389-announce October 2013

389-announce@lists.fedoraproject.org

2 participants
5 discussions

Announcing 389 Directory Server version 1.3.2.3
by Noriko Hosoi 28 Oct '13

28 Oct '13

389 Directory Server 1.3.2.3 The 389 Directory Server team is proud to announce 389-ds-base version 1.3.2.3. Fedora packages are available from the Fedora 20 Testing repositories. The new packages and versions are: * 389-ds-base-1.3.2.3-1 A source tarball is available for download at http://port389.org/sources/389-ds-base-1.3.2.3.tar.bz2 Highlights in 1.3.2.3 * bug fixes o Update fails in the Content Sync Plug-in. o Fixup memberof task does not work. o Server hangs in the SASL initialization Installation and Upgrade See Download <http://directory.fedoraproject.org/wiki/Download> for information about setting up your yum repositories. To install, use *yum install 389-ds* yum install 389-ds After install completes, run *setup-ds-admin.pl* to set up your directory server. setup-ds-admin.pl To upgrade, use *yum upgrade* yum upgrade After upgrade completes, run *setup-ds-admin.pl -u* to update your directory server/admin server/console information. setup-ds-admin.pl -u See Install_Guide <http://directory.fedoraproject.org/wiki/Install_Guide> for more information about the initial installation, setup, and upgrade See Source <http://directory.fedoraproject.org/wiki/Source> for information about source tarballs and SCM (git) access. Feedback We are very interested in your feedback! Please provide feedback and comments to the 389-users mailing list: https://admin.fedoraproject.org/mailman/listinfo/389-users If you find a bug, or would like to see a new feature, file it in our Trac instance: https://fedorahosted.org/389 Detailed Changelog since 1.3.2.2 * Ticket 47515 - Fedora 20: setup-ds-admin.pl * Ticket 47559 - hung server - related to sasl and initialize * Ticket 47560 - fixup memberof task does not work: task entry not added * Ticket 47565 - Content Sync update file needs extensibleObject * Ticket 47569 - ACIs do not allow attribute subtypes in targetattr keyword Retrieved from "http://directory.fedoraproject.org/wiki/Releases/1.3.2.3"

1 0

Announcing 389 Directory Server version 1.3.2.2
by Noriko Hosoi 11 Oct '13

11 Oct '13

389 Directory Server 1.3.2.2 The 389 Directory Server team is proud to announce 389-ds-base version 1.3.2.2. Fedora packages are available from the Fedora 20 Testing repositories. The new packages and versions are: * 389-ds-base-1.3.2.2-1 A source tarball is available for download at http://port389.org/sources/389-ds-base-1.3.2.2.tar.bz2 Highlights in 1.3.2.2 * Support 'Content Synchronization Operation' (SyncRepl) - RFC 4533 <http://tools.ietf.org/html/rfc4533> * Support "whoami" extended operation * Add ACI support for ldapi * WinSync enhancement o support range retrieval o support multiple subtrees and filters * Performance improvements * bug fixes Installation and Upgrade See Download <http://directory.fedoraproject.org/wiki/Download> for information about setting up your yum repositories. To install, use *yum install 389-ds* yum install 389-ds After install completes, run *setup-ds-admin.pl* to set up your directory server. setup-ds-admin.pl To upgrade, use *yum upgrade* yum upgrade After upgrade completes, run *setup-ds-admin.pl -u* to update your directory server/admin server/console information. setup-ds-admin.pl -u See Install_Guide <http://directory.fedoraproject.org/wiki/Install_Guide> for more information about the initial installation, setup, and upgrade See Source <http://directory.fedoraproject.org/wiki/Source> for information about source tarballs and SCM (git) access. Feedback We are very interested in your feedback! Please provide feedback and comments to the 389-users mailing list: https://admin.fedoraproject.org/mailman/listinfo/389-users If you find a bug, or would like to see a new feature, file it in our Trac instance: https://fedorahosted.org/389 Detailed Changelog since 1.3.1 * Ticket 48 - Active Directory has certain uids which are reserved and will cause a Directory Server replica initialization of an AD server to abort. * Ticket 53 - Need to update supported locales * Ticket 54 - locale "nl" not supported by collation plugin * Ticket 77 - [RFE] Add ACI support for ldapi * Ticket 123 - Enhancement request: "whoami" extended operation * Ticket 153 - Schema file parsing overly picky? * Ticket 182 - Pwd retry counters replication not enabled by default, and enabling it could lead to undesired results * Ticket 197 - rhds82 rfe - BDB backend - clear free page files to reduce changelog size * Ticket 205 - rhds81 rfe - snmp counters index strings for multiple network interfaces with ip addr and tcp port pairs * Ticket 208 - [RFE] Roles with explicit scoping in RHDS * Ticket 283 - Expose slapi_eq_* API * Ticket 314 - ChainOnUpdate: "cn=directory manager" can modify userRoot on consumer without changes being chained or replicated. Directory integrity compromised. * Ticket 411 - [RFE] mods optimizer * Ticket 415 - winsync doesn't sync DN valued attributes if DS DN value doesn't exist * Ticket 428 - posix winsync should support ADD user/group entries from DS to AD * Ticket 460 - support multiple subtrees and filters * Ticket 512 - improve performance of vattr code * Ticket 513 - recycle operation pblocks * Ticket 514 - investigate connection locking * Ticket 521 - modrdn + NSMMReplicationPlugin - Consumer failed to replay change * Ticket 564 - Is ldbm_txn_ruv_modify_context still required ? * Ticket 568 - using transaction batchval violates durability * Ticket 569 - examine replication code to reduce amount of stored state information * Ticket 586 - selinux errors with /usr/sbin/setup-ds-admin.pl * Ticket 589 - [RFE] Support RFC 4527 <http://tools.ietf.org/html/rfc4527> Read Entry Controls * Ticket 601 - multi master replication allows schema violation * Ticket 602 - replication inconsistency if attribute is modified several times in one operaion * Ticket 607 - Replication issue: Entry can diverge betwen servers * Ticket 609 - nsDS5BeginReplicaRefresh attribute accepts any value and it doesn't throw any error when server restarts. * Ticket 615 - High contention on cos cache lock * Ticket 617 - Possible to add invalid ACI value * Ticket 626 - Possible to add nonexistent target to ACI * Ticket 630 - The backend name provided to bak2db is not validated * Ticket 47306 - execute index_add_mods only for indexed attributes * Ticket 47310 - Attribute "dsOnlyMemberUid" not allowed when syncing nested posix groups from AD with posixWinsync * Ticket 47313 - Indexed search with filter containing '&' and "!" with attribute subtypes gives wrong result * Ticket 47314 - Winsync should support range retrieval * Ticket 47316 - Search against 'view' is always reported as unindexed * Ticket 47317 - should set LDAP_OPT_X_SASL_NOCANON to LDAP_OPT_ON by default * Ticket 47319 - make connection buffer size adjustable * Ticket 47320 - put conn on work_q not poll list if conn has buffered more_data * Ticket 47323 - resurrected entry is not correctly indexed * Ticket 47326 - idl switch does not work * Ticket 47329 - Improve slapi_back_transaction_begin() return code when transactions are not available * Ticket 47331 - Self entry access ACI not working properly * Ticket 47337 - mep_pre_op: Unable to fetch origin entry * Ticket 47340 - Deleting a separator ',' in 7-bit check plugin arguments makes the server fail to start with segfault * Ticket 47350 - Allow search to look up 'in memory RUV' * Ticket 47354 - Indexed search are logged with 'notes=U' in the access logs * Ticket 47358 - backend performance - introduce optimization levels * Ticket 47360 - Delete attribute could crash the server * Ticket 47363 - 7-bit checking is not necessary for userPassword * Ticket 47370 - DS crashes with some 7-bit check plugin configurations * Ticket 47371 - Some updates of "passwordgraceusertime" are useless when updating "userpassword" * Ticket 47372 - make old-idl tunable * Ticket 47381 - nsslapd-db-transaction-batch-val turns to -1 * Ticket 47382 - Add a warning message when a connection hits the max number of threads * Ticket 47384 - Plugin library path validation * Ticket 47387 - improve logconv.pl performance with large access logs * Ticket 47388 - [RFE] Support 'Content Synchronization Operation' (SyncRepl) - RFC 4533 <http://tools.ietf.org/html/rfc4533> * Ticket 47389 - Non-directory manager can change the individual userPassword's storage scheme * Ticket 47394 - remove-ds.pl should remove /var/lock/dirsrv * Ticket 47400 - MMR stress test with dna enabled causes a deadlock * Ticket 47411 - Replace substring search with plain search in referint plugin * Ticket 47416 - IPA replica's - "SASL encrypted packet length exceeds maximum allowed limit" * Ticket 47423 - 7-bit check plugin does not work for userpassword attribute * Ticket 47425 - should only call windows_update_done if repl agmt type is windows * Ticket 47426 - move compute_idletimeout out of handle_pr_read_ready * Ticket 47433 - With SeLinux, ports can be labelled per range. setup-ds.pl or setup-ds-admin.pl fail to detect already ranged labelled ports * Ticket 47463 - IDL-style can become mismatched during partial restoration * Ticket 47487 - enhance retro changelog * Ticket 47490 - Schema replication between DS versions may overwrite newer base schema * Ticket 47502 - updates to ruv entry are written to retro changelog * Ticket 47504 - idlistscanlimit per index/type/value * Ticket 47505 - get rid of valueset_add_valuearray_ext * Ticket 47513 - tmpfiles.d references /var/lock when they should reference /run/lock * Ticket 47517 - memory leak in range searches and other various leaks * Ticket 47520 - Fix various issues with logconv.pl * Ticket 47522 - Password administrators should be able to violate password policy * Ticket 47531 - 1.3.2 with mozldap - need to redo sasl_io_recv * Ticket 47532 - 1.3.2 with mozldap - crashes in new operation work_q * Ticket 47539 - Disabling DNA plug-in throws error 53 * Ticket 47543 - mozldap - fix compiler warnings * Ticket 47551 - logconv: -V does not produce unindexed search report * Ticket 47550 - logconv: failed logins: Use of uninitialized value in numeric comparison at logconv.pl line 949 * ticket 47550 - wip (cherry picked from commit 82377636267787be5182457d619d5a0b662d2658)

1 0

Announcing 389 Directory Server version 1.3.1.12
by Noriko Hosoi 11 Oct '13

11 Oct '13

389 Directory Server 1.3.1.12 The 389 Directory Server team is proud to announce 389-ds-base version 1.3.1.12. Fedora packages are available from the Fedora 19 Testing repositories. The new packages and versions are: * 389-ds-base-1.3.1.12-1 A source tarball is available for download at http://port389.org/sources/389-ds-base-1.3.1.12.tar.bz2 Highlights in 1.3.1.12 * server should restart cleanly after reboot - tmpfiles.d issues with /run have been resolved o This time the issue has really been resolved * logconv.pl improvements * bug fixes Installation and Upgrade See Download <http://directory.fedoraproject.org/wiki/Download> for information about setting up your yum repositories. To install, use *yum install 389-ds* yum install 389-ds After install completes, run *setup-ds-admin.pl* to set up your directory server. setup-ds-admin.pl To upgrade, use *yum upgrade* yum upgrade After upgrade completes, run *setup-ds-admin.pl -u* to update your directory server/admin server/console information. setup-ds-admin.pl -u See Install_Guide <http://directory.fedoraproject.org/wiki/Install_Guide> for more information about the initial installation, setup, and upgrade See Source <http://directory.fedoraproject.org/wiki/Source> for information about source tarballs and SCM (git) access. Feedback We are very interested in your feedback! Please provide feedback and comments to the 389-users mailing list: https://admin.fedoraproject.org/mailman/listinfo/389-users If you find a bug, or would like to see a new feature, file it in our Trac instance: https://fedorahosted.org/389 Detailed Changelog since 1.3.1.11 * Ticket 53 - Need to update supported locales * Ticket 54 - locale "nl" not supported by collation plugin * Ticket 47354 - Indexed search are logged with 'notes=U' in the access logs * Ticket 47387 - improve logconv.pl performance with large access logs * Ticket 47501 - logconv.pl uses /var/tmp for BDB temp files * Ticket 47513 - tmpfiles.d references /var/lock when they should reference /run/loc * Ticket 47517 - memory leak in range searches and other various leaks * Ticket 47520 - Fix various issues with logconv.pl * Ticket 47522 - Password adminstrators should be able to voilate password policy * Ticket 47543 - Mozldap - fix compiler warnings * Ticket 47551 - logconv: -V does not produce unindexed search report * Ticket 47533 - logconv: some stats do not work across server restarts * Coverity fixes - 12023, 12024, and 12025

1 0

EL5 - new testing build - 389-ds-base-1.2.11.24
by Rich Megginson 04 Oct '13

04 Oct '13

There are still some of you in the 389 community that are running on EL5, and we haven't had an update for quite some time. The 389 team has backported some fixes that allow the 1.2.11 branch to build on EL5. There is a new build in epel-testing for EL5 - 389-ds-base-1.2.11.24-1.el5 If you use EL5, please try out the new package and give us your feedback.

1 0

Announcing 389 Directory Server version 1.2.11.23
by Rich Megginson 02 Oct '13

02 Oct '13

389 Directory Server 1.2.11.23 The 389 Directory Server team is proud to announce 389-ds-base version 1.2.11.23 for EL6. EL6-only packages are available, in the Testing repository. It will move to the Stable repositories once it has received some testing from the community. We encourage you to test and provide feedback in order to speed up the push to the Stable repositories. The new packages and versions are: * 389-ds-base-1.2.11.23-3 A source tarball is available for download at http://port389.org/sources/389-ds-base-1.2.11.23.tar.bz2 Highlights in 1.2.11.23 * several logconv improvements * Fine Grained ID List Size - ability to set idlistscanlimit based on index, index type, flags, and values * Many, many bug fixes Installation and Upgrade See Download <http://port389.org/wiki/Download> for information about setting up your yum repositories. To install, use *yum install 389-ds* yum install 389-ds After install completes, run *setup-ds-admin.pl* to set up your directory server. setup-ds-admin.pl To upgrade, use *yum upgrade* yum upgrade After upgrade completes, run *setup-ds-admin.pl -u* to update your directory server/admin server/console information. setup-ds-admin.pl -u See Install_Guide <http://port389.org/wiki/Install_Guide> for more information about the initial installation, setup, and upgrade See Source <http://port389.org/wiki/Source> for information about source tarballs and SCM (git) access. Feedback We are very interested in your feedback! Please provide feedback and comments to the 389-users mailing list: https://admin.fedoraproject.org/mailman/listinfo/389-users If you find a bug, or would like to see a new feature, file it in our Trac instance: https://fedorahosted.org/389 Detailed Changelog since 1.2.11.22 Mark Reynolds (11): * Ticket #356 <https://fedorahosted.org/389/ticket/356> - RFE - Track bind info * Ticket 539 <https://fedorahosted.org/389/ticket/539> - logconv.pl should handle microsecond timing * Ticket 471 <https://fedorahosted.org/389/ticket/471> - logconv.pl tool removes the access logs contents if "-M" is not correctly used * TIcket 419 <https://fedorahosted.org/389/ticket/419> - logconv.pl - improve memory management * Ticket 611 <https://fedorahosted.org/389/ticket/611> - logconv.pl missing stats for StartTLS, LDAPI, and AUTOBIND * Ticket 47447 <https://fedorahosted.org/389/ticket/47447> - logconv.pl man page missing -m,-M,-B,-D * Ticket 47461 <https://fedorahosted.org/389/ticket/47461> - logconv.pl - Use of comma-less variable list is deprecated * Ticket 47520 <https://fedorahosted.org/389/ticket/47520> - Fix various issues with logconv.pl * Ticket 47509 <https://fedorahosted.org/389/ticket/47509> - CLEANALLRUV doesnt run across all replicas Noriko Hosoi (5): * Ticket #47492 <https://fedorahosted.org/389/ticket/47492> - PassSync removes User must change password flag on the Windows side * Ticket #47523 <https://fedorahosted.org/389/ticket/47523> - Set up replcation/agreement before initializing the sub suffix, the sub suffix is not found by ldapsearch * Ticket #47534 <https://fedorahosted.org/389/ticket/47534> - RUV tombstone search with scope "one" doesn`t work * Coverity fixes <https://fedorahosted.org/389/ticket/47540> - Coverity fixes 12023, 12024, and 12025 * Ticket #422 <https://fedorahosted.org/389/ticket/422> - 389-ds-base - Can't call method "getText" Rich Megginson (13): * Bug 999634 <https://bugzilla.redhat.com/show_bug.cgi?id=999634> - ns-slapd crash due to bogus DN * Ticket #47516 <https://fedorahosted.org/389/ticket/47516> replication stops with excessive clock skew * Ticket #47504 <https://fedorahosted.org/389/ticket/47504> idlistscanlimit per index/type/value * Ticket #47336 <https://fedorahosted.org/389/ticket/47336> - logconv.pl -m not working for all stats * Ticket #47341 <https://fedorahosted.org/389/ticket/47341> - logconv.pl -m time calculation is wrong * Ticket #47348 <https://fedorahosted.org/389/ticket/47341> - add etimes to per second/minute stats * Ticket #47387 <https://fedorahosted.org/389/ticket/47387> - improve logconv.pl performance with large access logs * Ticket #47501 <https://fedorahosted.org/389/ticket/47501> logconv.pl uses /var/tmp for BDB temp files * Ticket 47533 <https://fedorahosted.org/389/ticket/47533> logconv: some stats do not work across server restarts Thierry bordaz (tbordaz) (2): * Ticket 47489 <https://fedorahosted.org/389/ticket/47489> - Under specific values of nsDS5ReplicaName, replication may get broken or updates missing * Ticket 47354 <https://fedorahosted.org/389/ticket/47354> - Indexed search are logged with 'notes=U' in the access logs Retrieved from "http://port389.org/wiki/Releases/1.2.11.23"

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

389-announce October 2013