Index index by Group index by Distribution index by Vendor index by creation date index by Name Mirrors Help Search

389-ds-2.3.0~git0.3db81913e-1.2 RPM for x86_64

From OpenSuSE Tumbleweed for x86_64

Name: 389-ds Distribution: openSUSE Tumbleweed
Version: 2.3.0~git0.3db81913e Vendor: openSUSE
Release: 1.2 Build date: Thu Sep 22 15:27:43 2022
Group: Productivity/Networking/LDAP/Servers Build host: lamb66
Size: 15713821 Source RPM: 389-ds-2.3.0~git0.3db81913e-1.2.src.rpm
Packager: https://bugs.opensuse.org
Url: https://pagure.io/389-ds-base
Summary: 389 Directory Server
389 Directory Server is a full-featured LDAPv3 compliant server. In
addition to the standard LDAPv3 operations, it supports multi-master
replication, fully online configuration and administration, chaining,
virtual attributes, access control directives in the data, Virtual
List View, server-side sorting, SASL, TLS/SSL, and many other
features. (The server started out as Netscape Directory Server.)

Provides

Requires

License

GPL-3.0-or-later AND MPL-2.0

Changelog

* Wed Sep 07 2022 william.brown@suse.com
  - Update to version 2.3.0~git0.3db81913e:
    * Bump version to 2.3.0
    * Issue 5012 - Migrate pcre to pcre2 - remove match limit
    * Update CI tests
    * Issue 5356 - Make Rust non-optional and update default password storage scheme
    * Issue 5012 - Migrate pcre to pcre2
    * Issue 5428 - Fix regression with nscpEntryWsi computation
    * Fix missing 'not' in description (closes #5423) (#5424)
    * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
    * Issue 3903 - fix repl keep alive event interval
    * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
* Wed Aug 10 2022 William Brown <william.brown@suse.com>
  - Update _constraints due to random build failures caused by OBS environmental
    issues that aren't out fault. (out of disk, systemic builder issues).
  - Add debugging about the environment to assist with OBS randomly failing
    in the future.
* Fri Jul 29 2022 william.brown@suse.com
  - Update to version 2.2.2~git11.f002e9e09:
    * Issue 5383 - UI - Various fixes and RFE's for UI
    * Issue 4656 - Remove problematic language from source code
    * Issue 5380 - Separate cleanAllRUV code into new file
    * Issue 5322 - optime & wtime on rejected connections is not properly set
    * Issue 5335 - RFE - Add Security Audit Log
    * Issue 5375 - CI - disable TLS hostname checking
    * Issue 981 Managed Entries betxnpreoperation - transaction not aborted on managed entry failure (#5369)
    * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
    * Issue 5371 - Update npm and cargo packages
    * Issue 3069 - Support ECDSA private keys for TLS (#5365)
* Wed Jul 06 2022 william.brown@suse.com
  - Update to version 2.2.2~git0.55e2c7ab3:
    * Bump version to 2.2.2
    * Issue 5221 - fix covscan (#5359)
    * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
    * Issue 5353 - CLI - dsconf backend export breaks with multiple backends
    * Issue 5346 - New connection table fails with ASAN failures (#5350)
    * Issue 5345 - BUG - openldap migration fails when ppolicy is active (#5347)
    * Issue 5323 - BUG - improve skipping of monitor db (#5340)
    * Issue 5329 - Improve replication extended op logging
    * Issue 5343 - Various improvements to winsync
    * Issue 4932 - CLI - add parser aliases to long arg names
* Mon May 30 2022 william.brown@suse.com
  - bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
    by Issue 5170.
  - Update to version 2.1.1~git22.faef73366:
    * Issue 5302 - Release tarballs don't contain cockpit webapp
    * Issue 5237 - audit-ci: Cannot convert undefined or null to object
    * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
    * Issue 4970 - Add support for recursively deleting subentries
    * Issue 5284 - Replication broken after password change (#5286)
    * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
    * Issue 5170 - RFE - Filter optimiser (#5171)
    * Issue 5276 - CLI - improve task handling
    * Issue 5273 - CLI - add arg completer for instance name
    * Issue 2893 - CLI - dscreate - add options for setting up replication
* Thu May 12 2022 William Brown <william.brown@suse.com>
  - Add missing devel library on zlib for log compression
  - Force openssl as libressl is not compatible with rust ssl needs
* Thu Apr 21 2022 william.brown@suse.com
  - bsc#1196526 - Add systemd override to correct ordering with krb components
  - Update to version 2.1.1~git13.beb382e1b:
    * Issue 2893 - CLI - dscreate - add options for setting up replication
    * Issue 4866 - CLI - when enabling replication set changelog trimming by default
    * Issue 5241 - UI - Add account locking missing functionality (#5251)
    * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
    * Issue 4904 - Fix various small issues
    * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
    * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
    * Issue 5210 - Python undefined names in lib389
    * Issue 5247 - BUG - Missing attributes in samba schema (#5248)
    * Issue 5242- Craft message may crash the server (#5243)
* Wed Apr 13 2022 william.brown@suse.com
  - Update to version 2.1.1~git8.d50340ba5:
    * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
    * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
    * Issue 5210 - Python undefined names in lib389
* Thu Apr 07 2022 william.brown@suse.com
  - Resolve bsc#1197896 - update samba schema to upstream latest
  - Update to version 2.1.1~git5.e988a3f55:
    * Issue 5247 - BUG - Missing attributes in samba schema (#5248)
* Thu Mar 31 2022 william.brown@suse.com
  - Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
  - Update to version 2.1.1~git4.b7f891097:
    * Issue 5242- Craft message may crash the server (#5243)
    * Issue 5234 - UI - rename Users and Groups tab
    * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
    * Issue 5227 - UI - No way to move back to Get Started step (#5233)
    * Bump version to 2.1.1
    * Issue 5230 - Race condition in RHDS disk monitoring functions
    * Issue 4299 - UI - Add CoS funtionality (#5196)
    * Issue 5225 - UI - impossible to manually set entry cache
    * Issue 5186 - UI - Fix SASL Mapping regex test feature
    * Issue 5221 - User with expired password can still login with full privledges
* Tue Mar 22 2022 william.brown@suse.com
  - Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
  - Update to version 2.0.14~git25.e6431d959:
    * Issue 5221 - User with expired password can still login with full privledges
    * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
    * Issue 5200 - dscontainer should use environment variables with DS_ prefix
    * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
    * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
    * Issue 5188 - UI - LDAP editor - add entry and group types
    * Issue 5184 - memberOf does not work correctly with multiple include scopes
    * Issue 5162 - BUG - error on importing chain files (#5164)
    * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
    * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)
* Wed Feb 02 2022 william.brown@suse.com
  - Update to version 2.0.14~git3.c9226ad90:
    * Issue 4299 - UI - fix minor issues with ldap editor (table view)
    * Issue 4299 - UI - fix minor issues with ldap editor
    * Issue 5103 - UI - Add support for TPR to web console (#5111)
  - Add improvements for suppor config to show certificate usage
* Tue Feb 01 2022 william.brown@suse.com
  - Update to version 2.0.14~git0.eccfa2af9:
    * Bump version to 2.0.14
    * Issue 5127 - ds_selinux_restorecon.sh: always exit 0
    * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
    * Issue 4992 - BUG - slapd.socket container fix (#4993)
    * Issue 5079 - BUG - multiple ways to specific primary (#5087)
    * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
    * Issue 5135 - UI - Disk monitoring threshold does update properly
* Tue Jan 25 2022 William Brown <william.brown@suse.com>
  - Update support config to latest version
* Tue Jan 25 2022 william.brown@suse.com
  - Update to version 2.0.13~git1.72eb93ac9:
    * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
    * Bump version to 2.0.13
    * Issue 5132 - Update Rust crate lru to fix CVE
    * Issue 3555 - UI - fix audit issue with npm nanoid
    * Issue 4299 - UI - Add ACI editing features
    * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
    * Issue 5127 - run restorecon on /dev/shm at server startup
    * Issue 5124 - dscontainer fails to create an instance
    * Issue 4312 - fix compiler warning
    * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'
* Tue Jan 25 2022 william.brown@suse.com
  - Update to version 2.0.13~git1.72eb93ac9:
    * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
    * Bump version to 2.0.13
    * Issue 5132 - Update Rust crate lru to fix CVE
    * Issue 3555 - UI - fix audit issue with npm nanoid
    * Issue 4299 - UI - Add ACI editing features
    * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
    * Issue 5127 - run restorecon on /dev/shm at server startup
    * Issue 5124 - dscontainer fails to create an instance
    * Issue 4312 - fix compiler warning
    * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'
* Mon Jan 24 2022 William Brown <william.brown@suse.com>
  - Add missing dependency on python slugify
  - Change ssl dependency to openssl as libressl does not link correctly
* Sat Jan 15 2022 William Brown <william.brown@suse.com>
  - Fix %pre macro in pkg for systemd services
* Thu Jan 13 2022 William Brown <william.brown@suse.com>
  - Remove recommends on supportutils per review
  - Remove insecure recommends on md5 sasl auth
* Mon Jan 10 2022 William Brown <william.brown@suse.com>
  - Add missing support utils plugin
* Mon Jan 10 2022 william.brown@suse.com
  - Update to version 2.0.11~git13.e14935725:
    * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
    * Issue 5079 - BUG - multiple ways to specific primary (#5087)
    * Issue 4992 - BUG - slapd.socket container fix (#4993)
    * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
    * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
    * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
    * Issue 5046 - BUG - update concread (#5047)
    * Issue 5043 - BUG - Result must be used compiler warning (#5045)
    * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
    * Issue 4931 - RFE: dsidm - add creation of service accounts
    * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
    * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
    * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
* Mon Jan 10 2022 william.brown@suse.com
  - Resolve boo#1194068 by adding required schema
  - Update to version 2.0.11~git0.237913e86:
    * Bump version to 2.0.11
    * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
    * Issue 5014 - UI - Add group creation to LDAP editor
    * Issue 5006 - UI - LDAP editor tree not being properly updated
    * Issue 5001 - Update CI test for new availableSASLMechs attribute
    * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
    * Issue 5001 - Fix next round of UI bugs:
    * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
    * Issue 4978 - use more portable python command for checking containers
    * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
    * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
    * Issue 4978 - make installer robust
    * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
    * Issue 4973 - update snmp to use /run/dirsrv for PID file
    * Issue 4962 - Fix various UI bugs - Plugins (#4969)
    * Issue 4973 - installer changes permissions on /run
    * Issue 4092 - systemd-tmpfiles warnings
    * Issue 4956 - Automember allows invalid regex, and does not log proper error
    * Issue 4731 - Promoting/demoting a replica can crash the server
    * Issue 4962 - Fix various UI bugs part 1
    * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
    * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
    * Issue 2790 - Set db home directory by default
    * Bump github contianer shm size to 4 gigs
    * Issue 4299 - Merge LDAP editor code into Cockpit UI
    * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
    * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
    * Issue 4847 - BUG - potential deadlock in replica (#4936)
    * Issue 4513 - fix ACI CI tests involving ip/hostname rules
    * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
    * Issue 4916 - Memory leak in ldap-agent
* Tue Oct 12 2021 William Brown <william.brown@suse.com>
  - Add missing dependency on iproute2 for lib389
* Tue Sep 21 2021 william.brown@suse.com
  - Update to version 2.0.10~git0.21dd2802c:
    * Bump version to 2.0.10
    * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
    * Issue 4912 - Account Policy plugin does not set the config entry DN
    * Issue 4863 - typoes in logconv.pl
    * Issue 4796 - Add support for nsslapd-state to CLI & UI
    * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
    * Issue 4912 - dsidm command crashing when account policy plugin is enabled
    * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
    * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
    * Issue 4887 - UI - fix minor regression from camelCase fixup
    * Bump version to 2.0.9
    * Issue 4887 - UI - Update webpack.config.js and package.json
    * Issue 4149 - UI - Migrate the remaining components to PF4
    * Issue 4875 - CLI - Add some verbosity to installer
    * Issue 4884 - server crashes when dnaInterval attribute is set to zero
* Mon Aug 23 2021 william.brown@suse.com
  - Update to version 2.0.8~git0.553f26c87:
    * Bump version to 2.0.8
    * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
    * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
    * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
    * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
    * Issue 4736 - lib389 - fix regression in certutil error checking
    * Issue 4861 - Improve instructions in custom.conf for memory leak detection
    * Issue 4859 - Don't version libns-dshttpd
    * Issue 4169 - Migrate Replication & Schema tabs to PF4
    * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
    * Issue 4736 - CLI - Errors from certutil are not propagated
    * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
    * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
    * Issue - 4696 - Password hash upgrade on bind (#4840)
    * Bump version to 2.0.7
    * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
    * Issue 4603 - Reindexing a single backend (#4831)
    * Issue 4169 - UI - migrate Server Tab forms to PF4
    * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
    * Issue 4820 - RFE - control flow integrity (#4821)
    * Issue 4706 - negative wtime for compare operations (#4780)
    * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
    * Issue 4262 - Fix Index out of bound in fractional test (#4828)
    * Issue 4826 - Filter argparse-manpage from autogenerated requires
    * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
    * Issue 2820 - Fix CI test suite issues
    * Bump version to 2.0.6
* Sun Jul 18 2021 Callum Farmer <gmbr3@opensuse.org>
  - Remove unneeded shadow dependency, no longer required due to
    systemd-sysusers
* Thu Jul 08 2021 William Brown <william.brown@suse.com>
  - Update to version 2.0.6~git0.d81dc6c90:
    * Bump version to 2.0.6
    * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
    * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
    * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
    * Issue 4414 - disk monitoring - prevent division by zero crash
    * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
    * Issue 4656 - Fix replication plugin rename dependency issues
    * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
    * Issue 4506 - Improve SASL logging
    * Issue 4709 - Fix double free in dbscan
    * Issue 4093 - Fix MEP test case
    * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
    * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
    * Issue 4794 - BUG - don't capture container output (#4798)
    * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
    * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
    * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
    * Issue 4447 - Crash when the Referential Integrity log is manually edited
    * Issue 4773 - Add CI test for DNA interval assignment
    * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
    * Issue 4379 - fixing regression in test_info_disclosure
    * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
    * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
    * Issue 4575 Update test docstrings metadata
    * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
    * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
    * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
* Thu Jul 08 2021 William Brown <william.brown@suse.com>
  - Fix requires as openssl cli is required by 389-ds now.
* Sat Jun 19 2021 Callum Farmer <gmbr3@opensuse.org>
  - Add now working CONFIG parameter to sysusers generator
* Wed Jun 02 2021 wbrown@suse.de
  - Update to version 2.0.5~git0.607bfbf16:
    * Bump version to 2.0.5
    * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
    * Issue 4169 - UI - Port plugin tables to PF4
    * Issue 4656 - Allow backward compatilbity for replication plugin name change
    * Issue 4764 - replicated operation sometime checks ACI (#4783)
    * Issue 2820 - Fix CI test suite issues
    * Issue 4781 - There are some typos in man-pages
    * Issue 4773 - Enable interval feature of DNA plugin
    * Issue 4623 - RFE - Monitor the current DB locks (#4762)
    * Issue 3555 - Fix UI audit issue
    * Issue 4725 - Fix compiler warnings
    * Issue 4770 - Lower FIPS logging severity
    * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
    * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
    * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
    * Issue 4759 - Fix coverity issue (#4760)
    * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
    * Issue 4714 - dscontainer fails with rootless podman
    * Issue 4750 - Fix compiler warning in retrocl (#4751)
    * Issue 4742 - UI - should always use LDAPI path when calling CLI
    * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
    * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
    * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
    * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
    * Issue 4711 - SIGSEV with sync_repl (#4738)
    * Issue 4734 - import of entry with no parent warning (#4735)
    * Issue 4729 - GitHub Actions fails to run pytest tests
    * Issue 4656 - Remove problematic language from source code
    * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
    * Issue 4169 - UI - migrate replication tables to PF4
    * Issue 4637 - ndn cache leak (#4724)
    * Issue 4577 - Fix ASAN flags in specfile
    * Issue 4169 - UI - PF4 migration - database tables
    * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
* Thu May 27 2021 Dominique Leuenberger <dimstar@opensuse.org>
  - Recommend openssl(cli) by lib389: admin tools like dscreate can
    call out to /usr/bin/openssl to manage certificates. As the admin
    could decide to manage the certificates differently, we only
    recommend openssl here.
* Thu Apr 08 2021 wbrown@suse.de
  - Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
    * Bump version to 2.0.4
    * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
    * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
    * Issue 4700 - Regression in winsync replication agreement (#4712)
    * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
    * Issue 4169 - UI - migrate monitor tables to PF4
    * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
    * Issue 2736 - remove remaining perl references
    * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
    * Issue 4706 - negative wtime in access log for CMP operations
    * Issue 3585 - LDAP server returning controltype in different sequence
    * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
    * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
    * Issue 4671 - UI - Fix browser crashes
    * Issue 4169 - UI - Add PF4 charts for server stats
    * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
    * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
    * Issue 4229 - Fix Rust linking
    * Issue 4673 - Update Rust crates
    * Issue 4658 - monitor - connection start date is incorrect
    * Issue 4169 - UI - migrate modals to PF4
    * Issue 4656 - remove problematic language from ds-replcheck
    * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
    * Issue 4656 - Remove problematic language from UI/CLI/lib389
    * Issue 4661 - RFE - allow importing openldap schemas (#4662)
    * Issue 4659 - restart after openldap migration to enable plugins (#4660)
    * Merge pull request #4664 from mreynolds389/issue4663
    * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
    * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
    * Issue 4646 - CLI/UI - revise DNA plugin management
    * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
    * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
    * Issue 4169 - UI - Migrate alerts to PF4
    * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
    * Issue 4595 - Paged search lookthroughlimit bug (#4602)
    * Issue 4169 - UI - port charts to PF4
    * Issue 2820 - Fix CI test suite issues
    * Issue 4513 - CI - make acl ip address tests more robust
    * Bump version to 2.0.3
    * Issue 4619 - remove pytest requirement from lib389
    * Issue 4615 - log message when psearch first exceeds max threads per conn
    * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
    * Issue 4324 - Some architectures the cache line size file does not exist
    * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
    * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
    * Update dscontainer (#4564)
    * Issue 4149 - UI - port TreeView and opther components to PF4
    * Issue 4577 - Add GitHub actions
    * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
    * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
    * Issue 4609 - CVE - info disclosure when authenticating
    * Issue 4348 - Add tests for dsidm
    * Issue 4571 - Stale libdb-utils dependency
    * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
    * Issue 4577 - Add GitHub actions
    * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
    * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
    * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
    * Issue 4348 - Add tests for dsidm
    * Issue 4577 - Add GitHub actions
    * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
    * Issue 4093 - fix compiler warnings and update doxygen
    * Issue 4575 - Update test docstrings metadata
    * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
    * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
    * Issue 4513 - Add DS version check to SSL version test (#4570)
    * Issue 5442 - Search results are different between RHDS10 and RHDS11
    * Issue 4396 - Minor memory leak in backend (#4558)
    * Revert "Update metadata for customerscenario in test docstring"
    * Update metadata for customerscenario in test docstring
    * Issue 4513 - Fix replication CI test failures (#4557)
    * Issue 4513 - Fix replication CI test failures (#4557)
    * Issue 4153 - Added a CI test (#4556)
    * Issue 4506 - BUG - fix oob alloc for fds (#4555)
    * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
    * Issue 4506 - Temporary fix for io issues (#4516)
    * Issue 4535 - lib389 - Fix log function in backends.py
    * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
    * Issue 4544 - Compiler warnings on krb5 functions (#4545)
    * Update rpm.mk for RUST tarballs
* Wed Apr 07 2021 Dirk Müller <dmueller@suse.com>
  - small spec cleanup
* Fri Jan 29 2021 Dominique Leuenberger <dimstar@opensuse.org>
  - As there is no python-* package, the direct use of singlespec
    seems unapplicable. So do not build for all python3.x flavors,
    but only for the main one:
    + Use releavant %python3_ macros.
    + Do not use %python_module, as this pulls in all python
      versions.
* Mon Jan 18 2021 wbrown@suse.de
  - Update to version 2.0.2~git0.6d17ca7df:
    * Bump version to 2.0.2
    * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
    * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
    * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
    * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
    * Issue 4513 - CI Tests - fix test failures
    * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
    * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
    * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
    * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
    * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
    * Issue 4219 - Log internal unindexed searches (notes=A)
    * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
    * Issue 4381 - RFE - LDAPI authentication DN rewritter
    * Issue 4513 - Fix schema test and lib389 task module (#4514)
    * Issue 4414 - disk monitoring - prevent division by zero crash
    * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
    * Issue 4507 - Improve csngen testing task (#4508)
    * Issue 4498 - BUG - entryuuid replication may not work (#4503)
    * Issue 4480 - Unexpected info returned to ldap request (#4491)
    * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
    * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
    * Merge pull request #4501 from mreynolds389/issue4500
    * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
    * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
    * Issue 3522 - Remove DES to AES conversion code
    * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
    * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
    * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
    * Issue 4486 - Remove random ldif file generation from import test (#4487)
    * Issue 4224 - cleanup specfile after libsds removal
    * Issue 4421 - Unable to build with Rust enabled in closed environment
    * Issue 4489 - Remove return statement from a void function (#4490)
    * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
    * Ticket 4224 - openldap can become confused with entryuuid
    * Ticket 4313 - improve tests and improve readme re refdel
    * Ticket 4313 - fix potential syncrepl data corruption
    * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
    * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
    * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
    * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
    * Issue 4446 RFE - openldap password hashers
    * Issue 4284 - dsidm fails to delete an organizationalUnit entry
    * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
    * Issue 4464 - RFE - clang with ds+asan+rust
    * Issue 4105 - Remove python.six (fix regression)
    * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
    * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
    * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
    * Issue 4460 - BUG  - lib389 should use system tls policy
    * Issue 3657 - Add options to dsctl for dsrc file
    * Issue 4454 - RFE - fix version numbers to allow object caching
    * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
    * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
    * Issue 4112 - Added a CI test (#4441)
    * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
    * Issue 4105 - Remove python.six from lib389 (#4456)
    * Fix pytest test collection
    * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
    * Issue 4410 RFE - ndn cache with arc in rust
    * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
    * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
    * Issue 4428 - Paged Results with Chaining Test Case
    * do not add referrals for masters with different data generation #2054 (#4427)
    * Issue 4383 - Do not normalize escaped spaces in a DN
    * Issue 4432 - After a failed online import the next imports are very slow
    * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
    * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
    * Issue 4429 - NULL dereference in revert_cache()
    * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
    * Issue 4407 RFE - remove http client and presence plugin (#4409)
    * build problems at alpine linux
    * Issue 4415 - unable to query schema if there are extra parenthesis
* Tue Dec 01 2020 wbrown@suse.de
  - Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
  - Perl has been completly removed in 2.0.0, enable-perl removed and lib389
    is the default. Perl tools have not been included in SUSE since 1.4.1.x
  - Update to version 2.0.1~git0.b557f5daa:
    * Bump version to 2.0.1
    * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
    * Issue 4391 - DSE config modify does not call be_postop (#4394)
    * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
    * Issue 4176 - CL trimming causes high CPU
    * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
    * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
    * Bump version to 2.0.0
    * Bump version to 1.4.5.0
* Sun Nov 08 2020 wbrown@suse.de
  - Update to version 1.4.4.8~git0.bf454ad07:
    * Bump version to 1.4.4.8
    * Issue 4415 - unable to query schema if there are extra parenthesis
    * Issue 4176 - CL trimming causes high CPU
    * Bump version to 1.4.4.7
    * Issue 2526 - revert backend validation check
    * Issue 4262 - more perl removal cleanup
    * Issue 2526 - retrocl backend created out of order
    * Bump version to 1.4.4.6
    * Issue 4262 - Remove legacy tools subpackage (final cleanup)
  - Add missing dependency on gawk
* Tue Oct 27 2020 wbrown@suse.de
  - Update to version 1.4.4.6~git0.71baa8cb2:
    * Bump version to 1.4.4.6
    * Issue 4262 - Remove legacy tools subpackage (final cleanup)
    * Issue 4262 - Remove legacy tools subpackage (restart instances after rpm install)
    * Issue 4262 - Remove legacy tools subpackage
    * Issue 2526 - revert API change in slapi_be_getsuffix()
    * Issue 4363 - Sync repl: per thread structure was incorrectly initialized (#4395)
    * Issue 4392 - Update create_test.py
    * Issue 2820 - Fix CI tests (#4365)
    * Issue 2526 - suffix management in backends incorrect
    * Issue 4389 - errors log with incorrectly formatted message parent_update_on_childchange
* Mon Jul 13 2020 wbrown@suse.de
  - Update to version 1.4.4.4~git0.318a3ce0c:
    * Bump version to 1.4.4.4
    * Ticket 51175 - resolve plugin name leaking
    * Issue 51187 - UI - stop importing Cockpit's PF css
    * Issue 51192 - Add option to reject internal unindexed searches
    * Issue 50840 - Fix test docstrings metadata-1
    * Issue 50840 - Fix test docstrings metadata
    * Ticket 50980 - fix foo_filter_rewrite
    * Issue 51165 - add more logconv stats for the new access log keywords
    * Issue 50928 - Unable to create a suffix with countryName either via dscreate or the admin console
    * Issue 51188 - db2ldif crashes when LDIF file can't be accessed
    * Issue 50545 - Port remaining legacy tools to new python CLI
    * Issue 51165 - add new access log keywords for wtime and optime
    * Issue : 49761 - Fix CI test suite issues ( Port remaning acceptance test suit part 1)
    * Issue: 51070 - Port Import TET module to python3 part2
    * Issue:51142 - Port manage Entry TET suit to python 3 part 1
    * Issue: 50860 - Port Password Policy test cases from TET to python3 final
    * Issue 50696 - Fix Allowed and Denied Ciphers lists - WebUI
    * Issue 51169 - UI - attr uniqueness - selecting empty subtree crashes cockpit
    * Issue 49256 - log warning when thread number is very different from autotuned value
    * Issue 51157 - Reindex task may create abandoned index file
    * Issue 50873 - Fix issues with healthcheck tool
    * Issue:50860 - Port Password Policy test cases from TET to python3 part2
    * Issue 51166 - Log an error when a search is fully unindexed
    * Ticket 50544 - OpenLDAP syncrepl compatability
    * Ticket 51161 - fix SLE15.2 install issps
    * Issue 49999 - rpm.mk build-cockpit should clean cockpit_dist first
    * Issue 51144 - dsctl fails with instance names that contain slapd-
    * Issue 51155 - Fix OID for sambaConfig objectclass
    * Ticket 51159 - dsidm ou delete fails
    * Issue 50984 - Memory leaks in disk monitoring
    * Ticket 51131 - improve mutex alloc in conntable
    * Issue 49761 - Fix CI tests
    * Ticket 49859 - A distinguished value can be missing in an entry
    * Issue 50791 - Healthcheck should look for notes=A/F in access log
    * Issue 51072 - Set the default minimum worker threads
    * Ticket 51140 - missing ifdef
    * Issue 50912 - pwdReset can be modified by a user
    * Issue 50781 - Make building cockpit plugin optional
    * Issue 51100 - Correct numSubordinates value for cn=monitor
    * Issue 51136 - dsctl and dsidm do not errors correctly when using JSON
    * Ticket 137 - fix compiler warning
    * Issue 50781 - Make building cockpit plugin optional
    * Issue 51132 - Winsync setting winSyncWindowsFilter not working as expected
    * Ticket 51034 - labeledURIObject
    * Issue 50545 - Port remaining legacy tools to new python CLI
    * Issue 50889 - Extract pem files into a private namespace
    * Ticket 137 - Implement EntryUUID plugin
    * Ticket 51072 - improve autotune defaults
    * Ticket 51115 - enable samba3.ldif by default
    * Issue 51118 - UI - improve modal validation when creating an instance
    * Issue 50746 - Add option to healthcheck to list all the lint reports
* Sun May 31 2020 wbrown@suse.de
  - Update to version 1.4.4.3~git0.7b79b89c1:
    * Bump version to 1.4.4.3
    * Issue 50931 - RFE AD filter rewriter for ObjectCategory
    * Issue: 50860 - Port Password Policy test cases from TET to python3 part1
    * Issue 51113 - Allow using uid for replication manager entry
    * Issue 51095 - abort operation if CSN can not be generated
    * Issue 51110 - Fix ASAN ODR warnings
    * Issue 49850 -ldbm_get_nonleaf_ids() painfully slow for databases with many non-leaf entries
    * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
    * Issue 51076 - remove unnecessary slapi entry dups
    * Issue 51086 - Improve dscreate instance name validation
    * Issue:51070 - Port Import TET module to python3 part1
    * Ticket 51037 - compiler warning
    * Ticket 50989 - ignore pid when it is ourself in protect_db
    * Ticket 51037 - RFE AD filter rewriter for ObjectSID
    * Issue 50499 - Fix some npm audit issues
    * Issue 51091 - healthcheck json report fails when mapping tree is deleted
    * Ticket 51079 - container pid start and stop issues
    * Revert "Issue 51017 - Implement dynamic ds/bz pytest markers"
    * Issue 49761 - Fix CI tests
    * Issue 50610 - Fix return code when it's nothing to free
    * Issue 50610 - memory leaks in dbscan and changelog encryption
    * Issue 51076 - prevent unnecessarily duplication of the target entry
    * Issue 50940 - Permissions of some shipped directories may change over time
    * Issue 50873 - Fix issues with healthcheck tool
    * Issue 51017 - Implement dynamic ds/bz pytest markers
    * Ticket 51082 - abort when a empty valueset is freed
    * Issue:CI test - automember_plugin (Long Duration test)
    * Issue 50201 - nsIndexIDListScanLimit accepts any value
* Tue May 12 2020 wbrown@suse.de
  - Update to version 1.4.4.2~git0.debc684ad:
    * Bump version to 1.4.4.2
    * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
    * Issue 51054 - Revise ACI target syntax checking
    * Ticket 51068 - deadlock when updating the schema
    * Issue 51042 - try to use both c_rehash and openssl rehash
    * Issue 51042 - switch from c_rehash to openssl rehash
    * Issue 50992 - Bump jemalloc version and enable profiling
    * Issue 51060 - unable to set sslVersionMin to TLS1.0
    * Issue 51064 - Unable to install server where IPv6 is disabled
    * Issue 51051 - CLI fix consistency issues with confirmations
    * Issue 50655 - etime displayed has an order of magnitude 10 times smaller than it should be
    * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
    * Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
    * Issue 49761 - Fix CI tests
    * Issue 51047 - React deprecating ComponentWillMount
    * Issue 50499 - fix npm audit issues
    * Issue 50545 - Port dbgen.pl to dsctl
    * Issue 51027 - Test passwordHistory is not rewritten on a fail attempt
* Thu Apr 23 2020 wbrown@suse.de
  - Update to version 1.4.4.1~git0.2333d75d5:
    * Bump version to 1.4.4.1
    * Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
    * Ticket 50877 - task to run tests of csn generator
    * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
    * Issue: 48055 - CI test - automember_plugin(part3)
    * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
    * Issue 51031 UI - transition between two instances needs improvement
* Tue Apr 21 2020 wbrown@suse.de
  - Update to version 1.4.4.0~git0.5fc54f434:
    * Bump version to 1.4.4
    * Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
    * Ticket 50931 - RFE AD filter rewriter for ObjectCategory
    * Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
    * Ticket 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
    * Ticket 51008 - dbhome in containers
    * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
    * Ticket 51014 - slapi_pal.c possible static buffer overflow
    * Issue 50545 - remove dbmon "incr" option from arg parser
    * Issue 50545 - Port dbmon.sh to dsconf
    * Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
    * Issue 49731 - Fix additional issues with setting db home directory by default
    * Issue 50337 - Replace exec() with setattr()
    * Ticket 50905 - intermittent SSL hang with rhds
    * Issue 50952 - SSCA lacks basicConstraint:CA
    * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
    * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
* Mon Apr 06 2020 wbrown@suse.de
  - Update to version 1.4.3.5~git0.fc95cf3ad:
    * Bump version to 1.4.3.5
    * Issue 50994 - Fix latest UI bugs found by QE
    * Ticket 50933 - rfc2307compat.ldif
    * Issue 50337 - Replace exec() with setattr()
    * Issue 50984 - Memory leaks in disk monitoring
    * Issue 50984 - Memory leaks in disk monitoring
    * Issue 49731 - dscreate fails in silent mode because of db_home_dir
    * Issue 50975 - Revise UI branding with new minimized build
    * Issue 49437 - Fix memory leak with indirect COS
    * Issue 49731 - Do not add db_home_dir to template-dse.ldif
    * Issue 49731 - set and use db_home_directory by default
    * Ticket 50971 - fix BSD_SOURCE
    * -n option of dbverify does not work
    * Issue 50952- SSCA lacks basicConstraint:CA
    * Issue 50976 - Clean up Web UI source directory from unused files
    * Issue 50955 - Fix memory leaks in chaining plugin(part 2)
    * Issue 50966 - UI - Database indexes not using typeAhead correctly
    * Issue 50974 - UI - wrong title in "Delete Suffix" popup
    * Issue 50972 - Fix cockpit plugin build
    * Issue 49761 - Fix CI test suite issues
    * Issue 50971 - Support building on FreeBSD.
    * Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
    * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
    * Issue 50963 - We should bundle *.min.js files of Console
    * Issue: 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
    * Issue: 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
    * Issue 50954 - buildnum.py - fix date formatting issue
* Tue Mar 17 2020 389-ds-maintainer@suse.de
  - Remove 0001-fix-cargo-build.patch as it has been included upstream
  - Update to version 1.4.3.4~git0.3422d6574:
    * Bump version to 1.4.3.4
    * Issue 50954 - Port buildnum.pl to python(part 2)
    * Issue 50955 - Fix memory leaks in chaining plugin
    * Issue 50954 - Port buildnum.pl to python
    * Ticket 50947 - change 00core.ldif objectClasses for openldap migration
    * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
    * Issue 50937 - Update CLI for new backend split configuration
    * Issue: 50860 - Port Password Policy test cases from TET to python3 pwp.sh
    * Ticket 50945 - givenname alias of gn from openldap
    * Ticket 50935 - systemd override in lib389 for dscontainer
    * Issue 50499 - Fix npm audit issues
    * Issue 49761 - Fix CI test suite issues
    * Ticket 50618 - clean compiler warning and log level
    * Ticket 50889 - fix compiler issues
    * Issue 50884 -  Health check tool DSEldif check fails
    * Issue 50926 - Remove dual spinner and other UI fixes
    * Issue 50928 - Unable to create a suffix with countryName
    * Issue 50758 - Only Recommend bash-completion, not Require
    * Issue 50923 - Fix a test regression
    * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
    * Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
    * Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
    * Issue 50919 - Backend delete fails using dsconf
    * Issue 50872 - dsconf can't create GSSAPI replication agreements
    * Issue 50912 - RFE - add password policy attribute pwdReset
    * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
    * Ticket 50889 - Extract pem files into a private namespace
    * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
    * Issue: 50686 - Port fractional replication test cases from TET to python3 final
    * Issue 49845 - Remove pkgconfig check for libasan
    * Issue:50860 - Port Password Policy test cases from TET to python3 bug624080
    * Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs
    * Ticket 50786 - connection table freelist
    * Ticket 50618 - support cgroupv2
    * Ticket 50900 - Fix cargo offline build
    * Ticket 50898 - ldclt core dumped when run with -e genldif option
* Mon Mar 09 2020 William Brown <william.brown@suse.com>
  - Change systemd_requires to systemd_ordering based on packaging
    advice.
  - Change 389-ds to use sysusers.d for user/group addition of dirsrv
    instead of manual calls to useradd/groupadd.
* Mon Feb 17 2020 389-ds-maintainer@suse.de
  - Add requirement on openssl for rust-openssl as part of ldaptokens
  - Add rust vendored libs
  - Add 0001-fix-cargo-build.patch to fix minor rust build issues
  - Update to version 1.4.3.3~git0.776c6edf5:
    * Bump version to 1.4.3.3
    * Issue 50855 - remove unused file from UI
    * Issue 50855 - UI: Port Server Tab to React
    * Issue 49845 - README does not contain complete information on building
    * Issue: 50686 - Port fractional replication test cases from TET to python3 part 1
    * Ticket - 49623-cont cenotaph errors on modrdn operations
    * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
    * Issue 50886 - Typo in the replication debug message
    * Issue 50873 - Fix healthcheck and virtual attr check
    * Issue 50873 - Fix issues with healthcheck tool
    * Issue 50028 - Add a new CI test case
    * Issue 49946 - Add a new CI test case
    * Issue 50117 - Add a new CI test case
    * Ticket 50787 - fix implementation of attr unique
    * Ticket 50859 - support running only with ldaps socket
    * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
    * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
    * Issue 50867 - Fix minor buildsys issues
    * Issue 50737 - Allow building with rust online without vendoring
    * Ticket 50831 add cargo.lock to allow offline builds
    * Ticket 50694 - import PEM certs on startup
    * Ticket 50857 - Memory leak in ACI using IP subject
    * Issue 49761 - Fix CI test suite issues
    * Issue 50853 - Fix NULL pointer deref in config setting
    * Issue 50850 - Fix dsctl healthcheck for python36
    * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
    * Ticket 48707 - ldapssotoken for authentication
    * Bump version to 1.4.3.2
    * Issue 49254 - Fix compiler failures and warnings
    * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
    * Issue 50836 - Port Schema UI tab to React
    * Issue 50842 - Decrease 389-console Cockpit component size
    * Ticket 50790 - Add result text when filter is invalid
    * Issue 50627 - Add ASAN logs to HTML report
    * Issue 50834 - Incorrectly setting the NSS default SSL version max
    * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
    * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
    * Ticket 50784 - performance testing scripts
    * Issue 50599 - Fix memory leak when removing db region files
    * Issue 49395 - Set the default TLS version min to TLS1.2
    * Issue 50818 - dsconf pwdpolicy get error
    * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
    * Issue 50599 - Remove db region files prior to db recovery
    * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
    * Issue 50816 - dsconf allows the root password to be set to nothing
    * Issue 50798 - incorrect bytes in format string(fix import issue)
* Mon Jan 20 2020 389-ds-maintainer@suse.de
  - Update to version 1.4.3.1~git0.a08202a5b:
    * Bump version to 1.4.3.1
    * Ticket 50798 - incorrect bytes in format string
    * Issue 50545 - Add the new replication monitor functionality to UI
    * Issue 50806 - Fix minor issues in lib389 health checks
    * Issue: 50690 - Port Password Storage test cases from TET to python3 part 1
    * Issue 49761 - Fix CI test suite issues
    * Issue 49761 - Fix CI test suite issues
    * Issue 50754 - Add Restore Change Log option to CLI
    * Issue: 48055 -  CI test - automember_plugin(part2)
    * Ticket 50667 - dsctl -l did not respect PREFIX
    * Issue 50780 - More CLI fixes
    * Ticket 50649 - lib389 without defaults.inf
    * Issue 50780 - Fix UI issues
    * Ticket 50727 - correct mistaken options in filter validation patch
    * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
    * Set branch version to 1.4.3.0
    * Ticket #49761 - Fix CI test suite issues
    * Issue 50499 - Fix npm audit issues
    * Issue 50774 - Account.enroll_certificate() should not check for DS version
    * Issue 50771 - 1.4.2.5 doesn't compile due to error ModuleNotFoundError: No module named 'pkg_resources.extern'
    * Issue 50758 - Need to enable CLI arg completion
    * Ticket 50709: Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
    * Issue: 50690 - Port Password Storage test cases from TET to python3(create required types in password_plugins)
    * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match index)
    * Issue 50761 - Parametrized tests are missing ':parametrized' value
* Wed Dec 11 2019 389-ds-maintainer@suse.de
  - Update to version 1.4.2.5~git0.d52700340:
    * Bump version to 1.4.2.5
    * Issue 50747 - Port readnsstate to dsctl
    * Issue 50758 - Enable CLI arg completion
    * Issue 50753 - Dumping the changelog to a file doesn't work
    * Ticket 50745: ns-slapd hangs during CleanAllRUV tests
    * Issue 50734 - lib389 creates non-SSCA cert DBs with misleading README.txt
    * Issue: 48851 - investigate and port TET matching rules filter tests(cert)
    * Issue: 50443 - Create a module in lib389 to Convert a byte sequence to a properly escaped for LDAP
    * Ticket 50664 - DS can fail to recover if an empty directory exists in db
    * Ticket 50736 - RetroCL trimming may crash at shutdown if trimming configuration is invalid
    * Ticket 50741 - bdb_start - Detected Disorderly Shutdown last time Directory Server was running
    * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
    * Issue 50701 - Fix type in lint report
    * Ticket 50729 - add support for gssapi tests on suse
    * Issue 50701 - Add additional healthchecks to dsconf
    * Issue 50711 - `dsconf security` lacks option for setting nsTLSAllowClientRenegotiation attribute
    * Issue 50439 - Update docker integration for Fedora
    * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match)
    * Issue 50499 - Fix npm audit issues
    * Issue 50722 - Test IDs are not unique
    * Issue 50712 - Version comparison doesn't work correctly on git builds
    * Issue 50499 - Fix npm audit issues
    * Issue 50706 - Missing lib389 dependency - packaging
* Wed Dec 04 2019 William Brown <william.brown@suse.com>
  - Resolve incorrect tmpfiles.d location which caused transactional server
    installs to fail, and may break non-root install.
* Mon Nov 18 2019 389-ds-maintainer@suse.de
  - Update to version 1.4.2.4~git0.c881f6ec0:
    * Bump version to 1.4.2.4
    * Issue 49761 - Fix CI test suite issues
    * Issue 50634 - Fix CLI error parsing for non-string values
    * Ticket 50659 AddressSanitizer: SEGV ... in bdb_pre_close
    * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
    * Issue 50644 - fix regression with creating sample entries
    * Issue 50699 - Add Disk Monitor to CLI and UI
    * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
    * Issue 50536 - After audit log file is rotated, DS version string is logged after each update
    * Issue #50712 - Version comparison doesn't work correctly on git builds
    * Issue 50706 - Missing lib389 dependency - packaging
    * Issue 49761 - Fix CI test suite issues
    * Issue #50683 - Makefile.am contains unused RPM-related targets
    * Issue 50696 - Fix various UI bugs
    * Update based on Marks feedback
    * Update to mark as skipif
    * Ticket 50641 - Update default aci to allows users to change their own password
    * Ticket 50007, 50648 - improve x509 handling.
    * Issue 50689 - Failed db restore task does not report an error
    * Issue 50199 - Disable perl by default
    * Ticket 50633 - Add cargo vendor support for offline builds
    * Issue 50499 - Fix npm audit issues
* Tue Nov 12 2019 389-ds-maintainer@suse.de
  - Update to version 1.4.2.3~git0.129914357:
    * Bump version to 1.4.2.3
    * Issue 50592 - Port Replication Tab to ReactJS
    * Issue 50680 - Remove branding from upstream spec file
    * Issue 50669 - Remove nunc-stans in favour of reworking current conn code (add.)
    * Issue: 48055 -  CI test - automember_plugin(part1)
    * Issue 50677 - Map subtree searches with NULL base to default naming context
    * Issue 50669 - Fix RPM build
    * Ticket 50669 - remove nunc-stans
    * Ticket 49850 cont -fix crash in ldbm_non_leaf
    * Issue 50634 - Clean up CLI errors output - Fix wrong exception
    * Issue 50660 - Build failure on Fedora 31
    * Issue 50634 - Clean up CLI errors output
    * Issue: 48851 - Investigate and port TET matching rules filter tests(match more test cases)
    * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
    * Issue 49850 -  ldbm_get_nonleaf_ids() slow for databases with many non-leaf entries
    * Issue 50655 - access log etime is not properly formatted
    * Issue 50653 -  objectclass parsing fails to log error message text
    * Issue 50646 - Improve task handling during shutdowns
    * Add new test suite to test migration between RHDS versions
    * Ticket 50627 - Support platforms without pytest_html
    * Ticket 49476 - backend refactoring phase1, fix failing tests
    * Ticket 49476 - refactor ldbm backend to allow replacement of BDB
    * Ticket - 50349 - additional fix: filter schema check must handle subtypes
    * Issue: 48851 - investigate and port TET matching rules filter tests(indexing more test cases)
    * Issue 50638 - RecursionError: maximum recursion depth exceeded while calling a Python object
    * Ticket 50636 - Crash during sasl bind
    * Ticket 50632 - Add ensure attr state so that diffs are easier from 389-ds-portal
    * Ticket 50619 - extend commands to have more modify options
    * Issue 50499 - Fix npm audit issues
    * bump version to 1.4.2.2
* Mon Sep 30 2019 389-ds-maintainer@suse.de
  - Update to version 1.4.2.2~git0.d41ef935b:
    * Issue 50627 - Add ASAN logs to HTML report
    * Issue 50545 - Port repl-monitor.pl to lib389 CLI
    * Ticket 50622 - ds_selinux_enabled may crash on suse
    * Ticket 50595 - remove syslog.target requirement
    * Ticket 50617 - disable cargo lock
    * Issue 50620 - Fix regressions from 50506 (slapi_enry_attr_get_ref)
    * Issue 50615 - Log current test name to journald
    * Ticket: 50610 memory leak in dbscan
    * Bump version to 1.4.2.1
    * Ticket 50581 - ns-slapd crashes during ldapi search
    * Issue 50604 - Fix UI validation
    * ticket 50510 - etime can contain invalid nanosecond value
    * Ticket 50593 Investigate URP handling on standalone instance
    * Issue 50506 - Fix regression for relication stripattrs
    * Issue 50580 - Perl can't be disabled in configure
    * Ticket 50584, 49212 - docker healthcheck and configuration
    * Issue 50546 - fix more UI issues(part 2)
    * Do not use comparision with "is" for empty value
    * Issue 50546 - fix more UI issues
    * Issue 50586 - lib389 - Fix DSEldif long line processing
    * Issue 50173 - Add the validate-syntax task to the dsconf schema
    * Issue 50546 - Fix various issues in UI
    * Bump version to 1.4.2.0
    * Ticket 50576 - Same proc uid/gid maps to rootdn for ldapi sasl
    * Ticket 50567, 50568 - strict host check disable and display container version
    * Issue 50550 - DS installer debug messages leaking to ipa-server-install
    * Issue 50545 - Port fixup-memberuid and add the functionality to CLI and UI
    * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
    * Issue 50578 - Add SKIP_AUDIT_CI flag for Cockpit builds
    * Ticket 50349 - filter schema validation
    * Issue: 48055 - CI test-(Plugin configuration should throw proper error messages if not configured properly)
    * Issue 49324 - idl_new fix assert
    * Ticket 50564 - Fix rust libraries by default and improve docker
    * Issue 50206 - Refactor lock, unlock and status of dsidm account/role
    * Issue 49324 - idl_new report index name in error conditions
    * Issue 49761 - Fix CI test suite issues
    * Issue 50506 - Fix regression from slapi_entry_attr_get_ref refactor
    * Issue 50499 - Audit fix - Update npm 'eslint-utils' version
    * Issue 49624 - modrdn silently fails if DB deadlock occurs
    * fix for 50542 crashes in filter tests
    * Issue 49761 - Fix CI test suite issues
    * Ticket 50542 - Entry cache contention during base search
    * Issue 50462 - Fix CI tests
    * Ticket 50490 objects and memory leaks
    * Issue 50538 - Move CI test to individual file
    * Issue 50538 - cleanAllRUV task limit is not enforced for replicated tasks
    * Issue 50536 - Audit log heading written to log after every update
    * Issue 50525 - nsslapd-defaultnamingcontext does not change when the assigned suffix gets deleted
    * Issue 50534 - CLI change schema edit subcommand to replace
    * Issue 50506 - cont Fix invalid frees from pointer reference calls
    * Issue 50507 - Fix Cockpit UI styling for PF4
    * Issue: 48851 - investigate and port TET matching rules filter tests(indexing final)
    * Issue: 48851 - Add more test cases to the match test suite(mode replace)
    * Issue 50530 - Directory Server not RFC 4511 compliant with requested attr "1.1"
    * Issue 50529 -  LDAP server returning PWP controls in different sequence
    * Issue 50506 - Fix invalid frees from pointer reference calls.
    * Issue 50506 - Replace slapi_entry_attr_get_charptr() with slapi_entry_attr_get_ref()
    * Issue 50521 - Add regressions in CI tests
    * Ticket 50510 - etime can contain invalid nanosecond value
    * Issue 50488 - Create a monitor for disk space usagedisk-space-mon
    * Issue 50511 -  lib389 PosixGroups type can not handle rdn properly
    * Issue 50508 - UI - fix local password policy form
* Fri Aug 30 2019 William Brown <william.brown@suse.com>
  - Change permission of ns-slapd from 750 to 755 to allow non-root
    users to start the ldap server in containers and development
    environments.
* Fri Aug 23 2019 William Brown <william.brown@suse.com>
  - Temporarily back out of rust enablement due to incorrectly linked
    library causing server startup failure.
* Wed Aug 21 2019 William Brown <william.brown@suse.com>
  - During review an issue with libevent depedencies was noted. Change
    to buildrequires libevent-devel.
  - During testing of versioning of features it was noticed that legacy
    perl builds were broken.
* Thu Aug 08 2019 William Brown <william.brown@suse.com>
  - Fix spec file discrepencies from SLE
* Thu Aug 08 2019 William Brown <william.brown@suse.com>
  - Update to correct license issue in spec file
  - Update to simplify rust option selection
* Wed Jul 31 2019 389-ds-maintainer@suse.de
  - Update to version 1.4.1.6~git0.5ac5a8aad:
    * Bump version to 1.4.1.6
    * Issue 50355 - SSL version min and max not correctly applied
    * Issue 50497 - Port cl-dump.pl tool to Python using lib389
    * Issue: 48851 - investigate and port TET matching rules filter tests(Final)
    * correction to fix for #50417
    * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
    * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
    * Issue 50325 - Add Security tab to UI
    * Ticket 49789 - By default, do not manage unhashed password
    * Ticket 49421 - Implement password hash upgrade on bind.
    * Ticket 49421 - on bind password upgrade proof of concept
    * Ticket 50493 - connection_is_free to trylock
    * Ticket 50459 - Correct issue with allocation state
    * Issue 50499 - Fix audit issues and remove jquery from the whitelist
    * Ticket 50459 - c_mutex to use pthread_mutex to allow ns sharing
    * Ticket 50484 - Add a release build dockerfile and dscontainer improvements
    * Issue 50486 - Update jemalloc to 5.2.0
* Tue Jul 09 2019 389-ds-maintainer@suse.de
  - Update to version 1.4.1.5~git0.748334143:
    * Bump version to 1.4.1.5
    * Issue 50431 - Fix regression from coverity fix
    * Issue 49239 - Add a new CI test case
    * Issue 49997 - Add a new CI test case
    * Issue 50177 - Add a new CI test case, also added fixes in lib389
    * Issue 49761 - Fix CI test suite issues
    * Issue 50474 - Unify result codes for add and modify of repl5 config
    * Ticket 50472 - memory leak with encryption
    * Issue 50462 - Fix Root DN access control plugin CI tests
    * Issue 50462 - Fix CI tests
    * Ticket 50217 -  Implement dsconf security section
    * Issue: 48851 - Add more test cases to the match test suite.
    * Issue 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
    * Ticket 50439 - fix waitpid issue when pid does not exist
    * Issue 50454 - Fix Cockpit UI branding
    * Issue: 48851 - investigate and port TET matching rules filter tests(index)
    * Issue 49232 - Truncate the message when buffer capacity is exceeded
    * Bump version to 1.4.1.4
    * Ticket 49361 - Use IPv6 friendly network functions
    * Issue: 48851 - Investigate and port TET matching rules filter tests(bug772777)
    * Issue: 50446 -  NameError: name 'ds_is_older' is not defined
    * Issue 49602 - Revise replication status messages
    * Ticket 50439 - Update docker integration to work out of source directory
    * Ticket 50037 - revert path changes as it breaks prefix/rpm builds
    * Issue 50431 - Fix regression from coverity fix
    * Issue 50370 - CleanAllRUV task crashing during server shutdown
    * Issue: 48851 - investigate and port TET matching rules filter tests(match)
    * Issue 50417 - Fix missing quote in some legacy tools
    * Ticket 50431 - Fix covscan warnings
    * Revert "Issue 49960 - Core schema contains strings instead of numer oids"
    * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
    * Issue 50052 - Fix rpm.mk according to audit-ci change
    * Issue 50365 - PIDFile= references path below legacy directory /var/run/
    * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
    * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
    * Ticket 50417 - Revise legacy tool scripts to work with new systemd changes
    * Issue: 48851 - Add more search filters to vfilter_simple test suite
    * Issue 49761 - Fix CI test suite issues
    * Issue 49875 - Move SystemD service config to a drop-in file
    * Ticket 50413 - ds-replcheck - Always display the Result Summary
    * Issue 50052 - Add package-lock.json and use "npm ci"
    * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter simple)
    * Ticket 50355 -  NSS can change the requested SSL min and max versions
    * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter_ld)
    * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
    * Ticket 49730 - Remove unused Mozilla ldapsdk variables
* Mon May 27 2019 389-ds-maintainer@suse.de
  - Update to version 1.4.1.3~git0.1f1119d4b:
    * Bump version to 1.4.1.3
    * Issue 49761 - Fix CI test suite issues
    * Issue 50041 - Add the rest UI Plugin tabs - Part 2
    * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
    * Issue 50403 - Instance creation fails on 1.3.9 using perl utils and latest lib389
    * Ticket 50389 - ns-slapd craches while two threads are polling the same connection
    * Issue: 48851 - investigate and port TET matching rules filter tests(scanlimit)
    * Issue 50037 - lib389 fails to install in venv under non-root user
    * Issue: 50112 - Port ACI test suit from TET to python3(userattr)
    * Ticket 50393 - maxlogsperdir accepting negative values
    * Issue: 50112 - Port ACI test suit from TET to python3(roledn)
    * Issue 49960 - Core schema contains strings instead of numer oids
    * Ticket 50396 - Crash in PAM plugin when user does not exist
    * Issue 50387 - enable_tls() should label ports with ldap_port_t
    * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
    * Ticket 50306 - Fix regression with maxbersize
    * Issue 50384 - Missing dependency: cracklib-dicts
    * Issue 49029 - [RFE] improve internal operations logging
    * Issue 49761 - Fix CI test suite issues
    * Issue - 50374 dsdim posixgroup create fails with ERROR
    * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
    * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
    * Issue:48851 - investigate and port TET matching rules filter tests
    * Issue 50220 - attr_encryption test suite failing
    * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
    * Ticket 50340 cont - structs for disabled plugins will not be freed
    * Fix missing import
    * Issue 50164 - Add test for dscreate to basic test suite
    * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
    * Issue 49730 - MozLDAP bindings have been unsupported for a while
    * Issue #50353 - Categorize tests by tiers
    * Issue 50303 - Add creation date to task data
    * Issue: 50358 -  Create a Bitwise Plugin class in plugins.py
    * Remove the nss3 path prefix from the cert.h C preprocessor source file inclusion
    * Ticket 50329 - revert fix
    * Issue: 50112 - Port ACI test suit from TET to python3(keyaci)
    * Ticket 50344 - tidy rpm vs build systemd flag handling
    * Issue #50067 - Fix krb5 dependency in a specfile
    * Ticket 50340 - structs for diabled plugins will not be freed
    * Ticket 50327 - Add replication conflict support to UI
    * Ticket 50327 - Add replication conflict entry support to lib389/CLI
    * Ticket 50329 - improve connection default parameters
    * Issue: 50313 - Add a NestedRole type to lib389
    * Issue:50112 - Port ACI test suit from TET to python3(Delete and  Add)
    * Ticket 49390, 50019 - support cn=config compare operations
    * Issue 50041 - Add the rest UI Plugin tabs - Part 1
    * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
    * Ticket 49990 - Increase the default FD limits
    * Ticket 50306 - (cont typo) Move connection config inside struct
    * Ticket 50291 - Add monitor tab functionality to Cockpit UI
    * Fix cockpit console AppStream data
    * Ticket 50317 - fix ds-backtrace issue on latest gdb
    * Ticket 50305 - Revise CleanAllRUV task restart process
    * Fix typo from: Issue 49915 - Add regression test
    * Issue 50026 - Audit log does not capture the operation where nsslapd-lookthroughlimit is modified
    * Ticket 49899 - fix pin.txt and pwdfile permissions
    * Issue 49915 - Add regression test
    * Ticket 50303 - Add task creation date to task data
    * Ticket 50306 - Move connection config inside struct
    * Ticket 50240 - Improve task logging
    * Issue 50032 - Fix deprecation warnings in tests
    * Ticket 50310 - fix sasl header include
    * Ticket 49390 - improve compare and cn=config compare tests
* Thu Apr 04 2019 lnussel@suse.de
  - fix permissions handling (boo#1120189)
* Mon Apr 01 2019 389-ds-maintainer@suse.de
  - Update to version 1.4.1.2~git0.9a126614a:
    * Removes sysconfig from RPM as we no longer create it to detect
      instance existance or settings. Older installs will still have
      their sysconfig parsed, but new installs should use systemd
      environment variables.
    * Bump version to 1.4.1.2
    * Ticket 50308 - Revise memory leak fix
    * Ticket 50308 - Fix memory leaks for repeat binds and replication
    * Use PKG_CHECK_MODULES to detect the systemd library
    * Use PKG_CHECK_MODULES to detect the kerberos library
    * Use pkg-config from the host system to better support cross-compiling
    * Use PKG_CHECK_MODULES to detect the libsasl2 library
    * configure.ac: Add missing comma to an AC_ARG_ENABLE macro
    * configure.ac: Remove unpaired parentheses from two help strings
    * m4/doxygen.m4: Fix spelling of Doxygen in a message
    * Use PKG_CHECK_MODULES to detect the pcre library
    * Use PKG_CHECK_MODULES to detect the cmocka library
    * Use PKG_CHECK_MODULES to detect the nss library
    * Use PKG_CHECK_MODULES to detect the nspr library
    * Use PKG_CHECK_MODULES to detect the event library
    * Ticket 49873 - (cont 3rd) cleanup debug log
    * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
    * Issue 50292 - Fix Plugin CLI and UI issues
    * Issue:50112 - Port ACI test suit from TET to python3(misc and syntax)
    * Ticket 50289 - Fix various database UI issues
    * Ticket 49463 After cleanALLruv, replication is looping on keep alive DEL
    * Ticket 50300 - Fix memory leak in automember plugin
    * Ticket 50265: the warning about skew time could last forever
    * Ticket 50260 - Invalid cache flushing improvements
    * Ticket 49561 - MEP plugin, upon direct op failure, will delete twice the same managed entry
    * Ticket 50077 - Do not automatically turn automember postop modifies on
    * Ticket 50282 - OPERATIONS ERROR when trying to delete a group with automember members
    * Ticket 49715 - extend account functionality
    * Ticket 49873: (cont) Contention on virtual attribute lookup
    * Ticket 50260 - backend txn plugins can corrupt entry cache
    * Ticket 50255 - Port password policy test to use DSLdapObject
    * Ticket 49667 - 49668 - remove old spec files
    * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
    * Issue: 50112 - Port ACI test suit from TET to python3(Search)
    * Ticket 50259 - implement dn construction test
    * Ticket 50273 - reduce default replicaton agmt timeout
    * Ticket 50208 - lib389- Fix issue with list all instances
    * Issue: 50112 - Port ACI test suit from TET to python3(Global Group)
    * Issue 50041 - Add CLI functionality for special plugins
    * Issue 50263 - LDAPS port not listening after installation
    * Ticket 49575 - Indicate autosize value errors and corrective actions
    * Ticket 50137 - create should not check in non-stateful mode for exist
    * Ticket 49655 - remove doap file
    * Issue 50197 - Fix dscreate regression
    * Ticket 50234 - one level search returns not matching entry
    * Ticket 50257 - lib389 - password policy user vs subtree checks are broken
    * Issue: 50253 -  Making an nsManagedRoleDefinition type in src/lib389/lib389/idm/nsrole.py
    * Issue 49029 - [RFE] improve internal operations logging
    * Ticket 50230 - improve ioerror msg when not root/dirsrv
    * Issue 50246 - Fix the regression in old control tools
    * Ticket 50197 - Container integration part 2
    * Ticket 50197 - Container init tools
    * Ticket 50232 - export creates not importable ldif file
    * Ticket 50215 - UI - implement Database Tab in reachJS
    * Ticket 50243 - refint modrdn stress test
    * Ticket 50238 - Failed modrdn can corrupt entry cache
    * Ticket 50236 - memberOf should be more robust
    * Ticket 50213 - fix list instance issue
    * Issue: 50219 - Add generic filter to DSLdapObjects
    * Issue: 50227 - Making an cosClassicDefinition type in src/lib389/lib389/cos.py
    * Issue: 50112 - Port ACI test suit from TET to python3(modify)
    * Ticket 50224 - warnings on deprecated API usage
    * Issue:50112 - Port ACI test suit from TET to python3(valueaci)
    * Issue: 50112 Port ACI test suit from TET to python3(Aci Atter)
    * Ticket 50208 - make instances mark off based on dse.ldif not sysconfig
    * Issue: 50170 - composable object types for nsRole in lib389
    * Ticket 50199 - disable perl by default
    * Issue:50211 - Making an actual Anonymous type in lib389/idm/account.py
    * Ticket 50155 - password history check has no way to just check the current password
    * Ticket 49873 - Contention on virtual attribute lookup
    * Ticket 50197 - Container integration improvements
    * Ticket 50195 - improve selinux error messages in interactive
    * Ticket 49658 - In replicated topology a single-valued attribute can diverge
    * Ticket 50111: Use pkg-config to detect icu
    * Ticket 50165 - Fix issues with dscreate
    * Ticket 50177 - import task should not be deleted too rapidely after import finishes to be able to query the status
    * Ticket 50140 - Use high ports in container installs
    * Ticket 50184 - Add cli tool parity to dsconf/dsctl
    * Ticket 50159 - sssd and config display
* Sun Mar 17 2019 Jan Engelhardt <jengelh@inai.de>
  - Remove a pair of %if..%endif guards that do not affect the build.
* Wed Jan 30 2019 389-ds-maintainer@suse.de
  - Updates to 389-ds.spec
    - Make lib389 a requirement of 389-ds installs
    - Disable shell script wrappers that have be replaced by dsctl/dsconf
    - Disable perl in spec file build. For replacement tools see:
      http://www.port389.org/docs/389ds/FAQ/legacy-command-changes.html
    - Remove patches that have been merged by upstream
    - Removed: 0001-init_fhs.patch - merged by upstream
    - Removed: 0002-use-python2-for-selinux-detection.patch - merged
      by upstream
    - Removed: drop-caps.patch - merged by upstream
    - Commented requires and recommendes in 389-ds.spec
    - cyrus-sasl-plain added as a requirement as it is the only plaintext
      or start TLS secure method for password auth (LDAPS is always secure)
    - cyrus-sasl-gssapi moved to recommends as it is not always required
    - cyrus-sasl-digestmd5 moved to recommends, as it is insecure and not
      always required
    - openldap2-client moved to recommends on lib389 as a supplement to
      ldap command line tools that we provide, but not necessary
    - python3-selinux and python3-policycoreutils moved to recommends
      as they are not required, and only give "nice to have" features
      during install of an instance
  - Update to version 1.4.1.1~git0.af9bb7206:
    * Bump version to 1.4.1.1
    * Ticket 50151 - lib389 support cli add/replace/delete on objects
    * Issue 50041 - CLI and WebUI - Add memberOf plugin functionality
    * Bump version to 1.4.1.0
    * Ticket 50125 - perl fix ups for tmpfiles
    * Ticket 50164 - Add test for dscreate
    * Fix for ticket 50059: If an object is nsds5replica, it must be cn=replica
    * Ticket 50169 - lib389 changed hardcoded systemctl path
    * Ticket 50165 - Fix dscreate issues
    * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
    * Fix compiler warning in snmp main()
    * Ticket - Fix compiler warning in init.c
    * Ticket 49540 - FIx compiler warning in ldif2ldbm
    * Ticket 50169 - lib389 changed hardcoded systemctl path
    * Ticket 50165 - Fix dscreate issues
    * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
    * Ticket 49540 - FIx compiler warning in ldif2ldbm
    * Ticket 50077 - Fix compiler warnings in automember rebuild task
    * Ticket 49972 - use-after-free in case of several parallel krb
    * authentication
    * Ticket 50161 - Fixed some descriptions in "dsconf backend --help"
    * Ticket 50153 - Increase default max logs
    * Ticket 50123 - with_tmpfiles_d is associated to systemd
    * Ticket 49984 - python installer add option to create suffix entry
    * Ticket 49984 - python installer add option to create suffix entry
    * Ticket 50077 - RFE - improve automember plugin to work with
    * modify ops
    * Ticket 50136 - Allow resetting passwords on the CLI
    * Ticket 49994 - Adjust dsconf backend usage
    * Ticket 50138 - db2bak.pl -P LDAPS does not work when
    * nsslapd-securePort is missing
    * Ticket 50122 - Fix incorrect path spec
    * Issue 50145 - Add a verbose option to the backup tools
    * Ticket 50056 - dsctl db2ldif throws an exception
    * Ticket 50078 - cannot add cenotaph in read only consumer
    * Ticket 50126 - Incorrect usage of sudo in test
    * Issue 50130 - Building RPMs on RHEL8 fails
    * Ticket 50134 - fixup-memberof.pl does not respect protocol requested
    * Issue 50122 - Selinux test for presence
    * Issue 50101 -  Port fourwaymmr Test TET suit to python3
    * Issue 50091 - shadowWarning is not generated if passwordWarning
    * is lower than 86400 seconds (1 day).
    * Ticket 50128 - NS Stress fails without ipv6
    * Issue 49618 - Set nsslapd-cachememsize to custom value
    * Ticket 50117 - after certain failed import operation, impossible
    * to replay an import operation
    * Ticket 49999 - rpm.mk dist-bz2 should clean cockpit_dist first
    * Issue 48064 - Fix various issues in disk monitoring test suite
    * Issue 49938 - lib389 - Clean up CLI logging
    * Issue 49761 - Fix CI test suite issues
    * Ticket 50056 - Fix UI bugs (part 2)
    * Issue: 48064 - CI test - disk_monitoring
    * Ticket 50099 - extend error messages
    * Ticket 50099 - In FIPS mode, the server can select an unsupported
    * password storage scheme
    * Issue 50041 - Add basic plugin UI/CLI wrappers
    * Issue 50082 - Port state test suite
    * Ticket 49574 - remove index subsystem
    * Issue 49588 - Add py3 support for tickets : part-5
    * Ticket 50095 - cleanup deprecated key.h includes
* Thu Jan 24 2019 Marcus Rueckert <mrueckert@suse.de>
  - use lib389 on 15.0 and up. now that we do not hardrequire the
    python selinux bindings anymore
* Mon Jan 07 2019 Marcus Rueckert <mrueckert@suse.de>
  - update to 1.4.0.20
    - Ticket 49994 - Add test for backend/suffix CLI functions
    - Ticket 50090 - refactor fetch_attr() to slapi_fetch_attr()
    - Ticket 50091 - shadowWarning is not generated if
      passwordWarning is lower than 86400 seconds (1 day)
    - Ticket 50056 - Fix CLI/UI bugs
    - Ticket 49864 - Revised replication status messages for
      transient errors
    - Ticket 50071 - Set ports in local_simple_allocate function
    - Ticket 50065 - lib389 aci parsing is too strict
    - Ticket 50061 - Improve schema loading in UI
    - Ticket 50063 - Crash after attempting to restore a single
      backend
    - Ticket 50062 - Replace error by warning in the state machine
      defined in repl5_inc_run
    - Ticket 50041 - Set the React dataflow foundation and add basic
      plugin UI
    - Ticket 50028 - Revise ds-replcheck usage
    - Ticket 50057 - Pass argument into hashtable_new
    - Ticket 50053 - improve testcase
    - Ticket 50053 - Subtree password policy overrides a user-defined
      password policy
    - Ticket 49974 - lib389 - List instances with initconfig_dir
      instead of sysconf_dir
    - Ticket 49984 - Add an empty domain creation to the dscreate
    - Ticket 49950 - PassSync not setting pwdLastSet attribute in
      Active Directory after Pw update from LDAP sync for normal user
    - Ticket 50046 - Remove irrelevant debug-log messages from CLI
      tools
    - Ticket 50022, 50012, 49956, and 49800: Various dsctl/dscreate
      fixes
    - Ticket 49927 - dsctl db2index does not work
    - Ticket 49814 - dscreate should handle selinux ports that are in
      a range
    - Ticket 49543 - fix certmap dn comparison
    - Ticket 49994 - comment out dev paths
    - Ticket 49994 - Add backend features to CLI
    - Ticket 48081 - Add new CI tests for password

Files

/etc/dirsrv
/etc/dirsrv/config
/etc/dirsrv/config/certmap.conf
/etc/dirsrv/config/ldap-agent.conf
/etc/dirsrv/config/slapd-collations.conf
/etc/dirsrv/schema
/etc/dirsrv/schema/99user.ldif
/usr/bin/dbscan
/usr/bin/ds-logpipe.py
/usr/bin/ds-replcheck
/usr/bin/ldclt
/usr/bin/logconv.pl
/usr/bin/pwdhash
/usr/lib/dirsrv/ds_selinux_restorecon.sh
/usr/lib/dirsrv/ds_systemd_ask_password_acl
/usr/lib/supportconfig
/usr/lib/supportconfig/plugins
/usr/lib/supportconfig/plugins/dirsrv
/usr/lib/sysctl.d/70-dirsrv.conf
/usr/lib/systemd/system/dirsrv.target
/usr/lib/systemd/system/dirsrv@.service
/usr/lib/systemd/system/dirsrv@.service.d
/usr/lib/systemd/system/dirsrv@.service.d/krbkdcbefore.conf
/usr/lib/sysusers.d/dirsrv-user.conf
/usr/lib64/dirsrv
/usr/lib64/dirsrv/libldaputil.so.0
/usr/lib64/dirsrv/libldaputil.so.0.0.0
/usr/lib64/dirsrv/libns-dshttpd.so.0
/usr/lib64/dirsrv/libns-dshttpd.so.0.0.0
/usr/lib64/dirsrv/librewriters.so
/usr/lib64/dirsrv/librewriters.so.0
/usr/lib64/dirsrv/librewriters.so.0.0.0
/usr/lib64/dirsrv/libslapd.so.0
/usr/lib64/dirsrv/libslapd.so.0.1.0
/usr/lib64/dirsrv/plugins
/usr/lib64/dirsrv/plugins/libacctpolicy-plugin.so
/usr/lib64/dirsrv/plugins/libacctusability-plugin.so
/usr/lib64/dirsrv/plugins/libacl-plugin.so
/usr/lib64/dirsrv/plugins/libaddn-plugin.so
/usr/lib64/dirsrv/plugins/libattr-unique-plugin.so
/usr/lib64/dirsrv/plugins/libautomember-plugin.so
/usr/lib64/dirsrv/plugins/libback-ldbm.so
/usr/lib64/dirsrv/plugins/libbitwise-plugin.so
/usr/lib64/dirsrv/plugins/libchainingdb-plugin.so
/usr/lib64/dirsrv/plugins/libcollation-plugin.so
/usr/lib64/dirsrv/plugins/libcontentsync-plugin.so
/usr/lib64/dirsrv/plugins/libcos-plugin.so
/usr/lib64/dirsrv/plugins/libderef-plugin.so
/usr/lib64/dirsrv/plugins/libdistrib-plugin.so
/usr/lib64/dirsrv/plugins/libdna-plugin.so
/usr/lib64/dirsrv/plugins/libentryuuid-plugin.so
/usr/lib64/dirsrv/plugins/libentryuuid-syntax-plugin.so
/usr/lib64/dirsrv/plugins/liblinkedattrs-plugin.so
/usr/lib64/dirsrv/plugins/libmanagedentries-plugin.so
/usr/lib64/dirsrv/plugins/libmemberof-plugin.so
/usr/lib64/dirsrv/plugins/libpam-passthru-plugin.so
/usr/lib64/dirsrv/plugins/libpassthru-plugin.so
/usr/lib64/dirsrv/plugins/libpbe-plugin.so
/usr/lib64/dirsrv/plugins/libposix-winsync-plugin.so
/usr/lib64/dirsrv/plugins/libpwdchan-plugin.so
/usr/lib64/dirsrv/plugins/libpwdstorage-plugin.so
/usr/lib64/dirsrv/plugins/libreferint-plugin.so
/usr/lib64/dirsrv/plugins/libreplication-plugin.so
/usr/lib64/dirsrv/plugins/libretrocl-plugin.so
/usr/lib64/dirsrv/plugins/libroles-plugin.so
/usr/lib64/dirsrv/plugins/librootdn-access-plugin.so
/usr/lib64/dirsrv/plugins/libschemareload-plugin.so
/usr/lib64/dirsrv/plugins/libstatechange-plugin.so
/usr/lib64/dirsrv/plugins/libsyntax-plugin.so
/usr/lib64/dirsrv/plugins/libusn-plugin.so
/usr/lib64/dirsrv/plugins/libviews-plugin.so
/usr/lib64/dirsrv/plugins/libwhoami-plugin.so
/usr/lib64/dirsrv/python
/usr/lib64/dirsrv/python/failedbinds.py
/usr/lib64/dirsrv/python/logregex.py
/usr/sbin/ns-slapd
/usr/sbin/openldap_to_ds
/usr/share/dirsrv
/usr/share/dirsrv/data
/usr/share/dirsrv/data/10rfc2307bis.ldif
/usr/share/dirsrv/data/10rfc2307compat.ldif
/usr/share/dirsrv/data/60changelog.ldif
/usr/share/dirsrv/data/60inetmail.ldif
/usr/share/dirsrv/data/60krb5kdc.ldif
/usr/share/dirsrv/data/60nis.ldif
/usr/share/dirsrv/data/60qmail.ldif
/usr/share/dirsrv/data/60radius.ldif
/usr/share/dirsrv/data/60rfc4876.ldif
/usr/share/dirsrv/data/60samba.ldif
/usr/share/dirsrv/data/60sendmail.ldif
/usr/share/dirsrv/data/Ace.ldif
/usr/share/dirsrv/data/European.ldif
/usr/share/dirsrv/data/Eurosuffix.ldif
/usr/share/dirsrv/data/Example-roles.ldif
/usr/share/dirsrv/data/Example-views.ldif
/usr/share/dirsrv/data/Example.ldif
/usr/share/dirsrv/data/dbgen-FamilyNames
/usr/share/dirsrv/data/dbgen-GivenNames
/usr/share/dirsrv/data/dbgen-OrgUnits
/usr/share/dirsrv/data/dsee.schema
/usr/share/dirsrv/data/template-baseacis.ldif
/usr/share/dirsrv/data/template-country.ldif
/usr/share/dirsrv/data/template-domain.ldif
/usr/share/dirsrv/data/template-dse-minimal.ldif
/usr/share/dirsrv/data/template-dse.ldif
/usr/share/dirsrv/data/template-ldapi-autobind.ldif
/usr/share/dirsrv/data/template-ldapi-default.ldif
/usr/share/dirsrv/data/template-ldapi.ldif
/usr/share/dirsrv/data/template-locality.ldif
/usr/share/dirsrv/data/template-org.ldif
/usr/share/dirsrv/data/template-orgunit.ldif
/usr/share/dirsrv/data/template-sasl.ldif
/usr/share/dirsrv/data/template-state.ldif
/usr/share/dirsrv/data/template-suffix-db.ldif
/usr/share/dirsrv/data/template.ldif
/usr/share/dirsrv/extra-schema
/usr/share/dirsrv/extra-schema/README.md
/usr/share/dirsrv/extra-schema/amavisd-new.ldif
/usr/share/dirsrv/extra-schema/collective.ldif
/usr/share/dirsrv/extra-schema/corba.ldif
/usr/share/dirsrv/extra-schema/suse-mailserver.ldif
/usr/share/dirsrv/inf
/usr/share/dirsrv/inf/defaults.inf
/usr/share/dirsrv/inf/slapd.inf
/usr/share/dirsrv/mibs
/usr/share/dirsrv/mibs/redhat-directory.mib
/usr/share/dirsrv/schema
/usr/share/dirsrv/schema/00core.ldif
/usr/share/dirsrv/schema/01core389.ldif
/usr/share/dirsrv/schema/02common.ldif
/usr/share/dirsrv/schema/03entryuuid.ldif
/usr/share/dirsrv/schema/05rfc2927.ldif
/usr/share/dirsrv/schema/05rfc4523.ldif
/usr/share/dirsrv/schema/05rfc4524.ldif
/usr/share/dirsrv/schema/06inetorgperson.ldif
/usr/share/dirsrv/schema/10automember-plugin.ldif
/usr/share/dirsrv/schema/10dna-plugin.ldif
/usr/share/dirsrv/schema/10mep-plugin.ldif
/usr/share/dirsrv/schema/10rfc2307compat.ldif
/usr/share/dirsrv/schema/20subscriber.ldif
/usr/share/dirsrv/schema/25java-object.ldif
/usr/share/dirsrv/schema/28pilot.ldif
/usr/share/dirsrv/schema/30ns-common.ldif
/usr/share/dirsrv/schema/50ns-admin.ldif
/usr/share/dirsrv/schema/50ns-certificate.ldif
/usr/share/dirsrv/schema/50ns-directory.ldif
/usr/share/dirsrv/schema/50ns-mail.ldif
/usr/share/dirsrv/schema/50ns-value.ldif
/usr/share/dirsrv/schema/50ns-web.ldif
/usr/share/dirsrv/schema/60acctpolicy.ldif
/usr/share/dirsrv/schema/60autofs.ldif
/usr/share/dirsrv/schema/60eduperson.ldif
/usr/share/dirsrv/schema/60kerberos.ldif
/usr/share/dirsrv/schema/60mozilla.ldif
/usr/share/dirsrv/schema/60nss-ldap.ldif
/usr/share/dirsrv/schema/60pam-plugin.ldif
/usr/share/dirsrv/schema/60posix-winsync-plugin.ldif
/usr/share/dirsrv/schema/60pureftpd.ldif
/usr/share/dirsrv/schema/60rfc2739.ldif
/usr/share/dirsrv/schema/60rfc3712.ldif
/usr/share/dirsrv/schema/60sabayon.ldif
/usr/share/dirsrv/schema/60samba3.ldif
/usr/share/dirsrv/schema/60sudo.ldif
/usr/share/dirsrv/schema/60trust.ldif
/usr/share/dirsrv/schema/70yast.ldif
/usr/share/doc/packages/389-ds
/usr/share/doc/packages/389-ds/README.md
/usr/share/gdb/auto-load/usr/sbin
/usr/share/gdb/auto-load/usr/sbin/ns-slapd-gdb.py
/usr/share/licenses/389-ds
/usr/share/licenses/389-ds/LICENSE
/usr/share/licenses/389-ds/LICENSE.openldap
/usr/share/man/man1/dbscan.1.gz
/usr/share/man/man1/ds-logpipe.py.1.gz
/usr/share/man/man1/ds-replcheck.1.gz
/usr/share/man/man1/ldclt.1.gz
/usr/share/man/man1/logconv.pl.1.gz
/usr/share/man/man1/pwdhash.1.gz
/usr/share/man/man5/99user.ldif.5.gz
/usr/share/man/man5/certmap.conf.5.gz
/usr/share/man/man5/dirsrv.5.gz
/usr/share/man/man5/dirsrv.systemd.5.gz
/usr/share/man/man5/slapd-collations.conf.5.gz
/usr/share/man/man8/ns-slapd.8.gz
/usr/share/man/man8/openldap_to_ds.8.gz
/var/lib/dirsrv
/var/log/dirsrv


Generated by rpm2html 1.8.1

Fabrice Bellet, Tue Nov 1 23:31:07 2022