Announcing 389 Directory Server version 1.3.2.3
by Noriko Hosoi
389 Directory Server 1.3.2.3
The 389 Directory Server team is proud to announce 389-ds-base version
1.3.2.3.
Fedora packages are available from the Fedora 20 Testing repositories.
The new packages and versions are:
* 389-ds-base-1.3.2.3-1
A source tarball is available for download at
http://port389.org/sources/389-ds-base-1.3.2.3.tar.bz2
Highlights in 1.3.2.3
* bug fixes
o Update fails in the Content Sync Plug-in.
o Fixup memberof task does not work.
o Server hangs in the SASL initialization
Installation and Upgrade
See Download <http://directory.fedoraproject.org/wiki/Download> for
information about setting up your yum repositories.
To install, use *yum install 389-ds* yum install 389-ds After install
completes, run *setup-ds-admin.pl* to set up your directory server.
setup-ds-admin.pl
To upgrade, use *yum upgrade* yum upgrade After upgrade completes, run
*setup-ds-admin.pl -u* to update your directory server/admin
server/console information. setup-ds-admin.pl -u
See Install_Guide
<http://directory.fedoraproject.org/wiki/Install_Guide> for more
information about the initial installation, setup, and upgrade
See Source <http://directory.fedoraproject.org/wiki/Source> for
information about source tarballs and SCM (git) access.
Feedback
We are very interested in your feedback!
Please provide feedback and comments to the 389-users mailing list:
https://admin.fedoraproject.org/mailman/listinfo/389-users
If you find a bug, or would like to see a new feature, file it in our
Trac instance: https://fedorahosted.org/389
Detailed Changelog since 1.3.2.2
* Ticket 47515 - Fedora 20: setup-ds-admin.pl
* Ticket 47559 - hung server - related to sasl and initialize
* Ticket 47560 - fixup memberof task does not work: task entry not added
* Ticket 47565 - Content Sync update file needs extensibleObject
* Ticket 47569 - ACIs do not allow attribute subtypes in targetattr
keyword
Retrieved from "http://directory.fedoraproject.org/wiki/Releases/1.3.2.3"
10 years, 1 month
Announcing 389 Directory Server version 1.3.2.2
by Noriko Hosoi
389 Directory Server 1.3.2.2
The 389 Directory Server team is proud to announce 389-ds-base version
1.3.2.2.
Fedora packages are available from the Fedora 20 Testing repositories.
The new packages and versions are:
* 389-ds-base-1.3.2.2-1
A source tarball is available for download at
http://port389.org/sources/389-ds-base-1.3.2.2.tar.bz2
Highlights in 1.3.2.2
* Support 'Content Synchronization Operation' (SyncRepl) - RFC 4533
<http://tools.ietf.org/html/rfc4533>
* Support "whoami" extended operation
* Add ACI support for ldapi
* WinSync enhancement
o support range retrieval
o support multiple subtrees and filters
* Performance improvements
* bug fixes
Installation and Upgrade
See Download <http://directory.fedoraproject.org/wiki/Download> for
information about setting up your yum repositories.
To install, use *yum install 389-ds* yum install 389-ds After install
completes, run *setup-ds-admin.pl* to set up your directory server.
setup-ds-admin.pl
To upgrade, use *yum upgrade* yum upgrade After upgrade completes, run
*setup-ds-admin.pl -u* to update your directory server/admin
server/console information. setup-ds-admin.pl -u
See Install_Guide
<http://directory.fedoraproject.org/wiki/Install_Guide> for more
information about the initial installation, setup, and upgrade
See Source <http://directory.fedoraproject.org/wiki/Source> for
information about source tarballs and SCM (git) access.
Feedback
We are very interested in your feedback!
Please provide feedback and comments to the 389-users mailing list:
https://admin.fedoraproject.org/mailman/listinfo/389-users
If you find a bug, or would like to see a new feature, file it in our
Trac instance: https://fedorahosted.org/389
Detailed Changelog since 1.3.1
* Ticket 48 - Active Directory has certain uids which are reserved and
will cause a Directory Server replica initialization of an AD server
to abort.
* Ticket 53 - Need to update supported locales
* Ticket 54 - locale "nl" not supported by collation plugin
* Ticket 77 - [RFE] Add ACI support for ldapi
* Ticket 123 - Enhancement request: "whoami" extended operation
* Ticket 153 - Schema file parsing overly picky?
* Ticket 182 - Pwd retry counters replication not enabled by default,
and enabling it could lead to undesired results
* Ticket 197 - rhds82 rfe - BDB backend - clear free page files to
reduce changelog size
* Ticket 205 - rhds81 rfe - snmp counters index strings for multiple
network interfaces with ip addr and tcp port pairs
* Ticket 208 - [RFE] Roles with explicit scoping in RHDS
* Ticket 283 - Expose slapi_eq_* API
* Ticket 314 - ChainOnUpdate: "cn=directory manager" can modify
userRoot on consumer without changes being chained or replicated.
Directory integrity compromised.
* Ticket 411 - [RFE] mods optimizer
* Ticket 415 - winsync doesn't sync DN valued attributes if DS DN
value doesn't exist
* Ticket 428 - posix winsync should support ADD user/group entries
from DS to AD
* Ticket 460 - support multiple subtrees and filters
* Ticket 512 - improve performance of vattr code
* Ticket 513 - recycle operation pblocks
* Ticket 514 - investigate connection locking
* Ticket 521 - modrdn + NSMMReplicationPlugin - Consumer failed to
replay change
* Ticket 564 - Is ldbm_txn_ruv_modify_context still required ?
* Ticket 568 - using transaction batchval violates durability
* Ticket 569 - examine replication code to reduce amount of stored
state information
* Ticket 586 - selinux errors with /usr/sbin/setup-ds-admin.pl
* Ticket 589 - [RFE] Support RFC 4527
<http://tools.ietf.org/html/rfc4527> Read Entry Controls
* Ticket 601 - multi master replication allows schema violation
* Ticket 602 - replication inconsistency if attribute is modified
several times in one operaion
* Ticket 607 - Replication issue: Entry can diverge betwen servers
* Ticket 609 - nsDS5BeginReplicaRefresh attribute accepts any value
and it doesn't throw any error when server restarts.
* Ticket 615 - High contention on cos cache lock
* Ticket 617 - Possible to add invalid ACI value
* Ticket 626 - Possible to add nonexistent target to ACI
* Ticket 630 - The backend name provided to bak2db is not validated
* Ticket 47306 - execute index_add_mods only for indexed attributes
* Ticket 47310 - Attribute "dsOnlyMemberUid" not allowed when syncing
nested posix groups from AD with posixWinsync
* Ticket 47313 - Indexed search with filter containing '&' and "!"
with attribute subtypes gives wrong result
* Ticket 47314 - Winsync should support range retrieval
* Ticket 47316 - Search against 'view' is always reported as unindexed
* Ticket 47317 - should set LDAP_OPT_X_SASL_NOCANON to LDAP_OPT_ON by
default
* Ticket 47319 - make connection buffer size adjustable
* Ticket 47320 - put conn on work_q not poll list if conn has buffered
more_data
* Ticket 47323 - resurrected entry is not correctly indexed
* Ticket 47326 - idl switch does not work
* Ticket 47329 - Improve slapi_back_transaction_begin() return code
when transactions are not available
* Ticket 47331 - Self entry access ACI not working properly
* Ticket 47337 - mep_pre_op: Unable to fetch origin entry
* Ticket 47340 - Deleting a separator ',' in 7-bit check plugin
arguments makes the server fail to start with segfault
* Ticket 47350 - Allow search to look up 'in memory RUV'
* Ticket 47354 - Indexed search are logged with 'notes=U' in the
access logs
* Ticket 47358 - backend performance - introduce optimization levels
* Ticket 47360 - Delete attribute could crash the server
* Ticket 47363 - 7-bit checking is not necessary for userPassword
* Ticket 47370 - DS crashes with some 7-bit check plugin configurations
* Ticket 47371 - Some updates of "passwordgraceusertime" are useless
when updating "userpassword"
* Ticket 47372 - make old-idl tunable
* Ticket 47381 - nsslapd-db-transaction-batch-val turns to -1
* Ticket 47382 - Add a warning message when a connection hits the max
number of threads
* Ticket 47384 - Plugin library path validation
* Ticket 47387 - improve logconv.pl performance with large access logs
* Ticket 47388 - [RFE] Support 'Content Synchronization Operation'
(SyncRepl) - RFC 4533 <http://tools.ietf.org/html/rfc4533>
* Ticket 47389 - Non-directory manager can change the individual
userPassword's storage scheme
* Ticket 47394 - remove-ds.pl should remove /var/lock/dirsrv
* Ticket 47400 - MMR stress test with dna enabled causes a deadlock
* Ticket 47411 - Replace substring search with plain search in
referint plugin
* Ticket 47416 - IPA replica's - "SASL encrypted packet length exceeds
maximum allowed limit"
* Ticket 47423 - 7-bit check plugin does not work for userpassword
attribute
* Ticket 47425 - should only call windows_update_done if repl agmt
type is windows
* Ticket 47426 - move compute_idletimeout out of handle_pr_read_ready
* Ticket 47433 - With SeLinux, ports can be labelled per range.
setup-ds.pl or setup-ds-admin.pl fail to detect already ranged
labelled ports
* Ticket 47463 - IDL-style can become mismatched during partial
restoration
* Ticket 47487 - enhance retro changelog
* Ticket 47490 - Schema replication between DS versions may overwrite
newer base schema
* Ticket 47502 - updates to ruv entry are written to retro changelog
* Ticket 47504 - idlistscanlimit per index/type/value
* Ticket 47505 - get rid of valueset_add_valuearray_ext
* Ticket 47513 - tmpfiles.d references /var/lock when they should
reference /run/lock
* Ticket 47517 - memory leak in range searches and other various leaks
* Ticket 47520 - Fix various issues with logconv.pl
* Ticket 47522 - Password administrators should be able to violate
password policy
* Ticket 47531 - 1.3.2 with mozldap - need to redo sasl_io_recv
* Ticket 47532 - 1.3.2 with mozldap - crashes in new operation work_q
* Ticket 47539 - Disabling DNA plug-in throws error 53
* Ticket 47543 - mozldap - fix compiler warnings
* Ticket 47551 - logconv: -V does not produce unindexed search report
* Ticket 47550 - logconv: failed logins: Use of uninitialized value in
numeric comparison at logconv.pl line 949
* ticket 47550 - wip (cherry picked from commit
82377636267787be5182457d619d5a0b662d2658)
10 years, 1 month
Announcing 389 Directory Server version 1.3.1.12
by Noriko Hosoi
389 Directory Server 1.3.1.12
The 389 Directory Server team is proud to announce 389-ds-base version
1.3.1.12.
Fedora packages are available from the Fedora 19 Testing repositories.
The new packages and versions are:
* 389-ds-base-1.3.1.12-1
A source tarball is available for download at
http://port389.org/sources/389-ds-base-1.3.1.12.tar.bz2
Highlights in 1.3.1.12
* server should restart cleanly after reboot - tmpfiles.d issues with
/run have been resolved
o This time the issue has really been resolved
* logconv.pl improvements
* bug fixes
Installation and Upgrade
See Download <http://directory.fedoraproject.org/wiki/Download> for
information about setting up your yum repositories.
To install, use *yum install 389-ds* yum install 389-ds After install
completes, run *setup-ds-admin.pl* to set up your directory server.
setup-ds-admin.pl
To upgrade, use *yum upgrade* yum upgrade After upgrade completes, run
*setup-ds-admin.pl -u* to update your directory server/admin
server/console information. setup-ds-admin.pl -u
See Install_Guide
<http://directory.fedoraproject.org/wiki/Install_Guide> for more
information about the initial installation, setup, and upgrade
See Source <http://directory.fedoraproject.org/wiki/Source> for
information about source tarballs and SCM (git) access.
Feedback
We are very interested in your feedback!
Please provide feedback and comments to the 389-users mailing list:
https://admin.fedoraproject.org/mailman/listinfo/389-users
If you find a bug, or would like to see a new feature, file it in our
Trac instance: https://fedorahosted.org/389
Detailed Changelog since 1.3.1.11
* Ticket 53 - Need to update supported locales
* Ticket 54 - locale "nl" not supported by collation plugin
* Ticket 47354 - Indexed search are logged with 'notes=U' in the
access logs
* Ticket 47387 - improve logconv.pl performance with large access logs
* Ticket 47501 - logconv.pl uses /var/tmp for BDB temp files
* Ticket 47513 - tmpfiles.d references /var/lock when they should
reference /run/loc
* Ticket 47517 - memory leak in range searches and other various leaks
* Ticket 47520 - Fix various issues with logconv.pl
* Ticket 47522 - Password adminstrators should be able to voilate
password policy
* Ticket 47543 - Mozldap - fix compiler warnings
* Ticket 47551 - logconv: -V does not produce unindexed search report
* Ticket 47533 - logconv: some stats do not work across server restarts
* Coverity fixes - 12023, 12024, and 12025
10 years, 1 month
EL5 - new testing build - 389-ds-base-1.2.11.24
by Rich Megginson
There are still some of you in the 389 community that are running on
EL5, and we haven't had an update for quite some time.
The 389 team has backported some fixes that allow the 1.2.11 branch to
build on EL5.
There is a new build in epel-testing for EL5 - 389-ds-base-1.2.11.24-1.el5
If you use EL5, please try out the new package and give us your feedback.
10 years, 2 months
Announcing 389 Directory Server version 1.2.11.23
by Rich Megginson
389 Directory Server 1.2.11.23
The 389 Directory Server team is proud to announce 389-ds-base version
1.2.11.23 for EL6.
EL6-only packages are available, in the Testing repository. It will move
to the Stable repositories once it has received some testing from the
community. We encourage you to test and provide feedback in order to
speed up the push to the Stable repositories.
The new packages and versions are:
* 389-ds-base-1.2.11.23-3
A source tarball is available for download at
http://port389.org/sources/389-ds-base-1.2.11.23.tar.bz2
Highlights in 1.2.11.23
* several logconv improvements
* Fine Grained ID List Size - ability to set idlistscanlimit based on
index, index type, flags, and values
* Many, many bug fixes
Installation and Upgrade
See Download <http://port389.org/wiki/Download> for information about
setting up your yum repositories.
To install, use *yum install 389-ds* yum install 389-ds After install
completes, run *setup-ds-admin.pl* to set up your directory server.
setup-ds-admin.pl
To upgrade, use *yum upgrade* yum upgrade After upgrade completes, run
*setup-ds-admin.pl -u* to update your directory server/admin
server/console information. setup-ds-admin.pl -u
See Install_Guide <http://port389.org/wiki/Install_Guide> for more
information about the initial installation, setup, and upgrade
See Source <http://port389.org/wiki/Source> for information about source
tarballs and SCM (git) access.
Feedback
We are very interested in your feedback!
Please provide feedback and comments to the 389-users mailing list:
https://admin.fedoraproject.org/mailman/listinfo/389-users
If you find a bug, or would like to see a new feature, file it in our
Trac instance: https://fedorahosted.org/389
Detailed Changelog since 1.2.11.22
Mark Reynolds (11):
* Ticket #356 <https://fedorahosted.org/389/ticket/356> - RFE - Track
bind info
* Ticket 539 <https://fedorahosted.org/389/ticket/539> - logconv.pl
should handle microsecond timing
* Ticket 471 <https://fedorahosted.org/389/ticket/471> - logconv.pl
tool removes the access logs contents if "-M" is not correctly used
* TIcket 419 <https://fedorahosted.org/389/ticket/419> - logconv.pl -
improve memory management
* Ticket 611 <https://fedorahosted.org/389/ticket/611> - logconv.pl
missing stats for StartTLS, LDAPI, and AUTOBIND
* Ticket 47447 <https://fedorahosted.org/389/ticket/47447> -
logconv.pl man page missing -m,-M,-B,-D
* Ticket 47461 <https://fedorahosted.org/389/ticket/47461> -
logconv.pl - Use of comma-less variable list is deprecated
* Ticket 47520 <https://fedorahosted.org/389/ticket/47520> - Fix
various issues with logconv.pl
* Ticket 47509 <https://fedorahosted.org/389/ticket/47509> -
CLEANALLRUV doesnt run across all replicas
Noriko Hosoi (5):
* Ticket #47492 <https://fedorahosted.org/389/ticket/47492> - PassSync
removes User must change password flag on the Windows side
* Ticket #47523 <https://fedorahosted.org/389/ticket/47523> - Set up
replcation/agreement before initializing the sub suffix, the sub
suffix is not found by ldapsearch
* Ticket #47534 <https://fedorahosted.org/389/ticket/47534> - RUV
tombstone search with scope "one" doesn`t work
* Coverity fixes <https://fedorahosted.org/389/ticket/47540> -
Coverity fixes 12023, 12024, and 12025
* Ticket #422 <https://fedorahosted.org/389/ticket/422> - 389-ds-base
- Can't call method "getText"
Rich Megginson (13):
* Bug 999634 <https://bugzilla.redhat.com/show_bug.cgi?id=999634> -
ns-slapd crash due to bogus DN
* Ticket #47516 <https://fedorahosted.org/389/ticket/47516>
replication stops with excessive clock skew
* Ticket #47504 <https://fedorahosted.org/389/ticket/47504>
idlistscanlimit per index/type/value
* Ticket #47336 <https://fedorahosted.org/389/ticket/47336> -
logconv.pl -m not working for all stats
* Ticket #47341 <https://fedorahosted.org/389/ticket/47341> -
logconv.pl -m time calculation is wrong
* Ticket #47348 <https://fedorahosted.org/389/ticket/47341> - add
etimes to per second/minute stats
* Ticket #47387 <https://fedorahosted.org/389/ticket/47387> - improve
logconv.pl performance with large access logs
* Ticket #47501 <https://fedorahosted.org/389/ticket/47501> logconv.pl
uses /var/tmp for BDB temp files
* Ticket 47533 <https://fedorahosted.org/389/ticket/47533> logconv:
some stats do not work across server restarts
Thierry bordaz (tbordaz) (2):
* Ticket 47489 <https://fedorahosted.org/389/ticket/47489> - Under
specific values of nsDS5ReplicaName, replication may get broken or
updates missing
* Ticket 47354 <https://fedorahosted.org/389/ticket/47354> - Indexed
search are logged with 'notes=U' in the access logs
Retrieved from "http://port389.org/wiki/Releases/1.2.11.23"
10 years, 2 months