[389-announce] Announcing 389 Directory Server version 1.3.2.2

Fri Oct 11 19:59:02 UTC 2013

    389 Directory Server 1.3.2.2

The 389 Directory Server team is proud to announce 389-ds-base version
1.3.2.2.

Fedora packages are available from the Fedora 20 Testing repositories.

The new packages and versions are:

  * 389-ds-base-1.3.2.2-1

A source tarball is available for download at
http://port389.org/sources/389-ds-base-1.3.2.2.tar.bz2

      Highlights in 1.3.2.2

  * Support 'Content Synchronization Operation' (SyncRepl) - RFC 4533
    <http://tools.ietf.org/html/rfc4533>
  * Support "whoami" extended operation
  * Add ACI support for ldapi
  * WinSync enhancement
      o support range retrieval
      o support multiple subtrees and filters
  * Performance improvements
  * bug fixes

      Installation and Upgrade

See Download <http://directory.fedoraproject.org/wiki/Download> for
information about setting up your yum repositories.

To install, use *yum install 389-ds* yum install 389-ds After install
completes, run *setup-ds-admin.pl* to set up your directory server.
setup-ds-admin.pl

To upgrade, use *yum upgrade* yum upgrade After upgrade completes, run
*setup-ds-admin.pl -u* to update your directory server/admin
server/console information. setup-ds-admin.pl -u

See Install_Guide
<http://directory.fedoraproject.org/wiki/Install_Guide> for more
information about the initial installation, setup, and upgrade

See Source <http://directory.fedoraproject.org/wiki/Source> for
information about source tarballs and SCM (git) access.

      Feedback

We are very interested in your feedback!

Please provide feedback and comments to the 389-users mailing list:
https://admin.fedoraproject.org/mailman/listinfo/389-users

If you find a bug, or would like to see a new feature, file it in our
Trac instance: https://fedorahosted.org/389

      Detailed Changelog since 1.3.1

  * Ticket 48 - Active Directory has certain uids which are reserved and
    will cause a Directory Server replica initialization of an AD server
    to abort.
  * Ticket 53 - Need to update supported locales
  * Ticket 54 - locale "nl" not supported by collation plugin
  * Ticket 77 - [RFE] Add ACI support for ldapi
  * Ticket 123 - Enhancement request: "whoami" extended operation
  * Ticket 153 - Schema file parsing overly picky?
  * Ticket 182 - Pwd retry counters replication not enabled by default,
    and enabling it could lead to undesired results
  * Ticket 197 - rhds82 rfe - BDB backend - clear free page files to
    reduce changelog size
  * Ticket 205 - rhds81 rfe - snmp counters index strings for multiple
    network interfaces with ip addr and tcp port pairs
  * Ticket 208 - [RFE] Roles with explicit scoping in RHDS
  * Ticket 283 - Expose slapi_eq_* API
  * Ticket 314 - ChainOnUpdate: "cn=directory manager" can modify
    userRoot on consumer without changes being chained or replicated.
    Directory integrity compromised.
  * Ticket 411 - [RFE] mods optimizer
  * Ticket 415 - winsync doesn't sync DN valued attributes if DS DN
    value doesn't exist
  * Ticket 428 - posix winsync should support ADD user/group entries
    from DS to AD
  * Ticket 460 - support multiple subtrees and filters
  * Ticket 512 - improve performance of vattr code
  * Ticket 513 - recycle operation pblocks
  * Ticket 514 - investigate connection locking
  * Ticket 521 - modrdn + NSMMReplicationPlugin - Consumer failed to
    replay change
  * Ticket 564 - Is ldbm_txn_ruv_modify_context still required ?
  * Ticket 568 - using transaction batchval violates durability
  * Ticket 569 - examine replication code to reduce amount of stored
    state information
  * Ticket 586 - selinux errors with /usr/sbin/setup-ds-admin.pl
  * Ticket 589 - [RFE] Support RFC 4527
    <http://tools.ietf.org/html/rfc4527> Read Entry Controls
  * Ticket 601 - multi master replication allows schema violation
  * Ticket 602 - replication inconsistency if attribute is modified
    several times in one operaion
  * Ticket 607 - Replication issue: Entry can diverge betwen servers
  * Ticket 609 - nsDS5BeginReplicaRefresh attribute accepts any value
    and it doesn't throw any error when server restarts.
  * Ticket 615 - High contention on cos cache lock
  * Ticket 617 - Possible to add invalid ACI value
  * Ticket 626 - Possible to add nonexistent target to ACI
  * Ticket 630 - The backend name provided to bak2db is not validated
  * Ticket 47306 - execute index_add_mods only for indexed attributes
  * Ticket 47310 - Attribute "dsOnlyMemberUid" not allowed when syncing
    nested posix groups from AD with posixWinsync
  * Ticket 47313 - Indexed search with filter containing '&' and "!"
    with attribute subtypes gives wrong result
  * Ticket 47314 - Winsync should support range retrieval
  * Ticket 47316 - Search against 'view' is always reported as unindexed
  * Ticket 47317 - should set LDAP_OPT_X_SASL_NOCANON to LDAP_OPT_ON by
    default
  * Ticket 47319 - make connection buffer size adjustable
  * Ticket 47320 - put conn on work_q not poll list if conn has buffered
    more_data
  * Ticket 47323 - resurrected entry is not correctly indexed
  * Ticket 47326 - idl switch does not work
  * Ticket 47329 - Improve slapi_back_transaction_begin() return code
    when transactions are not available
  * Ticket 47331 - Self entry access ACI not working properly
  * Ticket 47337 - mep_pre_op: Unable to fetch origin entry
  * Ticket 47340 - Deleting a separator ',' in 7-bit check plugin
    arguments makes the server fail to start with segfault
  * Ticket 47350 - Allow search to look up 'in memory RUV'
  * Ticket 47354 - Indexed search are logged with 'notes=U' in the
    access logs
  * Ticket 47358 - backend performance - introduce optimization levels
  * Ticket 47360 - Delete attribute could crash the server
  * Ticket 47363 - 7-bit checking is not necessary for userPassword
  * Ticket 47370 - DS crashes with some 7-bit check plugin configurations
  * Ticket 47371 - Some updates of "passwordgraceusertime" are useless
    when updating "userpassword"
  * Ticket 47372 - make old-idl tunable
  * Ticket 47381 - nsslapd-db-transaction-batch-val turns to -1
  * Ticket 47382 - Add a warning message when a connection hits the max
    number of threads
  * Ticket 47384 - Plugin library path validation
  * Ticket 47387 - improve logconv.pl performance with large access logs
  * Ticket 47388 - [RFE] Support 'Content Synchronization Operation'
    (SyncRepl) - RFC 4533 <http://tools.ietf.org/html/rfc4533>
  * Ticket 47389 - Non-directory manager can change the individual
    userPassword's storage scheme
  * Ticket 47394 - remove-ds.pl should remove /var/lock/dirsrv
  * Ticket 47400 - MMR stress test with dna enabled causes a deadlock
  * Ticket 47411 - Replace substring search with plain search in
    referint plugin
  * Ticket 47416 - IPA replica's - "SASL encrypted packet length exceeds
    maximum allowed limit"
  * Ticket 47423 - 7-bit check plugin does not work for userpassword
    attribute
  * Ticket 47425 - should only call windows_update_done if repl agmt
    type is windows
  * Ticket 47426 - move compute_idletimeout out of handle_pr_read_ready
  * Ticket 47433 - With SeLinux, ports can be labelled per range.
    setup-ds.pl or setup-ds-admin.pl fail to detect already ranged
    labelled ports
  * Ticket 47463 - IDL-style can become mismatched during partial
    restoration
  * Ticket 47487 - enhance retro changelog
  * Ticket 47490 - Schema replication between DS versions may overwrite
    newer base schema
  * Ticket 47502 - updates to ruv entry are written to retro changelog
  * Ticket 47504 - idlistscanlimit per index/type/value
  * Ticket 47505 - get rid of valueset_add_valuearray_ext
  * Ticket 47513 - tmpfiles.d references /var/lock when they should
    reference /run/lock
  * Ticket 47517 - memory leak in range searches and other various leaks
  * Ticket 47520 - Fix various issues with logconv.pl
  * Ticket 47522 - Password administrators should be able to violate
    password policy
  * Ticket 47531 - 1.3.2 with mozldap - need to redo sasl_io_recv
  * Ticket 47532 - 1.3.2 with mozldap - crashes in new operation work_q
  * Ticket 47539 - Disabling DNA plug-in throws error 53
  * Ticket 47543 - mozldap - fix compiler warnings
  * Ticket 47551 - logconv: -V does not produce unindexed search report
  * Ticket 47550 - logconv: failed logins: Use of uninitialized value in
    numeric comparison at logconv.pl line 949
  * ticket 47550 - wip (cherry picked from commit
    82377636267787be5182457d619d5a0b662d2658)

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.fedoraproject.org/pipermail/389-announce/attachments/20131011/f3cbd6f1/attachment.html>