, as well
Bug 684996 - Exported tombstone cannot be imported correctly
Bug 683250 - slapd crashing when traffic replayed
Bug 668909 - Can't modify replication agreement in some cases
Bug 504803 - Allow maxlogsize to be set if logmaxdiskspace is -1
Bug 644784 - Memory leak in "testbind.c" plugin
Bug 680558 - Winsync plugin fails to restrain itself to the configured subtree
389-ds-base-1.2.8 release candidate 1 - git tag 389-ds-base-1.2.8.rc1
Bug 518890 - setup-ds-admin.pl - improve hostname validation
Bug 681015 - RFE: allow fine grained password policy duration attributes in
days, hours, minutes, as well
Bug 514190 - setup-ds-admin.pl --debug does not log to file
Bug 680555 - ns-slapd segfaults if I have more than 100 DBs
Bug 681345 - setup-ds.pl should set SuiteSpotGroup automatically
Bug 674852 - crash in ldap-agent when using OpenLDAP
Bug 679978 - modifying attr value crashes the server, which is supposed to
be indexed as substring type, but has octetstring syntax
Bug 676655 - winsync stops working after server restart
Bug 677705 - ds-logpipe.py script is failing to validate "-s" and
"--serverpid" options with "-t".
Bug 625424 - repl-monitor.pl doesn't work in hub node
- 1.2.8.a3 release - git tag 389-ds-base-1.2.8.a3
- Bug 675320 - empty modify operation with repl on or lastmod off will crash server
- Bug 675265 - preventryusn gets added to entries on a failed delete
- Bug 677774 - added support for tmpfiles.d
- Bug 666076 - dirsrv crash (1.2.7.5) with multiple simple paged result search
es
- Bug 672468 - Don't use empty path elements in LD_LIBRARY_PATH
- Bug 671199 - Don't allow other to write to rundir
- Bug 678646 - Ignore tombstone operations in managed entry plug-in
- Bug 676053 - export task followed by import task causes cache assertion
- Bug 677440 - clean up compiler warnings in 389-ds-base 1.2.8
- Bug 675113 - ns-slapd core dump in windows_tot_run if oneway sync is used
- Bug 676689 - crash while adding a new user to be synced to windows
- Bug 604881 - admin server log files have incorrect permissions/ownerships
- Bug 668385 - DS pipe log script is executed as many times as the dirsrv serv
ice is restarted
- Bug 675853 - dirsrv crash segfault in need_new_pw()
1.2.8.a2 release - git tag 389-ds-base-1.2.8.a2
Bug 674430 - Improve error messages for attribute uniqueness
Bug 616213 - insufficient stack size for HP-UX on PA-RISC
Bug 615052 - intrinsics and 64-bit atomics code fails to compile
on PA-RISC
Bug 151705 - Need to update Console Cipher Preferences with new ciphers
Bug 668862 - init scripts return wrong error code
Bug 670616 - Allow SSF to be set for local (ldapi) connections
Bug 667935 - DS pipe log script's logregex.py plugin is not redirecting the
log output to the text file
Bug 668619 - slapd stops responding
Bug 624547 - attrcrypt should query the given slot/token for
supported ciphers
Bug 646381 - Faulty password for nsmultiplexorcredentials does not give any
error message in logs
- Bug 643979 - Strange byte sequence for attribute with no values (nsslapd-referral)
- Bug 635009 - Add one-way AD sync capability
- Bug 572018 - Upgrading from 1.2.5 to 1.2.6.a2 deletes userRoot
- put replication config entries in separate file
- Bug 567282 - server can not abandon searchRequest of "simple paged results"
- Bug 329751 - "nested" filtered roles searches candidates more than needed
- Bug 521088 - DNA should check ACLs before getting a value from the range
- Bug 643979 - Strange byte sequence for attribute with no values (nsslapd-referral)
- Bug 635009 - Add one-way AD sync capability
- Bug 572018 - Upgrading from 1.2.5 to 1.2.6.a2 deletes userRoot
- put replication config entries in separate file
- Bug 567282 - server can not abandon searchRequest of "simple paged results"
- Bug 329751 - "nested" filtered roles searches candidates more than needed
- Bug 521088 - DNA should check ACLs before getting a value from the range
this is the 1.2.7.a3 release
Bug 644608 - RHDS 8.1->8.2 upgrade fails to properly migrate ACIs
Bug 629681 - Retro Changelog trimming does not behave as expected
Bug 645061 - Upgrade: 06inetorgperson.ldif and 05rfc4524.ldif
are not upgraded in the server instance schema dir
added several more bug fixes to 1.2.6.1
Bug 635987 - Incorrect sub scope search result with ACL containing ldap:///self
Bug 612264 - ACI issue with (targetattr='userPassword')
Bug 606920 - anonymous resource limit- nstimelimit - also applied to "cn=directory manager"
Bug 631862 - crash - delete entries not in cache + referint
git tag 389-ds-base-1.2.6.rc6
Bug 617013 - repl-monitor.pl use cpu upto 90%
Bug 616618 - 389 v1.2.5 accepts 2 identical entries with different DN formats
Bug 547503 - replication broken again, with 389 MMR replication and TCP error
Bug 613833 - Allow dirsrv_t to bind to rpc ports
Bug 612242 - membership change on DS does not show on AD
Bug 617629 - Missing aliases in new schema files
Bug 619595 - Upgrading sub suffix under non-normalized suffix disappears
Bug 616608 - SIGBUS in RDN index reads on platforms with strict alignments
Bug 617862 - Replication: Unable to delete tombstone errors
Bug 594745 - Get rid of dirsrv_lib_t label
deref in _ger_parse_control() for subjectdn
609256 - Selinux: pwdhash fails if called via Admin Server CGI
578296 - Attribute type entrydn needs to be added when subtree rename
switch is on
605827 - In-place upgrade: upgrade dn format should not run in
setup-ds-admin.pl Bug 604453 - SASL Stress and Server crash: Program
quits with the assertion failure in PR_Poll Bug 604453 - SASL Stress
and Server crash: Program quits with the assertion failure in PR_Poll
606920 - anonymous resource limit - nstimelimit - also applied to
"cn=directory manager"
update to update the server instances servers are shutdown, then
restarted if running before install scriptlets mostly use lua now to
pass data among scriptlet phases Added 389-ds-base-git-local.sh script
to generate a source tarball from a local git repository and a git tag
next major release bump version to 1.2.2 fix reopened 509472 db2index
all does not reindex all the db backends correctly fix 518520 - pre
hashed salted passwords do not work (F-10 and F-11 only) fix 518418 -
Package rename shuts down server, results in unconfigured package see
https://bugzilla.redhat.com/show_bug.cgi?id=518519 for the list of bugs
fixed in 1.2.2
