<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=ISO-2022-JP">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<h2> <span class="mw-headline"> 389 Directory Server 1.3.2.2 </span></h2>
<p>The 389 Directory Server team is proud to announce 389-ds-base
version 1.3.2.2.
</p>
<p>Fedora packages are available from the Fedora 20 Testing
repositories.
</p>
<p>The new packages and versions are:
</p>
<ul>
<li> 389-ds-base-1.3.2.2-1
</li>
</ul>
<p>A source tarball is available for download at <a
href="http://port389.org/sources/389-ds-base-1.3.2.2.tar.bz2"
class="external free"
title="http://port389.org/sources/389-ds-base-1.3.2.2.tar.bz2"
rel="nofollow">http://port389.org/sources/389-ds-base-1.3.2.2.tar.bz2</a>
</p>
<h3> <span class="mw-headline"> Highlights in 1.3.2.2 </span></h3>
<ul>
<li> Support 'Content Synchronization Operation' (SyncRepl) - <a
href="http://tools.ietf.org/html/rfc4533" class="external"
title="http://tools.ietf.org/html/rfc4533">RFC 4533</a>
</li>
<li> Support "whoami" extended operation
</li>
<li> Add ACI support for ldapi
</li>
<li> WinSync enhancement
<ul>
<li> support range retrieval
</li>
<li> support multiple subtrees and filters
</li>
</ul>
</li>
<li> Performance improvements
</li>
<li> bug fixes
</li>
</ul>
<h3> <span class="mw-headline"> Installation and Upgrade </span></h3>
<p>See <a href="http://directory.fedoraproject.org/wiki/Download"
title="Download">Download</a> for information about setting up
your yum repositories.
</p>
<p>To install, use <b>yum install 389-ds</b>
yum install 389-ds
After install completes, run <b>setup-ds-admin.pl</b> to set up
your directory server.
setup-ds-admin.pl
</p>
<p>To upgrade, use <b>yum upgrade</b>
yum upgrade
After upgrade completes, run <b>setup-ds-admin.pl -u</b> to
update your directory server/admin server/console information.
setup-ds-admin.pl -u
</p>
<p>See <a
href="http://directory.fedoraproject.org/wiki/Install_Guide"
title="Install Guide">Install_Guide</a> for more information
about the initial installation, setup, and upgrade
</p>
<p>See <a href="http://directory.fedoraproject.org/wiki/Source"
title="Source">Source</a> for information about source tarballs
and SCM (git) access.
</p>
<h3> <span class="mw-headline"> Feedback </span></h3>
<p>We are very interested in your feedback!
</p>
<p>Please provide feedback and comments to the 389-users mailing
list: <a
href="https://admin.fedoraproject.org/mailman/listinfo/389-users"
class="external free"
title="https://admin.fedoraproject.org/mailman/listinfo/389-users"
rel="nofollow">https://admin.fedoraproject.org/mailman/listinfo/389-users</a>
</p>
<p>If you find a bug, or would like to see a new feature, file it in
our Trac instance: <a href="https://fedorahosted.org/389"
class="external free" title="https://fedorahosted.org/389"
rel="nofollow">https://fedorahosted.org/389</a>
</p>
<h3> <span class="mw-headline"> Detailed Changelog since 1.3.1 </span></h3>
<ul>
<li> Ticket 48 - Active Directory has certain uids which are
reserved and will cause a Directory Server replica
initialization of an AD server to abort.
</li>
<li> Ticket 53 - Need to update supported locales
</li>
<li> Ticket 54 - locale "nl" not supported by collation plugin
</li>
<li> Ticket 77 - [RFE] Add ACI support for ldapi
</li>
<li> Ticket 123 - Enhancement request: "whoami" extended operation
</li>
<li> Ticket 153 - Schema file parsing overly picky?
</li>
<li> Ticket 182 - Pwd retry counters replication not enabled by
default, and enabling it could lead to undesired results
</li>
<li> Ticket 197 - rhds82 rfe - BDB backend - clear free page files
to reduce changelog size
</li>
<li> Ticket 205 - rhds81 rfe - snmp counters index strings for
multiple network interfaces with ip addr and tcp port pairs
</li>
<li> Ticket 208 - [RFE] Roles with explicit scoping in RHDS
</li>
<li> Ticket 283 - Expose slapi_eq_* API
</li>
<li> Ticket 314 - ChainOnUpdate: "cn=directory manager" can modify
userRoot on consumer without changes being chained or
replicated. Directory integrity compromised.
</li>
<li> Ticket 411 - [RFE] mods optimizer
</li>
<li> Ticket 415 - winsync doesn't sync DN valued attributes if DS
DN value doesn't exist
</li>
<li> Ticket 428 - posix winsync should support ADD user/group
entries from DS to AD
</li>
<li> Ticket 460 - support multiple subtrees and filters
</li>
<li> Ticket 512 - improve performance of vattr code
</li>
<li> Ticket 513 - recycle operation pblocks
</li>
<li> Ticket 514 - investigate connection locking
</li>
<li> Ticket 521 - modrdn + NSMMReplicationPlugin - Consumer failed
to replay change
</li>
<li> Ticket 564 - Is ldbm_txn_ruv_modify_context still required ?
</li>
<li> Ticket 568 - using transaction batchval violates durability
</li>
<li> Ticket 569 - examine replication code to reduce amount of
stored state information
</li>
<li> Ticket 586 - selinux errors with /usr/sbin/setup-ds-admin.pl
</li>
<li> Ticket 589 - [RFE] Support <a
href="http://tools.ietf.org/html/rfc4527" class="external"
title="http://tools.ietf.org/html/rfc4527">RFC 4527</a> Read
Entry Controls
</li>
<li> Ticket 601 - multi master replication allows schema violation
</li>
<li> Ticket 602 - replication inconsistency if attribute is
modified several times in one operaion
</li>
<li> Ticket 607 - Replication issue: Entry can diverge betwen
servers
</li>
<li> Ticket 609 - nsDS5BeginReplicaRefresh attribute accepts any
value and it doesn't throw any error when server restarts.
</li>
<li> Ticket 615 - High contention on cos cache lock
</li>
<li> Ticket 617 - Possible to add invalid ACI value
</li>
<li> Ticket 626 - Possible to add nonexistent target to ACI
</li>
<li> Ticket 630 - The backend name provided to bak2db is not
validated
</li>
<li> Ticket 47306 - execute index_add_mods only for indexed
attributes
</li>
<li> Ticket 47310 - Attribute "dsOnlyMemberUid" not allowed when
syncing nested posix groups from AD with posixWinsync
</li>
<li> Ticket 47313 - Indexed search with filter containing '&'
and "!" with attribute subtypes gives wrong result
</li>
<li> Ticket 47314 - Winsync should support range retrieval
</li>
<li> Ticket 47316 - Search against 'view' is always reported as
unindexed
</li>
<li> Ticket 47317 - should set LDAP_OPT_X_SASL_NOCANON to
LDAP_OPT_ON by default
</li>
<li> Ticket 47319 - make connection buffer size adjustable
</li>
<li> Ticket 47320 - put conn on work_q not poll list if conn has
buffered more_data
</li>
<li> Ticket 47323 - resurrected entry is not correctly indexed
</li>
<li> Ticket 47326 - idl switch does not work
</li>
<li> Ticket 47329 - Improve slapi_back_transaction_begin() return
code when transactions are not available
</li>
<li> Ticket 47331 - Self entry access ACI not working properly
</li>
<li> Ticket 47337 - mep_pre_op: Unable to fetch origin entry
</li>
<li> Ticket 47340 - Deleting a separator ',' in 7-bit check plugin
arguments makes the server fail to start with segfault
</li>
<li> Ticket 47350 - Allow search to look up 'in memory RUV'
</li>
<li> Ticket 47354 - Indexed search are logged with 'notes=U' in
the access logs
</li>
<li> Ticket 47358 - backend performance - introduce optimization
levels
</li>
<li> Ticket 47360 - Delete attribute could crash the server
</li>
<li> Ticket 47363 - 7-bit checking is not necessary for
userPassword
</li>
<li> Ticket 47370 - DS crashes with some 7-bit check plugin
configurations
</li>
<li> Ticket 47371 - Some updates of "passwordgraceusertime" are
useless when updating "userpassword"
</li>
<li> Ticket 47372 - make old-idl tunable
</li>
<li> Ticket 47381 - nsslapd-db-transaction-batch-val turns to -1
</li>
<li> Ticket 47382 - Add a warning message when a connection hits
the max number of threads
</li>
<li> Ticket 47384 - Plugin library path validation
</li>
<li> Ticket 47387 - improve logconv.pl performance with large
access logs
</li>
<li> Ticket 47388 - [RFE] Support 'Content Synchronization
Operation' (SyncRepl) - <a
href="http://tools.ietf.org/html/rfc4533" class="external"
title="http://tools.ietf.org/html/rfc4533">RFC 4533</a>
</li>
<li> Ticket 47389 - Non-directory manager can change the
individual userPassword's storage scheme
</li>
<li> Ticket 47394 - remove-ds.pl should remove /var/lock/dirsrv
</li>
<li> Ticket 47400 - MMR stress test with dna enabled causes a
deadlock
</li>
<li> Ticket 47411 - Replace substring search with plain search in
referint plugin
</li>
<li> Ticket 47416 - IPA replica's - "SASL encrypted packet length
exceeds maximum allowed limit"
</li>
<li> Ticket 47423 - 7-bit check plugin does not work for
userpassword attribute
</li>
<li> Ticket 47425 - should only call windows_update_done if repl
agmt type is windows
</li>
<li> Ticket 47426 - move compute_idletimeout out of
handle_pr_read_ready
</li>
<li> Ticket 47433 - With SeLinux, ports can be labelled per range.
setup-ds.pl or setup-ds-admin.pl fail to detect already ranged
labelled ports
</li>
<li> Ticket 47463 - IDL-style can become mismatched during partial
restoration
</li>
<li> Ticket 47487 - enhance retro changelog
</li>
<li> Ticket 47490 - Schema replication between DS versions may
overwrite newer base schema
</li>
<li> Ticket 47502 - updates to ruv entry are written to retro
changelog
</li>
<li> Ticket 47504 - idlistscanlimit per index/type/value
</li>
<li> Ticket 47505 - get rid of valueset_add_valuearray_ext
</li>
<li> Ticket 47513 - tmpfiles.d references /var/lock when they
should reference /run/lock
</li>
<li> Ticket 47517 - memory leak in range searches and other
various leaks
</li>
<li> Ticket 47520 - Fix various issues with logconv.pl
</li>
<li> Ticket 47522 - Password administrators should be able to
violate password policy
</li>
<li> Ticket 47531 - 1.3.2 with mozldap - need to redo sasl_io_recv
</li>
<li> Ticket 47532 - 1.3.2 with mozldap - crashes in new operation
work_q
</li>
<li> Ticket 47539 - Disabling DNA plug-in throws error 53
</li>
<li> Ticket 47543 - mozldap - fix compiler warnings
</li>
<li> Ticket 47551 - logconv: -V does not produce unindexed search
report
</li>
<li> Ticket 47550 - logconv: failed logins: Use of uninitialized
value in numeric comparison at logconv.pl line 949
</li>
<li> ticket 47550 - wip (cherry picked from commit
82377636267787be5182457d619d5a0b662d2658)
</li>
</ul>
</body>
</html>