389-ds-3.1.1~git13.a9c7ff9-2.1 RPM for x86_64

From OpenSuSE Tumbleweed for x86_64

389 Directory Server is a full-featured LDAPv3 compliant server. In
addition to the standard LDAPv3 operations, it supports multi-master
replication, fully online configuration and administration, chaining,
virtual attributes, access control directives in the data, Virtual
List View, server-side sorting, SASL, TLS/SSL, and many other
features. (The server started out as Netscape Directory Server.)

Provides

• 389-ds
• 389-ds(x86-64)
• 389-ds-base
• config(389-ds)
• group(dirsrv)
• libacctpolicy-plugin.so()(64bit)
• libacctusability-plugin.so()(64bit)
• libacl-plugin.so()(64bit)
• libaddn-plugin.so()(64bit)
• libalias-entries-plugin.so()(64bit)
• libattr-unique-plugin.so()(64bit)
• libautomember-plugin.so()(64bit)
• libback-ldbm.so()(64bit)
• libbitwise-plugin.so()(64bit)
• libchainingdb-plugin.so()(64bit)
• libcollation-plugin.so()(64bit)
• libcontentsync-plugin.so()(64bit)
• libcos-plugin.so()(64bit)
• libderef-plugin.so()(64bit)
• libdistrib-plugin.so()(64bit)
• libdna-plugin.so()(64bit)
• libentryuuid-plugin.so()(64bit)
• libentryuuid-syntax-plugin.so()(64bit)
• libldaputil.so.0()(64bit)
• liblinkedattrs-plugin.so()(64bit)
• libmanagedentries-plugin.so()(64bit)
• libmemberof-plugin.so()(64bit)
• libns-dshttpd.so.0()(64bit)
• libpam-passthru-plugin.so()(64bit)
• libpassthru-plugin.so()(64bit)
• libpbe-plugin.so()(64bit)
• libposix-winsync-plugin.so()(64bit)
• libpwdchan-plugin.so()(64bit)
• libpwdstorage-plugin.so()(64bit)
• libreferint-plugin.so()(64bit)
• libreplication-plugin.so()(64bit)
• libretrocl-plugin.so()(64bit)
• librewriters.so.0()(64bit)
• libroles-plugin.so()(64bit)
• librootdn-access-plugin.so()(64bit)
• libschemareload-plugin.so()(64bit)
• libslapd.so.0()(64bit)
• libstatechange-plugin.so()(64bit)
• libsyntax-plugin.so()(64bit)
• libusn-plugin.so()(64bit)
• libviews-plugin.so()(64bit)
• libwhoami-plugin.so()(64bit)
• user(dirsrv)

Requires

• /bin/sh
• /bin/sh
• /bin/sh
• /bin/sh
• /bin/sh
• /bin/sh
• /usr/bin/perl
• /usr/bin/python3.11
• /usr/sbin/service
• acl
• config(389-ds) = 3.1.1~git13.a9c7ff9-2.1
• cyrus-sasl-plain
• db-utils
• fillup
• group(dirsrv)
• krb5
• ld-linux-x86-64.so.2()(64bit)
• ld-linux-x86-64.so.2(GLIBC_2.3)(64bit)
• lib389 = 3.1.1~git13.a9c7ff9
• libback-ldbm.so()(64bit)
• libc.so.6()(64bit)
• libc.so.6(GLIBC_2.10)(64bit)
• libc.so.6(GLIBC_2.14)(64bit)
• libc.so.6(GLIBC_2.15)(64bit)
• libc.so.6(GLIBC_2.16)(64bit)
• libc.so.6(GLIBC_2.17)(64bit)
• libc.so.6(GLIBC_2.18)(64bit)
• libc.so.6(GLIBC_2.2.5)(64bit)
• libc.so.6(GLIBC_2.25)(64bit)
• libc.so.6(GLIBC_2.27)(64bit)
• libc.so.6(GLIBC_2.28)(64bit)
• libc.so.6(GLIBC_2.29)(64bit)
• libc.so.6(GLIBC_2.3)(64bit)
• libc.so.6(GLIBC_2.3.2)(64bit)
• libc.so.6(GLIBC_2.3.4)(64bit)
• libc.so.6(GLIBC_2.30)(64bit)
• libc.so.6(GLIBC_2.32)(64bit)
• libc.so.6(GLIBC_2.33)(64bit)
• libc.so.6(GLIBC_2.34)(64bit)
• libc.so.6(GLIBC_2.38)(64bit)
• libc.so.6(GLIBC_2.39)(64bit)
• libc.so.6(GLIBC_2.4)(64bit)
• libc.so.6(GLIBC_2.5)(64bit)
• libc.so.6(GLIBC_2.6)(64bit)
• libc.so.6(GLIBC_2.8)(64bit)
• libc.so.6(GLIBC_2.9)(64bit)
• libcom_err.so.2()(64bit)
• libcrack.so.2()(64bit)
• libcrypt.so.1()(64bit)
• libcrypt.so.1(XCRYPT_2.0)(64bit)
• libcrypto.so.3()(64bit)
• libcrypto.so.3(OPENSSL_3.0.0)(64bit)
• libdb-4.8.so()(64bit)
• libgcc_s.so.1()(64bit)
• libgcc_s.so.1(GCC_3.0)(64bit)
• libgcc_s.so.1(GCC_3.3)(64bit)
• libgcc_s.so.1(GCC_4.2.0)(64bit)
• libicui18n.so.76()(64bit)
• libicuuc.so.76()(64bit)
• libjson-c.so.5()(64bit)
• libjson-c.so.5(JSONC_0.14)(64bit)
• libkrb5.so.3()(64bit)
• libkrb5.so.3(krb5_3_MIT)(64bit)
• liblber.so.2()(64bit)
• liblber.so.2(OPENLDAP_2.200)(64bit)
• libldap.so.2()(64bit)
• libldap.so.2(OPENLDAP_2.200)(64bit)
• libldaputil.so.0()(64bit)
• liblmdb-0.9.30.so()(64bit)
• libns-dshttpd.so.0()(64bit)
• libnspr4.so()(64bit)
• libnss3.so()(64bit)
• libnss3.so(NSS_3.10.2)(64bit)
• libnss3.so(NSS_3.12)(64bit)
• libnss3.so(NSS_3.15)(64bit)
• libnss3.so(NSS_3.2)(64bit)
• libnss3.so(NSS_3.3)(64bit)
• libnss3.so(NSS_3.4)(64bit)
• libnss3.so(NSS_3.6)(64bit)
• libnss3.so(NSS_3.9)(64bit)
• libnss3.so(NSS_3.9.2)(64bit)
• libpam.so.0()(64bit)
• libpam.so.0(LIBPAM_1.0)(64bit)
• libpcre2-8.so.0()(64bit)
• libplc4.so()(64bit)
• libplds4.so()(64bit)
• libsasl2.so.3()(64bit)
• libslapd.so.0()(64bit)
• libssl.so.3()(64bit)
• libssl.so.3(OPENSSL_3.0.0)(64bit)
• libssl3.so()(64bit)
• libssl3.so(NSS_3.12.6)(64bit)
• libssl3.so(NSS_3.14)(64bit)
• libssl3.so(NSS_3.2)(64bit)
• libssl3.so(NSS_3.20)(64bit)
• libssl3.so(NSS_3.4)(64bit)
• libssl3.so(NSS_3.7.4)(64bit)
• libsvrcore.so.0()(64bit)
• libsystemd.so.0()(64bit)
• libsystemd.so.0(LIBSYSTEMD_209)(64bit)
• libz.so.1()(64bit)
• permissions
• rpmlib(CompressedFileNames) <= 3.0.4-1
• rpmlib(FileDigests) <= 4.6.0-1
• rpmlib(PartialHardlinkSets) <= 4.0.4-1
• rpmlib(PayloadFilesHavePrefix) <= 4.0-1
• rpmlib(PayloadIsZstd) <= 5.4.18-1
• rpmlib(TildeInVersions) <= 4.10.0-1
• sysuser-shadow >= 3.2
• user(dirsrv)

License

GPL-3.0-or-later AND MPL-2.0

Changelog

* Thu Nov 21 2024 Dominique Leuenberger <dimstar@opensuse.org>
  - Add 389-ds-link-icu-uc.patch: properly link to icu-uc as well,
    which is no longer transparently added when linking icu-i18n
    (boo#1233578).
* Wed Sep 04 2024 william.brown@suse.com
  - bsc#1229948 - CVE-2024-43806 - rustix::fs::Dir iterator with the linux_raw backend can cause memory explosion
  - Update to version 3.1.1~git13.a9c7ff9:
    * Issue 2472 - Add a CI test (#6314)
    * Issue 6276 - Schema lib389 object is not keeping custom schema data upon editing (#6279)
    * Issue 3555 - UI - Fix audit issue with npm - micromatch (#6310)
    * Issue 5843 - Fix size formatting in dscreate output and enhance tests (#6309)
    * Issue 6301 - Fix long delay when setting replication agreement with dsconf (#6303)
    * Issue 6280 - Changelog trims updates from a given RID even if a consumer has not received any of them (#6281)
    * Issue 6296 - basic_test.py::test_conn_limits fails in main branch (#6300)
    * Issue 6295 - test_password_modify_non_utf8 should set default password storage scheme
    * Issue 6294 - Nightly copr builds are failing
    * Issue 6288 - dsidm crash with account policy when alt-state-attr is disabled (#6292)
    * Issue 2324 - Add a CI test (#6289)
    * Issue 6284 - BUG - freelist ordering causes high wtime (#6285)
    * Issue 6282 - BUG - out of tree build fails (#6283)
* Fri Aug 02 2024 Thorsten Kukuk <kukuk@suse.com>
  - dirsrv-user.conf: Remove explicit dirsrv group definition, it's
    already specified implicit with "u dirsrv" and not all tools like
    duplicate group entries.
* Wed Jul 31 2024 william.brown@suse.com
  - Update to version 3.1.1~git0.aef1668:
    * Bump version to 3.1.1
    * Issue 6256 - nsslapd-numlisteners limit is not enforced (#6257)
    * Issue 5327 - Fix test metadata
    * Security fix for CVE-2024-6237
    * Security fix for CVE-2024-5953
    * Security fix for CVE-2024-3657
    * Security fix for CVE-2024-2199
    * Issue 6256 - nsslapd-numlisteners limit is not enforced
    * Issue 6265 - lmdb - missing entries in range searches (#6266)
    * Issue 5853 - Update Cargo.lock
    * Bump openssl from 0.10.64 to 0.10.66 in /src
    * Issue 6245 - Revert __COVERITY__ ifndef (#6268)
    * Issue 6248 - fix fanalyzer warnings (#6253)
    * Issue 6238 - Fix test_audit_json_logging CI test regression (#6264)
    * Issue 6254 - Enabling replication for a sub suffix crashes browser (#6255)
    * Issue 6155 - ldap-agent fails to start because of permission error (#6179)
    * Issue 6238 - RFE - add option to write audit log in JSON format
    * Issue 6216 - CI test_fast_slow_import sometime fail (#6247)
    * Issue 6245 - covscan fixes (#6246)
    * Issue 6241 - Add support for CRYPT-YESCRYPT (#6242)
    * Issue 6229 - After an initial failure, subsequent online backups fail (#6230)
    * Issue 6236 - rpm: fix compatibility with RPM 4.20
    * Issue 6227 - dsconf schema does not show inChain matching rule (#6228)
    * Issue 6233 - CI test wait_for_async_feature_test sometime fails (#6234)
    * Bump ws from 7.5.9 to 7.5.10 in /src/cockpit/389-console
    * Issue 6224 - d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes (#6225)
    * Issue 6222 - CI test acl/test_timeofday_keyword sometime fails (#6223)
    * Issue 6120 - /usr/lib64/dirsrv/plugins/libback-bdb.so has an invalid-looking DT_RPATH: /usr/lib/dirsrv
    * Issue 5772 - ONE LEVEL search fails to return sub-suffixes (#6219)
    * Issue 6183 - Slow ldif2db import on a newly created BDB backend (#6208)
    * Issue 6207 - Random crash in test_long_rdn CI test (#6215)
    * Bump braces from 3.0.2 to 3.0.3 in /src/cockpit/389-console
    * Issue 6191 - Node.js 16 actions are deprecated
    * Issue 6199 - unprotected search query during certificate based authentication (#6205)
    * Issue 6200 - Disable WebUI CI tests
    * Issue 6192 - Test failure: test_match_large_valueset
    * Issue 6181 - RFE - Allow system to manage uid/gid at startup
    * Issue 6188 - Add nsslapd-haproxy-trusted-ip to cn=schema (#6201)
    * Issue 6181 - RFE - Allow system to manage uid/gid at startup (#6182)
    * Issue 6170 - audit log buffering doesn't handle large updates
    * Issue 6193 - Test failure: test_tls_command_returns_error_text
    * Issue 6177 - Spec file cleanup
    * Issue 6189 - CI tests fail with `[Errno 2] No such file or directory: '/var/cache/dnf/metadata_lock.pid'`
    * Issue 6175 - Referential integrity plugin - in referint_thread_func does not handle null from ldap_utf8strtok (#6168)
    * Change default salt sizes generated in crypt_pwd (#6185)
    * Issue 6123 - Allow DNA plugin to reuse global config for bind method and connection protocol (#6124)
    * Issue 6159 - Add a test to check URP add and delete conflict (#6160)
    * Issue 6151 - Use %bcond macro for conditional builds in the spec file
    * Issue 6172 - RFE: improve the performance of evaluation of filter component when tested against a large valueset (like group members) (#6173)
    * Bump version to 3.1.0
    * fix issue6165 (#6167)
* Tue May 14 2024 william.brown@suse.com
  - Update to version 3.0.1~git39.e24615f:
    * Issue 6142 - Fix CI tests (#6161)
    * Issue 6157 - Cockipt crashes when getting replication status if topology contains an old 389ds version (#6158)
* Tue Apr 23 2024 william.brown@suse.com
  - Update to version 3.0.1~git37.55529d1:
    * Issue 6082 - Remove explicit dependencies toward libdb - revert default (#6145)
    * Issue 6141 - freeipa test_topology_TestCASpecificRUVs is failing (#6144)
    * Issue 6142 - [RFE] Add LMDB configuration related checks into Healthcheck tool (#6143)
    * Issue 6136 - failure in freeipa tests (#6137)
    * Issue 6133 - Move slapi_pblock_set_flag_operation_notes() to slapi-plugin.h
    * Issue 5105 - lmdb - Cannot create entries with long rdn - fix covscan (#6131)
    * Issue i6057 - Fix3 - Fix covscan issues (#6127)
    * Issue 6105 - lmdb - Cannot create entries with long rdn (#6130)
    * Issue 6125 - dscreate interactive fails when chosing mdb backend (#6126)
    * Issue 6080 - ns-slapd crash in referint_get_config (#6081)
    * Issue 6110 - Typo in Account Policy plugin message
    * Issue 6057 - vlv search may result wrong result with lmdb - Fix 2 (#6121)
    * Issue 6119 - Synchronise accept_thread with slapd_daemon (#6120)
    * Issue 6117 - Fix the UTC offset print (#6118)
    * Issue 6112 - RFE - add new operation note for MFA authentications
    * Issue 5842 - Add log buffering to audit log
    * Issue 5305 - OpenLDAP version autodetection doesn't work
    * Issue 3527 - Support HAProxy and Instance on the same machine configuration (#6107)
    * Issue 6057 - vlv search may result wrong result with lmdb (#6091)
    * Issue 6103 - New connection timeout error breaks errormap (#6104)
    * Issue 6086 - Ambiguous warning about SELinux in dscreate for non-root user
    * Issue 6092 - passwordHistory is not updated with a pre-hashed password (#6093)
    * Issue 6067 - Improve dsidm CLI No Such Entry handling (#6079)
    * Issue 6096 - Improve connection timeout error logging (#6097)
    * Issue 5647 - covscan: memory leak in audit log when adding entries
    * Issue 6094 - Add coverity scan workflow
    * Issue 6067 - Add hidden -v and -j options to each CLI subcommand (#6088)
    * Issue 5487 - Fix various isses with logconv.pl (#6085)
    * Issue 5962 - Rearrange includes for 32-bit support logic
    * Issue 6046 - Make dscreate to work during kickstart installations
    * Issue 6082 - Remove explicit dependencies toward libdb (#6083)
    * Issue 6073 - Improve error log when running out of memory (#6084)
    * Issue 6071 - Instance creation/removal is slow
    * Issue 6010 - 389 ds ignores nsslapd-maxdescriptors (#6027)
    * Issue 6075 - Ignore build artifacts (#6076)
    * Issue 6068 - Add dscontainer stop function
* Fri Feb 02 2024 william.brown@suse.com
  - Update to version 3.0.1~git1.1f95b57:
    * Issue 6061 - Certificate lifetime displayed as NaN
    * Bump version to 3.0.1
    * Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
    * Issue 3555 - Remove audit-ci from dependencies (#6056)
    * Issue 6052 - Paged results test sets hostname to `localhost` on test collection
    * Issue 6051 - Drop unused pytest markers
    * Issue 6049 - lmdb - changelog is wrongly recreated by reindex task (#6050)
    * Issue 6047 - Add a check for tagged commits
    * Issue 6041 - dscreate ds-root - accepts relative path (#6042)
    * Switch default backend to lmdb and bump version to 3.0 (#6013)
    * Issue 6032 - Replication broken after backup restore (#6035)
    * Issue 6037 - Server crash at startup in vlvIndex_delete (#6038)
    * Issue 6034 - Change replica_id from str to int
* Wed Jan 17 2024 william.brown@suse.com
  - Update to version 2.4.0~git126.5936946:
    * Issue 6028 - vlv index keys inconsistencies (#6031)
    * Issue 5989 - RFE support of inChain Matching Rule (#5990)
    * Issue 6022 - lmdb inconsistency between vlv index and vlv cache names (#6026)
    * Issue 6015 - Fix typo remeber (#6014)
    * Issue 6016 - Pin upload/download artifacts action to v3
    * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
    * Issue 4673 - Update Rust crates
    * Issue 6004 - idletimeout may be ignored (#6005)
    * Issue 5954 - Disable Transparent Huge Pages
    * Issue 5997 - test_inactivty_and_expiration CI testcase is wrong (#5999)
    * Issue 5993 - Fix several race condition around CI tests (#5996)
    * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
    * Bump openssl from 0.10.55 to 0.10.60 in /src (#5995)
* Wed Dec 13 2023 William Brown <william.brown@suse.com>
  - Update to support newer obs-service-cargo-vendor
* Wed Nov 29 2023 william.brown@suse.com
  - Update to version 2.4.0~git113.84a845c:
    * Issue 5980 - Improve instance startup failure handling (#5991)
    * Issue 5976 - Fix freeipa install regression with lmdb (#5977)
    * Issue 5984 - Crash when paged result search are abandoned - fix2 (#5987)
    * Issue 5984 - Crash when paged result search are abandoned (#5985)
    * Issue 5947 - CI test_vlv_recreation_reindex fails on LMDB (#5979)
    * Bump version to 2.5.0
    * Issue 5971 - CLI - Fix password prompt for repl status (#5972)
    * Issue 5973 - Fix fedora cop RawHide builds (#5974)
    * Revert "Issue 5761 - Worker thread dynamic management (#5796)" (#5970)
    * Issue 5966 - CLI - Custom schema object is removed on a failed edit (#5967)
    * Issue 5786 - Update permissions for Release workflow
    * Issue 5960 - Subpackages should have more strict interdependencies
    * Issue 3555 - UI - Fix audit issue with npm - babel/traverse (#5959)
    * Issue 4843 - Fix dscreate create-template issue (#5950)
    * bugfix for --passwd-file not working on latest version (#5934)
    * Issue 5843 - dsconf / dscreate should be able to handle lmdb parameters (#5943)
    * Bump postcss from 8.4.24 to 8.4.31 in /src/cockpit/389-console (#5945)
    * Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
    * issue 5924 - ASAN server build crash when looping opening/closing connections (#5926)
    * Issue 1925 - Add a CI test (#5936)
    * Issue 5732 - Localizing Cockpit's 389ds Plugin using CockpitPoPlugin (#5764)
    * Issue 1870 - Add a CI test (#5929)
    * Issue 843 - Add a warning to slapi_valueset_add_value_ext (#5925)
    * Issue 5761 - Worker thread dynamic management (#5796)
    * Issue 1802 - Improve ldclt man page (#5928)
    * Issue 1456 - Add a CI test that verifies there is no issue (#5927)
    * Issue 1317 - Add a CI test (#5923)
    * Issue 1081 - CI - Add more tests for overwriting x-origin issue (#5815)
    * Issue 1115 - Add a CI test (#5913)
    * Issue 5848 - Fix condition and add a CI test (#5916)
    * Issue 5848 - Fix condition and add a CI test (#5916)
    * Issue 5914 - UI - server settings page validation improvements and db index fixes
    * Issue 5909 - Multi listener hang with 20k connections (#5917)
    * Issue 5902 - Fix previous commit regression (#5919)
    * pass instance correctly to ds_is_older (#5903)
    * Issue 5909 - Multi listener hang with 20k connections (#5910)
    * Issue 5722 - improve testcase (#5904)
    * Issue 5203 - outdated version in provided metadata for lib389
    * Bug Description:
* Mon Aug 14 2023 william.brown@suse.com
  - Update to version 2.4.0~git74.4297d88:
    * issue 5890 part 2 - Need a tester for testing multiple listening thread feature (#5897)
    * Issue i5846 - Crash when lmdb import is aborted (#5881)
    * Issue 5894 - lmdb import error fails with Could not store the entry (#5895)
    * Issue 5890 - Need a tester for testing multiple listening thread feature (#5891)
    * Issue 5082 - slugify: ModuleNotFoundError when running test cases
* Thu Aug 10 2023 Dominique Leuenberger <dimstar@opensuse.org>
  - Update to version 2.4.0~git69.89c2de5:
    * Issue 4551 - Part 2 - Fix build warning of previous PR (#5888)
    * Issue 5834 - AccountPolicyPlugin erroring for some users (#5866)
    * Issue 5872 - part 2 - fix is_dbi regression (#5887)
    * Issue 4758 - Add tests for WebUI
    * Issue 5848 - dsconf should prevent setting the replicaID for hub and consumer roles (#5849)
    * Issue 5883 - Remove connection mutex contention risk on autobind (#5886)
    * Issue 5872 - `dbscan()` in lib389 can return bytes
    * Bump version to 2.4.3
    * Issue 5729 - Memory leak in factory_create_extension (#5814)
    * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
* Wed May 24 2023 william.brown@suse.com
  - Update to version 2.4.0~git18.37ec5cd:
    * Issue 5751 - Cleanallruv task crashes on consumer (#5775)
    * Bump version to 2.4.1
    * Issue 5770 - RFE - Extend Password Adminstrators to allow skipping password info updates
    * Issue 5768 - CLI/UI - cert checks are too strict, and other issues
    * Issue 5722 - fix compilation warnings (#5771)
    * Issue 5765 - Improve installer selinux handling
    * Issue 152 - RFE - Add support for LDAP alias entries
    * Issue 5052 - BUG - Custom filters prevented entry deletion (#5060)
    * Issue 5752 - RFE - Provide a history for LastLoginTime (#5753)
    * Issue 5722 - RFE When a filter contains 'nsrole', improve response time by rewriting the filter (#5723)
* Wed Apr 26 2023 william.brown@suse.com
  - Update to version 2.4.0~git0.87efeb2:
    * Bump version to 2.4.0
    * Issue 5156 - RFE that implement slapi_memberof (#5694)
    * Issue 5734 - RFE - Exclude pwdFailureTime and ContextCSN (#5735)
    * Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727)
    * Issue 4758 - Add tests for WebUI
    * Issue 5718 - Memory leak in connection table (#5719)
    * Issue 5705 - Add config parameter to close client conns on failed bind (#5712)
    * Issue 4758 - Add tests for WebUI
    * Issue 5643 - Memory leak in entryrdn during delete (#5717)
    * Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
* Tue Apr 18 2023 pgajdos@suse.com
  - python-six is not required
* Tue Apr 11 2023 william.brown@suse.com
  - bsc#1210027 - apply upstream fix for setuptools
  - Update to version 2.3.2~git53.a01e230:
    * Issue 5705 - Add config parameter to close client conns on failed bind (#5712)
    * Issue 4758 - Add tests for WebUI
    * Issue 5643 - Memory leak in entryrdn during delete (#5717)
    * Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
    * Issue 5701 - CLI - Fix referral mode setting (#5708)
    * Bump openssl from 0.10.45 to 0.10.48 in /src (#5709)
    * Issue 5710 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (#5711)
    * Issue 5697 - Obsolete nsslapd-ldapimaprootdn attribute (#5698)
    * Issue 1081 - Stop schema replication from overwriting x-origin
    * Issue 4812 - Listener thread does not scale with a high num of established connections (#5706)
* Wed Mar 22 2023 william.brown@suse.com
  - Update to version 2.3.2~git44.5e4551e:
    * Issue 4812 - Listener thread does not scale with a high num of established connections (#5706)
    * Issue 4812 - Listener thread does not scale with a high num of established connections (#5681)
    * Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699)
    * Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692)
    * Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691)
    * Issue 5687 - UI - sensitive information disclosure
    * Issue 5661 - LMDB hangs while Rebuilding the replication changelog RUV (#5676)
    * Issue 5554 - Add more tests to security_basic_test suite
    * Issue 4583 - Update specfile to skip checks of ASAN builds
    * Issue 4758 - Add tests for WebUI
* Fri Oct 21 2022 william.brown@suse.com
  - Update to version 2.3.0~git22.8fedec0:
    * Issue 5495 - RFE - skip dds during migration. (#5496)
    * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
    * Issue 5368 - Retro Changelog trimming does not work (#5486)
    * Issue 5487 - Fix various issues with logconv.pl
    * Issue 5476 - RFE - add memberUid read aci by default (#5477)
    * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
    * Issue 5478 - Random crash in connection code during server shutdown (#5479)
    * Issue 3061 - RFE - Add password policy debug log level
    * Issue 5302 - Release tarballs don't contain cockpit webapp
    * Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264)
* Wed Sep 07 2022 william.brown@suse.com
  - Update to version 2.3.0~git0.3db81913e:
    * Bump version to 2.3.0
    * Issue 5012 - Migrate pcre to pcre2 - remove match limit
    * Update CI tests
    * Issue 5356 - Make Rust non-optional and update default password storage scheme
    * Issue 5012 - Migrate pcre to pcre2
    * Issue 5428 - Fix regression with nscpEntryWsi computation
    * Fix missing 'not' in description (closes #5423) (#5424)
    * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
    * Issue 3903 - fix repl keep alive event interval
    * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
* Wed Aug 10 2022 William Brown <william.brown@suse.com>
  - Update _constraints due to random build failures caused by OBS environmental
    issues that aren't out fault. (out of disk, systemic builder issues).
  - Add debugging about the environment to assist with OBS randomly failing
    in the future.
* Fri Jul 29 2022 william.brown@suse.com
  - Update to version 2.2.2~git11.f002e9e09:
    * Issue 5383 - UI - Various fixes and RFE's for UI
    * Issue 4656 - Remove problematic language from source code
    * Issue 5380 - Separate cleanAllRUV code into new file
    * Issue 5322 - optime & wtime on rejected connections is not properly set
    * Issue 5335 - RFE - Add Security Audit Log
    * Issue 5375 - CI - disable TLS hostname checking
    * Issue 981 Managed Entries betxnpreoperation - transaction not aborted on managed entry failure (#5369)
    * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
    * Issue 5371 - Update npm and cargo packages
    * Issue 3069 - Support ECDSA private keys for TLS (#5365)
* Wed Jul 06 2022 william.brown@suse.com
  - Update to version 2.2.2~git0.55e2c7ab3:
    * Bump version to 2.2.2
    * Issue 5221 - fix covscan (#5359)
    * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
    * Issue 5353 - CLI - dsconf backend export breaks with multiple backends
    * Issue 5346 - New connection table fails with ASAN failures (#5350)
    * Issue 5345 - BUG - openldap migration fails when ppolicy is active (#5347)
    * Issue 5323 - BUG - improve skipping of monitor db (#5340)
    * Issue 5329 - Improve replication extended op logging
    * Issue 5343 - Various improvements to winsync
    * Issue 4932 - CLI - add parser aliases to long arg names
* Mon May 30 2022 william.brown@suse.com
  - bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
    by Issue 5170.
  - Update to version 2.1.1~git22.faef73366:
    * Issue 5302 - Release tarballs don't contain cockpit webapp
    * Issue 5237 - audit-ci: Cannot convert undefined or null to object
    * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
    * Issue 4970 - Add support for recursively deleting subentries
    * Issue 5284 - Replication broken after password change (#5286)
    * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
    * Issue 5170 - RFE - Filter optimiser (#5171)
    * Issue 5276 - CLI - improve task handling
    * Issue 5273 - CLI - add arg completer for instance name
    * Issue 2893 - CLI - dscreate - add options for setting up replication
* Thu May 12 2022 William Brown <william.brown@suse.com>
  - Add missing devel library on zlib for log compression
  - Force openssl as libressl is not compatible with rust ssl needs
* Thu Apr 21 2022 william.brown@suse.com
  - bsc#1196526 - Add systemd override to correct ordering with krb components
  - Update to version 2.1.1~git13.beb382e1b:
    * Issue 2893 - CLI - dscreate - add options for setting up replication
    * Issue 4866 - CLI - when enabling replication set changelog trimming by default
    * Issue 5241 - UI - Add account locking missing functionality (#5251)
    * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
    * Issue 4904 - Fix various small issues
    * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
    * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
    * Issue 5210 - Python undefined names in lib389
    * Issue 5247 - BUG - Missing attributes in samba schema (#5248)
    * Issue 5242- Craft message may crash the server (#5243)
* Wed Apr 13 2022 william.brown@suse.com
  - Update to version 2.1.1~git8.d50340ba5:
    * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
    * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
    * Issue 5210 - Python undefined names in lib389
* Thu Apr 07 2022 william.brown@suse.com
  - Resolve bsc#1197896 - update samba schema to upstream latest
  - Update to version 2.1.1~git5.e988a3f55:
    * Issue 5247 - BUG - Missing attributes in samba schema (#5248)
* Thu Mar 31 2022 william.brown@suse.com
  - Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
  - Update to version 2.1.1~git4.b7f891097:
    * Issue 5242- Craft message may crash the server (#5243)
    * Issue 5234 - UI - rename Users and Groups tab
    * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
    * Issue 5227 - UI - No way to move back to Get Started step (#5233)
    * Bump version to 2.1.1
    * Issue 5230 - Race condition in RHDS disk monitoring functions
    * Issue 4299 - UI - Add CoS funtionality (#5196)
    * Issue 5225 - UI - impossible to manually set entry cache
    * Issue 5186 - UI - Fix SASL Mapping regex test feature
    * Issue 5221 - User with expired password can still login with full privledges
* Tue Mar 22 2022 william.brown@suse.com
  - Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
  - Update to version 2.0.14~git25.e6431d959:
    * Issue 5221 - User with expired password can still login with full privledges
    * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
    * Issue 5200 - dscontainer should use environment variables with DS_ prefix
    * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
    * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
    * Issue 5188 - UI - LDAP editor - add entry and group types
    * Issue 5184 - memberOf does not work correctly with multiple include scopes
    * Issue 5162 - BUG - error on importing chain files (#5164)
    * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
    * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)
* Wed Feb 02 2022 william.brown@suse.com
  - Update to version 2.0.14~git3.c9226ad90:
    * Issue 4299 - UI - fix minor issues with ldap editor (table view)
    * Issue 4299 - UI - fix minor issues with ldap editor
    * Issue 5103 - UI - Add support for TPR to web console (#5111)
  - Add improvements for suppor config to show certificate usage
* Tue Feb 01 2022 william.brown@suse.com
  - Update to version 2.0.14~git0.eccfa2af9:
    * Bump version to 2.0.14
    * Issue 5127 - ds_selinux_restorecon.sh: always exit 0
    * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
    * Issue 4992 - BUG - slapd.socket container fix (#4993)
    * Issue 5079 - BUG - multiple ways to specific primary (#5087)
    * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
    * Issue 5135 - UI - Disk monitoring threshold does update properly
* Tue Jan 25 2022 William Brown <william.brown@suse.com>
  - Update support config to latest version
* Tue Jan 25 2022 william.brown@suse.com
  - Update to version 2.0.13~git1.72eb93ac9:
    * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
    * Bump version to 2.0.13
    * Issue 5132 - Update Rust crate lru to fix CVE
    * Issue 3555 - UI - fix audit issue with npm nanoid
    * Issue 4299 - UI - Add ACI editing features
    * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
    * Issue 5127 - run restorecon on /dev/shm at server startup
    * Issue 5124 - dscontainer fails to create an instance
    * Issue 4312 - fix compiler warning
    * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'
* Tue Jan 25 2022 william.brown@suse.com
  - Update to version 2.0.13~git1.72eb93ac9:
    * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
    * Bump version to 2.0.13
    * Issue 5132 - Update Rust crate lru to fix CVE
    * Issue 3555 - UI - fix audit issue with npm nanoid
    * Issue 4299 - UI - Add ACI editing features
    * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
    * Issue 5127 - run restorecon on /dev/shm at server startup
    * Issue 5124 - dscontainer fails to create an instance
    * Issue 4312 - fix compiler warning
    * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'
* Mon Jan 24 2022 William Brown <william.brown@suse.com>
  - Add missing dependency on python slugify
  - Change ssl dependency to openssl as libressl does not link correctly
* Sat Jan 15 2022 William Brown <william.brown@suse.com>
  - Fix %pre macro in pkg for systemd services
* Thu Jan 13 2022 William Brown <william.brown@suse.com>
  - Remove recommends on supportutils per review
  - Remove insecure recommends on md5 sasl auth
* Mon Jan 10 2022 William Brown <william.brown@suse.com>
  - Add missing support utils plugin
* Mon Jan 10 2022 william.brown@suse.com
  - Update to version 2.0.11~git13.e14935725:
    * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
    * Issue 5079 - BUG - multiple ways to specific primary (#5087)
    * Issue 4992 - BUG - slapd.socket container fix (#4993)
    * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
    * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
    * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
    * Issue 5046 - BUG - update concread (#5047)
    * Issue 5043 - BUG - Result must be used compiler warning (#5045)
    * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
    * Issue 4931 - RFE: dsidm - add creation of service accounts
    * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
    * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
    * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
* Mon Jan 10 2022 william.brown@suse.com
  - Resolve boo#1194068 by adding required schema
  - Update to version 2.0.11~git0.237913e86:
    * Bump version to 2.0.11
    * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
    * Issue 5014 - UI - Add group creation to LDAP editor
    * Issue 5006 - UI - LDAP editor tree not being properly updated
    * Issue 5001 - Update CI test for new availableSASLMechs attribute
    * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
    * Issue 5001 - Fix next round of UI bugs:
    * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
    * Issue 4978 - use more portable python command for checking containers
    * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
    * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
    * Issue 4978 - make installer robust
    * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
    * Issue 4973 - update snmp to use /run/dirsrv for PID file
    * Issue 4962 - Fix various UI bugs - Plugins (#4969)
    * Issue 4973 - installer changes permissions on /run
    * Issue 4092 - systemd-tmpfiles warnings
    * Issue 4956 - Automember allows invalid regex, and does not log proper error
    * Issue 4731 - Promoting/demoting a replica can crash the server
    * Issue 4962 - Fix various UI bugs part 1
    * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
    * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
    * Issue 2790 - Set db home directory by default
    * Bump github contianer shm size to 4 gigs
    * Issue 4299 - Merge LDAP editor code into Cockpit UI
    * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
    * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
    * Issue 4847 - BUG - potential deadlock in replica (#4936)
    * Issue 4513 - fix ACI CI tests involving ip/hostname rules
    * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
    * Issue 4916 - Memory leak in ldap-agent
* Tue Oct 12 2021 William Brown <william.brown@suse.com>
  - Add missing dependency on iproute2 for lib389
* Tue Sep 21 2021 william.brown@suse.com
  - Update to version 2.0.10~git0.21dd2802c:
    * Bump version to 2.0.10
    * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
    * Issue 4912 - Account Policy plugin does not set the config entry DN
    * Issue 4863 - typoes in logconv.pl
    * Issue 4796 - Add support for nsslapd-state to CLI & UI
    * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
    * Issue 4912 - dsidm command crashing when account policy plugin is enabled
    * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
    * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
    * Issue 4887 - UI - fix minor regression from camelCase fixup
    * Bump version to 2.0.9
    * Issue 4887 - UI - Update webpack.config.js and package.json
    * Issue 4149 - UI - Migrate the remaining components to PF4
    * Issue 4875 - CLI - Add some verbosity to installer
    * Issue 4884 - server crashes when dnaInterval attribute is set to zero
* Mon Aug 23 2021 william.brown@suse.com
  - Update to version 2.0.8~git0.553f26c87:
    * Bump version to 2.0.8
    * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
    * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
    * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
    * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
    * Issue 4736 - lib389 - fix regression in certutil error checking
    * Issue 4861 - Improve instructions in custom.conf for memory leak detection
    * Issue 4859 - Don't version libns-dshttpd
    * Issue 4169 - Migrate Replication & Schema tabs to PF4
    * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
    * Issue 4736 - CLI - Errors from certutil are not propagated
    * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
    * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
    * Issue - 4696 - Password hash upgrade on bind (#4840)
    * Bump version to 2.0.7
    * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
    * Issue 4603 - Reindexing a single backend (#4831)
    * Issue 4169 - UI - migrate Server Tab forms to PF4
    * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
    * Issue 4820 - RFE - control flow integrity (#4821)
    * Issue 4706 - negative wtime for compare operations (#4780)
    * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
    * Issue 4262 - Fix Index out of bound in fractional test (#4828)
    * Issue 4826 - Filter argparse-manpage from autogenerated requires
    * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
    * Issue 2820 - Fix CI test suite issues
    * Bump version to 2.0.6
* Sun Jul 18 2021 Callum Farmer <gmbr3@opensuse.org>
  - Remove unneeded shadow dependency, no longer required due to
    systemd-sysusers
* Thu Jul 08 2021 William Brown <william.brown@suse.com>
  - Update to version 2.0.6~git0.d81dc6c90:
    * Bump version to 2.0.6
    * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
    * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
    * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
    * Issue 4414 - disk monitoring - prevent division by zero crash
    * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
    * Issue 4656 - Fix replication plugin rename dependency issues
    * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
    * Issue 4506 - Improve SASL logging
    * Issue 4709 - Fix double free in dbscan
    * Issue 4093 - Fix MEP test case
    * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
    * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
    * Issue 4794 - BUG - don't capture container output (#4798)
    * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
    * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
    * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
    * Issue 4447 - Crash when the Referential Integrity log is manually edited
    * Issue 4773 - Add CI test for DNA interval assignment
    * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
    * Issue 4379 - fixing regression in test_info_disclosure
    * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
    * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
    * Issue 4575 Update test docstrings metadata
    * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
    * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
    * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
* Thu Jul 08 2021 William Brown <william.brown@suse.com>
  - Fix requires as openssl cli is required by 389-ds now.
* Sat Jun 19 2021 Callum Farmer <gmbr3@opensuse.org>
  - Add now working CONFIG parameter to sysusers generator
* Wed Jun 02 2021 wbrown@suse.de
  - Update to version 2.0.5~git0.607bfbf16:
    * Bump version to 2.0.5
    * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
    * Issue 4169 - UI - Port plugin tables to PF4
    * Issue 4656 - Allow backward compatilbity for replication plugin name change
    * Issue 4764 - replicated operation sometime checks ACI (#4783)
    * Issue 2820 - Fix CI test suite issues
    * Issue 4781 - There are some typos in man-pages
    * Issue 4773 - Enable interval feature of DNA plugin
    * Issue 4623 - RFE - Monitor the current DB locks (#4762)
    * Issue 3555 - Fix UI audit issue
    * Issue 4725 - Fix compiler warnings
    * Issue 4770 - Lower FIPS logging severity
    * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
    * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
    * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
    * Issue 4759 - Fix coverity issue (#4760)
    * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
    * Issue 4714 - dscontainer fails with rootless podman
    * Issue 4750 - Fix compiler warning in retrocl (#4751)
    * Issue 4742 - UI - should always use LDAPI path when calling CLI
    * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
    * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
    * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
    * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
    * Issue 4711 - SIGSEV with sync_repl (#4738)
    * Issue 4734 - import of entry with no parent warning (#4735)
    * Issue 4729 - GitHub Actions fails to run pytest tests
    * Issue 4656 - Remove problematic language from source code
    * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
    * Issue 4169 - UI - migrate replication tables to PF4
    * Issue 4637 - ndn cache leak (#4724)
    * Issue 4577 - Fix ASAN flags in specfile
    * Issue 4169 - UI - PF4 migration - database tables
    * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
* Thu May 27 2021 Dominique Leuenberger <dimstar@opensuse.org>
  - Recommend openssl(cli) by lib389: admin tools like dscreate can
    call out to /usr/bin/openssl to manage certificates. As the admin
    could decide to manage the certificates differently, we only
    recommend openssl here.
* Thu Apr 08 2021 wbrown@suse.de
  - Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
    * Bump version to 2.0.4
    * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
    * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
    * Issue 4700 - Regression in winsync replication agreement (#4712)
    * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
    * Issue 4169 - UI - migrate monitor tables to PF4
    * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
    * Issue 2736 - remove remaining perl references
    * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
    * Issue 4706 - negative wtime in access log for CMP operations
    * Issue 3585 - LDAP server returning controltype in different sequence
    * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
    * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
    * Issue 4671 - UI - Fix browser crashes
    * Issue 4169 - UI - Add PF4 charts for server stats
    * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
    * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
    * Issue 4229 - Fix Rust linking
    * Issue 4673 - Update Rust crates
    * Issue 4658 - monitor - connection start date is incorrect
    * Issue 4169 - UI - migrate modals to PF4
    * Issue 4656 - remove problematic language from ds-replcheck
    * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
    * Issue 4656 - Remove problematic language from UI/CLI/lib389
    * Issue 4661 - RFE - allow importing openldap schemas (#4662)
    * Issue 4659 - restart after openldap migration to enable plugins (#4660)
    * Merge pull request #4664 from mreynolds389/issue4663
    * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
    * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
    * Issue 4646 - CLI/UI - revise DNA plugin management
    * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
    * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
    * Issue 4169 - UI - Migrate alerts to PF4
    * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
    * Issue 4595 - Paged search lookthroughlimit bug (#4602)
    * Issue 4169 - UI - port charts to PF4
    * Issue 2820 - Fix CI test suite issues
    * Issue 4513 - CI - make acl ip address tests more robust
    * Bump version to 2.0.3
    * Issue 4619 - remove pytest requirement from lib389
    * Issue 4615 - log message when psearch first exceeds max threads per conn
    * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
    * Issue 4324 - Some architectures the cache line size file does not exist
    * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
    * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
    * Update dscontainer (#4564)
    * Issue 4149 - UI - port TreeView and opther components to PF4
    * Issue 4577 - Add GitHub actions
    * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
    * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
    * Issue 4609 - CVE - info disclosure when authenticating
    * Issue 4348 - Add tests for dsidm
    * Issue 4571 - Stale libdb-utils dependency
    * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
    * Issue 4577 - Add GitHub actions
    * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
    * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
    * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
    * Issue 4348 - Add tests for dsidm
    * Issue 4577 - Add GitHub actions
    * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
    * Issue 4093 - fix compiler warnings and update doxygen
    * Issue 4575 - Update test docstrings metadata
    * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
    * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
    * Issue 4513 - Add DS version check to SSL version test (#4570)
    * Issue 5442 - Search results are different between RHDS10 and RHDS11
    * Issue 4396 - Minor memory leak in backend (#4558)
    * Revert "Update metadata for customerscenario in test docstring"
    * Update metadata for customerscenario in test docstring
    * Issue 4513 - Fix replication CI test failures (#4557)
    * Issue 4513 - Fix replication CI test failures (#4557)
    * Issue 4153 - Added a CI test (#4556)
    * Issue 4506 - BUG - fix oob alloc for fds (#4555)
    * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
    * Issue 4506 - Temporary fix for io issues (#4516)
    * Issue 4535 - lib389 - Fix log function in backends.py
    * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
    * Issue 4544 - Compiler warnings on krb5 functions (#4545)
    * Update rpm.mk for RUST tarballs
* Wed Apr 07 2021 Dirk Müller <dmueller@suse.com>
  - small spec cleanup
* Fri Jan 29 2021 Dominique Leuenberger <dimstar@opensuse.org>
  - As there is no python-* package, the direct use of singlespec
    seems unapplicable. So do not build for all python3.x flavors,
    but only for the main one:
    + Use releavant %python3_ macros.
    + Do not use %python_module, as this pulls in all python
      versions.
* Mon Jan 18 2021 wbrown@suse.de
  - Update to version 2.0.2~git0.6d17ca7df:
    * Bump version to 2.0.2
    * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
    * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
    * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
    * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
    * Issue 4513 - CI Tests - fix test failures
    * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
    * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
    * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
    * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
    * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
    * Issue 4219 - Log internal unindexed searches (notes=A)
    * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
    * Issue 4381 - RFE - LDAPI authentication DN rewritter
    * Issue 4513 - Fix schema test and lib389 task module (#4514)
    * Issue 4414 - disk monitoring - prevent division by zero crash
    * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
    * Issue 4507 - Improve csngen testing task (#4508)
    * Issue 4498 - BUG - entryuuid replication may not work (#4503)
    * Issue 4480 - Unexpected info returned to ldap request (#4491)
    * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
    * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
    * Merge pull request #4501 from mreynolds389/issue4500
    * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
    * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
    * Issue 3522 - Remove DES to AES conversion code
    * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
    * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
    * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
    * Issue 4486 - Remove random ldif file generation from import test (#4487)
    * Issue 4224 - cleanup specfile after libsds removal
    * Issue 4421 - Unable to build with Rust enabled in closed environment
    * Issue 4489 - Remove return statement from a void function (#4490)
    * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
    * Ticket 4224 - openldap can become confused with entryuuid
    * Ticket 4313 - improve tests and improve readme re refdel
    * Ticket 4313 - fix potential syncrepl data corruption
    * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
    * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
    * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
    * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
    * Issue 4446 RFE - openldap password hashers
    * Issue 4284 - dsidm fails to delete an organizationalUnit entry
    * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
    * Issue 4464 - RFE - clang with ds+asan+rust
    * Issue 4105 - Remove python.six (fix regression)
    * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
    * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
    * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
    * Issue 4460 - BUG  - lib389 should use system tls policy
    * Issue 3657 - Add options to dsctl for dsrc file
    * Issue 4454 - RFE - fix version numbers to allow object caching
    * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
    * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
    * Issue 4112 - Added a CI test (#4441)
    * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
    * Issue 4105 - Remove python.six from lib389 (#4456)
    * Fix pytest test collection
    * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
    * Issue 4410 RFE - ndn cache with arc in rust
    * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
    * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
    * Issue 4428 - Paged Results with Chaining Test Case
    * do not add referrals for masters with different data generation #2054 (#4427)
    * Issue 4383 - Do not normalize escaped spaces in a DN
    * Issue 4432 - After a failed online import the next imports are very slow
    * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
    * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
    * Issue 4429 - NULL dereference in revert_cache()
    * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
    * Issue 4407 RFE - remove http client and presence plugin (#4409)
    * build problems at alpine linux
    * Issue 4415 - unable to query schema if there are extra parenthesis

Files

/etc/dirsrv
/etc/dirsrv/config
/etc/dirsrv/config/certmap.conf
/etc/dirsrv/config/ldap-agent.conf
/etc/dirsrv/config/slapd-collations.conf
/etc/dirsrv/schema
/etc/dirsrv/schema/99user.ldif
/usr/bin/dbscan
/usr/bin/ds-logpipe.py
/usr/bin/ds-replcheck
/usr/bin/ldclt
/usr/bin/logconv.pl
/usr/bin/pwdhash
/usr/lib/dirsrv/ds_selinux_restorecon.sh
/usr/lib/dirsrv/ds_systemd_ask_password_acl
/usr/lib/supportconfig
/usr/lib/supportconfig/plugins
/usr/lib/supportconfig/plugins/dirsrv
/usr/lib/sysctl.d/70-dirsrv.conf
/usr/lib/systemd/system/dirsrv.target
/usr/lib/systemd/system/dirsrv@.service
/usr/lib/systemd/system/dirsrv@.service.d
/usr/lib/systemd/system/dirsrv@.service.d/krbkdcbefore.conf
/usr/lib/sysusers.d/dirsrv-user.conf
/usr/lib64/dirsrv
/usr/lib64/dirsrv/libldaputil.so.0
/usr/lib64/dirsrv/libldaputil.so.0.0.0
/usr/lib64/dirsrv/libns-dshttpd.so.0
/usr/lib64/dirsrv/libns-dshttpd.so.0.0.0
/usr/lib64/dirsrv/librewriters.so
/usr/lib64/dirsrv/librewriters.so.0
/usr/lib64/dirsrv/librewriters.so.0.0.0
/usr/lib64/dirsrv/libslapd.so.0
/usr/lib64/dirsrv/libslapd.so.0.1.0
/usr/lib64/dirsrv/plugins
/usr/lib64/dirsrv/plugins/libacctpolicy-plugin.so
/usr/lib64/dirsrv/plugins/libacctusability-plugin.so
/usr/lib64/dirsrv/plugins/libacl-plugin.so
/usr/lib64/dirsrv/plugins/libaddn-plugin.so
/usr/lib64/dirsrv/plugins/libalias-entries-plugin.so
/usr/lib64/dirsrv/plugins/libattr-unique-plugin.so
/usr/lib64/dirsrv/plugins/libautomember-plugin.so
/usr/lib64/dirsrv/plugins/libback-ldbm.so
/usr/lib64/dirsrv/plugins/libbitwise-plugin.so
/usr/lib64/dirsrv/plugins/libchainingdb-plugin.so
/usr/lib64/dirsrv/plugins/libcollation-plugin.so
/usr/lib64/dirsrv/plugins/libcontentsync-plugin.so
/usr/lib64/dirsrv/plugins/libcos-plugin.so
/usr/lib64/dirsrv/plugins/libderef-plugin.so
/usr/lib64/dirsrv/plugins/libdistrib-plugin.so
/usr/lib64/dirsrv/plugins/libdna-plugin.so
/usr/lib64/dirsrv/plugins/libentryuuid-plugin.so
/usr/lib64/dirsrv/plugins/libentryuuid-syntax-plugin.so
/usr/lib64/dirsrv/plugins/liblinkedattrs-plugin.so
/usr/lib64/dirsrv/plugins/libmanagedentries-plugin.so
/usr/lib64/dirsrv/plugins/libmemberof-plugin.so
/usr/lib64/dirsrv/plugins/libpam-passthru-plugin.so
/usr/lib64/dirsrv/plugins/libpassthru-plugin.so
/usr/lib64/dirsrv/plugins/libpbe-plugin.so
/usr/lib64/dirsrv/plugins/libposix-winsync-plugin.so
/usr/lib64/dirsrv/plugins/libpwdchan-plugin.so
/usr/lib64/dirsrv/plugins/libpwdstorage-plugin.so
/usr/lib64/dirsrv/plugins/libreferint-plugin.so
/usr/lib64/dirsrv/plugins/libreplication-plugin.so
/usr/lib64/dirsrv/plugins/libretrocl-plugin.so
/usr/lib64/dirsrv/plugins/libroles-plugin.so
/usr/lib64/dirsrv/plugins/librootdn-access-plugin.so
/usr/lib64/dirsrv/plugins/libschemareload-plugin.so
/usr/lib64/dirsrv/plugins/libstatechange-plugin.so
/usr/lib64/dirsrv/plugins/libsyntax-plugin.so
/usr/lib64/dirsrv/plugins/libusn-plugin.so
/usr/lib64/dirsrv/plugins/libviews-plugin.so
/usr/lib64/dirsrv/plugins/libwhoami-plugin.so
/usr/lib64/dirsrv/python
/usr/lib64/dirsrv/python/failedbinds.py
/usr/lib64/dirsrv/python/logregex.py
/usr/sbin/ns-slapd
/usr/sbin/openldap_to_ds
/usr/share/dirsrv
/usr/share/dirsrv/data
/usr/share/dirsrv/data/10rfc2307bis.ldif
/usr/share/dirsrv/data/10rfc2307compat.ldif
/usr/share/dirsrv/data/60changelog.ldif
/usr/share/dirsrv/data/60inetmail.ldif
/usr/share/dirsrv/data/60krb5kdc.ldif
/usr/share/dirsrv/data/60nis.ldif
/usr/share/dirsrv/data/60qmail.ldif
/usr/share/dirsrv/data/60radius.ldif
/usr/share/dirsrv/data/60rfc4876.ldif
/usr/share/dirsrv/data/60samba.ldif
/usr/share/dirsrv/data/60sendmail.ldif
/usr/share/dirsrv/data/Ace.ldif
/usr/share/dirsrv/data/European.ldif
/usr/share/dirsrv/data/Eurosuffix.ldif
/usr/share/dirsrv/data/Example-roles.ldif
/usr/share/dirsrv/data/Example-views.ldif
/usr/share/dirsrv/data/Example.ldif
/usr/share/dirsrv/data/dbgen-FamilyNames
/usr/share/dirsrv/data/dbgen-GivenNames
/usr/share/dirsrv/data/dbgen-OrgUnits
/usr/share/dirsrv/data/dsee.schema
/usr/share/dirsrv/data/template-baseacis.ldif
/usr/share/dirsrv/data/template-country.ldif
/usr/share/dirsrv/data/template-domain.ldif
/usr/share/dirsrv/data/template-dse-minimal.ldif
/usr/share/dirsrv/data/template-dse.ldif
/usr/share/dirsrv/data/template-ldapi-autobind.ldif
/usr/share/dirsrv/data/template-ldapi-default.ldif
/usr/share/dirsrv/data/template-ldapi.ldif
/usr/share/dirsrv/data/template-locality.ldif
/usr/share/dirsrv/data/template-org.ldif
/usr/share/dirsrv/data/template-orgunit.ldif
/usr/share/dirsrv/data/template-sasl.ldif
/usr/share/dirsrv/data/template-state.ldif
/usr/share/dirsrv/data/template-suffix-db.ldif
/usr/share/dirsrv/data/template.ldif
/usr/share/dirsrv/extra-schema
/usr/share/dirsrv/extra-schema/README.md
/usr/share/dirsrv/extra-schema/amavisd-new.ldif
/usr/share/dirsrv/extra-schema/collective.ldif
/usr/share/dirsrv/extra-schema/corba.ldif
/usr/share/dirsrv/extra-schema/suse-mailserver.ldif
/usr/share/dirsrv/inf
/usr/share/dirsrv/inf/defaults.inf
/usr/share/dirsrv/inf/slapd.inf
/usr/share/dirsrv/mibs
/usr/share/dirsrv/mibs/redhat-directory.mib
/usr/share/dirsrv/schema
/usr/share/dirsrv/schema/00core.ldif
/usr/share/dirsrv/schema/01core389.ldif
/usr/share/dirsrv/schema/02common.ldif
/usr/share/dirsrv/schema/03entryuuid.ldif
/usr/share/dirsrv/schema/05rfc2927.ldif
/usr/share/dirsrv/schema/05rfc4523.ldif
/usr/share/dirsrv/schema/05rfc4524.ldif
/usr/share/dirsrv/schema/06inetorgperson.ldif
/usr/share/dirsrv/schema/10automember-plugin.ldif
/usr/share/dirsrv/schema/10dna-plugin.ldif
/usr/share/dirsrv/schema/10mep-plugin.ldif
/usr/share/dirsrv/schema/10rfc2307compat.ldif
/usr/share/dirsrv/schema/20subscriber.ldif
/usr/share/dirsrv/schema/25java-object.ldif
/usr/share/dirsrv/schema/28pilot.ldif
/usr/share/dirsrv/schema/30ns-common.ldif
/usr/share/dirsrv/schema/50ns-admin.ldif
/usr/share/dirsrv/schema/50ns-certificate.ldif
/usr/share/dirsrv/schema/50ns-directory.ldif
/usr/share/dirsrv/schema/50ns-mail.ldif
/usr/share/dirsrv/schema/50ns-value.ldif
/usr/share/dirsrv/schema/50ns-web.ldif
/usr/share/dirsrv/schema/60acctpolicy.ldif
/usr/share/dirsrv/schema/60autofs.ldif
/usr/share/dirsrv/schema/60eduperson.ldif
/usr/share/dirsrv/schema/60kerberos.ldif
/usr/share/dirsrv/schema/60mozilla.ldif
/usr/share/dirsrv/schema/60nss-ldap.ldif
/usr/share/dirsrv/schema/60pam-plugin.ldif
/usr/share/dirsrv/schema/60posix-winsync-plugin.ldif
/usr/share/dirsrv/schema/60pureftpd.ldif
/usr/share/dirsrv/schema/60rfc2739.ldif
/usr/share/dirsrv/schema/60rfc3712.ldif
/usr/share/dirsrv/schema/60sabayon.ldif
/usr/share/dirsrv/schema/60samba3.ldif
/usr/share/dirsrv/schema/60sudo.ldif
/usr/share/dirsrv/schema/60trust.ldif
/usr/share/dirsrv/schema/70yast.ldif
/usr/share/doc/packages/389-ds
/usr/share/doc/packages/389-ds/README.md
/usr/share/gdb/auto-load/usr/sbin
/usr/share/gdb/auto-load/usr/sbin/ns-slapd-gdb.py
/usr/share/licenses/389-ds
/usr/share/licenses/389-ds/LICENSE
/usr/share/licenses/389-ds/LICENSE.openldap
/usr/share/man/man1/dbscan.1.gz
/usr/share/man/man1/ds-logpipe.py.1.gz
/usr/share/man/man1/ds-replcheck.1.gz
/usr/share/man/man1/ldclt.1.gz
/usr/share/man/man1/logconv.pl.1.gz
/usr/share/man/man1/pwdhash.1.gz
/usr/share/man/man5/99user.ldif.5.gz
/usr/share/man/man5/certmap.conf.5.gz
/usr/share/man/man5/dirsrv.5.gz
/usr/share/man/man5/dirsrv.systemd.5.gz
/usr/share/man/man5/slapd-collations.conf.5.gz
/usr/share/man/man8/ns-slapd.8.gz
/usr/share/man/man8/openldap_to_ds.8.gz
/var/lib/dirsrv
/var/log/dirsrv

Generated by rpm2html 1.8.1

Fabrice Bellet, Sat Nov 23 00:04:24 2024