Commit Graph

158 Commits

Author SHA1 Message Date
Mark Reynolds
8704ece18d Bump version to 1.3.6.6-1
Ticket 49157 - fix error in ds-logpipe.py
Ticket 48864 - remove config.h from spal header.
Ticket 48681 - logconv.pl - Fix SASL Bind stats and rework report format
Ticket 49261 - Fix script usage and man pages
Ticket 49238 - AddressSanitizer: heap-use-after-free in libreplication
Ticket 48864 - Fix FreeIPA build
Ticket 49257 - Reject dbcachesize updates while auto cache sizing is enabled
Ticket 49249 - cos_cache is erroneously logging schema checking failure
Ticket 49258 - Allow nsslapd-cache-autosize to be modified while the server is running
Ticket 49247 - resolve build issues on debian
Ticket 49246 - ns-slapd crashes in role cache creation
Ticket 49157 - ds-logpipe.py crashes for non-existing users
Ticket 49241 - Update man page and usage for db2bak.pl
Ticket 49075 - Adjust logging severity levels
Ticket 47662 - db2index not properly evaluating arguments
Ticket 48989 - fix perf counters
2017-05-22 12:46:33 -04:00
Mark Reynolds
febdb028f2 Bump version to 1.3.6.5-1
Ticket 49231 - fix sasl mech handling
Ticket 49233 - Fix crash in persistent search
Ticket 49230 - slapi_register_plugin creates config entry where it should not
Ticket 49135 - PBKDF2 should determine rounds at startup
Issue 49236 - Fix CI Tests
Ticket 48310 - entry distribution should be case insensitive
Ticket 49224 - without --prefix, $prefixdir would be NONE in defaults.
2017-05-17 11:37:48 -04:00
Mark Reynolds
7317215ce8 Bump version to 1.3.6.4-1
Ticket 49228 - Fix SSE4.2 detection.
Ticket 49229 - Correct issues in latest commits
Ticket 49226 - Memory leak in ldap-agent-bin
Ticket 49214 - Implement htree concept
Ticket 49119 - Cleanup configure.ac options and defines
Ticket 49097 - whitespace fixes for pblock change
Ticket 49097 - Pblock get/set cleanup
Ticket 49222 - Resolve various test issues on rawhide
Issue 48978 - Fix the emergency logging functions severity levels
Issue 49227 - ldapsearch for nsslapd-errorlog-level returns  incorrect values
Ticket 49041 - nss won't start if sql db type set
Ticket 49223 - Fix sds queue locking
Issue 49204 - Fix 32bit arch build failures
Issue 49204 - Need to update function declaration
Ticket 49204 - Fix lower bounds on import autosize + On small VM, autotune breaks the access of the suffixes
Issue 49221 - During an upgrade the provided localhost name is ignored
Issue 49220 - Remote crash via crafted LDAP messages (SECURITY FIX)
Ticket 49184 - Overflow in memberof
Ticket 48050 - Add account policy tests to plugins test suite
Ticket 49207 - Supply docker POC build for DS.
Issue 47662 - CLI args get removed
Issue 49210 - Fix regression when checking is password min  age should be checked
Ticket 48864 - Add cgroup memory limit detection to 389-ds
Issue 48085 - Expand the repl acceptance test suite
Ticket 49209 - Hang due to omitted replica lock release
Ticket 48864 - Cleanup memory detection before we add cgroup support
Ticket 48864 - Cleanup up broken format macros and imports
Ticket 49153 - Remove vacuum lock on transaction cleanup
Ticket 49200 - provide minimal dse.ldif for python installer
Issue 49205 - Fix logconv.pl man page
Issue 49177 - Fix pkg-config file
Issue 49035 - dbmon.sh shows pages-in-use that exceeds the cache size
Ticket 48432 - Linux capabilities on ns-slapd
Ticket 49196 - Autotune generates crit messages
Ticket 49194 - Lower default ioblock timeout
Ticket 49193 - gcc7 warning fixes
Issue 49039 - password min age should be ignored if password needs to be reset
Ticket 48989 - Re-implement lock counter
Issue 49192 - Deleting suffix can hang server
Issue 49156 - Modify token :assert: to :expectedresults:
Ticket 48989 - missing return in counter
Ticket 48989 - Improve counter overflow fix
Ticket 49190 - Upgrade lfds to 7.1.1
Ticket 49187 - Fix attribute definition
Ticket 49185 - Fix memleak in compute init
2017-04-21 09:28:12 -04:00
Mark Reynolds
58a8b17c28 Bump verson to 1.3.6.3
Issue 48989 - Overflow in counters and monitor
Issue 49095 - targetattr wildcard evaluation is incorrectly case sensitive
Issue 49177 - rpm would not create valid pkgconfig files
Issue 49176 - Remove tcmalloc restriction from s390x
Issue 49157 - ds-logpipe.py crashes for non-existing users
Issue 49065 - dbmon.sh fails if you have nsslapd-require-secure-binds enabled
Issue 49095 - Fix double-free in _cl5NewDBFile() error path
2017-03-21 20:49:24 -04:00
Mark Reynolds
1061e7184b Bump version to 1.3.6.2-1
Ticket 49164 - Change NS to acq-rel semantics for atomics
Ticket 49154 - Nunc Stans stress should assert it has 95% success rate
Ticket 49165 - pw_verify did not handle external auth
Issue 49062 - Reset agmt update staus and total init
Ticket 49151 - Remove defunct selinux policy
2017-03-14 09:05:28 -04:00
Noriko Hosoi
e7c1bda5bf Bump version to 1.3.6.1-1
- Ticket 142   - Refactor and move CI test
- Ticket 47703 - remove search limit for aci group evaluation
- Ticket 47978 - Refactor slapi_log_error
- Ticket 48272 - ADDN Sytle prebind plugin
- Ticket 48272 - Fix compiler warnings for addn
- Ticket 48278 - cleanAllRUV should remove keep-alive entry
- Ticket 48328 - Add missing dependency
- Ticket 48414 - cleanAllRUV should clean the agreement RUV
- Ticket 48538 - Failed to delete old semaphore
- Ticket 48805 - Misleading indent and Uninitialised struct member
- Ticket 48805 - Sign comparison checks.
- Ticket 48832 - Fix CI test suite for password min age
- Ticket 48896 - CI test: test case for ticket 48896
- Ticket 48896 - Default Setting for passwordMinTokenLength does not work
- Ticket 48906 - Allow nsslapd-db-locks to be configurable online
- Ticket 48909 - Replication stops working in FIPS mode
- Ticket 48921 - CI Replication stress tests have limits set too low
- Ticket 48944 - on a read only replica invalid state info can accumulate
- Ticket 48947 - Update default password hash to SSHA512
- Ticket 48957 - Update repl-monitor to handle new status messages
- Ticket 48969 - nsslapd-auditfaillog always has an explicit path
- Ticket 48978 - Build fails on i686
- Ticket 48978 - Convert slapi_log_error() to a variadic macro
- Ticket 48978 - Fine tune error logging
- Ticket 48978 - Fix CI test to account for new logging format
- Ticket 48978 - Fix logging format errors and replace LDAP_DEBUG
- Ticket 48978 - refactor LDADebug() to slapi_log_err()
- Ticket 48978 - refactor LDAPDebug()
- Ticket 48978 - Update error logging with new codes
- Ticket 48978 - Update the logging function to accept sev level
- Ticket 48979 - Allow to compile 389ds with warning Wstrict-prototypes
- Ticket 48979 - Strict Prototypes
- Ticket 48982 - Comment about resolving failure to open plugin.
- Ticket 48982 - Enabling a plugin that has a versioned so causes overflow
- Ticket 48982 - One line fix, remove unused variable.
- Ticket 48982 - When plugin doesn't enable, actually log the path it used
- Ticket 48983 - Configure and Makefile.in from new default paths work.
- Ticket 48983 -  generate install path info from autotools scripts
- Ticket 48984 - Add lib389 paths module
- Ticket 48986 - 47808 triggers overflow in uiduniq.c
- Ticket 48992 - Total init may fail if the pushed schema is rejected
- Ticket 48996 - Fix rpm to work with ns 0.2.0
- Ticket 48996 - remove unused variable.
- Ticket 48996 - update DS for ns 0.2.0
- Ticket 49005 - Update lib389 to work in containers correctly.
- Ticket 49006 - Enable nunc-stans by default.
- Ticket 49006 - Nunc stans use DS stack size
- Ticket 49007 - Update configure scripts
- Ticket 49007 - Update DS basic test to better work with systemd.
- Ticket 49009 - args debug logging must be more restrictive
- Ticket 49011 - Remove configure artifacts
- Ticket 49012 - Removed un-used counters
- Ticket 49013 - Correct signal handling with NS in DS
- Ticket 49014 - ns-accountstatus.pl shows wrong status for accounts inactivated by Account policy plugin
- Ticket 49017 - Various minor test failures
- use a consumer maxcsn only as anchor if supplier is more advanced
2016-10-27 11:08:13 -07:00
Mark Reynolds
4a81658f6a Upload new sources for nunc-stans 0.2.0 2016-10-24 13:30:29 -04:00
Mark Reynolds
f9d21bf598 Bump version to 1.3.5.14-1
- Ticket 48992 - Total init may fail if the pushed schema is rejected
- Ticket 48832 - Fix CI test suite for password min age
- Ticket 48983 - Configure and Makefile.in from new default paths work.
- Ticket 48983 - Configure and Makefile.in from new default paths work.
- Ticket 48983 - generate install path info from autotools scripts
- Ticket 48944 - on a read only replica invalid state info can accumulate
- Ticket 48766 - use a consumer maxcsn only as anchor if supplier is more advanced
- Ticket 48921 - CI Replication stress tests have limits set too low
- Ticket 48969 - nsslapd-auditfaillog always has an explicit path
- Ticket 48957 - Update repl-monitor to handle new status messages
- Ticket 48832 - Fix CI tests
- Ticket 48975 - Disabling CLEAR password storage scheme will  crash server when setting a password
- Ticket 48369 - Add CI test suite
- Ticket 48970 - Serverside sorting crashes the server
- Ticket 48972 - remove old pwp code that adds/removes ACIs
- Ticket 48957 - set proper update status to replication  agreement in case of failure
- Ticket 48950 - Add systemd warning to the LD_PRELOAD example in /etc/sysconfig/dirsrv
- provide backend dir in suffix template
- Ticket 48953 - Skip labelling and unlabelling ports during the test
- Ticket 48967 - Add CI test and refactor test suite
- Ticket 48967 - passwordMinAge attribute doesn't limit the minimum age of the password
- Fix jenkins warnings about unused vars
- Ticket 48402 - v3 allow plugins to detect a restore or import
- Ticket #48969 - nsslapd-auditfaillog always has an explicit path
- Ticket 48964 - cleanAllRUV changelog purging incorrectly  processes all backends
- Ticket 48965 - Fix building rpms using rpm.mk
- Ticket 48965 - Fix generation of the pre-release version
- Bugzilla 1368956 - man page of ns-accountstatus.pl shows redundant entries for -p port option
- Ticket 48960 - Crash in import_wait_for_space_in_fifo().
- Ticket 48832 - Fix more CI test failures
- Ticket 48958 - Audit fail log doesn't work if audit log disabled.
- Ticket 48956 - ns-accountstatus.pl showing "activated" user even if it is inactivated
- Ticket 48954 - replication fails because anchorcsn cannot be found
- Ticket 48832 - Fix CI tests failures from jenkins server
- Ticket 48950 - Change example in /etc/sysconfig/dirsrv to use tcmalloc
2016-10-13 10:54:16 -04:00
Noriko Hosoi
71943d5385 Release 1.3.5.13-1
- Ticket 48450 - Autotools components for ds_systemd_ask_password_acl
2016-08-08 12:43:08 -07:00
Noriko Hosoi
603608cbff Release 1.3.5.12-1
- Ticket 48450 - Add prestart work around for systemd ask password
- Ticket 48943 - When fine-grained policy is applied, a sub-tree has a priority over a user while changing password
- Ticket 47976 - Add fixed CI test case
- Ticket 48882 - server can hang in connection list processing
- Ticket 48921 - Adding replication and reliability tests
- Ticket 48936 - Duplicate collation entries
- Ticket 48832 - Fix timing and localhost issues
- Ticket 48832 - Fix pytest compatibility in CI tests
- Ticket 48832 - CI Tests - make tests more portable
- Ticket 48943 - Add CI Test for the password test suite
- Ticket 48940 - DS logs have warning:ancestorid not indexed
- Ticket 48934 - remove-ds.pl deletes an instance even if wrong prefix was specified
- Ticket 48336 - Missing semanage dependency
- Bug 1347760 - Additional CI test case
- Resolves: Bug 1347760 - CVE-2016-4992 389-ds-base: Information disclosure via repeated use of LDAP ADD operation, etc.
- Ticket 48832 - CI tests - convert all the tests to use  py.test
- Ticket 48939 - nsslapd-workingdir is empty when ns-slapd is started by systemd
- Ticket 48935 - Update dirsrv.systemd file
- Ticket 48832 - Fix lib389 CI ticket/suite test failures
- Ticket 47824 - Remove CI test from tickets and add logging
- Ticket 48930 - Paged result search can hang the server
- Ticket 48191 - Move CI test to the pr suite and refactor
- Ticket 48928 - log of page result cookie should log empty cookie with a different value than 0
- Ticket 48752 - Add CI test
- Ticket 47664 - Move CI test to the pr suite and refactor
2016-08-04 16:10:32 -07:00
Noriko Hosoi
36aef546f9 Release 1.3.5.11-1
- Ticket 48144 - Add /usr/sbin/status-dirsrv script to get the status of the directory server instance.
- Ticket 48743 - If a cipher is disabled do not attempt to look it up
- Ticket 48755 - moving an entry could make the online init fail
- Ticket 48767 - flow control in replication also blocks receiving results
- Ticket 48912 - ntUserNtPassword schema
- Ticket 48914 - db2bak.pl task enters infinitive loop when bak fs is almost full
- Ticket 48916 - DNA Threshold set to 0 causes SIGFPE
- Ticket 48918 - Upgrade to 389-ds-base >= 1.3.5.5 doesn't install 389-ds-base-snmp
- Ticket 48919 - Compiler warnings while building 389-ds-base on RHEL7
- Ticket 48920 - Memory leak in pwdhash-bin
- Ticket 48922 - Fix crash when deleting backend while import is running
- Ticket 48924 - Fixup tombstone task needs to set proper flag when updating tombstones
- Ticket 48925 - slapd crash with SIGILL: Dsktune should detect lack of CMPXCHG16B
- Bug 1347761  - CVE-2016-4992 389-ds-base: Information disclosure via repeated use of LDAP ADD operation, etc.
- Bug 1353956  - Upgrade from FreeIPA Fedora 23 container to Fedora 24 fails with syntax error at
                 /usr/share/dirsrv/updates/91reindex.pl line 17, near ")
                 Regression introduced by Ticket 48755 to 1.3.5.10-1.
- Bug 1350393  - setup-ds.pl fails on F24 if perl-Errno is not updated (DS 48901)
- Bug 1114928  - etup-ds.pl creates configuration files under /usr (DS 528, 47840)
2016-07-15 13:59:13 -07:00
Noriko Hosoi
0743334d92 Release 1.3.5.10-1
- Ticket 47538 - Fix repl-monitor color and lag times
- Ticket 47538 - repl-monitor.pl legend not properly sorted
- Ticket 47538 - repl-monitor.pl not displaying correct color code for lag time
- Ticket 48109 - substring index with nssubstrbegin: 1 is not being used with filters like (attr=x*)
- Ticket 48346 - ldaputil code cleanup
- Ticket 48346 - log too verbose when re-acquiring expired  ticket
- Ticket 48354 - Review of default ACI in the directory server
- Ticket 48366 - proxyauth does not work bound as directory manager
- Ticket 48449 - Import readNSState.py from RichM's repo
- Ticket 48636 - Fix config validation check
- Ticket 48637 - DN cache is not always updated when ADD  operation fails
- Ticket 48745 - Matching Rule caseExactIA5Match indexes incorrectly values with upper cases
- Ticket 48755 - CI test: test case for ticket 48755
- Ticket 48755 - moving an entry could make the online init fail
- Ticket 48889 - ldclt - fix man page and usage info
- Ticket 48891 - ns-slapd crashes during the shutdown after adding attribute with a matching rule
- Ticket 48892 - Wrong result code display in audit-failure log
- Ticket 48893 - cn=config should not have readable components to anonymous
- Ticket 48895 - tests package should be noarch
- Ticket 48898 - Crash during shutdown if nunc-stans is enabled
- Ticket 48899 - Values of dbcachetries/dbcachehits in cn=monitor could overflow.
- Ticket 48900 - Add connection perf stats to logconv.pl
- Ticket 48902 - Strdup pwdstoragescheme name to prevent misbehaving plugins
- Ticket 48904 - syncrepl search returning error 329; plugin sending a bad error code
- Ticket 48905 - coverity defects
2016-07-01 13:23:40 -07:00
Noriko Hosoi
7869209c47 Release 1.3.5.6-1
- Ticket 48234 - CI test: test case for ticket 48234
- Ticket 48234 - "matching rules" in ACI's "bind rules not fully evaluated
- Ticket 48636 - Improve replication convergence
- Revert "Ticket 48755 - moving an entry could make the online init fail"
- Ticket 48766 - Replication changelog can incorrectly skip over updates
- Ticket 47982 - Fix log hr timestamps when invalid value is set in cn=config
2016-06-14 10:54:56 -07:00
Noriko Hosoi
d10e9afbc4 Release 1.3.5.5-1
- Ticket 48848 - modrdn deleteoldrdn can fail to find old attribute value, perhaps due to case folding
- Ticket 48832 - CI test - fix ticket failures
- Ticket 48833 - 389 showing inconsistent values for shadowMax and shadowWarning in 1.3.5.1
- Ticket 48873 - Backend should accept the reduced cache allocation when issane == 1
- Ticket 48815 - ns-accountstatus.pl - fix DN normalization
- Ticket 48880 - adding pre/post extop ability
- Ticket 48449 - Import readNSState from richm's repo
- Ticket 48877 - Fixes for RPM spec with spectool
- Ticket 48404 - libslapd owned by libs and devel
- Ticket 48326 - Move CI test to config test suite and refactor
- Ticket 48755 - CI test: test case for ticket 48755
- Ticket 48755 - moving an entry could make the online init fail
- Ticket 48870 - Correct plugin execution order due to changes in exop
- Ticket 48799 - Test cases for objectClass values being dropped.
- Ticket 48863 - remove check for vmsize from util_info_sys_pages
- Ticket 48872 - Fix segfault and use after free in plugin shutdown
- Ticket 48862 - At startup DES to AES password conversion causes timeout in start script
- Ticket 48275 - search returns no entry when OR filter component contains non readable attribute
- Ticket 47911 - split out snmp agent into a subpackageTicket 47911
- Ticket 48336 - setup-ds should detect if port is already defined
- Ticket 48858 - Segfault changing nsslapd-rootpw
- Ticket 48855 - Add basic pwdPolicy tests
- Ticket 48747 - dirsrv service fails to start when nsslapd-listenhost is configured
- Ticket 48752 - Page result search should return empty cookie if there is no returned entry
- Ticket 48854 - Running db2index with no options breaks replication
- Ticket 48850 - Correct memory leaks in pwdhash-bin and ns-slapd
- Ticket 48849 - Systemd introduced incompatible changes that breaks ds build
- Ticket 48846 - 32 bit systems set low vmsize
- Ticket 48846 - Older kernels do not expose memavailable
- Ticket 48846 - Rlimit checks should detect RLIM_INFINITY
- Ticket 48617 - Coverity fixes
- Ticket 48745 - Matching Rule caseExactIA5Match indexes incorrectly values with upper cases
- Ticket 48844 - Regression introduced in matching rules by DS 48746
- Ticket 48363 - CI test - add test suite
- Ticket 48795 - Make various improvements to create_test.py
- Ticket 48834 - Fix jenkins: discared qualifier on auditlog.c
- Ticket 48834 - Modifier's name is not recorded in the audit log with modrdn and moddn operations
- Ticket 48754 - ldclt should support -H
2016-06-13 14:08:52 -07:00
Noriko Hosoi
3f2f2e3bb0 Release 1.3.5.4-1
- Ticket 48836 - replication session fails because of permission denied
- Ticket 47819 - RFE - improve tombstone purging performance
- Ticket 48837 - Replication: total init aborted
- Ticket 48617 - Server ram checks work in isolation
- Ticket 48220 - The "repl-monitor" web page does not display "year" in date.
- Ticket 48829 - Add gssapi sasl replication bind test
- Ticket 48497 - uncomment pytest from CI test
- Ticket 48828 - db2ldif is not taking into account multiple suffixes or backends
- Ticket 48818 - Fix case where return code is always -1
- Ticket 48826 - 52updateAESplugin.pl may fail on older versions of perl
- Ticket 48825 - Configure make generate invalid makefile
2016-05-18 12:25:45 -07:00
Noriko Hosoi
6eaf1030f7 Release 1.3.5.3-1
- Ticket 47536 - Allow usage of OpenLDAP libraries that don't use NSS for crypto
- Ticket 47536 - CI test: added test cases for ticket 47536
- Ticket 47840 - default instance scripts if undefined.
- Ticket 47888 - Add CI test
- Ticket 47888 - DES to AES password conversion fails if a backend is empty
- Ticket 47951 - Fix startpid from altering dev/null
- Ticket 47968 - Disable journald logs by default
- Ticket 47982 - HR Log timers, regression fix for subsystem logging
- Ticket 48078 - CI test - paged_results - TET part
- Ticket 48144 - Add /usr/sbin/status-dirsrv script to get the status of the directory server instance.
- Ticket 48269 - ns-accountstatus status message improvement
- Ticket 48342 - DNA: deadlock during DNA_EXTEND_EXOP_REQUEST_OID
- Ticket 48342 - DNA Deadlock test cases
- Ticket 48342 - Prevent transaction abort if a transaction has not begun
- Ticket 48350 - Integrate ASAN into our rpm build process
- Ticket 48374 - entry cache locks not released in error conditions
- Ticket 48410 - 389-ds-base - Unable to remove / unregister a DS instance from admin server
- Ticket 48447 - with-initddir should accept no
- Ticket 48450 - Systemd password agent support
- Ticket 48492 - heap corruption at schema replication.
- Ticket 48597 - Deadlock when rebuilding the group of authorized replication managers
- Ticket 48662 - db2index with no attribute args fail.
- Ticket 48710 - auto-dn-suffix unrecognized option
- Ticket 48769 - Fix white space in extendedop.c
- Ticket 48769 - RFE: Be_txn extended operation plugin type
- Ticket 48770 - Improve extended op plugin handling
- Ticket 48775 - If nsSSL3 is on, even if SSL v3 is not really enabled, a confusing message is logged.
- Ticket 48779 - Remove startpidfile check in start-dirsrv
- Ticket 48781 - Vague error message: setup_ol_tls_conn - failed: unable to create new TLS context
- Ticket 48782 - Make sure that when LDAP_OPT_X_TLS_NEWCTX is set, the value is set to zero.
- Ticket 48783 - Fix ns-accountstatus.pl syntax error
- Ticket 48784 - CI test: added test cases for ticket 48784
- Ticket 48784 - Make the SSL version set to the client library configurable.
- Ticket 48798 - Enable DS to offer weaker DH params in NSS
- Ticket 48799 - objectclass values could be dropped on the consumer
- Ticket 48800 - Cleaning up error buffers
- Ticket 48801 - ASAN errors during tests
- Ticket 48802 - Compilation warnings from clang
- Ticket 48808 - Add test case
- Ticket 48808 - Paged results search returns the blank list of entries
- Ticket 48813 - password history is not updated when an admin resets the password
- Ticket 48815 - ns-accountstatus.sh does handle DN's with single quotes
- Ticket 48818 - In docker, no one can hear your process hang.
- Ticket 48822 - (389-ds-base-1.3.5) Fixing coverity issues.
- Ticket 48824 - Cleanup rpm.mk and 389 specfile
2016-05-08 18:04:10 -07:00
Noriko Hosoi
1d1dc675c9 Release 1.3.5.1
- Ticket 47982 - improve timestamp resolution in logs
- Ticket 48759 - no plugin calls in tombstone purging
- Ticket 48665 - Prevent sefault in ldbm_instance_modify_config_entry
- Ticket 48757 - License tag does not match actual license of code
- Ticket 48746 - Crash when indexing an attribute with a matching rule
- Ticket 48497 - extended search without MR indexed attribute prevents later indexing with that MR
- Ticket 48368 - Resolve the py.test conflicts with the create_test.py issue
- Ticket 48748 - Fix memory_leaks test suite teardown failure
- Ticket 48383 - import tasks with dynamic buffer sizes
- Ticket 48420 - change severity of some messages related to "keep alive" entries
- Ticket 48386 - Clean up dsktune code
- Ticket 48537 - undefined reference to `abstraction_increment'
- Ticket 48747 - dirsrv service fails to start when nsslapd-listenhost is configured
2016-03-23 14:55:23 -07:00
Noriko Hosoi
16ea67f259 Release 1.3.5.0
- nunc-stans - bump version to 0.1.8
- Ticket 132   - Makefile.am must include header files and template scripts
- Ticket 142   - [RFE] Default password syntax settings don't work with fine-grained policies
- Ticket 548   - RFE: Allow AD password sync to update shadowLastChange
- Ticket 47788 - Only check postop result if its a replication operation
- Ticket 47840 - add configure option to disable instance specific scripts
- Ticket 47968 - [RFE] Send logs to journald
- Ticket 47977 - [RFE] Implement sd_notify mechanism
- Ticket 48016 - search, matching rules and filter error "unsupported type 0xA9"
- Ticket 48144 - Add /usr/sbin/status-dirsrv script to get the status of the directory server instance.
- Ticket 48145 - RFE Add log file for rejected changes
- Ticket 48147 - Unable to enable DS service for auto start
- Ticket 48151 - Improve CleanAllRUV task logging
- Ticket 48218 - cleanAllRUV - modify the existing "force" option to bypass the "replica online" checks
- Ticket 48244 - No validation check for the value for nsslapd-db-locks.
- Ticket 48257 - Fix coverity issues - 08/24/2015
- Ticket 48263 - allow plugins to detect tombstone operations
- Ticket 48269 - RFE: need an easy way to detect locked accounts locked by inactivity.
- Ticket 48270 - fail to index an attribute with a specific matching rule/48269
- Ticket 48280 - enable logging of internal ops in the audit log
- Ticket 48285 - The dirsrv user/group should be created in rpm %pre, and ideally with fixed uid/gid
- Ticket 48289 - 389-ds-base: ldclt-bin killed by SIGSEGV
- Ticket 48290 - No man page entry for - option '-u' of dbgen.pl for adding group entries with uniquemembers
- Ticket 48294 - Linked Attributes plug-in - won't update links after MODRDN operation
- Ticket 48295 - Entry cache is not rolled back -- Linked Attributes plug-in - wrong behaviour when adding valid and broken links
- Ticket 48311 - nunc-stans: Attempt to release connection that is not acquired
- Ticket 48317 - SELinux port labeling retry attempts are excessive
- Ticket 48326 - [RFE] it could be nice to have nsslapd-maxbersize default to bigger than 2Mb
- Ticket 48350 - configure.ac add options for debbuging and security analysis / hardening.
- Ticket 48351 - Fix buffer overflow error when reading url with len 0
- Ticket 48363 - Support for rfc3673 '+' to return operational attributes
- Ticket 48369 - [RFE] response control for password age should be sent by default by RHDS
- Ticket 48384 - Server startup should warn about values consuming too much ram
- Ticket 48387 - ASAN invalid read in cos_cache.c
- Ticket 48394 - lower password history minimum to 1
- Ticket 48395 - ASAN - Use after free in uiduniq 7bit.c
- Ticket 48398 - Coverity defect 13352 - Resource leak in auditlog.c
- Ticket 48400 - ldclt - segmentation fault error while binding
- Ticket 48445 - keep alive entries can break replication
- Ticket 48446 - logconv.pl displays negative operation speeds
- Ticket 48566 - acl.c attrFilterArray maybe uninitialised.
- Ticket 48662 - db2index with no attribute args fail.
2016-02-25 17:38:05 -08:00
Noriko Hosoi
fc6f6b809b Release 1.3.4.8
- Ticket 48445 - keep alive entries can break replication
- Ticket 47788 - Only check postop result if its a replication operation
- Ticket 48536 - Crash in slapi_get_object_extension
- Ticket 48492 - heap corruption at schema replication.
- Ticket 48448 - dirsrv start-stop fail in certain shell environments.
2016-02-12 13:42:43 -08:00
Noriko Hosoi
42597f7f72 Release 1.3.4.7
- Bug 1299417 - worker threads do not detect abnormally closed connections (DS 48412)
- Ticket 47788 - Supplier can skip a failing update, although  it should retry
- Ticket 48341 - deadlock on connection mutex
- Ticket 48406 - Avoid self deadlock by PR_Lock(conn->c_mutex)
- Revert "Ticket #48338 - SimplePagedResults -- abandon could happen between the abandon check and sending results"
2016-01-25 13:05:53 -08:00
Noriko Hosoi
fd92e6590f Release 1.3.4.6
- Ticket 48388 - db2ldif -r segfaults from time to time
- Ticket 48312 - Crash when doing modrdn on managed entry
- Ticket 48332 - allow users to specify to relax the FQDN constraint
- Ticket 48375 - SimplePagedResults -- in the search error case, simple paged results slot was not released.
- Ticket 48362 - With exhausted range, part of DNA shared configuration is deleted after server restart
- Ticket 48289 - 389-ds-base: ldclt-bin killed by SIGSEGV
- Ticket 48305 - perl module conditional test is not conditional when checking SELinux policies
- Ticket 48370 - The 'eq' index does not get updated properly when deleting and re-adding attributes in the same modify operation
- Ticket 48369 - RFE - Add config setting to always send the  password expiring time
2016-01-12 14:18:16 -08:00
Noriko Hosoi
c67c2ddf07 Release 1.3.4.5
- Ticket 48316 - Perl-5.20.3-328: Use of literal control characters in variable names is deprecated
- Ticket 48348 - Running /usr/sbin/setup-ds.pl fails with Can't locate bigint.pm, plus two warnings
- Ticket 48339 - Share nsslapd-threadnumber in the case nunc-stans is enabled, as well.
- Ticket 48311 - nunc-stans: Attempt to release connection that is not acquired https://fedorahosted.org/389/ticket/48311
- Ticket 48325 - Add lib389 test script
- Ticket 48344 - acl - regression - trailing ', (comma)' in macro matched value is not removed.
- Ticket 48325 - Replica promotion leaves RUV out of order
- Ticket 48338 - SimplePagedResults -- abandon could happen between the abandon check and sending results
- Ticket 47976 - deadlock in mep delete post op
- Ticket 48311 - nunc-stans: Attempt to release connection that   is not acquired
- Ticket 47978 - Deadlock between two MODs on the same entry between entry cache and backend lock
- Ticket 48305 - perl module conditional test is not conditional when checking SELinux policies
- Ticket 47957 - Add replication test suite for a wait async feature
- Ticket 48227 - rpm.mk doesn't build srpms for 389-ds and nunc-stans
- Ticket 48264 - Ticket 47553 tests refactoring
- Ticket 48304 - ns-slapd - LOGINFO:Unable to remove file
- Ticket 48298 - ns-slapd crash during ipa-replica-manage del
- Ticket 48192 - Individual abandoned simple paged results request has no chance to be cleaned up
- Ticket 48299 - pagedresults - when timed out, search results could have been already freed.
- Ticket 48204 - update lib389 test scripts for python 3
- Ticket 48283 - many attrlist_replace errors in connection with cleanallruv
- Ticket 48266 - do not free repl keep alive entry on error
- Ticket 48284 - free entry when internal add fails
- Ticket 48266 - Online init crashes consumer
- Ticket 48188 - segfault in ns-slapd due to accessing Slapi_DN freed in pre bind plug-in
- Ticket 48217 - cleanallruv - fix regression with server shutdown
- Ticket 48266 - coverity issue
- Ticket 48266 - Fractional replication evaluates several times the same CSN
- Ticket 48279 - Check NULL reference in nssasl_mutex_lock etc. (saslbind.c)
- Ticket 48226 - In MMR, double free coould occur under some special condition
- Ticket 48273 - Update lib389 tests for new valgrind functions
- Ticket 48276 - initialize free_flags in reslimit_update_from_entry()
- Ticket 47553 - Automated the verification procedure
- Ticket 47761 - Added a few testcases to the basic testsuite
- Ticket 48254 - Shell CLI fails with usage errors if an argument containing white spaces is given
- Ticket 47511 - bashisms in 389-ds-base admin scripts
- Ticket 48267 - Add config setting to MO plugin to add objectclass
2015-11-18 16:09:07 -08:00
Noriko Hosoi
6691b6c404 Release 1.3.4.4
- Ticket 48255 - total update request can be lost
- Ticket 48263 - allow plugins to detect tombstone operations
- Ticket 48265 - Complex filter in a search request doen't work as expected. (regression)
- Ticket 47981 - COS cache doesn't properly mark vattr cache as invalid when there are multiple suffixes
- Ticket 48204 - Convert all python scripts to support python3
- Ticket 48258 - dna plugin needs to handle binddn groups for authorization
- Ticket 48252 - db2index creates index entry from deleted records
- Ticket 48228 - wrong password check if passwordInHistory is decreased.
- Ticket 48252 - db2index creates index entry from deleted records
- Ticket 47757 - Unable to dereference unqiemember attribute because it is dn [#UID] not dn syntax
- Ticket 48254 - Shell CLI fails with usage errors if an argument containing white spaces is given
- Ticket 48254 - CLI db2index fails with usage errors
- Ticket 47831 - remove debug logging from retro cl
- Ticket 48243 - replica upgrade failed in starting dirsrv service due to upgrade scripts did not run
- Ticket 48233 - Server crashes in ACL_LasFindFlush during  shutdown if ACIs contain IP addresss restrictions
- Ticket 48250 - Slapd crashes reported from latest build
- Ticket 48249 - sync_repl uuid may be invalid
- Ticket 48245 - Man pages and help for remove-ds.pl doesn't display "-a" option
- Ticket 47511 - bashisms in 389-ds-base admin scripts
- Ticket 47686 - removing chaining database links trigger valgrind read errors
- Ticket 47931 - memberOf & retrocl deadlocks
- Ticket 48228 - wrong password check if passwordInHistory is decreased.
- Ticket 48215 - update dbverify usage in main.c
- Ticket 48215 - verify_db.pl doesn't verify DB specified by -a option
- Ticket 47810 - memberOf plugin not properly rejecting updates
- Ticket 48231 - logconv autobind handling regression caused by 47446
- Ticket 48232 - winsync lastlogon attribute not syncing between DS and AD.
2015-09-04 13:23:01 -07:00
Noriko Hosoi
2db9b3eadd Release 1.3.4.3
- Ticket 48204 - Add Python 3 compatibility to ds-logpipe
2015-07-27 18:57:02 -07:00
Noriko Hosoi
03d064eac5 Release 1.3.4.2
- Ticket 48010 - winsync range retrieval gets only 5000 values upon initialization
- Ticket 48206 - Crash during retro changelog trimming
- Ticket 48224 - redux 2 - logconv.pl should handle *.tar.xz, *.txz, *.xz log files
- Ticket 47910 - logconv.pl - check that the end time is greater than the start time
- Ticket 48179 - Starting a replica agreement can lead to  deadlock
- Ticket 48226 - CI test: added test cases for ticket 48226
- Ticket 48226 - In MMR, double free coould occur under some special condition
- Ticket 48224 - redux - logconv.pl should handle *.tar.xz, *.txz, *.xz log files
- Ticket 48203 - Fix coverity issues - 07/14/2015
- Ticket 48194 - CI test: fixing test cases for ticket 48194
- Ticket 48224 - logconv.pl should handle *.tar.xz, *.txz, *.xz log files
- Ticket 47910 - logconv.pl - validate start and end time args
- Ticket 48223 - Winsync fails when AD users have multiple spaces (two)inside the value of the rdn attribute
- Ticket 47878 - Remove warning suppression in 1.3.4
- Ticket 48119 - Silent install needs to properly exit when INF file is missing
- Ticket 48216 - crash in ns-slapd when deleting winSyncSubtreePair from sync agreement
- Ticket 48217 - cleanAllRUV hangs shutdown if not all of the  replicas are online
- Ticket 48013 - Inconsistent behaviour of DS when LDAP Sync is used with an invalid cookie
- Ticket 47799 - Any negative LDAP error code number reported as Illegal error by ldclt.
- Ticket 48208 - CleanAllRUV should completely purge changelog
- Ticket 48203 - Fix coverity issues - 07/07/2015
- Ticket 48119 - setup-ds.pl does not log invalid --file path errors the same way as other errors.
- Ticket 48192 - Individual abandoned simple paged results request has no chance to be cleaned up
- Ticket 48214 - CI test: added test cases for ticket 48213
- Ticket 48214 - ldapsearch on nsslapd-maxbersize returns 0 instead of current value
- Ticket 48212 - CI test: added test cases for ticket 48212
- Ticket 48212 - Dynamic nsMatchingRule changes had no effect on the attrinfo thus following reindexing, as well.
- Ticket 48195 - Slow replication when deleting large quantities of multi-valued attributes
2015-07-27 18:55:16 -07:00
Noriko Hosoi
144aac7219 Release 1.3.4.1
- Resolves: Bug 1234277 - distro-wide architecture set overriden by buildsystem; Upgrade nunc-stans to 0.1.5.
- Enable nunc-stans just for x86_64.
- Ticket 48203 - Fix coverity issues - 06/22/2015
2015-06-23 15:41:38 -07:00
Noriko Hosoi
d02e06a825 Release 1.3.4.0 (rebase)
- Enable nunc-stans in the build.
- Ticket 47490 - test case failing if 47721 is also fixed
- Ticket 47640 - Linked attributes transaction not aborted when  linked entry does not exit
- Ticket 47669 - CI test: added test cases for ticket 47669
- Ticket 47669 - Retro Changelog Plugin accepts invalid value in nsslapd-changelogmaxage attribute
- Ticket 47723 - winsync sets AccountUserControl in AD to 544
- Ticket 47787 - Make the test case more robust
- Ticket 47833 - TEST CASE only (modrdn fails if renamed entry member of a group and is out of memberof scope)
- Ticket 47878 - Improve setup-ds update logging
- Ticket 47893 - should use Sys::Hostname instead Net::Domain
- Ticket 47910 - allow logconv.pl -S/-E switches to work even when timestamps not present in access log
- Ticket 47913 - remove-ds.pl should not remove /var/lib/dirsrv
- Ticket 47921 - indirect cos does not reflect changes in the cos attribute
- Ticket 47927 - Uniqueness plugin: should allow to exclude some subtrees from its scope
- Ticket 47953 - testcase for removing invalid aci
- Ticket 47966 - CI test: added test cases for ticket 47966
- Ticket 47966 - slapd crashes during Dogtag clone reinstallation
- Ticket 47972 - make parsing of nsslapd-changelogmaxage more fault tolerant
- Ticket 47972 - make parsing of nsslapd-changelogmaxage more fool proof
- Ticket 47998 - cleanup WINDOWS ifdef's
- Ticket 47998 - remove remaining obsolete OS code/files
- Ticket 47998 - remove "windows" files
- Ticket 47999 - address several race conditions in tests
- Ticket 47999 - lib389 individual tests not running correctly  when run as a whole
- Ticket 48003 - build "suite" framework
- Ticket 48008 - db2bak.pl man page should be improved.
- Ticket 48017 - add script to generate lib389 CI test script
- Ticket 48019 - Remove refs to constants.py and backup/restore from lib389 tests
- Ticket 48023 - replace old replication check with lib389 function
- Ticket 48025 - add an option '-u' to dbgen.pl for adding group entries with uniquemembers
- Ticket 48026 - fix invalid write for friendly attribute names
- Ticket 48026 - Fix memory leak in uniqueness plugin
- Ticket 48026 - Support for uniqueness plugin to enforce uniqueness on a set of attributes.
- Ticket 48032 - change C code license to GPLv3; change C code license to allow openssl
- Ticket 48035 - nunc-stans - Revise shutdown sequence
- Ticket 48036 - ns_set_shutdown should call ns_job_done
- Ticket 48037 - ns_thrpool_new should take a config struct rather than many parameters
- Ticket 48038 - logging should be pluggable
- Ticket 48039 - nunc-stans malloc should be pluggable
- Ticket 48040 - preserve the FD when disabling a listener
- Ticket 48043 - use nunc-stans config initializer
- Ticket 48103 - update DS for new nunc-stans header file
- Ticket 48110 - Free all the nunc-stans signal jobs when shutdown is detected
- Ticket 48111 - "make clean" wipes out original files
- Ticket 48122 - nunc-stans FD leak
- Ticket 48127 - Using RPM, allows non root user to create/remove DS instance
- Ticket 48141 - aci with wildcard and macro not correctly evaluated
- Ticket 48143 - Password is not correctly passed to perl command line tools if it contains shell special characters.
- Ticket 48149 - ns-slapd double free or corruption crash
- Ticket 48154 - abort cleanAllRUV tasks should not certify-all by default
- Ticket 48169 - support NSS 3.18
- Ticket 48170 - Parse nsIndexType correctly
- Ticket 48175 - Avoid using regex in ACL if possible
- Ticket 48178 - add config param to enable nunc-stans
- Ticket 48191 - CI test: added test cases for ticket 48191
- Ticket 48191 - RFE: Adding nsslapd-maxsimplepaged-per-conn
- Ticket 48191 - RFE: Adding nsslapd-maxsimplepaged-per-conn Adding nsslapd-maxsimplepaged-per-conn
- Ticket 48194 - CI test: added test cases for ticket 48194
- Ticket 48197 - error texts from preop plugins not sent to client
2015-06-19 16:02:56 -07:00
Noriko Hosoi
fbad2d1e7b release 1.3.3.12
- Resolves: Bug 1232896 - CVE-2015-3230 389-ds-base: nsSSL3Ciphers preference not enforced server side
2015-06-17 12:40:30 -07:00
Noriko Hosoi
e3d2b91ffe release 1.3.3.11
- Ticket 48192 - Individual abandoned simple paged results request has no chance to be cleaned up
- Ticket 48190 - idm/ipa 389-ds-base entry cache converges to 500 KB in dblayer_is_cachesize_sane
- Ticket 48183 - bind on db chained to AD returns err=32
- Ticket 48158 - cleanAllRUV task limit not being enforced correctly
- Ticket 48158 - Remove cleanAllRUV task limit of 4
- Ticket 48146 - async simple paged results issue; need to close a small window for a pr index competed among multiple threads.
- Ticket 48146 - async simple paged results issue; log pr index
- Ticket 48109 - substring index with nssubstrbegin: 1 is not being used with filters like (attr=x*)
- Ticket 48177 - dynamic plugins should not return an error when modifying a critical plugin
- Ticket 48146 - async simple paged results issue
2015-06-10 12:04:01 -07:00
Noriko Hosoi
200a42074f release 1.3.3.10
- Resolves: Bug 1216203 - CVE-2015-1854 389ds-base: access control bypass with modrdn
2015-04-28 11:50:42 -07:00
Noriko Hosoi
1d4c7f23d2 bump version to 1.3.3.9
- Bug 1199675 - CVE-2014-8112 CVE-2014-8105 389-ds-base: various flaws [fedora-all]
- Ticket 47801 - RHDS keeps on logging write_changelog_and_ruv: failed to update RUV for unknown
- Ticket 47957 - Make ReplicaWaitForAsyncResults configurable
- Ticket 47431 - CI test: added test cases for ticket 47431
- Ticket 47431 - Duplicate values for the attribute nsslapd-pluginarg are not handled correctly
- Ticket 47936: Create a global lock to serialize write operations over several backends
- Ticket 48021 - nsDS5ReplicaBindDNGroup checkinterval not working properly
- Ticket 48048 - Fix coverity issues - 2015/3/1
- Ticket 48109 - substring index with nssubstrbegin: 1 is not being used with filters like (attr=x*)
- Ticket 48109 - CI test: added test cases for ticket 48109
- Ticket 48109 - substring index with nssubstrbegin: 1 is not being used with filters like (attr=x*)
- Ticket 48048 - Fix coverity issues - 2015/2/24
- Ticket 48030 - spec file should run "systemctl stop" against each running instance instead of dirsrv.target
- Ticket 47828: DNA scope: allow to exlude some subtrees
- Ticket 47988: test case
- Ticket 47901: After total init, nsds5replicaLastInitStatus can report an erroneous error status (like 'Referral')
- Ticket 48003 - add template scripts
- Ticket 48003 - build "suite" framework
- Ticket 48005 - CI test: added test cases for ticket 48005
- Ticket 48005 - ns-slapd crash in shutdown phase
- Ticket 47742 - 64bit problem on big endian: auth method not supported
- Ticket 47836 - Do not return '0' as empty fallback value of nsds5replicalastupdatestart and nsds5replicalastupdatestart
- Ticket 47728 - compilation failed with ' incomplete struct/union/enum' if not set USE_POSIX_RWLOCKS
- Ticket 48027 - revise the rootdn plugin configuration validation
- Ticket 47451 - dynamic plugins - fix crash caused by invalid  plugin config
- Ticket 48001 - ns-activate.pl fails to activate account if it was disabled on AD
2015-03-06 17:04:44 -08:00
Noriko Hosoi
ca094d38b7 bump version to 1.3.3.8
- Ticket 48001 - ns-activate.pl fails to activate account if it was disabled on AD
- Ticket 47963 - memberof skip nested groups breaks the plugin
2015-02-04 16:13:21 -08:00
Noriko Hosoi
e744861755 bump version to 1.3.3.7
- Coverity 12970 - Explicit null dereference
- Ticket 47988: Schema learning mechanism, in replication, unable to extend an existing definition
- Ticket 47996 - ldclt needs to support SSL Version range
- Ticket 47738 - use PL_strcasestr instead of strcasestr
- Ticket 47462 - Stop using DES in the reversible password  encryption plug-in
- Ticket 47807 - SLAPI_REQUESTOR_ISROOT not set for extended operation plugins
- Ticket 47991 - upgrade script fails if /etc and /var are on different file systems
- Ticket 47989 - Windows Sync accidentally cleared raw_entry
- Ticket 47964 - v2 - Incorrect search result after replacing an empty attribute
- Ticket 47934 - nsslapd-db-locks modify not taking into account.
- Ticket 47617 - replication changelog trimming setting validation
- Ticket 47905 - Bad manipulation of passwordhistory
- Ticket 47973 - During schema reload sometimes the search returns no results
- Ticket 47981 - COS cache doesn't properly mark vattr cache as  invalid when there are multiple suffixes
- Ticket 47980 - Nested COS definitions can be incorrectly  processed
- Ticket 47451 - Dynamic plugins - fixed thread synchronization
- Ticket 47750 - During delete operation do not refresh cache entry if it is a tombstone
- Ticket 47947 - start dirsrv after chrony on RHEL7 and Fedora
- fix jenkins warning
- Ticket 47526 - Additional fix for ticket 47526 v3
- Ticket 47451 - Add Dynamic Plugin CI Suite
- Ticket 47965 - Fix coverity issues (2014/12/16)
- Ticket 47451 - Fix jenkins errors
- Ticket 47451 - Dynamic Plugin - various fixes
- Ticket 47935 - Error: failed to open an LDAP connection to host 'example.org' port '389' as user 'cn=Directory Manager'. Error: unknown.
- Ticket 47750 - Need to refresh cache entry after called betxn postop plugins
- Ticket 47942 -  DS hangs during online total update
- Ticket 47960 - cookie_change_info returns random negative number if there was no change in a tree
- Ticket 47960 - cookie_change_info returns random negative number if there was no change in a tree
- Ticket 47722 - Using the filter file does not work
- Ticket 47636 - Error log levels not displayed correctly
- Ticket 47965 - Fix coverity issues (2014/11/24)
- Ticket 47969 - Fix coverity issue
- Ticket 47949 - logconv.pl -- support parsing/showing/reporting different protocol versions
- Ticket 47525 - Crash if setting invalid plugin config area for MemberOf Plugin
- Ticket 47970 - add lib389 testcase
- Ticket 47970 - Account lockout attributes incorrectly updated after failed SASL Bind
- Ticket 47969 - COS memory leak when rebuilding the cache
- Ticket 47967 - cos_cache_build_definition_list does not stop during server shutdown
- Ticket 47451 - Running a plugin task can crash the server
- Ticket 47963 - skip nested groups breaks memberof fixup task
- Ticket 47963 - RFE - memberOf - add option to skip nested  group lookups during delete operations
- Ticket 47810 - RI plugin does not return result code if update fails
2015-01-28 12:39:01 -08:00
Mark Reynolds
4dcce66a33 5d72a2f bump version to 1.3.3.6-1
- Ticket 47950 - Bind DN tracking unable to write to internalModifiersName without special permissions
- Ticket 47958 - Memory leak in password admin if the admin entry does not exist
- Ticket 47952 - PasswordAdminDN attribute is not properly returned to client
- Ticket 47451 - Need to unregister tasks created by plugins
- Ticket 47928 - Disable SSL v3, by default.
- Ticket 47953 - Should not check aci syntax when deleting an aci
- Ticket 47948 - ldap_sasl_bind fails assertion (ld != NULL) if it is called from chainingdb_bind over SSL/startTLS
- Ticket 47945 - Add SSL/TLS version info to the access log
- Ticket 47939 - Malformed cookie for LDAP Sync makes DS crash
- Ticket 47937 - Crash in entry_add_present_values_wsi_multi_valued
- Ticket 47928 - CI test: added test cases for ticket 47928
- Ticket 47553 - Enhance ACIs to have more control over MODRDN operations
2014-11-20 11:55:48 -05:00
Noriko Hosoi
29e8ae027b Release 1.3.3.5
- Ticket 47914 - Add FreeIPA Conflicts to 389 spec file
- Ticket 47922 - dynamically added macro aci is not evaluated on the fly
- Ticket 47897 - Need to move slapi_pblock_set(pb, SLAPI_MODRDN_EXISTING_ENTRY, original_entry->ep_entry) prior to original_entry overwritten
- Ticket 47920 - Encoding of SearchResultEntry is missing tag
- Ticket 47912 - Proper handling of "No original_tombstone for changenumber" errors
- Ticket 47899 - Fix slapi_td_plugin_lock_init prototype
- Ticket 47919 - ldbm_back_modify SLAPI_PLUGIN_BE_PRE_MODIFY_FN does not return even if one of the preop plugins fails.
- Ticket 47892 - Fix remaining compiler warnings
- ticket 47916 - plugin logging parameter only triggers result logging
- Ticket 47918 - result of dna_dn_is_shared_config is incorrectly used
- Ticket 47900 - Server fails to start if password admin is set
- Ticket 47892 - coverity defects found in 1.3.3.x
2014-10-16 10:27:05 -07:00
Noriko Hosoi
7b3521eed1 Release 1.3.3.4
- Ticket 47880 - CI test: added test cases for ticket 47880
- Ticket 47880 - provide enabled ciphers as search result
- Ticket 47838 - CI test: adjusted test cases based on the phase 2 fixes for ticket 47838
- Ticket 47838 - harden the list of ciphers available by default (phase 2)
- Ticket 47900 - Adding an entry with an invalid password as rootDN is incorrectly rejected
- Ticket 47908 - 389-ds 1.3.3.0 does not adjust cipher suite configuration on upgrade, breaks itself and pki-server
- Ticket 47907 - ldclt: assertion failure with -e "add,counteach" -e "object=<ldif file>,rdn=uid:test[A=INCRNNOLOOP(0;24
- Ticket 47750 - Creating a glue fails if one above level is a conflict or missing
2014-10-16 10:26:50 -07:00
Rich Megginson
1e277f6ab3 the 1.3.3.3 release 2014-09-12 15:28:26 -06:00
Nathan Kinder
ab24bed11e Release 1.3.3.2
- Ticket 47889 - DS crashed during ipa-server-install on test_ava_filter
- Ticket 47895 - If no effective ciphers are available, disable security setting.
- Ticket 47838 - harden the list of ciphers available by default
- Ticket 47885 - did not always return a response control
- Ticket 47890 - minor memory leaks in utilities
- Ticket 47834 - Tombstone_to_glue: if parents are also converted to glue, the target entry's DN must be adjusted.
- Ticket 47748 - Simultaneous adding a user and binding as the user could fail in the password policy check
- Ticket 47875 - dirsrv not running with old openldap
- Ticket 47885 - deref plugin should not return references with noc access rights
2014-09-12 09:59:41 -07:00
Noriko Hosoi
24b1e9cd81 - Release 1.3.3.0
- Ticket 47879 - coverity defects in plugins/replication/windows_protocol_util.c
- Ticket 47876 - coverity defects in slapd/tools/mmldif.c
- Ticket 47574 - start dirsrv after ntpd
- Ticket 47838 - harden the list of ciphers available by default
- Ticket 47579 - add dbmon.sh
- Ticket 47819 - Fix memory leak
- Ticket 47819 - Improve tombstone purging performance
- Ticket 47714 - [RFE] Update lastLoginTime also in Account Policy plugin if account lockout is based on passwordExpirationTime.
- Ticket 47812 - logconv.pl missing -U option from usage
- Ticket 47664 - Page control does not work if effective rights control is specified
- Ticket 47790 - Integer config attributes accept invalid  values at server startup
- Ticket 47710 - Missing warning for invalid replica backoff configuration
- Ticket 47853 - Missing newline at end of the error log messages in memberof
- Ticket 47853 - client hangs in add if memberof fails
- Ticket 47746 - ldap/servers/slapd/back-ldbm/dblayer.c: possible minor problem with sscanf
- Ticket 47711 - improve dbgen rdn generation, output and man page.
- Ticket 47855 - Fix previous commit
- Ticket 47859 - Coverity: 12692 & 12717
- Ticket 47855 - clear tmp directory at the start of each test
- Ticket 47844 - Fix hyphens used as minus signed and other manpage mistakes
- Ticket 47843 - Fix various typos in manpages & code
- Ticket 47832 - attrcrypt_generate_key calls slapd_pk11_TokenKeyGenWithFlags with improper macro
- Ticket 47852 - Updating winsync one-way sync does not affect the behaviour dynamically
- Ticket 47846 - server crashes deleting a replication agreement
- Ticket 47823 - attribute uniqueness enforced on all subtrees
- Ticket 47654 - Fix regression (deadlock/crash)
- Ticket 47827 - Fix coverity issue 12695
- Ticket 47829: memberof scope: allow to exclude subtrees
- Ticket 47815 - Add operations rejected by betxn plugins remain in cache
- Ticket 47808 - If be_txn plugin fails in ldbm_back_add, adding entry is double freed
- Ticket 555   - add fixup-memberuid.pl script
- Ticket 47827 - online import crashes server if using verbose error logging
- fix compiler error with alst coverity commit
- fix coverity issue 12621
- Ticket 47810 - investigate betxn plugins to ensure they  return the correct error code
- Ticket 47602 - txn commit being performed too early
- Ticket 47752 - Don't add unhashed password mod if we don't have an unhashed value
- Ticket 47803 - syncrepl crash if attribute list is non-empty
- Ticket 47466 - Fix coverity issue
- Ticket 47644 - Managed Entry Plugin - transaction not aborted upon failure to create managed entry
- Ticket 47791 - Negative value of nsSaslMapPriority is not  reset to lowest priority
- Ticket 47805 - syncrepl doesn't send notification when attribute in search filter changes
- Ticket 47636 - errorlog-level 16384 is listed as 0 in cn=config
- Ticket 47451 - Remove old code from linked attr plugin
- Ticket 47756 - fix coverity issues
- Ticket 47761 - Return all attributes in rootdse without explicit request
- fix assertion failure introduced with fix for ticket 47667
- Ticket 47712 - betxn: retro changelog broken after cancelled transaction
- Ticket 47667 - Allow nsDS5ReplicaBindDN to be a group DN
- Ticket 47655 - Improve replication total update logging
- Ticket 47756 - Improve import logging and abort processing
- Ticket 47451 - add/enable/disable/remove plugins without server restart
- Ticket 47553 - Enhance ACIs to have more control over MODRDN operations
- Ticket 47727 - Updating nsds5ReplicaHost attribute in a replication agreement fails with error 53
- Ticket 47725 - compiler error on daemon.c
- Ticket 47701 - Make retro changelog trim interval programmable
- Ticket 47453 - configure SASL/GSSAPI/Kerberos without server restart
- Ticket 47701 - Make retro changelog trim interval programmable
- Ticket 47602 - Make ldbm_back_seq independently support transactions
- Ticket 47552 - logconv: unindexed report should list bind dn
- Ticket 47619 - cannot reindex retrochangelog
- Update test cases due to new modules: Schema, tasks, plugins and index
- Ticket 47608 - change slapi_entry_attr_get_bool to handle "on"/"off" values, support default value
- Ticket 47437 - Some attributes in cn=config should not be multivalued
- Ticket 47573 - schema push can be erronously prevented
- Ticket 47618 - Enable normalized DN cache by default
- Ticket 47570 - slapi_ldap_init unusable during independent plugin development
- Ticket 47659 - ldbm_usn_init: Valgrind reports Invalid read / SIGSEGV
- Ticket 47654 - fix double free
- Ticket 47675 - logconv errors when search has invalid bind dn
- Ticket 47657 - add schema test suite and tests for Ticket #47634
- Ticket 47668 - test: port ticket47490_test to Replica/Agreement interface (47600)
- Ticket 47654 - Cleanup old memory leaks reported from valgrind
- Ticket 47651 - Finaliser to remove instances backups
- Ticket 47603 - should not modify pre op entry during config validation
- Ticket 47628 - port testcases to new DirSrv interface
- Ticket 47525 - Don't modify preop entry in memberOf config
- Ticket 605   - support TLS 1.1 - Fixing "Coverity 12415 - Logically dead code"
- Ticket 605   - support TLS 1.1 - lower the log level for the supported NSS version range
- Ticket 47368 - fix memory leaks
- Ticket 605   - support TLS 1.1 - adding backward compatibility
- Ticket 605   - support TLS 1.1
- Ticket 47603 - Allow RI plugin to use alternate config area
- Ticket 47586 - Need to rebind after a stop (fix to run direct python script)
- Ticket 47525 - Need to add locking around config area access
- Ticket 47457 - default nsslapd-sasl-max-buffer-size should be 2MB
- Ticket 47525 - Fix memory leak
- Ticket 381   - Recognize compressed log files
- Ticket 47525 - Allow memberOf to use an alternate config area
- Ticket 47529 - Automember plug-in should treat MODRDN operations as ADD operations
- Ticket 47521 - Complex filter in a search request doen't work as expected.
- Ticket 47582 - agmt_count in Replica could become (PRUint64)-1
- Ticket 47368 - Fix coverity issues
- Ticket 47555 - db2bak.pl issue when specifying non-default directory
- Ticket 47368 - Fix Jenkins errors
- Ticket 47368 - IPA server dirsrv RUV entry data excluded from replication
- Ticket 538   - - hardcoded sasl2 plugin path in ldaputil.c, saslbind.c
- Ticket 47519 - memory leaks in access control
- Ticket 47398 - memberOf on a user is converted to lowercase
- Coverity Issue 12033
- Ticket 47530 - dbscan on entryrdn should show all matching values
- Ticket 47422 - With 1.3.04 and subtree-renaming OFF, when a user is deleted after restarting the server, the same entry can't be added
- bump autoconf to 2.69, automake to 1.13.4, libtool to 2.4.2
- Ticket 47436 - 389-ds-base - shebang with /usr/bin/env
- Ticket 47499 - if nsslapd-cachememsize set to the number larger than the RAM available, should result in proper error message.
- Ticket 47530 - dbscan on entryrdn should show all matching values
- Ticket 47535 - update man page
- Ticket 53    - Need to update supported locales Cleaning up typos and format.
- Ticket 47535 - Logconv.pl - RFE - add on option for a minimum etime for unindexed search stats
- Ticket 47491 - Update systemd service file to use PartOf directive
2014-09-03 12:34:06 -07:00
Noriko Hosoi
19a3cd4322 Release 1.3.2.23
- Ticket 47871 - 389-ds-base-1.3.2.21-1.fc20 crashed over the weekend
- Ticket 47866 - Errors after upgrading related to attribute "dnaremotebindmethod"
- Ticket 47816 - v2- internal syncrepl searches are flagged as unindexed
- Ticket 47877 - check_and_add_entry fails for changetype: add and existing entry
- Ticket 47834 - Tombstone_to_glue: if parents are also converted to glue, the target entry's DN must be adjusted.
- Ticket 47875 - dirsrv not running with old openldap
- Revert "Ticket #47875 - dirsrv not running with old openldap"
- Ticket 47875 - dirsrv not running with old openldap
- Ticket 47446 - logconv.pl memory continually grows
- Ticket 47874 - Performance degradation with scope ONE after some load
- Ticket 47872 - Filter AND with only one clause should be optimized
- Ticket 47834 - Tombstone_to_glue: if parents are also converted to glue, the target entry's DN must be adjusted.
- Ticket 47862 - repl-monitor fails to convert "*" to default values
- Ticket 47824 - paged results control is not working in some cases when we have a subsuffix.
- Ticket 47862 - Repl-monitor.pl ignores the provided connection parameters
- Ticket 346   - Fixing memory leaks
- Ticket 47753 - Add switch to disable pre-hashed password checking
- Ticket 47861 - Certain schema files are not replaced during upgrade
- Ticket 47858 - Internal searches using OP_FLAG_REVERSE_CANDIDATE_ORDER can crash the server
- Ticket 47797 - fix the indentation
- Ticket 47797 - DB deadlock when two threads (on separated backend) try to record changes in retroCL
- Ticket 47692 - single valued attribute replicated ADD does not work
- Ticket 47781 - Server deadlock if online import started while  server is under load
2014-08-27 14:32:52 -07:00
Noriko Hosoi
4c1bc37318 Release 1.3.2.21
- Resolves: #1127833
            Ticket 47869 - unauthenticated information disclosure (Bug 1123477)
  389-ds-base-1.3.2.22 = 389-ds-base-1.3.2.19 + Bug 1127833 fix.
2014-08-12 10:46:07 -07:00
Noriko Hosoi
3da5908190 Release 1.3.2.21
- Resolves: #1127833
            Ticket 47869 - unauthenticated information disclosure (Bug 1123477)
- Ticket 47834 - Tombstone_to_glue: if parents are also converted to glue, the target entry's DN must be adjusted.
- Ticket 47862 - repl-monitor fails to convert "*" to default values
- Ticket 47824 - paged results control is not working in some cases when we have a subsuffix.
- Ticket 47862 - Repl-monitor.pl ignores the provided connection parameters
- Ticket 346   - Fixing memory leaks
2014-08-07 11:28:29 -07:00
Noriko Hosoi
ec0b9f6e29 Release 1.3.2.20
- Ticket 47753 - Add switch to disable pre-hashed password checking
- Ticket 47861 - Certain schema files are not replaced during upgrade
- Ticket 47858 - Internal searches using OP_FLAG_REVERSE_CANDIDATE_ORDER can crash the server
- Ticket 47797 - DB deadlock when two threads (on separated backend) try to record changes in retroCL
- Ticket 47834 - Tombstone_to_glue: if parents are also converted to glue, the target entry's DN must be adjusted.
- Ticket 47692 - single valued attribute replicated ADD does not work
- Ticket 47781 - Server deadlock if online import started while  server is under load
2014-07-22 16:13:26 -07:00
Noriko Hosoi
03fb7d576d Release 1.3.2.19
- Ticket 47779 - Potential deadlock after startup if a dna configuration change is made
- Ticket 47839 - 389-ds production segfault: __memcpy_sse2_unaligned...
2014-07-03 10:28:43 -07:00
Noriko Hosoi
512d6f4fff Release 1.3.2.18
- Ticket 47750 - Creating a glue fails if one above level is a conflict or missing
- Ticket 47763 - winsync plugin modify is broken
- Ticket 47821 - deref plugin cannot handle complex acis
- Ticket 47831 - server restart wipes out index config if there is a default index
- Ticket 47817 - The error result text message should be obtained just prior to sending result
- Ticket 47815 - Add operations rejected by betxn plugins remain in cache
- Ticket 47809 - find a way to remove replication plugin errors messages "changelog iteration code returned a dummy entry with csn %s, skipping ..."
- Ticket 47704 - invalid sizelimits in aci group evaluation
- Ticket 47813 - remove "goto bail" from previous commit
- Ticket 47813 - managed entry plugin fails to update member  pointer on modrdn operation
- Ticket 47808 - If be_txn plugin fails in ldbm_back_add, adding entry is double freed.
- Ticket 47770 - #481 breaks possibility to reassemble memberuid list
2014-07-01 15:04:56 -07:00
Noriko Hosoi
bb10c7be3b Release 1.3.2.17
- Ticket 47446 - logconv.pl memory continually grows
- Ticket 47713 - Logconv.pl with an empty access log gives lots of errors
- Ticket 47806 - Failed deletion of aci: no such attribute
- bump version
- Ticket 47720 - Normalization from old DN format to New DN format doesnt handel condition properly when there is space in a suffix after the seperator operator.
- Ticket 47670 - Aci warnings in error log
- Ticket 47721 - Schema Replication Issue (follow up)
- Ticket 47721 - Schema Replication Issue (follow up + cleanup)
- Ticket 47721 - Schema Replication Issue
- Ticket 47676 - (cont.) Replication of the schema fails 'master branch' -> 1.2.11 or 1.3.1
- Ticket 47676 - Replication of the schema fails 'master branch' -> 1.2.11 or 1.3.1
- Ticket 47541 - Fix Jenkins errors
- Ticket 47541 - Replication of the schema may overwrite  consumer 'attributetypes' even if  consumer definition is a superset
- Ticket 47804 - db2bak.pl error with changelogdb
- Ticket 47780 - Some VLV search request causes memory leaks
- Ticket 47787 - A replicated MOD fails (Unwilling to perform) if it targets a tombstone
- Ticket 47764 - Problem with deletion while replicated
- Ticket 47750 - Creating a glue fails if one above level is a conflict or missing; Ticket 47696 - Large Searches Hang - Possibly entryrdn related
- Ticket 47772 - fix coverity issue
- Ticket 47793 - Server crashes if uniqueMember is invalid syntax and memberOf plugin is enabled.
- Ticket 47792 - database plugins need a way to call betxn  plugins
- Ticket 47707 - 389 DS Server crashes and dies while handles paged searches from clients
- Ticket 47792 - code cleanup
- Ticket 47779 - Need to lock server list when removing list
- Ticket 47771 - Move parentsdn initialization to avoid crash
- Ticket 47779 - Part of DNA shared configuration is deleted after server restart
- Ticket 346   - Slow ldapmodify operation time for large quantities of multi-valued attribute values
- Ticket 47782 - Parent numbordinate count can be incorrectly updated if an error occurs
- Ticket 47772 - empty modify returns LDAP_INVALID_DN_SYNTAX
- Ticket 47774 - mem leak in do_search - rawbase not freed upon certain errors
- Ticket 47773 - mem leak in do_bind when there is an error
- Ticket 47771 - Performing deletes during tombstone purging results in operation errors
- Ticket 47767 - Nested tombstones become orphaned after purge
- Ticket 47766 - Tombstone purging can crash the server if the backend is stopped/disabled
- Ticket 47759 - Crash in replication when server is under write load
- Ticket 47740 - Fix coverity issues(part 7)
- Ticket 47748 - Simultaneous adding a user and binding as the user could fail in the password policy check
- Ticket 47743 - Memory leak with proxy auth control
- Ticket 47740 - Crash caused by changes to certmap.c
- Ticket 47733 - ds logs many "Operation error fetching Null DN" messages
- Ticket 47740 - Fix coverity issues: null deferences - Part 6
- Ticket 47732 - ds logs many "SLAPI_PLUGIN_BE_TXN_POST_DELETE_FN plugin returned error" messages
- Ticket 47740 - Coverity issue in 1.3.3
- Ticket 47735 - e_uniqueid fails to set if an entry is a conflict entry
- Ticket 47740 - Fix coverity issues - Part 5
- Ticket 47740 - Fix coverity erorrs - Part 4
- Ticket 47640 - Fix coverity issues - part 3
- Ticket 47740 - Fix sync plugin resource leaks
- Ticket 47538 - RFE: repl-monitor.pl plain text output, cmdline config options
- Ticket 47740 - Coverity Fixes (Mark - part 1)
- Ticket 47734 - Change made in resolving ticket #346 fails on Debian SPARC64
- Ticket 47722 - Fixed filter not correctly identified
- Ticket 47722 - rsearch filter error on any search filter
2014-05-29 11:09:19 -07:00
Noriko Hosoi
c8a32cd25d Release 1.3.2.16 (This release is 1.3.2.13 + Ticket 47739)
- Ticket 47739 - directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind
2014-03-14 09:53:41 -07:00
Noriko Hosoi
0a2491db51 Bump version to 1.3.2.15
- Ticket 47735 - e_uniqueid fails to set if an entry is a conflict entry
- Ticket 47740 - Coverity issue in 1.3.3
- Ticket 47740 - Fix coverity issues - Part 5
- Ticket 47740 - Fix coverity erorrs - Part 4
- Ticket 47640 - Fix coverity issues - part 3
- Ticket 47740 - Fix sync plugin resource leaks
- Ticket 47538 - RFE: repl-monitor.pl plain text output, cmdline config options
- Ticket 47740 - Coverity Fixes (Mark - part 1)
- Ticket 47734 - Change made in resolving ticket #346 fails on Debian SPARC64
- Ticket 47722 - Fixed filter not correctly identified
- Ticket 47722 - rsearch filter error on any search filter
2014-03-13 17:57:30 -07:00
Noriko Hosoi
695c48eca6 Bump version to 1.3.2.14
- Ticket 47739 - directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind
- Ticket 47737 - Under heavy stress, failure of turning a tombstone into glue makes the server hung
- Ticket 47735 - e_uniqueid fails to set if an entry is a conflict entry
- Ticket 47729 - Directory Server crashes if shutdown during a replication initialization
- Ticket 47637 - rsa_null_sha should not be enabled by default
2014-03-10 18:40:12 -07:00
Noriko Hosoi
4b88ef31e9 Bump version to 1.3.2.13
- The previous version 1.3.2.12 missed to increment the version in VERSION.sh
2014-02-28 12:37:35 -08:00