<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" "http://www.w3.org/TR/REC-html40/loose.dtd">
<html lang="en">
<head>
<meta content="text/html; charset=US-ASCII" http-equiv="Content-Type">
<title>
GitLab
</title>
<style>img {
max-width: 100%; height: auto;
}
</style>
</head>
<body>
<div class="content">
<h3>
Timo Aaltonen pushed to branch upstream
at <a href="https://salsa.debian.org/freeipa-team/389-ds-base">FreeIPA packaging / 389-ds-base</a>
</h3>
<h4>
Commits:
</h4>
<ul>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/5fc54f4343fca0511f24af29915365a1988a841d">5fc54f43</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2020-04-16T10:30:38-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Bump version to 1.4.4
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/db6cd2375f8421184f32ff54f87a1f4a79b0e4a8">db6cd237</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2020-04-20T10:24:13-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 51031 UI - transition between two instances needs improvement
Bug Description: When you switch between instances in the UI, there is
no loading page, there is a long wait before the dropdown
menu changes, and it does not refresh the page content
(it still contains the previous instance's data).
Fix Description: Set the "loading" flag and the serverId right away when
instance is changed. Then we set the tab component's
key to the server ID so the content is automatically
refreshed.
fixes: https://pagure.io/389-ds-base/issue/51031
Reviewed by: spichugi(Thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/e6023cab66ab258e38efbb009c2d58b8649ce989">e6023cab</a></strong>
<div>
<span>by Thierry Bordaz</span>
<i>at 2020-04-21T15:20:51+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
Bug Description:
startTls pushes a network layer on top of the connection.
So when processing startTLS, there should not be a pending operation
else there is a risk that the operation sends back data on moving
network layer.
When startTls detects a pending operation it aborts startTls.
However if a new operation is received while processing startTls,
the operation is pending but can not be read because startTls
holds c_mutex.
Fix Description:
In case of unread pending operation, relax the control
and just log an information message.
https://pagure.io/389-ds-base/issue/51035
Reviewed by: Mark Reynolds, William Brown
Platforms tested: F30
Flag Day: no
Doc impact: no
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/fe8547bc0ba8e79ae5cc34154d1ea930875c6401">fe8547bc</a></strong>
<div>
<span>by Anuj Borah</span>
<i>at 2020-04-22T13:27:16+05:30</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue: 48055 - CI test - automember_plugin(part3)
Bug Description: CI test - automember_plugin(part3)
Relates: https://pagure.io/389-ds-base/issue/48055
Author: aborah
Reviewed by: Viktor Ashirov
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/3ca89e3105789dd5fc7d6bdbbcbb1102995c7030">3ca89e31</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2020-04-22T08:41:45-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
Bug Description: There are several issues with using /dec/shm/disrv/
for the db home directory. Cantainers have issues,
and system reboots can cause issues too.
Fix Description: Using just /dev/shm/slapd-INST solves all the permission
issues, but that requires a new selinux label, so
for now we will just set the db home directory to the
database directory (effectively disabling the change).
relates: https://pagure.io/389-ds-base/issue/49731
Reviewed by: firstyear & tbordaz(Thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/69a389e073908ded13dffc3803df5da163e1fee0">69a389e0</a></strong>
<div>
<span>by Thierry Bordaz</span>
<i>at 2020-04-22T15:22:37+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Ticket 50877 - task to run tests of csn generator
Bug Description:
It exists a test of csn generator (csngen_test()).
It is not called from any function.
Fix Description:
register a task container 'cn=csngen_test,cn=tasks,cn=config"
that calls the test function
https://pagure.io/389-ds-base/issue/50877
Reviewed by: William Brown (Thanks !)
Platforms tested: F30
Flag Day: no
Doc impact: no
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/8635444b3019ac4ca9fc892cdf6b69b988a53180">8635444b</a></strong>
<div>
<span>by root</span>
<i>at 2020-04-22T17:57:05+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
Bug: Changes by internal operations were not handled by the sync repl plugin
Fix: Register sync repl postop functions also for internal ops
Reviewed by: xAThierry, thanks
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/2333d75d54baeba8c8157d10234a915a2d7a6a25">2333d75d</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2020-04-22T14:29:43-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Bump version to 1.4.4.1
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/05f8661762dff56e8f0602bc9d04450bfc89fb1f">05f86617</a></strong>
<div>
<span>by Simon Pichugin</span>
<i>at 2020-04-24T14:50:01+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 51027 - Test passwordHistory is not rewritten on a fail attempt
Description: Add a test that check that "passwordHistory" attribute
for a user doesn't get updated if a password change fails due to
password repetition.
Add a fixture for the test user and its ACI.
https://pagure.io/389-ds-base/issue/51027
Reviewed by: tbordaz (Thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/326be2c9eb6411a3b08987dc07f064983b8a3415">326be2c9</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2020-04-24T10:12:56-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 50545 - Port dbgen.pl to dsctl
Description: Ported the main features to lib389 and added some other useful features:
Now there are several LDIFs that can be created:
- User LDIFs (different types)
- Group LDIFs
- COS LDIFs
- Role LDIFs
- Modification LDIFs
- Nested LDIFs
Design Doc: https://www.port389.org/docs/389ds/design/dbgen-design.html
fixes: https://pagure.io/389-ds-base/issue/50545
Reviewed by: firstyear & spichugi(Thanks!!)
Fix various issue and improve ldif file validation
Add summary of settings to output, and set the default location of user/nested LDIF to be in the server's LDIF directory
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/53e9d9f9c4fe68a3be6026ab2158519774d3eafa">53e9d9f9</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2020-04-24T12:35:38-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 50499 - fix npm audit issues
Description: Fix npm audit amd update npm packages
relates: https://pagure.io/389-ds-base/issue/50499
Reviewed by: spichugi(Thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/0f446a5494340bafb8f5522bd3a9f4cab184d025">0f446a54</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2020-04-24T12:40:47-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 51047 - React deprecating ComponentWillMount
Description: ComponentWillMount has been deemed as unsafe, switching to
ComponentDidMount is the preferred solution and does not
seem to affect the UX.
Fixes: https://pagure.io/389-ds-base/issue/51047
Reviewed by: spichugi(Thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/1b8a6be1406c6bee9c02f01b68458902120f8761">1b8a6be1</a></strong>
<div>
<span>by Viktor Ashirov</span>
<i>at 2020-04-29T15:46:08+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 49761 - Fix CI tests
Description:
* Update pytest markers
* Fix changelog test on EL8
* Fix race conditions in pwdPolicy_warning_test, pwdPolicy_attribute_test, rootdn_plugin_test
* Increase a timeout for check_ruv()
* Use appropriate default password storage scheme on older versions
* Remove nsUniqueId from the expected attributes if search is done on rootdse
* Add missing __init__.py for the test suites
Relates: https://pagure.io/389-ds-base/issue/49761
Reviewed by: spichugi (Thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/13f8dc7b6f4f66a3c272ef9e9ad07b403e758802">13f8dc7b</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2020-04-29T13:25:43-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
Bug Description: Adding an invalid/double equal sign when setting the
target/targetattr/targetfilter will cause a heap "underflow":
targetfilter=="(uid=*)"
Fix description: Detect and reject these invalid ACI syntaxes before we
"underflow". Simply check if the character after the first
equal sign is a double quote, as that is the only possible
next valid character in a valid ACI.
fixes: https://pagure.io/389-ds-base/issue/51054
Reviewed by: firstyear(Thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/c7da66ebc41565fb8fcd6f746c57b10932d03ae0">c7da66eb</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2020-04-29T17:00:33-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
Description: Also need to undo the change for setup-ds.pl
relates: https://pagure.io/389-ds-base/issue/49731
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/da12b98c3faa9c5a6d8ab10412f7fbbd7e2752ad">da12b98c</a></strong>
<div>
<span>by Sylvie Gouverneyre</span>
<i>at 2020-04-30T09:34:13+00:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 50655 - etime displayed has an order of magnitude 10 times smaller than it should be
Description:
Time value in nanoseconds displayed in the access log was 10 times lower than the actual value.
This test is intented to verify the fix for this problem.
Relates https://bugzilla.redhat.com/show_bug.cgi?id=1749236
Author: sgouvern
Review by: firstyear, spichugi
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/3def54de447c435009bee65d8e96655fb0236fd4">3def54de</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2020-05-01T09:40:28-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 51051 - CLI fix consistency issues with confirmations
Description: The remove-all feature of dsctl uses different confirmation
prompt than "dsctl remove". To fix this the "countdown" style
confirmation was moved to "remove_all", as "dsctl INST remove"
already had an additional argument.
Also cleaned up unused imports other various bugs found by my
IDE.
relates: https://pagure.io/389-ds-base/issue/51050
Reviewed by: firstyear(Thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/1cff0fb32018a637080b3be5067510742a4d0a5b">1cff0fb3</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2020-05-01T09:54:23-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 51064 - Unable to install server where IPv6 is disabled
Description: When checking if a port is available, first attempt to
create a socket using AF_INET6, if that fails then use
AF_INET
relates: https://pagure.io/389-ds-base/issue/51064
Reviewed by: firstyear(Thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/3548738f9df0ab7a2df009def81a6fba86b32921">3548738f</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2020-05-01T09:58:06-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 51060 - unable to set sslVersionMin to TLS1.0
Description: When processing the "sslVersionMin" attribute we were incorrectly
setting it to TLS1.2 (current default level)
fixes: https://pagure.io/389-ds-base/issue/51060
Reviewed by: firstyear(Thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/8895fc4b4b7f62963a0f52b05c76767cbc4fba74">8895fc4b</a></strong>
<div>
<span>by Viktor Ashirov</span>
<i>at 2020-05-02T20:58:21+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 50992 - Bump jemalloc version and enable profiling
Description:
jemalloc 5.2.1 release introduced a number of fixes.
https://github.com/jemalloc/jemalloc/releases/tag/5.2.1
Additionally:
* Override default page and hugepage sizes, because builder machines may not match the target systems.
* Enable profiling by default (--enable-perf), so it can be used for troubleshooting.
Fixes: https://pagure.io/389-ds-base/issue/50992
Reviewed by: mreynolds (Thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/582691dd29cfcd29010ba17853f517870fb6f221">582691dd</a></strong>
<div>
<span>by Eli Schwartz</span>
<i>at 2020-05-05T20:50:54-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 51042 - switch from c_rehash to openssl rehash
Bug Description:
389-ds-base depends on an additional Fedora package openssl-perl for
the /usr/bin/c_rehash script, which just wraps /usr/bin/openssl and
drags in a perl interpreter in the process. The openssl program
contains a builtin 'rehash' subcommand that does the same thing,
only faster and with fewer dependencies. And openssl developers
refer to c_rehash as a fallback and suggest it might be feasible to
remove it entirely.
Fix Description:
Switch all call sites and inline documentation to refer to `openssl
rehash`, and drop the unneeded dependency from the spec file.
One less dependency on perl!
Fixes https://pagure.io/389-ds-base/issue/51042
Author: eschwartz
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/151a96785d59050a03c88409be6d51c627fe86c1">151a9678</a></strong>
<div>
<span>by Eli Schwartz</span>
<i>at 2020-05-05T20:50:54-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 51042 - try to use both c_rehash and openssl rehash
Bug Description:
It's not possible to fully migrate to openssl rehash, since it is
not available everywhere. And versions of openssl which don't have
rehash, also cannot check if rehash is available, or try running it
at all as a fallback, because the return value is meaningless.
Fix Description:
Add a utility function that checks the openssl version and parses it
into a LegacyVersion class. `openssl version` should work
everywhere, despite being unfriendly to parse. On versions of
openssl >= 1.1.0a (LegacyVersion also considers 1.1.0 > 1.1.0a), use
openssl rehash, otherwise fall back to c_rehash.
Fixes https://pagure.io/389-ds-base/issue/51042
Author: eschwartz
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/1b7b12e2f7a8f3004348dd1a51788e81d02dfeed">1b7b12e2</a></strong>
<div>
<span>by Thierry Bordaz</span>
<i>at 2020-05-07T16:50:21+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Ticket 51068 - deadlock when updating the schema
Bug Description:
It exists a 3 threads deadlock scenario. It involves state change plugins when it
calls schema_changed_callback. So the trigger is a change of schema (direct or via
replication). The scenario is
MOD(cn=schema) hold StateChange lock wait for vattr lock
SRCH hold vattr lock wait for DB page
MOD hold DB page wait for StateChange lock
Fix Description:
Statechange lock protects the list of registered callbacks.
lock is a mutex where actually registration of callback is only done
at startup. Later the list is only lookup.
Making statechange lock a rwlock suppresses the deadlock scenario
as MODs will only acquire in read StateChange lock.
It should also improve performance as at the moment all MODs are serialized
on that lock
In order to prevent writer starvation a new slapi_new_rwlock_prio
create rwlock with priority to writers.
https://pagure.io/389-ds-base/issue/51068
Reviewed by: Mark Reynolds, William Brown
Platforms tested: 30
Flag Day: no
Doc impact: no
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/916d13bc230f5edffd8f4fb9da0a30fcde3eb573">916d13bc</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2020-05-08T09:43:53-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 51054 - Revise ACI target syntax checking
Bug Description: The previous commit enforced a strict syntax that was previously
allowed. This is causing regressions for customers and community
members.
Fix Description: Reject ACI's that use more than one equal sign between the target
keyword and the value, but do not enforce that the values are
quoted. A flag was added that we can turn on strict syntax at a
later date, but for now we will continue allow values without quotes.
relates: https://pagure.io/389-ds-base/issue/51054
Reviewed by: firstyear & spichugi(Thanks!!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/6a0ece1e5d6c3a6f8d0d4f312a8e3af6f518087d">6a0ece1e</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2020-05-08T15:05:25-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
Description:
FreeIPA LDAP update code relies on the schema retrieval when
deciding what to do with values of single-valued LDAP attributes.
In the case attribute is single-valued and some value was present
in the original entry for this attribute, it would use MOD_REPLACE.
Otherwise, it uses MOD_DELETE + MOD_ADD.
Many attributes used in cn=config entries have no formal schema
defined. Since by default an attribute is multi-valued, this fails
the logic above for actual single-valued attributes, like
nsslapd-enable-upgrade-hash. It means FreeIPA has to write special
logic to handle just this attribute.
It would be good to expose schema for nsslapd-enable-upgrade-hash.
We need to change its value to off in all FreeIPA installations
because ipa-pwd-extop plugin prevents hashed passwords in updates
due to a need to regenerate Kerberos hashes on a password change.
It means upgrade of a password hash on LDAP bind will never work
in FreeIPA.
Note - this does move us closer to our goal of adding all the
configuration attributes to the schema.
fixes: https://pagure.io/389-ds-base/issue/51078
Reviewed by: mreynolds (one line commit rule)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/debc684adc387edc98eb07698f20f11a63964e0a">debc684a</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2020-05-08T15:25:46-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Bump version to 1.4.4.2
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/888f0b217b3ac3099ba3ccc5002ef5198ddd664d">888f0b21</a></strong>
<div>
<span>by Simon Pichugin</span>
<i>at 2020-05-11T10:54:08+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 50201 - nsIndexIDListScanLimit accepts any value
Bug Description: Setting of nsIndexIDListScanLimit like
'limit=2 limit=3' are detected and logged in error logs.
But the invalid value is successfully applied in the config entry
and the operation itself is successful.
The impact is limited because the index will be used following
idlistscanlimit rather than invalid definition nsIndexIDListScanLimit.
Fix Description: Print the errors to the user when he tries to add
or to modify index config entry with malformed values.
Change tests accordingly.
https://pagure.io/389-ds-base/issue/50201
Reviewed by: mreynolds, tbordaz (Thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/d73b14a1c877982bf23b9261facd82caf50d32f0">d73b14a1</a></strong>
<div>
<span>by Anuj Borah</span>
<i>at 2020-05-11T15:46:25+05:30</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue:CI test - automember_plugin (Long Duration test)
CI test - automember_plugin (Long Duration test)
Relates: https://pagure.io/389-ds-base/issue/48055
Author: aborah
Reviewed by: Viktor Ashirov
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/0cb1e043549e96825be605883aba93c117e98d54">0cb1e043</a></strong>
<div>
<span>by Thierry Bordaz</span>
<i>at 2020-05-11T18:07:22+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Ticket 51082 - abort when a empty valueset is freed
Bug Description:
A large valueset (more than 10 values) manages a sorted array of values.
replication purges old values from a valueset (valueset_array_purge). If it purges all the values
the valueset is freed (slapi_valueset_done).
A problem is that the counter of values, in the valueset, is still reflecting the initial number
of values (before the purge). When the valueset is freed (because empty) a safety checking
detects incoherent values based on the wrong counter.
Fix Description:
When all the values have been purge reset the counter before freeing the valueset
https://pagure.io/389-ds-base/issue/51082
Reviewed by: Mark Reynolds
Platforms tested: F30
Flag Day: no
Doc impact: no
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/6a7a154159583c09fcbba0578eaf576d577ccb11">6a7a1541</a></strong>
<div>
<span>by Matus Honek</span>
<i>at 2020-05-12T11:06:50+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 51017 - Implement dynamic ds/bz pytest markers
Bug Description:
Our unique markers for tickets cause a lot pytest warnings
PytestUnknownMarkWarning.
Fix Description:
On each run, go through all test files and the correctly prefixed markers for
the runtime being.
Fixes: https://pagure.io/389-ds-base/issue/51017
Author: Matus Honek <mhonek@redhat.com>
Review by: Viktor & Simon (Thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/497c18f2f204d6295832d727532b70f222bfc285">497c18f2</a></strong>
<div>
<span>by Barbora Smejkalova</span>
<i>at 2020-05-12T11:23:20+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 50873 - Fix issues with healthcheck tool
Description:
Created sanity HealthCheck test to see if the tool works on standalone instance.
I extended topology_st with LogCapture in src/lib389/lib389/topologies.py
and added new topology_no_sample that does not create sample entries so we can reproduce DSBLE0003.
Added environment variable PYINSTALL to use python installer for these tests.
The tests can be run using 'PYINSTALL=True py.test ...'.
Also created test to check DSBLE0003 and added test steps from Sylvie (Thanks!) because
we want to import them to our test plan in Polarion
I will fill the blank tests soon.
Relates: https://pagure.io/389-ds-base/issue/50873
Reviewed by: spichugi, firstyear, vashirov (Thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/26c77a4bb02672a63bb2cdeb68f951f3796af29c">26c77a4b</a></strong>
<div>
<span>by Matus Honek</span>
<i>at 2020-05-12T09:27:20+00:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 50940 - Permissions of some shipped directories may change over time
Bug Description:
Some utilities (e.g. installer, esp. setup-ds.pl) alter permissions of
some folders shipped by default. This is discoverable by running
`rpm -V 389-ds-base` after using these.
Fix Description:
Since Perl tools are deprecated and Python tools do not seem to change
most of those permissions, only fix /var/lock/dirsrv in SPEC file.
Relates: https://pagure.io/389-ds-base/issue/50940
Author: Matus Honek <mhonek@redhat.com>
Review By: Simon (Thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/bc789a909c0022dd5228f0c3f15039b7274aa508">bc789a90</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2020-05-12T07:36:17-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 51076 - prevent unnecessarily duplication of the target entry
Bug Description: For any update operation the MEP plugin was calling
slapi_search_internal_get_entry() which duplicates
the entry it returns. In this case the entry is just
read from and discarded, but this entry is already
in the pblock (the PRE OP ENTRY).
Fix Description: Just grab the PRE OP ENTRY from the pblock and use
that to read the attribute values from. This saves
two entry duplications for every update operation
from MEP.
fixes: https://pagure.io/389-ds-base/issue/51076
Reviewed by: tbordaz & firstyear(Thanks!!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/d45d8bd0f474dac181c58525c8a11dea0ff1a721">d45d8bd0</a></strong>
<div>
<span>by Simon Pichugin</span>
<i>at 2020-05-12T15:26:37+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 50610 - memory leaks in dbscan and changelog encryption
Bug Description: More leaks are present that involve dbscan
execution (the issue happens on instance restart though).
Fix Description: dbscan - add 'done:' section to which we can
go to if something went worng and free the allocated data.
changelog encryption - add clcrypt_destroy function;
properly free the allocated memory when we go to shutdown.
When we do changelog5_config_done, additionally free
config->symmetricKey, config->dbconfig.encryptionAlgorithm,
and config->dbconfig.symmetricKey
https://pagure.io/389-ds-base/issue/50610
Reviewed by: lkrispen (Thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/431aba869708c7d47ee40380cb05c9a1380d1bd5">431aba86</a></strong>
<div>
<span>by Simon Pichugin</span>
<i>at 2020-05-13T14:05:42+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 50610 - Fix return code when it's nothing to free
Description: Fix the return code when NULL == clcrypt_handle
supplied to clcrypt_destroy.
https://pagure.io/389-ds-base/issue/50610
Reviewed by: mreynolds (Thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/ab1aaad47b0c4845ea576056f2e7044f1a0d8373">ab1aaad4</a></strong>
<div>
<span>by Viktor Ashirov</span>
<i>at 2020-05-13T20:28:36+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 49761 - Fix CI tests
Fix Description:
* Update skipif/xfail pytest marks
* Unset PYTHONPATH for cli tools in setup_ds tests
* Change pem files extraction path in SASL regression tests
* Fix a typo in 'state' tests directory name
Relates: https://pagure.io/389-ds-base/issue/49761
Reviewed by: mreynolds (Thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/b3dec427f1ab79c731aaa079e2769aac6f002bbc">b3dec427</a></strong>
<div>
<span>by Matus Honek</span>
<i>at 2020-05-14T16:55:43+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Revert "Issue 51017 - Implement dynamic ds/bz pytest markers"
Apparently, in some situations, grepping over all the files gets very
slow due to filesystem implementation (e.g. docker on MacOS) specifics.
Instead of this implementation, we'll rather look into pre-commit hooks
adding new markings on the fly.
This reverts commit 6a7a154159583c09fcbba0578eaf576d577ccb11.
Relates: https://pagure.io/389-ds-base/issue/51017
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/1ba7370ecc53e52ffe06a7e8afe6fcfc6ca289dc">1ba7370e</a></strong>
<div>
<span>by William Brown</span>
<i>at 2020-05-15T12:00:32+10:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Ticket 51079 - container pid start and stop issues
Bug Description: During the container startup, we were incorrectly
checking for the pidfile as we started. We also were not properly
catching sigint, and dscontainer on keyboard int was not passing
some signals through.
Fix Description: Improve signal handling in dscontainer, add sigint
as a caught signal to ns-slapd, and remove the pid file from the container
instance as we do not require it.
https://pagure.io/389-ds-base/issue/51079
https://pagure.io/389-ds-base/issue/51080
Author: William Brown <william@blackhats.net.au>
Review by: ???
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/495ee204b7f124976dacd70a8cb72c1cfc8acef0">495ee204</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2020-05-15T08:17:02-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 51091 - healthcheck json report fails when mapping tree is deleted
Description: We were passing the bename in bytes and not as a utf8 string.
This caused the json dumping to fail.
relates: https://pagure.io/389-ds-base/issue/51091
Reviewed by: firstyear(Thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/9afa6694c566e2f37a3ad61403127c5c85cf4dac">9afa6694</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2020-05-15T10:05:35-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 50499 - Fix some npm audit issues
Description there are still warnings:
npm WARN eonasdan-bootstrap-datetimepicker@4.17.47 requires a peer of bootstrap@^3.3 but none is installed. You must install peer dependencies yourself.
npm WARN table-resolver@3.3.0 requires a peer of redux@>= 3.0.0 < 4.0.0 but none is installed. You must install peer dependencies yourself.
npm WARN react-ellipsis-with-tooltip@1.1.1 requires a peer of react-bootstrap@0.31.x || 0.32.x but none is installed. You must install peer dependencies yourself.
relates: https://pagure.io/389-ds-base/issue/50499
Reviewed by: mreynolds
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/3516495c77c89594c7f6b817fa1db7ac72a2c516">3516495c</a></strong>
<div>
<span>by Thierry Bordaz</span>
<i>at 2020-05-18T17:36:37+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Ticket 51037 - RFE AD filter rewriter for ObjectSID
Bug Description:
AD provides flexibility, to AD clients, to use string representation of objectSID
(for example S-1-5-21-1305200397-1234-1234-1234)
To support AD client using 'ObjectSid' shortcut, we need a 389-ds filter rewriters that
translate the filter '(objectSid=S-1-5-21-1305200397-1234-1234-1234)' into '(objectSid=<objectsid blob>)'
before processing the filter
see https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-ada3/afac8414-c614-4c6a-b316-41f5978308bd
Fix Description:
This patch uses the new ability to registers rewriters (https://pagure.io/389-ds-base/issue/50980)
It implements a new callback filter rewriter adfilter_rewrite_objectsid in librewriters.so
https://pagure.io/389-ds-base/issue/51037
Reviewed by: Mark Reynolds, Alexander Bokovoy, Simon Pichugin, William Brown (Thanks !)
Platforms tested: F30
Flag Day: no
Doc impact: no
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/8b3f4ca6d3c28262ece7079eb77968be445f3cab">8b3f4ca6</a></strong>
<div>
<span>by William Brown</span>
<i>at 2020-05-19T10:28:17+10:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Ticket 50989 - ignore pid when it is ourself in protect_db
Bug Description: In protect_db.c, there are some cases (especially containers)
where a pid number can be re-used. Following a bad shutdown, the lock files
in /run/lock/{export,import,server}/* remain, and the pid they hold could
be allocated to ourself. When this occurs, the server fails to start.
Fix Description: If the pid of the lock file is our own pid, that is proof
that the previous pid/lock file can not exist, and therfore it is safe to
proceed with the startup.
https://pagure.io/389-ds-base/issue/50989
Author: William Brown <william@blackhats.net.au>
Review by: tbordaz (Thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/08cad9e7522272577e3fc2f1a605b83e088c6a26">08cad9e7</a></strong>
<div>
<span>by Thierry Bordaz</span>
<i>at 2020-05-19T10:59:22+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Ticket 51037 - compiler warning
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/75e3b867d3a879d3490f0497ec4245de75344af2">75e3b867</a></strong>
<div>
<span>by Anuj Borah</span>
<i>at 2020-05-19T14:34:55+05:30</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue:51070 - Port Import TET module to python3 part1
Bug Description: Port Import TET module to python3 part1
Relates: https://pagure.io/389-ds-base/issue/51070
Author: aborah
Reviewed by: Simon Pichugin
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/e0e2db1de995930f73ef3705ce168e5a12a5cd41">e0e2db1d</a></strong>
<div>
<span>by Simon Pichugin</span>
<i>at 2020-05-19T17:42:07+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 51086 - Improve dscreate instance name validation
Bug Description: When creating an instance using dscreate, it doesn't enforce
max name length. The ldapi socket name contains name of the instance. If it's
too long, we can hit limits, and the file name will be truncated. Also, it
doesn't sanitize the instance name, it's possible to create an instance with
non-ascii symbols in its name.
Fix Description: Add more checks to 'dscreate from-file' installation.
Add a limitation for nsslapd-ldapifilepath string lenght because it is
limited by sizeof((*ports_info.i_listenaddr)->local.path)) it is copied to.
https://pagure.io/389-ds-base/issue/51086
Reviewed by: firstyear, mreynolds (Thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/68ab6a809a2a46fbdb6fb880b1e79f99b09457b1">68ab6a80</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2020-05-20T09:22:06-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 51076 - remove unnecessary slapi entry dups
Description: So the problem is that slapi_search_internal_get_entry()
duplicates the entry twice. It does that as a convenience
where it will allocate a pblock, do the search, copy
the entry, free search results from the pblock, and then
free the pblock itself. I basically split this function
into two functions. One function allocates the pblock,
does the search and returns the entry. The other function
frees the entries and pblock.
99% of time when we call slapi_search_internal_get_entry()
we are just reading it and freeing it. It's not being
consumed. In these cases we can use the two function
approach eliminates an extra slapi_entry_dup(). Over the
time of an operation/connection we can save quite a bit
of mallocing/freeing. This could also help with memory
fragmentation.
ASAN: passed
relates: https://pagure.io/389-ds-base/issue/51076
Reviewed by: firstyear & tbordaz(Thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/c350ddc99c1618f32ee29db506b007f85f771186">c350ddc9</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2020-05-20T13:48:27-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 51102 - RFE - ds-replcheck - make online timeout configurable
Bug Description: When doing an online check with replicas that are very
far apart the connection can time out as the hardcoded
timeout is 5 seconds.
Fix Description: Change the default timeout to never timeout, and add an
CLI option to specify a specific timeout.
Also caught all the possible LDAP exceptions so we can
cleanly "fail". Fixed some python syntax issues, and
improved the entry inconsistency report
relates: https://pagure.io/389-ds-base/issue/51102
Reviewed by: firstyear & spichugi(Thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/9d5fe06e36c6bf7d2e6854b8f9c703a1779b81c2">9d5fe06e</a></strong>
<div>
<span>by Sylvie Gouverneyre</span>
<i>at 2020-05-25T09:51:24+00:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 49850 -ldbm_get_nonleaf_ids() painfully slow for databases with many non-leaf entries
Description:
With a very large database, gathering non-leaf IDs for creating the ancestorid index took an enormous amount of time.
This test is to verify the fix for this problem.
https://pagure.io/389-ds-base/issue/49850
Author: sgouvern
Reviewed by: firstyear, spichugi
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/251cef910f0d2abc1ade58db1f75922d2b57b932">251cef91</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2020-05-26T08:38:30-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 51110 - Fix ASAN ODR warnings
Description: Fixed ODR issues with glboal attributes which were duplicated from
the core server into the replication and retrocl plugins.
relates: https://pagure.io/389-ds-base/issue/51110
Reviewed by: firstyear(Thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/2fc834aa9d8480fc4f5826b4b7f3b534fe06be76">2fc834aa</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2020-05-26T11:20:02-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 51095 - abort operation if CSN can not be generated
Bug Description: If we fail to get the system time then we were using an
uninitialized timespec struct which could lead to bizarre
times in CSN's.
Fix description: Check if the system time function fails, and if it does
then abort the update operation.
relates: https://pagure.io/389-ds-base/issue/51095
Reviewed by: firstyear & tbordaz(Thanks!!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/eb191f5b146c07088d9fa4b10713f5644eca89a3">eb191f5b</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2020-05-27T07:35:57-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 51113 - Allow using uid for replication manager entry
Bug Description: Currently it was hardcoded to only allow "cn" as
the rdn attribute for the replication manager entry.
Fix description: Allow setting the rdn attribute of the replication
manager DS ldap object, and include the schema that
allows "uid".
relates: https://pagure.io/389-ds-base/issue/51113
Reviewed by: spichugi & firstyear(Thanks!!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/1befe9297319bd278d4008dc927dbacf1e6cea89">1befe929</a></strong>
<div>
<span>by Anuj Borah</span>
<i>at 2020-05-28T10:14:24+05:30</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue: 50860 - Port Password Policy test cases from TET to python3 part1
CI test - Port Password Policy test cases from TET to python3 part1
Relates: https://pagure.io/389-ds-base/issue/50860
Author: aborah
Reviewed by: Simon Pichugin, Viktor Ashirov
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/cec05062bece7d7497766714176e6db4dcf01358">cec05062</a></strong>
<div>
<span>by Viktor Ashirov</span>
<i>at 2020-05-28T09:58:26+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 50931 - RFE AD filter rewriter for ObjectCategory
Bug Description:
ASAN build fails on RHEL due to linking issues
Fix Description:
Add missing libslapd.la for librewriters.la
Relates: https://pagure.io/389-ds-base/issue/50931
Reviewed by: tbordaz (Thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/7b79b89c19d75d72a1e0323e81e0ad7bb43b6342">7b79b89c</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2020-05-29T16:44:12-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Bump version to 1.4.4.3
</pre>
</li>
</ul>
<h4>27 changed files:</h4>
<ul>
<li class="file-stats">
<a href="#d5b4de16d947214ec306bd57bed1bd23a939b5f9">
Makefile.am
</a>
</li>
<li class="file-stats">
<a href="#d7e560a1b9a915cc82a4a544b31706fd6db5f6fd">
VERSION.sh
</a>
</li>
<li class="file-stats">
<a href="#dea9a48deca97dbb73ba1a685f389310fd90a855">
dirsrvtests/conftest.py
</a>
</li>
<li class="file-stats">
<a href="#82b96472da4b30281208e4cf127143601540a1db">
<span class="new-file">
+
dirsrvtests/tests/longduration/automembers_long_test.py
</span>
</a>
</li>
<li class="file-stats">
<a href="#786ebc53064f65a4ff7c1e7f11e00308f30832fd">
dirsrvtests/tests/stress/search/simple.py
</a>
</li>
<li class="file-stats">
<a href="#5109cd28cb7bd9d2367b3e83ecdad8cebef39f2e">
dirsrvtests/tests/suites/acl/syntax_test.py
</a>
</li>
<li class="file-stats">
<a href="#f40d372ca67383e5d54b24d9f51e7206a4f44209">
dirsrvtests/tests/suites/auth_token/basic_auth_test.py
</a>
</li>
<li class="file-stats">
<a href="#3e1a8b47b38101330b69f73be793efdd7864cdb0">
dirsrvtests/tests/suites/automember_plugin/basic_test.py
</a>
</li>
<li class="file-stats">
<a href="#7cffca0bd7a0ae4a4c2a74bc2df07196d4867dfb">
dirsrvtests/tests/suites/basic/basic_test.py
</a>
</li>
<li class="file-stats">
<a href="#294cf48041d0487b438a4bf6b4512d037784881c">
dirsrvtests/tests/suites/disk_monitoring/disk_monitoring_test.py
</a>
</li>
<li class="file-stats">
<a href="#1ebff6c3e6c4ffd2428487fa84244ea5eb7abfcd">
dirsrvtests/tests/suites/ds_logs/ds_logs_test.py
</a>
</li>
<li class="file-stats">
<a href="#3a9eef3e4bba4e2fa444ded6329a4ac965fd7afb">
dirsrvtests/tests/suites/filter/filterscanlimit_test.py
</a>
</li>
<li class="file-stats">
<a href="#f3ea6275b06beb8b1a73f141ecd5f4a3a8d81769">
dirsrvtests/tests/suites/filter/rfc3673_all_oper_attrs_test.py
</a>
</li>
<li class="file-stats">
<a href="#b944b3e1aa9a3b21c1d579ecdaa1d56099dffb17">
<span class="new-file">
+
dirsrvtests/tests/suites/fractional/__init__.py
</span>
</a>
</li>
<li class="file-stats">
<a href="#565bd7b444fe8463196172f6947c5b98973dd004">
<span class="new-file">
+
dirsrvtests/tests/suites/healthcheck/__init__.py
</span>
</a>
</li>
<li class="file-stats">
<a href="#fc745b7329408642ad5ca2846097fdbbb1cfc158">
<span class="new-file">
+
dirsrvtests/tests/suites/healthcheck/healthcheck_test.py
</span>
</a>
</li>
<li class="file-stats">
<a href="#0735c3850847723c2a147a126b9df7f62397a3ed">
<span class="new-file">
+
dirsrvtests/tests/suites/import/import_test.py
</span>
</a>
</li>
<li class="file-stats">
<a href="#8a71cb76126324fd29a365586568423c32d090ce">
dirsrvtests/tests/suites/import/regression_test.py
</a>
</li>
<li class="file-stats">
<a href="#879526db470e7dd651850f609946db0301143d71">
dirsrvtests/tests/suites/mapping_tree/referral_during_tot_init_test.py
</a>
</li>
<li class="file-stats">
<a href="#f90a4539b6f409b0e076891be7f43510a456c8a1">
<span class="new-file">
+
dirsrvtests/tests/suites/password/password_policy_test.py
</span>
</a>
</li>
<li class="file-stats">
<a href="#7b1b490bb442f12b6656f61dec43b5e0d76cb3cb">
dirsrvtests/tests/suites/password/pwdPolicy_attribute_test.py
</a>
</li>
<li class="file-stats">
<a href="#82e8d648b6de67c756f8e92c781f5f2ae68c0b0a">
dirsrvtests/tests/suites/password/pwdPolicy_warning_test.py
</a>
</li>
<li class="file-stats">
<a href="#3b01b418741a169d1a08b985de2c0e7a5af2d117">
dirsrvtests/tests/suites/password/pwp_history_test.py
</a>
</li>
<li class="file-stats">
<a href="#b9e37c48352ba83ee425702a147fc930a6202c20">
dirsrvtests/tests/suites/password/pwp_test.py
</a>
</li>
<li class="file-stats">
<a href="#d1a4e21e0e7681e37de687a9dbd77807bc863f3c">
dirsrvtests/tests/suites/plugins/rootdn_plugin_test.py
</a>
</li>
<li class="file-stats">
<a href="#5dc7395650d32aff34deb0b607d23c579260cada">
dirsrvtests/tests/suites/pwp_storage/storage_test.py
</a>
</li>
<li class="file-stats">
<a href="#dae58349ae9bf707b7d6a70913228c26d819c9c7">
dirsrvtests/tests/suites/replication/acceptance_test.py
</a>
</li>
</ul>
<h5>The diff was not included because it is too large.</h5>
</div>
<div class="footer" style="margin-top: 10px;">
<p style="font-size: small; color: #777;">
—
<br>
<a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/compare/56c433833ae0475e4efe44c0ee09e78515080191...7b79b89c19d75d72a1e0323e81e0ad7bb43b6342">View it on GitLab</a>.
<br>
You're receiving this email because of your account on salsa.debian.org.
If you'd like to receive fewer emails, you can
adjust your notification settings.
</p>
</div>
</body>
</html>