[Pkg-freeipa-devel] [Git][freeipa-team/389-ds-base][upstream] 30 commits: Ticket 49926 - Add replication functionality to UI

Timo Aaltonen gitlab at salsa.debian.org
Mon Dec 3 13:57:53 GMT 2018


Timo Aaltonen pushed to branch upstream at FreeIPA packaging / 389-ds-base


Commits:
cf68341c by Mark Reynolds at 2018-10-15T15:41:04Z
Ticket 49926 - Add replication functionality to UI

Description:

Add replication functionality to UI.

Cleaned up various UI interactions and page loading

Added console logging for all CLI commands

https://pagure.io/389-ds-base/issue/49926

Reviewed by: ?

- - - - -
ab44af3f by Mark Reynolds at 2018-10-15T16:02:58Z
Ticket 49926 - UI - comment out dev cli patchs

- - - - -
21af54bb by Simon Pichugin at 2018-10-15T18:00:14Z
Issue 49928 - Fix various small WebUI schema issues

Description: Make standard schema attributes and objectclasses non-editable.
Attributes table should contain a string representation of
the syntax attributes, and if you point a cursor on them you can see an ID.
MAY and MUST attributes list shouldn't contain empty lines.
Make WebUI form and CLI functionality consistent.
Fix formatting and forloop lint issues.

https://pagure.io/389-ds-base/issue/49928

Reviewed by: mreynolds, wibrown, mhonek (Thanks!)

- - - - -
2ce769e4 by Mark Reynolds at 2018-10-15T19:07:21Z
Ticket 49979 - Remove dirsrv tests subpackage

Description:  Removed subpackage and cleaned up some compiler warnings
              related to ticket 49915

https://pagure.io/389-ds-base/issue/49979

Reviewed by: mreynolds

- - - - -
a8c37ead by Mark Reynolds at 2018-10-16T00:17:31Z
Ticket 49979 - Fix regression in last commit

Description:  Fix single_space char pointer to actually point to a space

https://pagure.io/389-ds-base/issue/49979

- - - - -
634df9e4 by Amita Sharma at 2018-10-18T07:50:55Z
Issue 49929 - Modifications required for the Test Case Management System

Description: We need to have the requirement token specified in the init.py file
             of each test suit in order to get the test cases mapped to these
             requirements in our test system.

https://pagure.io/389-ds-base/issue/49929

Reviewed by: Viktor

- - - - -
aaf517cb by Mark Reynolds at 2018-10-18T14:03:13Z
Ticket 49978 - Add CLI logging function for UI

Description:

Add a web browser console logging function to enforce
a consistent format and hide password values for CLI
commands.

https://pagure.io/389-ds-base/issue/49978

Reviewed by: ?

- - - - -
e1c693d2 by William Brown at 2018-10-19T23:34:54Z
Issue 49939 - Fix ldapi path in lib389

Lib389 uses a .replace rather than a path join, causing dirsrv to be replaced in
the path. This breaks if the prefix is "/opt/dirsrv".

This should use path join instead.

https://pagure.io/389-ds-base/issue/49939

Author: William Brown <william at blackhats.net.au>

- - - - -
364b8548 by William Brown at 2018-10-19T23:34:54Z
Ticket 49975 - SUSE rpmlint issues

The package maintainer at SUSE kindly pointed out a number of issues
detected by rpmlint. Of the three issues, this resolves two of them.

The first is calling setgroups with an empty group list before setgid
so that we guarantee we only have the target user group remaining
in our permission set when we drop privileges. The second is to remove
a superfluous shebang line from python

https://pagure.io/389-ds-base/issue/49975

Author: William Brown <william at blackhats.net.au>

- - - - -
219ddd83 by Mark Reynolds at 2018-10-22T19:22:41Z
Ticket 49926 - Fix various issues with replication UI

Description:

Fixed some minor issues found in the JS.  Also
improved the replication enabling/disabling design/flow.

https://pagure.io/389-ds-base/issue/49926

Reviewed by: ?

- - - - -
f9011903 by Mark Reynolds at 2018-10-23T15:59:18Z
Ticket 49856 - Remove backend option from bak2db

Description:

The server has not supported backup/restore of a single backend for a
long time now.  All references to it should be remove from the CLI
and man pages.

https://pagure.io/389-ds-base/issue/49856

Reviewed by: tbordaz & spichugi(Thanks!!)

- - - - -
3571bac0 by Mark Reynolds at 2018-10-24T16:51:00Z
Ticket 49814 - dscreate should set the port selinux labels

Description:

dscreate was not setting the selinux labels on the ports, so if you specified
a non-standard port the instance would not start.  This fix sets/removes
selinux labels during instance creation and removal

Also moved ds_selinux_port_query & ds_selinux_enabled to the legacy tools
package as they are only used by setup-ds.pl

https://pagure.io/389-ds-base/issue/49814

Reviewed by: firstyear & mhonek (Thanks!!)

- - - - -
3cb911d5 by Mark Reynolds at 2018-10-24T17:44:26Z
Ticket 49814 - skip standard ports for selinux labelling

Description:  Skip labelling ports that use the the standard
              port numbers (389, 636).

https://pagure.io/389-ds-base/issue/49814

Reviewed by: mreynolds(one line commit rule)

- - - - -
487ea32c by Mark Reynolds at 2018-10-24T19:10:52Z
Ticket 49975 - Add missing include file to main.c

Description:  The first commit for this ticket introduced a compiler warning
              because it was missing the proper header file.

https://pagure.io/389-ds-base/issue/49975

Reviewed by: mreynolds(one line commit rule)

- - - - -
ab4af68e by Thierry Bordaz at 2018-10-25T09:29:10Z
Ticket 49967 - entry cache corruption after failed MODRDN

Bug Description:
	During a MODRDN the DN cache is updated to replace
	source DN with the target DN (modrdn_rename_entry_update_indexes)
	If later a failure occurs (for example if BETXN_POSTOP fails) and
	the txn is aborted, the target DN (for the specific entryID) remains
	in the DN cache.

	If the entry is returned in a search, to build the DN there is
	a lookup of the DN cache with the entryID. It retrieves the target DN
	rather than the source DN

Fix Description:
	In case of failure of the operation, the entry (from the entryID)
	need to be cleared from the DN cache

https://pagure.io/389-ds-base/issue/49967

Reviewed by: Mark Reynolds

Platforms tested: F27

Flag Day: no

Doc impact: no

- - - - -
a06c2327 by Thierry Bordaz at 2018-10-26T12:29:37Z
Ticket 49985 - memberof may silently fails to update a member

Bug Description:
	when adding 'memberof' to a member entry, the update may fail
	(invalid schema, db errors...).
	The error is reported at upper level. But in case of MODRDN
	the error is lost in memberof_moddn_attr_list where returned
	code of memberof_modop_one_replace_r is not tested

Fix Description:
	Report a failure in memberof_moddn_attr_list as soon as
	memberof_modop_one_replace_r fails

https://pagure.io/389-ds-base/issue/49985

Reviewed by: Simon Pichugi, William Brown

Platforms tested: F27

Flag Day: no

Doc impact: no

- - - - -
64ef8081 by German Parente at 2018-10-28T15:31:03Z
Ticket 49997 RFE: ds-replcheck could validate suffix exists and it's replicated

Bug Description:

seen at customer site, as first request to ldap database is the RUV, if the suffix provided in the command line does not exist or it's not replicated, we have an error message that it's regarding the RUV:

ds-replcheck -D "cn=directory manager" -w secret12 -b "o=ipaca" -r ldap://ipamaster.germanparente.local:389 -m ldap://ipareplica.germanparente.local
Performing online report...
Connecting to servers...
Gathering Master's RUV...
Error: Failed to get Master RUV entry: {'desc': 'No such object'}

Fix Description:

add function to validate suffix exists and it's replicated

https://pagure.io/389-ds-base/issue/49997

Author: German Parente <gparente at redhat.com>

Review by: ???

- - - - -
a7dfa383 by Mark Reynolds at 2018-10-31T13:55:15Z
Ticket 49995 - Fix issues with internal op logging

Bug Description:
-----------------

At server startup the server's internal operatons performed by bootstrapping
occurred before the thread data was initialized.  This caused random values in
the logging counters [1].

It was also observed that nested operations(and nested-nested operations, etc)
were not properly logged  [2].

Fix Description:
-----------------

[1]  Move the thread initialization higher up in main()

[2]  Changed the way we log nested internal operations.  Instead, we keep the
internal op number the same for nested ops but also now display the nested level.

https://pagure.io/389-ds-base/issue/49995

Reviewed by: lkrispenz, amsharma, firstyear (Thanks!)

- - - - -
51af3e50 by Simon Pichugin at 2018-11-01T16:39:12Z
Issue 49999 - Integrate React structure into cockpit-389-ds

Description: Refactor the existing 389-console Cockpit plugin structure
so it uses React, Babel, Eslint.
Add Makefile targets and refactor spec-file accordingly.
Add python3-policycoreutils, npm and nodejs to BuildRequires.
Put blank Plugins page which work in React and uses Cockpit API.

Reviewed by: mreynolds, vashirov, mhonek (Thanks!)

https://pagure.io/389-ds-base/issue/49999

- - - - -
0a255222 by Mark Reynolds at 2018-11-01T17:12:46Z
Ticket 49814 - Add specfile requirements for python3-selinux

Description:  Need to add missing dependency in specfile for python3-selinux

https://pagure.io/389-ds-base/issue/49814

Reviewed by: mreynolds(one line commit rule)

- - - - -
1cd46b19 by Mark Reynolds at 2018-11-01T20:51:16Z
Ticket 49814 - Add specfile requirements for python3-libselinux

Description:  Cleanup spec file

https://pagure.io/389-ds-base/issue/49814

Reviewed by: mreynolds(one line commit rule)

- - - - -
534fad1c by Simon Pichugin at 2018-11-02T16:25:17Z
Issue 49999 - Add dist-bz2 target for Koji build system

Description: Change Makefile so it is run only when there
is no files cockpit_dist and node_modules.
Add target for creating a tarball for Koji system

https://pagure.io/389-ds-base/issue/49999

Reviewed by: mreynolds, mhonek (Thanks!)

- - - - -
8566e327 by Mark Reynolds at 2018-11-05T15:43:38Z
Remove __python3 from local specfile

Description:  Fix regression from previous commit

- - - - -
a784a4ee by Thierry Bordaz at 2018-11-06T09:43:04Z
Ticket 49975: followup for broken prefix deployment

Bug Description:
	setgroups fails when not called by superuser. In case of prefix deployment
	DS is started by regular user

Fix Description:
	Only superuser calls setgroups

https://pagure.io/389-ds-base/issue/49975

Reviewed by: Mark Reynolds, Ludwig Krispenz and William Brown

Platforms tested: F27

Flag Day: no

Doc impact: no

- - - - -
5884c479 by German Parente at 2018-11-06T17:47:41Z
Ticket 50013 - Log warn instead of ERR when aci target does not exist.

Bug Description:

This is something we have very often in IPA context and customers are very often asking why there are errors in the logs:

[31/Oct/2018:05:52:23.436616394 -0400] - ERR - NSACLPlugin - acl_parse - The ACL target cn=groups,cn=compat,dc=cgparente,dc=local does not exist
[31/Oct/2018:05:52:23.438951763 -0400] - ERR - NSACLPlugin - acl_parse - The ACL target cn=computers,cn=compat,dc=cgparente,dc=local does not exist

Fix Description:

just log WARN instead of ERR

https://pagure.io/389-ds-base/issue/50013

Author: German Parente <gparente at redhat.com>

Review by: ???

- - - - -
ab321cf1 by Mark Reynolds at 2018-11-07T20:07:20Z
Ticket 50004 - lib389 - improve X-ORIGIN schema parsing

Bug Description: Schema parsing assumed X-ORIGIN was always in this
                 format "X-ORIGIN '", but it can also be in other
                 formats like: "X-ORIGIN (".  So when it did not contain
                 the original format we got list index errors.

Fix Description: Loosen the format to " X-ORIGIN " which all the formats.

                 Also:
                     improve from UI schema error messages
                     updated create_test for python3

https://pagure.io/389-ds-base/issue/50004

Reviewed by: firstyear & spichugi(Thanks!!)

- - - - -
ce05f246 by Simon Pichugin at 2018-11-08T17:46:03Z
Issue 49999 - Finish up the transfer to React

Description: Move plugins.es6 to index.es6 so we can
properly navigate using old nav-bar. New React entry points
should be added to the index.es6.
Add a make target for manual Cockpit UI building:
'make 389-console' and a target to node_modules.mk 'eslint-fix'.
Fix a few CSS issues.

https://pagure.io/389-ds-base/issue/49999

Reviewed by: mreynolds, mhonek (Thanks!)

- - - - -
5284dcec by Thierry Bordaz at 2018-11-12T13:46:11Z
Ticket 50020 - during MODRDN referential integrity can fail erronously while updating large groups

Bug Description:
	During a MODRDN of a group member, referential integrity will update the groups containing this member.
	Under specific conditions, the MODRDN can fail (err=1).

	on MODRDN Referential integrity checks if the original DN of the target MODRDN entry is
	member of a given group. If it is then it updates the group.
	The returned code of the group update is using the variable 'rc'.
	It does a normalized DN comparison to compare original DN with members DN, to determine if
	a group needs to be updated.
	If the group does not need to be updated, 'rc' is not set.
	The bug is that it uses 'rc' to normalize the DN and if the group is not updated
	the returned code reflects the normalization returned code rather that the group update.

	The bug is hit in specific conditions

	    One of the evaluated group contains more than 128 members
	    the last member (last value) of the group is not the moved entry
	    the last member (last value) of the group is a DN value that contains escaped chars

Fix Description:
	Use a local variable to check the result of the DN normalization

https://pagure.io/389-ds-base/issue/50020

Reviewed by: Simon Pichugin, Mark Reynolds (thanks)

Platforms tested: F27

Flag Day: no

- - - - -
a1578a9b by Thierry Bordaz at 2018-11-15T13:45:33Z
Ticket 50026 - audit logs does not capture the operation where nsslapd-lookthroughlimit is modified

Bug Description:
	During a dse update (config, schema,..) the dse callback will process the mods
	but can also modify them (SLAPI_MODIFY_MODS) leaving only ignored attributes.
	A consequence is that later audit logging will only log the ignored attributes.

Fix Description:
	Save a copy of the orignal mods before the dse callback and restore them
	when dse callback completes.

https://pagure.io/389-ds-base/issue/50026

Reviewed by: Ludwig Krispenz

Platforms tested: F27

Flag Day: no

Doc impact: no

- - - - -
7ee2be80 by Mark Reynolds at 2018-11-15T14:23:13Z
Bump version to 1.4.0.19

- - - - -


30 changed files:

- Makefile.am
- VERSION.sh
- dirsrvtests/create_test.py
- dirsrvtests/tests/suites/acl/__init__.py
- + dirsrvtests/tests/suites/automember_plugin/__init__.py
- dirsrvtests/tests/suites/basic/__init__.py
- dirsrvtests/tests/suites/basic/basic_test.py
- dirsrvtests/tests/suites/betxns/__init__.py
- dirsrvtests/tests/suites/clu/__init__.py
- dirsrvtests/tests/suites/config/__init__.py
- dirsrvtests/tests/suites/cos/__init__.py
- dirsrvtests/tests/suites/disk_monitoring/__init__.py
- dirsrvtests/tests/suites/ds_logs/__init__.py
- + dirsrvtests/tests/suites/ds_tools/__init__.py
- dirsrvtests/tests/suites/dynamic_plugins/__init__.py
- dirsrvtests/tests/suites/filter/__init__.py
- dirsrvtests/tests/suites/get_effective_rights/__init__.py
- dirsrvtests/tests/suites/gssapi/__init__.py
- + dirsrvtests/tests/suites/gssapi_repl/__init__.py
- dirsrvtests/tests/suites/import/__init__.py
- dirsrvtests/tests/suites/ldapi/__init__.py
- dirsrvtests/tests/suites/memberof_plugin/__init__.py
- dirsrvtests/tests/suites/memberof_plugin/regression_test.py
- dirsrvtests/tests/suites/memory_leaks/__init__.py
- dirsrvtests/tests/suites/monitor/__init__.py
- dirsrvtests/tests/suites/paged_results/__init__.py
- dirsrvtests/tests/suites/password/__init__.py
- dirsrvtests/tests/suites/plugins/__init__.py
- + dirsrvtests/tests/suites/plugins/referint_test.py
- dirsrvtests/tests/suites/psearch/__init__.py


The diff was not included because it is too large.


View it on GitLab: https://salsa.debian.org/freeipa-team/389-ds-base/compare/d2aa131f8af38f79a16f55a70add81e829056cd0...7ee2be8015c98c164c398598c9c530b86ffb68db

-- 
View it on GitLab: https://salsa.debian.org/freeipa-team/389-ds-base/compare/d2aa131f8af38f79a16f55a70add81e829056cd0...7ee2be8015c98c164c398598c9c530b86ffb68db
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-freeipa-devel/attachments/20181203/b860101b/attachment-0001.html>


More information about the Pkg-freeipa-devel mailing list