<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" "http://www.w3.org/TR/REC-html40/loose.dtd">
<html lang="en">
<head>
<meta content="text/html; charset=US-ASCII" http-equiv="Content-Type">
<title>
GitLab
</title>
<style>img {
max-width: 100%; height: auto;
}
</style>
</head>
<body>
<div class="content">
<h3>
Timo Aaltonen pushed to branch master
at <a href="https://salsa.debian.org/freeipa-team/389-ds-base">FreeIPA packaging / 389-ds-base</a>
</h3>
<h4>
Commits:
</h4>
<ul>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/b32c74556ec717baef6c3bb3f64f755b38ad015d">b32c7455</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2020-03-16T16:56:12+00:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 50954 - buildnum.py - fix date formatting issue
Description: Use time.strftime to generate build number
(Thanks Matus for the suggestion)
relates: https://pagure.io/389-ds-base/issue/50954
Reviewed by: mhonek(Thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/ded6769452edb8dd9da04a1f6e301529e17e76a2">ded67694</a></strong>
<div>
<span>by Anuj Borah</span>
<i>at 2020-03-18T14:38:43+05:30</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue: 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
Bug Description: Port Password Policy test cases from TET to python3 series of bugs final
Relates: https://pagure.io/389-ds-base/issue/50690
Author: aborah
Reviewed by: Viktor Ashirov
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/4cc83693dd072c6e855948ad677000e2a595044e">4cc83693</a></strong>
<div>
<span>by Anuj Borah</span>
<i>at 2020-03-18T14:37:20+00:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue: 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
Bug Description: Port Password Policy test cases from TET to python3 Password grace limit section.
Relates/Fixes: https://pagure.io/389-ds-base/issue/50860
Author: aborah
Reviewed by: Viktor Ashirov
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/6fba9a81cdbacbbe92ca96377e15ff9898b2b3e9">6fba9a81</a></strong>
<div>
<span>by Simon Pichugin</span>
<i>at 2020-03-18T21:27:08+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 50963 - We should bundle *.min.js files of Console
Description: Currently, we do not bundle in the tarball the *.min.js
files which help with deciphering the obfuscated code which is actually
run by the browser. This leads to end-users submitting partially
unreadable JavaScript stack traces.
Please note this won't result in end-users having to download more data
just to use the Console, since these files are downloaded only when needed,
i.e. when Developer's Console is opened.
https://pagure.io/389-ds-base/issue/50963
Reviewed by: mreynolds (Thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/c4befd634828338e98b1a0c93db12b1c9e70525c">c4befd63</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2020-03-20T02:48:45+00:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
Description: The asterick character was missing from the allowed character list.
Also cleaned up the source in the C file.
Thanks @yrro for contributing the original patch!
relates: https://pagure.io/389-ds-base/issue/50800
Reviewed by: firstyear (Thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/d1b746b6436121868aaa26cdc80a6952a4133f46">d1b746b6</a></strong>
<div>
<span>by Simon Pichugin</span>
<i>at 2020-03-20T16:09:20+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
Description: Add an attributes to cn=config
nsslapd-disk-monitoring-readonly-on-threshold - it accepts 'on/off'
values and changes the original behavior so when we reach the threshold,
we set the read-only mode (and then we do other actions - like disable
non-critical logging, etc.). When we reach half of the threshold, we start
the graceful shutdown as it was before.
Change the code so the instance doesn't start up if the disk space
is still below half of the threshold.
Add basic tests to disk monitoring test suite.
https://pagure.io/389-ds-base/issue/50960
Reviewed by: firstyear, tbordaz (Thanks a lot!!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/81c50ce8e288843a9c3f0677e311cc2d448158f3">81c50ce8</a></strong>
<div>
<span>by Jashank Jeremy</span>
<i>at 2020-03-23T17:06:46+11:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 50971 - Support building on FreeBSD.
Bug Description:
The build on FreeBSD wasn't *quite* working.
Fix Description:
A few surprisingly minor fixes to support building 389ds on FreeBSD:
* slapd: Don't use `O_PATH' if it's not available.
* slapd: Don't invoke `#include' inside a function.
* slapd: Move the `#include' of libgen.h to grab basename(3).
* pwdstorage: Set `_BSD_SOURCE'; and fix up includes for FreeBSD.
* slapd: statvfs(3) doesn't have `f_mntonname', but statfs(2) does.
* libaccess: `LASIpAddPatternIPV6' returns `int'; `NULL' can't be cast.
* buildnum.py: Use `env' to find python3.
* autogen: Use `gsed' (hopefully GNU sed) if it's available.
Relates: https://pagure.io/389-ds-base/issue/50971
Author: Jashank Jeremy (@jashankj)
Review by: William Brown (@firstyear)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/983c373ce8dfd43639d57543e7fe8e206f831b62">983c373c</a></strong>
<div>
<span>by Sylvie Gouverneyre</span>
<i>at 2020-03-23T08:30:27+00:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 49761 - Fix CI test suite issues
Description:
CI nightly runs are still broken in suites/plugins/rootdn_plugin_test.py in race conditions on bind operations.
Polling implemented to fix that.
Relates: https://pagure.io/389-ds-base/issue/49761
Author: sgouvern
Review by: spichugi
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/f290163114b03b31e84dd5830274afd4e876ba1e">f2901631</a></strong>
<div>
<span>by Stanislav Levin</span>
<i>at 2020-03-23T17:01:36+03:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 50972 - Fix cockpit plugin build
Bug Description:
During 389-console build, `npm run build` complains about the wrong
indentations.
Fix Description:
This is just the correction of indentations.
Fixes: https://pagure.io/389-ds-base/issue/50972
Author: Stanislav Levin <slev@altlinux.org>
Review by: mreynolds (Thanks!)
Signed-off-by: Stanislav Levin <slev@altlinux.org>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/6f912c3e2e574b45665c4e1ec7a69e6a47c79ac8">6f912c3e</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2020-03-23T11:14:57-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 50974 - UI - wrong title in "Delete Suffix" popup
Description: A copy and paste error existed that mixed a replication
title into the "delete suffix" popup
fixes: https://pagure.io/389-ds-base/issue/50974
Reviewed by: mreynolds(one line commit rule)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/4cf9431aeb2fbb2911661eca08d318b2ee607914">4cf9431a</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2020-03-23T13:04:07-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 50966 - UI - Database indexes not using typeAhead correctly
Description: The attribute indexes were using the wrong format for the typeAhead fields
which results in console crashes, and invalid indexes.
relates: https://pagure.io/389-ds-base/issue/50966
Reviewed by: spichugi(Thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/457cab95d09b17539fc34029a73de2fe85f55321">457cab95</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2020-03-23T13:20:06-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 50955 - Fix memory leaks in chaining plugin(part 2)
Description: Fix compiler warning
relates: https://pagure.io/389-ds-base/issue/50955
Reviewed by: mreynolds(one line commit rule)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/f41e1d3fbdd61fc2757070f06f071177722fb258">f41e1d3f</a></strong>
<div>
<span>by Simon Pichugin</span>
<i>at 2020-03-23T22:33:39+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 50976 - Clean up Web UI source directory from unused files
Description: We ship unused files under src/cockpit/389-console/src.
We should clean them up. It includes: static, fonts, images and
banner.htmp.
Also, fix index.html and webpack.config.js accordingly.
https://pagure.io/389-ds-base/issue/50976
Reviewed by: mreynolds (Thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/aca3ae8039e319c684b4418789127824783e7ac1">aca3ae80</a></strong>
<div>
<span>by Matus Honek</span>
<i>at 2020-03-24T11:44:15+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 50952- SSCA lacks basicConstraint:CA
Bug Description:
SSCA CA cert lacks basicConstraint:CA and for that reason it may not be
acknowledged as a CA cert by some tools, e.g. in case of system-wide
update-ca-trust tool.
Fix Description:
Add the constraint while generating the cert. And yes, we need to use stdin
since certutil does not provide a silent mode for this option.
Fixes https://pagure.io/389-ds-base/issue/50952
Author: Matus Honek <mhonek@redhat.com>
Review by: Mark, William (thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/534c2cfa22e7026da43615cb8e42f8df7b4d930a">534c2cfa</a></strong>
<div>
<span>by Shogo Matsumoto</span>
<i>at 2020-03-24T18:11:26-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">-n option of dbverify does not work
Correct a field name in order to pass instance names
specified by -n to backend's dbverify function.
Signed-off-by: Mark Reynolds <mreynolds@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/04e0be8f0b9a02769655b993e6be4b79444b549a">04e0be8f</a></strong>
<div>
<span>by William Brown</span>
<i>at 2020-03-25T10:25:23+10:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Ticket 50971 - fix BSD_SOURCE
Bug Description: BSD_SOURCE is deprecated for DEFAULT_SOURCE
Fix Description: Use DEFAULT_SOURCE instead.
https://pagure.io/389-ds-base/issue/50971
Author: William Brown <william@blackhats.net.au>
Review by: mreynolds (Thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/96c8abba57bea957b5dfa944a95f339a970ccad7">96c8abba</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2020-03-25T18:23:30+00:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 49731 - set and use db_home_directory by default
Description: New instances will automatically create and use db_home_dir
/dev/shm/dirsrv/slapd-INSTANCE.
relates: https://pagure.io/389-ds-base/issue/49731
Reviewed by: tbordaz & firstyear(Thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/de9f26acd982d16cce043b740fbe255ca830b380">de9f26ac</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2020-03-25T15:10:29-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 49731 - Do not add db_home_dir to template-dse.ldif
Description: The file used by setup-ds.pl for creating the dse.ldif
should not have had the db_home_dir set.
relates: https://pagure.io/389-ds-base/issue/49731
Reviewed by: mreynolds (one line commit rule)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/1c06f8c2770ec90a2fdb02653d9a4ade5cc25dff">1c06f8c2</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2020-03-26T10:29:47-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 49437 - Fix memory leak with indirect COS
Bug Description: There are two leaks when dealing with indirect COS. The
first leak is caused by the COS cache entry's objectclass
list not being freed when the entry is removed from the
hash table.
The other leak is caused when we follow an indirect pointer
COS and do not free a tmp value set that goes unused.
Fix description: Free the COS entry objectclass list when removing an entry
from the hash table. When querying a COS attribute and the
returned attribute (out_attr) is NULL, then free the unused
tmp_val ValueSet as it's not consumed by anything.
Fixes: https://pagure.io/389-ds-base/issue/49437
Reviewed by: firstyear & tbordaz(Thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/6a1d7851364d6c5655c2f4f1d0260a91b36afb0f">6a1d7851</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2020-03-26T14:56:39-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 50975 - Revise UI branding with new minimized build
Description: We can no longer use the previous method of text replacement
to brand the UI for downstream vs upstream builds. Instead
we can use css files to set the branding, and the specfile
can do a text replacement on the non-miminized css file.
fixes: https://pagure.io/389-ds-base/issue/50975
Reviewed by: firstyear & mhonek (Thanks!!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/335b6de103671b0256d244a788680e715c6b2463">335b6de1</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2020-03-26T16:50:35-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 49731 - dscreate fails in silent mode because of db_home_dir
Description: The silent install was broken because of a missing key "db_home_dir"
so it is now added to the dictionary.
relates: https://pagure.io/389-ds-base/issue/49731
Reviewed by: mreynolds (one line commit rule)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/8ecada01035e8b90538d72b42510e742870b0671">8ecada01</a></strong>
<div>
<span>by Simon Pichugin</span>
<i>at 2020-03-27T02:00:54+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 50984 - Memory leaks in disk monitoring
Description: Memory leaks are reported by the disk monitoring test suite.
The direct leak is related to char **dirs array which is not freed at all.
Free the array when we clean up or go to shutdown.
Fix disk_monitoring_test.py::test_below_half_of_the_threshold_not_starting_after_shutdown.
It should accept different exception when the instance is not started.
https://pagure.io/389-ds-base/issue/50984
Reviewed by: firstyear (Thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/a171670d8706f201e18223d145f8685038cfbd6a">a171670d</a></strong>
<div>
<span>by Simon Pichugin</span>
<i>at 2020-03-27T11:37:01+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 50984 - Memory leaks in disk monitoring
Description: Reset dirs pointer every time we free it.
The code may be changed in the future so we should make it
more robust.
https://pagure.io/389-ds-base/issue/50984
Reviewed by: spichugi, tbordaz (one line commit rule)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/7a6bbc1df29892863aa9367a242264c302cacf5f">7a6bbc1d</a></strong>
<div>
<span>by Simon Pichugin</span>
<i>at 2020-03-27T15:32:38+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 50337 - Replace exec() with setattr()
Description: _constants.py uses exec() a lot to define module
global variables. That's rather slow and not very elegant.
Get the current module object with sys.modules[__name__] and
then use setattr() instead.
https://pagure.io/389-ds-base/issue/50337
Reviewed by: mreynolds (Thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/0683bcde1b667b6d0ca6e8d1ef605f17c51ea2f7">0683bcde</a></strong>
<div>
<span>by William Brown</span>
<i>at 2020-03-31T23:12:21+00:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Ticket 50933 - rfc2307compat.ldif
Bug Description: rfc2307 is the original schema for posix and other related
attributes. rfc2307bis was a draft propsed by a member of the openldap team
that fixed a number of deficiencies in rfc2307. However, rfc2307bis is not
completely forward compatible - replacing them may introduce possible data
errors or other subtle issues.
In the interest of allowing easier openldap to 389 migrations
( https://pagure.io/389-ds-base/issue/50544 ) I propose a rfc2307compat,
which is a forward compatible version combining rfc2307 and rfc2307bis. This
would allow items from both to be considered "valid' without changing the
semantics of either.
Fix Description: This adds rfc2307compat.ldif, which is a forward compatabile
expression of both rfc2307 and rfc2307bis, with the knowledge that 389 ds
does not enforce structural/auxillary rules.
https://pagure.io/389-ds-base/issue/50933
Author: William Brown <william@blackhats.net.au>
Review by: tbordaz (Thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/862d0445280ed19837b8e518ba3b7e20de813ba2">862d0445</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2020-04-01T11:56:32-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 50994 - Fix latest UI bugs found by QE
Description:
This address many bugs, most of whioch is very small fixes:
- [Bug 1816563] Referential integrity scope values are not saved in cockpit
- [Bug 1816599] Initializing database from Ldif is broken in Cockpit
- [Bug 1816708] Removing objectclass does not ask for confirmation
- [Bug 1816712] Removing attribute does not ask for confirmation
- [Bug 1816928] Other tabs become unclickable Or unresponsive if you click on Replication tab under Monitoring tab (WORKED FOR ME)
- [Bug 1816956] Removing an attribute uniqueness does not ask for confirmation
- [Bug 1816958] Run Fixup Task for USN under Plugins tab either Cleanup Suffix Or Cleanup Backend option should be there not the both
- [Bug 1817062] Created attribute uniqueness is not visible after page refresh
- [Bug 1817098] Instance fails to start after creating attribute uniqueness because of a missing attribute
- [Bug 1817396] Various display problems on 'Server Settings'/'Security' Tab
- [Bug 1817415] The 'Security Settings' refresh button does not work
- [Bug 1817526] Cannot change Bind DN name in agreement
- [Bug 1817554] cockpit crashes when creating new sasl mapping
- [Bug 1817580] Reindex button is greyed out in Reindex Suffix
- [Bug 1817585] Changing the SASL mapping priority prevents to create mapping
- [Bug 1817983] Directory Manager Password can only be change when user click on Storage Scheme option
- [Bug 1818016] Directory Manager Password is changing before the change in password storage scheme
- [Bug 1818020] Confirm password field under Server setting's Directory manager tab not doing field check
- [Bug 1818027] Cockpit broken when saving new changelog directory
- [Bug 1818823] Can create replication manager without password and then it can't be deleted
relates: https://pagure.io/389-ds-base/issue/50994
Reviewed by: firstyear & spichugi(Thanks!!)
Updates
- Remove excessive/nested spinner toggling for many of the plugins
- Updated specfile for cockpit-389-ds to require 389-ds-base
- Fixed how attribute uniquness plugins are created and found, and
made it more robust to handle enabled and disabled plugins
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/fc95cf3ad95137b0935123a36844f91df00a13e2">fc95cf3a</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2020-04-01T12:01:50-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Bump version to 1.4.3.5
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/dd266dacccbc06b8267e535f15131538001df283">dd266dac</a></strong>
<div>
<span>by Simon Pichugin</span>
<i>at 2020-04-02T15:11:36+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
Bug Description: Adding multiple mechanisms to nsslapd-allowed-sasl-mechanisms ignores all but one of the mechanisms specified.
Fix Description: The issue happens because we use the same memory address
for 'char *' for slapdFrontendConfig->allowed_sasl_mechs and
for slapdFrontendConfig->allowed_sasl_mechs_array.
So when we split the 'char *' into the 'char **' with ' ' delimetr,
allowed_sasl_mechs has only the first element becuase ' ' is set to 0 now.
Define a separate 'char *' for the array.
Add a test for the issue.
https://pagure.io/389-ds-base/issue/50869
Reviewed by: mreynolds, firstyear, tbordaz (Thanks!!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/f31abde7da3a941147b3dfea032bbbc60305b87f">f31abde7</a></strong>
<div>
<span>by Matus Honek</span>
<i>at 2020-03-28T06:32:52+00:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
Bug Description:
Cannot call dsconf ... chaining monitor due to invalid call to get_monitor.
FTR: The other issue reported within, for the ... link-delete has already been
fixed in commit c403a39.
Fix Description:
Use _get_link to get the named link, the same way some other functions in the
file do.
Also, merge and move _format_status to cli_base.
Fixes https://pagure.io/389-ds-base/issue/50640
Author: Matus Honek <mhonek@redhat.com>
Review by: Mark (thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/ca2d54b1115378f2f5cfd04c98be114182983d33">ca2d54b1</a></strong>
<div>
<span>by Timo Aaltonen</span>
<i>at 2020-03-30T19:06:36+03:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">fix-pkg-query.diff: Use dpkg-query to check if 389-ds-base is installed, in the cockpit ui.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/90f3642c11657d9b428e9f0d8e2718ff987efd7f">90f3642c</a></strong>
<div>
<span>by Viktor Ashirov</span>
<i>at 2020-04-03T15:02:42+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 50952 - SSCA lacks basicConstraint:CA
Bug Description:
`capture_output` was introduced in python 3.7 and
on earlier versions this code produces TypeError.
Fix Description:
Make it compatible with python 3.6 by setting `stderr`
and `stdout` to PIPE.
Fixes: https://pagure.io/389-ds-base/issue/50952
Reviewed by: mhonek (Thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/19cc56ecd796237d6ae1b351d96aa686ebdfa1d9">19cc56ec</a></strong>
<div>
<span>by Thierry Bordaz</span>
<i>at 2020-04-03T16:21:02+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Ticket 50905 - intermittent SSL hang with rhds
Bug Description:
On a successfull sasl bind, a new IO layer (sasl_io_enable) is registered on top of
the connection. Then sasl bind sends the successful result. Registration is
done while sasl bind thread holds c_mutex but result is sent while the c_mutex
is released.
If a new operation comes in just after c_mutex was released it is
possible that sasl bind sends the result while the new IO layer is pushed.
IO layers is partially initialized at that time. It can create sigseg or
deadlock or...
Fix Description:
The fix is to protect the send result from IO layer push.
i.e. move send_ldap_result into c_mutex
https://pagure.io/389-ds-base/issue/50905
Reviewed by: Mark Reynolds (Thanks !!)
Platforms tested: F29
Flag Day: no
Doc impact: no
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/341d61458e55594e6ad2700990f0e7075421beea">341d6145</a></strong>
<div>
<span>by Viktor Ashirov</span>
<i>at 2020-04-03T17:15:12+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 50337 - Replace exec() with setattr()
Bug Description:
Instance IDs now include superfluous quotes that break
calling CLI tools from lib389.
Fix Description:
Remove the quotes.
Fixes: https://pagure.io/389-ds-base/issue/50337
Reviewed by: spichugi (Thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/52e2894225b83fc0b82b627f5caac5f32e2b9488">52e28942</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2020-04-03T11:23:44-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 49731 - Fix additional issues with setting db home directory by default
Description: The db home dir does need to be set in the template-dse.ldif file,
but this required additional changes to perl modules that setup-ds.pl
uses. There are also issues with containers where /dev/shm could
be undersized for the database, so for container installs we will
not set the db-home-dir to tmpfs.
relates: https://pagure.io/389-ds-base/issue/49731
Reviewed by: ?
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/426e4e087e630c87fa87e850c78c0f4bb832e18d">426e4e08</a></strong>
<div>
<span>by Viktor Ashirov</span>
<i>at 2020-04-06T14:21:20+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
Bug Description:
Currently we have an optional dn parameter with a default value:
def __init__(self, instance, dn="cn=plugins,cn=config"):
This breaks some tests that assume the default base DN for this plugin.
But it can have multiple instances, so we should always specify the DN.
Making this parameter mandatory will ensure this.
Fix Description:
Remove the default DN value and update tests.
Fixes: https://pagure.io/389-ds-base/issue/51005
Reviewed by: mreynolds (Thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/2523f487118a8740927e7662dc0a2725671c8b79">2523f487</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2020-04-06T08:44:02-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 50545 - Port dbmon.sh to dsconf
Description: dbmon.sh has been ported to dsconf with basically the
same feature set. i You can contiusiouly refresh the
report at a specified interval, you can choose to get
stats one multiple/specific backends, and the option
to display individual index stats. There is now a human
friendly report and a JSON version.
There was also other improvements made to lib389 to take
into account the new bdb split configuration under cn=confg.
Design Doc: https://www.port389.org/docs/389ds/design/dbmon-design.html
Relates: https://pagure.io/389-ds-base/issue/50545
Reviewed by: spichugi & firstyear (Thanks!!)
Cleanup comments about the change needed for #50189
Fix adjustment
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/c868a418a171854a4a2fd4c9eed6d45d886bf379">c868a418</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2020-04-06T09:23:54-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 50545 - remove dbmon "incr" option from arg parser
Description: Forgot to remove the "incr" option for dbmon from the argparse list
Relates: https://pagure.io/389-ds-base/issue/50545
Reviewed by: mreynolds (one line commit rule)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/a252a6f9706465fd7a542a8e2039266f30cfd9d1">a252a6f9</a></strong>
<div>
<span>by William Brown</span>
<i>at 2020-04-08T09:34:40+10:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Ticket 51014 - slapi_pal.c possible static buffer overflow
Bug Description: Due to an incorrect use of a buffer size,
static analysis in suse detected a possible overflow in
slapi pal. However, it requires root permissions to exploit
anything, and thus is not a security issues.
Fix Description: Change the buffer we read the cgroup into
to be maxpathlen size.
https://pagure.io/389-ds-base/issue/51014
Author: William Brown <william@blackhats.net.au>
Review by: ???
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/36c593d32d092ff1b4bec1595ebe1ed0726f5240">36c593d3</a></strong>
<div>
<span>by Simon Pichugin</span>
<i>at 2020-04-08T11:56:20+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
Bug Description: Searches on cn=config takes values with spaces and
makes multiple attributes out of them. If we set passwordUserAttributes
to "cn uid givenname", it will transform it in a multi-valued attribute.
Fix Description: Change passwordUserAttributes's and passwordBadWords's type
to CONFIG_STRING (it was CONFIG_CHARRAY). Add an additional parameter
to store the array (and use it in pw.c).
The string and array processing is similar to nsslapd-allowed-sasl-mechanisms.
Add tests for both attributes.
https://pagure.io/389-ds-base/issue/50875
Reviewed by: mreynolds, tbordaz, firstyear (Thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/d7810ffc4af6acb30b12354db0eeaaf4f9c9749e">d7810ffc</a></strong>
<div>
<span>by William Brown</span>
<i>at 2020-04-14T05:44:20+00:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Ticket 51008 - dbhome in containers
Bug Description: When starting 389 in containers, the shm may be too
small. Mark fixed this in #51007, but it removed the ability to have
the dbhome in a tmpfs/shm.
Fix Description: Move the request for dbhome/container logic into
the dscontainer entry point instead to keep the setup.py simpler,
and make the dbhome in /data/run/dbhome allowing people to use
an shm for dbhome with '--tmpfs /data/run/dbhome:rw' to a docker
run or create command.
https://pagure.io/389-ds-base/issue/51008
Author: William Brown <william@blackhats.net.au>
Review by: ???
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/a11bae3243faebc8f277398ab2905aaba45094b3">a11bae32</a></strong>
<div>
<span>by Thierry Bordaz</span>
<i>at 2020-04-14T13:54:37+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Ticket 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
Bug Description:
plugin api allows to register filter rewriter callback (slapi_compute_add_search_rewriter)
and computed attribute callback (slapi_compute_add_evaluator)
This requires to write a new plugin to register callbacks.
This RFE is to simplify the use of those plugin api interfaces
so that rewriters (filter or computed attribute) in shared library can be taken into account
as soon as listed in config entries
Fix Description:
It follows the design http://www.port389.org/docs/389ds/design/search_rewriters.html
registers callback listed in children of 'cn=rewriters,cn=config'
The rewriters.c files contains examples of filter rewriter and computed attribute
https://pagure.io/389-ds-base/issue/50980
Reviewed by: Mark Reynolds, William Brown
Platforms tested: F30
Flag Day: no
Doc impact: no
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/46fb7cee43a396ed9f58b2d6a7495c6dba4948c4">46fb7cee</a></strong>
<div>
<span>by Simon Pichugin</span>
<i>at 2020-04-15T10:50:07+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
Bug Description: Memory Leaks are detected by ASAN in changelog5_init
and perfctrs_init functions.
Fix Description: For perfctrs_init, free existing memory before initializing
new memory which will be assigned to the existing stucts.
For changelog5_init, run cl5Cleanup instead of cl5Close for BE preop.
https://pagure.io/389-ds-base/issue/51016
Reviewed by: lkrispen (Thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/12c6814a2b19cd67b3203e8105b426a0fe900fdf">12c6814a</a></strong>
<div>
<span>by Thierry Bordaz</span>
<i>at 2020-04-15T18:50:30+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Ticket 50931 - RFE AD filter rewriter for ObjectCategory
Bug Description:
AD provides flexibility, to AD client, to use shortcuts values in filter components.
To support AD client using 'ObjectCategory' shortcut, we need a 389-ds filter rewriters that
translate the filter '(ObjectCategory=foo)' into '(ObjectCategory=cn=foo,cn=schema,cn=configuration,<base>)'
before processing the filter
[1] https://social.technet.microsoft.com/wiki/contents/articles/5392.active-directory-ldap-syntax-filters.aspx#Filter_on_objectCategory_and_objectClass
Fix Description:
This patch uses the new ability to registers rewriters (https://pagure.io/389-ds-base/issue/50980).
It implements a new rewriters library (under /lib) with a callback filter rewriter adfilter_rewrite_objectCategory.
A adfilter rewriter config entry refers to that library and register the callback at startup
https://pagure.io/389-ds-base/issue/50931
Reviewed by: Mark Reynolds, William Brown
Platforms tested: F29
Flag Day: no
Doc impact: no
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/9ede55d2d5592539b5b33a76bf769687854b697d">9ede55d2</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2020-04-16T10:16:36-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
Description: The compat schema file is causing issues with upgrades,
and schema replication. For now we need to move it out
to the optional schema location until we can resolve
those issues
relates: https://pagure.io/389-ds-base/issue/50933
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/56c433833ae0475e4efe44c0ee09e78515080191">56c43383</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2020-04-16T14:14:46-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Bump version to 1.4.3.6
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/b807bf5e70413a24cae5eb962a8d3124ad17a632">b807bf5e</a></strong>
<div>
<span>by Timo Aaltonen</span>
<i>at 2020-04-20T14:40:41+03:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Merge branch 'upstream'
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/4140c108105fb52e711b8406d0c1904950653914">4140c108</a></strong>
<div>
<span>by Timo Aaltonen</span>
<i>at 2020-04-20T14:41:54+03:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">bump the version
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/b8b9afe8aa1433266263772facad66f417782f05">b8b9afe8</a></strong>
<div>
<span>by Timo Aaltonen</span>
<i>at 2020-04-20T14:48:30+03:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">drop the patch, obsolete
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/8a7c1790baf09d853aabe5e1b946b2174e64ddf2">8a7c1790</a></strong>
<div>
<span>by Timo Aaltonen</span>
<i>at 2020-04-20T14:56:39+03:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">install: Updated.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/4e8d484667c80e8d50f67162f82460f8f4ee17f2">4e8d4846</a></strong>
<div>
<span>by Timo Aaltonen</span>
<i>at 2020-04-20T15:01:43+03:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">releasing package 389-ds-base version 1.4.3.6-1
</pre>
</li>
</ul>
<h4>30 changed files:</h4>
<ul>
<li class="file-stats">
<a href="#d5b4de16d947214ec306bd57bed1bd23a939b5f9">
Makefile.am
</a>
</li>
<li class="file-stats">
<a href="#d7e560a1b9a915cc82a4a544b31706fd6db5f6fd">
VERSION.sh
</a>
</li>
<li class="file-stats">
<a href="#152c3993c79ed609cfec1b4276c2eb31f4d518b3">
autogen.sh
</a>
</li>
<li class="file-stats">
<a href="#39377ea51d5a48d8acc529eb75c8a81f58e41d64">
buildnum.py
</a>
</li>
<li class="file-stats">
<a href="#34aaef39830f1b1635b20b8357c889f6bf1de173">
debian/389-ds-base-dev.install
</a>
</li>
<li class="file-stats">
<a href="#a8b82b08155fde320f6fdaceca5a0c1290250a19">
debian/389-ds-base-libs.install
</a>
</li>
<li class="file-stats">
<a href="#9c96da0e9f91d7d8937b69b524702c106258f0d1">
debian/changelog
</a>
</li>
<li class="file-stats">
<a href="#0d862e5479366a579c86358e4f2b7b400c5e4ae2">
dirsrvtests/tests/suites/betxns/betxn_test.py
</a>
</li>
<li class="file-stats">
<a href="#294cf48041d0487b438a4bf6b4512d037784881c">
dirsrvtests/tests/suites/disk_monitoring/disk_monitoring_test.py
</a>
</li>
<li class="file-stats">
<a href="#b8d86245a5932b4871a7788b6dd267865fb647aa">
dirsrvtests/tests/suites/password/pwdPolicy_syntax_test.py
</a>
</li>
<li class="file-stats">
<a href="#4bf599f8fd5b47baa3f10403817a782c1418e027">
<span class="new-file">
+
dirsrvtests/tests/suites/password/pwp_gracel_test.py
</span>
</a>
</li>
<li class="file-stats">
<a href="#858c4fe10fd8792a7f9fd18bdd0cb7fedd6c4dd7">
<span class="new-file">
+
dirsrvtests/tests/suites/password/regression_of_bugs_test.py
</span>
</a>
</li>
<li class="file-stats">
<a href="#d30fbf3fe9498bd7ceccba92755a09470bc9a7a4">
<span class="deleted-file">
−
dirsrvtests/tests/suites/password/series_of_bugs_test.py
</span>
</a>
</li>
<li class="file-stats">
<a href="#89c9b08b9450f9b4a6d49f9d4a2f63c6c24ce0a6">
dirsrvtests/tests/suites/plugins/acceptance_test.py
</a>
</li>
<li class="file-stats">
<a href="#d1a4e21e0e7681e37de687a9dbd77807bc863f3c">
dirsrvtests/tests/suites/plugins/rootdn_plugin_test.py
</a>
</li>
<li class="file-stats">
<a href="#344e6528438d36a3350ff31dfc8ae27183f19c89">
<span class="new-file">
+
dirsrvtests/tests/suites/rewriters/adfilter_test.py
</span>
</a>
</li>
<li class="file-stats">
<a href="#6238ef74deb817b95746b0b6614524e07d9e92cb">
<span class="new-file">
+
dirsrvtests/tests/suites/rewriters/basic_test.py
</span>
</a>
</li>
<li class="file-stats">
<a href="#8f16bccd80e5a2b76018787b142b4d66189520a3">
dirsrvtests/tests/suites/sasl/allowed_mechs_test.py
</a>
</li>
<li class="file-stats">
<a href="#b3565d49fc2d6b03937d92f5968ea7d8f85a3460">
ldap/admin/src/defaults.inf.in
</a>
</li>
<li class="file-stats">
<a href="#be2c6f6d66dd0b6069d6544e08051742656eaa6e">
ldap/admin/src/scripts/DSCreate.pm.in
</a>
</li>
<li class="file-stats">
<a href="#d729ed7b696525f5ba2295f1323c782e8b174477">
ldap/admin/src/scripts/DSUpdate.pm.in
</a>
</li>
<li class="file-stats">
<a href="#9068d304dfb5fba4b1cce6a00de7f0986bd1509c">
ldap/admin/src/scripts/dscreate.map.in
</a>
</li>
<li class="file-stats">
<a href="#9a45486dda63403b2b0b250d2b514d7684ae5636">
ldap/admin/src/scripts/dsupdate.map.in
</a>
</li>
<li class="file-stats">
<a href="#a42d584072620409bd373bc0168cbe6046a9f78c">
ldap/ldif/template-dse.ldif.in
</a>
</li>
<li class="file-stats">
<a href="#1ace27a4ce7aedf43fbc1561897c2f0e25ad7a4e">
ldap/schema/01core389.ldif
</a>
</li>
<li class="file-stats">
<a href="#6c2394ab79f81e688b1822c69b0245f1d203acbb">
<span class="new-file">
+
ldap/schema/10rfc2307compat.ldif
</span>
</a>
</li>
<li class="file-stats">
<a href="#2a8143998c8d3a670f3561c0f6df8a4cc60eb2c4">
ldap/servers/plugins/chainingdb/cb.h
</a>
</li>
<li class="file-stats">
<a href="#50d73e300ba9e523fa1fd51063accb78cae86227">
ldap/servers/plugins/cos/cos_cache.c
</a>
</li>
<li class="file-stats">
<a href="#70a6410ae4cc49c50a889b230621c0a479292546">
ldap/servers/plugins/pwdstorage/crypt_pwd.c
</a>
</li>
<li class="file-stats">
<a href="#3d71200641c722737b63c14b80fea437b6ea4837">
ldap/servers/plugins/replication/repl5_init.c
</a>
</li>
</ul>
<h5>The diff was not included because it is too large.</h5>
</div>
<div class="footer" style="margin-top: 10px;">
<p style="font-size: small; color: #777;">
—
<br>
<a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/compare/c6b86a3a0057277319cfc3d44e824c8e7c2e6ab3...4e8d484667c80e8d50f67162f82460f8f4ee17f2">View it on GitLab</a>.
<br>
You're receiving this email because of your account on salsa.debian.org.
If you'd like to receive fewer emails, you can
adjust your notification settings.
</p>
</div>
</body>
</html>