389-commits August 2016

389-commits@lists.fedoraproject.org

6 participants
70 discussions

m4/mod_nss.m4
by Noriko Hosoi 04 Aug '16

04 Aug '16

m4/mod_nss.m4 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) New commits: commit 7dabd7fd841a2781b00d709cdfdf443238714d69 Author: Noriko Hosoi <nhosoi(a)redhat.com> Date: Thu Aug 4 16:33:17 2016 -0700 Bug 1236635 - 389-admin TPS srpmtest failure Bug Description: In case configure is repeated with rpm -U and *.rpmnew files are generated, configure fails with the error: Could not find the mod_nss pass phrase helper /nss_pcache Fix Description: NSSPassPhraseHelper should avoid files unless the file name ends with ".conf". diff --git a/m4/mod_nss.m4 b/m4/mod_nss.m4 index 7a228c6..294bf59 100644 --- a/m4/mod_nss.m4 +++ b/m4/mod_nss.m4 @@ -54,7 +54,7 @@ AC_MSG_RESULT(no)) if test -z "$modnssbindir" ; then nsspcache=`grep NSSPassPhraseHelper $httpdconf|awk '{print $2}'` if test -z "$nsspcache" ; then - nsspcache=`grep NSSPassPhraseHelper $httpd_root/conf.d/* | awk '{print $2}'` + nsspcache=`grep NSSPassPhraseHelper $httpd_root/conf.d/*.conf | awk '{print $2}'` fi if test -z "$nsspcache" ; then # same directory as Apache?

1 0

Changes to 'refs/tags/389-ds-base-1.3.5.12'
by Noriko Hosoi 04 Aug '16

04 Aug '16

Changes since 389-ds-base-1.2.6.a1: Andrey Cherepanov (1): Ticket 48783 - Fix ns-accountstatus.pl syntax error Anupam Jain (9): Ticket 123 - Enhancement request:"whoami" extended operation Ticket 123 - Enhancement request:"whoami" extended operation Ticket 123 - Enhancement request:"whoami" extended operation Ticket #47423 - 7-bit check plugin does not work for userpassword attribute Ticket #47363 - 7-bit checking is not necessary for userPassword Ticket #47431 - Duplicate values for the attribute nsslapd-pluginarg are not handled correctly Ticket #47370 - DS crashes with some 7-bit check plugin configurations Ticket #617 - Possible to add invalid ACI value Ticket #626 - Possible to add nonexistent target to ACI Carsten Grzemba (2): Ticket #555 - add fixup-memberuid.pl script Ticket #555 - add fixup-memberuid.pl script Charles Lopes (1): Bug #361: Bad DNs in ACIs can segfault ns-slapd Endi S. Dewata (168): Bug 545620 - Password cannot start with minus sign Bug 538525 - Ability to create instance as non-root user Bug 570542 - Root password cannot contain matching curly braces Bug 470684 - Pam_passthru plugin doesn't verify account activation Bug 573375 - MODRDN operation not logged Bug 520151 - Error when modifying userPassword with proxy user Bug 455489 - Address compiler warnings about strict-aliasing rules Bug 566320 - RFE: add exception to removal of attributes in cn=config for aci Bug 566043 - startpid file is only cleaned by initscript runs Bug 584109 - Slapd crashes while parsing DNA configuration Bug 542570 - Directory Server port number is not validated in the beginning. Bug 145181 - Plugin target/bind subtrees only take 1 value. Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891 Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891 Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891 Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891 Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891 Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891 Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891 Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891 Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891 Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891 Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891 Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891 Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891 Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891 Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891 Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891 Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891 Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891 Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891 Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891 Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891 Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891 Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053 Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053 Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053 Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053 Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053 Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053 Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053 Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053 Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053 Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053 Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053 Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053 Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053 Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053 Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053 Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053 Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053 Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053 Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053 Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053 Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053 Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053 Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053 Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053 Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053 Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053 Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053 Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053 Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053 Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053 Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053 Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053 Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053 Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053 Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053 Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093 Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093 Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093 Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093 Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093 Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093 Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093 Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093 Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093 Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093 Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093 Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093 Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093 Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093 Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093 Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093 Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093 Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093 Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093 Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093 Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093 Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093 Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939 Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939 Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939 Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939 Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939 Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939 Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939 Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939 Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939 Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939 Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939 Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939 Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939 Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939 Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939 Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939 Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939 Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939 Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939 Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939 Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939 Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939 Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939 Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939 Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939 Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939 Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136 Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136 Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136 Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136 Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136 Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136 Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136 Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136 Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136 Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136 Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136 Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136 Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136 Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136 Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136 Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136 Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136 Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199 Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199 Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199 Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199 Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199 Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199 Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199 Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199 Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199 Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199 Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199 Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199 Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199 Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199 Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199 Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199 Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166 Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166 Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166 Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166 Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166 Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166 Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166 Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166 Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166 Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166 Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166 Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166 Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166 Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166 Bug 628096 - spurious error message from /sbin/service when doing a stop on no instances Bug 573889 - Migration does not remove deprecated schema Bug 606545 - core schema should include numSubordinates Bug 643979 - Strange byte sequence for attribute with no values (nsslapd-referral) Endi Sukma Dewata (16): Bug 630092 - Coverity #12117: Resource leaks issues Bug 630092 - Coverity #15478: Resource leaks issues Bug 630092 - Coverity #15479: Resource leaks issues Bug 630092 - Coverity #15481: Resource leaks issues Bug 630092 - Coverity #15482: Resource leaks issues Bug 630092 - Coverity #15483: Resource leaks issues Bug 630092 - Coverity #15484: Resource leaks issues Bug 630092 - Coverity #15485: Resource leaks issues Bug 630092 - Coverity #15487: Resource leaks issues Bug 630092 - Coverity #15490: Resource leaks issues Bug 630092 - Coverity #15497: Resource leaks issues Bug 630092 - Coverity #11991: Resource leaks issues Bug 630092 - Coverity #12000: Resource leaks issues Bug 630092 - Coverity #12003: Resource leaks issues Bug 630092 - Coverity #11985: Resource leaks issues Bug 630092 - Coverity #11992,11993: Resource leaks issues German Parente (1): Ticket #48828 - db2ldif is not taking into account multiple suffixes or backends Graham Leggett (2): Ticket #48781 - Vague error message: setup_ol_tls_conn - failed: unable to create new TLS context Ticket #48782 - Make sure that when LDAP_OPT_X_TLS_NEWCTX is set, the value is set to zero. Jeroen van Meeuwen (Kolab Systems) (1): Suppress alert on unavailable port with forced setup Jochen Schneider (1): Fix-for-ticket-47972 - make parsing of nsslapd-changelogmaxage more fault tolerant Jonathan \"Duke\" Leto (1): fix for trac #173; update ds-logpipe.py docs about -t option Ken Rossato (8): Factorize into new isPosixGroup function Change "return"s in modGroupMembership to "break"s to avoid leaking Memory leaks: unmatched slapi_attr_get_valueset and slapi_value_new Simplify program flow: eliminate unnecessary continue Simplify program flow: make adduids/moduids/deluids action blocks all similar Fix logic errors: del_mod should be latched (might not be last mod), and avoid skipping add-mods (int value 0) Simplify program flow: change while loops to for Ticket #481 - expand nested posix groups Ludwig Krispenz (93): Fix for ticket 510 Fix for ticket 465: cn=monitor showing stats for other db instances Fix for ticket 504 Ticket 349 - nsViewFilter syntax issue in 389DS 1.2.5 Ticket 518 - dse.ldif is 0 length after server kill or machine kill Ticket 505 - use lock-free access name2asi and oid2asi table Fix optimization issue introduced with fix for ticket #561, modify operations without values need to be written to the changelog Reduce replication meta data stored in entry, cf ticket 569 Fix compiler warnings introduced by fix for #569 removing an unused variable, did also remove an assigment Ticket 568 - make usage of transaction batch flush durable fix hang related to ticket 568 Ticket 47358 - implement backend optimazation levels Ticket 47396 - crash on modrdn of tombstone Ticket 47395 47397 v2 correct behaviour of account policy if only stateattr fix compiler warnings, caused by fix for 47395,47397 Ticket 47399 - RHDS denies MODRDN access if ACI list contains any DENY rule Ticket 47369 version2 - provide default syntax plugin Fix compiler warning Ticket 346 - version 4 Slow ldapmodify operation time fix compiler warnings CVE-2013-2219 ACLs inoperative in some search scenarios fix compiler warning Ticket 47502 - updates to ruv entry are written to retro changelog Fix regression from fix for 569, when the last value of an attribute was explicitely deleted Ticket 47505 - Get rid of valueset_add_valuearray_ext Ticket 47487 - enhance retro changelog Ticket 314 - ChaiOnUpdate for root handling Use defines for backend error handling Ticket 601 - multi master replication allows schema violation Ticket 47388 - RFE to implement RFC4533 -ver2 Fix for coverty issues 12028,12029,12030 Ticket 47577 - crash when removing entries from cache Ticket 47521 - Complex filter in a search request doen't work as expected. Ticket 47591 - entries with empty objectclass attribute value can be hidden Ticket 47527 - Allow referential integrity suffixes to be configurable Ticket 47526 - Allow memberof suffixes to be configurable Ticket 47612 - ns-slapd eats all the memory simplify fix for 47612 Ticket 47621 - v2 make referential integrity configuration more flexible Ticket 47629 - random crashes related to sync repl Ticket 47704 - invalid sizelimits in aci group evaluation Ticket 47732 - ds logs many "SLAPI_PLUGIN_BE_TXN_POST_DELETE_FN plugin returned error" messages Ticket 47733 - ds logs many "Operation error fetching Null DN" messages Ticket 47667 - Allow nsDS5ReplicaBindDN to be a group DN Ticket 47712 - betxn: retro changelog broken after cancelled transaction fix assertion failure introduced with fix for ticket 47667 Ticket 47761 - Return all attributes in rootdse without explicit request fix jenkins warning Ticket 47806 - Failed deletion of aci: no such attribute Ticket 47805 - syncrepl doesn't send notification when attribute in search filter changes Ticket 47803 - syncrepl crash if attribute list is non-empty fix coverity issue 12621 fix compiler error with alst coverity commit Ticket 47821 - deref plugin cannot handle complex acis Ticket #47750 - Creating a glue fails if one above level is a conflict or missing Ticket 47846 - server crashes deleting a replication agreement Ticket 47872 - Filter AND with only one clause should be optimized Ticket 47877 - check_and_add_entry fails for changetype: add and existing entry Ticket 47816 -v2- internal syncrepl searches are flagged as unindexed Ticket 47866 - Errors after upgrading related to attribute "dnaremotebindmethod" Ticket 47885 - deref plugin should not return references with noc access rights fix for 47885 did not always return a response control Ticket 47918 - result of dna_dn_is_shared_config is incorrectly used ticket 47916 plugin logging parameter only triggers result logging Additional fix for ticket 47526 v3 fix jenkins warning Ticket 47964 - v2 - Incorrect search result after replacing an empty attribute Ticket 47991 - upgrade script fails if /etc and /var are on different file systems Ticket #48021 - nsDS5ReplicaBindDNGroup checkinterval not working properly Bug 1199675 - CVE-2014-8112 CVE-2014-8105 389-ds-base: various flaws [fedora-all] Ticket 48136 -v2v2 accept auxilliary objectclasse in replication agreements Ticket 48149 - ns-slapd double free or corruption crash Ticket 48175 - Avoid using regex in ACL if possible Ticket 48141 - aci with wildcard and macro not correctly evaluated fix coverity reports Ticket 48195 - Slow replication when deleting large quantities of multi-valued attributes Ticket 48258 - dna plugin needs to handle binddn groups for authorization Ticket 48263 - allow plugins to detect tombstone operations fix redefinition of OP_FLAG found by jenkins Ticket 48255- total update request can be lost Ticket 48283 - many attrlist_replace errors in connection with cleanallruv Ticket: 48341 - deadlock on connection mutex fix jenkins warning, cast of c_mutex now has to be PRMonitor Ticket 48759 - no plugin calls in tombstone purging add testcase for ticket 48759 Ticket 48275 - search returns no entry when OR filter component contains non readable attribute Ticket 48766 - Replication changelog can incorrectly skip over updates add testcase for ticket 48366 - proxyauth for root Ticket #48366 - proxyauth does not work bound as directory manager Ticket 48882 - server can hang in connection list processing Bug 1347760 - CVE-2016-4992 389-ds-base: Information disclosure via repeated use of LDAP ADD operation, etc. Lukas Slebodnik (1): Ticket 48111 - "make clean" wipes out original files Mark Reynolds (518): Ticket #71 - unable to delete managed entry config Ticket #159 - Managed Entry Plugin runs against managed entries upon any update without validating Ticket #177 - logconv.pl doesn't detect restarts Merge branch 'ticket159' Ticket #49 - better handling for server shutdown while long running tasks are active Ticket #50 - server should not call a plugin after the plugin close function is calle Updated for ticket#50 Ticket #55 - Limit of 1024 characters for nsMatchingRule Ticket #140 - incorrect memset parameters Revert "Ticket #140 - incorrect memset parameters" Revert "Ticket #55 - Limit of 1024 characters for nsMatchingRule" Ticket #38 - nisDomain schema is incorrect Ticket #6 - protocol error from proxied auth operation Ticket #55 - Limit of 1024 characters for nsMatchingRule Ticket #39 - Account Policy Plugin does not work for simple binds when PAM Pass Through Auth plugin is enabled Ticket 175 - logconv.pl improvements Ticket 175 - minor fixes Ticket #17 - Replication optimizations Ticket #17 - new replication optimizations Ticket #129 - Should only update modifyTimestamp/modifiersName on MODIFY ops Ticket #111 - ability to control behavior of modifyTimestamp/modifiersName Ticket #211 - dnaNextValue gets incremented even if the user addition fails Ticket #74 - Add schema for DNA plugin (RFE) Ticket #306 - void function cannot return value Ticket #302 - use thread local storage for internalModifiersName & internalCreatorsName Schema Reload crash fix Ticket #291 - cannot use & in a sasl map search filter Ticket #305 - Certain CMP operations hang or cause ns-slapd to crash Ticket #191 - Implement SO_KEEPALIVE in network calls Config changes fail because of unknown attribute "internalModifiersname" Ticket #292 - logconv.pl reporting unindexed search with different search base than shown in access logs Ticket #308 - Automembership plugin fails if data and config area mixed in the plugin configuration Ticket #271 - replication code cleanup TIcket #285 - compilation fixes for '--format-security' Ticket #271 - Slow shutdown when you have 100+ replication agreements Ticket #24 - Add nsTLS1 to the DS schema Ticket #319 - ldap-agent crashes on start with signal SIGSEGV Ticket #20 - Allow automember to work on entries that have already been added Ticket #315 - ns-slapd exits/crashes if /var fills up Ticket #315 - small fix to libglobs Ticket #183 - passwordMaxFailure should lockout password one sooner - and should be configurable to avoid regressions Coverity Fixes Ticket #325 - logconv.pl : use of getopts to parse command line options Ticket #183 - passwordMaxFailure should lockout password one sooner Ticket #207 - [RFE] enable attribute that tracks when a password was last set Ticket #214 - Adding Replication agreement should complain if required nsds5ReplicaCredentials not supplied Ticket #337 - Improve CLEANRUV task Ticket #356 - RFE - Track bind info Ticket #196 - RFE: Interpret IPV6 addresses for ACIs, replication, and chaining Ticket #218 - Make RI Plugin worked with replicated updates Ticket 367 - Invalid chaining config triggers a disk full error and shutdown Ticket 365 - passwords in clear text in the audit log Ticket #321 - krbExtraData is being null modified and replicated on each ssh login Ticket #110 - RFE limiting root DN by host, IP, time of day, day of week Ticket 368 - Make the cleanAllRUV task one step Ticket #28 - MOD operations with chained delete/add get back error 53 on backend config Ticket #369 - restore of replica ldif file on second master after deleting two records shows only 1 deletion Update the slapi-plugin documentation on new slapi functions, and added a slapi function for checking on shutdowns Ticket #388 - Improve replication agreement status messages COVERITY FIXES Coverity Fix Ticket 366 - Change DS to purge ticket from krb cache in case of authentication error Ticket 399 - slapi_ldap_bind() doesn't check bind results Ticket 328 - make sure all internal search filters are properly escaped Ticket 413 - "Server is unwilling to perform" when running ldapmodify on nsds5ReplicaStripAttrs Ticket 403 - CLEANALLRUV feature Ticket 407 - memory leak in dna plugin Ticket 403 - cleanallruv coverity fixes Misc Coverity Fixes Ticket 407 - dna memory leak Ticket 403 - CLEANALLRUV amendment Ticket 403 - CLEANALLRUV - revision to last amendment Ticket 403 - fix CLEANALLRUV regression from last commit Ticket 429 - Add nsslapd-readonly to schema CLEANALLRUV coverity fixes Ticket 436 - nsds5ReplicaEnabled can be set with any invalid values. Ticket 386 - Overconsumption of memory with large cachememsize and heavy use of ldapmodify Ticket 450 - CLEANALLRUV task gets stuck on winsync replication agreement Ticket 452 - automember rebuild task adds users to groups that do not match the configuration scope Ticket 408 - create a normalized dn cache Ticket 467 - CLEANALLRUV abort task should be able to ignore down replicas Ticket 747 - Root DN Access Control - days allowed not working correctly Ticket 475 - Root DN Access Control - improve value checking for config Ticket 473 - change VERSION.sh to have console version be major.minor Coverity issue 13091 Ticket 457 - dirsrv init script returns 0 even when few or all instances fail to start Ticket 477 - CLEANALLRUV if there are only winsync agmts task will hang Ticket 478 - passwordTrackUpdateTime stops working with subtree password policies Ticket #446 - anonymous limits are being applied to directory manager Ticket 488 - Doc: DS error log messages with typo Ticket 486 - nsslapd-enablePlugin should not be multivalued Ticket 468 - if pam_passthru is enabled, need to AC_CHECK_HEADERS([security/pam_appl.h]) Ticket 495 - internalModifiersname not updated by DNA plugin Revert "Ticket 495 - internalModifiersname not updated by DNA plugin" Ticket 495 - internalModifiersname not updated by DNA plugin Ticket 147 - Internal Password Policy usage very inefficient Ticket 517 - crash in DNA if no dnaMagicRegen is specified Ticket 507 - use mutex for FrontendConfig lock instead of rwlock Ticket 394 - modify-delete userpassword Ticket 337 - improve CLEANRUV functionality Coverity Fixes Ticket 20 - Allow automember to work on entries that have already been added Ticket 393 - Change in winSyncInterval does not take immediate effect Ticket 216 - disable replication agreements Ticket 395 - RFE: 389-ds shouldn't advertise in the rootDSE that we can handle a sasl mech if we really can't Ticket 527 - ns-slapd segfaults if it cannot rename the logs Ticket 509 - lock-free access to be->be_suffixlock Merge branch 'ticket509' Ticket 456 - improve entry cache sizing Ticket 509 - lock-free access to be->be_suffixlock Ticket 511 - allow turning off vattr lookup in search entry return Ticket 541 - RootDN Access Control plugin is missing after upgrade Ticket 541 - need to set plugin as off in ldif template Ticket 534 - RFE: Add SASL mappings fallback Ticket 534 - sasl mapping fallback Ticket 532 - RUV is not getting updated for both Master and consumer Ticket 534 - Add SASL mappings fallback Ticket 534 - SASL Mapping Fallback Ticket 539 - logconv.pl should handle microsecond timing Ticket 471 - logconv.pl tool removes the access logs contents if "-M" is not correctly used Ticket 552 - Adding rootdn-open-time without rootdn-close-time to RootDN Acess Control results in inconsistent configuration Ticket 551 - Multivalued rootdn-days-allowed in RootDN Access Control plugin always results in access control violation TIcket 419 - logconv.pl - improve memory management Ticket 419 - logconv.pl - improve memory management Ticket 558 - Replication - make timeout for protocol shutdown configurable Ticket 417 - RFE - forcing passwordmustchange attribute by non-cn=directory manager Ticket 562 - Crash when deleting suffix Merge branch 'master' of ssh://git.fedorahosted.org/git/389/ds Ticket 532 - RUV is not getting updated for both Master and consumer Ticket 433 - multiple bugs in start-dirsrv, stop-dirsrv, restart-dirsrv scripts Ticket 433 - multiple bugs in start-dirsrv, stop-dirsrv, restart-dirsrv scripts Ticket 570 - DS returns error 20 when replacing values of a multi-valued attribute (only when replication is enabled) Ticket 528 - RFE - get rid of instance specific scripts Coverity Fixes Ticket 528 - RFE - get rid of instance specific scripts (part 2) Ticket 332 - Command line perl scripts should attempt most secure connection type first Ticket 332 - Fix usage in scripts Ticket 332 - minor quoting issue in a few scripts. Ticket 588 - Create MAN pages for command line scripts Ticket 332 - wrong argument count in ldif2db Ticket 571 - server does not accept 0 length LDAP Control sequence Ticket 583 - dirsrv fails to start on reboot due to /var/run/dirsrv permissions Ticket 574 - problems with dbcachesize disk space calculation Ticket 623 - cleanAllRUV task fails to cleanup config upon completion Ticket 574 - problems with dbcachesize disk space calculation Ticket 458 - RFE - Make it possible for privileges to be provided to an admin user Ticket 611 - logconv.pl missing stats for StartTLS, LDAPI, and AUTOBIND Ticket 622 - DS logging errors "libdb: BDB0171 seek: 2147483648: (262144 * 8192) + 0: No such file or directory Ticket 525 - Introducing a user visible configuration variable for controlling replication retry time Ticket 632 - 389-ds-base cannot handle Kerberos tickets with PAC Ticket 587 - Replication error messages in the DS error logs Ticket 458 - Need to properly check if the password admin dn is set Ticket 628 - crash in aci evaluation Ticket 620 - Better logging of error messages for 389-ds-base Ticket 534 - RFE: Add SASL mappings fallback Ticket 550 - posix winsync will not create memberuid values if group entry become posix group in the same sync interval Ticket 631 - Replication: "Incremental update started" status message without consumer initialized Ticket 47311 - segfault in db2ldif(trigger by a cleanallruv task) Ticket 47304 - reinitialization of a master with a disabled agreement hangs Ticket 47315 - filter option in fixup-memberof requires more clarification Ticket 77 - [RFE] Add ACI support for ldapi Ticket 47317 - should set LDAP_OPT_X_SASL_NOCANON to LDAP_OPT_ON by default Ticket 205 - Fix compiler warning Ticket 153 - use openldap's schema parser Ticket 47299 - fix config file and server id processing Ticket 580 - Wrong error code return when using EXTERNAL SASL and no client certificate Fix coverity issues Ticket 47317 - should set LDAP_OPT_X_SASL_NOCANON to LDAP_OPT_ON by default - revision Ticket 47355 - dse.ldif doesn't replicate update to nsslapd-sasl-mapping-fallback Ticket 511 - Revision - allow turning off vattr lookup in search entry return Ticket 47337 - mep_pre_op: Unable to fetch origin entry Ticket 283 - Expose slapi_eq_* API Ticket 47340 - Deleting a separator ',' in 7-bit check plugin arguments makes the Ticket 47326 - idl switch does not work Merge branch 'ticket47326' Ticket 589 - RFE - Support RFC 4527 Read Entry Controls Ticket 47372 - make old-idl tunable Coverity Fixes (part 1) Coverity Fixes (Part 2) Coverity Fixes (Part 3) Coverity Fixes (Part 4) Coverity Fixes (Part 5) Ticket 47385 - DS not shutting down when disk monitoring threshold is reached Fri Jun 7 10:41:00 2013 -0400 Ticket 47383 - connections attribute in cn=snmp,cn=monitor is counted twice Ticket 47376 - DESC should not be empty as per RFC 2252 (ldapv3) Ticket 47379 - DNA plugin failed to fetch replication agreement Coverity (Part 7) + Jenkins fix Ticket 47389 - Non-directory manager can change the individual userPassword's storage scheme Ticket 47329 - Improve slapi_back_transaction_begin() return code when transactions are not available Coverity Fixes Ticket 47381 - nsslapd-db-transaction-batch-val turns to -1 Ticket 47385 - Disk Monitoring is not triggered as expected. Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold Ticket 47416 - SASL encrypted packet length exceeds maximum allowed limit Ticket 47421 - memory leaks in set_krb5_creds Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold Ticket 47441 - Disk Monitoring not checking filesystem with logs Ticket 47382 - Add a warning message when a connection hits the max number of threads Ticket 47449 - deadlock after adding and deleting entries Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold Ticket 47450 - Fix compiler formatting warning errors for 32/64 bit arch Ticket 47447 - logconv.pl man page missing -m,-M,-B,-D Ticket 47323 - resurrected entry is not correctly indexed Ticket 47440 - Fix compilation warnings and header files Ticket 47440 - Fix runtime errors caused by last patch. Ticket 47411 - Replace substring search with plain search in referint plugin Ticket 47425 - should only call windows_update_done if repl agmt type is windows Ticket 47426 - move compute_idletimeout out of handle_pr_read_ready Ticket47426 - Coverity issue with last commit(move compute_idletimeout out of handle_pr_read_ready) Ticket 47473 - setup-ds.pl doesn't lookup the "root" group correctly Ticket 47461 - logconv.pl - Use of comma-less variable list is deprecated Ticket 47384 - Plugin path validation returntext not set correctly Ticket 47394 - remove-ds.pl should remove /var/lock/dirsrv Ticket 47371 - Some updates of "passwordgraceusertime" are useless when updating "userpassword" Ticket 47306 - execute index_add_mods only for indexed attributes Ticket 47500 - start-dirsrv/restart-dirsrv/stop-disrv do not register with systemd correctly Ticket 411 - [RFE] mods optimizer Ticket 47507 - automember rebuild task not working as expected Ticket 47512 - backend txn plugin fixup tasks should be done in a txn Coverity fix - 11952 Ticket 47401 - report unindexed internal searches Ticket 47520 - Fix various issues with logconv.pl Ticket 47509 - CLEANALLRUV doesnt run across all replicas Ticket 47509 - Cleanallruv jenkins error Ticket 47513 - tmpfiles.d references /var/lock when they should reference /run/lock Ticket 47528 - 389-ds-base built with mozldap can crash from invalid free Ticket 47510 - 389-ds-base does not compile against MozLDAP libraries Ticket 47532 - 1.3.1 with mozldap crashes in new operation work_q code Ticket 47510 - Repl Sync does not compile against MozLDAP libraries Ticket 47510 - remove unnecessary typedef Ticket 47513 - Refine the check for @localrundir@ Ticket 47513 - Set localrundir outside of the "with-fhs" block Ticket 47543 - Mozldap - fix compiler warnings Ticket 47531 - Mozldap - need to rewrite sasl_io_recv Ticket 47510 - Additional mozldap failures with Repl Sync Ticket 47522 - Password adminstrators should be able to voilate password policy Ticket 47491 - Update systemd service file to use PartOf directive Ticket 47517 - memory leak in range searches and other various leaks Ticket 47535 - Logconv.pl - RFE - add on option for a minimum etime for unindexed search stats Ticket 47535 - update man page Ticket 47499 - if nsslapd-cachememsize set to the number larger than Ticket 47436 - 389-ds-base - shebang with /usr/bin/env Coverity Issue 12033 Ticket 47538 - RFE: repl-monitor.pl plain text output, cmdline config options Ticket 47519 - memory leaks in access control Ticket 47368 - IPA server dirsrv RUV entry data excluded from replication Ticket 47368 - Fix Jenkins errors Ticket 47368 - Fix coverity issues Ticket 47582 - agmt_count in Replica could become (PRUint64)-1 Ticket 47541 - Replication of the schema may overwrite consumer 'attributetypes' even Ticket 47541 - Fix Jenkins errors Ticket 47597 - Convert retro changelog plug-in to betxn Ticket 47598 - Convert ldbm_back_seq code to be transaction aware Ticket 47529 - Automember plug-in should treat MODRDN operations as ADD operations Ticket 47599 - Reduce lock scope in retro changelog plug-in Revert "Ticket 47599 - Reduce lock scope in retro changelog plug-in" Ticket 47599 - Reduce lock scope in retro changelog plug-in Ticket 47525 - Allow memberOf to use an alternate config area Ticket 47525 - Fix memory leak Ticket 47599 - fix memory leak Ticket 47593 - Update plugin API for OTP plugin Ticket 47457 - default nsslapd-sasl-max-buffer-size should be 2MB Ticket 47592 - automember plugin task memory leaks Ticket 47525 - Need to add locking around config area access Ticket 47613 - Impossible to configure nsslapd-allowed-sasl-mechanisms Ticket 47614 - Possible to specify invalid SASL mechanism in nsslapd-allowed-sasl-mechanisms Ticket 47603 - Allow RI plugin to use alternate config area Ticket 47587 - hard coded limit of 64 masters in agreement and changelog code Ticket 47368 - fix memory leaks Ticket 47620 - 389-ds rejects nsds5ReplicaProtocolTimeout attribute Ticket 47622 - Automember betxnpreoperation - transaction not aborted when group entry does not exist Ticket 47627 - changelog iteration should ignore cleaned rids when getting the minCSN Ticket 47601 - Plugin library path validation prevents intentional loading of out-of-tree modules Ticket 47617 - allow configuring changelog trim interval Ticket 47613 - Issues setting allowed mechanisms Ticket 47603 - should not modify pre op entry during config validation Ticket 47620 - Config value validation improvement Ticket 47620 - Fix logically dead code. Ticket 47627 - Fix replication logging Ticket 47620 - Fix dereferenced NULL pointer in agmtlist_modify_callback() Ticket 47620 - Fix missing left bracket Ticket 47653 - Need a way to allow users to create entries assigned to themselves Ticket 47654 - Cleanup old memory leaks reported from valgrind Ticket 47654 - fix double free Ticket 408 - Fix crash when disabling/enabling the setting Ticket 47620 - Unable to delete protocol timeout attribute Ticket 47641 - 7-bit check plugin not checking MODRDN operation Ticket 47638 - Overflow in nsslapd-disk-monitoring-threshold on 32bit platform Ticket 47618 - Enable normalized DN cache by default Ticket 47437 - Some attributes in cn=config should not be multivalued Ticket 47615 - Failed to compile the DS 389 1.3.2.3 version against Berkeley DB 4.2 version Ticket 47552 - logconv: unindexed report should list bind dn Ticket 525 - Replication retry time attributes cannot be added Ticket 47453 - configure SASL/GSSAPI/Kerberos without server restart Ticket 47727 - Updating nsds5ReplicaHost attribute in a replication agreement fails with error 53 Ticket 47637 - rsa_null_sha should not be enabled by default Ticket 47729 - Directory Server crashes if shutdown during a replication initialization Ticket 47700 - Fix compiler warnings Ticket 47722 - rsearch filter error on any search filter Ticket47722 - Fixed filter not correctly identified Ticket 47740 - Coverity Fixes (Mark - part 1) Ticket 47740 - Fix sync plugin resource leaks Ticket 47640 - Fix coverity issues - part 3 Ticket 47740 - Fix coverity erorrs - Part 4 Ticket 47740 - Fix coverity issues - Part 5 Ticket 47740 - Fix coverity issues: null deferences - Part 6 Ticket 47740 - Crash caused by changes to certmap.c Revert "Ticket 47700 - Fix compiler warnings" Ticket 47743 - Memory leak with proxy auth control Ticket 47451 - add/enable/disable/remove plugins without server restart Ticket 47740 - Fix coverity issues(part 7) Ticket 47756 - Improve import logging and abort processing Ticket 47759 - Crash in replication when server is under write load Ticket 47655 - Improve replication total update logging Ticket 47766 - Tombstone purging can crash the server if the backend is stopped/disabled Ticket 47767 - Nested tombstones become orphaned after purge Ticket 47771 - Performing deletes during tombstone purging results in operation errors Ticket 47782 - Parent numbordinate count can be incorrectly updated if an error occurs Ticket 47779 - Part of DNA shared configuration is deleted after server restart Ticket 47771 - Move parentsdn initialization to avoid crash Ticket 477779 - Need to lock server list when removing list Ticket 47792 - code cleanup Ticket 47792 - database plugins need a way to call betxn Ticket 47793 - Server crashes if uniqueMember is invalid syntax and memberOf Ticket 47756 - fix coverity issues Ticket 47772 - fix coverity issue Ticket 47451 - Remove old code from linked attr plugin Ticket 47670 - Aci warnings in error log Ticket 47636 - errorlog-level 16384 is listed as 0 in cn=config Ticket 47713 - Logconv.pl with an empty access log gives lots of errors Ticket 47446 - logconv.pl memory continually grows Ticket 47791 - Negative value of nsSaslMapPriority is not Ticket 47644 - Managed Entry Plugin - transaction not aborted upon failure to create managed entry Ticket 47466 - Fix coverity issue Ticket 47813 - managed entry plugin fails to update member Ticket 47602 - txn commit being performed too early Ticket 47815 - Add operations rejected by betxn plugins remain in cache Ticket 47810 - investigate betxn plugins to ensure they Ticket 47817 - The error result text message should be obtained just prior to sending result Ticket 47827 - online import crashes server if using verbose error logging Ticket 47815 - add lib389 test Ticket 47827 - Fix coverity issue 12695 Ticket 47779 - Potential deadlock after startup if a dna configuration change is made Ticket 47781 - Server deadlock if online import started while Ticket 47781 - Add CI test Ticket 47781 - CI test - use predefined property name variables Ticket 47654 - Fix regression (deadlock/crash) Ticket 47858 - Internal searches using OP_FLAG_REVERSE_CANDIDATE_ORDER can crash the server Ticket 47819 - Improve tombstone purging performance Ticket 47855 - clear tmp directory at the start of each test Ticket 47855 - Fix previous commit Ticket 47853 - client hangs in add if memberof fails Ticket 437853 - Missing newline at end of the error log messages in memberof Ticket 47710 - Missing warning for invalid replica backoff configuration Ticket 47790 - Integer config attributes accept invalid Ticket 47812 - logconv.pl missing -U option from usage Ticket 47861 - Certain schema files are not replaced during upgrade Ticket 47819 - Fix memory leak Ticket 47862 - repl-monitor fails to convert "*" to default values Ticket 47893 - should use Sys::Hostname instead Net::Domain Ticket 47900 - Adding an entry with an invalid password as rootDN is incorrectly rejected Ticket 47900 - Server fails to start if password admin is set Ticket 47892 - Fix remaining compiler warnings Ticket 47937 - Crash in entry_add_present_values_wsi_multi_valued Ticket 47953 - Should not check aci syntax when deleting an aci Ticket 47953 - testcase for removing invalid aci Ticket 47451 - Need to unregister tasks created by plugins Ticket 47952 - PasswordAdminDN attribute is not properly returned to client Ticket 47958 - Memory leak in password admin if the admin entry does not exist Ticket 47950 - Bind DN tracking unable to write to internalModifiersName without special permissions Ticket 47963 - RFE - memberOf - add option to skip nested Ticket 47810 - RI plugin does not return result code if update fails Ticket 47963 - skip nested groups breaks memberof fixup task Ticket 47451 - Running a plugin task can crash the server Ticket 47967 - cos_cache_build_definition_list does not stop during server shutdown Ticket 47969 - COS memory leak when rebuilding the cache Ticket 47970 - Account lockout attributes incorrectly updated after failed SASL Bind Ticket 47970 - add lib389 testcase Ticket 47525 - Crash if setting invalid plugin config area for MemberOf Plugin Ticket 47949 - logconv.pl -- support parsing/showing/reporting different protocol versions Ticket 47969 - Fix coverity issue Ticket 47965 - Fix coverity issues (2014/11/24) Ticket 47636 - Error log levels not displayed correctly Ticket 47722 - Using the filter file does not work Ticket 47750 - Need to refresh cache entry after called betxn postop plugins Ticket 47451 - Dynamic Plugin - various fixes Ticket 47451 - Fix jenkins errors Ticket 47451 - Add Dynamic Plugin CI Suite Ticket 47750 - During delete operation do not refresh cache entry if it is a tombstone Ticket 47451 - Dynamic plugins - fixed thread synchronization Ticket 47980 - Nested COS definitions can be incorrectly Ticket 47981 - COS cache doesn't properly mark vattr cache as Ticket 47973 - During schema reload sometimes the search returns no results Ticket 47617 - replication changelog trimming setting validation Ticket 47807 - SLAPI_REQUESTOR_ISROOT not set for extended operation plugins Ticket 47462 - Stop using DES in the reversible password Ticket 47738 - use PL_strcasestr instead of strcasestr Ticket 47999 - lib389 individual tests not running correctly Ticket 47999 - address several race conditions in tests Ticket 48017 - add script to generate lib389 CI test script Ticket 48019 - Remove refs to constants.py and backup/restore from lib389 tests Ticket 48023 - replace old replication check with lib389 function Ticket 47963 - memberof skip nested groups breaks the plugin Ticket 47451 - dynamic plugins - fix crash caused by invalid Ticket 48027 - revise the rootdn plugin configuration validation Ticket 48003 - build "suite" framework Ticket 48003 - add template scripts Bug 1199675 - CVE-2014-8112 CVE-2014-8105 389-ds-base: various flaws [fedora-all] Ticket 48132 - modrdn crashes server (invalid read/writes) Ticket 48151 - Improve CleanAllRUV logging Ticket 48154 - abort cleanAllRUV tasks should not certify-all by default Ticket 48151 - fix coverity issues Ticket 48177 - dynamic plugins should not return an error when modifying a critical plugin Ticket 48035 - nunc-stans - Revise shutdown sequence Ticket 48036 - ns_set_shutdown should call ns_job_done Ticket 48040 - preserve the FD when disabling a listener Ticket 48037 - ns_thrpool_new should take a config struct rather than many parameters Ticket 48038 - logging should be pluggable Ticket 48039 - nunc-stans malloc should be pluggable Ticket 48043 - use nunc-stans config initializer Ticket 48110 - Free all the nunc-stans signal jobs when shutdown is detected Ticket 48103 - update DS for new nunc-stans header file Ticket 48158 - Remove cleanAllRUV task limit of 4 Ticket 48026 - fix invalid write for friendly attribute names Ticket 48026 - Fix memory leak in uniqueness plugin Ticket 48158 - cleanAllRUV task limit not being enforced correctly Ticket 47828 - fix testcase "import" issue Ticket 47753 - Fix testecase Ticket 47913 - remove-ds.pl should not remove /var/lib/dirsrv Ticket 47640 - Linked attributes transaction not aborted when Ticket 48170 - Parse nsIndexType correctly Ticket 47910 - allow logconv.pl -S/-E switches to work even when timestamps not present in access log Ticket 47921 - indirect cos does not reflect changes in the cos attribute Ticket 48197 - error texts from preop plugins not sent to client Ticket 47998 - cleanup WINDOWS ifdef's Ticket 47998 - remove "windows" files Ticket 47998 - remove remaining obsolete OS code/files Ticket 47878 - Improve setup-ds update logging Ticket 48119 - setup-ds.pl does not log invalid --file path errors the same way as other errors. Ticket 48208 - CleanAllRUV should completely purge changelog Ticket 48204 - Add Python 3 compatibility to ds-logpipe Ticket 48013 - Inconsistent behaviour of DS when LDAP Sync is used with an invalid cookie Ticket 48217 - cleanAllRUV hangs shutdown if not all of the Ticket 48119 - Silent install needs to properly exit when INF file is missing Ticket 47910 - logconv.pl - validate start and end time args Ticket 48179 - Starting a replica agreement can lead to Ticket 47910 - logconv.pl - check that the end time is greater than the start time Ticket 48206 - Crash during retro changelog trimming Ticket 47810 - memberOf plugin not properly rejecting updates Ticket 48215 - verify_db.pl doesn't verify DB specified by -a option Ticket 48215 - update dbverify usage Ticket 48215 - update dbverify usage in main.c Ticket 47931 - memberOf & retrocl deadlocks Ticket 47931 - Fix coverity issues Ticket 47686 - removing chaining database links trigger valgrind read errors Ticket 48242 - Improve dirsrvtests/create_test.py script Ticket 48248 - Use LDIF building function in basic test suite Ticket 48233 - Server crashes in ACL_LasFindFlush during Ticket 47831 - remove debug logging from retro cl Ticket 47931 - lib389 test - memberof and retrocl deadlock Ticket 48204 - Convert all python scripts to support python3 Ticket 48267 - Add config setting to MO plugin to add objectclass Ticket 48276 - initialize free_flags in reslimit_update_from_entry() Ticket 48273 - Update lib389 tests for new valgrind functions Ticket 48217 - cleanallruv - fix regression with server shutdown Ticket 48266 - Online init crashes consumer Ticket 48284 - free entry when internal add fails Ticket 48266 - do not free repl keep alive entry on error Ticket 48204 - update lib389 test scripts for python 3 Ticket 48312 - Crash when doing modrdn on managed entry Ticket 48311 - nunc-stans: Attempt to release connection that Ticket 48325 - Replica promotion leaves RUV out of order Ticket 48325 - Add lib389 test script Ticket 48369 - RFE - Add config setting to always send the Ticket 48370 - The 'eq' index does not get updated properly Ticket 48377 - Bundle jemalloc with Directory Server Ticket 48388 - db2ldif -r segfaults from time to time Ticket 48277 - Disable jemalloc by default in rpm.mk Ticket 48376 - Create a 389-ds-base-tests RPM package Ticket 48412 - worker threads do not detect abnormally closed Ticket 47788 - Supplier can skip a failing update, although Ticket 48218 - cleanAllRUV - modify the existing "force" option to bypass the "replica online" checks Ticket 48446 - logconv.pl displays negative operation speeds Ticket 48269 - RFE: need an easy way to detect locked Ticket 47788 - Only check postop result if its a replication operation Ticket 47888 - DES to AES password conversion fails if a backend is empty Ticket 47888 - Add CI test Ticket 48813 - password history is not updated when an admin resets the password Ticket 48269 - ns-accountstatus status message improvement Ticket 48815 - ns-accountstatus.sh does handle DN's with single quotes Ticket 48824 - Cleanup rpm.mk and 389 specfile Ticket 48497 - uncomment pytest from CI test CI Tests - uncomment "#import pytest" Ticket 48220 - The "repl-monitor" web page does not display "year" in date. Ticket 48795 - Make various improvements to create_test.py Ticket 48862 - At startup DES to AES password conversion causes timeout in start script Ticket 48815 - ns-accountstatus.pl - fix DN normalization Ticket 48636 - Improve replication convergence Ticket 48636 - Fix config validation check Ticket 48346 - log too verbose when re-acquiring expired Ticket 48346 - ldaputil code cleanup Ticket 47538 - repl-monitor.pl not displaying correct color code for lag time Ticket 48637 - DN cache is not always updated when ADD Ticket 48898 - Crash during shutdown if nunc-stans is enabled Ticket 48900 - Add connection perf stats to logconv.pl Ticket 47538 - Fix repl-monitor color and lag times Ticket 47538 - repl-monitor.pl legend not properly sorted Ticket 48743 - If a cipher is disabled do not attempt to look it up Ticket 48767 - flow control in replication also blocks receiving results Ticket 48924 - Fixup tombstone task needs to set proper flag when updating tombstones Ticket 48922 - Fix crash when deleting backend while import is running Ticket 48930 - Paged result search can hang the server Ticket 48832 - Fix lib389 CI ticket/suite test failures Ticket 48935 - Update dirsrv.systemd file Ticket 48832 - CI tests - convert all the tests to use Ticket 48832 - CI Tests - make tests more portable Ticket 48921 - Adding replication and reliability tests Martin Basti (1): Add 'void' to function definition to avoid compiler warnings Matthew Via (1): Ticket #47428 - Memory leak in 389-ds-base 1.2.11.15 Nathan Kinder (212): Bug 549554 - Trim single-valued attributes before sending to AD Improve search for pcre header file Bug 434735 - Allow SASL ANONYMOUS mech to work Bug 570912 - Avoid selinux context conflict with httpd Allow instance name to be parsed from start-slapd Add managed entries plug-in Bug 572355 - Label instance files and ports during upgrade. Bug 578863 - Password modify extop needs to send referrals on replicas Bug 584156 - Remove ldapi socket file during upgrade Fix rsearch usage of name files for random filters Bug 584497 - Allow DNA plugin to set same value on multiple attributes Add replication session hooks Correct function prototype for repl session hook Bug 592389 - Set anonymous resource limits properly Bug 601433 - Add man pages for start-dirsrv and related commands Bug 604263 - Fix memory leak when password change is rejected Bug 612242 - membership change on DS does not show on AD Bug 613833 - Allow dirsrv_t to bind to rpc ports Bug 594745 - Get rid of dirsrv_lib_t label Bug 620927 - Allow multiple membership attributes in memberof plugin Bug 612264 - ACI issue with (targetattr='userPassword') Bug 630098 - fix coverity Defect Type: Code maintainability issues Bug 630098 - fix coverity Defect Type: Code maintainability issues Bug 630093 - (cov#15511) Don't use unintialized search_results in refint plugin Bug 630093 - (cov#15518) Need to intialize fd in ldbm2ldif code Bug 630096 - (cov#11778) check return value of ldap_parse_result Bug 630096 - (cov#15446) check return value of ber_scanf() Bug 630096 - (cov#15449,15450) Check return value of stat() Bug 630096 - (cov#15448) Check return value of cache_replace() Bug 630096 - (cov#15447) - Check return value of idl_append_extend() Bug 630090 - (cov#11974) Remove unused ACL functions Bug 630090 - (cov#15445) Fix illegal free in archive code Bug 630094 - (cov#11818) Fix unreachable return in snmp subagent Bug 630094 - (cov#15451) Get rid of unreachable free statements Bug 630094 - (cov#15452) Remove NULL checking for op_string Bug 630094 - (cov#15453) Eliminate NULL check for local_newentry Bug 630094 - (cov#15454) Fix deadcode issue in mapping tree code Bug 630094 - (cov#15455) Remove deadcode in attr_index_config() Bug 630094 - (cov#15456) Remove NULL check for srdn in import code Bug 630094 - (cov#15457) Remove deadcode in import code Bug 630094 - (cov#15458) Fix deadcode issue in moddn code Bug 630094 - (cov#15459) Remove NULL check for srdn in ldif2ldbm code Bug 630094 - (cov#15520) Fix unreachable code issue if perfctrs code Bug 630094 - (cov#15581) Add missing breaks in agt_mopen_stats() Bug 690090 - (cov#11974) Remove additional unused ACL functions Bug 630091 - (cov#15512) Fix usage of uninitialized bervals Bug 630091 - (cov#15513) Fix usage of uninitialized bervals Bug 630091 - (cov#15514) Initialize DBT in entryrdn_get_parent() Bug 630091 - (cov#15515) Use of uninitialized array in index config code Bug 630091 - (cov#15516,15517) Initialize pointers before attempting to free Bug 630091 - (cov#15519) Initialize bervals in search_easter_egg() Bug 630091 - (cov#15582) Free of uninitialized pointer in attr_index_config() Bug 630097 - (cov#11933) Fix NULL dereference in schema code Bug 630097 - (cov#11938) NULL dereference in mmldif Bug 630097 - (cov#11946) NULL dereference in ResHashCreate() Bug 630097 - (cov#11964) Remove dead code from libaccess Bug 630097 - (cov#12143) NULL dereference in cos cache code Bug 630097 - (cov#12148) NULL dereference in ruvInit() Bug 630097 - (cov#12182,12183) NULL dereference in import code Bug 630097 - (cov#15460) NULL deference in ACL URL code Bug 630097 - (cov#15461) Remove unnecessary NULL check in DNA Bug 630097 - (cov#15462) NULL dereference in mep_modrdn_post_op() Bug 630097 - (cov#15463) Remove NULL check in referint plugin Bug 630097 - (cov#15464) NULL dereference in repl code Bug 630097 - (cov#15465) Null dereference in USN code Bug 630097 - (cov#15473) NULL dereference in ResHashCreate() Bug 630097 - (cov#15505) NULL dereference in memberOf code Bug 630097 - (cov#15506) NULL dereference in dblayer code Bug 630097 - (cov#15507,15508) NULL dereference in entryrdn code Bug 630097 - (cov#15509) NULL dereference in idsktune Bug 630097 - (cov#11938) NULL dereference in mmldif Bug 630097 - (cov#15477) NULL dereference in ACL plug-in code Bug 630091 - (cov#12209) Use of uninitialized pointer in libaccess Bug 630092 - (cov#12116) Resource leak in ldclt code Bug 630092 - (cov#12105) Resource leak in pwdscheme config code Bug 630092 - (cov#12068) Resource leak in certmap code Bug 630091 - (cov#11973) Array overrun in libaccess Bug 522055 - Scope check for managed attribute fails Bug 625335 - Self-write aci has permission to invalid attribute Bug 631993 - Log authzid when proxy auth control is used Cov #16300 - Unused variable in account policy plugin Bug 544321 - remove-ds.pl should not throw error unlabelling port Bug 555955 - Allow CoS values to be merged Bug 643937 - Initialize replication version flags Bug 305131 - Allow empty modify operation Bug 619633 - Make attribute uniqueness obey requiredObjectClass Bug 619623 - attr-unique-plugin ignores requiredObjectClass on modrdn operations Bug 189985 - Improve attribute uniqueness error message Bug 647932 - multiple memberOf configuration adding memberOf where there is no member Bug 521088 - DNA should check ACLs before getting a value from the range Bug 635009 - Add one-way AD sync capability Bump VERSION.sh to 1.2.8.a1 Bug 648949 - Move selinux policy into base OS Bug 648949 - Update configure Roll back VERSION.sh for 1.2.7 release Bug 625950 - hash nsslapd-rootpw changes in audit log Bug 656392 - Remove calls to ber_err_print() Bug 656515 - Allow Name and Optional UID syntax for grouping attributes Bug 197886 - Avoid overflow of UUID generator Bug 658312 - Allow mapped attribute types to be quoted Bug 197886 - Initialize return value for UUID generation code Bug 658309 - Process escaped characters in managed entry mappings Bug 659456 - Incorrect usage of ber_printf() in winsync code Bug 641944 - Don't normalize non-DN RDN values Bug 658312 - Invalid free in Managed Entry plug-in Bug 661792 - Valid managed entry config rejected Bug 588791 - Allow anonymous rootDSE access only Bug 606439 - Creating server instance with LDAPI takes too long Bug 632670 - Chain-on-update logs managed-entries-plugin errors Bug 621008 - parsing purge RUV from changelog at startup fails Bug 663191 - Don't use $USER in DSCreate.pm Bug 663597 - Memory leaks in normalization code Bug 659131 - Incorrect RDN values added with multi-valued RDN Bug 661102 - Rename of managed entries not handled correctly Bug 193297 - Call pre-bind plug-ins for all SASL bind steps Bug 201652 - LDAPv2 bind with expired password doesn't unbind correctly Bug 470576 - Migration could do addition checks before commiting actions Bug 481195 - Missing op type in log when password change required Bug 509897 - Validate dnaScope to ensure it is a legal DN Bug 505722 - Allow ntGroup to have mail attribute present Bug 543633 - replication problems if supplier is killed under update load Bug 671033 - range sharing between server breaks with SASL/GSSAPI auth Bug 527912 - setup-ds.pl appears to hang when DNS is unreachable Bug 252249 - Add pkg-config file for plug-in developers Bug 670616 - Allow SSF to be set for local (ldapi) connections Bug 668862 - init scripts return wrong error code Bug 674430 - Improve error messages for attribute uniqueness Bug 675853 - dirsrv crash segfault in need_new_pw() Bug 678646 - Ignore tombstone operations in managed entry plug-in Bug 671199 - Don't allow other to write to rundir Bug 672468 - Don't use empty path elements in LD_LIBRARY_PATH Bug 674852 - crash in ldap-agent when using OpenLDAP Bug 681345 - setup-ds.pl should set SuiteSpotGroup automatically Bug 680558 - Winsync plugin fails to restrain itself to the configured subtree Bug 504803 - Allow maxlogsize to be set if logmaxdiskspace is -1 Bug 687974 - (cov#10715) Fix Coverity uninitialized variables issues Bug 688341 - (cov#10709) Fix Coverity code maintainability issues Bug 688341 - (cov#10708) Fix Coverity code maintainability issues Bug 688341 - (cov#10706,10707) Fix Coverity code maintainability issues Bug 688341 - (cov#10704,10705) Fix Coverity code maintainability issues Bug 688341 - (cov#10703) Fix Coverity code maintainability issues Bug 688341 - (cov#10702) Fix Coverity code maintainability issues Bug 688341 - (cov#10709) Fix Coverity code maintainability issues Bug 689537 - (cov#10699) Fix Coverity NULL pointer dereferences Bug 689537 - (cov#10610) Fix Coverity NULL pointer dereferences Bug 689537 - (cov#10608) Fix Coverity NULL pointer dereferences Bug 689952 - (cov#10581) Incorrect bit check in replication connection code Bug 690526 - (cov#10734) Double free in dse_add() Bug 690649 - (cov#10731) Use of free'd pointer in indexing code Bug 690882 - (cov#10571) Incorrect sizeof use in uuid code Bug 690882 - (cov#10636,10637) Useless comparison in attrcrypt Bug 690882 - (cov#10703) Incorrect sizeof use in vattr code Bug 690882 - (cov#10572,10710) Incorrect sizeof use in uuid code Bug 691574 - (cov#10579) Check return value of ber_scanf() in sort code Bug 691574 - (cov#10577) Check return types when adding RDN CSNs Bug 691574 - (cov#10573) check return value in GER code Bug 691574 - (cov#10575) Check return value of ldap_get_option Bug 691574 - (cov#10573) Fix syntax error Bug 693868 - Add managed entry config during in-place upgrade Add Auto Membership Plug-in Bug 698428 - Make auto membership use Slapi_DN for DN comparisons Bug 695779 - windows sync can lose old values when a new value is added Bug 700557 - Linked attrs callbacks access free'd pointers after close Bug 700557 - Leak at shutdown in DNA plug-in Bug 703304 - Auto membership alternate config area should override default area Bug 703304 - Auto membership alternate config area should override default area Bug 703530 - Allow Managed Entry config to be relocated Bug 697961 - memberOf needs to be triggered by internal operations Bug 710377 - Import with chain-on-update crashes ns-slapd Split automember regex rules into separate entries Bug 713209 - Update sudo schema Bug 691313 - Need TLS/SSL error messages in repl status and errors log Bug 723937 - Slapi_Counter API broken on 32-bit F15 Bug 725743 - Make memberOf use PRMonitor for it's operation lock Bug 729717 - Fatal error messages when syncing deletes from AD Bug 728510 - Run dirsync after sending updates to AD Bug 730387 - Add slapi_rwlock API and use POSIX rwlocks Bug 611438 - Add Account Usability Control support Bug 728592 - Allow ns-slapd to start with an invalid server cert Bug 732541 - Ignore error 32 when adding automember config Bug 722292 - Entries in DS are not updated properly when using WinSync API Bug 722292 - (cov#11030) Leak of mapped_sdn in winsync rename code Bug 735114 - renaming a managed entry does not update mepmanagedby Bug 739172 - Allow separate fractional attrs for incremental and total protocols Bug 743966 - Compiler warnings in account usability plugin Bug 744946 - (cov#11046) NULL dereference in IDL code Bug 752155 - Use restorecon after creating init script lock file Ticket 284 - Remove unnecessary SNMP MIB files ticket 304 - Fix kernel version checking in dsktune ticket 211 - Use of uninitialized variables in ldbm_back_modify() ticket 181 - Allow PAM passthru plug-in to have multiple config entries coverity 12563 Read from pointer after free (fix 2) Ticket 211 - Avoid preop range requests non-DNA operations Ticket #503 - Improve AD version in winsync log message Ticket 549 - DNA plugin no longer reports additional info when range is depleted Ticket 556 - Don't overwrite certmap.conf during upgrade Add make rpms build target Allow rpm builds to be run without configure Add git commit hash to developer rpm build names Add hardened build option and correct changelog dates Revert "Ticket #47431 - Duplicate values for the attribute nsslapd-pluginarg are not handled correctly" Ticket 449 - Allow macro aci keywords to be case-insensitive Ticket 47539 - Disabling DNA plug-in throws error 53 Ticket 47513 - tmpfiles.d references /var/lock when they should reference /run/lock Ticket 47565 - Content Sync update file needs extensibleObject Ticket 47569 - ACIs do not allow attribute subtypes in targetattr keyword Ticket 47569 - Fix build warnings Ticket 47588 - Compiler warnings building on F19 Ticket 47611 - Add script to build patched RPMs Ticket 47525 - Don't modify preop entry in memberOf config Ticket 47752 - Don't add unhashed password mod if we don't have an unhashed value Ticket 47753 - Add switch to disable pre-hashed password checking Noriko Hosoi (882): 544089 - Referential Integrity Plugin does not take into account the attribute 557224 - subtree rename breaks the referential integrity plug-in 247413 - Incorrect error on multiple identical value add 559016 - Attempting to rename suffix returns inappropriate errors 555577 - Syntax validation fails for "ou=NetscapeRoot" tree Undo - 555577 - Syntax validation fails for "ou=NetscapeRoot" tree 560827 - Admin Server templates: DistinguishName validation fails 548535 - memory leak in attrcrypt 563365 - Error handling problems in the backend functions 565664 - Incorrect parameter for CACHE_RETURN() 565987 - redhat-ds-base fails to build due to undefined struct 527848 - make sure db upgrade to 4.7 and later works correctly 539618 - Replication bulk import reports Invalid read/write 567370 - dncache: assertion failure in id2entry_delete 548115 - memory leak in schema reload 555970 - missing read lock in the combination of cos and nsview 539618 - Replication bulk import reports Invalid read/write 570667 - MMR: simultaneous total updates on the masters cause Merge branch '547503' Revert "Merge branch '547503'" Bug 554573 - ACIs use bind DN from bind req rather than cert mapped DN from sasl/external 199923 - subtree search fails to find items under a db 570107 - The import of LDIFs with base-64 encoded DNs fails, 572649 - DS8.2 crashes on RHEL 4 (corresponding to bob, ber_2 test case) 573060 - DN normalizer: ESC HEX HEX is not normalized ( 573896 - initializing subtree with invalid syntax crashes ns-slapd 515805 - Stop "initialize Database" crashes the server 548533 - memory leak in Repl_5_Inc_Protocol_new Fixing a syntax error Update to New DN Format 585905 - ACL with targattrfilters error crashes the server 574167 - An escaped space at the end of the RDN value is not 590931 - rhds81 import - hardcoded pages_limit for nsslapd-import-cache-autosize 591336 - Implementing upgrade DN format tool 593453 - Creating password policy with ns-newpolicy.pl on Replicated 593110 - backup-restore does not ALWAYS work 593899 - adding specific ACI causes very large mem allocate request 588867 - entryusn plugin fails on solaris 593899 - adding specific ACI causes very large mem allocate request 595893 - Base DN in SASL mapping is not normalized 511112 - Password history limited to 25 values 597375 - Deleting LDBM database causes backup/restore problem 574101 - MODRDN request never returns - possible deadlock 606920 - anonymous resource limit - nstimelimit - 605827 - In-place upgrade: upgrade dn format should not run in setup-ds-admin.pl 578296 - Attribute type entrydn needs to be added when subtree 609256 - Selinux: pwdhash fails if called via Admin Server CGI 609255 - fix coverity Defect Type: Memory - illegal accesses issues 609255 - fix coverity Defect Type: Memory - illegal accesses issues 609255 - fix coverity Defect Type: Memory - illegal accesses issues 609255 - fix coverity Defect Type: Memory - illegal accesses issues 609255 - fix coverity Defect Type: Memory - illegal accesses issues 609255 - fix coverity Defect Type: Memory - illegal accesses issues 609255 - fix coverity Defect Type: Memory - illegal accesses issues 609255 - fix coverity Defect Type: Memory - illegal accesses issues 609255 - fix coverity Defect Type: Memory - illegal accesses issues 609255 - fix coverity Defect Type: Memory - illegal accesses issues 609255 - fix coverity Defect Type: Memory - illegal accesses issues 609255 - fix coverity Defect Type: Memory - illegal accesses issues 609255 - fix coverity Defect Type: Memory - illegal accesses issues 609255 - fix coverity Defect Type: Memory - illegal accesses issues 609255 - fix coverity Defect Type: Memory - illegal accesses issues 609255 - fix coverity Defect Type: Memory - illegal accesses issues 616618 - 389 v1.2.5 accepts 2 identical entries with different DN formats 610281 - fix coverity Defect Type: Control flow issues 610281 - fix coverity Defect Type: Control flow issues 610281 - fix coverity Defect Type: Control flow issues 610281 - fix coverity Defect Type: Control flow issues 610281 - fix coverity Defect Type: Control flow issues 610281 - fix coverity Defect Type: Control flow issues 610281 - fix coverity Defect Type: Control flow issues 610281 - fix coverity Defect Type: Control flow issues 610281 - fix coverity Defect Type: Control flow issues 610281 - fix coverity Defect Type: Control flow issues 610281 - fix coverity Defect Type: Control flow issues 610281 - fix coverity Defect Type: Control flow issues 610281 - fix coverity Defect Type: Control flow issues 610281 - fix coverity Defect Type: Control flow issues 610281 - fix coverity Defect Type: Control flow issues 610281 - fix coverity Defect Type: Control flow issues 610281 - fix coverity Defect Type: Control flow issues 610281 - fix coverity Defect Type: Control flow issues 610281 - fix coverity Defect Type: Control flow issues 610281 - fix coverity Defect Type: Control flow issues 610281 - fix coverity Defect Type: Control flow issues 610281 - fix coverity Defect Type: Control flow issues 610281 - fix coverity Defect Type: Control flow issues 610281 - fix coverity Defect Type: Control flow issues 610281 - fix coverity Defect Type: Control flow issues 610281 - fix coverity Defect Type: Control flow issues 610281 - fix coverity Defect Type: Control flow issues 610281 - fix coverity Defect Type: Control flow issues 610281 - fix coverity Defect Type: Control flow issues 610281 - fix coverity Defect Type: Control flow issues 610281 - fix coverity Defect Type: Control flow issues 616608 - SIGBUS in RDN index reads on platforms with strict alignments 619595 - Upgrading sub suffix under non-normalized suffix disappears 513166 - Simple Paged result doesn't provide the server's estimate 621928 - Unable to enable replica (rdn problem?) on 1.2.6 rc6 Bug 194531 - db2bak is too noisy Bug 622628 - fix coverity Defect Type: Integer handling issues Bug 622628 - fix coverity Defect Type: Integer handling issues Bug 622628 - fix coverity Defect Type: Integer handling issues Bug 622903 - fix coverity Defect Type: Code maintainability issues Bug 622903 - fix coverity Defect Type: Code maintainability issues Bug 622903 - fix coverity Defect Type: Code maintainability issues Bug 622903 - fix coverity Defect Type: Code maintainability issues Bug 622903 - fix coverity Defect Type: Code maintainability issues Bug 622903 - fix coverity Defect Type: Code maintainability issues Bug 622903 - fix coverity Defect Type: Code maintainability issues Bug 622903 - fix coverity Defect Type: Code maintainability issues Bug 622903 - fix coverity Defect Type: Code maintainability issues Bug 622903 - fix coverity Defect Type: Code maintainability issues Bug 622903 - fix coverity Defect Type: Code maintainability issues Bug 622903 - fix coverity Defect Type: Code maintainability issues Bug 622903 - fix coverity Defect Type: Code maintainability issues Bug 622903 - fix coverity Defect Type: Code maintainability issues Bug 622903 - fix coverity Defect Type: Code maintainability issues Bug 623118 - Simplepaged results going in infinite loop Bug 614511 - fix coverity Defect Type: Null pointer dereferences issues 11846 - 11891 Bug 619122 - fix coverity Defect Type: Resource leaks issues CID 11975 - 12051 Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093 Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093 Bug 617630 - fix coverity Defect Type: Resource leaks issues CID 12052 - 12093 Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939 Bug 616500 - fix coverity Defect Type: Resource leaks issues CID 12094 - 12136 Bug 616500 - fix coverity Defect Type: Resource leaks issues CID 12094 - 12136 Bug 616500 - fix coverity Defect Type: Resource leaks issues CID 12094 - 12136 Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891 Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939 Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 Bug 616500 - fix coverity Defect Type: Resource leaks issues Bug 623507 - fix coverity Defect Type: Incorrect expression issues Bug 623507 - fix coverity Defect Type: Incorrect expression issues Bug 613056 - fix coverify Defect Type: Null pointer dereferences Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199 Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199 Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199 Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199 Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166 Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166 Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166 Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166 Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166 Removed redundant code in agmt_new_from_entry Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093 Bug 628300 - DN is not normalized in dn/entry cache when an entry is added, entrydn is not present in search results Bug 531642 - EntryUSN: RFE: a configuration option to make entryusn "global" Bug 627738 - The cn=monitor statistics entries for the dnentry cache do not change or change very rarely DN normalizer should check the invalid type Bug 627738 - The cn=monitor statistics entries for the dnentry cache Bug 629710 - escape_string does not check '\<HEX><HEX>' agmtlist_shutdown (repl5_agmtlist.c) had an illegal access defect. Bug 633168 - Share backend dbEnv with the replication changelog Bug 633168 - Share backend dbEnv with the replication changelog Bug 631862 - crash - delete entries not in cache + referint Bug 625014 - SubTree Renames: ModRDN operation fails and the server hangs if the entry is moved to "under" the same DN. Bug 558099 - Enhancement request: Log more information about the search result being a paged one Bug 635987 - Incorrect sub scope search result with Bug 606920 - anonymous resource limit- nstimelimit - Bug 635987 - Incorrect sub scope search result with ACL containing ldap:///self Bug 639289 - Adding a new CN entry with UpperCase UTF-8 Character Bug 640027 - Naming attribute with a special char sequence parsing bug Bug 640854 - changelog db: _cl5WriteOperation: failed to Bug 637852 - sasl_io_start_packet: failed - read only 3 bytes Bug 586966 - Sample update script has syntax errors Bug 586973 - Sample update ldif points to non-existent directory Bug 602456 - Allow to add any cn=config attributes; Bug 244229 - targetattr not verified against schema when setting an aci Bug 643532 - Incorrect DNs sometimes returned on searches Bug 592397 - Upgrade tool dn2rdn: it does not clean up Bug 645061 - Upgrade: 06inetorgperson.ldif and 05rfc4524.ldif Bug 629681 - Retro Changelog trimming does not behave as expected Bug 644608 - RHDS 8.1->8.2 upgrade fails to properly migrate ACIs Bug 644608 - RHDS 8.1->8.2 upgrade fails to properly migrate ACIs Bug 644608 - RHDS 8.1->8.2 upgrade fails to properly migrate ACIs Bug 638773 - permissions too loose on pid and lock files Bug 491733 - dbtest crashes Bug 329751 - "nested" filtered roles searches candidates more Bug 567282 - server can not abandon searchRequest of "simple paged results" Bug 572018 - Upgrading from 1.2.5 to 1.2.6.a2 deletes userRoot Bug 651571 - When attrcrypt is on, entrydn is stored in the backend db Bug 661918 - 389-ds MMR plugin's changelogdb path logic is incorrect Bug 182507 - clear-password mod from replica is discarded before changelogged Bug 602456 - Allow to add any cn=config attributes; Bug 489379 - passwordExpirationTime in entry being added Bug 663484 - Entry usn plugin fails to properly tag entries on initialization Bug 664563 - GER: ger for non-present entry is not correct Bug 653007 - db2ldif export of clear text passwords lacks storage scheme Bug 667488 - Cannot recreate numsubordinates index with db2index Bug 663752 - Cert renewal for attrcrypt and encchangelog Bug 615100 - log rotationinfo always recreated at startup, Bug 624442 - MMR: duplicate replica ID Bug 669205 - db2bak: backed up changelog should include RUVs Bug 616850 - ldapmodify failed to reject the replace operation Bug 627993 - Inconsistent storage of password expiry times Bug 627993 - Inconsistent storage of password expiry times dn2rdn should respect the DB version info Bug 646381 - Faulty password for nsmultiplexorcredentials does not give any error message in logs Bug 624547 - attrcrypt should query the given slot/token for Bug 668619 - slapd stops responding Bug 151705 - Need to update Console Cipher Preferences with new ciphers Bug 615052 - intrinsics and 64-bit atomics code fails to compile Bug 616213 - insufficient stack size for HP-UX on PA-RISC Bug 675265 - preventryusn gets added to entries on a failed delete Bug 604881 - admin server log files have incorrect permissions/ownerships Bug 676053 - export task followed by import task causes cache assertion Bug 676053 - export task followed by import task causes cache assertion Bug 676053 - export task followed by import task causes cache assertion Bug 450016 - RFE- Console display values in KB/MB/GB Cancelling commit aef19508c4f618285116d2068655183658f564d9 Bug 625424 - repl-monitor.pl doesn't work in hub node Bug 679978 - modifying attr value crashes the server, which is supposed to Bug 681015 - RFE: allow fine grained password policy duration attributes in days, hours, minutes, as well Bug 668909 - Can't modify replication agreement in some cases Bug 684996 - Exported tombstone cannot be imported correctly Bug 681015 - RFE: allow fine grained password policy duration attributes in days, hours, minutes, as well Bug 689866 - ns-newpwpolicy.pl needs to use the new DN format Bug 690955 - Mrclone fails due to the replica generation id mismatch Bug 696407 - If an entry with a mixed case RDN is turned to be Bug 697027 - 1 - minor memory leaks found by Valgrind + TET Bug 697027 - 2 - minor memory leaks found by Valgrind + TET Bug 697027 - 3 - minor memory leaks found by Valgrind + TET Bug 697027 - 4 - minor memory leaks found by Valgrind + TET Bug 697027 - 5 - minor memory leaks found by Valgrind + TET Bug 697027 - 6 - minor memory leaks found by Valgrind + TET Bug 697027 - 7 - minor memory leaks found by Valgrind + TET Bug 697027 - 8 - minor memory leaks found by Valgrind + TET Bug 697027 - 9 - minor memory leaks found by Valgrind + TET Bug 697027 - 10 - minor memory leaks found by Valgrind + TET Bug 697027 - 11 - minor memory leaks found by Valgrind + TET Bug 697027 - 12 - minor memory leaks found by Valgrind + TET Bug 697027 - 13 - minor memory leaks found by Valgrind + TET Bug 697027 - 14 - minor memory leaks found by Valgrind + TET Bug 697027 - 15 - minor memory leaks found by Valgrind + TET Bug 697027 - 16 - minor memory leaks found by Valgrind + TET Bug 697027 - 3 - minor memory leaks found by Valgrind + TET Bug 697027 - 3 - minor memory leaks found by Valgrind + TET Bug 700215 - ldclt core dumps Bug 668619 - slapd stops responding Bug 709826 - Memory leak: when extra referrals configured Bug 706179 - DS can not restart after create a new objectClass has entryusn attribute Bug 663752 - Cert renewal for attrcrypt and encchangelog Bug 663752 - Cert renewal for attrcrypt and encchangelog Bug 711679 - unresponsive LDAP service when deleting vlv on replica Bug 711679 - unresponsive LDAP service when deleting vlv on replica Bug 718303 - Intensive updates on masters could break the consumer's cache Merge branch '718303' Bug 719069 - clean up compiler warnings in 389-ds-base 1.2.9 Bug 712855 - Directory Server 8.2 logs "Netscape Portable Bug 663752 - Cert renewal for attrcrypt and encchangelog Bug 732153 - subtree and user account lockout policies implemented? Introducing an environment variable USE_VALGRIND to clean up the entry cache and dn cache on exit. Bug 744945 - nsslapd-counters attribute value cannot be set to "off" Keep unhashed password psuedo-attribute in the adding entry Reduce the number of DN normalization Bug 745259 - Incorrect entryUSN index under high load Bug 750622 - Fix Coverity (11104) Resource leak: Bug 750624 - Fix Coverity (11053) Explicit null dereferenced: Bug 750625 - Fix Coverity (11066) Unused pointer value Bug 750625 - Fix Coverity (11065) Uninitialized pointer read Bug 750625 - Fix Coverity (11064) Dereference before null check Bug 750625 - Fix Coverity (11061) Resource leak Bug 750625 - Fix Coverity (11060) Dereference null return value Bug 750625 - Fix Coverity (11058, 11059) Dereference null return value Bug 750625 - Fix Coverity (11057) Dereference null return value Bug 750625 - Fix Coverity (11055) Explicit null dereferenced Bug 750625 - Fix Coverity (11054) Dereference after null check Bug 750625 - Fix Coverity (11117) Uninitialized pointer read Bug 750625 - Fix Coverity (11116) Uninitialized pointer read Bug 750625 - Fix Coverity (11114, 11115) Uninitialized value use Bug 750625 - Fix Coverity (11113) Uninitialized pointer read Bug 750625 - Fix Coverity (11112) Uninitialized pointer read Bug 750625 - Fix Coverity (11109, 11110, 11111) Uninitialized pointer read Bug 750625 - Fix Coverity (11108) Sizeof not portable Bug 750625 - Fix Coverity (11107) Dereference before null check Bug 750625 - Fix Coverity (11096) Explicit null dereferenced Bug 750625 - Fix Coverity (11095) Explicit null dereferenced Bug 750625 - Fix Coverity (11094) Dereference after null check Bug 750625 - Fix Coverity (11091) Unchecked return value Bug 750625 - Fix Coverity (11055-2) Explicit null dereferenced Bug 750625 - Fix Coverity (11062) Resource leak Bug 750625 - Fix Coverity (11066-2) Unused pointer value Bug 750625 - Fix Coverity (12195) Dereference after null check Bug 750625 - Fix Coverity (12196) Dereference before null check Bug 750625 - Fix Coverity (11066-3) Unused pointer value Bug 745259 - Incorrect entryUSN index under high load in Trac Ticket 2 - If node entries are tombstone'd, Trac Ticket 2 - If node entries are tombstone'd, Trac Ticket 26 - Please support setting Trac Ticket 75 - Unconfigure plugin opperations are being called. Trac Ticket 168 - minssf should not apply to rootdse Trac Ticket #18 - Data inconsitency during replication Trac Ticket #52 - FQDN set to nsslapd-listenhost Trac Ticket 139 - eliminate the use of char *dn in favor of Slapi_DN *dn Trac Ticket 35 - Log not clear enough on schema errors Trac Ticket #274 - Reindexing entryrdn fails if Trac Ticket #275 - Invalid read reported by valgrind Trac Ticket 51 - memory leaks in 389-ds-base-1.2.8.2-1.el5? Trac Ticket #27 - SASL/PLAIN binds do not work Trac Ticket #84 - 389 Directory Server Unnecessary Checkpoints Trac Ticket #169 - allow 389 to use db5 Trac Ticket #34 - remove-ds.pl does not remove everything Trac Ticket #26 - Please support setting defaultNamingContext in the rootdse. Trac Ticket #298 - crash when replicating orphaned tombstone entry Trac Ticket #290 - server hangs during shutdown if betxn pre/post op fails Trac Ticket #290 - server hangs during shutdown if betxn pre/post op fails Minor bug fix introcuded by commit 69c9f3bf7dd9fe2cadd5eae0ab72ce218b78820e Trac Ticket #260 - 389 DS does not support multiple Fixing compiler warnings Trac Ticket #303 - make DNA range requests work with transactions coverity 12606 Logically dead code Trac Ticket #46 - setup-ds-admin.pl does not like ipv6 only hostnames Trac Ticket #46 (revised) - setup-ds-admin.pl does not like ipv6 only hostnames Trac Ticket #46 - (take 3) setup-ds-admin.pl does not like ipv6 only hostnames Trac Ticket #46 - (additional) setup-ds-admin.pl does not Trac Ticket #45 - Fine Grained Password policy: Trac Ticket #46 - (additional 2) setup-ds-admin.pl does not like ipv6 only hostnames Trac Ticket #335 - transaction retries need to be cache aware Trac Ticket #338 - letters in object's cn get converted to Trac Ticket #310 - Avoid calling escape_string() for logged DNs Trac Ticket #19 - Convert entryUSN plugin to transaction aware type Trac Ticket #345 - db deadlock return should not log error Trac Ticket #359 - Database RUV could mismatch the one in changelog under the stress Trac Ticket #359 - Database RUV could mismatch the one Trac Ticket #338 - letters in object's cn get converted to Trac Ticket #335 - transaction retries need to be cache aware Bug 829213 - unhashed#user#password visible after changing password https://bugzilla.redhat.com/show_bug.cgi?id=829213 Bug 829213 - unhashed#user#password visible after changing password https://bugzilla.redhat.com/show_bug.cgi?id=829213 Bug 829213 - unhashed#user#password visible after changing password https://bugzilla.redhat.com/show_bug.cgi?id=829213 audit log does not log unhashed password: enabled, by default. Trac Ticket 396 - Account Usability Control Not Working [Bug 835238] Trac Ticket #402 - nhashed#user#password in entry extension Trac Ticket #346 - Slow ldapmodify operation time for large Trac Ticket #346 - Slow ldapmodify operation time for large Coverity defects Conflict definition in SLAPI_ATTR_FLAG macros Trac Ticket #412 - memberof performance enhancement Trac Ticket #409 - Report during startup if nsslapd-cachememsize is too small Ticket 328 - make sure all internal search filters are properly escaped Ticket 328 - make sure all internal search filters are properly escaped Trac Ticket #346 - Slow ldapmodify operation time for large Trac Ticket #437 - variable dn should not be used in ldbm_back_delete Coverity defects Trac Ticket #340 - Change on SLAPI_MODRDN_NEWSUPERIOR is not Trac Ticket #466 - entry_apply_mod - ADD: Failed to set Coverity defects Trac Ticket #470 - 389 prevents from adding a posixaccount Coverity defects Trac Ticket #453 - db2index with -tattrname:type,type fails Trac Ticket #351 - use betxn plugins by default Bug 863576 - Dirsrv deadlock locking up IPA Trac Ticket #455 - Insufficient rights to unhashed#user#password Trac Ticket #451 - Allow db2ldif to be quiet Coverity defects Fixing compiler warnings in the posix-winsync plugin Trac Ticket #494 - slapd entered to infinite loop during new index addition Coverity defects Trac Ticket #498 - Cannot abaondon simple paged result search Trac Ticket #448 - Possible to set invalid macros in Macro ACIs Trac Ticket #391 - Slapd crashes when deleting backends Coverity fixes Trac Ticket #190 - Un-resolvable server in replication Trac Ticket #443 - Deleting attribute present in Trac Ticket #447 - Possible to add invalid attribute Trac Ticket #311 - IP lookup failing with multiple DNS Trac Ticket #500 - Newly created users with Trac Ticket #519 - Search with a complex filter including range search is slow Trac Ticket #520 - RedHat Directory Server crashes (segfaults) when moving ldap entry Coverity defect: Resource leak 13110 Trac Ticket #276 - Multiple threads simultaneously working on Trac Ticket #531 - loading an entry from the database should use str2entry_fast Trac Ticket #536 - Clean up compiler warnings for 1.3 Trac Ticket #531 - loading an entry from the database should use str2entry_f Trac Ticket #499 - Handling URP results is not corrrect bump version to 1.3.0.rc1 Trac Ticket #522 - betxn: upgrade is not implemented yet Ticket 509 - lock-free access to be->be_suffixlock Trac Ticket #497 - Escaped character cannot be used in the substring search filter Ticket #422 - 389-ds-base - Can't call method "getText" Ticket #547 - Incorrect assumption in ndn cache Ticket #545 - Segfault during initial LDIF import: str2entry_dupcheck() Ticket #542 - Cannot dynamically set nsslapd-maxbersize Ticket #537 - Improvement of range search Ticket #342 - better error message when cache overflows Ticket #505 - use lock-free access name2asi and oid2asi tables (additional) Ticket #529 - dn normalization must handle multiple space characters in attributes Ticket #502 - setup-ds.pl script should wait if "semanage.trans.LOCK" presen Ticket #563 - DSCreate.pm: Error messages cannot be used in the if expression since they could be localized. Ticket #533 - only scan for attributes to decrypt if there are encrypted attrs configured Ticket #543 - Sorting with attributes in ldapsearch gives incorrect result Ticket #572 - PamConfig schema not updated during upgrade Ticket #576 - DNA: use event queue for config update only at the start up Ticket #579 - Error messages encountered when using POSIX winsync Ticket #584 - Existence of an entry is not checked when its password is to be deleted bump version to 1.3.1.pre.a1 Ticket #561 - disable writing unhashed#user#password to changelog Coverity Fix Ticket #490 - Slow role performance when using a lot of roles Ticket #603 - A logic error in str2simple Ticket #604 - Required attribute not checked during search operation Ticket #585 - Behaviours of "db2ldif -a <filename>" and "db2ldif.pl -a <filename>" are inconsistent Fixing a compiler warning introduced by Ticket #561 - disable writing unhashed#user#password to changelog Ticket #634 - Deadlock in DNA plug-in Ticket #627 - ns-slapd crashes sporadically with segmentation fault in libslapd.so Ticket #47308 - unintended information exposure when anonymous access is set to rootdse Ticket 623 - cleanAllRUV task fails to cleanup config upon completion Ticket #618 - Crash at shutdown while stopping replica agreements Ticket 458 - Need to properly check if the password admin dn is set Ticket #529 - dn normalization must handle multiple space characters in attributes Ticket #608 - Posix Winsync plugin throws "posix_winsync_end_update_cb: failed to add task entry" error message Ticket #529 - dn normalization must handle multiple space characters in attributes Ticket 623 - cleanAllRUV task fails to cleanup config upon completion bump version to 1.3.2.pre.a1 Ticket #529 - dn normalization must handle multiple space characters in attributes Ticket 528 - RFE - get rid of instance specific scripts Ticket #47330 - changelog db extension / upgrade is obsolete Ticket #529 - dn normalization must handle multiple space characters in attributes Ticket #47313 - Indexed search with filter containing '&' and "!" with attribute subtypes gives wrong result Ticket #47330 - changelog db extension / upgrade is obsolete Ticket #47347 - Simple paged results should support async search Ticket #529 - dn normalization must handle multiple space characters in attributes Ticket #47320 - put conn on work_q not poll list if conn has buffered more_data Ticket 47331 - Self entry access ACI not working properly Ticket #529 - dn normalization must handle multiple space characters in attributes Coverity fix -- 13164: Logically dead code Ticket #47343 - 389-ds-base: Does not support aarch64 in f19 and rawhide Ticket #47327 - error syncing group if group member user is not synced Ticket #428 - posix winsync should support ADD user/group entries from DS to AD Trac Ticket #402 - nhashed#user#password in entry extension Ticket #569 - examine replication code to reduce amount of stored state information Ticket 47379 - DNA plugin failed to fetch replication agreement Ticket #47391 - deleting and adding userpassword fails to update the password Ticket #47391 - deleting and adding userpassword fails to update the password (additional fix) Ticket #47400 - MMR stress test with dna enabled causes a deadlock Ticket #47384 - Plugin library path validation Ticket #47374 - flush.pl is not included in perl5 Ticket #47420 - An upgrade script 80upgradednformat.pl fails to handle a server instance name incuding '-' Ticket #47419 - Unhashed userpassword can accidentally get removed from mods Ticket #47384 - Plugin library path validation Ticket #47367 - (phase 1) ldapdelete returns non-leaf entry error while trying to remove a leaf entry Ticket #47367 - (phase 2) ldapdelete returns non-leaf entry error while trying to remove a leaf entry Ticket #47435 - Very large entryusn values after enabling the USN plugin and the lastusn value is negative. Ticket #521 - modrdn + NSMMReplicationPlugin - Consumer failed to replay change Ticket #47378 - fix recent compiler warnings Ticket #630 - The backend name provided to bak2db is not validated Ticket #415 - winsync doesn't sync DN valued attributes if DS DN value doesn't exist Ticket #47314 - Winsync should support range retrieval Ticket #47310 - Attribute "dsOnlyMemberUid" not allowed when syncing nested posix groups from AD with posixWinsync Ticket #48 - Active Directory has certain uids which are reserved and will cause a Directory Server replica initialization of an AD server to abort. Ticket #609 - nsDS5BeginReplicaRefresh attribute accepts any value and it doesn't throw any error when server restarts. Ticket #197 - BDB backend - clear free page files to reduce changelog size Ticket #48 - Active Directory has certain uids which are reserved and will cause a Directory Server replica initialization of an AD server to abort. Ticket #460 - support multiple subtrees and filters coverity 11956 - Dereference after null check Ticket #47492 - PassSync removes User must change password flag on the Windows side Ticket #47523 - Set up replcation/agreement before initializing the sub suffix, the sub suffix is not found by ldapsearch Ticket #47534 - RUV tombstone search with scope "one" doesn`t work Ticket #47463 - IDL-style can become mismatched during partial restoration Coverity fixes - 12023, 12024, and 12025 Ticket #54 - locale "nl" not supported by collation plugin Ticket #53 - Need to update supported locales Ticket #53 - Need to update supported locales Ticket #53 - Need to update supported locales Ticket #47530 - dbscan on entryrdn should show all matching values Ticket #47422 - With 1.3.04 and subtree-renaming OFF, when a user is deleted after restarting the server, the same entry can't be added Ticket #47530 - dbscan on entryrdn should show all matching values Ticket #538 - hardcoded sasl2 plugin path in ldaputil.c, saslbind.c Ticket #47555 - db2bak.pl issue when specifying non-default directory Ticket #47581 - Winsync plugin segfault during incremental backoff Ticket #47581 - Winsync plugin segfault during incremental backoff (phase 2) Ticket #605 - support TLS 1.1 Ticket #605 - support TLS 1.1 - adding backward compatibility Ticket #342 - better error message when cache overflows (phase 2) Ticket #605 - support TLS 1.1 - lower the log level for the supported NSS version range Ticket #605 - support TLS 1.1 - Fixing "Coverity 12415 - Logically dead code" Ticket #47313 - Indexed search with filter containing '&' and "!" with attribute subtypes gives wrong result Ticket #47606 - replica init/bulk import errors should be more verbose Ticket #447 - Possible to add invalid attribute to nsslapd-allowed-to-delete-attrs Ticket #47571 - targetattr ACIs ignore subtype Revert "Ticket 47653 - Need a way to allow users to create entries assigned to themselves" Ticket #47660 - config_set_allowed_to_delete_attrs: Valgrind reports Invalid read Ticket #47571 - targetattr ACIs ignore subtype Ticket #342 - better error message when cache overflows Ticket #443 - Deleting attribute present in nsslapd-allowed-to-delete-attrs returns Operations error Ticket #47649 - Server hangs in cos_cache when adding a user entry Ticket #47659 - ldbm_usn_init: Valgrind reports Invalid read / SIGSEGV Ticket #47570 - slapi_ldap_init unusable during independent plugin development Ticket #47693 - Environment variables are not passed when DS is started via service Ticket #47677 - Size returned by slapi_entry_size is not accurate Ticket #47608 - change slapi_entry_attr_get_bool to handle "on"/"off" values, support default value Ticket #47602 - Make ldbm_back_seq independently support transactions Ticket #47642 - Windows Sync group issues Ticket #47701 - Make retro changelog trim interval programmable Ticket #47701 - Make retro changelog trim interval programmable Ticket #47700 - Unresolved external symbol references break loading of the ACL plugin Ticket #47709 - package issue in 389-ds-base Ticket #47709 - package issue in 389-ds-base Ticket #47709 - package issue in 389-ds-base Ticket #47701 - Make retro changelog trim interval programmable Ticket 525 - Replication retry time attributes cannot be added Ticket 408 - create a normalized dn cache Ticket 571 (dup 47361) - Empty control list causes LDAP protocol error is thrown Ticket 408 - create a normalized dn cache Ticket #47725 - compiler error on daemon.c Ticket #47735 - e_uniqueid fails to set if an entry is a conflict entry Ticket #47737 - Under heavy stress, failure of turning a tombstone into glue makes the server hung Ticket #47739 - directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind Ticket #47734 - Change made in resolving ticket #346 fails on Debian SPARC64 Ticket #47740 - Coverity issue in 1.3.3 Ticket #47735 - e_uniqueid fails to set if an entry is a conflict entry Ticket #47748 - Simultaneous adding a user and binding as the user could fail in the password policy check Ticket #346 - Slow ldapmodify operation time for large quantities of multi-valued attribute values Ticket #47707 - 389 DS Server crashes and dies while handles paged searches from clients Ticket #47750 - Creating a glue fails if one above level is a conflict or missing; Ticket #47764 - Problem with deletion while replicated Ticket #47780 - Some VLV search request causes memory leaks Ticket #47804 - db2bak.pl error with changelogdb Ticket #47720 - Normalization from old DN format to New DN format doesnt handel condition properly when there is space in a suffix after the seperator operator. Ticket #47770 - #481 breaks possibility to reassemble memberuid list Ticket #47808 - If be_txn plugin fails in ldbm_back_add, adding entry is double freed. Ticket 47313 - CI test: add test case for ticket 47313 Ticket 47808 - CI test: add test case for ticket 47808 Ticket #47809 - find a way to remove replication plugin errors messages "changelog iteration code returned a dummy entry with csn %s, skipping ..." Ticket #555 - add fixup-memberuid.pl script Ticket #47750 - Creating a glue fails if one above level is a conflict or missing Ticket #47750 - Creating a glue fails if one above level is a conflict or missing Ticket #47763 - winsync plugin modify is broken Ticket #47835 - Coverity: 12687..12692 Ticket #47835 - Coverity: 12687..12692 Ticket #47835 - Coverity: 12687..12692 Ticket #47835 - Coverity: 12687..12692 Ticket #47835 - Coverity: 12687..12692 Ticket #47835 - Coverity: 12687..12692 Ticket #47835 - Coverity: 12687..12692 Ticket #47839 - 389-ds production segfault: __memcpy_sse2_unaligned... Revert "Ticket #47835 - Coverity: 12687..12692" Revert "Ticket #47835 - Coverity: 12687..12692" Revert "Ticket #47835 - Coverity: 12687..12692" Revert "Ticket #47835 - Coverity: 12687..12692" Revert "Ticket #47835 - Coverity: 12687..12692" Revert "Ticket #47835 - Coverity: 12687..12692" Revert "Ticket #47835 - Coverity: 12687..12692" Ticket #47852 - Updating winsync one-way sync does not affect the behaviour dynamically Ticket #47832 - attrcrypt_generate_key calls slapd_pk11_TokenKeyGenWithFlags with improper macro Ticket #47843 - Fix various typos in manpages & code Ticket #47844 - Fix hyphens used as minus signed and other manpage mistakes Ticket #47834 - Tombstone_to_glue: if parents are also converted to glue, the target entry's DN must be adjusted. Ticket #47834 - Tombstone_to_glue: if parents are also converted to glue, the target entry's DN must be adjusted. Revert "Revert "Ticket #47835 - Coverity: 12687..12692"" Ticket #47859 - Coverity: 12692 & 12717 Ticket #47859 - Coverity: 12692 & 12717 Ticket #47711 - improve dbgen rdn generation, output and man page. Ticket #47746 - ldap/servers/slapd/back-ldbm/dblayer.c: possible minor problem with sscanf Ticket #47824 - paged results control is not working in some cases when we have a subsuffix. Ticket 47824 - CI test: add test case for ticket 47824 Ticket #47664 - Page control does not work if effective rights control is specified Ticket 47664 - CI test: add test case for ticket 47664 Ticket #47714 - [RFE] Update lastLoginTime also in Account Policy plugin if account lockout is based on passwordExpirationTime. Ticket 47714 - CI test: add test case for ticket 47713 Ticket 47714 - CI test: add test case for ticket 47714 Ticket #346 - Fixing memory leaks Ticket #47579 - add dbmon.sh Ticket #47579 - add dbmon.sh Ticket #47869 - unauthenticated information disclosure (Bug 1123477) Ticket #47834 - Tombstone_to_glue: if parents are also converted to glue, the target entry's DN must be adjusted. Ticket 47824 - CI test: add test case for ticket 47824 Ticket 47664 - CI test: add test case for ticket 47664 Ticket #47838 - harden the list of ciphers available by default Ticket 47838 - CI test: add test case for ticket 47838 Ticket #47838 - harden the list of ciphers available by default Ticket 47869 - CI test: add test case for ticket 47869 Ticket #47838 - harden the list of ciphers available by default Ticket #47574 - start dirsrv after ntpd Ticket #47874 - Performance degradation with scope ONE after some load Ticket #47875 - dirsrv not running with old openldap Ticket #47875 - dirsrv not running with old openldap Ticket #47875 - dirsrv not running with old openldap Ticket #47875 - dirsrv not running with old openldap Revert "Ticket #47875 - dirsrv not running with old openldap" Ticket #47834 - Tombstone_to_glue: if parents are also converted to glue, the target entry's DN must be adjusted. Ticket #47876 - coverity defects in slapd/tools/mmldif.c Ticket #47879 - coverity defects in plugins/replication/windows_protocol_util.c Ticket #47875 - dirsrv not running with old openldap Ticket #47875 - dirsrv not running with old openldap bump version to 1.3.4.a1 Ticket #47748 - Simultaneous adding a user and binding as the user could fail in the password policy check Ticket #47834 - Tombstone_to_glue: if parents are also converted to glue, the target entry's DN must be adjusted. Ticket #47890 - minor memory leaks in utilities Ticket #47838 - harden the list of ciphers available by default Ticket 47838,47895 - CI test: add test cases for ticket 47838 and 47895 Ticket #47895 - If no effective ciphers are available, disable security setting. Ticket #47750 - Creating a glue fails if one above level is a conflict or missing Ticket #47907 - ldclt: assertion failure with -e "add,counteach" -e "object=<ldif file>,rdn=uid:test[A=INCRNNOLOOP(0;24 Ticket #47908 - 389-ds 1.3.3.0 does not adjust cipher suite configuration on upgrade, breaks itself and pki-server Ticket #47838 - harden the list of ciphers available by default (phase 2) Ticket 47838 - CI test: adjusted test cases based on the phase 2 fixes for ticket 47838 Ticket #47880 - provide enabled ciphers as search result Ticket 47880 - CI test: added test cases for ticket 47880 Ticket #47892 - coverity defects found in 1.3.3.x Ticket #47919 - ldbm_back_modify SLAPI_PLUGIN_BE_PRE_MODIFY_FN does not return even if one of the preop plugins fails. Ticket #47912 - Proper handling of "No original_tombstone for changenumber" errors Ticket #47897 - Need to move slapi_pblock_set(pb, SLAPI_MODRDN_EXISTING_ENTRY, original_entry->ep_entry) prior to original_entry overwritten Ticket #47922 - dynamically added macro aci is not evaluated on the fly Ticket #47553 - Enhance ACIs to have more control over MODRDN operations Ticket #47928 - Disable SSL v3, by default. Ticket 47928 - CI test: added test cases for ticket 47928 Ticket #47928 - Disable SSL v3, by default. Ticket #47939 - Malformed cookie for LDAP Sync makes DS crash Ticket #47945 - Add SSL/TLS version info to the access log Ticket #47948 - ldap_sasl_bind fails assertion (ld != NULL) if it is called from chainingdb_bind over SSL/startTLS Ticket #47928 - Disable SSL v3, by default. Ticket #47960 - cookie_change_info returns random negative number if there was no change in a tree Ticket #47960 - cookie_change_info returns random negative number if there was no change in a tree Ticket #47935 - Error: failed to open an LDAP connection to host 'example.org' port '389' as user 'cn=Directory Manager'. Error: unknown. Ticket 47965 - Fix coverity issues (2014/12/16) Ticket #47947 - start dirsrv after chrony on RHEL7 and Fedora Ticket #47966 - slapd crashes during Dogtag clone reinstallation Ticket #47905 - Bad manipulation of passwordhistory Ticket #47934 - nsslapd-db-locks modify not taking into account. Ticket #47989 - Windows Sync accidentally cleared raw_entry Ticket #47996 - ldclt needs to support SSL Version range Ticket 47988: Schema learning mechanism, in replication, unable to extend an existing definition Coverity 12970 - Explicit null dereference Ticket #48001 - ns-activate.pl fails to activate account if it was disabled on AD Ticket #48001 - ns-activate.pl fails to activate account if it was disabled on AD Ticket #48025 - add an option '-u' to dbgen.pl for adding group entries with uniquemembers Ticket #47728 - compilation failed with ' incomplete struct/union/enum' if not set USE_POSIX_RWLOCKS Ticket #47836 - Do not return '0' as empty fallback value of nsds5replicalastupdatestart and nsds5replicalastupdatestart Ticket #47742 - 64bit problem on big endian: auth method not supported Ticket #48005 - ns-slapd crash in shutdown phase Ticket 48005 - CI test: added test cases for ticket 48005 Ticket #48030 - spec file should run "systemctl stop" against each running instance instead of dirsrv.target Ticket #48026 - Support for uniqueness plugin to enforce uniqueness on a set of attributes. Ticket #48048 - Fix coverity issues - 2015/2/24 Ticket #48048 - Fix coverity issues - 2015/2/24 Ticket #48048 - Fix coverity issues - 2015/2/24 Ticket #48048 - Fix coverity issues - 2015/2/24 Ticket #48048 - Fix coverity issues - 2015/2/24 Ticket #48048 - Fix coverity issues - 2015/2/24 Ticket #48048 - Fix coverity issues - 2015/2/24 Ticket #48048 - Fix coverity issues - 2015/2/24 Ticket #48048 - Fix coverity issues - 2015/2/24 Ticket #48048 - Fix coverity issues - 2015/2/24 Ticket #48048 - Fix coverity issues - 2015/2/24 Ticket #48048 - Fix coverity issues - 2015/2/24 Ticket #48048 - Fix coverity issues - 2015/2/24 Ticket #48048 - Fix coverity issues - 2015/2/24 Ticket #48048 - Fix coverity issues - 2015/2/24 Ticket #48048 - Fix coverity issues - 2015/2/24 Ticket #48048 - Fix coverity issues - 2015/2/24 Ticket #48048 - Fix coverity issues - 2015/2/24 Ticket #48048 - Fix coverity issues - 2015/2/24 Ticket #48048 - Fix coverity issues - 2015/2/24 Ticket #48048 - Fix coverity issues - 2015/2/24 Ticket #48048 - Fix coverity issues - 2015/2/24 Ticket #48048 - Fix coverity issues - 2015/2/24 Ticket #48048 - Fix coverity issues - 2015/2/24 Ticket #48048 - Fix coverity issues - 2015/2/24 Ticket #48048 - Fix coverity issues - 2015/2/24 Ticket #48048 - Fix coverity issues - 2015/2/24 Ticket #48048 - Fix coverity issues - 2015/2/24 Ticket #48048 - Fix coverity issues - 2015/2/24 Ticket #48048 - Fix coverity issues - 2015/2/24 Ticket #48048 - Fix coverity issues - 2015/2/24 Ticket #48048 - Fix coverity issues - 2015/2/24 Ticket #48048 - Fix coverity issues - 2015/2/24 Ticket #48048 - Fix coverity issues - 2015/2/24 Ticket #48048 - Fix coverity issues - 2015/2/24 Ticket #48048 - Fix coverity issues - 2015/2/24 Ticket #48048 - Fix coverity issues - 2015/2/24 Ticket #48048 - Fix coverity issues - 2015/2/24 Ticket #48048 - Fix coverity issues - 2015/2/24 Ticket #48048 - Fix coverity issues - 2015/2/24 Ticket #48048 - Fix coverity issues - 2015/2/24 Ticket #48109 - substring index with nssubstrbegin: 1 is not being used with filters like (attr=x*) Ticket 48109 - CI test: added test cases for ticket 48109 Ticket #48109 - substring index with nssubstrbegin: 1 is not being used with filters like (attr=x*) Ticket #48048 - Fix coverity issues - 2015/3/1 Ticket #47431 - Duplicate values for the attribute nsslapd-pluginarg are not handled correctly Ticket 47431 - CI test: added test cases for ticket 47431 Ticket #47957 - Make ReplicaWaitForAsyncResults configurable Ticket #47801 - RHDS keeps on logging write_changelog_and_ruv: failed to update RUV for unknown Ticket #48133 - Non tombstone entry which dn starting with "nsuniqueid=...," cannot be deleted Ticket #47723 - winsync sets AccountUserControl in AD to 544 Ticket #48143 - Password is not correctly passed to perl command line tools if it contains shell special characters. Ticket 47966 - CI test: added test cases for ticket 47966 Ticket #48169 - support NSS 3.18 Ticket #48146 - async simple paged results issue Ticket #48109 - substring index with nssubstrbegin: 1 is not being used with filters like (attr=x*) Ticket #48146 - async simple paged results issue; log pr index Ticket #48146 - async simple paged results issue; need to close a small window for a pr index competed among multiple threads. Ticket #48146 - async simple paged results issue Ticket #48183 - bind on db chained to AD returns err=32 Ticket #48146 - async simple paged results issue Ticket #48146 - async simple paged results issue Ticket #48190 - idm/ipa 389-ds-base entry cache converges to 500 KB in dblayer_is_cachesize_sane Revert "Ticket 48149 - ns-slapd double free or corruption crash" Ticket #48192 - Individual abandoned simple paged results request has no chance to be cleaned up Ticket #48192 - Individual abandoned simple paged results request has no chance to be cleaned up Ticket #48192 - Individual abandoned simple paged results request has no chance to be cleaned up Ticket #47972 - make parsing of nsslapd-changelogmaxage more fool proof Ticket #48191 - RFE: Adding nsslapd-maxsimplepaged-per-conn Ticket #48191 - CI test: added test cases for ticket 48191 Ticket #48191 - RFE: Adding nsslapd-maxsimplepaged-per-conn Adding nsslapd-maxsimplepaged-per-conn Ticket #48008 - db2bak.pl man page should be improved. Ticket #48194 - nsSSL3Ciphers preference not enforced server side Ticket #48194 - CI test: added test cases for ticket 48194 Ticket #47669 - Retro Changelog Plugin accepts invalid value in nsslapd-changelogmaxage attribute Ticket #47669 - CI test: added test cases for ticket 47669 Spec file changes for nunc-stans Ticket #48032,48033 - change C code license to GPLv3; change C code license to allow openssl Ticket #48032,48033 - change C code license to GPLv3; change C code license to allow openssl bump version to 1.3.5.a1 Ticket #48203 - Fix coverity issues - 06/22/2015 Updating 389-ds-base.spec.in for the better nunc-stans support. Ticket #48212 - Dynamic nsMatchingRule changes had no effect on the attrinfo thus following reindexing, as well. Ticket #48212 - CI test: added test cases for ticket 48212 Ticket #48214 - ldapsearch on nsslapd-maxbersize returns 0 instead of current value Ticket #48214 - CI test: added test cases for ticket 48213 Ticket #48192 - Individual abandoned simple paged results request has no chance to be cleaned up Ticket #48203 - Fix coverity issues - 07/07/2015 Ticket #47799 - Any negative LDAP error code number reported as Illegal error by ldclt. Ticket #48216 - crash in ns-slapd when deleting winSyncSubtreePair from sync agreement Ticket #48223 - Winsync fails when AD users have multiple spaces (two)inside the value of the rdn attribute Ticket #48194 - CI test: fixing test cases for ticket 48194 Ticket #48203 - Fix coverity issues - 07/14/2015 Ticket #48226 - In MMR, double free coould occur under some special condition Ticket #48226 - CI test: added test cases for ticket 48226 Ticket #48010 - winsync range retrieval gets only 5000 values upon initialization Ticket #48232 - winsync lastlogon attribute not syncing between DS and AD. Ticket #48231 - logconv autobind handling regression caused by 47446 Ticket #48228 - wrong password check if passwordInHistory is decreased. Ticket #48228 - CI test: added test cases for ticket 48228 Ticket #47511 - bashisms in 389-ds-base admin scripts Ticket #48245 - Man pages and help for remove-ds.pl doesn't display "-a" option Ticket #48250 - Slapd crashes reported from latest build Ticket #48243 - replica upgrade failed in starting dirsrv service due to upgrade scripts did not run Ticket #48254 - CLI db2index fails with usage errors Ticket #48254 - Shell CLI fails with usage errors if an argument containing white spaces is given Ticket #47757 - Unable to dereference unqiemember attribute because it is dn [#UID] not dn syntax Ticket #48252 - db2index creates index entry from deleted records Ticket #48252 - CI test: added test cases for ticket 48252 Ticket #48228 - wrong password check if passwordInHistory is decreased. Ticket #48252 - db2index creates index entry from deleted records Ticket #47981 - COS cache doesn't properly mark vattr cache as invalid when there are multiple suffixes Ticket #48265 - Complex filter in a search request doen't work as expected. (regression) Ticket #48265 - CI test: added test cases for ticket 48265 Ticket #48226 - CI test: fixing test case for ticket 48226 Revert "Ticket #48254 - Shell CLI fails with usage errors if an argument containing white spaces is given" Revert "Ticket #47511 - bashisms in 389-ds-base admin scripts" Ticket #47511 - bashisms in 389-ds-base admin scripts Ticket #48254 - Shell CLI fails with usage errors if an argument containing white spaces is given Ticket #48226 - In MMR, double free coould occur under some special condition Ticket #48279 - Check NULL reference in nssasl_mutex_lock etc. (saslbind.c) Ticket #48277 - Assorted build fixes and make rpms target Ticket #48188 - segfault in ns-slapd due to accessing Slapi_DN freed in pre bind plug-in Commit the derived file (Makefile.in) from the previous commit. Ticket #48299 - pagedresults - when timed out, search results could have been already freed. Ticket #48192 - Individual abandoned simple paged results request has no chance to be cleaned up Ticket #48298 - ns-slapd crash during ipa-replica-manage del Ticket #48016 - search, matching rules and filter error "unsupported type 0xA9" Ticket #48304 - ns-slapd - LOGINFO:Unable to remove file Ticket #48305 - perl module conditional test is not conditional when checking SELinux policies Ticket #48285 - The dirsrv user/group should be created in rpm %pre, and ideally with fixed uid/gid Ticket #48285 - The dirsrv user/group should be created in rpm %pre, and ideally with fixed uid/gid Ticket #548 - RFE: Allow AD password sync to update shadowLastChange Ticket #548 - CI test: added test cases for ticket 548 Ticket #48326 - [RFE] it could be nice to have nsslapd-maxbersize default to bigger than 2Mb Ticket #48326 - CI test: added test cases for ticket 48326 Ticket #48328 - RFE: Allow RHDS to be setup using a DNS CNAME alias for General.FullMachineName Ticket #48338 - SimplePagedResults -- abandon could happen between the abandon check and sending results Ticket #48339 - Share nsslapd-threadnumber in the case nunc-stans is enabled, as well. bump nunc-stans version to 0.1.6 Ticket #48344 - acl - regression - trailing ', (comma)' in macro matched value is not removed. bump nunc-stans version to 0.1.7 Ticket #48348 - Running /usr/sbin/setup-ds.pl fails with Can't locate bigint.pm, plus two warnings Ticket #48316 - Perl-5.20.3-328: Use of literal control characters in variable names is deprecated Ticket 47838 - CI test: adjusted test cases based on the nss version Ticket #48338 - SimplePagedResults -- abandon could happen between the abandon check and sending results Ticket #48305 - perl module conditional test is not conditional when checking SELinux policies Ticket #48375 - SimplePagedResults -- in the search error case, simple paged results slot was not released. Ticket #142 - [RFE] Default password syntax settings don't work with fine-grained policies Ticket 142 - CI test: added test cases for ticket 142 Ticket #48244 - No validation check for the value for nsslapd-db-locks Ticket #48290 - No man page entry for - option '-u' of dbgen.pl for adding group entries with uniquemembers Ticket #48294 - Linked Attributes plug-in - won't update links after MODRDN operation Ticket #48294 - CI test: added test cases for ticket 48294 Ticket #48400 - ldclt - segmentation fault error while binding Ticket 48212 - CI test script ticket48212_test.py Ticket #548 - RFE: Allow AD password sync to update shadowLastChange Revert "Ticket #48338 - SimplePagedResults -- abandon could happen between the abandon check and sending results" Ticket #48406 - Avoid self deadlock by PR_Lock(conn->c_mutex) Ticket #548 - RFE: Allow AD password sync to update shadowLastChange Ticket #548 - CI test: added test cases for ticket 548 Ticket #48394 - lower password history minimum to 1 Ticket #48144 - Add /usr/sbin/status-dirsrv script to get the status of the directory server instance. Ticket #48144 - Add /usr/sbin/status-dirsrv script to get the status of the directory server instance. Ticket #48144 - Add /usr/sbin/status-dirsrv script to get the status of the directory server instance. Ticket #48295 - Entry cache is not rolled back -- Linked Attributes plug-in - wrong behaviour when adding valid and broken links Ticket #48295 - CI test: added test cases for ticket 48295 Ticket 48363 - Support for rfc3673 '+' to return operational attributes Ticket #48492 - heap corruption at schema replication. Ticket #48536 - Crash in slapi_get_object_extension Ticket #48536 - Crash in slapi_get_object_extension Ticket 47838 - CI test: fixed tests following the new CI test format. Ticket #48662 - db2index with no attribute args fail. Ticket 48384 - Fix dblayer_is_cachesize_sane and dblayer_sys_pages for linux Ticket #48757 - License tag does not match actual license of code bump version to 1.3.5.1 Ticket #48779 - Remove startpidfile check in start-dirsrv Ticket #48775 - If nsSSL3 is on, even if SSL v3 is not really enabled, a confusing message is logged. Ticket #48374 - entry cache locks not released in error conditions Ticket #48492 - heap corruption at schema replication. Ticket #48799 - objectclass values could be dropped on the consumer Ticket #48784 - Make the SSL version set to the client library configurable. Ticket #48784 - CI test: added test cases for ticket 48784 Ticket #47536 - Allow usage of OpenLDAP libraries that don't use NSS for crypto Ticket #47536 - CI test: added test cases for ticket 47536 Ticket #48800 - Cleaning up error buffers Ticket #48802 - Compilation warnings from clang Ticket #48410 - 389-ds-base - Unable to remove / unregister a DS instance from admin server Ticket #48662 - db2index with no attribute args fail. Ticket #48808 - Paged results search returns the blank list of entries bump version to 1.3.5.2 Ticket #48822 - (389-ds-base-1.3.5) Fixing coverity issues. Ticket #48822 - (389-ds-base-1.3.5) Fixing coverity issues. Ticket #48822 - (389-ds-base-1.3.5) Fixing coverity issues. Ticket #48822 - (389-ds-base-1.3.5) Fixing coverity issues. Ticket #48822 - (389-ds-base-1.3.5) Fixing coverity issues. Ticket #48144 - Add /usr/sbin/status-dirsrv script to get the status of the directory server instance. bump version to 1.3.5.3 Ticket #48837 - Replication: total init aborted Ticket #47819 - RFE - improve tombstone purging performance bump version to 1.3.5.4 Ticket #48834 - Modifier's name is not recorded in the audit log with modrdn and moddn operations Ticket #48854 - Running db2index with no options breaks replication Ticket #47911 - split out snmp agent into a subpackageTicket 47911 Ticket #48755 - moving an entry could make the online init fail Ticket #48755 - CI test: test case for ticket 48755 Ticket #48833 - 389 showing inconsistent values for shadowMax and shadowWarning in 1.3.5.1 Ticket #48848 - modrdn deleteoldrdn can fail to find old attribute value, perhaps due to case folding bump version to 1.3.5.5 Revert "Ticket #48755 - moving an entry could make the online init fail" Ticket #48234 - "matching rules" in ACI's "bind rules not fully evaluated Ticket #48234 - CI test: test case for ticket 48234 bump version to 1.3.5.6 Ticket #48449 - Import readNSState.py from RichM's repo Ticket 48745 - Matching Rule caseExactIA5Match indexes incorrectly values with upper cases Ticket #48109 - substring index with nssubstrbegin: 1 is not being used with filters like (attr=x*) Revert "Ticket 48837 - Replication: total init aborted" Ticket #48892 - Wrong result code display in audit-failure log bump version to 1.3.5.7 Ticket #48366 - proxyauth does not work bound as directory manager bump version to 1.3.5.8 Ticket #48899 - Values of dbcachetries/dbcachehits in cn=monitor could overflow. Ticket #48904 - syncrepl search returning error 329; plugin sending a bad error code Ticket #48755 - moving an entry could make the online init fail Ticket #48755 - CI test: test case for ticket 48755 bump version to 1.3.5.9 Ticket #48905 - coverity defects bump version to 1.3.5.10 Ticket #48755 - moving an entry could make the online init fail Ticket #48914 - db2bak.pl task enters infinitive loop when bak fs is almost full Ticket #48144 - Add /usr/sbin/status-dirsrv script to get the status of the directory server instance. Ticket #48919 - Compiler warnings while building 389-ds-base on RHEL7 Bug 1347760 - CVE-2016-4992 389-ds-base: Information disclosure via repeated use of LDAP ADD operation, etc. Bug 1347760 - CI test: test case for bug 1347760 Bug 1347760 - CVE-2016-4992 389-ds-base: Information disclosure via repeated use of LDAP ADD operation, etc. Ticket 48925 - slapd crash with SIGILL: Dsktune should detect lack of CMPXCHG16B Ticket #48919 - Compiler warnings while building 389-ds-base on RHEL7 Ticket #48919 - Compiler warnings while building 389-ds-base on RHEL7 bump version to 1.3.5.11 Ticket #48939 - nsslapd-workingdir is empty when ns-slapd is started by systemd Ticket #48939 - nsslapd-workingdir is empty when ns-slapd is started by systemd Bug 1347760 - CVE-2016-4992 389-ds-base: Information disclosure via repeated use of LDAP ADD operation, etc. Bug 1347760 - Additional CI test case Ticket #48934 - remove-ds.pl deletes an instance even if wrong prefix was specified Ticket #48940 - DS logs have warning:ancestorid not indexed Ticket #48936 - Duplicate collation entries Ticket #48943 - When fine-grained policy is applied, a sub-tree has a priority over a user while changing password bump version to 1.3.5.12 Petr Viktorin (1): Ticket 47899: Fix slapi_td_plugin_lock_init prototype Rich Megginson (479): Net::LDAP password modify extop breaks; msgid in response is 0xFF Clean up assert for entrydn Bug 543080 - Bitwise plugin fails to return the exact matched entries for Bitwise search filter Bug 537466 - nsslapd-distribution-plugin should not require plugin name to begin with "lib" bump version to 1.2.6.a2 Do not use syntax plugins directly for filters, indexing wrap new style matching rule plugins for use in old style indexing code change extensible filter code to use new syntax function style mr funcs change syntax plugins to register required matching rule plugins crash looking up compat syntax; numeric string syntax using integer; make octet string ordering work correctly fix memory leak in attr replace when replacement fails fix dso linking issues found by fedora 13 linking problems linking with -z defs 389 DS segfaults on libsyntax-plugin.so - part 1 389 DS segfaults on libsyntax-plugin.so - part 2 389 DS segfaults on libsyntax-plugin.so - part 3 Bug 460162 - FedoraDS "with-FHS" installs init.d StartupScript in wrong location on non-RHEL/Fedora OS Bug 568196 - Install DS8.2 on Solaris fails Bug 568196 - Install DS8.2 on Solaris fails - part 2 Bug 551198 - LDAPI: incorrect logging to access log bump version to 1.2.6.a3 fix various memory leaks Bug 551198 - LDAPI: incorrect logging to access log - part 2 Bug 554573 - ACIs use bind DN from bind req rather than cert mapped DN from sasl/external cleanup build warnings Bug 571514 - upgrade to 1.2.6 should upgrade 05rfc4523.ldif (cert schema) Bug 570905 - postalAddress syntax should allow empty lines (should allow $$) Add support for additional schema/matching rules included with 389 Bug 572677 - Memory leak in searches including GER control Bug 571677 - Busy replica on consumers when directly deleting a replication conflict Bug 576074 - search filters with parentheses fail Bug 567429 - slapd didn't close connection and get into CLOSE_WAIT state Bug 578167 - repl. of mod/replace deletes multi-valued attrs Bug 561575 - setup-ds-admin fails to supply nsds5ReplicaName when configuring via ConfigFile Bug 572162 - the string "|*" within a search filter on a non-indexed attribute returns all elements. Bug 576644 - segfault while multimaster replication (paired node won't find deleted entries) start of 1.2.6.a4 Bug 572018 - Upgrading from 1.2.5 to 1.2.6.a2 deletes userRoot Fix too few args for format warning in acllas Bug 586571 - DS Console shows escaped DNs Bug 591685 - Server instances Fail to Start on Solaris due to Library Path and pcre bump console version to 1.2.3 Repl Session API needs to check for NULL api before init Bug 593392 - setup-ds-admin.pl -k creates world readable file Bug 595874 - 99user.ldif getting overpopulated bump version to 1.2.6.a5 bump version to 1.2.6.rc1 bump version to 1.2.6.rc2 bump version to 1.2.6.rc3 Bug 604453 - SASL Stress and Server crash: Program quits with the assertion failure in PR_Poll Bug 604453 - SASL Stress and Server crash: Program quits with the assertion failure in PR_Poll Bug 603942 - null deref in _ger_parse_control() for subjectdn bump version to 1.2.6.rc4 Bug 609590 - fix coverity Defect Type: Memory - corruptions issues Bug 609590 - fix coverity Defect Type: Memory - corruptions issues Bug 609590 - fix coverity Defect Type: Memory - corruptions issues Bug 609590 - fix coverity Defect Type: Memory - corruptions issues Bug 609590 - fix coverity Defect Type: Memory - corruptions issues Bug 609590 - fix coverity Defect Type: Memory - corruptions issues Bug 609590 - fix coverity Defect Type: Memory - corruptions issues Bug 609590 - fix coverity Defect Type: Memory - corruptions issues Bug 609590 - fix coverity Defect Type: Memory - corruptions issues Bug 602530 - coverity: op_shared_modify: compare pre, post and original entries before freeing them Bug 602531 - coverity: op_shared_delete: compare preop entry and GLUE_PARENT_ENTRY before freeing them Bug 609590 - fix coverity Defect Type: Memory - corruptions issues Bug 610177 - fix coverity Defect Type: Uninitialized variables issues Bug 610276 - fix coverity Defect Type: API usage errors issues Bug 611850 - fix coverity Defect Type: Error handling issues Bug 614242 - C99/ANSI C++ related compile errors on HP-UX Bug 547503 - replication broken again, with 389 MMR replication and TCP errors Bug 617013 - repl-monitor.pl use cpu upto 90% fix build failures due to libtool problems Bug 617629 - Missing aliases in new schema files Bug 617862 - Replication: Unable to delete tombstone errors bump version to 1.2.7.a1 Bug 610281 - fix coverity Defect Type: Control flow issues - daemon.c:write_function() Bug 610281 - fix coverity Defect Type: Control flow issues - last repl init status postalAddress syntax does not accept empty values ger should support both "dn" and "distinguishedName" openldap - ldap_url_parse_ext is not part of the public api fix memleak in ldbm_config_read_instance_entries Add -x option to ldap tools when using openldap openldap - add support for missing controls, add ldif api, fix NSS usage port client tools to use openldap API use the mozldap versions of the proxy auth control create function document slapi wrappers for openldap/mozldap functions that differ fix some compiler warnings use strcasecmp with ptype and type->bv_val ber_printf 'o' cannot handle NULL bv_val fix the url_parse logic when looking for a missing suffix DN openldap ldapsearch uses -LLL to suppress # version: N add ldaptool_opts for the non BUNDLE case in Makefile.am openldap ldapsearch returns empty line at end of LDIF output have to use LDAP_OPT_X_TLS_NEVER to defeat cert hostname checking openldap_read_function needs to set EWOULDBLOCK if the buffer is empty do not terminate unwrapped LDIF line with another newline slapi_ldap_url_parse must handle multiple host:port in url convert mozldap host list to openldap uri list move the out pointer back if continuation lines were removed check src < *out only; only check for \nspace if src < *out - 2 use slapi_ldap_url_parse in the acl code do not un-null-terminate normalized DN until new url is constructed implement slapi_ldap_explode_dn and slapi_ldap_explode_rdn use slapi_pblock_set to set the ldap result code for the be postop plugins pass the string copy to slapi_dn_normalize_original bug 614511 - fix coverity null reference - revert macro aci $dn logic fix compiler warnings - unused vars/funcs, invalid casts use slapi_mods_init_passin/get_ldapmods_passout if modifying the smods Have to explicitly set protocol version to 3 Only check modrdn ops for backend/suffix correctness if not the default backend Bug 634561 - Server crushes when using Windows Sync Agreement openldap ber_init will assert if the bv->bv_val is NULL add the account policy plugin and related server code, schema, and config fix pblock memory leak do not register pre/post op plugins if disabled add support for global inactivity limit fix typos in Makefile.am, acctpolicy schema bump version to 1.2.7.a2 remove extra format argument; use %lu for size_t printf format Bug 644013 - uniqueness plugin segfault bug bump version to 1.2.7.a3 bump to 1.2.7.a4 bump version to 1.2.7.a5 put replication config entries in separate file bump version to 1.2.7.a6 bump version to 1.2.7.1 bump version to 1.2.7.2 bump version to 1.2.7.3 bump version to 1.2.7.4 Bug 515329 - Multiple mods in one operation can result in an inconsistent replica bump version to 1.2.8.a1 Bug 642046 - Segfault when using SASL/GSSAPI multimaster replication, possible krb5_creds doublefree Bug 624485 - setup dsktune check step should default to "yes" if no problems found Bug 622907 - support piped passwords to perl-based maintenance commands Bug 624485 - setup dsktune check step should default to "yes" if no problems found Bug 576534 - Password displayed on console when entered in command-line utilities Bug 667935 - DS pipe log script's logregex.py plugin is not redirecting the log output to the text file bump version to 1.2.8.a2 Bug 668385 - DS pipe log script is executed as many times as the dirsrv service is restarted Bug 676689 - crash while adding a new user to be synced to windows Bug 675113 - ns-slapd core dump in windows_tot_run if oneway sync is used Bug 677440 - clean up compiler warnings in 389-ds-base 1.2.8 Bug 677774 - DS fails to start after reboot Bug 666076 - dirsrv crash (1.2.7.5) with multiple simple paged result searches Bug 675320 - empty modify operation with repl on or lastmod off will crash server bump version to 1.2.9.a1 - console version to 1.2.4 Bug 677705 - ds-logpipe.py script is failing to validate "-s" and "--serverpid" options with "-t". Bug 676655 - winsync stops working after server restart Bug 680555 - ns-slapd segfaults if I have more than 100 DBs Bug 514190 - setup-ds-admin.pl --debug does not log to file Bug 518890 - setup-ds-admin.pl - improve hostname validation Bug 644784 - Memory leak in "testbind.c" plugin Bug 683250 - slapd crashing when traffic replayed Bug 690584 - #10691 ldbm_back_init() - fix coverity resource leak issues Bug 690584 - #10690 #10689 attrcrypt_get_ssl_cert_name() - fix coverity resource leak issues Bug 690584 - #10688 - dblayer_make_env - fix coverity resource leak issues Bug 690584 - #10669 #10668 cl5ImportLDIF - fix coverity resource leak issues Bug 690584 - #10658 linked_attrs_pre_op - fix coverity resource leak issues Bug 690584 - #10655 acllas__handle_group_entry - fix coverity resource leak issues Bug 690584 - #10654 #10653 str2entry_dupcheck - fix coverity resource leak issues Bug 690584 - #10652 #10651 #10650 #10649 #10648 #10647 send_specific_attrs send_all_attrs - fix coverity resource leak issues Bug 690584 - #10643 hash_rootpw - fix coverity resource leak issues Bug 690584 - #10641 reslimit_bv2int - fix coverity resource leak issues Bug 691422 - sdt_destroy - fix coverity control flow issues Bug 691422 - ldbm_back_upgradedb - fix coverity control flow issues Bug 691422 - csnplFree - fix coverity control flow issues Bug 691422 - SetUnicodeStringFromUTF_8 - fix coverity control flow issues Bug 691422 - cl5DeleteRUV - fix coverity control flow issues Bug 691422 - acl_read_access_allowed_on_entry - fix coverity control flow issues Bug 691422 - search_internal_callback_pb - fix coverity control flow issues Bug 691422 - cl5WriteRUV - fix coverity control flow issues Bug 691422 - windows_replay_update - fix coverity control flow issues Bug 690584 - #10691 ldbm_back_init() - fix coverity resource leak issues Bug 690584 - #10652 #10651 #10650 #10649 #10648 #10647 send_specific_attrs send_all_attrs - fix coverity resource leak issues Bug 668385 - DS pipe log script is executed as many times as the dirsrv service is restarted Bug 692937 - Replica install fails after step for "enable GSSAPI for replication" Bug 692331 - Segfault on index update during full replication push on 1.2.7.5 Bug 693451 - cannot use localized matching rules Bug 693455 - nsMatchingRule does not work with multiple values Bug 693503 - matching rules do not inherit from superior attribute type Bug 693466 - Unable to change schema online Bug 692991 - rhds82 - windows_tot_run: failed to obtain data to send to the consumer; LDAP error - -1 Bug 693473 - rhds82 rfe - windows_tot_run to log Sizelimit exceeded instead of LDAP error - -1 Bug 693962 - Full replica push loses some entries with multi-valued RDNs Bug 694336 - Group sync hangs Windows initial Sync Bug 700145 - userpasswd not replicating Bug 703990 - Support upgrade from Red Hat Directory Server bump console version to 1.2.5 Bug 703990 - Support upgrade from Red Hat Directory Server Bug 703990 - Support upgrade from Red Hat Directory Server Bug 707015 - Cannot disable SSLv3 and use TLS only bump version to 1.2.9.a2 Bug 707384 - only allow FIPS approved cipher suites in FIPS mode Bug 711906 - ns-slapd segfaults using suffix referrals Bug 706209 - LEGAL: RHEL6.1 License issue for 389-ds-base package Bug 703703 - setup-ds-admin.pl asks for legal agreement to a non-existant file Bug 711679 - unresponsive LDAP service when deleting vlv on replica bump console version to 1.2.6 Bug 697694 - rhds82 - incr update state stop_fatal_error "requires administrator action", with extop_result: 9 Bug 716980 - winsync uses old AD entry if new one not found add support for ldif files with changetype: add writing Inf file shows SchemaFile = ARRAY(0xhexnum) look for separate openldap ldif library bump version to 1.2.9.a3 Bug 709468 - RSA Authentication Server timeouts when using simple paged results on RHDS 8.2. Bug 720059 - RDN with % can cause crashes or missing entries bump version to 1.2.9.0 Bug 725542 - Instance upgrade fails when upgrading 389-ds-base package Bug 725953 - Winsync: DS entries fail to sync to AD, if the User's CN entry contains a comma Bug 723937 - replication failing on RUV errors bump version to 1.2.9.1 Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error bump version to 1.2.9.2 Bug 727511 - ldclt SSL search requests are failing with "illegal error numbe bump version to 1.2.9.3 Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error bump version to 1.2.9.4 Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error bump version to 1.2.9.5 Bug 729378 - delete user subtree container in AD + modify password in DS == DS crash Bug 723937 - replication failing on RUV errors Bug 729369 - upgrade DB to upgrade from entrydn to entryrdn format is not working. make sure the DBVERSION file ends in a newline bump version to 1.2.10.a1 Bug 633803 - passwordisglobalpolicy attribute brakes TLS chaining Bug 733103 - large targetattr list with syntax errors cause server to crash or hang Bug 703990 - cross-platform - Support upgrade from Red Hat Directory Server Bug 735121 - simple paged search + ip/dns based ACI hangs server Bug 695736 - Providing native systemd file for upcoming F15 Feature Systemd Bug 590826 - Reloading database from ldif causes changelog to emit "data no longer matches" errors Bug 736712 - Modifying ruv entry deadlocks server Add support for pre/post db transaction plugins Make all backend operations transaction aware Bug 741744 - MOD operations with chained delete/add get back error 53 on backend config Bug 742324 - allow nsslapd-idlistscanlimit to be set dynamically and per-user Bug 741744 - part2 - MOD operations with chained delete/add get back error 53 on backend config Bug 740942 - allow resource limits to be set for paged searches independently of limits for other searches/operations bump version to 1.2.10.a2 bump version to 1.2.10.a3 fix transaction support in ldbm_delete bump version to 1.2.10.a4 set the ENTRY_POST_OP for modrdn betxnpostoperation plugins pass the plugin config entry to the plugin init function make memberof transaction aware and able to be a betxnpostoperation plugin Bug 741744 - part3 - MOD operations with chained delete/add get back error 53 bump version to 1.2.10.a5 Change referential integrity to be a betxnpostoperation plugin Use new PLUGIN_CONFIG_ENTRY feature to allow switching between txn and regular Bug 748575 - rhds81 modrn operation and 100% cpu use in replication Bug 748575 - part 2 - rhds81 modrdn operation and 100% cpu use in replication Bug 751495 - 'setup-ds.pl -u' fails with undefined routine 'updateSystemD' bump version to 1.2.10.a6 Bug 751645 - crash when simple paged fails to send entry to client csn_as_string - use slapi_uN_to_hex instead of sprintf uniqueid formatting - use slapi_u8_to_hex instead of sprintf fix member variable name error in slapi_uniqueIDFormat reduce calls to csn_as_string and slapi_log_error csn_init_as_string should not use sscanf use slapi_hexchar2int and slapi_str_to_u8 everywhere Bug 755754 - Unable to start dirsrv service using systemd Bug 755725 - 389 programs linked against openldap crash during shutdown Ticket 1 - pre-normalize filter and pre-compile substring regex - and other optimizations Ticket #162 - Infinite loop / spin inside strcmpi_fast, acl_read_access_allowed_on_attr, server DoS bak2db gets stuck in infinite loop Ticket #256 - debug build assertion in ACL_EvalDestroy() bump version to 1.2.10.a7 Ticket #167 - Mixing transaction and non-transaction plugins can cause deadlock fix mep sdn compiler warnings add a hack to disable sasl hostname canonicalization - helps with testing when you don't want to set up correct host name resolution and/or cannot set the default system hostname Ticket #12 - 389 DS DNA Plugin / Replication failing on GSSAPI Ticket #257 - repl-monitor doesn't work if leftmost hostnames are the same fix recent compiler warnings Ticket #15 - Get rid of rwlock.h/rwlock.c and just use slapi_rwlock instead fix compiler warnings Remove redundant code - make a global into a static Ticket #262 - pid file not removed with systemd fix mozldap build issues Ticket #264 - upgrade needs better check for "server is running" Ticket #263 - add systemd include directive bump version to 1.2.10.rc1 change version to 1.2.10.a8 Ticket #272 - add tombstonenumsubordinates to schema bump version to 1.2.10.rc1 Ticket #161 - Review and address latest Coverity issues Ticket #22 - RFE: Support sendmail LDAP routing schema Ticket #29 - Samba3-schema is missing sambaTrustedDomainPassword Ticket #273 - ruv tombstone searches don't work after reindex entryrdn Ticket #273 - ruv tombstone searches don't work after reindex entryrdn fix a couple of minor coverity issues Ticket #87 - Manpages fixes Ticket #13 - slapd process exits when put the database on read only mode while updates are coming to the server Ticket #55 - Limit of 1024 characters for nsMatchingRule Ticket #277 - cannot set repl referrals or state Ticket #278 - Schema replication update failed: Invalid syntax Ticket #277 - cannot set repl referrals or state Ticket #279 - filter normalization does not use matching rules Ticket #280 - extensible binary filters do not work Ticket #281 - TLS not working with latest openldap coverity 12488 Resource leak In attr_index_config(): Leak of memory or pointers to system resources bump version to 1.2.10.rc2 fix compiler warning in acct policy plugin bump version to 1.2.11.a1 Ticket #294 - 389 DS Segfaults during replica install in FreeIPA coverity uninit var and resource leak Revert "Ticket #111 - ability to control behavior of modifyTimestamp/modifiersName" Revert "Ticket #167 - Mixing transaction and non-transaction plugins can cause deadlock" Revert "Change referential integrity to be a betxnpostoperation plugin" Revert "make memberof transaction aware and able to be a betxnpostoperation plugin" Revert "pass the plugin config entry to the plugin init function" coverity 12559 Uninitialized pointer read In ldbm_back_modify(): Reads an uninitialized pointer or its target Ticket #281 - TLS not working with latest openldap Trac Ticket #298 - crash when replicating orphaned tombstone entry Ticket #301 - implement transaction support using thread local storage init txn thread private data for all database modes handle null smods memleak in mep_parse_config_entry memleak in normalize_mods2bvals destroy the entry cache and dn cache in the dse post op delete callback Ticket #289 - allow betxn plugin config changes coverity 12563 Read from pointer after free Ticket 317 - RHDS fractional replication with excluded password policy attributes leads to wrong error messages. Ticket #305 - Certain CMP operations hang or cause ns-slapd to crash Ticket #320 - allow most plugins to be betxn plugins Ticket #324 - Sync with group attribute containing () fails Ticket #324 - redux: Sync with group attribute containing () fails Ticket #316 and Ticket #70 - add post add/mod and AD add callback hooks Ticket #261 - Add Solaris i386 Ticket #331 - transaction errors with db 4.3 and db 4.2 schema def must have DESC '' - close paren must be preceded by space Ticket #336 - [abrt] 389-ds-base-1.2.10.4-2.fc16: index_range_read_ext: Process /usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV) Ticket #336 - [abrt] 389-ds-base-1.2.10.4-2.fc16: index_range_read_ext: Process /usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV) Ticket #347 - IPA dirsvr seg-fault during system longevity test Ticket #348 - crash in ldap_initialize with multiple threads Ticket #351 - use betxn plugins by default Ticket #353 - coverity 12625-12629 - leaks, dead code, unchecked return Ticket #348 - crash in ldap_initialize with multiple threads Ticket #351 - use betxn plugins by default bump version to 1.3.0.a1 Ticket #358 - managed entry doesn't delete linked entry Trac Ticket #359 - Database RUV could mismatch the one in changelog under the stress console .2 is still compatible with 389 .3 for now Ticket #321 - krbExtraData is being null modified and replicated on each ssh login Ticket #360 - ldapmodify returns Operations error Ticket #382 - DS Shuts down intermittently Ticket #383 - usn + mmr = deletions are not replicated Ticket #389 - ADD operations not in audit log Ticket #360 - ldapmodify returns Operations error - fix delete caching fix coverity issues with uninit vals, no return checking Ticket #360 - ldapmodify returns Operations error - fix delete caching improve txn test index handling Ticket #387 - managed entry sometimes doesn't delete the managed entry Ticket #387 - managed entry sometimes doesn't delete the managed entry Ticket 378 - unhashed#user#password visible after changing password Ticket #405 - referint modrdn not working if case is different Ticket #406 - Impossible to rename entry (modrdn) with Attribute Uniqueness plugin enabled Ticket #410 - Referential integrity plug-in does not work when update interval is not zero Ticket #425 - support multiple winsync plugins Ticket #430 - server to server ssl client auth broken with latest openldap Ticket #426 - support posix schema for user and group sync coverity - mbo dead code - winsync leaks, deadcode, null check, test code Ticket #355 - winsync should not delete entry that appears to be out of scope Ticket #440 - periodic dirsync timed event causes server to loop repeatedly fix mem leaks with parent dn log message, setting winsync windows domain coverity - posix winsync mem leaks, null check, deadcode, null ref, use after free fix coverity resource leak in windows_plugin_add Ticket #426 - support posix schema for user and group sync Ticket #374 - consumer can go into total update mode for no reason Ticket #461 - fix build problem with mozldap c sdk Ticket #462 - add test for include file mntent.h Ticket #463 - different parameters of getmntent in Solaris add eclipse generated files to the ignore list fix compiler warnings in ticket 374 code Ticket #491 - multimaster_extop_cleanruv returns wrong error codes minor fixes for bdb 4.2/4.3 and mozldap Ticket #322 - Create DOAP description for the 389 Directory Server project Ticket #508 - part 1 - lock-free access to FrontendConfig structure Ticket #508 - part 2 - lock-free access to FrontendConfig structure Ticket #612 - improve dbgen rdn generation, output Ticket #613 - ldclt: add timestamp, interval, nozeropad, other improvements Ticket #47299 - allow cmdline scripts to work with non-root user Ticket #47302 - get rid of sbindir start/stop/restart slapd scripts Ticket #47303 - start/stop/restart dirsrv scripts should report and error if no instances Ticket #47302 - get rid of sbindir start/stop/restart slapd scripts Ticket #565 - turbo mode and replication - allow disable of turbo mode Ticket #633 - allow nsslapd-nagle to be disabled, and also tcp cork Ticket #613 - ldclt: add timestamp, interval, nozeropad, other improvements Ticket #47312 - replace PR_GetFileInfo with PR_GetFileInfo64 Ticket #574 - problems with dbcachesize disk space calculation Ticket #47312 - replace PR_GetFileInfo with PR_GetFileInfo64 Ticket #514 - investigate connection locking Ticket #513 - recycle operation pblocks Ticket #47319 - make connection buffer size adjustable Ticket #47320 - put conn on work_q not poll list if conn has buffered more_data Ticket #47299 - allow cmdline scripts to work with non-root user Ticket #47336 - logconv.pl -m not working for all stats Ticket #47341 - logconv.pl -m time calculation is wrong Ticket #47348 - add etimes to per second/minute stats Ticket #47349 - DS instance crashes under a high load Ticket #47362 - ipa upgrade selinuxusermap data not replicating Ticket #47359 - new ldap connections can block ldaps and ldapi connections Ticket #47359 - new ldap connections can block ldaps and ldapi connections Ticket #47359 - new ldap connections can block ldaps and ldapi connections Ticket #47378 - fix recent compiler warnings Ticket #47387 - improve logconv.pl performance with large access logs Ticket #47377 - make listen backlog size configurable Ticket #47375 - flush_ber error sending back start_tls response will deadlock Ticket #47409 - allow setting db deadlock rejection policy Ticket #47409 - allow setting db deadlock rejection policy Ticket #47409 - allow setting db deadlock rejection policy Ticket #47387 - improve logconv.pl performance with large access logs Ticket #47410 - changelog db deadlocks with DNA and replication Ticket #47392 - ldbm errors when adding/modifying/deleting entries Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold Ticket #47424 - Replication problem with add-delete requests on single-valued attributes Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold Ticket #47448 - Segfault in 389-ds-base-1.3.1.4-1.fc19 when setting up FreeIPA replication Ticket #47455 - valgrind - value mem leaks, uninit mem usage Ticket #47456 - delete present values should append values to deleted values fix coverity 11895 - null deref - caused by fix to ticket 47392 fix coverity 11915 - dead code - introduced with fix for ticket 346 Ticket #47455 - valgrind - value mem leaks, uninit mem usage Bug 999634 - ns-slapd crash due to bogus DN Ticket #47455 - valgrind - value mem leaks, uninit mem usage Ticket #47516 replication stops with excessive clock skew Ticket #47504 idlistscanlimit per index/type/value Ticket #47504 idlistscanlimit per index/type/value Ticket #47504 idlistscanlimit per index/type/value Ticket #47501 logconv.pl uses /var/tmp for BDB temp files Ticket 47533 logconv: some stats do not work across server restarts Ticket #47515 Fedora 20: setup-ds-admin.pl Ticket #47551 logconv: -V does not produce unindexed search report bump autoconf to 2.69, automake to 1.13.4, libtool to 2.4.2 ticket #47550 wip Ticket #47550 logconv: failed logins: Use of uninitialized value in numeric comparison at logconv.pl line 949 Ticket #47559 hung server - related to sasl and initialize Ticket #47585 Replication Failures related to skipped entries due to cleaned rids Revert "Ticket #47559 hung server - related to sasl and initialize" Ticket #47596 attrcrypt fails to find unlocked key Ticket #47605 CVE-2013-4485: DoS due to improper handling of ger attr searches bump version to 1.3.3.a1 Ticket #381 Recognize compressed log files Ticket 47599 - Reduce lock scope in retro changelog plug-in bump version to 1.3.3.a2 Ticket #47596 attrcrypt fails to find unlocked key Ticket #47623 fix memleak caused by 47347 Ticket #47623 fix memleak caused by 47347 Ticket #47631 objectclass may, must lists skip rest of objectclass once first is found in sup Ticket #47645 reset stack, op fields to NULL - clean up stacks at shutdown - free unused plugin config entries Ticket #47634 support AttributeTypeDescription USAGE userApplications distributedOperation dSAOperation Ticket #47647 remove bogus definition in 60rfc3712.ldif Ticket #47657 add schema test suite and tests for Ticket #47634 Ticket #47675 logconv errors when search has invalid bind dn Ticket #47516 replication stops with excessive clock skew Ticket #47374 - flush.pl is not included in perl5 Ticket #471 logconv.pl tool removes the access logs contents if "-M" is not correctly used Ticket #47692 single valued attribute replicated ADD does not work Ticket #47773 - mem leak in do_bind when there is an error Ticket #47774 mem leak in do_search - rawbase not freed upon certain errors Ticket #47772 empty modify returns LDAP_INVALID_DN_SYNTAX Ticket #47772 empty modify returns LDAP_INVALID_DN_SYNTAX Ticket #47831 - server restart wipes out index config if there is a default index Ticket #47692 single valued attribute replicated ADD does not work Ticket 47446 - logconv.pl memory continually grows Ticket #47892 coverity defects found in 1.3.3.1 support nunc-stans for basic accept and read events get rid of lfds - use nunc-stans/ subdir for nunc-stans headers Ticket #48122 nunc-stans FD leak fix compiler warnings when using nunc-stans Ticket #48178 add config param to enable nunc-stans Revert "Ticket #48178 add config param to enable nunc-stans" Ticket #48178 add config param to enable nunc-stans Ticket #48122 nunc-stans FD leak fix build with nunc-stans fix MEMPOOL_EXPERIMENTAL build Ticket #48224 - logconv.pl should handle *.tar.xz, *.txz, *.xz log files Ticket #48224 - redux - logconv.pl should handle *.tar.xz, *.txz, *.xz log files Ticket #48224 - redux - logconv.pl should handle *.tar.xz, *.txz, *.xz log files Ticket #48224 - redux 2 - logconv.pl should handle *.tar.xz, *.txz, *.xz log files Ticket #48227 rpm.mk doesn't build srpms for 389-ds and nunc-stans Simo Sorce (8): Fix Makefile so that make dist works Change prereleases to use date+git commit format Add make rpms target Ignore build artifacts Updating .gitignore Include necessary autogenerated files Ticket #48188 - segfault in ns-slapd due to accessing Slapi_DN freed in pre bind plug-in Fix out of tree build Simon Pichugin (22): Ticket #47569 - Added a testcase to ACL testsuite Ticket 48251 - Improve the basic test suite Ticket 47761 - Added a few testcases to the basic testsuite Ticket #47553 - Automated the verification procedure Ticket 48264 - Ticket 47553 tests refactoring Ticket 47957 - Add replication test suite for a wait async feature Ticket 48302 - ds-logpipe.py with wrong arguments - python exception in the output Ticket #48748 - Fix memory_leaks test suite teardown failure Ticket 48368 - Resolve the py.test conflicts with the create_test.py issue Ticket 48808 - Add test case Ticket 48078 - CI test - paged_results - TET part Ticket 48363 - CI test - add test suite Ticket 48326 - Move CI test to config test suite and refactor Ticket 48832 - CI test - fix ticket failures Ticket 47664 - Move CI test to the pr suite and refactor Ticket 48752 - Add CI test Ticket 48191 - Move CI test to the pr suite and refactor Ticket 47824 - Remove CI test from tickets and add logging Ticket 48943 - Add CI Test for the password test suite Ticket 48832 - Fix pytest compatibility in CI tests Ticket 48832 - Fix timing and localhost issues Ticket 47976 - Add fixed CI test case Stanislav Zidek (1): Ticket #48289 - 389-ds-base: ldclt-bin killed by SIGSEGV Thierry Bordaz (25): CVE-2015-1854 389ds-base: access control bypass with modrdn Ticket 47927: Uniqueness plugin: should allow to exclude some subtrees from its scope Ticket 47833: TEST CASE only (modrdn fails if renamed entry member of a group and is out of memberof scope) Ticket 48249: sync_repl uuid may be invalid Ticket 48266: Fractional replication evaluates several times the same CSN Ticket 48266: coverity issue Ticket 47978: Deadlock between two MODs on the same entry between entry cache and backend lock Ticket 47976: deadlock in mep delete post op Ticket 48362: With exhausted range, part of DNA shared configuration is deleted after server restart Ticket 48270: fail to index an attribute with a specific matching rule Ticket 48270: test case Ticket 48445: keep alive entries can break replication Ticket 48420: change severity of some messages related to "keep alive" entries ticket: 48497 extended search without MR indexed attribute prevents later indexing with that MR Ticket 48497 test case Ticket 48746: Crash when indexing an attribute with a matching rule Ticket 48597 Deadlock when rebuilding the group of authorized replication managers Ticket 48836 replication session fails because of permission denied Ticket 48844 Regression introduced in matching rules by DS 48746 Ticket 48745 Matching Rule caseExactIA5Match indexes incorrectly values with upper cases Ticket 48752: Page result search should return empty cookie if there is no returned entry Ticket 48880 - adding pre/post extop ability Ticket 48891 ns-slapd crashes during the shutdown after adding attribute with a matching rule Ticket 48891 ns-slapd crashes during the shutdown after adding attribute with a matching rule Ticket 48928 log of page result cookie should log empty cookie with a different value than 0 Thierry bordaz (tbordaz) (60): Ticket #487 - Possible to add invalid attribute values to PAM PTA plugin configuration Ticket 600 - Server should return unavailableCriticalExtension when processing a badly formed critical control Ticket 616 - High contention on computed attribute lock Ticket 618 - Crash at shutdown while stopping replica agreements Ticket 512 - improve performance of vattr code Ticket 205 - snmp counters index strings for multiple network interfaces with ip addr and tcp port pairs Ticket 47325 - Crash at shutdown on a replica aggrement Ticket 47331 - Self entry access ACI not working properly Ticket 47361 - Empty control list causes LDAP protocol error is thrown Ticket 47354 - Indexed search are logged with 'notes=U' in the access logs Ticket 47350 - Allow search to look up 'in memory RUV' Compilation warnings (ticket 47350) Ticket 47350 - (Cont.) Allow search to look up 'in memory RUV' Ticket 564 - Is ldbm_txn_ruv_modify_context still required Ticket 47393 - Attribute are not encrypted on a consumer after a full initialization Ticket 208 - [RFE] Roles with explicit scoping in RHDS Ticket 47433 - With SeLinux, setup-ds.pl and setup-ds-admin.pl fail to detect already ranged labelled ports Ticket 512 - improve performance of vattr code Ticket 47489 - Under specific values of nsDS5ReplicaName, replication may get broken or updates missing Ticket 47490 - Schema replication between DS versions may overwrite newer base schema Ticket 47398 - memberOf on a user is converted to lowercase Ticket 47560: fixup memberof task does not work: task entry not added Ticket 47586 - CI tests: test case for 47490 Ticket 47586 - CI tests: follow up Ticket 47586 - Need to rebind after a stop (fix to run direct python script) Ticket 47575 - CI test: add test case for ticket47560 Ticket 47628: port testcases to new DirSrv interface Ticket 47651 - Finaliser to remove instances backups Ticket 47668 - test: port ticket47490_test to Replica/Agreement interface (47600) Ticket 47653 - Need a way to allow users to create entries assigned to themselves. Ticket 47676 : Replication of the schema fails 'master branch' -> 1.2.11 or 1.3.1 Ticket 47676 : (cont.) Replication of the schema fails 'master branch' -> 1.2.11 or 1.3.1 Ticket 47573: schema push can be erronously prevented Update test cases due to new modules: Schema, tasks, plugins and index Ticket 47619: cannot reindex retrochangelog Ticket 47699: Propagate plugin precedence to all registered function types Ticket 47553: Enhance ACIs to have more control over MODRDN operations Ticket 47721 - Schema Replication Issue Ticket 47721 - Schema Replication Issue (follow up + cleanup) Ticket 47721 - Schema Replication Issue (follow up) Ticket 47787 - A replicated MOD fails (Unwilling to perform) if it targets a tombstone Ticket 47808 - If be_txn plugin fails in ldbm_back_add, adding entry is double freed Ticket 47815 - Add operations rejected by betxn plugins remain in cache Ticket 47829: memberof scope: allow to exclude subtrees Ticket 47823 - attribute uniqueness enforced on all subtrees Ticket 47797 - DB deadlock when two threads (on separated backend) try to record changes in retroCL Ticket 47797 - fix the indentation Ticket 47871 - 389-ds-base-1.3.2.21-1.fc20 crashed over the weekend Ticket 47889 - DS crashed during ipa-server-install on test_ava_filter Ticket 47787: Make the test case more robust Ticket 47920: Encoding of SearchResultEntry is missing tag Ticket 47553: Enhance ACIs to have more control over MODRDN operations Ticket 47490 - test case failing if 47721 is also fixed Ticket 47942: DS hangs during online total update Ticket 47901: After total init, nsds5replicaLastInitStatus can report an erroneous error status (like 'Referral') Ticket 47988: Schema learning mechanism, in replication, unable to extend an existing definition Ticket 47988: test case Ticket 47828: DNA scope: allow to exlude some subtrees Ticket 47936: Create a global lock to serialize write operations over several backends Ticket 48127: Using RPM, allows non root user to create/remove DS instance Viktor Ashirov (4): Ticket 48747 - dirsrv service fails to start when nsslapd-listenhost is configured Ticket 48889 - ldclt - fix man page and usage info Ticket 48895 - tests package should be noarch Ticket #48918 - Upgrade to 389-ds-base >= 1.3.5.5 doesn't install 389-ds-base-snmp William B (1): Ticket #48026 - Support for uniqueness plugin to enforce uniqueness on a set of attributes. William Brown (89): Ticket 48313 - MEP suite tests for major functionality Ticket #48317: SELinux port labeling retry attempts are excessive Ticket 48311 -nunc-stans: Attempt to release connection that is not acquired Ticket 48145 - RFE Add log file for rejected changes Ticket 47840 - add configure option to disable instance specific scripts Ticket 48350 - configure.ac add options for debbuging and security analysis / hardening. Ticket 48351 - Fix buffer overflow error when reading url with len 0 Ticket 48332 - allow users to specify to relax the FQDN constraint Ticket 48145 - Allow merged logging of audit events Ticket 48280 - enable logging of internal ops in the audit log Ticket 48333 - Simplify accessiblitiy of tests for ds Ticket 48372 - ASAN invalid write in dblayer.c Ticket 48387 - ASAN invalid read in cos_cache.c Ticket 48395 - ASAN - Use after free in uiduniq 7bit.c Ticket 48397 - ds make rpms doesn't work in a prefixed build env Ticket 48397 - Fix cwd and rpmsources target Ticket 48398 - Coverity defect 13352 - Resource leak in auditlog.c Ticket 47968 - RFE send logs to journald Ticket 47968 - Change to slapi_UTF8NCASECMP Ticket 47968 - Fix for format string in syslog. Ticket 48448 - dirsrv start-stop fail in certain shell environments. Ticket 48363 - Support for rfc3673 '+' to return operational attributes Ticket 48147 - Install section for dirsrv@.service template Ticket 47944 - Implement sd_notify for systemd No ticket: One line rpm fix Ticket 47968 - Fix for issues with multiple log backends Ticket 47968 - When systemd libs not found, error instead of continuing. Ticket 48566 - acl.c attrFilterArray maybe uninitialised. Ticket 48384 - Fix dblayer_is_cachesize_sane and dblayer_sys_pages for linux Ticket 47977 - Make systemd components depend on with-systemd Ticket 47951 - Add PIDFile option to .service Ticket 48537 - undefined reference to `abstraction_increment' Ticket 48386 - Clean up dsktune code Ticket 48383 - import tasks with dynamic buffer sizes Ticket 48665 - Prevent sefault in ldbm_instance_modify_config_entry Ticket 47982 - improve timestamp resolution in logs Ticket 47982 - HR Log timers, regression fix for subsystem logging Ticket 48710 - auto-dn-suffix unrecognized option Ticket 48769 - RFE: Be_txn extended operation plugin type Ticket 48769 - Fix white space in extendedop.c Ticket 47840 - default instance scripts if undefined. Ticket 48342 - DNA Deadlock test cases Ticket 48342 - DNA: deadlock during DNA_EXTEND_EXOP_REQUEST_OID Ticket 48342 - Prevent transaction abort if a transaction has not begun Ticket 48450 - Systemd password agent support Ticket 47968 - Disable journald logs by default Ticket 48801 - ASAN errors during tests Ticket 48798 - Enable DS to offer weaker DH params in NSS Ticket 48447 - with-initddir should accept no Ticket 48770 - Improve extended op plugin handling Ticket 48770 - Improve extended op plugin handling Ticket 47951 - Fix startpid from altering dev/null Ticket 48350 - Integrate ASAN into our rpm build process Ticket 48818 - In docker, no one can hear your process hang. Ticket 48825 - Configure make generate invalid makefile Ticket 48826 - 52updateAESplugin.pl may fail on older versions of perl Ticket 48818 - Fix case where return code is always -1 Ticket 48829 - Add gssapi sasl replication bind test Ticket 48617 - Server ram checks work in isolation Ticket 48754 - ldclt should support -H Ticket 48834 - Fix jenkins: discared qualifier on auditlog.c Ticket 48617 - Coverity fixes Ticket 48846 - Rlimit checks should detect RLIM_INFINITY Ticket 48846 - Older kernels do not expose memavailable Ticket 48846 - 32 bit systems set low vmsize Ticket 48849 - Systemd introduced incompatible changes that breaks ds build Ticket 48850 - Correct memory leaks in pwdhash-bin and ns-slapd Ticket 48747 - dirsrv service fails to start when nsslapd-listenhost is configured Ticket 48855 - Add basic pwdPolicy tests Ticket 48858 - Segfault changing nsslapd-rootpw Ticket 48336 - setup-ds should detect if port is already defined Ticket 48872 - Fix segfault and use after free in plugin shutdown Ticket 48863 - remove check for vmsize from util_info_sys_pages Ticket 48799 - Test cases for objectClass values being dropped. Ticket 48870 - Correct plugin execution order due to changes in exop Ticket 48404 - libslapd owned by libs and devel Ticket 48877 - Fixes for RPM spec with spectool Ticket 48449 - Import readNSState from richm's repo Ticket 48873 - Backend should accept the reduced cache allocation when issane == 1 Ticket 47982 - Fix log hr timestamps when invalid value is set in cn=config Ticket 48354 - Review of default ACI in the directory server Ticket 48893 - cn=config should not have readable components to anonymous Ticket 48902 - Strdup pwdstoragescheme name to prevent misbehaving plugins Ticket 48916 - DNA Threshold set to 0 causes SIGFPE Ticket 48912 - ntUserNtPassword schema Ticket 48920 - Memory leak in pwdhash-bin Ticket 48925 - slapd crash with SIGILL: Dsktune should detect lack of CMPXCHG16B Ticket 48336 - Missing semanage dependency Ticket 48450 - Add prestart work around for systemd ask password William E Brown (1): Tests to support ticket 48026 amsharma (1): Author: amsharma <amsharma(a)redhat.com> Date: Thu Aug 6 14:47:01 2015 +0530 nturpin (1): Ticket #3: acl cache overflown problem root (4): Bug 480787 - Autoconf parameter --with and --without Ticket #326 - MemberOf plugin should work on all backends Ticket #337 - RFE - Improve CLEANRUV functionality Ticket #216 - RFE - Disable replication agreements spichugi (1): Ticket 48266: test case --- .gitignore | 160 389-doap.rdf | 47 EXCEPTION | 16 LICENSE | 52 LICENSE.GPLv2 | 340 LICENSE.GPLv3+ | 674 LICENSE.openssl | 11 Makefile.am | 741 Makefile.in | 8744 +- README | 11 VERSION.sh | 36 aclocal.m4 | 7491 - autogen.sh | 108 buildnum.pl | 35 compile | 245 config.guess | 768 config.h.in | 52 config.sub | 452 configure |41158 ++++------ configure.ac | 287 depcomp | 637 dirsrv.pc.in | 7 dirsrvtests/README | 28 dirsrvtests/cmd/dsadm/dsadm.py | 543 dirsrvtests/create_test.py | 710 dirsrvtests/tests/data/README | 11 dirsrvtests/tests/data/basic/dse.ldif.broken | 95 dirsrvtests/tests/data/ticket47953/ticket47953.ldif | 27 dirsrvtests/tests/data/ticket47988/schema_ipa3.3.tar.gz |binary dirsrvtests/tests/data/ticket47988/schema_ipa4.1.tar.gz |binary dirsrvtests/tests/data/ticket48212/example1k_posix.ldif |17017 ++++ dirsrvtests/tests/stress/README | 13 dirsrvtests/tests/stress/__init__.py | 1 dirsrvtests/tests/stress/reliabilty/reliab_7_5_test.py | 568 dirsrvtests/tests/stress/reliabilty/reliab_conn_test.py | 289 dirsrvtests/tests/stress/replication/mmr_01_4m-2h-4c_test.py | 969 dirsrvtests/tests/stress/replication/mmr_01_4m_test.py | 572 dirsrvtests/tests/suites/acct_usability_plugin/acct_usability_test.py | 84 dirsrvtests/tests/suites/acctpolicy_plugin/acctpolicy_test.py | 81 dirsrvtests/tests/suites/acl/acl_test.py | 1059 dirsrvtests/tests/suites/attr_encryption/attr_encrypt_test.py | 84 dirsrvtests/tests/suites/attr_uniqueness_plugin/attr_uniqueness_test.py | 236 dirsrvtests/tests/suites/automember_plugin/automember_test.py | 84 dirsrvtests/tests/suites/basic/basic_test.py | 776 dirsrvtests/tests/suites/betxns/betxn_test.py | 243 dirsrvtests/tests/suites/chaining_plugin/chaining_test.py | 81 dirsrvtests/tests/suites/clu/clu_test.py | 97 dirsrvtests/tests/suites/clu/db2ldif_test.py | 72 dirsrvtests/tests/suites/collation_plugin/collatation_test.py | 81 dirsrvtests/tests/suites/config/config_test.py | 361 dirsrvtests/tests/suites/cos_plugin/cos_test.py | 81 dirsrvtests/tests/suites/deref_plugin/deref_test.py | 81 dirsrvtests/tests/suites/disk_monitoring/disk_monitor_test.py | 81 dirsrvtests/tests/suites/distrib_plugin/distrib_test.py | 81 dirsrvtests/tests/suites/dna_plugin/dna_test.py | 229 dirsrvtests/tests/suites/ds_logs/ds_logs_test.py | 81 dirsrvtests/tests/suites/dynamic-plugins/plugin_tests.py | 2406 dirsrvtests/tests/suites/dynamic-plugins/stress_tests.py | 146 dirsrvtests/tests/suites/dynamic-plugins/test_dynamic_plugins.py | 480 dirsrvtests/tests/suites/filter/filter_test.py | 137 dirsrvtests/tests/suites/filter/rfc3673_all_oper_attrs_test.py | 209 dirsrvtests/tests/suites/get_effective_rights/ger_test.py | 81 dirsrvtests/tests/suites/gssapi_repl/gssapi_repl_test.py | 217 dirsrvtests/tests/suites/ldapi/__init__.py | 1 dirsrvtests/tests/suites/ldapi/ldapi_test.py | 81 dirsrvtests/tests/suites/linkedattrs_plugin/linked_attrs_test.py | 81 dirsrvtests/tests/suites/mapping_tree/mapping_tree_test.py | 81 dirsrvtests/tests/suites/memberof_plugin/memberof_test.py | 175 dirsrvtests/tests/suites/memory_leaks/range_search_test.py | 138 dirsrvtests/tests/suites/monitor/monitor_test.py | 81 dirsrvtests/tests/suites/paged_results/paged_results_test.py | 1317 dirsrvtests/tests/suites/paged_results/sss_control.py | 127 dirsrvtests/tests/suites/pam_passthru_plugin/pam_test.py | 81 dirsrvtests/tests/suites/passthru_plugin/passthru_test.py | 81 dirsrvtests/tests/suites/password/password_test.py | 131 dirsrvtests/tests/suites/password/pwdAdmin_test.py | 434 dirsrvtests/tests/suites/password/pwdPolicy_test.py | 224 dirsrvtests/tests/suites/password/pwd_change_policytest.py | 240 dirsrvtests/tests/suites/password/pwp_history_test.py | 264 dirsrvtests/tests/suites/posix_winsync_plugin/posix_winsync_test.py | 81 dirsrvtests/tests/suites/psearch/psearch_test.py | 81 dirsrvtests/tests/suites/referint_plugin/referint_test.py | 81 dirsrvtests/tests/suites/replication/cleanallruv_test.py | 1211 dirsrvtests/tests/suites/replication/wait_for_async_feature_test.py | 287 dirsrvtests/tests/suites/replsync_plugin/repl_sync_test.py | 81 dirsrvtests/tests/suites/resource_limits/res_limits_test.py | 81 dirsrvtests/tests/suites/retrocl_plugin/retrocl_test.py | 81 dirsrvtests/tests/suites/reverpwd_plugin/reverpwd_test.py | 81 dirsrvtests/tests/suites/roles_plugin/roles_test.py | 81 dirsrvtests/tests/suites/rootdn_plugin/rootdn_plugin_test.py | 785 dirsrvtests/tests/suites/sasl/sasl_test.py | 81 dirsrvtests/tests/suites/schema/test_schema.py | 213 dirsrvtests/tests/suites/schema_reload_plugin/schema_reload_test.py | 81 dirsrvtests/tests/suites/snmp/snmp_test.py | 81 dirsrvtests/tests/suites/ssl/ssl_test.py | 81 dirsrvtests/tests/suites/syntax_plugin/syntax_test.py | 81 dirsrvtests/tests/suites/usn_plugin/usn_test.py | 81 dirsrvtests/tests/suites/views_plugin/views_test.py | 81 dirsrvtests/tests/suites/vlv/vlv_test.py | 81 dirsrvtests/tests/suites/whoami_plugin/whoami_test.py | 81 dirsrvtests/tests/tickets/finalizer.py | 64 dirsrvtests/tests/tickets/ticket1347760_test.py | 469 dirsrvtests/tests/tickets/ticket142_test.py | 307 dirsrvtests/tests/tickets/ticket365_test.py | 176 dirsrvtests/tests/tickets/ticket47313_test.py | 158 dirsrvtests/tests/tickets/ticket47384_test.py | 166 dirsrvtests/tests/tickets/ticket47431_test.py | 245 dirsrvtests/tests/tickets/ticket47462_test.py | 433 dirsrvtests/tests/tickets/ticket47490_test.py | 663 dirsrvtests/tests/tickets/ticket47536_test.py | 522 dirsrvtests/tests/tickets/ticket47553_test.py | 166 dirsrvtests/tests/tickets/ticket47560_test.py | 238 dirsrvtests/tests/tickets/ticket47573_test.py | 328 dirsrvtests/tests/tickets/ticket47619_test.py | 194 dirsrvtests/tests/tickets/ticket47640_test.py | 121 dirsrvtests/tests/tickets/ticket47653MMR_test.py | 449 dirsrvtests/tests/tickets/ticket47653_test.py | 356 dirsrvtests/tests/tickets/ticket47669_test.py | 244 dirsrvtests/tests/tickets/ticket47676_test.py | 381 dirsrvtests/tests/tickets/ticket47714_test.py | 242 dirsrvtests/tests/tickets/ticket47721_test.py | 440 dirsrvtests/tests/tickets/ticket47781_test.py | 171 dirsrvtests/tests/tickets/ticket47787_test.py | 537 dirsrvtests/tests/tickets/ticket47808_test.py | 148 dirsrvtests/tests/tickets/ticket47815_test.py | 163 dirsrvtests/tests/tickets/ticket47819_test.py | 283 dirsrvtests/tests/tickets/ticket47823_test.py | 980 dirsrvtests/tests/tickets/ticket47828_test.py | 655 dirsrvtests/tests/tickets/ticket47829_test.py | 615 dirsrvtests/tests/tickets/ticket47833_test.py | 263 dirsrvtests/tests/tickets/ticket47838_test.py | 837 dirsrvtests/tests/tickets/ticket47869MMR_test.py | 323 dirsrvtests/tests/tickets/ticket47871_test.py | 205 dirsrvtests/tests/tickets/ticket47900_test.py | 328 dirsrvtests/tests/tickets/ticket47910_test.py | 205 dirsrvtests/tests/tickets/ticket47920_test.py | 176 dirsrvtests/tests/tickets/ticket47921_test.py | 152 dirsrvtests/tests/tickets/ticket47927_test.py | 296 dirsrvtests/tests/tickets/ticket47931_test.py | 207 dirsrvtests/tests/tickets/ticket47937_test.py | 171 dirsrvtests/tests/tickets/ticket47950_test.py | 206 dirsrvtests/tests/tickets/ticket47953_test.py | 122 dirsrvtests/tests/tickets/ticket47963_test.py | 188 dirsrvtests/tests/tickets/ticket47966_test.py | 214 dirsrvtests/tests/tickets/ticket47970_test.py | 141 dirsrvtests/tests/tickets/ticket47973_test.py | 165 dirsrvtests/tests/tickets/ticket47976_test.py | 203 dirsrvtests/tests/tickets/ticket47980_test.py | 645 dirsrvtests/tests/tickets/ticket47981_test.py | 278 dirsrvtests/tests/tickets/ticket47988_test.py | 481 dirsrvtests/tests/tickets/ticket48005_test.py | 398 dirsrvtests/tests/tickets/ticket48013_test.py | 128 dirsrvtests/tests/tickets/ticket48026_test.py | 155 dirsrvtests/tests/tickets/ticket48109_test.py | 387 dirsrvtests/tests/tickets/ticket48170_test.py | 85 dirsrvtests/tests/tickets/ticket48194_test.py | 466 dirsrvtests/tests/tickets/ticket48212_test.py | 179 dirsrvtests/tests/tickets/ticket48214_test.py | 154 dirsrvtests/tests/tickets/ticket48226_test.py | 244 dirsrvtests/tests/tickets/ticket48228_test.py | 313 dirsrvtests/tests/tickets/ticket48233_test.py | 105 dirsrvtests/tests/tickets/ticket48234_test.py | 139 dirsrvtests/tests/tickets/ticket48252_test.py | 162 dirsrvtests/tests/tickets/ticket48265_test.py | 110 dirsrvtests/tests/tickets/ticket48266_test.py | 431 dirsrvtests/tests/tickets/ticket48270_test.py | 153 dirsrvtests/tests/tickets/ticket48294_test.py | 268 dirsrvtests/tests/tickets/ticket48295_test.py | 191 dirsrvtests/tests/tickets/ticket48312_test.py | 168 dirsrvtests/tests/tickets/ticket48325_test.py | 270 dirsrvtests/tests/tickets/ticket48342_test.py | 316 dirsrvtests/tests/tickets/ticket48354_test.py | 109 dirsrvtests/tests/tickets/ticket48362_test.py | 262 dirsrvtests/tests/tickets/ticket48366_test.py | 195 dirsrvtests/tests/tickets/ticket48369_test.py | 124 dirsrvtests/tests/tickets/ticket48370_test.py | 236 dirsrvtests/tests/tickets/ticket48383_test.py | 138 dirsrvtests/tests/tickets/ticket48497_test.py | 158 dirsrvtests/tests/tickets/ticket48637_test.py | 197 dirsrvtests/tests/tickets/ticket48665_test.py | 106 dirsrvtests/tests/tickets/ticket48745_test.py | 171 dirsrvtests/tests/tickets/ticket48746_test.py | 192 dirsrvtests/tests/tickets/ticket48755_test.py | 266 dirsrvtests/tests/tickets/ticket48759_test.py | 270 dirsrvtests/tests/tickets/ticket48784_test.py | 437 dirsrvtests/tests/tickets/ticket48798_test.py | 137 dirsrvtests/tests/tickets/ticket48799_test.py | 174 dirsrvtests/tests/tickets/ticket48808_test.py | 337 dirsrvtests/tests/tickets/ticket48844_test.py | 179 dirsrvtests/tests/tickets/ticket48891_test.py | 152 dirsrvtests/tests/tickets/ticket48893_test.py | 105 dirsrvtests/tests/tickets/ticket48916_test.py | 253 dirsrvtests/tests/tickets/ticket548_test.py | 421 dirsrvtests/tests/tmp/README | 10 include/base/crit.h | 35 include/base/dbtbase.h | 37 include/base/ereport.h | 35 include/base/eventhandler.h | 110 include/base/eventlog.h | 71 include/base/file.h | 67 include/base/fsmutex.h | 39 include/base/lexer.h | 126 include/base/nterr.h | 58 include/base/nterrors.h | 104 include/base/plist.h | 35 include/base/pool.h | 40 include/base/rwlock.h | 91 include/base/shexp.h | 35 include/base/systems.h | 388 include/base/systhr.h | 42 include/base/util.h | 35 include/i18n.h | 156 include/ldaputil/cert.h | 39 include/ldaputil/certmap.h | 35 include/ldaputil/dbconf.h | 39 include/ldaputil/encode.h | 39 include/ldaputil/errors.h | 39 include/ldaputil/extcmap.h | 52 include/ldaputil/init.h | 35 include/ldaputil/ldapauth.h | 39 include/ldaputil/ldaputil.h | 45 include/libaccess/acl.h | 39 include/libaccess/aclerror.h | 48 include/libaccess/acleval.h | 38 include/libaccess/aclglobal.h | 35 include/libaccess/aclproto.h | 60 include/libaccess/aclstruct.h | 37 include/libaccess/attrec.h | 35 include/libaccess/authdb.h | 35 include/libaccess/dbtlibaccess.h | 38 include/libaccess/dnfstruct.h | 35 include/libaccess/ipfstruct.h | 35 include/libaccess/las.h | 41 include/libaccess/nsauth.h | 35 include/libaccess/nsautherr.h | 37 include/libaccess/nserror.h | 37 include/libaccess/symbols.h | 47 include/libaccess/userauth.h | 35 include/libaccess/usi.h | 35 include/libaccess/usrcache.h | 35 include/libadmin/dbtlibadmin.h | 35 include/libadmin/libadmin.h | 42 include/netsite.h | 65 include/public/base/systems.h | 189 include/public/netsite.h | 35 include/public/nsacl/aclapi.h | 64 include/public/nsacl/acldef.h | 37 include/public/nsacl/nserrdef.h | 37 include/public/nsacl/plistdef.h | 35 include/public/nsapi.h | 94 install-sh | 526 ldap/admin/src/base-initconfig.in | 50 ldap/admin/src/initconfig.in | 41 ldap/admin/src/logconv.pl | 3708 ldap/admin/src/makemccvlvindexes | 35 ldap/admin/src/makevlvindex | 35 ldap/admin/src/makevlvsearch | 35 ldap/admin/src/scripts/10cleanupldapi.pl | 23 ldap/admin/src/scripts/10fixrundir.pl | 11 ldap/admin/src/scripts/20betxn.pl | 74 ldap/admin/src/scripts/50AES-pbe-plugin.ldif | 16 ldap/admin/src/scripts/50acctusabilityplugin.ldif | 21 ldap/admin/src/scripts/50automemberplugin.ldif | 15 ldap/admin/src/scripts/50contentsync.ldif | 23 ldap/admin/src/scripts/50fixNsState.pl | 240 ldap/admin/src/scripts/50managedentriesplugin.ldif | 16 ldap/admin/src/scripts/50nstombstonecsn.ldif | 7 ldap/admin/src/scripts/50refintprecedence.ldif | 4 ldap/admin/src/scripts/50rootdnaccesscontrolplugin.ldif | 15 ldap/admin/src/scripts/50smd5pwdstorageplugin.ldif | 5 ldap/admin/src/scripts/50targetuniqueid.ldif | 7 ldap/admin/src/scripts/50updateconfig.ldif | 10 ldap/admin/src/scripts/52updateAESplugin.pl | 87 ldap/admin/src/scripts/60upgradeconfigfiles.pl | 69 ldap/admin/src/scripts/60upgradeschemafiles.pl | 2 ldap/admin/src/scripts/70upgradefromldif.pl | 108 ldap/admin/src/scripts/80upgradednformat.pl.in | 307 ldap/admin/src/scripts/81changelog.pl | 34 ldap/admin/src/scripts/82targetuniqueidindex.pl | 52 ldap/admin/src/scripts/90subtreerename.pl | 21 ldap/admin/src/scripts/91reindex.pl.in | 103 ldap/admin/src/scripts/91subtreereindex.pl | 152 ldap/admin/src/scripts/DSCreate.pm.in | 797 ldap/admin/src/scripts/DSDialogs.pm | 53 ldap/admin/src/scripts/DSMigration.pm.in | 84 ldap/admin/src/scripts/DSSharedLib.in | 223 ldap/admin/src/scripts/DSUpdate.pm.in | 126 ldap/admin/src/scripts/DSUpdateDialogs.pm | 35 ldap/admin/src/scripts/DSUtil.pm.in | 942 ldap/admin/src/scripts/Dialog.pm | 35 ldap/admin/src/scripts/DialogManager.pm | 241 ldap/admin/src/scripts/DialogManager.pm.in | 212 ldap/admin/src/scripts/FileConn.pm | 35 ldap/admin/src/scripts/Inf.pm | 117 ldap/admin/src/scripts/Migration.pm.in | 57 ldap/admin/src/scripts/Resource.pm | 35 ldap/admin/src/scripts/Setup.pm.in | 60 ldap/admin/src/scripts/SetupDialogs.pm.in | 70 ldap/admin/src/scripts/SetupLog.pm | 43 ldap/admin/src/scripts/bak2db.in | 79 ldap/admin/src/scripts/bak2db.pl.in | 120 ldap/admin/src/scripts/cl-dump.pl | 35 ldap/admin/src/scripts/cleanallruv.pl.in | 125 ldap/admin/src/scripts/db2bak.in | 75 ldap/admin/src/scripts/db2bak.pl.in | 149 ldap/admin/src/scripts/db2index.in | 94 ldap/admin/src/scripts/db2index.pl.in | 184 ldap/admin/src/scripts/db2ldif.in | 160 ldap/admin/src/scripts/db2ldif.pl.in | 264 ldap/admin/src/scripts/dbmon.sh | 192 ldap/admin/src/scripts/dbverify.in | 70 ldap/admin/src/scripts/dn2rdn.in | 58 ldap/admin/src/scripts/dnaplugindepends.ldif | 3 ldap/admin/src/scripts/ds-logpipe.py | 255 ldap/admin/src/scripts/ds_selinux_enabled.in | 23 ldap/admin/src/scripts/ds_selinux_port_query.in | 69 ldap/admin/src/scripts/dscreate.map.in | 35 ldap/admin/src/scripts/dsorgentries.map.in | 35 ldap/admin/src/scripts/dsupdate.map.in | 35 ldap/admin/src/scripts/exampleupdate.ldif | 37 ldap/admin/src/scripts/exampleupdate.pl | 35 ldap/admin/src/scripts/exampleupdate.sh | 45 ldap/admin/src/scripts/failedbinds.py | 12 ldap/admin/src/scripts/fixup-linkedattrs.pl.in | 111 ldap/admin/src/scripts/fixup-memberof.pl.in | 120 ldap/admin/src/scripts/ldif2db.in | 109 ldap/admin/src/scripts/ldif2db.pl.in | 214 ldap/admin/src/scripts/ldif2ldap.in | 173 ldap/admin/src/scripts/logregex.py | 18 ldap/admin/src/scripts/migrate-ds.pl.in | 48 ldap/admin/src/scripts/monitor.in | 170 ldap/admin/src/scripts/ns-accountstatus.pl.in | 1040 ldap/admin/src/scripts/ns-activate.pl.in | 742 ldap/admin/src/scripts/ns-inactivate.pl.in | 625 ldap/admin/src/scripts/ns-newpwpolicy.pl.in | 188 ldap/admin/src/scripts/readnsstate.in | 100 ldap/admin/src/scripts/remove-ds.pl.in | 62 ldap/admin/src/scripts/repl-monitor.pl.in | 876 ldap/admin/src/scripts/restart-dirsrv.in | 28 ldap/admin/src/scripts/restoreconfig.in | 52 ldap/admin/src/scripts/saveconfig.in | 53 ldap/admin/src/scripts/schema-reload.pl.in | 110 ldap/admin/src/scripts/setup-ds.pl.in | 52 ldap/admin/src/scripts/setup-ds.res.in | 45 ldap/admin/src/scripts/start-dirsrv.in | 116 ldap/admin/src/scripts/status-dirsrv.in | 85 ldap/admin/src/scripts/stop-dirsrv.in | 71 ldap/admin/src/scripts/suffix2instance.in | 58 ldap/admin/src/scripts/syntax-validate.pl.in | 122 ldap/admin/src/scripts/template-bak2db.in | 45 ldap/admin/src/scripts/template-bak2db.pl.in | 140 ldap/admin/src/scripts/template-cleanallruv.pl.in | 28 ldap/admin/src/scripts/template-db2bak.in | 24 ldap/admin/src/scripts/template-db2bak.pl.in | 131 ldap/admin/src/scripts/template-db2index.in | 27 ldap/admin/src/scripts/template-db2index.pl.in | 228 ldap/admin/src/scripts/template-db2ldif.in | 80 ldap/admin/src/scripts/template-db2ldif.pl.in | 275 ldap/admin/src/scripts/template-dbverify.in | 42 ldap/admin/src/scripts/template-dn2rdn.in | 24 ldap/admin/src/scripts/template-fixup-linkedattrs.pl.in | 158 ldap/admin/src/scripts/template-fixup-memberof.pl.in | 169 ldap/admin/src/scripts/template-fixup-memberuid.pl.in | 154 ldap/admin/src/scripts/template-ldif2db.in | 24 ldap/admin/src/scripts/template-ldif2db.pl.in | 230 ldap/admin/src/scripts/template-ldif2ldap.in | 14 ldap/admin/src/scripts/template-monitor.in | 13 ldap/admin/src/scripts/template-ns-accountstatus.pl.in | 846 ldap/admin/src/scripts/template-ns-activate.pl.in | 846 ldap/admin/src/scripts/template-ns-inactivate.pl.in | 846 ldap/admin/src/scripts/template-ns-newpwpolicy.pl.in | 291 ldap/admin/src/scripts/template-restart-slapd.in | 12 ldap/admin/src/scripts/template-restoreconfig.in | 15 ldap/admin/src/scripts/template-saveconfig.in | 18 ldap/admin/src/scripts/template-schema-reload.pl.in | 158 ldap/admin/src/scripts/template-start-slapd.in | 12 ldap/admin/src/scripts/template-stop-slapd.in | 11 ldap/admin/src/scripts/template-suffix2instance.in | 16 ldap/admin/src/scripts/template-syntax-validate.pl.in | 169 ldap/admin/src/scripts/template-upgradedb.in | 18 ldap/admin/src/scripts/template-upgradednformat.in | 4 ldap/admin/src/scripts/template-usn-tombstone-cleanup.pl.in | 185 ldap/admin/src/scripts/template-verify-db.pl.in | 259 ldap/admin/src/scripts/template-vlvindex.in | 17 ldap/admin/src/scripts/upgradedb.in | 59 ldap/admin/src/scripts/upgradednformat.in | 71 ldap/admin/src/scripts/usn-tombstone-cleanup.pl.in | 126 ldap/admin/src/scripts/verify-db.pl.in | 239 ldap/admin/src/scripts/vlvindex.in | 64 ldap/admin/src/slapd.inf.in | 37 ldap/admin/src/template-initconfig.in | 18 ldap/admin/src/upgradeServer | 35 ldap/docs/LICENSE.txt | 132 ldap/docs/README.txt | 11 ldap/include/avl.h | 35 ldap/include/dblayer.h | 35 ldap/include/disptmpl.h | 47 ldap/include/ldaplog.h | 139 ldap/include/ldaprot.h | 35 ldap/include/ldbm.h | 35 ldap/include/lthread.h | 460 ldap/include/ntslapdregparms.h | 78 ldap/include/ntwatchdog.h | 105 ldap/include/portable.h | 35 ldap/include/proto-ntutil.h | 111 ldap/include/regex.h | 39 ldap/include/srchpref.h | 47 ldap/include/sysexits-compat.h | 35 ldap/ldif/50posix-winsync-plugin.ldif | 21 ldap/ldif/50replication-plugins.ldif | 27 ldap/ldif/Ace.ldif | 35 ldap/ldif/European.ldif | 35 ldap/ldif/Eurosuffix.ldif | 35 ldap/ldif/Example-roles.ldif | 35 ldap/ldif/Example-views.ldif | 35 ldap/ldif/Example.ldif | 35 ldap/ldif/template-baseacis.ldif.in | 4 ldap/ldif/template-bitwise.ldif.in | 6 ldap/ldif/template-dnaplugin.ldif.in | 2 ldap/ldif/template-dse.ldif.in | 218 ldap/ldif/template-pampta.ldif.in | 2 ldap/ldif/template-suffix-db.ldif.in | 1 ldap/ldif/template.ldif | 35 ldap/libraries/libavl/avl.c | 48 ldap/libraries/libavl/testavl.c | 38 ldap/schema/00core.ldif | 72 ldap/schema/01core389.ldif | 291 ldap/schema/02common.ldif | 61 ldap/schema/05rfc2927.ldif | 35 ldap/schema/05rfc4523.ldif | 14 ldap/schema/05rfc4524.ldif | 30 ldap/schema/06inetorgperson.ldif | 5 ldap/schema/10automember-plugin.ldif | 94 ldap/schema/10dna-plugin.ldif | 219 ldap/schema/10mep-plugin.ldif | 75 ldap/schema/10presence.ldif | 35 ldap/schema/10rfc2307.ldif | 35 ldap/schema/20subscriber.ldif | 35 ldap/schema/25java-object.ldif | 35 ldap/schema/28pilot.ldif | 35 ldap/schema/30ns-common.ldif | 39 ldap/schema/50ns-admin.ldif | 35 ldap/schema/50ns-certificate.ldif | 35 ldap/schema/50ns-directory.ldif | 42 ldap/schema/50ns-mail.ldif | 45 ldap/schema/50ns-value.ldif | 35 ldap/schema/50ns-web.ldif | 35 ldap/schema/60acctpolicy.ldif | 47 ldap/schema/60nis.ldif | 2 ldap/schema/60pam-plugin.ldif | 38 ldap/schema/60posix-winsync-plugin.ldif | 15 ldap/schema/60qmail.ldif | 24 ldap/schema/60radius.ldif | 132 ldap/schema/60rfc3712.ldif | 9 ldap/schema/60sabayon.ldif | 10 ldap/schema/60samba3.ldif | 36 ldap/schema/60sendmail.ldif | 54 ldap/schema/60sudo.ldif | 58 ldap/schema/99user.ldif | 35 ldap/schema/slapd-collations.conf | 269 ldap/servers/plugins/acct_usability/acct_usability.c | 428 ldap/servers/plugins/acct_usability/acct_usability.h | 34 ldap/servers/plugins/acctpolicy/acct_config.c | 175 ldap/servers/plugins/acctpolicy/acct_init.c | 299 ldap/servers/plugins/acctpolicy/acct_plugin.c | 497 ldap/servers/plugins/acctpolicy/acct_util.c | 277 ldap/servers/plugins/acctpolicy/acctpolicy.h | 98 ldap/servers/plugins/acctpolicy/sampleconfig.ldif | 40 ldap/servers/plugins/acctpolicy/samplepolicy.ldif | 27 ldap/servers/plugins/acl/ACL-Notes | 35 ldap/servers/plugins/acl/acl.c | 1124 ldap/servers/plugins/acl/acl.h | 163 ldap/servers/plugins/acl/acl_ext.c | 325 ldap/servers/plugins/acl/aclanom.c | 120 ldap/servers/plugins/acl/acldllmain.c | 166 ldap/servers/plugins/acl/acleffectiverights.c | 255 ldap/servers/plugins/acl/aclgroup.c | 67 ldap/servers/plugins/acl/aclinit.c | 41 ldap/servers/plugins/acl/acllas.c | 719 ldap/servers/plugins/acl/acllist.c | 241 ldap/servers/plugins/acl/aclparse.c | 993 ldap/servers/plugins/acl/aclplugin.c | 112 ldap/servers/plugins/acl/aclproxy.c | 232 ldap/servers/plugins/acl/aclutil.c | 263 ldap/servers/plugins/acl/libacl.def | 48 ldap/servers/plugins/automember/automember.c | 2738 ldap/servers/plugins/automember/automember.h | 105 ldap/servers/plugins/bitwise/bitwise.c | 58 ldap/servers/plugins/chainingdb/cb.h | 50 ldap/servers/plugins/chainingdb/cb_abandon.c | 35 ldap/servers/plugins/chainingdb/cb_acl.c | 35 ldap/servers/plugins/chainingdb/cb_add.c | 280 ldap/servers/plugins/chainingdb/cb_bind.c | 265 ldap/servers/plugins/chainingdb/cb_cleanup.c | 35 ldap/servers/plugins/chainingdb/cb_close.c | 113 ldap/servers/plugins/chainingdb/cb_compare.c | 139 ldap/servers/plugins/chainingdb/cb_config.c | 256 ldap/servers/plugins/chainingdb/cb_conn_stateless.c | 138 ldap/servers/plugins/chainingdb/cb_controls.c | 87 ldap/servers/plugins/chainingdb/cb_debug.c | 44 ldap/servers/plugins/chainingdb/cb_delete.c | 298 ldap/servers/plugins/chainingdb/cb_init.c | 45 ldap/servers/plugins/chainingdb/cb_instance.c | 681 ldap/servers/plugins/chainingdb/cb_modify.c | 340 ldap/servers/plugins/chainingdb/cb_modrdn.c | 343 ldap/servers/plugins/chainingdb/cb_monitor.c | 41 ldap/servers/plugins/chainingdb/cb_schema.c | 39 ldap/servers/plugins/chainingdb/cb_search.c | 587 ldap/servers/plugins/chainingdb/cb_size.c | 35 ldap/servers/plugins/chainingdb/cb_start.c | 35 ldap/servers/plugins/chainingdb/cb_temp.c | 35 ldap/servers/plugins/chainingdb/cb_test.c | 35 ldap/servers/plugins/chainingdb/cb_unbind.c | 35 ldap/servers/plugins/chainingdb/cb_utils.c | 95 ldap/servers/plugins/chainingdb/cbdllmain.c | 165 ldap/servers/plugins/chainingdb/libcb.def | 47 ldap/servers/plugins/collation/collate.c | 84 ldap/servers/plugins/collation/collate.h | 35 ldap/servers/plugins/collation/collation.def | 42 ldap/servers/plugins/collation/config.c | 37 ldap/servers/plugins/collation/config.h | 35 ldap/servers/plugins/collation/debug.c | 44 ldap/servers/plugins/collation/dllmain.c | 167 ldap/servers/plugins/collation/orfilter.c | 54 ldap/servers/plugins/collation/orfilter.h | 35 ldap/servers/plugins/cos/cos.c | 134 ldap/servers/plugins/cos/cos.def | 43 ldap/servers/plugins/cos/cos_cache.c | 1030 ldap/servers/plugins/cos/cos_cache.h | 36 ldap/servers/plugins/cos/dllmain.c | 133 ldap/servers/plugins/deref/deref.c | 206 ldap/servers/plugins/deref/deref.h | 35 ldap/servers/plugins/distrib/Makefile | 92 ldap/servers/plugins/distrib/Makefile.AIX | 76 ldap/servers/plugins/distrib/Makefile.BSDI | 62 ldap/servers/plugins/distrib/Makefile.HPUX | 35 ldap/servers/plugins/distrib/Makefile.HPUX64 | 35 ldap/servers/plugins/distrib/Makefile.IRIX | 62 ldap/servers/plugins/distrib/Makefile.Linux | 35 ldap/servers/plugins/distrib/Makefile.OSF1 | 61 ldap/servers/plugins/distrib/Makefile.ReliantUNIX | 62 ldap/servers/plugins/distrib/Makefile.SOLARIS | 35 ldap/servers/plugins/distrib/Makefile.SOLARIS64 | 35 ldap/servers/plugins/distrib/Makefile.SOLARISx86 | 35 ldap/servers/plugins/distrib/Makefile.UnixWare | 62 ldap/servers/plugins/distrib/Makefile.UnixWareUDK | 62 ldap/servers/plugins/distrib/Makefile.WINNT | 76 ldap/servers/plugins/distrib/README | 35 ldap/servers/plugins/distrib/distrib.c | 35 ldap/servers/plugins/distrib/distrib.dsp | 153 ldap/servers/plugins/distrib/dllmain.c | 127 ldap/servers/plugins/distrib/libdistrib.def | 41 ldap/servers/plugins/dna/dna.c | 2819 ldap/servers/plugins/dna/posix.ldif | 35 ldap/servers/plugins/dna/subtest.ldif | 35 ldap/servers/plugins/http/dllmain.c | 135 ldap/servers/plugins/http/http.def | 45 ldap/servers/plugins/http/http_client.c | 66 ldap/servers/plugins/http/http_client.h | 35 ldap/servers/plugins/http/http_impl.c | 148 ldap/servers/plugins/http/http_impl.h | 35 ldap/servers/plugins/linkedattrs/fixup_task.c | 273 ldap/servers/plugins/linkedattrs/linked_attrs.c | 515 ldap/servers/plugins/linkedattrs/linked_attrs.h | 40 ldap/servers/plugins/memberof/memberof.c | 1884 ldap/servers/plugins/memberof/memberof.h | 70 ldap/servers/plugins/memberof/memberof_config.c | 835 ldap/servers/plugins/mep/mep.c | 2864 ldap/servers/plugins/mep/mep.h | 101 ldap/servers/plugins/pam_passthru/README | 35 ldap/servers/plugins/pam_passthru/libpam_passthru.def | 45 ldap/servers/plugins/pam_passthru/pam_passthru.h | 85 ldap/servers/plugins/pam_passthru/pam_ptconfig.c | 770 ldap/servers/plugins/pam_passthru/pam_ptdebug.c | 43 ldap/servers/plugins/pam_passthru/pam_ptdllmain.c | 168 ldap/servers/plugins/pam_passthru/pam_ptimpl.c | 125 ldap/servers/plugins/pam_passthru/pam_ptpreop.c | 696 ldap/servers/plugins/passthru/PT-Notes | 35 ldap/servers/plugins/passthru/libpassthru.def | 46 ldap/servers/plugins/passthru/passthru.h | 44 ldap/servers/plugins/passthru/ptbind.c | 41 ldap/servers/plugins/passthru/ptconfig.c | 519 ldap/servers/plugins/passthru/ptconn.c | 43 ldap/servers/plugins/passthru/ptdebug.c | 43 ldap/servers/plugins/passthru/ptdllmain.c | 169 ldap/servers/plugins/passthru/ptpreop.c | 70 ldap/servers/plugins/passthru/ptutil.c | 35 ldap/servers/plugins/posix-winsync/README | 50 ldap/servers/plugins/posix-winsync/posix-group-func.c | 1027 ldap/servers/plugins/posix-winsync/posix-group-func.h | 25 ldap/servers/plugins/posix-winsync/posix-group-task.c | 520 ldap/servers/plugins/posix-winsync/posix-winsync-config.c | 301 ldap/servers/plugins/posix-winsync/posix-winsync.c | 2119 ldap/servers/plugins/posix-winsync/posix-wsp-ident.h | 58 ldap/servers/plugins/presence/dllmain.c | 133 ldap/servers/plugins/presence/presence.c | 62 ldap/servers/plugins/presence/presence.def | 43 ldap/servers/plugins/presence/presence.ldif | 35 ldap/servers/plugins/pwdstorage/clear_pwd.c | 35 ldap/servers/plugins/pwdstorage/crypt_pwd.c | 41 ldap/servers/plugins/pwdstorage/dllmain.c | 128 ldap/servers/plugins/pwdstorage/libpwdstorage.def | 56 ldap/servers/plugins/pwdstorage/md5.h | 35 ldap/servers/plugins/pwdstorage/md5_pwd.c | 35 ldap/servers/plugins/pwdstorage/md5c.c | 35 ldap/servers/plugins/pwdstorage/ns-mta-md5_pwd.bu | 35 ldap/servers/plugins/pwdstorage/ns-mta-md5_pwd.c | 35 ldap/servers/plugins/pwdstorage/pwd_init.c | 91 ldap/servers/plugins/pwdstorage/pwd_util.c | 35 ldap/servers/plugins/pwdstorage/pwdstorage.h | 37 ldap/servers/plugins/pwdstorage/sha_pwd.c | 35 ldap/servers/plugins/pwdstorage/smd5_pwd.c | 44 ldap/servers/plugins/pwdstorage/ssha_pwd.c | 35 ldap/servers/plugins/referint/dllmain.c | 132 ldap/servers/plugins/referint/referint.c | 2214 ldap/servers/plugins/referint/referint.def | 44 ldap/servers/plugins/replication/cl4.h | 35 ldap/servers/plugins/replication/cl4_api.c | 37 ldap/servers/plugins/replication/cl4_api.h | 35 ldap/servers/plugins/replication/cl4_init.c | 37 ldap/servers/plugins/replication/cl5.h | 40 ldap/servers/plugins/replication/cl5_api.c | 3778 ldap/servers/plugins/replication/cl5_api.h | 219 ldap/servers/plugins/replication/cl5_clcache.c | 461 ldap/servers/plugins/replication/cl5_clcache.h | 39 ldap/servers/plugins/replication/cl5_config.c | 403 ldap/servers/plugins/replication/cl5_init.c | 39 ldap/servers/plugins/replication/cl5_test.c | 39 ldap/servers/plugins/replication/cl5_test.h | 35 ldap/servers/plugins/replication/cl_crypt.c | 174 ldap/servers/plugins/replication/cl_crypt.h | 24 ldap/servers/plugins/replication/csnpl.c | 109 ldap/servers/plugins/replication/csnpl.h | 35 ldap/servers/plugins/replication/dllmain.c | 128 ldap/servers/plugins/replication/legacy_consumer.c | 78 ldap/servers/plugins/replication/llist.c | 43 ldap/servers/plugins/replication/llist.h | 35 ldap/servers/plugins/replication/profile.c | 35 ldap/servers/plugins/replication/repl-session-plugin.h | 86 ldap/servers/plugins/replication/repl.h | 53 ldap/servers/plugins/replication/repl5.h | 295 ldap/servers/plugins/replication/repl5_agmt.c | 1482 ldap/servers/plugins/replication/repl5_agmtlist.c | 399 ldap/servers/plugins/replication/repl5_backoff.c | 35 ldap/servers/plugins/replication/repl5_connection.c | 725 ldap/servers/plugins/replication/repl5_inc_protocol.c | 1891 ldap/servers/plugins/replication/repl5_init.c | 507 ldap/servers/plugins/replication/repl5_mtnode_ext.c | 54 ldap/servers/plugins/replication/repl5_plugins.c | 561 ldap/servers/plugins/replication/repl5_prot_private.h | 45 ldap/servers/plugins/replication/repl5_protocol.c | 226 ldap/servers/plugins/replication/repl5_protocol_util.c | 609 ldap/servers/plugins/replication/repl5_replica.c | 2241 ldap/servers/plugins/replication/repl5_replica_config.c | 3195 ldap/servers/plugins/replication/repl5_replica_dnhash.c | 61 ldap/servers/plugins/replication/repl5_replica_hash.c | 65 ldap/servers/plugins/replication/repl5_replsupplier.c | 35 ldap/servers/plugins/replication/repl5_ruv.c | 811 ldap/servers/plugins/replication/repl5_ruv.h | 67 ldap/servers/plugins/replication/repl5_schedule.c | 35 ldap/servers/plugins/replication/repl5_tot_protocol.c | 375 ldap/servers/plugins/replication/repl5_total.c | 64 ldap/servers/plugins/replication/repl5_updatedn_list.c | 166 ldap/servers/plugins/replication/repl_add.c | 35 ldap/servers/plugins/replication/repl_bind.c | 44 ldap/servers/plugins/replication/repl_compare.c | 53 ldap/servers/plugins/replication/repl_connext.c | 193 ldap/servers/plugins/replication/repl_controls.c | 37 ldap/servers/plugins/replication/repl_delete.c | 35 ldap/servers/plugins/replication/repl_entry.c | 35 ldap/servers/plugins/replication/repl_ext.c | 35 ldap/servers/plugins/replication/repl_extop.c | 965 ldap/servers/plugins/replication/repl_globals.c | 62 ldap/servers/plugins/replication/repl_helper.c | 35 ldap/servers/plugins/replication/repl_helper.h | 35 ldap/servers/plugins/replication/repl_init.c | 44 ldap/servers/plugins/replication/repl_modify.c | 35 ldap/servers/plugins/replication/repl_modrdn.c | 35 ldap/servers/plugins/replication/repl_monitor.c | 35 ldap/servers/plugins/replication/repl_objset.c | 44 ldap/servers/plugins/replication/repl_objset.h | 35 ldap/servers/plugins/replication/repl_opext.c | 35 ldap/servers/plugins/replication/repl_ops.c | 50 ldap/servers/plugins/replication/repl_rootdse.c | 35 ldap/servers/plugins/replication/repl_search.c | 35 ldap/servers/plugins/replication/repl_session_plugin.c | 173 ldap/servers/plugins/replication/repl_shared.h | 59 ldap/servers/plugins/replication/replication.def | 48 ldap/servers/plugins/replication/replutil.c | 252 ldap/servers/plugins/replication/test_repl_session_plugin.c | 306 ldap/servers/plugins/replication/tests/dnp_sim.c | 35 ldap/servers/plugins/replication/tests/dnp_sim2.c | 35 ldap/servers/plugins/replication/tests/dnp_sim3.c | 35 ldap/servers/plugins/replication/tests/makesim | 43 ldap/servers/plugins/replication/urp.c | 455 ldap/servers/plugins/replication/urp.h | 43 ldap/servers/plugins/replication/urp_glue.c | 86 ldap/servers/plugins/replication/urp_tombstone.c | 151 ldap/servers/plugins/replication/windows_connection.c | 434 ldap/servers/plugins/replication/windows_inc_protocol.c | 274 ldap/servers/plugins/replication/windows_private.c | 2865 ldap/servers/plugins/replication/windows_prot_private.h | 35 ldap/servers/plugins/replication/windows_protocol_util.c | 2681 ldap/servers/plugins/replication/windows_tot_protocol.c | 264 ldap/servers/plugins/replication/windowsrepl.h | 113 ldap/servers/plugins/replication/winsync-plugin.h | 534 ldap/servers/plugins/retrocl/dllmain.c | 127 ldap/servers/plugins/retrocl/linktest.c | 35 ldap/servers/plugins/retrocl/retrocl.c | 402 ldap/servers/plugins/retrocl/retrocl.def | 47 ldap/servers/plugins/retrocl/retrocl.h | 48 ldap/servers/plugins/retrocl/retrocl.txt | 35 ldap/servers/plugins/retrocl/retrocl_cn.c | 94 ldap/servers/plugins/retrocl/retrocl_create.c | 52 ldap/servers/plugins/retrocl/retrocl_po.c | 308 ldap/servers/plugins/retrocl/retrocl_rootdse.c | 35 ldap/servers/plugins/retrocl/retrocl_trim.c | 329 ldap/servers/plugins/rever/des.c | 521 ldap/servers/plugins/rever/dllmain.c | 128 ldap/servers/plugins/rever/libdes.def | 45 ldap/servers/plugins/rever/pbe.c | 592 ldap/servers/plugins/rever/rever.c | 155 ldap/servers/plugins/rever/rever.h | 46 ldap/servers/plugins/roles/dllmain.c | 133 ldap/servers/plugins/roles/roles.def | 42 ldap/servers/plugins/roles/roles_cache.c | 252 ldap/servers/plugins/roles/roles_cache.h | 37 ldap/servers/plugins/roles/roles_plugin.c | 117 ldap/servers/plugins/rootdn_access/rootdn_access.c | 722 ldap/servers/plugins/rootdn_access/rootdn_access.h | 26 ldap/servers/plugins/schema_reload/schema_reload.c | 148 ldap/servers/plugins/shared/plugin-utils.h | 112 ldap/servers/plugins/shared/utils.c | 508 ldap/servers/plugins/statechange/dllmain.c | 133 ldap/servers/plugins/statechange/statechange.c | 175 ldap/servers/plugins/statechange/statechange.def | 42 ldap/servers/plugins/sync/sync.h | 175 ldap/servers/plugins/sync/sync_init.c | 148 ldap/servers/plugins/sync/sync_persist.c | 695 ldap/servers/plugins/sync/sync_refresh.c | 743 ldap/servers/plugins/sync/sync_util.c | 715 ldap/servers/plugins/syntaxes/bin.c | 177 ldap/servers/plugins/syntaxes/bitstring.c | 103 ldap/servers/plugins/syntaxes/ces.c | 207 ldap/servers/plugins/syntaxes/cis.c | 356 ldap/servers/plugins/syntaxes/debug.c | 43 ldap/servers/plugins/syntaxes/deliverymethod.c | 67 ldap/servers/plugins/syntaxes/dllmain.c | 171 ldap/servers/plugins/syntaxes/dn.c | 107 ldap/servers/plugins/syntaxes/facsimile.c | 73 ldap/servers/plugins/syntaxes/guide.c | 67 ldap/servers/plugins/syntaxes/int.c | 131 ldap/servers/plugins/syntaxes/libsyntax.def | 56 ldap/servers/plugins/syntaxes/nameoptuid.c | 108 ldap/servers/plugins/syntaxes/numericstring.c | 183 ldap/servers/plugins/syntaxes/phonetic.c | 35 ldap/servers/plugins/syntaxes/sicis.c | 67 ldap/servers/plugins/syntaxes/string.c | 497 ldap/servers/plugins/syntaxes/syntax.h | 96 ldap/servers/plugins/syntaxes/syntax_common.c | 89 ldap/servers/plugins/syntaxes/tel.c | 129 ldap/servers/plugins/syntaxes/teletex.c | 67 ldap/servers/plugins/syntaxes/telex.c | 66 ldap/servers/plugins/syntaxes/validate.c | 52 ldap/servers/plugins/syntaxes/validate_task.c | 79 ldap/servers/plugins/syntaxes/value.c | 169 ldap/servers/plugins/uiduniq/7bit.c | 222 ldap/servers/plugins/uiduniq/UID-Notes | 35 ldap/servers/plugins/uiduniq/libuiduniq.def | 47 ldap/servers/plugins/uiduniq/plugin-utils.h | 63 ldap/servers/plugins/uiduniq/uid.c | 1100 ldap/servers/plugins/uiduniq/utils.c | 220 ldap/servers/plugins/usn/usn.c | 463 ldap/servers/plugins/usn/usn.h | 38 ldap/servers/plugins/usn/usn_cleanup.c | 136 ldap/servers/plugins/vattrsp_template/dllmain.c | 133 ldap/servers/plugins/vattrsp_template/vattrsp.c | 52 ldap/servers/plugins/vattrsp_template/vattrsp.def | 42 ldap/servers/plugins/views/dllmain.c | 133 ldap/servers/plugins/views/views.c | 232 ldap/servers/plugins/views/views.def | 42 ldap/servers/plugins/whoami/whoami.c | 119 ldap/servers/slapd/abandon.c | 54 ldap/servers/slapd/add.c | 494 ldap/servers/slapd/agtmmap.c | 270 ldap/servers/slapd/agtmmap.h | 53 ldap/servers/slapd/apibroker.c | 95 ldap/servers/slapd/attr.c | 472 ldap/servers/slapd/attrlist.c | 85 ldap/servers/slapd/attrsyntax.c | 1072 ldap/servers/slapd/auditlog.c | 480 ldap/servers/slapd/auth.c | 191 ldap/servers/slapd/auth.h | 35 ldap/servers/slapd/ava.c | 39 ldap/servers/slapd/back-ldbm/ancestorid.c | 263 ldap/servers/slapd/back-ldbm/archive.c | 176 ldap/servers/slapd/back-ldbm/attrcrypt.h | 35 ldap/servers/slapd/back-ldbm/back-ldbm.h | 222 ldap/servers/slapd/back-ldbm/backentry.c | 42 ldap/servers/slapd/back-ldbm/cache.c | 570 ldap/servers/slapd/back-ldbm/cleanup.c | 35 ldap/servers/slapd/back-ldbm/close.c | 35 ldap/servers/slapd/back-ldbm/dbhelp.c | 112 ldap/servers/slapd/back-ldbm/dblayer.c | 3596 ldap/servers/slapd/back-ldbm/dblayer.h | 55 ldap/servers/slapd/back-ldbm/dbsize.c | 42 ldap/servers/slapd/back-ldbm/dbtest.c | 349 ldap/servers/slapd/back-ldbm/dbverify.c | 53 ldap/servers/slapd/back-ldbm/dbversion.c | 117 ldap/servers/slapd/back-ldbm/dllmain.c | 166 ldap/servers/slapd/back-ldbm/dn2entry.c | 115 ldap/servers/slapd/back-ldbm/entrystore.c | 35 ldap/servers/slapd/back-ldbm/filterindex.c | 392 ldap/servers/slapd/back-ldbm/findentry.c | 281 ldap/servers/slapd/back-ldbm/haschildren.c | 35 ldap/servers/slapd/back-ldbm/id2entry.c | 234 ldap/servers/slapd/back-ldbm/idl.c | 207 ldap/servers/slapd/back-ldbm/idl_common.c | 77 ldap/servers/slapd/back-ldbm/idl_new.c | 652 ldap/servers/slapd/back-ldbm/idl_shim.c | 52 ldap/servers/slapd/back-ldbm/idlapi.h | 35 ldap/servers/slapd/back-ldbm/import-merge.c | 79 ldap/servers/slapd/back-ldbm/import-threads.c | 1970 ldap/servers/slapd/back-ldbm/import.c | 573 ldap/servers/slapd/back-ldbm/import.h | 93 ldap/servers/slapd/back-ldbm/index.c | 885 ldap/servers/slapd/back-ldbm/init.c | 136 ldap/servers/slapd/back-ldbm/instance.c | 213 ldap/servers/slapd/back-ldbm/ldbm_abandon.c | 35 ldap/servers/slapd/back-ldbm/ldbm_add.c | 1654 ldap/servers/slapd/back-ldbm/ldbm_attr.c | 997 ldap/servers/slapd/back-ldbm/ldbm_attrcrypt.c | 1069 ldap/servers/slapd/back-ldbm/ldbm_attrcrypt_config.c | 39 ldap/servers/slapd/back-ldbm/ldbm_bind.c | 252 ldap/servers/slapd/back-ldbm/ldbm_compare.c | 62 ldap/servers/slapd/back-ldbm/ldbm_config.c | 696 ldap/servers/slapd/back-ldbm/ldbm_config.h | 54 ldap/servers/slapd/back-ldbm/ldbm_delete.c | 1460 ldap/servers/slapd/back-ldbm/ldbm_entryrdn.c | 1879 ldap/servers/slapd/back-ldbm/ldbm_index_config.c | 749 ldap/servers/slapd/back-ldbm/ldbm_instance_config.c | 362 ldap/servers/slapd/back-ldbm/ldbm_modify.c | 889 ldap/servers/slapd/back-ldbm/ldbm_modrdn.c | 1873 ldap/servers/slapd/back-ldbm/ldbm_search.c | 969 ldap/servers/slapd/back-ldbm/ldbm_unbind.c | 35 ldap/servers/slapd/back-ldbm/ldbm_usn.c | 118 ldap/servers/slapd/back-ldbm/ldif2ldbm.c | 1139 ldap/servers/slapd/back-ldbm/libback-ldbm.def | 45 ldap/servers/slapd/back-ldbm/matchrule.c | 95 ldap/servers/slapd/back-ldbm/misc.c | 358 ldap/servers/slapd/back-ldbm/monitor.c | 133 ldap/servers/slapd/back-ldbm/nextid.c | 52 ldap/servers/slapd/back-ldbm/parents.c | 183 ldap/servers/slapd/back-ldbm/perfctrs.c | 190 ldap/servers/slapd/back-ldbm/perfctrs.h | 35 ldap/servers/slapd/back-ldbm/proto-back-ldbm.h | 166 ldap/servers/slapd/back-ldbm/rmdb.c | 35 ldap/servers/slapd/back-ldbm/seq.c | 150 ldap/servers/slapd/back-ldbm/sort.c | 231 ldap/servers/slapd/back-ldbm/start.c | 248 ldap/servers/slapd/back-ldbm/tools/index_dump/index_dump.c | 35 ldap/servers/slapd/back-ldbm/uniqueid2entry.c | 35 ldap/servers/slapd/back-ldbm/upgrade.c | 107 ldap/servers/slapd/back-ldbm/vlv.c | 465 ldap/servers/slapd/back-ldbm/vlv_key.c | 35 ldap/servers/slapd/back-ldbm/vlv_key.h | 35 ldap/servers/slapd/back-ldbm/vlv_srch.c | 69 ldap/servers/slapd/back-ldbm/vlv_srch.h | 38 ldap/servers/slapd/back-ldif/add.c | 35 ldap/servers/slapd/back-ldif/back-ldif.h | 47 ldap/servers/slapd/back-ldif/bind.c | 39 ldap/servers/slapd/back-ldif/close.c | 35 ldap/servers/slapd/back-ldif/compare.c | 35 ldap/servers/slapd/back-ldif/config.c | 35 ldap/servers/slapd/back-ldif/delete.c | 35 ldap/servers/slapd/back-ldif/dllmain.c | 170 ldap/servers/slapd/back-ldif/init.c | 43 ldap/servers/slapd/back-ldif/libback-ldif.def | 44 ldap/servers/slapd/back-ldif/modify.c | 37 ldap/servers/slapd/back-ldif/modrdn.c | 47 ldap/servers/slapd/back-ldif/monitor.c | 35 ldap/servers/slapd/back-ldif/search.c | 35 ldap/servers/slapd/back-ldif/start.c | 35 ldap/servers/slapd/back-ldif/unbind.c | 35 ldap/servers/slapd/backend.c | 287 ldap/servers/slapd/backend_manager.c | 94 ldap/servers/slapd/bind.c | 643 ldap/servers/slapd/bitset.c | 35 ldap/servers/slapd/bulk_import.c | 74 ldap/servers/slapd/ch_malloc.c | 399 ldap/servers/slapd/charray.c | 78 ldap/servers/slapd/compare.c | 84 ldap/servers/slapd/computed.c | 219 ldap/servers/slapd/config.c | 147 ldap/servers/slapd/configdse.c | 152 ldap/servers/slapd/connection.c | 2494 ldap/servers/slapd/conntable.c | 168 ldap/servers/slapd/control.c | 99 ldap/servers/slapd/counters.c | 35 ldap/servers/slapd/csn.c | 124 ldap/servers/slapd/csngen.c | 134 ldap/servers/slapd/csngen.h | 35 ldap/servers/slapd/csnset.c | 39 ldap/servers/slapd/daemon.c | 2773 ldap/servers/slapd/defbackend.c | 120 ldap/servers/slapd/delete.c | 178 ldap/servers/slapd/detach.c | 169 ldap/servers/slapd/disconnect_error_strings.h | 35 ldap/servers/slapd/disconnect_errors.h | 35 ldap/servers/slapd/dl.c | 37 ldap/servers/slapd/dn.c | 2272 ldap/servers/slapd/dse.c | 1253 ldap/servers/slapd/dynalib.c | 71 ldap/servers/slapd/entry.c | 2245 ldap/servers/slapd/entrywsi.c | 847 ldap/servers/slapd/errormap.c | 53 ldap/servers/slapd/eventq.c | 39 ldap/servers/slapd/extendop.c | 517 ldap/servers/slapd/factory.c | 246 ldap/servers/slapd/fe.h | 104 ldap/servers/slapd/features.c | 54 ldap/servers/slapd/fedse.c | 290 ldap/servers/slapd/fileio.c | 303 ldap/servers/slapd/filter.c | 310 ldap/servers/slapd/filter.h | 42 ldap/servers/slapd/filtercmp.c | 61 ldap/servers/slapd/filterentry.c | 275 ldap/servers/slapd/generation.c | 43 ldap/servers/slapd/getfilelist.c | 39 ldap/servers/slapd/getopt_ext.c | 35 ldap/servers/slapd/getopt_ext.h | 46 ldap/servers/slapd/getsocketpeer.c | 29 ldap/servers/slapd/getsocketpeer.h | 29 ldap/servers/slapd/globals.c | 114 ldap/servers/slapd/house.c | 35 ldap/servers/slapd/http.h | 35 ldap/servers/slapd/index_subsys.h | 35 ldap/servers/slapd/index_subsystem.c | 73 ldap/servers/slapd/init.c | 51 ldap/servers/slapd/intrinsics.h | 79 ldap/servers/slapd/ldaputil.c | 1764 ldap/servers/slapd/ldbmlinktest.c | 35 ldap/servers/slapd/lenstr.c | 41 ldap/servers/slapd/libglobs.c | 4357 - ldap/servers/slapd/libmakefile | 95 ldap/servers/slapd/libslapd.def | 1200 ldap/servers/slapd/listConfigAttrs.pl | 35 ldap/servers/slapd/localhost.c | 179 ldap/servers/slapd/lock.c | 51 ldap/servers/slapd/log.c | 2055 ldap/servers/slapd/log.h | 93 ldap/servers/slapd/main.c | 763 ldap/servers/slapd/mapping_tree.c | 778 ldap/servers/slapd/match.c | 131 ldap/servers/slapd/mempool.c | 69 ldap/servers/slapd/mkDBErrStrs.pl | 35 ldap/servers/slapd/modify.c | 914 ldap/servers/slapd/modrdn.c | 445 ldap/servers/slapd/modutil.c | 114 ldap/servers/slapd/monitor.c | 53 ldap/servers/slapd/mozldap.h | 45 ldap/servers/slapd/ntmsgdll/ntslapdmessages.c | 53 ldap/servers/slapd/ntmsgdll/ntslapdmessages.mc | 315 ldap/servers/slapd/ntperfdll/exports.def | 41 ldap/servers/slapd/ntperfdll/nsldapctr.cpp | 1022 ldap/servers/slapd/ntperfdll/nsldapctrdef.h | 70 ldap/servers/slapd/ntperfdll/nsldapctrmc.h | 159 ldap/servers/slapd/ntperfdll/nsldapctrmc.mc | 106 ldap/servers/slapd/ntperfdll/nsldapctrmsg.h | 97 ldap/servers/slapd/ntperfdll/nsldapctrs.h | 104 ldap/servers/slapd/ntperfdll/nsldapctrs.ini | 89 ldap/servers/slapd/ntperfdll/nsldapctrutil.cpp | 401 ldap/servers/slapd/ntperfdll/nsldapctrutil.h | 157 ldap/servers/slapd/ntperfdll/nsldapreg.ini | 50 ldap/servers/slapd/ntuserpin.c | 214 ldap/servers/slapd/ntwdog/cron_conf.c | 691 ldap/servers/slapd/ntwdog/cron_conf.h | 122 ldap/servers/slapd/ntwdog/ntcron.c | 193 ldap/servers/slapd/ntwdog/ntwatchdog.c | 1194 ldap/servers/slapd/object.c | 35 ldap/servers/slapd/objset.c | 35 ldap/servers/slapd/openldapber.h | 25 ldap/servers/slapd/operation.c | 254 ldap/servers/slapd/opshared.c | 800 ldap/servers/slapd/pagedresults.c | 987 ldap/servers/slapd/passwd_extop.c | 249 ldap/servers/slapd/pblock.c | 911 ldap/servers/slapd/plugin.c | 2468 ldap/servers/slapd/plugin_acl.c | 87 ldap/servers/slapd/plugin_internal_op.c | 239 ldap/servers/slapd/plugin_mr.c | 576 ldap/servers/slapd/plugin_role.c | 35 ldap/servers/slapd/plugin_syntax.c | 542 ldap/servers/slapd/poll_using_select.c | 35 ldap/servers/slapd/poll_using_select.h | 35 ldap/servers/slapd/prerrstrs.h | 35 ldap/servers/slapd/protect_db.c | 333 ldap/servers/slapd/protect_db.h | 45 ldap/servers/slapd/proto-slap.h | 414 ldap/servers/slapd/proxyauth.c | 224 ldap/servers/slapd/psearch.c | 156 ldap/servers/slapd/pw.c | 1864 ldap/servers/slapd/pw.h | 70 ldap/servers/slapd/pw_mgmt.c | 262 ldap/servers/slapd/pw_retry.c | 159 ldap/servers/slapd/rdn.c | 328 ldap/servers/slapd/referral.c | 64 ldap/servers/slapd/regex.c | 70 ldap/servers/slapd/resourcelimit.c | 132 ldap/servers/slapd/result.c | 1081 ldap/servers/slapd/rootdse.c | 60 ldap/servers/slapd/rwlock.c | 257 ldap/servers/slapd/rwlock.h | 65 ldap/servers/slapd/sasl_io.c | 387 ldap/servers/slapd/sasl_map.c | 313 ldap/servers/slapd/saslbind.c | 369 ldap/servers/slapd/schema.c | 6339 + ldap/servers/slapd/schemaparse.c | 52 ldap/servers/slapd/search.c | 262 ldap/servers/slapd/secerrstrs.h | 104 ldap/servers/slapd/security_wrappers.c | 77 ldap/servers/slapd/slap.h | 927 ldap/servers/slapd/slapd.lite.key | 35 ldap/servers/slapd/slapd.normal.key | 35 ldap/servers/slapd/slapd_plhash.c | 35 ldap/servers/slapd/slapi-plugin-compat4.h | 41 ldap/servers/slapd/slapi-plugin.h | 2430 ldap/servers/slapd/slapi-private.h | 326 ldap/servers/slapd/slapi2nspr.c | 128 ldap/servers/slapd/slapi_counter.c | 61 ldap/servers/slapd/slapi_counter_sunos_sparcv9.S | 34 ldap/servers/slapd/snmp_collator.c | 304 ldap/servers/slapd/snmp_collator.h | 35 ldap/servers/slapd/snoop.c | 35 ldap/servers/slapd/sort.c | 46 ldap/servers/slapd/ssl.c | 2840 ldap/servers/slapd/sslerrstrs.h | 86 ldap/servers/slapd/start_tls_extop.c | 307 ldap/servers/slapd/statechange.h | 35 ldap/servers/slapd/str2filter.c | 189 ldap/servers/slapd/strdup.c | 35 ldap/servers/slapd/stubrepl.c | 35 ldap/servers/slapd/stubs.c | 44 ldap/servers/slapd/subentry.c | 35 ldap/servers/slapd/task.c | 1202 ldap/servers/slapd/tempnam.c | 35 ldap/servers/slapd/test-plugins/Makefile | 35 ldap/servers/slapd/test-plugins/Makefile.AIX | 35 ldap/servers/slapd/test-plugins/Makefile.BSDI | 35 ldap/servers/slapd/test-plugins/Makefile.HPUX | 35 ldap/servers/slapd/test-plugins/Makefile.HPUX64 | 35 ldap/servers/slapd/test-plugins/Makefile.IRIX | 35 ldap/servers/slapd/test-plugins/Makefile.Linux | 35 ldap/servers/slapd/test-plugins/Makefile.OSF1 | 35 ldap/servers/slapd/test-plugins/Makefile.ReliantUNIX | 35 ldap/servers/slapd/test-plugins/Makefile.SOLARIS | 35 ldap/servers/slapd/test-plugins/Makefile.SOLARIS64 | 35 ldap/servers/slapd/test-plugins/Makefile.SOLARISx86 | 35 ldap/servers/slapd/test-plugins/Makefile.UnixWare | 35 ldap/servers/slapd/test-plugins/Makefile.UnixWareUDK | 35 ldap/servers/slapd/test-plugins/Makefile.WINNT | 77 ldap/servers/slapd/test-plugins/Makefile.server | 91 ldap/servers/slapd/test-plugins/README | 35 ldap/servers/slapd/test-plugins/clients/README | 35 ldap/servers/slapd/test-plugins/clients/ReqExtOp.java | 35 ldap/servers/slapd/test-plugins/clients/reqextop.c | 35 ldap/servers/slapd/test-plugins/dllmain.c | 146 ldap/servers/slapd/test-plugins/installDse.pl | 35 ldap/servers/slapd/test-plugins/nicknames | 35 ldap/servers/slapd/test-plugins/sampletask.c | 34 ldap/servers/slapd/test-plugins/testbind.c | 39 ldap/servers/slapd/test-plugins/testdatainterop.c | 38 ldap/servers/slapd/test-plugins/testdbinterop.c | 41 ldap/servers/slapd/test-plugins/testdbinterop.h | 35 ldap/servers/slapd/test-plugins/testentry.c | 41 ldap/servers/slapd/test-plugins/testextendedop.c | 38 ldap/servers/slapd/test-plugins/testgetip.c | 40 ldap/servers/slapd/test-plugins/testplugin.def | 48 ldap/servers/slapd/test-plugins/testplugin.dsp | 175 ldap/servers/slapd/test-plugins/testplugin.mak | 463 ldap/servers/slapd/test-plugins/testpostop.c | 58 ldap/servers/slapd/test-plugins/testpreop.c | 38 ldap/servers/slapd/test-plugins/testsaslbind.c | 38 ldap/servers/slapd/thread_data.c | 214 ldap/servers/slapd/time.c | 413 ldap/servers/slapd/tools/dbscan.c | 190 ldap/servers/slapd/tools/eggencode.c | 35 ldap/servers/slapd/tools/ldaptool-sasl.c | 33 ldap/servers/slapd/tools/ldaptool.h | 24 ldap/servers/slapd/tools/ldclt/data.c | 212 ldap/servers/slapd/tools/ldclt/examples/001/add.ksh | 35 ldap/servers/slapd/tools/ldclt/examples/001/add_incr.ksh | 35 ldap/servers/slapd/tools/ldclt/examples/001/config.ksh | 35 ldap/servers/slapd/tools/ldclt/examples/001/delete.ksh | 35 ldap/servers/slapd/tools/ldclt/examples/001/env.ksh | 35 ldap/servers/slapd/tools/ldclt/examples/001/search.ksh | 35 ldap/servers/slapd/tools/ldclt/examples/002/add.ksh | 35 ldap/servers/slapd/tools/ldclt/examples/002/config.ksh | 35 ldap/servers/slapd/tools/ldclt/examples/002/env.ksh | 35 ldap/servers/slapd/tools/ldclt/examples/002/ldif01.ksh | 35 ldap/servers/slapd/tools/ldclt/examples/002/ldif02.ksh | 35 ldap/servers/slapd/tools/ldclt/examples/002/ldif03.ksh | 35 ldap/servers/slapd/tools/ldclt/ldap-private.h | 35 ldap/servers/slapd/tools/ldclt/ldapfct.c | 1653 ldap/servers/slapd/tools/ldclt/ldclt.c | 566 ldap/servers/slapd/tools/ldclt/ldclt.h | 69 ldap/servers/slapd/tools/ldclt/ldclt.man | 2 ldap/servers/slapd/tools/ldclt/ldclt.use | 2 ldap/servers/slapd/tools/ldclt/ldcltU.c | 67 ldap/servers/slapd/tools/ldclt/opCheck.c | 158 ldap/servers/slapd/tools/ldclt/parser.c | 113 ldap/servers/slapd/tools/ldclt/port.c | 247 ldap/servers/slapd/tools/ldclt/port.h | 79 ldap/servers/slapd/tools/ldclt/remote.h | 53 ldap/servers/slapd/tools/ldclt/repcheck.c | 35 ldap/servers/slapd/tools/ldclt/repslave.c | 35 ldap/servers/slapd/tools/ldclt/scalab01.c | 301 ldap/servers/slapd/tools/ldclt/scalab01.h | 35 ldap/servers/slapd/tools/ldclt/srv.c | 35 ldap/servers/slapd/tools/ldclt/threadMain.c | 298 ldap/servers/slapd/tools/ldclt/utils.c | 146 ldap/servers/slapd/tools/ldclt/utils.h | 36 ldap/servers/slapd/tools/ldclt/workarounds.c | 41 ldap/servers/slapd/tools/ldif.c | 58 ldap/servers/slapd/tools/migratecred.c | 93 ldap/servers/slapd/tools/mkdep.c | 109 ldap/servers/slapd/tools/mmldif.c | 119 ldap/servers/slapd/tools/pwenc.c | 158 ldap/servers/slapd/tools/rsearch/addthread.c | 88 ldap/servers/slapd/tools/rsearch/addthread.h | 35 ldap/servers/slapd/tools/rsearch/infadd.c | 42 ldap/servers/slapd/tools/rsearch/infadd.h | 35 ldap/servers/slapd/tools/rsearch/main.c | 38 ldap/servers/slapd/tools/rsearch/nametable.c | 62 ldap/servers/slapd/tools/rsearch/nametable.h | 35 ldap/servers/slapd/tools/rsearch/rsearch.c | 48 ldap/servers/slapd/tools/rsearch/rsearch.h | 35 ldap/servers/slapd/tools/rsearch/scripts/dbgen.pl.in | 283 ldap/servers/slapd/tools/rsearch/sdattable.c | 99 ldap/servers/slapd/tools/rsearch/sdattable.h | 35 ldap/servers/slapd/tools/rsearch/searchthread.c | 167 ldap/servers/slapd/tools/rsearch/searchthread.h | 35 ldap/servers/slapd/unbind.c | 43 ldap/servers/slapd/uniqueid.c | 134 ldap/servers/slapd/uniqueidgen.c | 39 ldap/servers/slapd/utf8.c | 34 ldap/servers/slapd/utf8compare.c | 99 ldap/servers/slapd/util.c | 1369 ldap/servers/slapd/uuid.c | 66 ldap/servers/slapd/uuid.h | 40 ldap/servers/slapd/value.c | 113 ldap/servers/slapd/valueset.c | 1258 ldap/servers/slapd/vattr.c | 204 ldap/servers/slapd/vattr_spi.h | 35 ldap/servers/slapd/views.h | 35 ldap/servers/snmp/NETWORK-SERVICES-MIB.txt | 650 ldap/servers/snmp/RFC-1215.txt | 38 ldap/servers/snmp/RFC1155-SMI.txt | 119 ldap/servers/snmp/SNMPv2-CONF.txt | 322 ldap/servers/snmp/SNMPv2-SMI.txt | 344 ldap/servers/snmp/SNMPv2-TC.txt | 772 ldap/servers/snmp/ldap-agent.c | 73 ldap/servers/snmp/ldap-agent.h | 40 ldap/servers/snmp/main.c | 104 ldap/servers/snmp/netscape-ldap.mib | 759 ldap/servers/snmp/ntagt/msrvdefs.mak | 524 ldap/servers/snmp/ntagt/nslagtcom_nt.h | 69 ldap/servers/snmp/ntagt/nsldapagt_nt.c | 1776 ldap/servers/snmp/ntagt/nsldapagt_nt.def | 56 ldap/servers/snmp/ntagt/nsldapagt_nt.h | 266 ldap/servers/snmp/ntagt/nsldapmib_nt.c | 1078 ldap/servers/snmp/ntagt/nsldapmib_nt.h | 167 ldap/servers/snmp/redhat-directory.mib | 76 ldap/systools/getHPPatches.pl | 35 ldap/systools/getSolPatches.pl | 35 ldap/systools/hp_patches.c | 35 ldap/systools/idsktune.c | 4594 - ldap/systools/mergeSolPatches.pl | 35 ldap/systools/pio.c | 35 ldap/systools/pio.h | 35 ldap/systools/viewcore.c | 43 lib/base/crit.cpp | 41 lib/base/dns.cpp | 41 lib/base/dnsdmain.cpp | 48 lib/base/ereport.cpp | 37 lib/base/eventlog.cpp | 106 lib/base/file.cpp | 366 lib/base/fsmutex.cpp | 89 lib/base/lexer.cpp | 1015 lib/base/lexer_pvt.h | 35 lib/base/net.cpp | 41 lib/base/nscperror.c | 35 lib/base/nterrors.cpp | 120 lib/base/plist.cpp | 38 lib/base/plist_pvt.h | 35 lib/base/pool.cpp | 91 lib/base/rwlock.cpp | 168 lib/base/shexp.cpp | 43 lib/base/system.cpp | 47 lib/base/systhr.cpp | 133 lib/base/util.cpp | 68 lib/ldaputil/cert.c | 51 lib/ldaputil/certmap.c | 607 lib/ldaputil/certmap.conf | 35 lib/ldaputil/dbconf.c | 93 lib/ldaputil/encode.c | 35 lib/ldaputil/errors.c | 35 lib/ldaputil/examples/Certmap.mak | 286 lib/ldaputil/examples/Makefile | 40 lib/ldaputil/examples/README | 35 lib/ldaputil/examples/init.c | 42 lib/ldaputil/examples/plugin.c | 39 lib/ldaputil/examples/plugin.h | 35 lib/ldaputil/init.c | 44 lib/ldaputil/ldapauth.c | 35 lib/ldaputil/ldapu-changes.html | 35 lib/ldaputil/ldaputili.h | 35 lib/ldaputil/utest/Makefile | 149 lib/ldaputil/utest/auth.cpp | 611 lib/ldaputil/utest/authtest | 138 lib/ldaputil/utest/certmap.conf | 68 lib/ldaputil/utest/dblist.conf | 47 lib/ldaputil/utest/example.c | 153 lib/ldaputil/utest/plugin.c | 152 lib/ldaputil/utest/plugin.h | 57 lib/ldaputil/utest/stubs.c | 144 lib/ldaputil/utest/stubs.cpp | 139 lib/ldaputil/utest/test.ref | 480 lib/ldaputil/vtable.c | 37 lib/libaccess/access_plhash.cpp | 35 lib/libaccess/access_plhash.h | 35 lib/libaccess/acl.tab.cpp | 62 lib/libaccess/acl.tab.h | 35 lib/libaccess/acl.yy.cpp | 44 lib/libaccess/aclcache.cpp | 166 lib/libaccess/aclcache.h | 35 lib/libaccess/aclerror.cpp | 39 lib/libaccess/acleval.cpp | 39 lib/libaccess/aclflush.cpp | 36 lib/libaccess/aclpriv.h | 36 lib/libaccess/aclscan.h | 36 lib/libaccess/aclscan.l | 39 lib/libaccess/aclspace.cpp | 39 lib/libaccess/acltext.y | 41 lib/libaccess/acltools.cpp | 2050 lib/libaccess/aclutil.cpp | 48 lib/libaccess/aclutil.h | 35 lib/libaccess/authdb.cpp | 147 lib/libaccess/las.h | 35 lib/libaccess/lasdns.cpp | 341 lib/libaccess/lasdns.h | 35 lib/libaccess/lasgroup.cpp | 45 lib/libaccess/lasip.cpp | 448 lib/libaccess/lasip.h | 38 lib/libaccess/lastod.cpp | 35 lib/libaccess/lasuser.cpp | 35 lib/libaccess/ldapauth.h | 35 lib/libaccess/method.cpp | 35 lib/libaccess/nsautherr.cpp | 47 lib/libaccess/nseframe.cpp | 38 lib/libaccess/oneeval.cpp | 321 lib/libaccess/oneeval.h | 35 lib/libaccess/parse.h | 35 lib/libaccess/permhash.h | 55 lib/libaccess/register.cpp | 141 lib/libaccess/symbols.cpp | 43 lib/libaccess/usi.cpp | 35 lib/libaccess/usrcache.cpp | 49 lib/libaccess/utest/.purify | 19 lib/libaccess/utest/Makefile | 147 lib/libaccess/utest/acl.dat | 44 lib/libaccess/utest/aclfile0 | 87 lib/libaccess/utest/aclfile1 | 43 lib/libaccess/utest/aclfile10 | 45 lib/libaccess/utest/aclfile11 | 43 lib/libaccess/utest/aclfile12 | 43 lib/libaccess/utest/aclfile13 | 43 lib/libaccess/utest/aclfile14 | 43 lib/libaccess/utest/aclfile15 | 43 lib/libaccess/utest/aclfile16 | 43 lib/libaccess/utest/aclfile17 | 43 lib/libaccess/utest/aclfile18 | 51 lib/libaccess/utest/aclfile19 | 46 lib/libaccess/utest/aclfile2 | 43 lib/libaccess/utest/aclfile3 | 43 lib/libaccess/utest/aclfile4 | 43 lib/libaccess/utest/aclfile5 | 43 lib/libaccess/utest/aclfile6 | 55 lib/libaccess/utest/aclfile7 | 43 lib/libaccess/utest/aclfile8 | 43 lib/libaccess/utest/aclfile9 | 43 lib/libaccess/utest/aclgrp0 | 42 lib/libaccess/utest/aclgrp1 | 42 lib/libaccess/utest/aclgrp2 | 42 lib/libaccess/utest/aclgrp3 | 42 lib/libaccess/utest/aclgrp4 | 42 lib/libaccess/utest/acltest.cpp | 794 lib/libaccess/utest/onetest.cpp | 77 lib/libaccess/utest/shexp.cpp | 331 lib/libaccess/utest/shexp.h | 168 lib/libaccess/utest/test.ref | 217 lib/libaccess/utest/testmain.cpp | 89 lib/libaccess/utest/twotest.cpp | 87 lib/libaccess/utest/ustubs.cpp | 331 lib/libaccess/yy-sed | 35 lib/libadmin/error.c | 66 lib/libadmin/template.c | 37 lib/libadmin/util.c | 96 lib/libsi18n/coreres.c | 141 lib/libsi18n/coreres.h | 52 lib/libsi18n/getlang.c | 330 lib/libsi18n/getstrmem.c | 160 lib/libsi18n/getstrmem.h | 36 lib/libsi18n/getstrprop.c | 124 lib/libsi18n/gsslapd.h | 35 lib/libsi18n/makstrdb.c | 56 lib/libsi18n/propset.c | 442 lib/libsi18n/propset.h | 80 lib/libsi18n/reshash.c | 56 lib/libsi18n/reshash.h | 35 lib/libsi18n/txtfile.c | 35 lib/libsi18n/txtfile.h | 35 ltmain.sh |14878 ++- m4/db.m4 | 43 m4/fhs.m4 | 20 m4/icu.m4 | 41 m4/kerberos.m4 | 20 m4/libtool.m4 | 7992 + m4/ltoptions.m4 | 384 m4/ltsugar.m4 | 123 m4/ltversion.m4 | 23 m4/lt~obsolete.m4 | 98 m4/mozldap.m4 | 54 m4/netsnmp.m4 | 31 m4/nspr.m4 | 33 m4/nss.m4 | 33 m4/nunc-stans.m4 | 63 m4/openldap.m4 | 46 m4/pcre.m4 | 44 m4/sasl.m4 | 41 m4/selinux.m4 | 29 m4/svrcore.m4 | 57 m4/systemd.m4 | 123 man/man1/cl-dump.1 | 20 man/man1/dbgen.pl.1 | 15 man/man1/dbscan.1 | 2 man/man1/ds-logpipe.py.1 | 14 man/man1/dsktune.1 | 2 man/man1/infadd.1 | 10 man/man1/ldap-agent.1 | 2 man/man1/ldclt.1 | 7 man/man1/ldif.1 | 2 man/man1/logconv.pl.1 | 47 man/man1/migratecred.1 | 8 man/man1/mmldif.1 | 6 man/man1/pwdhash.1 | 6 man/man1/readnsstate.1 | 50 man/man1/repl-monitor.1 | 97 man/man1/rsearch.1 | 2 man/man8/bak2db.8 | 58 man/man8/bak2db.pl.8 | 82 man/man8/cleanallruv.pl.8 | 85 man/man8/db2bak.8 | 59 man/man8/db2bak.pl.8 | 81 man/man8/db2index.8 | 63 man/man8/db2index.pl.8 | 85 man/man8/db2ldif.8 | 102 man/man8/db2ldif.pl.8 | 124 man/man8/dbmon.sh.8 | 56 man/man8/dbverify.8 | 63 man/man8/dn2rdn.8 | 58 man/man8/fixup-linkedattrs.pl.8 | 76 man/man8/fixup-memberof.pl.8 | 80 man/man8/ldif2db.8 | 85 man/man8/ldif2db.pl.8 | 102 man/man8/ldif2ldap.8 | 62 man/man8/migrate-ds.pl.8 | 2 man/man8/monitor.8 | 67 man/man8/ns-accountstatus.pl.8 | 101 man/man8/ns-activate.pl.8 | 73 man/man8/ns-inactivate.pl.8 | 72 man/man8/ns-newpwpolicy.pl.8 | 79 man/man8/ns-slapd.8 | 12 man/man8/remove-ds.pl.8 | 13 man/man8/restart-dirsrv.8 | 50 man/man8/restoreconfig.8 | 48 man/man8/saveconfig.8 | 48 man/man8/schema-reload.pl.8 | 74 man/man8/setup-ds.pl.8 | 6 man/man8/start-dirsrv.8 | 50 man/man8/status-dirsrv.8 | 55 man/man8/stop-dirsrv.8 | 50 man/man8/suffix2instance.8 | 51 man/man8/syntax-validate.pl.8 | 77 man/man8/upgradedb.8 | 56 man/man8/upgradednformat.8 | 55 man/man8/usn-tombstone-cleanup.pl.8 | 80 man/man8/verify-db.pl.8 | 49 man/man8/vlvindex.8 | 58 missing | 453 rpm.mk | 81 rpm/389-ds-base-devel.README | 4 rpm/389-ds-base-git.sh | 16 rpm/389-ds-base.spec.in | 1769 rpm/add_patches.sh | 55 rpm/rpmverrel.sh | 15 selinux/dirsrv.fc.in | 2 selinux/dirsrv.if | 41 selinux/dirsrv.te | 11 wrappers/cl-dump.in | 46 wrappers/dbscan.in | 10 wrappers/ds_systemd_ask_password_acl.in | 34 wrappers/infadd.in | 12 wrappers/initscript.in | 267 wrappers/ldap-agent-initscript.in | 48 wrappers/ldap-agent.in | 12 wrappers/ldclt.in | 12 wrappers/ldif.in | 12 wrappers/migratecred.in | 14 wrappers/mmldif.in | 14 wrappers/pwdhash.in | 14 wrappers/repl-monitor.in | 46 wrappers/rsearch.in | 12 wrappers/systemd-snmp.service.in | 16 wrappers/systemd.group.in | 6 wrappers/systemd.template.asan.service.in | 36 wrappers/systemd.template.service.in | 33 wrappers/systemd.template.sysconfig | 6 1428 files changed, 251723 insertions(+), 155514 deletions(-) ---

1 0

VERSION.sh
by Noriko Hosoi 04 Aug '16

04 Aug '16

VERSION.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) New commits: commit deef3c534ed6d5e83c03564a2a609df04ce0aa8d Author: Noriko Hosoi <nhosoi(a)redhat.com> Date: Thu Aug 4 15:50:30 2016 -0700 bump version to 1.3.5.12 diff --git a/VERSION.sh b/VERSION.sh index fb72bed..ebcf385 100644 --- a/VERSION.sh +++ b/VERSION.sh @@ -10,7 +10,7 @@ vendor="389 Project" # PACKAGE_VERSION is constructed from these VERSION_MAJOR=1 VERSION_MINOR=3 -VERSION_MAINT=5.11 +VERSION_MAINT=5.12 # NOTE: VERSION_PREREL is automatically set for builds made out of a git tree VERSION_PREREL= VERSION_DATE=`date -u +%Y%m%d%H%M%S`

1 0

ldap/servers
by Noriko Hosoi 04 Aug '16

04 Aug '16

ldap/servers/slapd/bind.c | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) New commits: commit caa351ae0cc81cbf2309a43c5f74b359cda152d0 Author: Ludwig Krispenz <lkrispen(a)redhat.com> Date: Thu Aug 4 11:45:49 2016 -0700 Bug 1347760 - CVE-2016-4992 389-ds-base: Information disclosure via repeated use of LDAP ADD operation, etc. Description: do not overwrite rc used to decide if bind was successful. When the bind is through ldapi/autobind, an entry does not exist to be checked with slapi_check_account_lock. In that case, a variable rc is not supposed to be modified which confuses the following code path. Reviewed by nhosoi(a)redhat.com. diff --git a/ldap/servers/slapd/bind.c b/ldap/servers/slapd/bind.c index c271577..3054c1f 100644 --- a/ldap/servers/slapd/bind.c +++ b/ldap/servers/slapd/bind.c @@ -775,10 +775,12 @@ do_bind( Slapi_PBlock *pb ) */ if (!slapi_be_is_flag_set(be, SLAPI_BE_FLAG_REMOTE_DATA)) { bind_target_entry = get_entry(pb, slapi_sdn_get_ndn(sdn)); - rc = slapi_check_account_lock(pb, bind_target_entry, pw_response_requested, 1, 1); - if (1 == rc) { /* account is locked */ + myrc = slapi_check_account_lock(pb, bind_target_entry, pw_response_requested, 1, 1); + if (1 == myrc) { /* account is locked */ + rc = myrc; goto account_locked; } + myrc = 0; } if (!auto_bind) { /*

1 0

Makefile.am wrappers/ds_systemd_ask_password_acl.in wrappers/systemd.template.asan.service.in wrappers/systemd.template.service.in
by William Brown 03 Aug '16

03 Aug '16

Makefile.am | 3 +- wrappers/ds_systemd_ask_password_acl.in | 34 ++++++++++++++++++++++++++++++ wrappers/systemd.template.asan.service.in | 1 wrappers/systemd.template.service.in | 1 4 files changed, 38 insertions(+), 1 deletion(-) New commits: commit e6b48924adb753f47683f25fab6e2b8e5d3cf84c Author: William Brown <firstyear(a)redhat.com> Date: Fri Jul 29 14:36:19 2016 +1000 Ticket 48450 - Add prestart work around for systemd ask password Bug Description: Due to a lack of response to fix the systemd ask password permissions, we must resolve this ourselves. Without this, we cannot utilise the ask password feature at all. Fix Description: We add an execstartpre script, that parses dse.ldif for the running server user. If found, we add the acl to ask-password directory which will allow the server to start. We do this so that if each instance has a unique user, they can all use ask pass correctly. https://fedorahosted.org/389/ticket/48450 Author: wibrown Review by: nhosoi (Thanks) diff --git a/Makefile.am b/Makefile.am index ed3d462..3e1bf47 100644 --- a/Makefile.am +++ b/Makefile.am @@ -620,7 +620,8 @@ sbin_SCRIPTS = ldap/admin/src/scripts/setup-ds.pl \ ldap/admin/src/scripts/dbmon.sh \ ldap/admin/src/scripts/ds_selinux_enabled \ ldap/admin/src/scripts/ds_selinux_port_query \ - wrappers/ldap-agent + wrappers/ds_systemd_ask_password_acl \ + wrappers/ldap-agent bin_SCRIPTS = ldap/servers/slapd/tools/rsearch/scripts/dbgen.pl \ wrappers/dbscan \ diff --git a/wrappers/ds_systemd_ask_password_acl.in b/wrappers/ds_systemd_ask_password_acl.in new file mode 100644 index 0000000..59bffc5 --- /dev/null +++ b/wrappers/ds_systemd_ask_password_acl.in @@ -0,0 +1,34 @@ +#!/bin/sh +# BEGIN COPYRIGHT BLOCK +# Copyright (C) 2016 Red Hat, Inc. +# +# All rights reserved. +# +# License: GPL (version 3 or any later version). +# See LICENSE for details. +# END COPYRIGHT BLOCK + +# Systemd has not fixed the issue at https://bugzilla.redhat.com/show_bug.cgi?id=1322167 +# As a result, we need a way to fix the permissions as we start. +# We have to reset these each time, as this folder is on a tmpfs. +# If we don't do this, we can't prompt for the password! +# If you want this script to go away, fix the bugzilla so we don't need it! + +# Make sure we have the path to the dse.ldif +if [ -z $1 ] +then + echo "usage: ${0} /etc/dirsrv/slapd-<instance>/dse.ldif" + exit 1 +fi + +# Grep the user out + +DS_USER=`grep 'nsslapd-localuser: ' $1 | awk '{print $2}'` + +# Now apply the acl + +if [ -d /var/run/systemd/ask-password ] +then + setfacl -m u:${DS_USER}:rwx /var/run/systemd/ask-password +fi + diff --git a/wrappers/systemd.template.asan.service.in b/wrappers/systemd.template.asan.service.in index dd361b4..5de91de 100644 --- a/wrappers/systemd.template.asan.service.in +++ b/wrappers/systemd.template.asan.service.in @@ -25,6 +25,7 @@ PIDFile=@localstatedir@/run/@package_name@/slapd-%i.pid # We can't symbolize here, as llvm symbolize crashes when it goes near systemd. Environment='ASAN_OPTIONS="detect_leaks=1 symbolize=0 log_path=@localstatedir@/run/@package_name@/ns-slapd-%i.asan detect_deadlocks=1"' LimitCORE=infinity +ExecStartPre=@sbindir@/ds_systemd_ask_password_acl @instconfigdir@/slapd-%i/dse.ldif ExecStart=@sbindir@/ns-slapd -D @instconfigdir@/slapd-%i -i @localstatedir@/run/@package_name@/slapd-%i.pid # if you need to set other directives e.g. LimitNOFILE=8192 # set them in this file diff --git a/wrappers/systemd.template.service.in b/wrappers/systemd.template.service.in index a045036..6f096b7 100644 --- a/wrappers/systemd.template.service.in +++ b/wrappers/systemd.template.service.in @@ -22,6 +22,7 @@ Type=notify EnvironmentFile=@initconfigdir@/@package_name@ EnvironmentFile=@initconfigdir@/@package_name@-%i PIDFile=@localstatedir@/run/@package_name@/slapd-%i.pid +ExecStartPre=@sbindir@/ds_systemd_ask_password_acl @instconfigdir@/slapd-%i/dse.ldif ExecStart=@sbindir@/ns-slapd -D @instconfigdir@/slapd-%i -i @localstatedir@/run/@package_name@/slapd-%i.pid # if you need to set other directives e.g. LimitNOFILE=8192 # set them in this file

1 0

wrappers/systemd.service.in
by Mark Reynolds 03 Aug '16

03 Aug '16

wrappers/systemd.service.in | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) New commits: commit decff50878e2defcf655343cd16409e2fb335682 Author: Mark Reynolds <mreynolds(a)redhat.com> Date: Wed Aug 3 11:33:24 2016 -0400 Ticket 48932 - stopping admin server stops all httpd processes Bug Description: When stopping the admin server it does not specify which process/config file to stop. So all httpd services are stopped. Fix Description: In the systemd wrapper specify the admin's http.conf file for the ExecStop command. https://fedorahosted.org/389/ticket/48932 Reviewed by: nhosoi(Thanks!) diff --git a/wrappers/systemd.service.in b/wrappers/systemd.service.in index 186e851..394047a 100644 --- a/wrappers/systemd.service.in +++ b/wrappers/systemd.service.in @@ -16,7 +16,7 @@ EnvironmentFile=@initconfigdir@/@package_name@ ExecStart=@HTTPD@ -k start -f @configdir@/httpd.conf ExecReload=@HTTPD@ -t ExecReload=/bin/kill -HUP $MAINPID -ExecStop=@HTTPD@ $OPTIONS -k stop +ExecStop=@HTTPD@ $OPTIONS -k stop -f @configdir@/httpd.conf # to raise the file descriptor limit # LimitNOFILE=8192

1 0

ldap/servers
by Noriko Hosoi 02 Aug '16

02 Aug '16

ldap/servers/slapd/pw.c | 14 +++++++++++--- 1 file changed, 11 insertions(+), 3 deletions(-) New commits: commit 802224f2846900c870a780fe7608782792806d85 Author: Noriko Hosoi <nhosoi(a)redhat.com> Date: Sat Jul 30 16:56:57 2016 -0700 Ticket #48943 - When fine-grained policy is applied, a sub-tree has a priority over a user while changing password Description: If the user entry has a pwdpolicysubentry, the configuration in the pwpolicy should be the strongest and respected. If the entry does not have it, it retrieves the pwpolicy from the CoS Cache, which is the current behaviour. https://fedorahosted.org/389/ticket/48943 Reviewed by wibrown(a)redhat.com (Thank you, William!!) diff --git a/ldap/servers/slapd/pw.c b/ldap/servers/slapd/pw.c index 498afd4..6b865ec 100644 --- a/ldap/servers/slapd/pw.c +++ b/ldap/servers/slapd/pw.c @@ -1777,9 +1777,17 @@ new_passwdPolicy(Slapi_PBlock *pb, const char *dn) attribute in the target entry itself. */ } else { if ( (e = get_entry( pb, dn )) != NULL ) { - rc = slapi_vattr_values_get(e, "pwdpolicysubentry", &values, - &type_name_disposition, &actual_type_name, - SLAPI_VIRTUALATTRS_REQUEST_POINTERS, &attr_free_flags); + Slapi_Attr* attr = NULL; + rc = slapi_entry_attr_find(e, "pwdpolicysubentry", &attr); + if (attr && (0 == rc)) { + /* If the entry has pwdpolicysubentry, use the PwPolicy. */ + values = valueset_dup(&attr->a_present_values); + } else { + /* Otherwise, retrieve the policy from CoS Cache */ + rc = slapi_vattr_values_get(e, "pwdpolicysubentry", &values, + &type_name_disposition, &actual_type_name, + SLAPI_VIRTUALATTRS_REQUEST_POINTERS, &attr_free_flags); + } if (rc) { values = NULL; }

1 0

dirsrvtests/tests
by Simon Pichugin 02 Aug '16

02 Aug '16

dirsrvtests/tests/tickets/ticket47976_test.py | 203 ++++++++++++++++++++++++++ 1 file changed, 203 insertions(+) New commits: commit a12dc3690f49704d86f63a96bff81abe62267397 Author: Simon Pichugin <spichugi(a)redhat.com> Date: Tue Aug 2 17:29:00 2016 +0200 Ticket 47976 - Add fixed CI test case Description: Add test case written by Thierry and fix it depending on the current directory structure. https://fedorahosted.org/389/ticket/47976 Reviewed by: wibrown, mreynolds (Thanks!) diff --git a/dirsrvtests/tests/tickets/ticket47976_test.py b/dirsrvtests/tests/tickets/ticket47976_test.py new file mode 100644 index 0000000..df4891d --- /dev/null +++ b/dirsrvtests/tests/tickets/ticket47976_test.py @@ -0,0 +1,203 @@ +import os +import sys +import time +import ldap +import logging +import pytest +from lib389 import DirSrv, Entry, tools, tasks +from lib389.tools import DirSrvTools +from lib389._constants import * +from lib389.properties import * +from lib389.tasks import * +from lib389.utils import * + +PEOPLE_OU='people' +PEOPLE_DN = "ou=%s,%s" % (PEOPLE_OU, SUFFIX) +GROUPS_OU='groups' +GROUPS_DN = "ou=%s,%s" % (GROUPS_OU, SUFFIX) +DEFINITIONS_CN='definitions' +DEFINITIONS_DN = "cn=%s,%s" % (DEFINITIONS_CN, SUFFIX) +TEMPLATES_CN='templates' +TEMPLATES_DN = "cn=%s,%s" % (TEMPLATES_CN, SUFFIX) +MANAGED_GROUP_TEMPLATES_CN='managed group templates' +MANAGED_GROUP_TEMPLATES_DN='cn=%s,%s' % (MANAGED_GROUP_TEMPLATES_CN, TEMPLATES_DN) +MANAGED_GROUP_MEP_TMPL_CN='UPG' +MANAGED_GROUP_MEP_TMPL_DN='cn=%s,%s' % (MANAGED_GROUP_MEP_TMPL_CN, MANAGED_GROUP_TEMPLATES_DN) +MANAGED_GROUP_DEF_CN='managed group definition' +MANAGED_GROUP_DEF_DN='cn=%s,%s' % (MANAGED_GROUP_DEF_CN, DEFINITIONS_DN) + +MAX_ACCOUNTS=2 + +logging.getLogger(__name__).setLevel(logging.DEBUG) +log = logging.getLogger(__name__) + +installation1_prefix = None + + +class TopologyStandalone(object): + def __init__(self, standalone): + standalone.open() + self.standalone = standalone + + +(a)pytest.fixture(scope="module") +def topology(request): + global installation1_prefix + if installation1_prefix: + args_instance[SER_DEPLOYED_DIR] = installation1_prefix + + # Creating standalone instance ... + standalone = DirSrv(verbose=False) + if installation1_prefix: + args_instance[SER_DEPLOYED_DIR] = installation1_prefix + args_instance[SER_HOST] = HOST_STANDALONE + args_instance[SER_PORT] = PORT_STANDALONE + args_instance[SER_SERVERID_PROP] = SERVERID_STANDALONE + args_instance[SER_CREATION_SUFFIX] = DEFAULT_SUFFIX + args_standalone = args_instance.copy() + standalone.allocate(args_standalone) + instance_standalone = standalone.exists() + if instance_standalone: + standalone.delete() + standalone.create() + standalone.open() + + # Delete each instance in the end + def fin(): + standalone.delete() + request.addfinalizer(fin) + + return TopologyStandalone(standalone) + + +def test_ticket47976_init(topology): + """Create mep definitions and templates""" + + try: + topology.standalone.add_s(Entry((PEOPLE_DN, { + 'objectclass': "top extensibleObject".split(), + 'ou': 'people'}))) + except ldap.ALREADY_EXISTS: + pass + try: + topology.standalone.add_s(Entry((GROUPS_DN, { + 'objectclass': "top extensibleObject".split(), + 'ou': GROUPS_OU}))) + except ldap.ALREADY_EXISTS: + pass + topology.standalone.add_s(Entry((DEFINITIONS_DN, { + 'objectclass': "top nsContainer".split(), + 'cn': DEFINITIONS_CN}))) + topology.standalone.add_s(Entry((TEMPLATES_DN, { + 'objectclass': "top nsContainer".split(), + 'cn': TEMPLATES_CN}))) + topology.standalone.add_s(Entry((MANAGED_GROUP_DEF_DN, { + 'objectclass': "top extensibleObject".split(), + 'cn': MANAGED_GROUP_DEF_CN, + 'originScope': PEOPLE_DN, + 'originFilter': '(objectclass=posixAccount)', + 'managedBase': GROUPS_DN, + 'managedTemplate': MANAGED_GROUP_MEP_TMPL_DN}))) + + topology.standalone.add_s(Entry((MANAGED_GROUP_TEMPLATES_DN, { + 'objectclass': "top nsContainer".split(), + 'cn': MANAGED_GROUP_TEMPLATES_CN}))) + + topology.standalone.add_s(Entry((MANAGED_GROUP_MEP_TMPL_DN, { + 'objectclass': "top mepTemplateEntry".split(), + 'cn': MANAGED_GROUP_MEP_TMPL_CN, + 'mepRDNAttr': 'cn', + 'mepStaticAttr': ['objectclass: posixGroup', + 'objectclass: extensibleObject'], + 'mepMappedAttr': ['cn: $cn|uid: $cn', + 'gidNumber: $uidNumber']}))) + + + topology.standalone.plugins.enable(name=PLUGIN_MANAGED_ENTRY) + topology.standalone.restart(timeout=10) + + +def test_ticket47976_1(topology): + mod = [(ldap.MOD_REPLACE, 'nsslapd-pluginConfigArea', DEFINITIONS_DN)] + topology.standalone.modify_s('cn=%s,cn=plugins,cn=config' % PLUGIN_MANAGED_ENTRY, mod) + topology.standalone.stop(timeout=10) + topology.standalone.start(timeout=10) + for cpt in range(MAX_ACCOUNTS): + name = "user%d" % (cpt) + topology.standalone.add_s(Entry(("uid=%s,%s" %(name, PEOPLE_DN), { + 'objectclass': 'top posixAccount extensibleObject'.split(), + 'uid': name, + 'cn': name, + 'uidNumber': '1', + 'gidNumber': '1', + 'homeDirectory': '/home/%s' % name + }))) + + +def test_ticket47976_2(topology): + """It reimports the database with a very large page size + so all the entries (user and its private group). + """ + + log.info('Test complete') + mod = [(ldap.MOD_REPLACE, 'nsslapd-db-page-size', str(128*1024))] + topology.standalone.modify_s(DN_LDBM, mod) + + # Get the the full path and name for our LDIF we will be exporting + log.info('Export LDIF file...') + ldif_dir = topology.standalone.get_ldif_dir() + ldif_file = ldif_dir + "/export.ldif" + args = {EXPORT_REPL_INFO: False, + TASK_WAIT: True} + exportTask = Tasks(topology.standalone) + try: + exportTask.exportLDIF(DEFAULT_SUFFIX, None, ldif_file, args) + except ValueError: + assert False + # import the new ldif file + log.info('Import LDIF file...') + importTask = Tasks(topology.standalone) + args = {TASK_WAIT: True} + try: + importTask.importLDIF(DEFAULT_SUFFIX, None, ldif_file, args) + os.remove(ldif_file) + except ValueError: + os.remove(ldif_file) + assert False + + +def test_ticket47976_3(topology): + """A single delete of a user should hit 47976, because mep post op will + delete its related group. + """ + + log.info('Testing if the delete will hang or not') + #log.info("\n\nAttach\n\n debugger") + #time.sleep(60) + topology.standalone.set_option(ldap.OPT_TIMEOUT, 5) + try: + for cpt in range(MAX_ACCOUNTS): + name = "user%d" % (cpt) + topology.standalone.delete_s("uid=%s,%s" %(name, PEOPLE_DN)) + except ldap.TIMEOUT as e: + log.fatal('Timeout... likely it hangs (47976)') + assert False + + # check the entry has been deleted + for cpt in range(MAX_ACCOUNTS): + try: + name = "user%d" % (cpt) + topology.standalone.getEntry("uid=%s,%s" %(name, PEOPLE_DN), ldap.SCOPE_BASE, 'objectclass=*') + assert False + except ldap.NO_SUCH_OBJECT: + log.info('%s was correctly deleted' % name) + pass + + assert cpt == (MAX_ACCOUNTS -1) + + +if __name__ == '__main__': + # Run isolated + # -s for DEBUG mode + CURRENT_FILE = os.path.realpath(__file__) + pytest.main("-s %s" % CURRENT_FILE)

1 0

ldap/servers
by Ludwig Krispenz 02 Aug '16

02 Aug '16

ldap/servers/slapd/daemon.c | 69 +++++++++++++++++++++++++++++++++++++++++++- 1 file changed, 68 insertions(+), 1 deletion(-) New commits: commit 7110db91e75f392f1c83643d9aa88895992d9c01 Author: Ludwig Krispenz <lkrispen(a)redhat.com> Date: Mon Aug 1 10:47:31 2016 +0200 Ticket 48882 - server can hang in connection list processing Bug Description: if a thread holding the connection monitor is stuck in polling and the client doesn't respond, the main thread can be blocked on this connection when iterating the connection table. Fix Description: Implement a test and enter function for the connection monitor, so the main thread will never wait for a connection monitor already owned by an other thread https://fedorahosted.org/389/ticket/48882 Reviewed by: Noriko, Thanks diff --git a/ldap/servers/slapd/daemon.c b/ldap/servers/slapd/daemon.c index 81a54cf..23c30c3 100644 --- a/ldap/servers/slapd/daemon.c +++ b/ldap/servers/slapd/daemon.c @@ -164,6 +164,67 @@ static void unfurl_banners(Connection_Table *ct,daemon_ports_t *ports, PRFileDes static int write_pid_file(); static int init_shutdown_detect(); +/* + * NSPR has different implementations for PRMonitor, depending + * on the availble threading model + * The PR_TestAndEnterMonitor is not available for pthreads + * so this is a implementation based on the code in + * prmon.c adapted to resemble the implementation in ptsynch.c + * + * The function needs access to the elements of the PRMonitor struct. + * Therfor the pthread variant of PRMonitor is copied here. + */ +typedef struct MY_PRMonitor { + const char* name; + pthread_mutex_t lock; + pthread_t owner; + pthread_cond_t entryCV; + pthread_cond_t waitCV; + PRInt32 refCount; + PRUint32 entryCount; + PRIntn notifyTimes; +} MY_PRMonitor; + +static PRBool MY_TestAndEnterMonitor(MY_PRMonitor *mon) +{ + pthread_t self = pthread_self(); + PRStatus rv; + PRBool rc = PR_FALSE; + + PR_ASSERT(mon != NULL); + rv = pthread_mutex_lock(&mon->lock); + if (rv != 0) { + slapi_log_error(SLAPI_LOG_FATAL ,"TestAndEnterMonitor", + "Failed to acquire monitor mutex, error (%d)\n", rv); + return rc; + } + if (mon->entryCount != 0) { + if (pthread_equal(mon->owner, self)) + goto done; + rv = pthread_mutex_unlock(&mon->lock); + if (rv != 0) { + slapi_log_error(SLAPI_LOG_FATAL ,"TestAndEnterMonitor", + "Failed to release monitor mutex, error (%d)\n", rv); + } + return PR_FALSE; + } + /* and now I have the monitor */ + PR_ASSERT(mon->notifyTimes == 0); + PR_ASSERT((mon->owner) == 0); + mon->owner = self; + +done: + mon->entryCount += 1; + rv = pthread_mutex_unlock(&mon->lock); + if (rv == PR_SUCCESS) { + rc = PR_TRUE; + } else { + slapi_log_error(SLAPI_LOG_FATAL ,"TestAndEnterMonitor", + "Failed to release monitor mutex, error (%d)\n", rv); + rc = PR_FALSE; + } + return rc; +} /* Globals which are used to store the sockets between * calls to daemon_pre_setuid_init() and the daemon thread * creation. */ @@ -1552,7 +1613,13 @@ setup_pr_read_pds(Connection_Table *ct, PRFileDesc **n_tcps, PRFileDesc **s_tcps } else { - PR_EnterMonitor(c->c_mutex); + /* we try to acquire the connection mutex, if it is already + * acquired by another thread, don't wait + */ + if (PR_FALSE == MY_TestAndEnterMonitor((MY_PRMonitor *)c->c_mutex)) { + c = next; + continue; + } if (c->c_flags & CONN_FLAG_CLOSING) { /* A worker thread has marked that this connection

1 0

dirsrvtests/create_test.py dirsrvtests/tests
by Mark Reynolds 01 Aug '16

01 Aug '16

dirsrvtests/create_test.py | 7 dirsrvtests/tests/stress/reliabilty/reliab_conn_test.py | 289 +++ dirsrvtests/tests/stress/replication/mmr_01_4m-2h-4c_test.py | 969 +++++++++++ dirsrvtests/tests/stress/replication/mmr_01_4m_test.py | 572 ++++++ 4 files changed, 1833 insertions(+), 4 deletions(-) New commits: commit 8d4000b79f2b7e7801df32cf64f0c84321c2adae Author: Mark Reynolds <mreynolds(a)redhat.com> Date: Mon Aug 1 09:52:49 2016 -0400 Ticket 48921 - Adding replication and reliability tests Description: Add two replication stress tests, one with just 4 masters, and the other with 4 masters, 2 hubs, and 4 consumers. Add a connection stress test (for nunc-stans) Also made some small changes to the create_test.py script https://fedorahosted.org/389/ticket/48921 Reviewed by: ? diff --git a/dirsrvtests/create_test.py b/dirsrvtests/create_test.py index 19b838f..3898279 100755 --- a/dirsrvtests/create_test.py +++ b/dirsrvtests/create_test.py @@ -67,13 +67,13 @@ def writeFinalizer(): TEST.write(' def fin():\n') TEST.write(' """') TEST.write('If we are debugging just stop the instances, ' + - 'otherwise remove\n them\n') + 'otherwise remove them\n') TEST.write(' """\n') TEST.write(' if DEBUGGING:\n') writeInstanceOp('stop') TEST.write(' else:\n') writeInstanceOp('delete') - TEST.write('\n request.addfinalizer(fin)') + TEST.write(' request.addfinalizer(fin)') TEST.write('\n\n') @@ -191,7 +191,7 @@ if len(sys.argv) > 0: TEST.write('if DEBUGGING:\n') TEST.write(' logging.getLogger(__name__).setLevel(logging.DEBUG)\n') TEST.write('else:\n') - TEST.write(' logging.getLogger(__name__).setLevel(logging.INFO)\n\n\n') + TEST.write(' logging.getLogger(__name__).setLevel(logging.INFO)\n') TEST.write('log = logging.getLogger(__name__)\n\n\n') # @@ -649,7 +649,6 @@ if len(sys.argv) > 0: writeFinalizer() - TEST.write('\n') TEST.write(' return TopologyStandalone(standalone') for idx in range(instances): idx += 1 diff --git a/dirsrvtests/tests/stress/reliabilty/reliab_conn_test.py b/dirsrvtests/tests/stress/reliabilty/reliab_conn_test.py new file mode 100644 index 0000000..d3ee773 --- /dev/null +++ b/dirsrvtests/tests/stress/reliabilty/reliab_conn_test.py @@ -0,0 +1,289 @@ +import os +import sys +import time +import ldap +import logging +import pytest +import signal +import threading +from lib389 import DirSrv +from lib389.tools import DirSrvTools +from lib389._constants import * +from lib389.properties import * +from lib389.tasks import * +from lib389.utils import * + +DEBUGGING = False + +if DEBUGGING: + logging.getLogger(__name__).setLevel(logging.DEBUG) +else: + logging.getLogger(__name__).setLevel(logging.INFO) +log = logging.getLogger(__name__) + +MAX_CONNS = 10000000 +MAX_THREADS = 20 +STOP = False +HOSTNAME = DirSrvTools.getLocalhost() +PORT = 389 + + +class TopologyStandalone(object): + """The DS Topology Class""" + def __init__(self, standalone): + """Init""" + standalone.open() + self.standalone = standalone + + +(a)pytest.fixture(scope="module") +def topology(request): + """Create DS Deployment""" + + # Creating standalone instance ... + if DEBUGGING: + standalone = DirSrv(verbose=True) + else: + standalone = DirSrv(verbose=False) + args_instance[SER_HOST] = HOST_STANDALONE + args_instance[SER_PORT] = PORT_STANDALONE + args_instance[SER_SERVERID_PROP] = SERVERID_STANDALONE + args_instance[SER_CREATION_SUFFIX] = DEFAULT_SUFFIX + args_standalone = args_instance.copy() + standalone.allocate(args_standalone) + instance_standalone = standalone.exists() + if instance_standalone: + standalone.delete() + standalone.create() + standalone.open() + + def fin(): + """If we are debugging just stop the instances, otherwise remove them + """ + if DEBUGGING: + standalone.stop() + else: + standalone.delete() + request.addfinalizer(fin) + + return TopologyStandalone(standalone) + + +def signalHandler(signal, frame): + """ + handle control-C cleanly + """ + global STOP + STOP = True + sys.exit(0) + + +def init(inst): + """Set the idle timeout, and add sample entries + """ + + try: + inst.modify_s(DN_CONFIG, [(ldap.MOD_REPLACE, + 'nsslapd-idletimeout', + '5')]) + except ldap.LDAPError as e: + log.fatal('Failed to set idletimeout: ' + str(e)) + assert False + + try: + inst.modify_s(DN_CONFIG, [(ldap.MOD_REPLACE, + 'nsslapd-enable-nunc-stans', + 'on')]) + except ldap.LDAPError as e: + log.fatal('Failed to enable nunc-stans: ' + str(e)) + assert False + + for idx in range(0, 9): + user_dn = 'uid=entry%d,%s' % (idx, DEFAULT_SUFFIX) + try: + inst.add_s(Entry((user_dn, + {'objectclass': ['top', 'extensibleObject'], + 'uid': 'entry%d' % idx, + 'cn': 'entry%d' % idx, + 'userpassword': 'password'}))) + except ldap.LDAPError as e: + log.fatal('Failed to add user entry (%s): %s' % (user_dn, str(e))) + assert False + + inst.restart() + + +class BindOnlyConn(threading.Thread): + """This class opens and closes connections + """ + def __init__(self, inst): + """Initialize the thread class with the server instance info""" + threading.Thread.__init__(self) + self.daemon = True + self.inst = inst + + def run(self): + """Keep opening and closing connections""" + idx = 0 + err_count = 0 + global STOP + while idx < MAX_CONNS and not STOP: + try: + conn = self.inst.openConnection() + conn.unbind_s() + time.sleep(.2) + err_count = 0 + except ldap.LDAPError as e: + err_count += 1 + if err_count > 3: + log.error('BindOnlyConn exiting thread: %s' % + (str(e))) + return + time.sleep(.4) + idx += 1 + + +class IdleConn(threading.Thread): + """This class opens and closes connections + """ + def __init__(self, inst): + """Initialize the thread class withte server isntance info""" + threading.Thread.__init__(self) + self.daemon = True + self.inst = inst + + def run(self): + """Assume idleTimeout is set to less than 10 seconds + """ + idx = 0 + err_count = 0 + global STOP + while idx < (MAX_CONNS / 10) and not STOP: + try: + conn = self.inst.openConnection() + conn.simple_bind_s('uid=entry0,dc=example,dc=com', 'password') + conn.search_s('dc=example,dc=com', ldap.SCOPE_SUBTREE, + 'uid=*') + time.sleep(10) + conn.search_s('dc=example,dc=com', ldap.SCOPE_SUBTREE, + 'cn=*') + conn.unbind_s() + time.sleep(.2) + err_count = 0 + except ldap.LDAPError as e: + err_count += 1 + if err_count > 3: + log.error('IdleConn exiting thread: %s' % + (str(e))) + return + time.sleep(.4) + idx += 1 + + +class LongConn(threading.Thread): + """This class opens and closes connections to a specified server + """ + def __init__(self, inst): + """Initialize the thread class with the server instance info""" + threading.Thread.__init__(self) + self.daemon = True + self.inst = inst + + def run(self): + """Assume idleTimeout is set to less than 10 seconds + """ + idx = 0 + err_count = 0 + global STOP + while idx < MAX_CONNS and not STOP: + try: + conn = self.inst.openConnection() + conn.search_s('dc=example,dc=com', ldap.SCOPE_SUBTREE, + 'objectclass=*') + conn.search_s('dc=example,dc=com', ldap.SCOPE_SUBTREE, + 'uid=mark') + conn.search_s('dc=example,dc=com', ldap.SCOPE_SUBTREE, + 'cn=*') + conn.search_s('', ldap.SCOPE_BASE, 'objectclass=*') + conn.unbind_s() + time.sleep(.2) + err_count = 0 + except ldap.LDAPError as e: + err_count += 1 + if err_count > 3: + log.error('LongConn search exiting thread: %s' % + (str(e))) + return + time.sleep(.4) + idx += 1 + + +def test_connection_load(topology): + """Send the server a variety of connections using many threads: + - Open, Bind, Close + - Open, Bind, Search, wait to trigger idletimeout, Search, Close + - Open, Bind, Search, Search, Search, Close + """ + + # setup the control-C signal handler + signal.signal(signal.SIGINT, signalHandler) + + # Set the config and add sample entries + log.info('Initializing setup...') + init(topology.standalone) + + # + # Bind/Unbind Conn Threads + # + log.info('Launching Bind-Only Connection threads...') + threads = [] + idx = 0 + while idx < MAX_THREADS: + threads.append(BindOnlyConn(topology.standalone)) + idx += 1 + for thread in threads: + thread.start() + time.sleep(0.1) + + # + # Idle Conn Threads + # + log.info('Launching Idle Connection threads...') + idx = 0 + idle_threads = [] + while idx < MAX_THREADS: + idle_threads.append(IdleConn(topology.standalone)) + idx += 1 + for thread in idle_threads: + thread.start() + time.sleep(0.1) + + # + # Long Conn Threads + # + log.info('Launching Long Connection threads...') + idx = 0 + long_threads = [] + while idx < MAX_THREADS: + long_threads.append(LongConn(topology.standalone)) + idx += 1 + for thread in long_threads: + thread.start() + time.sleep(0.1) + + # + # Now wait for all the threads to complete + # + log.info('Waiting for threads to finish...') + while threading.active_count() > 0: + time.sleep(1) + + log.info('Done') + + +if __name__ == '__main__': + # Run isolated + # -s for DEBUG mode + CURRENT_FILE = os.path.realpath(__file__) + pytest.main("-s %s" % CURRENT_FILE) + diff --git a/dirsrvtests/tests/stress/replication/mmr_01_4m-2h-4c_test.py b/dirsrvtests/tests/stress/replication/mmr_01_4m-2h-4c_test.py new file mode 100644 index 0000000..95c0b71 --- /dev/null +++ b/dirsrvtests/tests/stress/replication/mmr_01_4m-2h-4c_test.py @@ -0,0 +1,969 @@ +import os +import sys +import time +import datetime +import ldap +import logging +import pytest +import threading +from lib389._constants import * +from lib389.properties import * +from lib389.tasks import * +from lib389.utils import * +from lib389.repltools import ReplTools + +logging.getLogger(__name__).setLevel(logging.INFO) +log = logging.getLogger(__name__) + +DEBUGGING = False +ADD_DEL_COUNT = 500 +MAX_LOOPS = 5 +TEST_CONVERGE_LATENCY = True +CONVERGENCE_TIMEOUT = '60' +master_list = [] +hub_list = [] +con_list = [] +TEST_START = time.time() + +LAST_DN_IDX = ADD_DEL_COUNT - 1 +LAST_DN_M1 = 'DEL dn="uid=master_1-%d,%s' % (LAST_DN_IDX, DEFAULT_SUFFIX) +LAST_DN_M2 = 'DEL dn="uid=master_2-%d,%s' % (LAST_DN_IDX, DEFAULT_SUFFIX) +LAST_DN_M3 = 'DEL dn="uid=master_3-%d,%s' % (LAST_DN_IDX, DEFAULT_SUFFIX) +LAST_DN_M4 = 'DEL dn="uid=master_4-%d,%s' % (LAST_DN_IDX, DEFAULT_SUFFIX) + + +class TopologyReplication(object): + """The Replication Topology Class""" + def __init__(self, master1, master2, master3, master4, hub1, hub2, + consumer1, consumer2, consumer3, consumer4): + """Init""" + master1.open() + self.master1 = master1 + master2.open() + self.master2 = master2 + master3.open() + self.master3 = master3 + master4.open() + self.master4 = master4 + hub1.open() + self.hub1 = hub1 + hub2.open() + self.hub2 = hub2 + consumer1.open() + self.consumer1 = consumer1 + consumer2.open() + self.consumer2 = consumer2 + consumer3.open() + self.consumer3 = consumer3 + consumer4.open() + self.consumer4 = consumer4 + master_list.append(master1.serverid) + master_list.append(master2.serverid) + master_list.append(master3.serverid) + master_list.append(master4.serverid) + hub_list.append(hub1.serverid) + hub_list.append(hub2.serverid) + con_list.append(consumer1.serverid) + con_list.append(consumer2.serverid) + con_list.append(consumer3.serverid) + con_list.append(consumer4.serverid) + + +(a)pytest.fixture(scope="module") +def topology(request): + """Create Replication Deployment""" + + # Creating master 1... + if DEBUGGING: + master1 = DirSrv(verbose=True) + else: + master1 = DirSrv(verbose=False) + args_instance[SER_HOST] = HOST_MASTER_1 + args_instance[SER_PORT] = PORT_MASTER_1 + args_instance[SER_SERVERID_PROP] = SERVERID_MASTER_1 + args_instance[SER_CREATION_SUFFIX] = DEFAULT_SUFFIX + args_master = args_instance.copy() + master1.allocate(args_master) + instance_master1 = master1.exists() + if instance_master1: + master1.delete() + master1.create() + master1.open() + master1.replica.enableReplication(suffix=SUFFIX, role=REPLICAROLE_MASTER, + replicaId=REPLICAID_MASTER_1) + + # Creating master 2... + if DEBUGGING: + master2 = DirSrv(verbose=True) + else: + master2 = DirSrv(verbose=False) + args_instance[SER_HOST] = HOST_MASTER_2 + args_instance[SER_PORT] = PORT_MASTER_2 + args_instance[SER_SERVERID_PROP] = SERVERID_MASTER_2 + args_instance[SER_CREATION_SUFFIX] = DEFAULT_SUFFIX + args_master = args_instance.copy() + master2.allocate(args_master) + instance_master2 = master2.exists() + if instance_master2: + master2.delete() + master2.create() + master2.open() + master2.replica.enableReplication(suffix=SUFFIX, role=REPLICAROLE_MASTER, + replicaId=REPLICAID_MASTER_2) + + # Creating master 3... + if DEBUGGING: + master3 = DirSrv(verbose=True) + else: + master3 = DirSrv(verbose=False) + args_instance[SER_HOST] = HOST_MASTER_3 + args_instance[SER_PORT] = PORT_MASTER_3 + args_instance[SER_SERVERID_PROP] = SERVERID_MASTER_3 + args_instance[SER_CREATION_SUFFIX] = DEFAULT_SUFFIX + args_master = args_instance.copy() + master3.allocate(args_master) + instance_master3 = master3.exists() + if instance_master3: + master3.delete() + master3.create() + master3.open() + master3.replica.enableReplication(suffix=SUFFIX, role=REPLICAROLE_MASTER, + replicaId=REPLICAID_MASTER_3) + + # Creating master 4... + if DEBUGGING: + master4 = DirSrv(verbose=True) + else: + master4 = DirSrv(verbose=False) + args_instance[SER_HOST] = HOST_MASTER_4 + args_instance[SER_PORT] = PORT_MASTER_4 + args_instance[SER_SERVERID_PROP] = SERVERID_MASTER_4 + args_instance[SER_CREATION_SUFFIX] = DEFAULT_SUFFIX + args_master = args_instance.copy() + master4.allocate(args_master) + instance_master4 = master4.exists() + if instance_master4: + master4.delete() + master4.create() + master4.open() + master4.replica.enableReplication(suffix=SUFFIX, role=REPLICAROLE_MASTER, + replicaId=REPLICAID_MASTER_4) + + # Creating hub 1... + if DEBUGGING: + hub1 = DirSrv(verbose=True) + else: + hub1 = DirSrv(verbose=False) + args_instance[SER_HOST] = HOST_HUB_1 + args_instance[SER_PORT] = PORT_HUB_1 + args_instance[SER_SERVERID_PROP] = SERVERID_HUB_1 + args_instance[SER_CREATION_SUFFIX] = DEFAULT_SUFFIX + args_hub = args_instance.copy() + hub1.allocate(args_hub) + instance_hub1 = hub1.exists() + if instance_hub1: + hub1.delete() + hub1.create() + hub1.open() + hub1.replica.enableReplication(suffix=SUFFIX, role=REPLICAROLE_HUB, + replicaId=REPLICAID_HUB_1) + + # Creating hub 2... + if DEBUGGING: + hub2 = DirSrv(verbose=True) + else: + hub2 = DirSrv(verbose=False) + args_instance[SER_HOST] = HOST_HUB_2 + args_instance[SER_PORT] = PORT_HUB_2 + args_instance[SER_SERVERID_PROP] = SERVERID_HUB_2 + args_instance[SER_CREATION_SUFFIX] = DEFAULT_SUFFIX + args_hub = args_instance.copy() + hub2.allocate(args_hub) + instance_hub2 = hub2.exists() + if instance_hub2: + hub2.delete() + hub2.create() + hub2.open() + hub2.replica.enableReplication(suffix=SUFFIX, role=REPLICAROLE_HUB, + replicaId=REPLICAID_HUB_2) + + # Creating consumer 1... + if DEBUGGING: + consumer1 = DirSrv(verbose=True) + else: + consumer1 = DirSrv(verbose=False) + args_instance[SER_HOST] = HOST_CONSUMER_1 + args_instance[SER_PORT] = PORT_CONSUMER_1 + args_instance[SER_SERVERID_PROP] = SERVERID_CONSUMER_1 + args_instance[SER_CREATION_SUFFIX] = DEFAULT_SUFFIX + args_consumer = args_instance.copy() + consumer1.allocate(args_consumer) + instance_consumer1 = consumer1.exists() + if instance_consumer1: + consumer1.delete() + consumer1.create() + consumer1.open() + consumer1.replica.enableReplication(suffix=SUFFIX, + role=REPLICAROLE_CONSUMER, + replicaId=CONSUMER_REPLICAID) + + # Creating consumer 2... + if DEBUGGING: + consumer2 = DirSrv(verbose=True) + else: + consumer2 = DirSrv(verbose=False) + args_instance[SER_HOST] = HOST_CONSUMER_2 + args_instance[SER_PORT] = PORT_CONSUMER_2 + args_instance[SER_SERVERID_PROP] = SERVERID_CONSUMER_2 + args_instance[SER_CREATION_SUFFIX] = DEFAULT_SUFFIX + args_consumer = args_instance.copy() + consumer2.allocate(args_consumer) + instance_consumer2 = consumer2.exists() + if instance_consumer2: + consumer2.delete() + consumer2.create() + consumer2.open() + consumer2.replica.enableReplication(suffix=SUFFIX, + role=REPLICAROLE_CONSUMER, + replicaId=CONSUMER_REPLICAID) + + # Creating consumer 3... + if DEBUGGING: + consumer3 = DirSrv(verbose=True) + else: + consumer3 = DirSrv(verbose=False) + args_instance[SER_HOST] = HOST_CONSUMER_3 + args_instance[SER_PORT] = PORT_CONSUMER_3 + args_instance[SER_SERVERID_PROP] = SERVERID_CONSUMER_3 + args_instance[SER_CREATION_SUFFIX] = DEFAULT_SUFFIX + args_consumer = args_instance.copy() + consumer3.allocate(args_consumer) + instance_consumer3 = consumer3.exists() + if instance_consumer3: + consumer3.delete() + consumer3.create() + consumer3.open() + consumer3.replica.enableReplication(suffix=SUFFIX, + role=REPLICAROLE_CONSUMER, + replicaId=CONSUMER_REPLICAID) + + # Creating consumer 4... + if DEBUGGING: + consumer4 = DirSrv(verbose=True) + else: + consumer4 = DirSrv(verbose=False) + args_instance[SER_HOST] = HOST_CONSUMER_4 + args_instance[SER_PORT] = PORT_CONSUMER_4 + args_instance[SER_SERVERID_PROP] = SERVERID_CONSUMER_4 + args_instance[SER_CREATION_SUFFIX] = DEFAULT_SUFFIX + args_consumer = args_instance.copy() + consumer4.allocate(args_consumer) + instance_consumer4 = consumer4.exists() + if instance_consumer4: + consumer4.delete() + consumer4.create() + consumer4.open() + consumer4.replica.enableReplication(suffix=SUFFIX, + role=REPLICAROLE_CONSUMER, + replicaId=CONSUMER_REPLICAID) + + # + # Create all the agreements + # + + # Creating agreement from master 1 to master 2 + properties = {RA_NAME: 'meTo_' + master2.host + ':' + str(master2.port), + RA_BINDDN: defaultProperties[REPLICATION_BIND_DN], + RA_BINDPW: defaultProperties[REPLICATION_BIND_PW], + RA_METHOD: defaultProperties[REPLICATION_BIND_METHOD], + RA_TRANSPORT_PROT: defaultProperties[REPLICATION_TRANSPORT]} + m1_m2_agmt = master1.agreement.create(suffix=SUFFIX, host=master2.host, + port=master2.port, + properties=properties) + if not m1_m2_agmt: + log.fatal("Fail to create a master -> master replica agreement") + sys.exit(1) + log.debug("%s created" % m1_m2_agmt) + + # Creating agreement from master 1 to master 3 + properties = {RA_NAME: 'meTo_' + master3.host + ':' + str(master3.port), + RA_BINDDN: defaultProperties[REPLICATION_BIND_DN], + RA_BINDPW: defaultProperties[REPLICATION_BIND_PW], + RA_METHOD: defaultProperties[REPLICATION_BIND_METHOD], + RA_TRANSPORT_PROT: defaultProperties[REPLICATION_TRANSPORT]} + m1_m3_agmt = master1.agreement.create(suffix=SUFFIX, host=master3.host, + port=master3.port, + properties=properties) + if not m1_m3_agmt: + log.fatal("Fail to create a master -> master replica agreement") + sys.exit(1) + log.debug("%s created" % m1_m3_agmt) + + # Creating agreement from master 1 to master 4 + properties = {RA_NAME: 'meTo_' + master4.host + ':' + str(master4.port), + RA_BINDDN: defaultProperties[REPLICATION_BIND_DN], + RA_BINDPW: defaultProperties[REPLICATION_BIND_PW], + RA_METHOD: defaultProperties[REPLICATION_BIND_METHOD], + RA_TRANSPORT_PROT: defaultProperties[REPLICATION_TRANSPORT]} + m1_m4_agmt = master1.agreement.create(suffix=SUFFIX, host=master4.host, + port=master4.port, + properties=properties) + if not m1_m4_agmt: + log.fatal("Fail to create a master -> master replica agreement") + sys.exit(1) + log.debug("%s created" % m1_m4_agmt) + + # Creating agreement from master 1 to hub 1 + properties = {RA_NAME: 'meTo_' + hub1.host + ':' + str(hub1.port), + RA_BINDDN: defaultProperties[REPLICATION_BIND_DN], + RA_BINDPW: defaultProperties[REPLICATION_BIND_PW], + RA_METHOD: defaultProperties[REPLICATION_BIND_METHOD], + RA_TRANSPORT_PROT: defaultProperties[REPLICATION_TRANSPORT]} + m1_h1_agmt = master1.agreement.create(suffix=SUFFIX, host=hub1.host, + port=hub1.port, + properties=properties) + if not m1_h1_agmt: + log.fatal("Fail to create a master -> hub replica agreement") + sys.exit(1) + log.debug("%s created" % m1_h1_agmt) + + # Creating agreement from master 1 to hub 2 + properties = {RA_NAME: 'meTo_' + hub2.host + ':' + str(hub2.port), + RA_BINDDN: defaultProperties[REPLICATION_BIND_DN], + RA_BINDPW: defaultProperties[REPLICATION_BIND_PW], + RA_METHOD: defaultProperties[REPLICATION_BIND_METHOD], + RA_TRANSPORT_PROT: defaultProperties[REPLICATION_TRANSPORT]} + m1_h2_agmt = master1.agreement.create(suffix=SUFFIX, host=hub2.host, + port=hub2.port, + properties=properties) + if not m1_h2_agmt: + log.fatal("Fail to create a master -> hub replica agreement") + sys.exit(1) + log.debug("%s created" % m1_h2_agmt) + + # Creating agreement from master 2 to master 1 + properties = {RA_NAME: 'meTo_' + master1.host + ':' + str(master1.port), + RA_BINDDN: defaultProperties[REPLICATION_BIND_DN], + RA_BINDPW: defaultProperties[REPLICATION_BIND_PW], + RA_METHOD: defaultProperties[REPLICATION_BIND_METHOD], + RA_TRANSPORT_PROT: defaultProperties[REPLICATION_TRANSPORT]} + m2_m1_agmt = master2.agreement.create(suffix=SUFFIX, host=master1.host, + port=master1.port, + properties=properties) + if not m2_m1_agmt: + log.fatal("Fail to create a master -> master replica agreement") + sys.exit(1) + log.debug("%s created" % m2_m1_agmt) + + # Creating agreement from master 2 to master 3 + properties = {RA_NAME: 'meTo_' + master3.host + ':' + str(master3.port), + RA_BINDDN: defaultProperties[REPLICATION_BIND_DN], + RA_BINDPW: defaultProperties[REPLICATION_BIND_PW], + RA_METHOD: defaultProperties[REPLICATION_BIND_METHOD], + RA_TRANSPORT_PROT: defaultProperties[REPLICATION_TRANSPORT]} + m2_m3_agmt = master2.agreement.create(suffix=SUFFIX, host=master3.host, + port=master3.port, + properties=properties) + if not m2_m3_agmt: + log.fatal("Fail to create a master -> master replica agreement") + sys.exit(1) + log.debug("%s created" % m2_m3_agmt) + + # Creating agreement from master 2 to master 4 + properties = {RA_NAME: 'meTo_' + master4.host + ':' + str(master4.port), + RA_BINDDN: defaultProperties[REPLICATION_BIND_DN], + RA_BINDPW: defaultProperties[REPLICATION_BIND_PW], + RA_METHOD: defaultProperties[REPLICATION_BIND_METHOD], + RA_TRANSPORT_PROT: defaultProperties[REPLICATION_TRANSPORT]} + m2_m4_agmt = master2.agreement.create(suffix=SUFFIX, host=master4.host, + port=master4.port, + properties=properties) + if not m2_m4_agmt: + log.fatal("Fail to create a master -> master replica agreement") + sys.exit(1) + log.debug("%s created" % m2_m4_agmt) + + # Creating agreement from master 2 to hub 1 + properties = {RA_NAME: 'meTo_' + hub1.host + ':' + str(hub1.port), + RA_BINDDN: defaultProperties[REPLICATION_BIND_DN], + RA_BINDPW: defaultProperties[REPLICATION_BIND_PW], + RA_METHOD: defaultProperties[REPLICATION_BIND_METHOD], + RA_TRANSPORT_PROT: defaultProperties[REPLICATION_TRANSPORT]} + m2_h1_agmt = master2.agreement.create(suffix=SUFFIX, host=hub1.host, + port=hub1.port, + properties=properties) + if not m2_h1_agmt: + log.fatal("Fail to create a master -> hub replica agreement") + sys.exit(1) + log.debug("%s created" % m2_h1_agmt) + + # Creating agreement from master 2 to hub 2 + properties = {RA_NAME: 'meTo_' + hub2.host + ':' + str(hub2.port), + RA_BINDDN: defaultProperties[REPLICATION_BIND_DN], + RA_BINDPW: defaultProperties[REPLICATION_BIND_PW], + RA_METHOD: defaultProperties[REPLICATION_BIND_METHOD], + RA_TRANSPORT_PROT: defaultProperties[REPLICATION_TRANSPORT]} + m2_h2_agmt = master2.agreement.create(suffix=SUFFIX, host=hub2.host, + port=hub2.port, + properties=properties) + if not m2_h2_agmt: + log.fatal("Fail to create a master -> hub replica agreement") + sys.exit(1) + log.debug("%s created" % m2_h2_agmt) + + # Creating agreement from master 3 to master 1 + properties = {RA_NAME: 'meTo_' + master1.host + ':' + str(master1.port), + RA_BINDDN: defaultProperties[REPLICATION_BIND_DN], + RA_BINDPW: defaultProperties[REPLICATION_BIND_PW], + RA_METHOD: defaultProperties[REPLICATION_BIND_METHOD], + RA_TRANSPORT_PROT: defaultProperties[REPLICATION_TRANSPORT]} + m3_m1_agmt = master3.agreement.create(suffix=SUFFIX, host=master1.host, + port=master1.port, + properties=properties) + if not m3_m1_agmt: + log.fatal("Fail to create a master -> master replica agreement") + sys.exit(1) + log.debug("%s created" % m3_m1_agmt) + + # Creating agreement from master 3 to master 2 + properties = {RA_NAME: 'meTo_' + master2.host + ':' + str(master2.port), + RA_BINDDN: defaultProperties[REPLICATION_BIND_DN], + RA_BINDPW: defaultProperties[REPLICATION_BIND_PW], + RA_METHOD: defaultProperties[REPLICATION_BIND_METHOD], + RA_TRANSPORT_PROT: defaultProperties[REPLICATION_TRANSPORT]} + m3_m2_agmt = master3.agreement.create(suffix=SUFFIX, host=master2.host, + port=master2.port, + properties=properties) + if not m3_m2_agmt: + log.fatal("Fail to create a master -> master replica agreement") + sys.exit(1) + log.debug("%s created" % m3_m2_agmt) + + # Creating agreement from master 3 to master 4 + properties = {RA_NAME: 'meTo_' + master4.host + ':' + str(master4.port), + RA_BINDDN: defaultProperties[REPLICATION_BIND_DN], + RA_BINDPW: defaultProperties[REPLICATION_BIND_PW], + RA_METHOD: defaultProperties[REPLICATION_BIND_METHOD], + RA_TRANSPORT_PROT: defaultProperties[REPLICATION_TRANSPORT]} + m3_m4_agmt = master3.agreement.create(suffix=SUFFIX, host=master4.host, + port=master4.port, + properties=properties) + if not m3_m4_agmt: + log.fatal("Fail to create a master -> master replica agreement") + sys.exit(1) + log.debug("%s created" % m3_m4_agmt) + + # Creating agreement from master 3 to hub 1 + properties = {RA_NAME: 'meTo_' + hub1.host + ':' + str(hub1.port), + RA_BINDDN: defaultProperties[REPLICATION_BIND_DN], + RA_BINDPW: defaultProperties[REPLICATION_BIND_PW], + RA_METHOD: defaultProperties[REPLICATION_BIND_METHOD], + RA_TRANSPORT_PROT: defaultProperties[REPLICATION_TRANSPORT]} + m3_h1_agmt = master3.agreement.create(suffix=SUFFIX, host=hub1.host, + port=hub1.port, + properties=properties) + if not m3_h1_agmt: + log.fatal("Fail to create a master -> hub replica agreement") + sys.exit(1) + log.debug("%s created" % m3_h1_agmt) + + # Creating agreement from master 3 to hub 2 + properties = {RA_NAME: 'meTo_' + hub2.host + ':' + str(hub2.port), + RA_BINDDN: defaultProperties[REPLICATION_BIND_DN], + RA_BINDPW: defaultProperties[REPLICATION_BIND_PW], + RA_METHOD: defaultProperties[REPLICATION_BIND_METHOD], + RA_TRANSPORT_PROT: defaultProperties[REPLICATION_TRANSPORT]} + m3_h2_agmt = master3.agreement.create(suffix=SUFFIX, host=hub2.host, + port=hub2.port, + properties=properties) + if not m3_h2_agmt: + log.fatal("Fail to create a master -> hub replica agreement") + sys.exit(1) + log.debug("%s created" % m3_h2_agmt) + + # Creating agreement from master 4 to master 1 + properties = {RA_NAME: 'meTo_' + master1.host + ':' + str(master1.port), + RA_BINDDN: defaultProperties[REPLICATION_BIND_DN], + RA_BINDPW: defaultProperties[REPLICATION_BIND_PW], + RA_METHOD: defaultProperties[REPLICATION_BIND_METHOD], + RA_TRANSPORT_PROT: defaultProperties[REPLICATION_TRANSPORT]} + m4_m1_agmt = master4.agreement.create(suffix=SUFFIX, host=master1.host, + port=master1.port, + properties=properties) + if not m4_m1_agmt: + log.fatal("Fail to create a master -> master replica agreement") + sys.exit(1) + log.debug("%s created" % m4_m1_agmt) + + # Creating agreement from master 4 to master 2 + properties = {RA_NAME: 'meTo_' + master2.host + ':' + str(master2.port), + RA_BINDDN: defaultProperties[REPLICATION_BIND_DN], + RA_BINDPW: defaultProperties[REPLICATION_BIND_PW], + RA_METHOD: defaultProperties[REPLICATION_BIND_METHOD], + RA_TRANSPORT_PROT: defaultProperties[REPLICATION_TRANSPORT]} + m4_m2_agmt = master4.agreement.create(suffix=SUFFIX, host=master2.host, + port=master2.port, + properties=properties) + if not m4_m2_agmt: + log.fatal("Fail to create a master -> master replica agreement") + sys.exit(1) + log.debug("%s created" % m4_m2_agmt) + + # Creating agreement from master 4 to master 3 + properties = {RA_NAME: 'meTo_' + master3.host + ':' + str(master3.port), + RA_BINDDN: defaultProperties[REPLICATION_BIND_DN], + RA_BINDPW: defaultProperties[REPLICATION_BIND_PW], + RA_METHOD: defaultProperties[REPLICATION_BIND_METHOD], + RA_TRANSPORT_PROT: defaultProperties[REPLICATION_TRANSPORT]} + m4_m3_agmt = master4.agreement.create(suffix=SUFFIX, host=master3.host, + port=master3.port, + properties=properties) + if not m4_m3_agmt: + log.fatal("Fail to create a master -> master replica agreement") + sys.exit(1) + log.debug("%s created" % m4_m3_agmt) + + # Creating agreement from master 4 to hub 1 + properties = {RA_NAME: 'meTo_' + hub1.host + ':' + str(hub1.port), + RA_BINDDN: defaultProperties[REPLICATION_BIND_DN], + RA_BINDPW: defaultProperties[REPLICATION_BIND_PW], + RA_METHOD: defaultProperties[REPLICATION_BIND_METHOD], + RA_TRANSPORT_PROT: defaultProperties[REPLICATION_TRANSPORT]} + m4_h1_agmt = master4.agreement.create(suffix=SUFFIX, host=hub1.host, + port=hub1.port, + properties=properties) + if not m4_h1_agmt: + log.fatal("Fail to create a master -> hub replica agreement") + sys.exit(1) + log.debug("%s created" % m4_h1_agmt) + + # Creating agreement from master 4 to hub 2 + properties = {RA_NAME: 'meTo_' + hub2.host + ':' + str(hub2.port), + RA_BINDDN: defaultProperties[REPLICATION_BIND_DN], + RA_BINDPW: defaultProperties[REPLICATION_BIND_PW], + RA_METHOD: defaultProperties[REPLICATION_BIND_METHOD], + RA_TRANSPORT_PROT: defaultProperties[REPLICATION_TRANSPORT]} + m4_h2_agmt = master4.agreement.create(suffix=SUFFIX, host=hub2.host, + port=hub2.port, + properties=properties) + if not m4_h2_agmt: + log.fatal("Fail to create a master -> hub replica agreement") + sys.exit(1) + log.debug("%s created" % m4_h2_agmt) + + # Creating agreement from hub 1 to consumer 1 + properties = {RA_NAME: 'me2_' + consumer1.host + ':' + str(consumer1.port), + RA_BINDDN: defaultProperties[REPLICATION_BIND_DN], + RA_BINDPW: defaultProperties[REPLICATION_BIND_PW], + RA_METHOD: defaultProperties[REPLICATION_BIND_METHOD], + RA_TRANSPORT_PROT: defaultProperties[REPLICATION_TRANSPORT]} + h1_c1_agmt = hub1.agreement.create(suffix=SUFFIX, host=consumer1.host, + port=consumer1.port, + properties=properties) + if not h1_c1_agmt: + log.fatal("Fail to create a hub -> consumer replica agreement") + sys.exit(1) + log.debug("%s created" % h1_c1_agmt) + + # Creating agreement from hub 1 to consumer 2 + properties = {RA_NAME: 'me2_' + consumer2.host + ':' + str(consumer2.port), + RA_BINDDN: defaultProperties[REPLICATION_BIND_DN], + RA_BINDPW: defaultProperties[REPLICATION_BIND_PW], + RA_METHOD: defaultProperties[REPLICATION_BIND_METHOD], + RA_TRANSPORT_PROT: defaultProperties[REPLICATION_TRANSPORT]} + h1_c2_agmt = hub1.agreement.create(suffix=SUFFIX, host=consumer2.host, + port=consumer2.port, + properties=properties) + if not h1_c2_agmt: + log.fatal("Fail to create a hub -> consumer replica agreement") + sys.exit(1) + log.debug("%s created" % h1_c2_agmt) + + # Creating agreement from hub 1 to consumer 3 + properties = {RA_NAME: 'me2_' + consumer3.host + ':' + str(consumer3.port), + RA_BINDDN: defaultProperties[REPLICATION_BIND_DN], + RA_BINDPW: defaultProperties[REPLICATION_BIND_PW], + RA_METHOD: defaultProperties[REPLICATION_BIND_METHOD], + RA_TRANSPORT_PROT: defaultProperties[REPLICATION_TRANSPORT]} + h1_c3_agmt = hub1.agreement.create(suffix=SUFFIX, host=consumer3.host, + port=consumer3.port, + properties=properties) + if not h1_c3_agmt: + log.fatal("Fail to create a hub -> consumer replica agreement") + sys.exit(1) + log.debug("%s created" % h1_c3_agmt) + + # Creating agreement from hub 1 to consumer 4 + properties = {RA_NAME: 'me2_' + consumer4.host + ':' + str(consumer4.port), + RA_BINDDN: defaultProperties[REPLICATION_BIND_DN], + RA_BINDPW: defaultProperties[REPLICATION_BIND_PW], + RA_METHOD: defaultProperties[REPLICATION_BIND_METHOD], + RA_TRANSPORT_PROT: defaultProperties[REPLICATION_TRANSPORT]} + h1_c4_agmt = hub1.agreement.create(suffix=SUFFIX, host=consumer4.host, + port=consumer4.port, + properties=properties) + if not h1_c4_agmt: + log.fatal("Fail to create a hub -> consumer replica agreement") + sys.exit(1) + log.debug("%s created" % h1_c4_agmt) + + # Creating agreement from hub 2 to consumer 1 + properties = {RA_NAME: 'me2_' + consumer1.host + ':' + str(consumer1.port), + RA_BINDDN: defaultProperties[REPLICATION_BIND_DN], + RA_BINDPW: defaultProperties[REPLICATION_BIND_PW], + RA_METHOD: defaultProperties[REPLICATION_BIND_METHOD], + RA_TRANSPORT_PROT: defaultProperties[REPLICATION_TRANSPORT]} + h2_c1_agmt = hub2.agreement.create(suffix=SUFFIX, host=consumer1.host, + port=consumer1.port, + properties=properties) + if not h2_c1_agmt: + log.fatal("Fail to create a hub -> consumer replica agreement") + sys.exit(1) + log.debug("%s created" % h2_c1_agmt) + + # Creating agreement from hub 2 to consumer 2 + properties = {RA_NAME: 'me2_' + consumer2.host + ':' + str(consumer2.port), + RA_BINDDN: defaultProperties[REPLICATION_BIND_DN], + RA_BINDPW: defaultProperties[REPLICATION_BIND_PW], + RA_METHOD: defaultProperties[REPLICATION_BIND_METHOD], + RA_TRANSPORT_PROT: defaultProperties[REPLICATION_TRANSPORT]} + h2_c2_agmt = hub2.agreement.create(suffix=SUFFIX, host=consumer2.host, + port=consumer2.port, + properties=properties) + if not h2_c2_agmt: + log.fatal("Fail to create a hub -> consumer replica agreement") + sys.exit(1) + log.debug("%s created" % h2_c2_agmt) + + # Creating agreement from hub 2 to consumer 3 + properties = {RA_NAME: 'me2_' + consumer3.host + ':' + str(consumer3.port), + RA_BINDDN: defaultProperties[REPLICATION_BIND_DN], + RA_BINDPW: defaultProperties[REPLICATION_BIND_PW], + RA_METHOD: defaultProperties[REPLICATION_BIND_METHOD], + RA_TRANSPORT_PROT: defaultProperties[REPLICATION_TRANSPORT]} + h2_c3_agmt = hub2.agreement.create(suffix=SUFFIX, host=consumer3.host, + port=consumer3.port, + properties=properties) + if not h2_c3_agmt: + log.fatal("Fail to create a hub -> consumer replica agreement") + sys.exit(1) + log.debug("%s created" % h2_c3_agmt) + + # Creating agreement from hub 2 to consumer 4 + properties = {RA_NAME: 'me2_' + consumer4.host + ':' + str(consumer4.port), + RA_BINDDN: defaultProperties[REPLICATION_BIND_DN], + RA_BINDPW: defaultProperties[REPLICATION_BIND_PW], + RA_METHOD: defaultProperties[REPLICATION_BIND_METHOD], + RA_TRANSPORT_PROT: defaultProperties[REPLICATION_TRANSPORT]} + h2_c4_agmt = hub2.agreement.create(suffix=SUFFIX, host=consumer4.host, + port=consumer4.port, + properties=properties) + if not h2_c4_agmt: + log.fatal("Fail to create a hub -> consumer replica agreement") + sys.exit(1) + log.debug("%s created" % h2_c4_agmt) + + # Allow the replicas to get situated with the new agreements... + time.sleep(5) + + # + # Initialize all the agreements + # + master1.agreement.init(SUFFIX, HOST_MASTER_2, PORT_MASTER_2) + master1.waitForReplInit(m1_m2_agmt) + master1.agreement.init(SUFFIX, HOST_MASTER_3, PORT_MASTER_3) + master1.waitForReplInit(m1_m3_agmt) + master1.agreement.init(SUFFIX, HOST_MASTER_4, PORT_MASTER_4) + master1.waitForReplInit(m1_m4_agmt) + master1.agreement.init(SUFFIX, HOST_HUB_1, PORT_HUB_1) + master1.waitForReplInit(m1_h1_agmt) + hub1.agreement.init(SUFFIX, HOST_CONSUMER_1, PORT_CONSUMER_1) + hub1.waitForReplInit(h1_c1_agmt) + hub1.agreement.init(SUFFIX, HOST_CONSUMER_2, PORT_CONSUMER_2) + hub1.waitForReplInit(h1_c2_agmt) + hub1.agreement.init(SUFFIX, HOST_CONSUMER_3, PORT_CONSUMER_3) + hub1.waitForReplInit(h1_c3_agmt) + hub1.agreement.init(SUFFIX, HOST_CONSUMER_4, PORT_CONSUMER_4) + hub1.waitForReplInit(h1_c4_agmt) + master1.agreement.init(SUFFIX, HOST_HUB_2, PORT_HUB_2) + master1.waitForReplInit(m1_h2_agmt) + + # Check replication is working... + if master1.testReplication(DEFAULT_SUFFIX, consumer1): + log.info('Replication is working.') + else: + log.fatal('Replication is not working.') + assert False + + def fin(): + """If we are debugging just stop the instances, otherwise remove + them + """ + if DEBUGGING: + master1.stop() + master2.stop() + master3.stop() + master4.stop() + hub1.stop() + hub2.stop() + consumer1.stop() + consumer2.stop() + consumer3.stop() + consumer4.stop() + else: + master1.delete() + master2.delete() + master3.delete() + master4.delete() + hub1.delete() + hub2.delete() + consumer1.delete() + consumer2.delete() + consumer3.delete() + consumer4.delete() + request.addfinalizer(fin) + + return TopologyReplication(master1, master2, master3, master4, hub1, hub2, + consumer1, consumer2, consumer3, consumer4) + + +class AddDelUsers(threading.Thread): + """Add's and delets 50000 entries""" + def __init__(self, inst): + """ + Initialize the thread + """ + threading.Thread.__init__(self) + self.daemon = True + self.inst = inst + self.name = inst.serverid + + def run(self): + """ + Start adding users + """ + idx = 0 + + log.info('AddDelUsers (%s) Adding and deleting %d entries...' % + (self.name, ADD_DEL_COUNT)) + + while idx < ADD_DEL_COUNT: + RDN_VAL = ('uid=%s-%d' % (self.name, idx)) + USER_DN = ('%s,%s' % (RDN_VAL, DEFAULT_SUFFIX)) + + try: + self.inst.add_s(Entry((USER_DN, {'objectclass': + 'top extensibleObject'.split(), + 'uid': RDN_VAL}))) + except ldap.LDAPError as e: + log.fatal('AddDelUsers (%s): failed to add (%s) error: %s' % + (self.name, USER_DN, str(e))) + assert False + + try: + self.inst.delete_s(USER_DN) + except ldap.LDAPError as e: + log.fatal('AddDelUsers (%s): failed to delete (%s) error: %s' % + (self.name, USER_DN, str(e))) + assert False + + idx += 1 + + log.info('AddDelUsers (%s) - Finished at: %s' % + (self.name, getDateTime())) + + +def measureConvergence(topology): + """Find and measure the convergence of entries from each master + """ + + replicas = [topology.master1, topology.master2, topology.master3, + topology.master4, topology.hub1, topology.hub2, + topology.consumer1, topology.consumer2, topology.consumer3, + topology.consumer4] + + if ADD_DEL_COUNT > 10: + interval = int(ADD_DEL_COUNT / 10) + else: + interval = 1 + + for master in [('1', topology.master1), + ('2', topology.master2), + ('3', topology.master3), + ('4', topology.master4)]: + # Start with the first entry + entries = ['ADD dn="uid=master_%s-0,%s' % + (master[0], DEFAULT_SUFFIX)] + + # Add incremental entries to the list + idx = interval + while idx < ADD_DEL_COUNT: + entries.append('ADD dn="uid=master_%s-%d,%s' % + (master[0], idx, DEFAULT_SUFFIX)) + idx += interval + + # Add the last entry to the list (if it was not already added) + if idx != (ADD_DEL_COUNT - 1): + entries.append('ADD dn="uid=master_%s-%d,%s' % + (master[0], (ADD_DEL_COUNT - 1), + DEFAULT_SUFFIX)) + + ReplTools.replConvReport(DEFAULT_SUFFIX, entries, master[1], replicas) + + +def test_MMR_Integrity(topology): + """Apply load to 4 masters at the same time. Perform adds and deletes. + If any updates are missed we will see an error 32 in the access logs or + we will have entries left over once the test completes. + """ + loop = 0 + + ALL_REPLICAS = [topology.master1, topology.master2, topology.master3, + topology.master4, + topology.hub1, topology.hub2, + topology.consumer1, topology.consumer2, + topology.consumer3, topology.consumer4] + + if TEST_CONVERGE_LATENCY: + try: + for inst in ALL_REPLICAS: + replica = inst.replicas.get(DEFAULT_SUFFIX) + replica.set('nsds5ReplicaReleaseTimeout', CONVERGENCE_TIMEOUT) + except ldap.LDAPError as e: + log.fatal('Failed to set replicas release timeout - error: %s' % + (str(e))) + assert False + + if DEBUGGING: + # Enable Repl logging, and increase the max logs + try: + for inst in ALL_REPLICAS: + inst.enableReplLogging() + inst.modify_s("cn=config", [(ldap.MOD_REPLACE, + 'nsslapd-errorlog-maxlogsperdir', + '5')]) + except ldap.LDAPError as e: + log.fatal('Failed to set max logs - error: %s' % (str(e))) + assert False + + while loop < MAX_LOOPS: + # Remove the current logs so we have a clean set of logs to check. + log.info('Pass %d...' % (loop + 1)) + log.info("Removing logs...") + for inst in ALL_REPLICAS: + inst.deleteAllLogs() + + # Fire off 4 threads to apply the load + log.info("Start adding/deleting: " + getDateTime()) + startTime = time.time() + add_del_m1 = AddDelUsers(topology.master1) + add_del_m1.start() + add_del_m2 = AddDelUsers(topology.master2) + add_del_m2.start() + add_del_m3 = AddDelUsers(topology.master3) + add_del_m3.start() + add_del_m4 = AddDelUsers(topology.master4) + add_del_m4.start() + + # Wait for threads to finish sending their updates + add_del_m1.join() + add_del_m2.join() + add_del_m3.join() + add_del_m4.join() + log.info("Finished adding/deleting entries: " + getDateTime()) + + # + # Loop checking for error 32's, and for convergence to complete + # + log.info("Waiting for replication to converge...") + while True: + # First check for error 32's + for inst in ALL_REPLICAS: + if inst.searchAccessLog(" err=32 "): + log.fatal('An add was missed on: ' + inst.serverid) + assert False + + # Next check to see if the last update is in the access log + converged = True + for inst in ALL_REPLICAS: + if not inst.searchAccessLog(LAST_DN_M1) or \ + not inst.searchAccessLog(LAST_DN_M2) or \ + not inst.searchAccessLog(LAST_DN_M3) or \ + not inst.searchAccessLog(LAST_DN_M4): + converged = False + break + + if converged: + elapsed_tm = int(time.time() - startTime) + convtime = str(datetime.timedelta(seconds=elapsed_tm)) + log.info('Replication converged at: ' + getDateTime() + + ' - Elapsed Time: ' + convtime) + break + else: + # Check if replication is idle + replicas = [topology.master1, topology.master2, + topology.master3, topology.master4, + topology.hub1, topology.hub2] + if ReplTools.replIdle(replicas, DEFAULT_SUFFIX): + # Replication is idle - wait 30 secs for access log buffer + time.sleep(30) + + # Now check the access log again... + converged = True + for inst in ALL_REPLICAS: + if not inst.searchAccessLog(LAST_DN_M1) or \ + not inst.searchAccessLog(LAST_DN_M2) or \ + not inst.searchAccessLog(LAST_DN_M3) or \ + not inst.searchAccessLog(LAST_DN_M4): + converged = False + break + + if converged: + elapsed_tm = int(time.time() - startTime) + convtime = str(datetime.timedelta(seconds=elapsed_tm)) + log.info('Replication converged at: ' + getDateTime() + + ' - Elapsed Time: ' + convtime) + break + else: + log.fatal('Stopping replication check: ' + + getDateTime()) + log.fatal('Failure: Replication is complete, but we ' + + 'never converged.') + assert False + + # Sleep a bit before the next pass + time.sleep(3) + + # + # Finally check the CSN's + # + log.info("Check the CSN's...") + if not ReplTools.checkCSNs(ALL_REPLICAS): + assert False + log.info("All CSN's present and accounted for.") + + # + # Print the convergence report + # + log.info('Measuring convergence...') + measureConvergence(topology) + + # + # Test complete + # + log.info('No lingering entries.') + log.info('Pass %d complete.' % (loop + 1)) + elapsed_tm = int(time.time() - TEST_START) + convtime = str(datetime.timedelta(seconds=elapsed_tm)) + log.info('Entire test ran for: ' + convtime) + + loop += 1 + + log.info('Test PASSED') + + +if __name__ == '__main__': + # Run isolated + # -s for DEBUG mode + CURRENT_FILE = os.path.realpath(__file__) + pytest.main("-s %s" % CURRENT_FILE) diff --git a/dirsrvtests/tests/stress/replication/mmr_01_4m_test.py b/dirsrvtests/tests/stress/replication/mmr_01_4m_test.py new file mode 100644 index 0000000..c48a070 --- /dev/null +++ b/dirsrvtests/tests/stress/replication/mmr_01_4m_test.py @@ -0,0 +1,572 @@ +import os +import sys +import time +import datetime +import ldap +import logging +import pytest +import threading +from lib389._constants import * +from lib389.properties import * +from lib389.tasks import * +from lib389.utils import * +from lib389.repltools import ReplTools + +logging.getLogger(__name__).setLevel(logging.DEBUG) +log = logging.getLogger(__name__) + +DEBUGGING = False +ADD_DEL_COUNT = 500 +MAX_LOOPS = 5 +TEST_CONVERGE_LATENCY = True +CONVERGENCE_TIMEOUT = '60' +master_list = [] +hub_list = [] +con_list = [] +TEST_START = time.time() + +LAST_DN_IDX = ADD_DEL_COUNT - 1 +LAST_DN_M1 = 'DEL dn="uid=master_1-%d,%s' % (LAST_DN_IDX, DEFAULT_SUFFIX) +LAST_DN_M2 = 'DEL dn="uid=master_2-%d,%s' % (LAST_DN_IDX, DEFAULT_SUFFIX) +LAST_DN_M3 = 'DEL dn="uid=master_3-%d,%s' % (LAST_DN_IDX, DEFAULT_SUFFIX) +LAST_DN_M4 = 'DEL dn="uid=master_4-%d,%s' % (LAST_DN_IDX, DEFAULT_SUFFIX) + + +class TopologyReplication(object): + """The Replication Topology Class""" + def __init__(self, master1, master2, master3, master4): + """Init""" + master1.open() + self.master1 = master1 + master2.open() + self.master2 = master2 + master3.open() + self.master3 = master3 + master4.open() + self.master4 = master4 + + +(a)pytest.fixture(scope="module") +def topology(request): + """Create Replication Deployment""" + + # Creating master 1... + if DEBUGGING: + master1 = DirSrv(verbose=True) + else: + master1 = DirSrv(verbose=False) + args_instance[SER_HOST] = HOST_MASTER_1 + args_instance[SER_PORT] = PORT_MASTER_1 + args_instance[SER_SERVERID_PROP] = SERVERID_MASTER_1 + args_instance[SER_CREATION_SUFFIX] = DEFAULT_SUFFIX + args_master = args_instance.copy() + master1.allocate(args_master) + instance_master1 = master1.exists() + if instance_master1: + master1.delete() + master1.create() + master1.open() + master1.replica.enableReplication(suffix=SUFFIX, role=REPLICAROLE_MASTER, + replicaId=REPLICAID_MASTER_1) + + # Creating master 2... + if DEBUGGING: + master2 = DirSrv(verbose=True) + else: + master2 = DirSrv(verbose=False) + args_instance[SER_HOST] = HOST_MASTER_2 + args_instance[SER_PORT] = PORT_MASTER_2 + args_instance[SER_SERVERID_PROP] = SERVERID_MASTER_2 + args_instance[SER_CREATION_SUFFIX] = DEFAULT_SUFFIX + args_master = args_instance.copy() + master2.allocate(args_master) + instance_master2 = master2.exists() + if instance_master2: + master2.delete() + master2.create() + master2.open() + master2.replica.enableReplication(suffix=SUFFIX, role=REPLICAROLE_MASTER, + replicaId=REPLICAID_MASTER_2) + + # Creating master 3... + if DEBUGGING: + master3 = DirSrv(verbose=True) + else: + master3 = DirSrv(verbose=False) + args_instance[SER_HOST] = HOST_MASTER_3 + args_instance[SER_PORT] = PORT_MASTER_3 + args_instance[SER_SERVERID_PROP] = SERVERID_MASTER_3 + args_instance[SER_CREATION_SUFFIX] = DEFAULT_SUFFIX + args_master = args_instance.copy() + master3.allocate(args_master) + instance_master3 = master3.exists() + if instance_master3: + master3.delete() + master3.create() + master3.open() + master3.replica.enableReplication(suffix=SUFFIX, role=REPLICAROLE_MASTER, + replicaId=REPLICAID_MASTER_3) + + # Creating master 4... + if DEBUGGING: + master4 = DirSrv(verbose=True) + else: + master4 = DirSrv(verbose=False) + args_instance[SER_HOST] = HOST_MASTER_4 + args_instance[SER_PORT] = PORT_MASTER_4 + args_instance[SER_SERVERID_PROP] = SERVERID_MASTER_4 + args_instance[SER_CREATION_SUFFIX] = DEFAULT_SUFFIX + args_master = args_instance.copy() + master4.allocate(args_master) + instance_master4 = master4.exists() + if instance_master4: + master4.delete() + master4.create() + master4.open() + master4.replica.enableReplication(suffix=SUFFIX, role=REPLICAROLE_MASTER, + replicaId=REPLICAID_MASTER_4) + + # + # Create all the agreements + # + # Creating agreement from master 1 to master 2 + properties = {RA_NAME: 'meTo_' + master2.host + ':' + str(master2.port), + RA_BINDDN: defaultProperties[REPLICATION_BIND_DN], + RA_BINDPW: defaultProperties[REPLICATION_BIND_PW], + RA_METHOD: defaultProperties[REPLICATION_BIND_METHOD], + RA_TRANSPORT_PROT: defaultProperties[REPLICATION_TRANSPORT]} + m1_m2_agmt = master1.agreement.create(suffix=SUFFIX, host=master2.host, + port=master2.port, + properties=properties) + if not m1_m2_agmt: + log.fatal("Fail to create a master -> master replica agreement") + sys.exit(1) + log.debug("%s created" % m1_m2_agmt) + + # Creating agreement from master 1 to master 3 + properties = {RA_NAME: 'meTo_' + master3.host + ':' + str(master3.port), + RA_BINDDN: defaultProperties[REPLICATION_BIND_DN], + RA_BINDPW: defaultProperties[REPLICATION_BIND_PW], + RA_METHOD: defaultProperties[REPLICATION_BIND_METHOD], + RA_TRANSPORT_PROT: defaultProperties[REPLICATION_TRANSPORT]} + m1_m3_agmt = master1.agreement.create(suffix=SUFFIX, host=master3.host, + port=master3.port, + properties=properties) + if not m1_m3_agmt: + log.fatal("Fail to create a master -> master replica agreement") + sys.exit(1) + log.debug("%s created" % m1_m3_agmt) + + # Creating agreement from master 1 to master 4 + properties = {RA_NAME: 'meTo_' + master4.host + ':' + str(master4.port), + RA_BINDDN: defaultProperties[REPLICATION_BIND_DN], + RA_BINDPW: defaultProperties[REPLICATION_BIND_PW], + RA_METHOD: defaultProperties[REPLICATION_BIND_METHOD], + RA_TRANSPORT_PROT: defaultProperties[REPLICATION_TRANSPORT]} + m1_m4_agmt = master1.agreement.create(suffix=SUFFIX, host=master4.host, + port=master4.port, + properties=properties) + if not m1_m4_agmt: + log.fatal("Fail to create a master -> master replica agreement") + sys.exit(1) + log.debug("%s created" % m1_m4_agmt) + + # Creating agreement from master 2 to master 1 + properties = {RA_NAME: 'meTo_' + master1.host + ':' + str(master1.port), + RA_BINDDN: defaultProperties[REPLICATION_BIND_DN], + RA_BINDPW: defaultProperties[REPLICATION_BIND_PW], + RA_METHOD: defaultProperties[REPLICATION_BIND_METHOD], + RA_TRANSPORT_PROT: defaultProperties[REPLICATION_TRANSPORT]} + m2_m1_agmt = master2.agreement.create(suffix=SUFFIX, host=master1.host, + port=master1.port, + properties=properties) + if not m2_m1_agmt: + log.fatal("Fail to create a master -> master replica agreement") + sys.exit(1) + log.debug("%s created" % m2_m1_agmt) + + # Creating agreement from master 2 to master 3 + properties = {RA_NAME: 'meTo_' + master3.host + ':' + str(master3.port), + RA_BINDDN: defaultProperties[REPLICATION_BIND_DN], + RA_BINDPW: defaultProperties[REPLICATION_BIND_PW], + RA_METHOD: defaultProperties[REPLICATION_BIND_METHOD], + RA_TRANSPORT_PROT: defaultProperties[REPLICATION_TRANSPORT]} + m2_m3_agmt = master2.agreement.create(suffix=SUFFIX, host=master3.host, + port=master3.port, + properties=properties) + if not m2_m3_agmt: + log.fatal("Fail to create a master -> master replica agreement") + sys.exit(1) + log.debug("%s created" % m2_m3_agmt) + + # Creating agreement from master 2 to master 4 + properties = {RA_NAME: 'meTo_' + master4.host + ':' + str(master4.port), + RA_BINDDN: defaultProperties[REPLICATION_BIND_DN], + RA_BINDPW: defaultProperties[REPLICATION_BIND_PW], + RA_METHOD: defaultProperties[REPLICATION_BIND_METHOD], + RA_TRANSPORT_PROT: defaultProperties[REPLICATION_TRANSPORT]} + m2_m4_agmt = master2.agreement.create(suffix=SUFFIX, host=master4.host, + port=master4.port, + properties=properties) + if not m2_m4_agmt: + log.fatal("Fail to create a master -> master replica agreement") + sys.exit(1) + log.debug("%s created" % m2_m4_agmt) + + # Creating agreement from master 3 to master 1 + properties = {RA_NAME: 'meTo_' + master1.host + ':' + str(master1.port), + RA_BINDDN: defaultProperties[REPLICATION_BIND_DN], + RA_BINDPW: defaultProperties[REPLICATION_BIND_PW], + RA_METHOD: defaultProperties[REPLICATION_BIND_METHOD], + RA_TRANSPORT_PROT: defaultProperties[REPLICATION_TRANSPORT]} + m3_m1_agmt = master3.agreement.create(suffix=SUFFIX, host=master1.host, + port=master1.port, + properties=properties) + if not m3_m1_agmt: + log.fatal("Fail to create a master -> master replica agreement") + sys.exit(1) + log.debug("%s created" % m3_m1_agmt) + + # Creating agreement from master 3 to master 2 + properties = {RA_NAME: 'meTo_' + master2.host + ':' + str(master2.port), + RA_BINDDN: defaultProperties[REPLICATION_BIND_DN], + RA_BINDPW: defaultProperties[REPLICATION_BIND_PW], + RA_METHOD: defaultProperties[REPLICATION_BIND_METHOD], + RA_TRANSPORT_PROT: defaultProperties[REPLICATION_TRANSPORT]} + m3_m2_agmt = master3.agreement.create(suffix=SUFFIX, host=master2.host, + port=master2.port, + properties=properties) + if not m3_m2_agmt: + log.fatal("Fail to create a master -> master replica agreement") + sys.exit(1) + log.debug("%s created" % m3_m2_agmt) + + # Creating agreement from master 3 to master 4 + properties = {RA_NAME: 'meTo_' + master4.host + ':' + str(master4.port), + RA_BINDDN: defaultProperties[REPLICATION_BIND_DN], + RA_BINDPW: defaultProperties[REPLICATION_BIND_PW], + RA_METHOD: defaultProperties[REPLICATION_BIND_METHOD], + RA_TRANSPORT_PROT: defaultProperties[REPLICATION_TRANSPORT]} + m3_m4_agmt = master3.agreement.create(suffix=SUFFIX, host=master4.host, + port=master4.port, + properties=properties) + if not m3_m4_agmt: + log.fatal("Fail to create a master -> master replica agreement") + sys.exit(1) + log.debug("%s created" % m3_m4_agmt) + + # Creating agreement from master 4 to master 1 + properties = {RA_NAME: 'meTo_' + master1.host + ':' + str(master1.port), + RA_BINDDN: defaultProperties[REPLICATION_BIND_DN], + RA_BINDPW: defaultProperties[REPLICATION_BIND_PW], + RA_METHOD: defaultProperties[REPLICATION_BIND_METHOD], + RA_TRANSPORT_PROT: defaultProperties[REPLICATION_TRANSPORT]} + m4_m1_agmt = master4.agreement.create(suffix=SUFFIX, host=master1.host, + port=master1.port, + properties=properties) + if not m4_m1_agmt: + log.fatal("Fail to create a master -> master replica agreement") + sys.exit(1) + log.debug("%s created" % m4_m1_agmt) + + # Creating agreement from master 4 to master 2 + properties = {RA_NAME: 'meTo_' + master2.host + ':' + str(master2.port), + RA_BINDDN: defaultProperties[REPLICATION_BIND_DN], + RA_BINDPW: defaultProperties[REPLICATION_BIND_PW], + RA_METHOD: defaultProperties[REPLICATION_BIND_METHOD], + RA_TRANSPORT_PROT: defaultProperties[REPLICATION_TRANSPORT]} + m4_m2_agmt = master4.agreement.create(suffix=SUFFIX, host=master2.host, + port=master2.port, + properties=properties) + if not m4_m2_agmt: + log.fatal("Fail to create a master -> master replica agreement") + sys.exit(1) + log.debug("%s created" % m4_m2_agmt) + + # Creating agreement from master 4 to master 3 + properties = {RA_NAME: 'meTo_' + master3.host + ':' + str(master3.port), + RA_BINDDN: defaultProperties[REPLICATION_BIND_DN], + RA_BINDPW: defaultProperties[REPLICATION_BIND_PW], + RA_METHOD: defaultProperties[REPLICATION_BIND_METHOD], + RA_TRANSPORT_PROT: defaultProperties[REPLICATION_TRANSPORT]} + m4_m3_agmt = master4.agreement.create(suffix=SUFFIX, host=master3.host, + port=master3.port, + properties=properties) + if not m4_m3_agmt: + log.fatal("Fail to create a master -> master replica agreement") + sys.exit(1) + log.debug("%s created" % m4_m3_agmt) + + # Allow the replicas to get situated with the new agreements... + time.sleep(5) + + # + # Initialize all the agreements + # + master1.agreement.init(SUFFIX, HOST_MASTER_2, PORT_MASTER_2) + master1.waitForReplInit(m1_m2_agmt) + master1.agreement.init(SUFFIX, HOST_MASTER_3, PORT_MASTER_3) + master1.waitForReplInit(m1_m3_agmt) + master1.agreement.init(SUFFIX, HOST_MASTER_4, PORT_MASTER_4) + master1.waitForReplInit(m1_m4_agmt) + + # Check replication is working... + if master1.testReplication(DEFAULT_SUFFIX, master4): + log.info('Replication is working.') + else: + log.fatal('Replication is not working.') + assert False + + def fin(): + """If we are debugging just stop the instances, otherwise remove + them + """ + if 1 or DEBUGGING: + master1.stop() + master2.stop() + master3.stop() + master4.stop() + else: + master1.delete() + master2.delete() + master3.delete() + master4.delete() + request.addfinalizer(fin) + + return TopologyReplication(master1, master2, master3, master4) + + +class AddDelUsers(threading.Thread): + """Add's and delets 50000 entries""" + def __init__(self, inst): + """ + Initialize the thread + """ + threading.Thread.__init__(self) + self.daemon = True + self.inst = inst + self.name = inst.serverid + + def run(self): + """ + Start adding users + """ + idx = 0 + + log.info('AddDelUsers (%s) Adding and deleting %d entries...' % + (self.name, ADD_DEL_COUNT)) + + while idx < ADD_DEL_COUNT: + RDN_VAL = ('uid=%s-%d' % (self.name, idx)) + USER_DN = ('%s,%s' % (RDN_VAL, DEFAULT_SUFFIX)) + + try: + self.inst.add_s(Entry((USER_DN, {'objectclass': + 'top extensibleObject'.split(), + 'uid': RDN_VAL}))) + except ldap.LDAPError as e: + log.fatal('AddDelUsers (%s): failed to add (%s) error: %s' % + (self.name, USER_DN, str(e))) + assert False + + try: + self.inst.delete_s(USER_DN) + except ldap.LDAPError as e: + log.fatal('AddDelUsers (%s): failed to delete (%s) error: %s' % + (self.name, USER_DN, str(e))) + assert False + + idx += 1 + + log.info('AddDelUsers (%s) - Finished at: %s' % + (self.name, getDateTime())) + + +def measureConvergence(topology): + """Find and measure the convergence of entries from each master + """ + + replicas = [topology.master1, topology.master2, topology.master3, + topology.master4] + + if ADD_DEL_COUNT > 10: + interval = int(ADD_DEL_COUNT / 10) + else: + interval = 1 + + for master in [('1', topology.master1), + ('2', topology.master2), + ('3', topology.master3), + ('4', topology.master4)]: + # Start with the first entry + entries = ['ADD dn="uid=master_%s-0,%s' % + (master[0], DEFAULT_SUFFIX)] + + # Add incremental entries to the list + idx = interval + while idx < ADD_DEL_COUNT: + entries.append('ADD dn="uid=master_%s-%d,%s' % + (master[0], idx, DEFAULT_SUFFIX)) + idx += interval + + # Add the last entry to the list (if it was not already added) + if idx != (ADD_DEL_COUNT - 1): + entries.append('ADD dn="uid=master_%s-%d,%s' % + (master[0], (ADD_DEL_COUNT - 1), + DEFAULT_SUFFIX)) + + ReplTools.replConvReport(DEFAULT_SUFFIX, entries, master[1], replicas) + + +def test_MMR_Integrity(topology): + """Apply load to 4 masters at the same time. Perform adds and deletes. + If any updates are missed we will see an error 32 in the access logs or + we will have entries left over once the test completes. + """ + loop = 0 + + ALL_REPLICAS = [topology.master1, topology.master2, topology.master3, + topology.master4] + + if TEST_CONVERGE_LATENCY: + try: + for inst in ALL_REPLICAS: + replica = inst.replicas.get(DEFAULT_SUFFIX) + replica.set('nsds5ReplicaReleaseTimeout', CONVERGENCE_TIMEOUT) + except ldap.LDAPError as e: + log.fatal('Failed to set replicas release timeout - error: %s' % + (str(e))) + assert False + + if DEBUGGING: + # Enable Repl logging, and increase the max logs + try: + for inst in ALL_REPLICAS: + inst.enableReplLogging() + inst.modify_s("cn=config", [(ldap.MOD_REPLACE, + 'nsslapd-errorlog-maxlogsperdir', + '5')]) + except ldap.LDAPError as e: + log.fatal('Failed to set max logs - error: %s' % (str(e))) + assert False + + while loop < MAX_LOOPS: + # Remove the current logs so we have a clean set of logs to check. + log.info('Pass %d...' % (loop + 1)) + log.info("Removing logs...") + for inst in ALL_REPLICAS: + inst.deleteAllLogs() + + # Fire off 4 threads to apply the load + log.info("Start adding/deleting: " + getDateTime()) + startTime = time.time() + add_del_m1 = AddDelUsers(topology.master1) + add_del_m1.start() + add_del_m2 = AddDelUsers(topology.master2) + add_del_m2.start() + add_del_m3 = AddDelUsers(topology.master3) + add_del_m3.start() + add_del_m4 = AddDelUsers(topology.master4) + add_del_m4.start() + + # Wait for threads to finish sending their updates + add_del_m1.join() + add_del_m2.join() + add_del_m3.join() + add_del_m4.join() + log.info("Finished adding/deleting entries: " + getDateTime()) + + # + # Loop checking for error 32's, and for convergence to complete + # + log.info("Waiting for replication to converge...") + while True: + # First check for error 32's + for inst in ALL_REPLICAS: + if inst.searchAccessLog(" err=32 "): + log.fatal('An add was missed on: ' + inst.serverid) + assert False + + # Next check to see if the last update is in the access log + converged = True + for inst in ALL_REPLICAS: + if not inst.searchAccessLog(LAST_DN_M1) or \ + not inst.searchAccessLog(LAST_DN_M2) or \ + not inst.searchAccessLog(LAST_DN_M3) or \ + not inst.searchAccessLog(LAST_DN_M4): + converged = False + break + + if converged: + elapsed_tm = int(time.time() - startTime) + convtime = str(datetime.timedelta(seconds=elapsed_tm)) + log.info('Replication converged at: ' + getDateTime() + + ' - Elapsed Time: ' + convtime) + break + else: + # Check if replication is idle + replicas = [topology.master1, topology.master2, + topology.master3, topology.master4] + if ReplTools.replIdle(replicas, DEFAULT_SUFFIX): + # Replication is idle - wait 30 secs for access log buffer + time.sleep(30) + + # Now check the access log again... + converged = True + for inst in ALL_REPLICAS: + if not inst.searchAccessLog(LAST_DN_M1) or \ + not inst.searchAccessLog(LAST_DN_M2) or \ + not inst.searchAccessLog(LAST_DN_M3) or \ + not inst.searchAccessLog(LAST_DN_M4): + converged = False + break + + if converged: + elapsed_tm = int(time.time() - startTime) + convtime = str(datetime.timedelta(seconds=elapsed_tm)) + log.info('Replication converged at: ' + getDateTime() + + ' - Elapsed Time: ' + convtime) + break + else: + log.fatal('Stopping replication check: ' + + getDateTime()) + log.fatal('Failure: Replication is complete, but we ' + + 'never converged.') + assert False + + # Sleep a bit before the next pass + time.sleep(3) + + # + # Finally check the CSN's + # + log.info("Check the CSN's...") + if not ReplTools.checkCSNs(ALL_REPLICAS): + assert False + log.info("All CSN's present and accounted for.") + + # + # Print the convergence report + # + log.info('Measuring convergence...') + measureConvergence(topology) + + # + # Test complete + # + log.info('No lingering entries.') + log.info('Pass %d complete.' % (loop + 1)) + elapsed_tm = int(time.time() - TEST_START) + convtime = str(datetime.timedelta(seconds=elapsed_tm)) + log.info('Entire test ran for: ' + convtime) + + loop += 1 + + log.info('Test PASSED') + + +if __name__ == '__main__': + # Run isolated + # -s for DEBUG mode + CURRENT_FILE = os.path.realpath(__file__) + pytest.main("-s %s" % CURRENT_FILE)

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

389-commits August 2016