<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" "http://www.w3.org/TR/REC-html40/loose.dtd">
<html lang="en">
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
<title>
GitLab
</title>
<style>img {
max-width: 100%; height: auto;
}
</style>
</head>
<body>
<div class="content">
<h3>
Timo Aaltonen pushed to branch upstream
at <a href="https://salsa.debian.org/freeipa-team/389-ds-base">FreeIPA packaging / 389-ds-base</a>
</h3>
<h4>
Commits:
</h4>
<ul>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/commit/174c4683bcba01768a90093840121d43bbdbdbfb">174c4683</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2018-12-14T21:21:41Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Ticket 50095 - cleanup deprecated key.h includes
Description: key.h has been deprecated in favor of keyhi.h
https://pagure.io/389-ds-base/issue/50095
Reviewed by: mreynolds(one line commit rule)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/commit/07b367ea6240b3be4752a44548c4cee39b7803c1">07b367ea</a></strong>
<div>
<span>by Akshay Adhikari</span>
<i>at 2018-12-17T07:45:12Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 49588 - Add py3 support for tickets : part-5
Description: Added py3 support by explicitly changing strings to bytes.
Fixed old legacy objects.
https://pagure.io/389-ds-base/issue/49588
Reviewed by: mreynolds (Thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/commit/8d51c979f247c90bc0d005ec4edc821558ee7a28">8d51c979</a></strong>
<div>
<span>by Ludwig Krispenz</span>
<i>at 2018-12-18T12:43:55Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Ticket 49574 - remove index subsystem
There is code for an indexing subsystem, which looks like it was intended
to provide special indexes for specific search filters (not vlv).
But it is not used and not documented and unclear if it ever worked or will
work. It only contains calls in search processing to check if something is defined
and so only provides a bit of overhead in searches.
We can remove this dead code. We can also remove the broker api for idl_xxx since it is not used
anywhere else.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/commit/4b53c3122bf2720941cf49c9be2a31808405399a">4b53c312</a></strong>
<div>
<span>by Anuj Borah</span>
<i>at 2018-12-18T14:27:37Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;"> Issue: 50082 - Port state test suite
Description: Port state test suite
issue: https://pagure.io/389-ds-base/issue/50082
Reviewed by: Mark Reynolds
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/commit/00c3b7a94545d627bf8a334c1ddf206282078024">00c3b7a9</a></strong>
<div>
<span>by Simon Pichugin</span>
<i>at 2018-12-18T19:15:43Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 50041 - Add basic plugin UI/CLI wrappers
Description: Add plugin UI tabs with basic data editing,
enable/disable and dynamic plugin switch.
Fix loading. Fix small CSS issues.
React. Add customCollapse element. Make customToolbar customizable.
Rework data flow in the component.
CLI. Put all the plugins to 'plugin' parser. Add wrappers for
all main plugins. Clean up plugin args (remove get_dn, generic enable and disable)
https://pagure.io/389-ds-base/issue/50041
Reviewed by: mreynolds, mhonek (Thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/commit/76847e82a4f70af90b88f2bf5023e8e70be178b4">76847e82</a></strong>
<div>
<span>by Thierry Bordaz</span>
<i>at 2018-12-19T09:58:44Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Ticket 50099 - In FIPS mode, the server can select an unsupported password storage scheme
Bug Description:
When running in FIPS mode, DS selects SSHA512 as password storage schema else it selects PBKDF2_SHA256.
The problem is that in FIPS mode it selects PBKDF2_SHA256 that is currently not supported by NSS.
So DS fails to hash password
The scheme selection is done in the early phase of DS startup (slapd_bootstrap_config).
To determine it is in FIPS mode, DS calls PK11_IsFIPS that requires that NSS has been initialized.
The problem is that during slapd_bootstrap_config, NSS is not yet initialized and PK11_IsFIPS returns
PR_FALSE even in FIPS mode
Fix Description:
The fix consists to check if NSS is initialized. If it is initialize, then rely on PK11_IsFIPS.
If it is not initialized then retrieve the FIPS mode from the system, assuming that if system
is in FIPS mode, then NSS will be in FIPS mode as well
https://pagure.io/389-ds-base/issue/50099
Reviewed by: Mark Reynolds (thanks Mark !)
Platforms tested: F27
Flag Day: no
Doc impact: no
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/commit/ecdf6d8dfcc57775dda55acf46c1d2c314e77d50">ecdf6d8d</a></strong>
<div>
<span>by Thierry Bordaz</span>
<i>at 2018-12-19T13:34:55Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Ticket 50099 - extend error messages
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/commit/14890380c5fbc8e07eb68c3e19d99f0a7e2def1e">14890380</a></strong>
<div>
<span>by Anuj Borah</span>
<i>at 2018-12-21T05:50:33Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue: 48064
Bug Description: CI test - disk_monitoring
Fix Description: Scripts are ported
https://pagure.io/389-ds-base/issue/48064
Reviewed by: Simon Pichugin
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/commit/ad1b78ea157fba69b48471558cedde8bf899cee6">ad1b78ea</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2018-12-21T15:08:02Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Ticket 50056 - Fix UI bugs (part 2)
Description: Fix issues with deleting SASL mappings, loading the
replicated suffix dropdown select lists, improve root
dn password change validation, improved docs in dscreate
template for suffixes, hide password values in console
logging, remove ssca directory whenremoivnign the last
instance, and issues with audit fail logging in UI.
https://pagure.io/389-ds-base/issue/50056
Reviewed by: vashirov(Thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/commit/4bb89f164c885af381c5298a86dadf3cd8a0b169">4bb89f16</a></strong>
<div>
<span>by Anuj Borah</span>
<i>at 2019-01-03T03:42:42Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue: 49761
Bug Description:Fix CI test suite issues
Fix Description: Ported test scrips
https://pagure.io/389-ds-base/issue/49761
Reviewed by: Mark Reynolds and spichugi
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/commit/01df5d52c132c4874b2cdfff6b7e41fdd48ed07d">01df5d52</a></strong>
<div>
<span>by Simon Pichugin</span>
<i>at 2019-01-03T16:05:06Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 49938 - lib389 - Clean up CLI logging
Description: We set DEBUG log level if self.verbose is true.
So we should properly log the information through self.log.debug
when it is necessary.
https://pagure.io/389-ds-base/issue/49938
Reviewed by: mreynolds (Thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/commit/a3d35b9ddd3989fe09e3a98d6f13d8f6f28df6d4">a3d35b9d</a></strong>
<div>
<span>by Viktor Ashirov</span>
<i>at 2019-01-04T10:48:28Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 48064 - Fix various issues in disk monitoring test suite
Bug Description:
1. Some tests were hanging after disk monitoring test suite was executed,
because we didn't do a proper cleanup: log directories were still
mounted after test has ended.
2. Deprecation warnings from re module.
Fix Description:
1. Change scope of the fixture to 'module' instead of 'function'.
Split setup fixture to have a separate fixture for log reset for each
test.
2. Use raw strings for re functions' parameters.
https://pagure.io/389-ds-base/issue/48064
Reviewed by: mreynolds and spichugi (Thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/commit/3a1628f6b94bdce38bb502a56482d194fc88c1a6">3a1628f6</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2019-01-04T16:42:52Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Ticket 49999 - rpm.mk dist-bz2 should clean cockpit_dist first
Description: make -f rpm.mk dist-bz2 should always generate this directory
from scratch:
src/cockpit/389-console/cockpit_dist
https://pagure.io/389-ds-base/issue/49999
Reviewed by: spichugi & mreynolds
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/commit/ff00b07402747aac403478a157adab75e306d7d1">ff00b074</a></strong>
<div>
<span>by Thierry Bordaz</span>
<i>at 2019-01-07T08:40:04Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Ticket 50117 - after certain failed import operation, impossible to replay an import operation
Bug Description:
At the beginning of an import, a flag is set to mark the target backend is busy.
Then import tests if there are pending operations. If such operations exist the import can not proceed and fails.
The problem is that in such case of pending operations, the import fails without resetting the busy flag.
It let the backend busy (until next reboot) and prevent new import.
Fix Description:
It needs to reset the busy flag if there are pending operations
https://pagure.io/389-ds-base/issue/50117
Reviewed by: Mark Reynolds, William Brown
Platforms tested: F27
Flag Day: no
Doc impact: no
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/commit/f574332fc826da4f22b10187bbae29ec3213bb6d">f574332f</a></strong>
<div>
<span>by Barbora Smejkalová</span>
<i>at 2019-01-07T11:09:32Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 49618 - Set nsslapd-cachememsize to custom value
Description:
Added function for getting available memory.
Added test case to set nsslapd-cachememsize to custom value above 3805132804 bytes. Test is skipped if available memory is lower than we want to set.
https://pagure.io/389-ds-base/issue/49618
Reviewed by: vashirov, spichugi (Thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/commit/410d3bb916c50cc7d8b609995278a30825981b3b">410d3bb9</a></strong>
<div>
<span>by William Brown</span>
<i>at 2019-01-08T03:55:55Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Ticket 50128 - NS Stress fails without ipv6
Bug Description: Docker for osx doesn't support ipv6, which
means that in ipv4 only environments this test fails.
We aren't trying to test ipv4/ipv6 here, only that NS handles
load, so swapping to ipv4 is not a change to the test
Fix Description: Change the PR_AF_INET6 to PR_AF_INET
https://pagure.io/389-ds-base/issue/50128
Author: William Brown <william@blackhats.net.au>
Review by: ???
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/commit/f03ea8ec7b8299e816352c4a2cf68911874aad99">f03ea8ec</a></strong>
<div>
<span>by Barbora Smejkalová</span>
<i>at 2019-01-08T13:53:26Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 50091 - shadowWarning is not generated if passwordWarning is lower than 86400 seconds (1 day).
Description:
Added test case to check if shadowWarning attribute is generated when passwordWarning is set to lower value than 84600 seconds.
https://pagure.io/389-ds-base/issue/50091
Reviewed by: vashirov, amsharma, spichugi, firstyear (Thank you!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/commit/d97514a9228f276fb9c01b5a31e0677152a3dbd9">d97514a9</a></strong>
<div>
<span>by Anuj Borah</span>
<i>at 2019-01-08T13:56:30Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue: 50101 - Port fourwaymmr Test TET suit to python3
Port fourwaymmr Test TET suit to python3
https://pagure.io/389-ds-base/issue/50101
Reviewed by: Simon Pichugin
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/commit/a9ed1e6ae1dfd7427129819c8f416e436caa69c5">a9ed1e6a</a></strong>
<div>
<span>by William Brown</span>
<i>at 2019-01-08T22:39:45Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 50122 - Selinux test for presence
Description: Selinux is not present on all systems. Trying to
import python-selinux when it's not available fails, but we
can not guarantee that the with_selinux flag to defaults is
correct because some systems build with selinux but may not
have it enabled. We should check if we can access the tools
instead, and skip them (with warnings) if we can't make changes
https://pagure.io/389-ds-base/issue/50122
Reviewed by: mreynolds
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/commit/07b5532ee820ddffa0e0251f999b29c2268352d9">07b5532e</a></strong>
<div>
<span>by Matúš Honěk</span>
<i>at 2019-01-09T08:30:42Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Ticket 50134 - fixup-memberof.pl does not respect protocol requested
Bug Description:
fixup-memberof.pl tries with StartTLS even though LDAP was specified.
Fix Description:
Fix protocol assignment to $info, probably missed during a previous code porting.
https://pagure.io/389-ds-base/issue/50134
Author: mhonek
Review by: mreynolds, firstyear (thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/commit/c1cc0acdaf2a1bdd15b4056b396ee6757e21126e">c1cc0acd</a></strong>
<div>
<span>by Marc Muehlfeld</span>
<i>at 2019-01-09T13:56:33Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 50130 - Building RPMs on RHEL8 fails
Description: Due to an incorrect path in a "mv" command in
389-ds-base.spec.in, building RPMs on RHEL8 failed
https://pagure.io/389-ds-base/issue/50130
Reviewed by: vashirov & wibrown
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/commit/50e290dced417b9537067acb5b4eee2321792b65">50e290dc</a></strong>
<div>
<span>by William Brown</span>
<i>at 2019-01-09T23:13:23Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Ticket 50126 - Incorrect usage of sudo in test
Bug Description:
Sudo is assumed to be present and working in passwordless
mode with basictest.
Fix Description:
We can not make this assumption, that sudo is installed (docker)
or in passwordless mode. As a result for this test to work, we should
run the suite as "sudo py.test" or "dirsrv". Potentially we may need
to update defaults.inf for people who want to run the tests as
their own user ID.
https://pagure.io/389-ds-base/issue/50126
Author: William Brown <william@blackhats.net.au>
Review by: ???
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/commit/83223d5f008c47cf01450a21a6e74f1916b9a5a1">83223d5f</a></strong>
<div>
<span>by Ludwig Krispenz</span>
<i>at 2019-01-10T10:39:59Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Ticket 50078 - cannot add cenotaph in read only consumer
Bug: For modrdn operations a cenotaph entry is created to be used in later conflict
resolution procedures, this is done by an internal add operation and
fails on hubs and consumers
Fix: Add the "bypass referral" flag to the internal add operation to allow it
Reviewed by: Thierry, thanks
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/commit/a4632aa66f4e3dfdc7ffebbcecc5a347198434ce">a4632aa6</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2019-01-10T17:49:10Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Ticket 50056 - dsctl db2ldif throws an exception
Description: dsctl db2ldif throws an exception because of a typo in
a parameter name.
https://pagure.io/389-ds-base/issue/50056
Reviewed by: mreynolds(one line commit rule)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/commit/e31057e2e9d724272c937e2bd082b52ed5cf3fa3">e31057e2</a></strong>
<div>
<span>by Simon Pichugin</span>
<i>at 2019-01-10T23:39:37Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 50145 - Add a verbose option to the backup tools
Bug description: RHDS 9 does not require a -q option to not log debugging messages.
-q also suppresses the output that had been included before when doing an import.
Fix description:
Make -q option less verbose by removing error log messages
and add -V option which enables Verbose DEBUG output.
https://pagure.io/389-ds-base/issue/50145
Reviewed by: mreynolds (Thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/commit/4b8b470f064fb676c7794d6d557b82276754e7cb">4b8b470f</a></strong>
<div>
<span>by William Brown</span>
<i>at 2019-01-11T00:42:34Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Ticket 50122 - Fix incorrect path spec
Bug Description: Due to human error, I missed a path spec in
a change I made
Fix Description: Fix the path
https://pagure.io/389-ds-base/issue/50122
Author: William Brown <william@blackhats.net.au>
Review by: ???
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/commit/55045daba4065b7a04fadf76e3ec7f6878d9027a">55045dab</a></strong>
<div>
<span>by Matúš Honěk</span>
<i>at 2019-01-11T13:40:00Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Ticket 50138 - db2bak.pl -P LDAPS does not work when nsslapd-securePort is missing
Bug Description:
When nsslapd-securePort is not set in dse.ldif, DSUtil (in case of LDAPS)
interpolates ldapmodify (and other) call to a URI ending only with a colon
because obtained securePort is just an empty string. The very same turns out to
happen for the nsslapd-port.
Fix Description:
Hardcode the default ports, which is a short variant of omitting the
colon and port, and which would be chosen by the OpenLDAP utils any way.
https://pagure.io/389-ds-base/issue/50138
Author: mhonek
Review by: mreynolds (thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/commit/c1f96bd3bc880ecf158347cdd973b70684f62ee9">c1f96bd3</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2019-01-11T16:23:32Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Ticket 49994 - Adjust dsconf backend usage
Description: Slightly rearrange the backend usage to move create/delete
to main subcommands instead of being under suffix.
https://pagure.io/389-ds-base/issue/49994
Reviewed by: spichugi & firstyear(Thanks!!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/commit/9f433e82e153f8f6ccd6a6d32cd6440fa9beec0c">9f433e82</a></strong>
<div>
<span>by William Brown</span>
<i>at 2019-01-13T22:39:04Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update .gitignore to hide extra files
Description: Add a small number of files to gitignore
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/commit/b5e4fca0b956dafc923fb8ac3b06912f44253a85">b5e4fca0</a></strong>
<div>
<span>by William Brown</span>
<i>at 2019-01-13T22:39:04Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Ticket 50136 - Allow resetting passwords on the CLI
Bug Description: This allows resetting passwords on the CLI for
accounts, as well as allowing accounts to self-change their
passwords.
Fix Description: Add reset and change password functions, and
fix a number of issues with non-DM bind in the server, regrissions
in tls enable during tests.
https://pagure.io/389-ds-base/issue/50136
Author: William Brown <william@blackhats.net.au>
Review by: ???
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/commit/7096094e0f26ad3f4acbbffeefc0a174a791686d">7096094e</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2019-01-14T14:56:37Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Ticket 50077 - RFE - improve automember plugin to work with modify ops
Description:
Previously automember was only invoked for ADD operations. This enhancement
allows it to work with modify operations, and it will also maintain the
correct memberships. So if a modify changes which groups the user would
belong to, it will add the user to the new group, and remove them from the
old group.
https://pagure.io/389-ds-base/issue/50077
Reviewed by: spichugi & firstyear (Thanks!!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/commit/a8fa9a992fb114f4f36562c6391113da1979eb31">a8fa9a99</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2019-01-14T15:10:20Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Ticket 49984 - python installer add option to create suffix entry
Description: Making the top suffix entry should be optional, and
not the fixed default behavior. Added a new option:
create_suffix_entry True/False
https://pagure.io/389-ds-base/issue/49984
Reviewed by: ?
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/commit/0666b520654fb256f833a1bf6f5410867d2dac9c">0666b520</a></strong>
<div>
<span>by William Brown</span>
<i>at 2019-01-15T00:03:37Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Ticket 50123 - with_tmpfiles_d is associated to systemd
Description: with_tmpfiles_d does not operate unless it's
part of a systemd install. This moves the configure check
and operation to within the "with_systemd" code.
https://pagure.io/389-ds-base/issue/50123
Reviewed by: vashirov (Thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/commit/ca13f42da4d49fd30200fed960e1ad2d0fd1c763">ca13f42d</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2019-01-15T03:53:10Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Ticket 50153 - Increase default max logs
Bug Description: The errors & audit logs default to max number of logs to 1.
This prevents the max log size rotation policy from working.
This is documented in the docs, but the problem is that this
can allow the server to fill up the FS on /var under certain
conditions.
Fix Description: Change the default max number of logs to "2". This is still
a small value, and it allows the rotation policy to be effective.
https://pagure.io/389-ds-base/issue/50153
Reviewed by: spichugi & firstyear (Thanks!!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/commit/8bac1e299a8f03dc123e025f9dfd9abf467cca97">8bac1e29</a></strong>
<div>
<span>by Marc Muehlfeld</span>
<i>at 2019-01-15T14:26:24Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Ticket 50161 - Fixed some descriptions in "dsconf backend --help"
Description: - Help for "suffix" was no longer correct
- Help for "create" changed to "Create a backend database"
- Changed descriptions to start with a capital letter for consistency
https://pagure.io/389-ds-base/issue/50161
Reviewed by: mhonek, mreynolds
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/commit/ff9387bb97c306ad9c7d430bf58e094333c4f1b3">ff9387bb</a></strong>
<div>
<span>by Thierry Bordaz</span>
<i>at 2019-01-15T16:57:30Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Ticket 49972 - use-after-free in case of several parallel krb authentication
Bug Description:
When several threads (RA) authenticates to the same host and at the same time
There is a good chance they will share the same credential cache.
If one authentication fails, the thread will clear the cache (krb5_cc_destroy)
although others threads may still use it.
Fix Description:
The best approach is to drop using krb5 function and use gssapi.
It is a quite intrusive change and a simplest temporary fix will serialize
all krb5 calls.
During initialization of the interaction structure (sasl), if using gssapi mechanism,
the calls to krb5 functions are serialized with a lock.
Then the lock is released for the authentication and cleanup.
Cleanup needs to be serialized as well as it calls krb5_cc_destroy.
The fix consist to acquire the lock over initialization/authentication/cleanup.
So only one RA can authenticate at the same time.
https://pagure.io/389-ds-base/issue/49972
Reviewed by: Robbie Harwood, William Brown (many thanks for your reviews !!)
Platforms tested: F27 & F28
Flag Day: no
Doc impact: no
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/commit/eae696f1e0cf477f96966859feab9eacd9a0be82">eae696f1</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2019-01-15T18:46:06Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Ticket 50077 - Fix compiler warnings in automember rebuild task
https://pagure.io/389-ds-base/issue/50077
Reviewed by: mreynolds(one line commit rule)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/commit/58be90b8bf96a7a0e10740b122035ea03fa13e0f">58be90b8</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2019-01-15T18:55:18Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Ticket 49540 - FIx compiler warning in ldif2ldbm
https://pagure.io/389-ds-base/issue/49540
Reviewed by: mreynolds(one line commit rule)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/commit/bf34abab1a6480329ed29ceb72eaa883668c08b3">bf34abab</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2019-01-15T19:06:51Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Ticket - Fix compiler warning in init.c
https://pagure.io/389-ds-base/issue/49574
Reviewed by: mreynolds(one line commit rule)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/commit/e0485033ec25c85f95129266dc9e3735b283abc7">e0485033</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2019-01-15T19:40:39Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix compiler warning in snmp main()
Reviewed by: mreynolds(one line commit rule)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/commit/ada2dfdd40032fbbfc1f8cd00c2f7e27374febe7">ada2dfdd</a></strong>
<div>
<span>by Simon Pichugin</span>
<i>at 2019-01-16T10:26:48Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
Description: When HOME env var is not set, the call will fail with an exception.
Instead of HOME we can use expanduser method. The expanduser will do the right thing
and get home directory on all platforms from either env vars or password database.
https://pagure.io/389-ds-base/issue/50152
Reviewed by: mreynolds, wibrown (Thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/commit/68e08801b9e00ece45600fc81cf971786deaa36c">68e08801</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2019-01-16T17:36:59Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Ticket 50165 - Fix dscreate issues
Description: There were some recent regressions about selinux in dscreate.
- When skipping labelling of default port an error message was incorrectly logged
- restorecon was not using the correct path
https://pagure.io/389-ds-base/issue/50165
Reviewed by: firstyear & mhonek (Thanks!!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/commit/c57528b1ce88c0174674b8cdc8fc1293bc1fe49c">c57528b1</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2019-01-16T18:08:41Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Ticket 50169 - lib389 changed hardcoded systemctl path
Description: Currently the server is using "/usr/bin/systemctl", but
this fails on Debian. There is no need for a path anyway
so jsut strip it.
https://pagure.io/389-ds-base/issue/50169
Reviewed by: mhonek(Thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/commit/7f3f97867e184a71f3988eed2365699d547687c6">7f3f9786</a></strong>
<div>
<span>by German Parente</span>
<i>at 2019-01-17T13:17:35Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix for ticket 50059: If an object is nsds5replica, it must be cn=replica
Bug Description:
We should enforce that if an object is of type nsds5replica, it must be named cn=replica.
This has caused some confusion where people have misconfigured their system by trying alternate names.
Fix Description:
Check that rdn of replica dn is exactly REPLICA_RDN
https://pagure.io/389-ds-base/issue/50059
Author: German Parente <gparente@redhat.com>
Review by: ???
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/commit/b6ed4534959f309203126758fbffbd0f9b16db65">b6ed4534</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2019-01-17T13:33:00Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Ticket 50164 - Add test for dscreate
Description: Add a simple test in basic suite to make sure dscreate works,
also moved setup/remove tests from lib389 and moved them inside
dirsrvtests directory
https://pagure.io/389-ds-base/issue/50164
Reviewed by: ?
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/commit/d23ef6d303185c322aeb9d755daa767ecc111e19">d23ef6d3</a></strong>
<div>
<span>by William Brown</span>
<i>at 2019-01-17T23:11:21Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Ticket 50125 - perl fix ups for tmpfiles
Bug Description: I missed updating the perl tools during the tmpfiles
fix.
Fix Description: Change the name in dscreate.pm
https://pagure.io/389-ds-base/issue/50125
Author: William Brown <william@blackhats.net.au>
Review by: vashirov (Thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/commit/e08b20cc08fca684492276c2ecab456e054fca90">e08b20cc</a></strong>
<div>
<span>by German Parente</span>
<i>at 2019-01-18T08:48:20Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Merge #50079 `Fix for ticket 50059: If an object is nsds5replica, it must be cn=replica`</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/commit/0be01490e171aa1aacba57616940f22b20481e7d">0be01490</a></strong>
<div>
<span>by Simon Pichugin</span>
<i>at 2019-01-31T14:45:22Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 50041 - CLI and WebUI - Add memberOf plugin functionality
Description: Add the main functionality to memberOf plugin tab.
Increase the eslint max line length from 80 to 100.
Rework plugin properties to be more compact.
Eslint webpack config. Add react-bootstrap-typeahead for
multivalued attributes. Fix the word 'successfully' typos.
https://pagure.io/389-ds-base/issue/50041
Reviewed by: mreynolds, wibrown (Thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/commit/92909976b6b741a8932c8b6db42fa9ba660c1520">92909976</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2019-01-31T14:46:11Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Bump version to 1.4.0.21
</pre>
</li>
</ul>
<h4>28 changed files:</h4>
<ul>
<li class="file-stats">
<a href="#a5cc2925ca8258af241be7e5b0381edf30266302">
.gitignore
</a>
</li>
<li class="file-stats">
<a href="#d5b4de16d947214ec306bd57bed1bd23a939b5f9">
Makefile.am
</a>
</li>
<li class="file-stats">
<a href="#d7e560a1b9a915cc82a4a544b31706fd6db5f6fd">
VERSION.sh
</a>
</li>
<li class="file-stats">
<a href="#87db583be5c13c1f7b3c958b10e03d67b6a2ca06">
configure.ac
</a>
</li>
<li class="file-stats">
<a href="#065b762ed6fa99117318d7186e5d03b5e4588a16">
<span class="new-file">
+
dirsrvtests/tests/suites/automember_plugin/automember_mod_test.py
</span>
</a>
</li>
<li class="file-stats">
<a href="#7cffca0bd7a0ae4a4c2a74bc2df07196d4867dfb">
dirsrvtests/tests/suites/basic/basic_test.py
</a>
</li>
<li class="file-stats">
<a href="#845bf85fec68690ba0f18e6f53eac09d0f96eaf4">
dirsrvtests/tests/suites/config/regression_test.py
</a>
</li>
<li class="file-stats">
<a href="#294cf48041d0487b438a4bf6b4512d037784881c">
<span class="new-file">
+
dirsrvtests/tests/suites/disk_monitoring/disk_monitoring_test.py
</span>
</a>
</li>
<li class="file-stats">
<a href="#94079acd8a02159a87fd88f8f585fbb529035b43">
<span class="new-file">
+
dirsrvtests/tests/suites/fourwaymmr/__init__.py
</span>
</a>
</li>
<li class="file-stats">
<a href="#f8aed133783e4c4d76c8c690ae5f19cdade5f505">
<span class="new-file">
+
dirsrvtests/tests/suites/fourwaymmr/fourwaymmr_test.py
</span>
</a>
</li>
<li class="file-stats">
<a href="#82e8d648b6de67c756f8e92c781f5f2ae68c0b0a">
dirsrvtests/tests/suites/password/pwdPolicy_warning_test.py
</a>
</li>
<li class="file-stats">
<a href="#6335adc40d50902c240f6facbd2c22cec5ac2d03">
<span class="new-file">
+
dirsrvtests/tests/suites/replication/regression_nsslapd_plugin_binddn_tracking_test.py
</span>
</a>
</li>
<li class="file-stats">
<a href="#c8479d8b395d1e961ae8e28016e14118883cb8eb">
dirsrvtests/tests/suites/setup_ds/__init__.py
</a>
</li>
<li class="file-stats">
<a href="#fc6e781e16f598b87d391a6d4c12fd7dd8cbff69">
src/lib389/lib389/tests/instance/setup_test.py
→
dirsrvtests/tests/suites/setup_ds/dscreate_test.py
</a>
</li>
<li class="file-stats">
<a href="#8bbfd666a291516b048108c252d6700f30849b2a">
src/lib389/lib389/tests/instance/remove_test.py
→
dirsrvtests/tests/suites/setup_ds/remove_test.py
</a>
</li>
<li class="file-stats">
<a href="#8c4977b95508b970c51403f4824050327ff98ee2">
<span class="new-file">
+
dirsrvtests/tests/suites/stat/__init__.py
</span>
</a>
</li>
<li class="file-stats">
<a href="#f033656398168bce91eecc346ae5d5db677cb67e">
<span class="new-file">
+
dirsrvtests/tests/suites/stat/mmt_state_test.py
</span>
</a>
</li>
<li class="file-stats">
<a href="#a691d402a62ffc06a2088f9f3f36e0cdfc07e68a">
<span class="new-file">
+
dirsrvtests/tests/suites/vlv/regression_test.py
</span>
</a>
</li>
<li class="file-stats">
<a href="#1d3dd49f968d9865f6f4b6f1d6b1367d90c2b638">
dirsrvtests/tests/tickets/ticket48252_test.py
</a>
</li>
<li class="file-stats">
<a href="#d57df68684522944fb1ca333e26e7cf0c098be87">
dirsrvtests/tests/tickets/ticket48266_test.py
</a>
</li>
<li class="file-stats">
<a href="#c075e3447ab5610914fe30edcb5696732242d22b">
dirsrvtests/tests/tickets/ticket48325_test.py
</a>
</li>
<li class="file-stats">
<a href="#ade58e9cb265f5a70bd16258700fae16fd12063a">
dirsrvtests/tests/tickets/ticket48759_test.py
</a>
</li>
<li class="file-stats">
<a href="#81d61feb0e5ed84253cdb7051ec0f163e8a48d93">
dirsrvtests/tests/tickets/ticket48906_test.py
</a>
</li>
<li class="file-stats">
<a href="#e0dbef14a4237e22967b396d48dfe6cfbc3093b2">
dirsrvtests/tests/tickets/ticket49020_test.py
</a>
</li>
<li class="file-stats">
<a href="#fc92da0c8c1513d14d701da7f11443f8196139a2">
dirsrvtests/tests/tickets/ticket49039_test.py
</a>
</li>
<li class="file-stats">
<a href="#518daff39439b80eecb087a32285ff5b5f0209a9">
dirsrvtests/tests/tickets/ticket49121_test.py
</a>
</li>
<li class="file-stats">
<a href="#ed046b7aaba54f469b5726370b3056b4935eeea7">
dirsrvtests/tests/tickets/ticket49180_test.py
</a>
</li>
<li class="file-stats">
<a href="#e91fdb2726c38ac7edd96f5cda7d791696c0c1f4">
dirsrvtests/tests/tickets/ticket49287_test.py
</a>
</li>
</ul>
<h5>The diff was not included because it is too large.</h5>
</div>
<div class="footer" style="margin-top: 10px;">
<p style="font-size: small; color: #777777;">
—
<br>
<a href="https://salsa.debian.org/freeipa-team/389-ds-base/compare/b43380f77d70b0b78f75a22c694b57fb5ee8811e...92909976b6b741a8932c8b6db42fa9ba660c1520">View it on GitLab</a>.
<br>
You're receiving this email because of your account on salsa.debian.org.
If you'd like to receive fewer emails, you can
adjust your notification settings.
</p>
</div>
</body>
</html>