<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" "http://www.w3.org/TR/REC-html40/loose.dtd">
<html lang="en">
<head>
<meta content="text/html; charset=US-ASCII" http-equiv="Content-Type">
<title>
GitLab
</title>



<style>img {
max-width: 100%; height: auto;
}
</style>
</head>
<body>
<div class="content">

<h3>
Timo Aaltonen pushed to branch master
at <a href="https://salsa.debian.org/freeipa-team/389-ds-base">FreeIPA packaging / 389-ds-base</a>
</h3>
<h4>
Commits:
</h4>
<ul>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/a08540a828dde2f2e1a8d157c38a9be85a5d2876">a08540a8</a></strong>
<div>
<span>by James Chapman</span>
<i>at 2021-06-03T12:56:02+00:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 4750 - Fix compiler warning in retrocl (#4751)

Description: An unused variable generates a compiler warning.

Fix description: Remove unused variable. Modify CI test to restart the test instance instead
                         of using dynamic plugins.

Fixes: https://github.com/389ds/389-ds-base/issues/4750

Relates: https://github.com/389ds/389-ds-base/issues/4701

Reviewed by: jchapma (One line commit rule)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/bfb3880cf650043cc9b7aefe7c9327937b6edbed">bfb3880c</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2021-06-07T13:08:19-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 4773 - Add CI test for DNA interval assignment

Description: Add test case for DNA interval assignment

relates: https://github.com/389ds/389-ds-base/issues/4773

Reviewed by: spichugi(Thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/f31010ef70b9f956f96953d559d0a4eaea39d67d">f31010ef</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2021-06-08T09:36:06-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 4447 - Crash when the Referential Integrity log is manually edited

Bug Description:  If the referint log is manually edited with a string
                  that is not a DN the server will crash when processing
                  the log.

Fix Description:  Check for NULL pointers when strtoking the file line.

relates: https://github.com/389ds/389-ds-base/issues/4447

Reviewed by: firstyear(Thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/02ca55ddd0c52a51edd302fe5fc4938d2ffd2ea9">02ca55dd</a></strong>
<div>
<span>by tbordaz</span>
<i>at 2021-06-10T15:07:23+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)

Bug description:
        The fix for ticket #3764 was broken with a missing break in a
        switch. The consequence is that while setting the client IP
        address in the pblock (SLAPI_CONN_CLIENTNETADDR_ACLIP), the
        connection is erroneously set as replication connection.
        This can lead to crash or failure of testcase
        test_access_from_certain_network_only_ip.
        This bug was quite hidden until the fix for #4764 is
        showing it more frequently

Fix description:
        Add the missing break

relates: https://github.com/389ds/389-ds-base/issues/4797

Reviewed by: Mark Reynolds

Platforms tested: F33</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/a16a65325e6dfce5afd275600323ec06f9ff83e7">a16a6532</a></strong>
<div>
<span>by tbordaz</span>
<i>at 2021-06-15T16:18:23+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)

Bug description:
        When allocating a password policy structure (new_passwdPolicy)
        it is initialized with the local policy definition or
        the global one. If it exists a local policy entry, the TPR
        attributes (passwordTPRMaxUse, passwordTPRDelayValidFrom and
        passwordTPRDelayExpireAt) are not taken into account.

Fix description:
        Take into account TPR attributes to initialize the policy

relates: https://github.com/389ds/389-ds-base/issues/4789

Reviewed by: Simon Pichugin, William Brown

Platforms tested: F34</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/e4612cd47c6bb9a77a7f5e0c5cc97c6d585c49ca">e4612cd4</a></strong>
<div>
<span>by tbordaz</span>
<i>at 2021-06-16T13:50:06+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)

Bug description:
        test_syncrepl_basic test is unstable (1 fail out of 10 run)
        with a error.PyAsn1Error exception.

Fix description:
        flag this tests as flaky

relates: https://github.com/389ds/389-ds-base/issues/4747

Reviewed by: self reviewed (one line commit)

Platforms tested: F33
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/1e3f32dc8602828c2f837ea057658547e76f34d1">1e3f32dc</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2021-06-16T08:12:18-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 4093 - Fix MEP test case

Bug Description:  Once some compiler warnings were fixed it
                  accidentally fixed the modrdn behavior.  Previously
                  the modrdn code accidentally ignored errors that the
                  test case was taking for granted.  Once these checks
                  were properly inforced the teset case started to fail.

Fix Description:  Revise test case to "properly" check modrdn operations
                  by creating the Managed Entry before assignign it to
                  an entry, and then check for the revise managhed entry
                  DN after the modrdn takes place.

                  Also, improved CI debugging logging settings

relates: https://github.com/389ds/389-ds-base/issues/4093

Reviewed by: spichugi(Thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/fa46922b68fed7bd02057c2ff05c79bf172a747c">fa46922b</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2021-06-16T08:20:05-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 4506 - Improve SASL logging

Description:

Converted all SLAPI_LOG_TRACE logging to Connection logging (SLAPI_LOG_CONNS).

sasl_errstring() perform a simple and fast switch case mapping from
error code to const string.

relates : https://github.com/389ds/389-ds-base/issues/4506

Signed-off-by: Christian Heimes <cheimes@redhat.com>

Reviewed by: mreynolds
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/8de81d540b2a5f9ce90a33ac9a20e196090d96d4">8de81d54</a></strong>
<div>
<span>by tbordaz</span>
<i>at 2021-06-17T16:56:36+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)

Bug description:
    Since #4725, password policy support temporary password rules.
    CLI (dsconf) does not support this RFE and only direct ldap
    operation can configure global/local password policy

Fix description:
    Update dsconf to support this new RFE.
    To run successfully the testcase it relies on #4788

relates: #4788

Reviewed by: Simon Pichugin (thanks !!)

Platforms tested: F34
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/724763b7542cc62232aef5d86bbfde431b6dc140">724763b7</a></strong>
<div>
<span>by Simon Pichugin</span>
<i>at 2021-06-23T10:08:13+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)

Description: The description of the field "nsslapd-db-locks-monitoring-threshold"
is unclear. Make the explanations more detailed and concise in both CLI
and Web UI.

Fixes: https://github.com/389ds/389-ds-base/issues/4803

Reviewed by: @tbordaz (Thank you!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/5c88c00d1c29d37f6ddc86c4af793ee7f3888011">5c88c00d</a></strong>
<div>
<span>by Simon Pichugin</span>
<i>at 2021-06-23T10:25:54+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 4803 - Improve DB Locks Monitoring Feature Descriptions

Description: Enchance one line for the threshold setting
as per comment in https://github.com/389ds/389-ds-base/pull/4810

Relates: https://github.com/389ds/389-ds-base/issues/4803

Reviewed by: @droideck (one line rule)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/f17617d168010dca8d6dce787aacd2c9e1778c06">f17617d1</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2021-07-01T14:01:35-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 4656 - remove problematic language from ds-replcheck

Description: remove master from ds-replcheck and replace it with supplier

relates: https://github.com/389ds/389-ds-base/issues/4656

Reviewed by: mreynolds

e with '#' will be ignored, and an empty message aborts the commit.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/30b1346540ef61ff7047bbdfa102254e1bbf6a09">30b13465</a></strong>
<div>
<span>by tbordaz</span>
<i>at 2021-07-02T18:12:15+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)

Bug description:
        dirsrvtests/tests/suites/password/pwdPolicy_attribute_test.py contains
        password policy attributes tests (min_age,...) and tpr tests.
        Leftover of the fixture password_policy (scope module) are breaking
        TPR tests with subtree/user local password policy.

Fix description:
        Separate temporary password tests into their own module

relates: https://github.com/389ds/389-ds-base/issues/4822

Reviewed by: Simon Pichugin (Thanks!)

Platforms tested: 8.5, F34
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/fc53c8b228eb8733851a39f081caf44f8987a703">fc53c8b2</a></strong>
<div>
<span>by tbordaz</span>
<i>at 2021-07-02T18:15:04+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 4262 - Fix Index out of bound in fractional test (#4828)

Bug description:
        In master branch there are by default 2 groups while
        in 1.4.3 it exists only one. So the index '1'
        in the retrieved groups raise 'invalid index' exception
        in 1.4.3.

Fix description:
        Retrieve the specific group bug739172_01group
        to test its membership

relates: https://github.com/389ds/389-ds-base/issues/4262

Reviewed by:

Platforms tested:  8.5, fedora

foo</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/5d956fcc782f0b1fefc9748d6509cbf07a6ea853">5d956fcc</a></strong>
<div>
<span>by Thierry Bordaz</span>
<i>at 2021-07-05T16:03:04+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 4656 - (2nd) Remove problematic language from UI/CLI/lib389
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/c1926dfc6591b55c4d33f9944de4d7ebe077e964">c1926dfc</a></strong>
<div>
<span>by Firstyear</span>
<i>at 2021-07-09T11:55:56+10:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)

Bug Description: Due to mishanding of short dbpwd hashes, the
crypt_r algorithm was misused and was only comparing salts
in some cases, rather than checking the actual content
of the password.

Fix Description: Stricter checks on dbpwd lengths to ensure
that content passed to crypt_r has at least 2 salt bytes and
1 hash byte, as well as stricter checks on ct_memcmp to ensure
that compared values are the same length, rather than potentially
allowing overruns/short comparisons.

fixes: https://github.com/389ds/389-ds-base/issues/4817

Author: William Brown <william@blackhats.net.au>

Review by: @mreynolds389 </pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/357c16cde5f133e71583461b2f18011e7ac73d98">357c16cd</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2021-07-15T12:24:21-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 4443 - Internal unindexed searches in syncrepl/retro changelog

Bug Description:

When a non-system index is added to a backend it is
disabled until the database is initialized or reindexed.
So in the case of the retro changelog the changenumber index
is alway disabled by default since it is never initialized.
This leads to unexpected unindexed searches of the retro
changelog.

Fix Description:

If an index has "nsSystemIndex" set to "true" then enable it
immediately.

relates:  https://github.com/389ds/389-ds-base/issues/4443

Reviewed by: spichugi & tbordaz(Thanks!!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/4bd1c9408657bed62456dd2e19e2a4832160fb90">4bd1c940</a></strong>
<div>
<span>by Simon Pichugin</span>
<i>at 2021-08-03T15:37:22+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 4460 - Fix isLocal and TLS paths discovery (#4850)

Description: Fix isLocal inconsistency in the 'allocate' code.
Process LDAP URI and decide if it's local or not.
Make sure that while connecting locally the certdir (and other TLS paths) are accessible
(has read right) before setting ldap.OPT_X_TLS_*.
If none ldap.OPT_X_TLS_* options are set and there is no new TLS context, 
don't set OPT_X_TLS_NEWCTX. Then /etc/openldap/ldap.conf will be used.

Relates: https://github.com/389ds/389-ds-base/issues/4460

Reviewed by: @mreynolds389, @Firstyear (Thanks!!)</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/b99236af65b9459d24e724aa1b6bd32680991da8">b99236af</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2021-08-03T23:35:17-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 4736 - CLI - Errors from certutil are not propagated

Description:  Errors from certutil are not returned to the client, and
only a generic failure code is returned.  The actual error text should be
returned to the client since it has meaning.  Just catch all the
exception and return the output as a ValueError.

relates: https://github.com/389ds/389-ds-base/issues/4736

Reviewed by: firstyear (Thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/07b44fe5c9a1236a69c2e746287a99fcf4dd2b4d">07b44fe5</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2021-08-10T11:18:18-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 4736 - lib389 - fix regression in certutil error checking

Description: A regression in the previous commit accidentally called
certutil twice which triggered the CLI to prompt for the NSS database
password.  This broke CI tests, etc.

relates: https://github.com/389ds/389-ds-base/issues/4736

Reviewed by: mreynolds (one line commit rule)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/4c5a75ff4f94a06b6104c08abd1f8ee9c2113ee6">4c5a75ff</a></strong>
<div>
<span>by Simon Pichugin</span>
<i>at 2021-08-12T09:36:35+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)

Description: Fix typos in the output of "dsconf instance_name
pwpolicy set --help".

Fixes: https://github.com/389ds/389-ds-base/issues/4851

Reviewed by: @mreynolds389 (Thanks!)</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/a3d4f63e52737e8ed2cb5b8108cc985697a19c4f">a3d4f63e</a></strong>
<div>
<span>by Simon Pichugin</span>
<i>at 2021-08-18T16:04:41+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)

Bug Description: When using the Attribute uniqueness plugin, restricted
to one subtree, moving an object with an already existing attribute
to this subtree does not raise any exceptions. It appears that the
originating subtree is searched instead.

Fix Description: Use parent DN of the new entry when searching
for attribute uniqueness.
Add test to plugins/attruniq_test.py suite.

Fixes: https://github.com/389ds/389-ds-base/issues/4763

Reviewed by: @tbordaz (Thanks!)</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/a7ca0280f3a54e45a3f3fb7a16681c7d2de7670b">a7ca0280</a></strong>
<div>
<span>by Firstyear</span>
<i>at 2021-08-19T14:30:14-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)

Bug Description: Due to older servers missing the syntax
plugin this breaks schema replication and causes cascading
errors.

Fix Description: This changes the syntax to be a case
insensitive string, while leaving the plugins in place
for other usage.

fixes: https://github.com/389ds/389-ds-base/issues/4872

Author: William Brown <william@blackhats.net.au>

Review by: @mreynolds389 @progier389 </pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/66f745864a85b40927de91d2e5ade6d90d97dc45">66f74586</a></strong>
<div>
<span>by James Chapman</span>
<i>at 2021-08-19T15:41:25-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 4734 - import of entry with no parent warning (#4735)

Description:    Online import of ldif file that contains an entry with
                no parent doesnt generate a task warning.

Fixes:          https://github.com/389ds/389-ds-base/issues/4734

Author: vashirov@redhat.com (Thanks)

Reviewed by: mreynolds, jchapma</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/16124665cd9ec2b4903520c3dd076e683ea15eb3">16124665</a></strong>
<div>
<span>by Firstyear</span>
<i>at 2021-08-23T11:42:53+10:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)

Bug Description: Due to changing the syntax of EntryUUID's
to string, we may have invalid EntryUUID's imported into
the database.

Fix Description: To resolve this during a fixup we validate
that Uuid's have a valid syntax. If they do not, we regenerate
them.

fixes: https://github.com/389ds/389-ds-base/issues/4877

Author: William Brown <william@blackhats.net.au>

Review by: @mreynolds389
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/38e1e2618732235857a93b6c2b03e64a8236b013">38e1e261</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2021-08-26T09:38:45-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 4884 - server crashes when dnaInterval attribute is set to zero

Bug Description:

A division by zero crash occurs if the dnaInterval is set to zero

Fix Description:

Validate the config value of dnaInterval and adjust it to the
default/safe value of "1" if needed.

relates: https://github.com/389ds/389-ds-base/issues/4884

Reviewed by: tbordaz(Thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/a91c1f584d51d4ddbf30a9b973779193dd13345b">a91c1f58</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2021-08-26T10:11:27-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 4875 - CLI - Add some verbosity to installer

Description:  Previously the installer would basically say
              "Starting" and "Finished".  If a step would
              run into a problem it is difficult to narrow
              down what is going wrong.  So add a little more
              output during the installation.

relates: https://github.com/389ds/389-ds-base/issues/4875

Reviewed by: firstyear & spichugi(Thanks!!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/0491c2175c116390d7770bf7b6c667e2f1b93ade">0491c217</a></strong>
<div>
<span>by James Chapman</span>
<i>at 2021-08-27T12:08:58-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue - 4696 - Password hash upgrade on bind (#4840)

Description:
        There is an unintended side effect of the "upgrade password
        on bind" feature. It causes the password policy code to be
        engaged and it resets the passwordExpirationtime in the entry.

Fix description:
        Only allow an external password modify operation or an extended
        password modify operation update the password info.

Relates: https://github.com/389ds/389-ds-base/issues/4696

Reviewed by: @droideck, @tbordaz, @mreynolds389 (Thank you)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/03a6752085d1c38e273a6af5b08a1df8909a484c">03a67520</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2021-09-03T09:57:57-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks

Bug Description:  Monotonic clocks were used to check if an entry was old
                  enough to be trimmed, but the real system time should be
                  used.  So entries were never trimmed from the changelog.

Fix Description:  Make sure monotonic clocks are only used for the
                  trimming interval, and real time clocks are used
                  for entry age.

relates: https://github.com/389ds/389-ds-base/issues/4869

Reviewed by: firstyear(Thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/20de34288702f67b57d4c2f658f0b9ed2ae442f2">20de3428</a></strong>
<div>
<span>by Timo Aaltonen</span>
<i>at 2021-09-07T15:39:40+03:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">tests: Add isolation-container to restrictions.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/97f8433825a01860f1f9875556e349975de84846">97f84338</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2021-09-09T07:46:04-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index

Bug Description:  During a reindex task we skip the RUV tombstone entry,
                  which corrupts the nsuniqueid index.

Fix Description:  Make sure we still index nsuniqueid index for
                  the RUV tombstone entry.

relates: https://github.com/389ds/389-ds-base/issues/4910

Reviewed by: firstyear & progier389 (Thanks!!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/7eed56019f4071b5b34a9f88104cb6e6f50cef88">7eed5601</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2021-09-09T07:49:57-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 4912 - dsidm command crashing when account policy plugin is enabled

Bug Description:  If the account policy plugin is enabled, but not
                  configured then dsidm will crash when checking an
                  entry's status.

Fix Description:  Check if the config DN is present before trying
                  to check its values.

relates: https://github.com/389ds/389-ds-base/issues/4912

Reviewed by: firstyear(thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/3982ce6957dee8547d0853ca0d52834d1935ea88">3982ce69</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2021-09-10T10:23:32-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 4169 - backport lib389 cert list fix

Description:  We didn't call ensure_str() on the output from certutil
commands

relates:  https://github.com/389ds/389-ds-base/issues/4169

Reviewed by: mreynolds(one line commit rule)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/012a6a35d05a056e028d6d4e9e792aab3a697d7c">012a6a35</a></strong>
<div>
<span>by Simon Pichugin</span>
<i>at 2021-09-10T14:20:03-07:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 4894 - IPA failure in ipa user-del --preserve (#4907)

Bug Description: Starting with 389-ds 2.0.8 on rawhide,
any call to ipa user-del --preserve fails with
This entry already exists.

Fix Description: We should split 'dn' parameter in searchAllSubtrees
into parent and target. As one of them is used for excluding the
subtree checks and another one for searching.
Improve 'superior' processing when we don't change the parent.
Rename variables in a more sane way.

Fixes: https://github.com/389ds/389-ds-base/issues/4894

Reviewed by: @Firstyear, @tbordaz, @progier389 (Thanks!)</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/ef01f6d8311fd82ff61944cb2f26057a2d131a92">ef01f6d8</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2021-09-11T10:28:47-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 4796 - Add support for nsslapd-state to CLI & UI

Description:

Add support for nsslapd-state to lib389 and UI. Also added a check to prevent the changing of nsslapd-state for replicated suffixes.

Also did a little UI cleanup where a bottom margin was added to the bottom of pages instead of using "hr" to create the gap.

relates: https://github.com/389ds/389-ds-base/issues/4796

Reviewed by: jchapman & spichugi(Thanks!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/f6bb281dea0f17d98ec2c27038bd8f8072db6d97">f6bb281d</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2021-09-13T12:24:06-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 4912 - Account Policy plugin does not set the config entry DN

Description: Although we create the config entry for the Account Policy
plugin, we do not list the config entry DN in the main plugin entry
via nsslapd-pluginarg0

relates: https://github.com/389ds/389-ds-base/issues/4912

Reviewed by: mreynolds(one line commit rule)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/ebacadde453116784ab47231d070178c6d05ce82">ebacadde</a></strong>
<div>
<span>by Marc Muehlfeld</span>
<i>at 2021-09-14T09:31:02-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)

Description:
The --help of dsconf and its subcommands contain several incorrect descriptions, typos, inconsistent language, some entries end with a ".", some doesn't, some descriptions start with lowercase, ...

For a better user experience, the descriptions of subcommands, and parameters should be reviewed and improved.

Fixes: #4908

Reviewed by: Mark Reynolds, William Brown, and Simon Pichugin
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/8127b3d05af242f06ba5833b001f25f56e215a31">8127b3d0</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2021-09-20T17:00:19-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Issue 4927 - rebase lib389 and cockpit in 1.4.4

Description:  389-ds-base-1.4.4 has somehow become out of sync
              with critical fixes in lib389 and cockpit. It is
              too difficult to try and find which patches are
              missing. Instead we can just rebase the source
              code for lib389 and cockpit from branch 389-ds-base-2.0.

fixes: https://github.com/389ds/389-ds-base/issues/4927

Reviewed by: spichugi & jchapman(Thanks!!)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/5e1e392ae8aca76f5325987197e35fbeddfc58a7">5e1e392a</a></strong>
<div>
<span>by Mark Reynolds</span>
<i>at 2021-09-20T17:01:33-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Bump version to 1.4.4.17
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/ae9fc0ac58e878ce8bbaf6ba1cfb9925ce9ab73e">ae9fc0ac</a></strong>
<div>
<span>by Timo Aaltonen</span>
<i>at 2021-10-18T17:48:33+03:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add a dependency to libjemalloc2, and add a symlink to it so the preload works. (Closes: #992696)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/e60cb8560348f2e5885928dbc1bcfced296d9e97">e60cb856</a></strong>
<div>
<span>by Timo Aaltonen</span>
<i>at 2021-10-18T17:53:19+03:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Merge branch 'upstream'
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/commit/93fc088ca87e524136f774419744f3655fe3661c">93fc088c</a></strong>
<div>
<span>by Timo Aaltonen</span>
<i>at 2021-10-18T17:53:42+03:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">bump the version
</pre>
</li>
</ul>
<h4>23 changed files:</h4>
<ul>
<li class="file-stats">
<a href="#d7e560a1b9a915cc82a4a544b31706fd6db5f6fd">
VERSION.sh
</a>
</li>
<li class="file-stats">
<a href="#a8b82b08155fde320f6fdaceca5a0c1290250a19">
debian/389-ds-base-libs.install
</a>
</li>
<li class="file-stats">
<a href="#9c96da0e9f91d7d8937b69b524702c106258f0d1">
debian/changelog
</a>
</li>
<li class="file-stats">
<a href="#58ef006ab62b83b4bec5d81fe5b32c3b4c2d1cc2">
debian/control
</a>
</li>
<li class="file-stats">
<a href="#8756c63497c8dc39f7773438edf53b220c773f67">
debian/rules
</a>
</li>
<li class="file-stats">
<a href="#83223a554d33ba7e1888274ff8ac43adb8147ba0">
debian/tests/control
</a>
</li>
<li class="file-stats">
<a href="#b7c508cc2343d19d18718132a01eb36801ee2111">
<span class="new-file">
+
dirsrvtests/tests/data/entryuuid/localhost-userRoot-invalid.ldif
</span>
</a>
</li>
<li class="file-stats">
<a href="#bbda9e5b8d757bb87485e63969542cfe860ebf09">
<span class="new-file">
+
dirsrvtests/tests/suites/clu/dsctl_tls_test.py
</span>
</a>
</li>
<li class="file-stats">
<a href="#30450d53b9fbd1abec1a2d125e1b9776c2e34ce8">
dirsrvtests/tests/suites/entryuuid/basic_test.py
</a>
</li>
<li class="file-stats">
<a href="#6b0ef0e5b6a4fe980a5746350b7251d485cce183">
dirsrvtests/tests/suites/fractional/fractional_test.py
</a>
</li>
<li class="file-stats">
<a href="#7b1b490bb442f12b6656f61dec43b5e0d76cb3cb">
dirsrvtests/tests/suites/password/pwdPolicy_attribute_test.py
</a>
</li>
<li class="file-stats">
<a href="#e6f0727f2e2515fc72bccab094b28f1aeafb9497">
<span class="new-file">
+
dirsrvtests/tests/suites/password/pwdPolicy_temporary_password.py
</span>
</a>
</li>
<li class="file-stats">
<a href="#08fe5091e331e76547d33050466d285ecd08b07c">
<span class="new-file">
+
dirsrvtests/tests/suites/password/pwd_crypt_asterisk_test.py
</span>
</a>
</li>
<li class="file-stats">
<a href="#09b8d28e902091b92b72b0c3f20baeda3e91f8a7">
dirsrvtests/tests/suites/password/pwd_upgrade_on_bind.py
</a>
</li>
<li class="file-stats">
<a href="#5bdb3c6a8abaf36252bdb89e0e30982d6cae2766">
<span class="new-file">
+
dirsrvtests/tests/suites/plugins/attruniq_test.py
</span>
</a>
</li>
<li class="file-stats">
<a href="#324d602b8a03badfe262e0e4a1c8f06e6a3abd61">
<span class="new-file">
+
dirsrvtests/tests/suites/plugins/dna_interval_test.py
</span>
</a>
</li>
<li class="file-stats">
<a href="#d3ef3b7f75fa9b5fd709acf72e1bea6a8227bd12">
dirsrvtests/tests/suites/plugins/managed_entry_test.py
</a>
</li>
<li class="file-stats">
<a href="#87cc6ed156e225d79a74962e7a381664206eeb73">
dirsrvtests/tests/suites/plugins/referint_test.py
</a>
</li>
<li class="file-stats">
<a href="#4ac91f2ad01602a177c4a0c7c0f366e34973d0d2">
dirsrvtests/tests/suites/replication/regression_m2_test.py
</a>
</li>
<li class="file-stats">
<a href="#346277661c7722b540ff6afa1e867184978a41c5">
dirsrvtests/tests/suites/replication/ruvstore_test.py
</a>
</li>
<li class="file-stats">
<a href="#2bb7320f7de6f5add4b1ae6c0988cfe24acebbf0">
dirsrvtests/tests/suites/retrocl/basic_test.py
</a>
</li>
<li class="file-stats">
<a href="#df7773bb1ae484c7e0ff05d5bb9b8cff7962b9c3">
<span class="new-file">
+
dirsrvtests/tests/suites/retrocl/retrocl_indexing_test.py
</span>
</a>
</li>
<li class="file-stats">
<a href="#01c0a527c514aea727e5f5808ef03699dda0dbcc">
dirsrvtests/tests/suites/syncrepl_plugin/basic_test.py
</a>
</li>
</ul>
<h5>The diff was not included because it is too large.</h5>

</div>
<div class="footer" style="margin-top: 10px;">
<p style="font-size: small; color: #666;">

<br>
<a href="https://salsa.debian.org/freeipa-team/389-ds-base/-/compare/e6521870cbc22dd2107a5fa95612cc2e69767a99...93fc088ca87e524136f774419744f3655fe3661c">View it on GitLab</a>.
<br>
You're receiving this email because of your account on salsa.debian.org.
If you'd like to receive fewer emails, you can
adjust your notification settings.



</p>
</div>
</body>
</html>