Changelog for libsvrcore0-3.1.1~git57.65773c3-1.2.x86_64.rpm :

* Fri Nov 29 2024 william.brownAATTsuse.com- Remove 389-ds-link-icu-uc.patch - upstreamed- Update to version 3.1.1~git57.65773c3:
* Issue 6340 - RFE - extract keys once (#6413)
* Issue 6415 - BUG - Incorrect icu linking (#6416)
* Issue 6420 - Update dsidm user get_dn test (#6421)
* Issue 6258 - Resolve race condition for two tests in health_config.py
* Bump cross-spawn from 7.0.3 to 7.0.6 in /src/cockpit/389-console (#6407)
* Issue 6386 - backup/restore broken after db log rotation (#6406)
* Issue 6401 - Remove logging macros
* Issue 6404 - UI - Add npm pretter package
* Issue 6374 - nsslapd-mdb-max-dbs autotuning doesn\'t work properly (#6400)
* Issue 5842 - Add log buffering for error log
* Issue 6397 - Remove deprecated setting for HR time stamps in logs
* Issue 6390 - Adjust cleanAllRUV max per txn and interval limits
* Issue 6349 - RFE - extract keys once (#6363) (#6394)
* Issue 6387 - Use make macro in the spec file
* Issue 6359 - Add exception to GPL license in license tag
* Issue 6381 - CleanAllRUV - move changelog purging to the very end of the task
* Issue 5920 - pamModuleIsThreadSafe is missing in the schema
* Issue 6377 - syntax error in setup.py (#6378)
* Issue 6349 - RFE - Use previously extracted key path (#6363)
* Issue 6067 - Update dsidm to prioritize basedn from .dsrc over interactive input (#6362)
* Issue 6347 - better fix for desyncronized vlv cache (#6358)
* Issue 6243 - dsctl bdb2mdb should cleanly fail if bundled libdb is not available (#6351)
* Issue 6331 - UI - Instance fails to load when DB backup directory doesn\'t exist (#6332)
* Issue 6356 - On LMDB, after an update the impact VLV index, the vlv recno cache is not systematically cleared (#6357)
* Issue 6056 - WebUI supports only instances with BDB (#6299)
* Issue 6339 - Address Coverity scan issues in memberof and bdb_layer (#6353)
* Issue 6328 - vlv control may not be logged (#6354)
* Issue 6347 - VLV search sometime fails with operation error (#6349)
* Issue 6343 - Improve online import robustness when the server is under load
* Issue 6345 - Ensure all slapi_log_err calls end format strings with newline character \
(#6346)
* Issue 6064 - bdb2mdb shows errors (#6341)
* Issue 6336 - Fix failing CI tests (roles) due to slow import (#6337)
* Fix duplicate detection logic by ensuring exact match on string length (#6333)
* Issue 6304 - RFE when memberof is enabled, defer updates of members from the update of the group (#6305)
* Issue 6329 - lmdb typo in error log notice message (#6330)
* Issue 6324 - Provide more information in the error message during setup_ol_tls_conn() (#6325)
* Issue 5965 - UI, CLI - Fix Account Policy Plugin functionality issues (#6323)
* Issue 6188 - Check if nsslapd-haproxy-trusted-ip attribute is returned in default schema
* Issue 6319 - bdb subpackage has `%description` in the wrong place
* Issue 6321 - lib389 get_db_lib function may returns the wrong db type (#6322)
* Issue 6245 - Fix some other coverity scan regressions (#6273)
* Issue 6316 - lmdb reindex is broken if index type is specified (#6318)
* Issue 6090 - Fix dbscan options and man pages (#6315)
* Issue 6307 - Wrong set of entries returned for some search filters (#6308)
* Thu Nov 21 2024 Dominique Leuenberger - Add 389-ds-link-icu-uc.patch: properly link to icu-uc as well, which is no longer transparently added when linking icu-i18n (boo#1233578).
* Wed Sep 04 2024 william.brownAATTsuse.com- bsc#1229948 - CVE-2024-43806 - rustix::fs::Dir iterator with the linux_raw backend can cause memory explosion- Update to version 3.1.1~git13.a9c7ff9:
* Issue 2472 - Add a CI test (#6314)
* Issue 6276 - Schema lib389 object is not keeping custom schema data upon editing (#6279)
* Issue 3555 - UI - Fix audit issue with npm - micromatch (#6310)
* Issue 5843 - Fix size formatting in dscreate output and enhance tests (#6309)
* Issue 6301 - Fix long delay when setting replication agreement with dsconf (#6303)
* Issue 6280 - Changelog trims updates from a given RID even if a consumer has not received any of them (#6281)
* Issue 6296 - basic_test.py::test_conn_limits fails in main branch (#6300)
* Issue 6295 - test_password_modify_non_utf8 should set default password storage scheme
* Issue 6294 - Nightly copr builds are failing
* Issue 6288 - dsidm crash with account policy when alt-state-attr is disabled (#6292)
* Issue 2324 - Add a CI test (#6289)
* Issue 6284 - BUG - freelist ordering causes high wtime (#6285)
* Issue 6282 - BUG - out of tree build fails (#6283)
* Fri Aug 02 2024 Thorsten Kukuk - dirsrv-user.conf: Remove explicit dirsrv group definition, it\'s already specified implicit with \"u dirsrv\" and not all tools like duplicate group entries.
* Wed Jul 31 2024 william.brownAATTsuse.com- Update to version 3.1.1~git0.aef1668:
* Bump version to 3.1.1
* Issue 6256 - nsslapd-numlisteners limit is not enforced (#6257)
* Issue 5327 - Fix test metadata
* Security fix for CVE-2024-6237
* Security fix for CVE-2024-5953
* Security fix for CVE-2024-3657
* Security fix for CVE-2024-2199
* Issue 6256 - nsslapd-numlisteners limit is not enforced
* Issue 6265 - lmdb - missing entries in range searches (#6266)
* Issue 5853 - Update Cargo.lock
* Bump openssl from 0.10.64 to 0.10.66 in /src
* Issue 6245 - Revert __COVERITY__ ifndef (#6268)
* Issue 6248 - fix fanalyzer warnings (#6253)
* Issue 6238 - Fix test_audit_json_logging CI test regression (#6264)
* Issue 6254 - Enabling replication for a sub suffix crashes browser (#6255)
* Issue 6155 - ldap-agent fails to start because of permission error (#6179)
* Issue 6238 - RFE - add option to write audit log in JSON format
* Issue 6216 - CI test_fast_slow_import sometime fail (#6247)
* Issue 6245 - covscan fixes (#6246)
* Issue 6241 - Add support for CRYPT-YESCRYPT (#6242)
* Issue 6229 - After an initial failure, subsequent online backups fail (#6230)
* Issue 6236 - rpm: fix compatibility with RPM 4.20
* Issue 6227 - dsconf schema does not show inChain matching rule (#6228)
* Issue 6233 - CI test wait_for_async_feature_test sometime fails (#6234)
* Bump ws from 7.5.9 to 7.5.10 in /src/cockpit/389-console
* Issue 6224 - d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes (#6225)
* Issue 6222 - CI test acl/test_timeofday_keyword sometime fails (#6223)
* Issue 6120 - /usr/lib64/dirsrv/plugins/libback-bdb.so has an invalid-looking DT_RPATH: /usr/lib/dirsrv
* Issue 5772 - ONE LEVEL search fails to return sub-suffixes (#6219)
* Issue 6183 - Slow ldif2db import on a newly created BDB backend (#6208)
* Issue 6207 - Random crash in test_long_rdn CI test (#6215)
* Bump braces from 3.0.2 to 3.0.3 in /src/cockpit/389-console
* Issue 6191 - Node.js 16 actions are deprecated
* Issue 6199 - unprotected search query during certificate based authentication (#6205)
* Issue 6200 - Disable WebUI CI tests
* Issue 6192 - Test failure: test_match_large_valueset
* Issue 6181 - RFE - Allow system to manage uid/gid at startup
* Issue 6188 - Add nsslapd-haproxy-trusted-ip to cn=schema (#6201)
* Issue 6181 - RFE - Allow system to manage uid/gid at startup (#6182)
* Issue 6170 - audit log buffering doesn\'t handle large updates
* Issue 6193 - Test failure: test_tls_command_returns_error_text
* Issue 6177 - Spec file cleanup
* Issue 6189 - CI tests fail with `[Errno 2] No such file or directory: \'/var/cache/dnf/metadata_lock.pid\'`
* Issue 6175 - Referential integrity plugin - in referint_thread_func does not handle null from ldap_utf8strtok (#6168)
* Change default salt sizes generated in crypt_pwd (#6185)
* Issue 6123 - Allow DNA plugin to reuse global config for bind method and connection protocol (#6124)
* Issue 6159 - Add a test to check URP add and delete conflict (#6160)
* Issue 6151 - Use %bcond macro for conditional builds in the spec file
* Issue 6172 - RFE: improve the performance of evaluation of filter component when tested against a large valueset (like group members) (#6173)
* Bump version to 3.1.0
* fix issue6165 (#6167)
* Tue May 14 2024 william.brownAATTsuse.com- Update to version 3.0.1~git39.e24615f:
* Issue 6142 - Fix CI tests (#6161)
* Issue 6157 - Cockipt crashes when getting replication status if topology contains an old 389ds version (#6158)
* Tue Apr 23 2024 william.brownAATTsuse.com- Update to version 3.0.1~git37.55529d1:
* Issue 6082 - Remove explicit dependencies toward libdb - revert default (#6145)
* Issue 6141 - freeipa test_topology_TestCASpecificRUVs is failing (#6144)
* Issue 6142 - [RFE] Add LMDB configuration related checks into Healthcheck tool (#6143)
* Issue 6136 - failure in freeipa tests (#6137)
* Issue 6133 - Move slapi_pblock_set_flag_operation_notes() to slapi-plugin.h
* Issue 5105 - lmdb - Cannot create entries with long rdn - fix covscan (#6131)
* Issue i6057 - Fix3 - Fix covscan issues (#6127)
* Issue 6105 - lmdb - Cannot create entries with long rdn (#6130)
* Issue 6125 - dscreate interactive fails when chosing mdb backend (#6126)
* Issue 6080 - ns-slapd crash in referint_get_config (#6081)
* Issue 6110 - Typo in Account Policy plugin message
* Issue 6057 - vlv search may result wrong result with lmdb - Fix 2 (#6121)
* Issue 6119 - Synchronise accept_thread with slapd_daemon (#6120)
* Issue 6117 - Fix the UTC offset print (#6118)
* Issue 6112 - RFE - add new operation note for MFA authentications
* Issue 5842 - Add log buffering to audit log
* Issue 5305 - OpenLDAP version autodetection doesn\'t work
* Issue 3527 - Support HAProxy and Instance on the same machine configuration (#6107)
* Issue 6057 - vlv search may result wrong result with lmdb (#6091)
* Issue 6103 - New connection timeout error breaks errormap (#6104)
* Issue 6086 - Ambiguous warning about SELinux in dscreate for non-root user
* Issue 6092 - passwordHistory is not updated with a pre-hashed password (#6093)
* Issue 6067 - Improve dsidm CLI No Such Entry handling (#6079)
* Issue 6096 - Improve connection timeout error logging (#6097)
* Issue 5647 - covscan: memory leak in audit log when adding entries
* Issue 6094 - Add coverity scan workflow
* Issue 6067 - Add hidden -v and -j options to each CLI subcommand (#6088)
* Issue 5487 - Fix various isses with logconv.pl (#6085)
* Issue 5962 - Rearrange includes for 32-bit support logic
* Issue 6046 - Make dscreate to work during kickstart installations
* Issue 6082 - Remove explicit dependencies toward libdb (#6083)
* Issue 6073 - Improve error log when running out of memory (#6084)
* Issue 6071 - Instance creation/removal is slow
* Issue 6010 - 389 ds ignores nsslapd-maxdescriptors (#6027)
* Issue 6075 - Ignore build artifacts (#6076)
* Issue 6068 - Add dscontainer stop function
* Fri Feb 02 2024 william.brownAATTsuse.com- Update to version 3.0.1~git1.1f95b57:
* Issue 6061 - Certificate lifetime displayed as NaN
* Bump version to 3.0.1
* Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
* Issue 3555 - Remove audit-ci from dependencies (#6056)
* Issue 6052 - Paged results test sets hostname to `localhost` on test collection
* Issue 6051 - Drop unused pytest markers
* Issue 6049 - lmdb - changelog is wrongly recreated by reindex task (#6050)
* Issue 6047 - Add a check for tagged commits
* Issue 6041 - dscreate ds-root - accepts relative path (#6042)
* Switch default backend to lmdb and bump version to 3.0 (#6013)
* Issue 6032 - Replication broken after backup restore (#6035)
* Issue 6037 - Server crash at startup in vlvIndex_delete (#6038)
* Issue 6034 - Change replica_id from str to int
* Wed Jan 17 2024 william.brownAATTsuse.com- Update to version 2.4.0~git126.5936946:
* Issue 6028 - vlv index keys inconsistencies (#6031)
* Issue 5989 - RFE support of inChain Matching Rule (#5990)
* Issue 6022 - lmdb inconsistency between vlv index and vlv cache names (#6026)
* Issue 6015 - Fix typo remeber (#6014)
* Issue 6016 - Pin upload/download artifacts action to v3
* Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
* Issue 4673 - Update Rust crates
* Issue 6004 - idletimeout may be ignored (#6005)
* Issue 5954 - Disable Transparent Huge Pages
* Issue 5997 - test_inactivty_and_expiration CI testcase is wrong (#5999)
* Issue 5993 - Fix several race condition around CI tests (#5996)
* Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
* Bump openssl from 0.10.55 to 0.10.60 in /src (#5995)
* Wed Dec 13 2023 William Brown - Update to support newer obs-service-cargo-vendor
* Wed Nov 29 2023 william.brownAATTsuse.com- Update to version 2.4.0~git113.84a845c:
* Issue 5980 - Improve instance startup failure handling (#5991)
* Issue 5976 - Fix freeipa install regression with lmdb (#5977)
* Issue 5984 - Crash when paged result search are abandoned - fix2 (#5987)
* Issue 5984 - Crash when paged result search are abandoned (#5985)
* Issue 5947 - CI test_vlv_recreation_reindex fails on LMDB (#5979)
* Bump version to 2.5.0
* Issue 5971 - CLI - Fix password prompt for repl status (#5972)
* Issue 5973 - Fix fedora cop RawHide builds (#5974)
* Revert \"Issue 5761 - Worker thread dynamic management (#5796)\" (#5970)
* Issue 5966 - CLI - Custom schema object is removed on a failed edit (#5967)
* Issue 5786 - Update permissions for Release workflow
* Issue 5960 - Subpackages should have more strict interdependencies
* Issue 3555 - UI - Fix audit issue with npm - babel/traverse (#5959)
* Issue 4843 - Fix dscreate create-template issue (#5950)
* bugfix for --passwd-file not working on latest version (#5934)
* Issue 5843 - dsconf / dscreate should be able to handle lmdb parameters (#5943)
* Bump postcss from 8.4.24 to 8.4.31 in /src/cockpit/389-console (#5945)
* Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
* issue 5924 - ASAN server build crash when looping opening/closing connections (#5926)
* Issue 1925 - Add a CI test (#5936)
* Issue 5732 - Localizing Cockpit\'s 389ds Plugin using CockpitPoPlugin (#5764)
* Issue 1870 - Add a CI test (#5929)
* Issue 843 - Add a warning to slapi_valueset_add_value_ext (#5925)
* Issue 5761 - Worker thread dynamic management (#5796)
* Issue 1802 - Improve ldclt man page (#5928)
* Issue 1456 - Add a CI test that verifies there is no issue (#5927)
* Issue 1317 - Add a CI test (#5923)
* Issue 1081 - CI - Add more tests for overwriting x-origin issue (#5815)
* Issue 1115 - Add a CI test (#5913)
* Issue 5848 - Fix condition and add a CI test (#5916)
* Issue 5848 - Fix condition and add a CI test (#5916)
* Issue 5914 - UI - server settings page validation improvements and db index fixes
* Issue 5909 - Multi listener hang with 20k connections (#5917)
* Issue 5902 - Fix previous commit regression (#5919)
* pass instance correctly to ds_is_older (#5903)
* Issue 5909 - Multi listener hang with 20k connections (#5910)
* Issue 5722 - improve testcase (#5904)
* Issue 5203 - outdated version in provided metadata for lib389
* Bug Description:
* Mon Aug 14 2023 william.brownAATTsuse.com- Update to version 2.4.0~git74.4297d88:
* issue 5890 part 2 - Need a tester for testing multiple listening thread feature (#5897)
* Issue i5846 - Crash when lmdb import is aborted (#5881)
* Issue 5894 - lmdb import error fails with Could not store the entry (#5895)
* Issue 5890 - Need a tester for testing multiple listening thread feature (#5891)
* Issue 5082 - slugify: ModuleNotFoundError when running test cases
* Thu Aug 10 2023 Dominique Leuenberger - Update to version 2.4.0~git69.89c2de5:
* Issue 4551 - Part 2 - Fix build warning of previous PR (#5888)
* Issue 5834 - AccountPolicyPlugin erroring for some users (#5866)
* Issue 5872 - part 2 - fix is_dbi regression (#5887)
* Issue 4758 - Add tests for WebUI
* Issue 5848 - dsconf should prevent setting the replicaID for hub and consumer roles (#5849)
* Issue 5883 - Remove connection mutex contention risk on autobind (#5886)
* Issue 5872 - `dbscan()` in lib389 can return bytes
* Bump version to 2.4.3
* Issue 5729 - Memory leak in factory_create_extension (#5814)
* Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
* Wed May 24 2023 william.brownAATTsuse.com- Update to version 2.4.0~git18.37ec5cd:
* Issue 5751 - Cleanallruv task crashes on consumer (#5775)
* Bump version to 2.4.1
* Issue 5770 - RFE - Extend Password Adminstrators to allow skipping password info updates
* Issue 5768 - CLI/UI - cert checks are too strict, and other issues
* Issue 5722 - fix compilation warnings (#5771)
* Issue 5765 - Improve installer selinux handling
* Issue 152 - RFE - Add support for LDAP alias entries
* Issue 5052 - BUG - Custom filters prevented entry deletion (#5060)
* Issue 5752 - RFE - Provide a history for LastLoginTime (#5753)
* Issue 5722 - RFE When a filter contains \'nsrole\', improve response time by rewriting the filter (#5723)
* Wed Apr 26 2023 william.brownAATTsuse.com- Update to version 2.4.0~git0.87efeb2:
* Bump version to 2.4.0
* Issue 5156 - RFE that implement slapi_memberof (#5694)
* Issue 5734 - RFE - Exclude pwdFailureTime and ContextCSN (#5735)
* Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727)
* Issue 4758 - Add tests for WebUI
* Issue 5718 - Memory leak in connection table (#5719)
* Issue 5705 - Add config parameter to close client conns on failed bind (#5712)
* Issue 4758 - Add tests for WebUI
* Issue 5643 - Memory leak in entryrdn during delete (#5717)
* Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
* Tue Apr 18 2023 pgajdosAATTsuse.com- python-six is not required
* Tue Apr 11 2023 william.brownAATTsuse.com- bsc#1210027 - apply upstream fix for setuptools- Update to version 2.3.2~git53.a01e230:
* Issue 5705 - Add config parameter to close client conns on failed bind (#5712)
* Issue 4758 - Add tests for WebUI
* Issue 5643 - Memory leak in entryrdn during delete (#5717)
* Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
* Issue 5701 - CLI - Fix referral mode setting (#5708)
* Bump openssl from 0.10.45 to 0.10.48 in /src (#5709)
* Issue 5710 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (#5711)
* Issue 5697 - Obsolete nsslapd-ldapimaprootdn attribute (#5698)
* Issue 1081 - Stop schema replication from overwriting x-origin
* Issue 4812 - Listener thread does not scale with a high num of established connections (#5706)
* Wed Mar 22 2023 william.brownAATTsuse.com- Update to version 2.3.2~git44.5e4551e:
* Issue 4812 - Listener thread does not scale with a high num of established connections (#5706)
* Issue 4812 - Listener thread does not scale with a high num of established connections (#5681)
* Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699)
* Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692)
* Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691)
* Issue 5687 - UI - sensitive information disclosure
* Issue 5661 - LMDB hangs while Rebuilding the replication changelog RUV (#5676)
* Issue 5554 - Add more tests to security_basic_test suite
* Issue 4583 - Update specfile to skip checks of ASAN builds
* Issue 4758 - Add tests for WebUI
* Fri Oct 21 2022 william.brownAATTsuse.com- Update to version 2.3.0~git22.8fedec0:
* Issue 5495 - RFE - skip dds during migration. (#5496)
* Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
* Issue 5368 - Retro Changelog trimming does not work (#5486)
* Issue 5487 - Fix various issues with logconv.pl
* Issue 5476 - RFE - add memberUid read aci by default (#5477)
* Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
* Issue 5478 - Random crash in connection code during server shutdown (#5479)
* Issue 3061 - RFE - Add password policy debug log level
* Issue 5302 - Release tarballs don\'t contain cockpit webapp
* Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264)
* Wed Sep 07 2022 william.brownAATTsuse.com- Update to version 2.3.0~git0.3db81913e:
* Bump version to 2.3.0
* Issue 5012 - Migrate pcre to pcre2 - remove match limit
* Update CI tests
* Issue 5356 - Make Rust non-optional and update default password storage scheme
* Issue 5012 - Migrate pcre to pcre2
* Issue 5428 - Fix regression with nscpEntryWsi computation
* Fix missing \'not\' in description (closes #5423) (#5424)
* Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
* Issue 3903 - fix repl keep alive event interval
* Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
* Wed Aug 10 2022 William Brown - Update _constraints due to random build failures caused by OBS environmental issues that aren\'t out fault. (out of disk, systemic builder issues).- Add debugging about the environment to assist with OBS randomly failing in the future.
* Fri Jul 29 2022 william.brownAATTsuse.com- Update to version 2.2.2~git11.f002e9e09:
* Issue 5383 - UI - Various fixes and RFE\'s for UI
* Issue 4656 - Remove problematic language from source code
* Issue 5380 - Separate cleanAllRUV code into new file
* Issue 5322 - optime & wtime on rejected connections is not properly set
* Issue 5335 - RFE - Add Security Audit Log
* Issue 5375 - CI - disable TLS hostname checking
* Issue 981 Managed Entries betxnpreoperation - transaction not aborted on managed entry failure (#5369)
* Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
* Issue 5371 - Update npm and cargo packages
* Issue 3069 - Support ECDSA private keys for TLS (#5365)
* Wed Jul 06 2022 william.brownAATTsuse.com- Update to version 2.2.2~git0.55e2c7ab3:
* Bump version to 2.2.2
* Issue 5221 - fix covscan (#5359)
* Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
* Issue 5353 - CLI - dsconf backend export breaks with multiple backends
* Issue 5346 - New connection table fails with ASAN failures (#5350)
* Issue 5345 - BUG - openldap migration fails when ppolicy is active (#5347)
* Issue 5323 - BUG - improve skipping of monitor db (#5340)
* Issue 5329 - Improve replication extended op logging
* Issue 5343 - Various improvements to winsync
* Issue 4932 - CLI - add parser aliases to long arg names
* Mon May 30 2022 william.brownAATTsuse.com- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved by Issue 5170.- Update to version 2.1.1~git22.faef73366:
* Issue 5302 - Release tarballs don\'t contain cockpit webapp
* Issue 5237 - audit-ci: Cannot convert undefined or null to object
* Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
* Issue 4970 - Add support for recursively deleting subentries
* Issue 5284 - Replication broken after password change (#5286)
* Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
* Issue 5170 - RFE - Filter optimiser (#5171)
* Issue 5276 - CLI - improve task handling
* Issue 5273 - CLI - add arg completer for instance name
* Issue 2893 - CLI - dscreate - add options for setting up replication
* Thu May 12 2022 William Brown - Add missing devel library on zlib for log compression- Force openssl as libressl is not compatible with rust ssl needs
* Thu Apr 21 2022 william.brownAATTsuse.com- bsc#1196526 - Add systemd override to correct ordering with krb components- Update to version 2.1.1~git13.beb382e1b:
* Issue 2893 - CLI - dscreate - add options for setting up replication
* Issue 4866 - CLI - when enabling replication set changelog trimming by default
* Issue 5241 - UI - Add account locking missing functionality (#5251)
* Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
* Issue 4904 - Fix various small issues
* Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
* Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
* Issue 5210 - Python undefined names in lib389
* Issue 5247 - BUG - Missing attributes in samba schema (#5248)
* Issue 5242- Craft message may crash the server (#5243)
* Wed Apr 13 2022 william.brownAATTsuse.com- Update to version 2.1.1~git8.d50340ba5:
* Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
* Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
* Issue 5210 - Python undefined names in lib389
* Thu Apr 07 2022 william.brownAATTsuse.com- Resolve bsc#1197896 - update samba schema to upstream latest- Update to version 2.1.1~git5.e988a3f55:
* Issue 5247 - BUG - Missing attributes in samba schema (#5248)
* Thu Mar 31 2022 william.brownAATTsuse.com- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS- Update to version 2.1.1~git4.b7f891097:
* Issue 5242- Craft message may crash the server (#5243)
* Issue 5234 - UI - rename Users and Groups tab
* Issue 5217 - Simplify instance creation and administration by non root user (#5224)
* Issue 5227 - UI - No way to move back to Get Started step (#5233)
* Bump version to 2.1.1
* Issue 5230 - Race condition in RHDS disk monitoring functions
* Issue 4299 - UI - Add CoS funtionality (#5196)
* Issue 5225 - UI - impossible to manually set entry cache
* Issue 5186 - UI - Fix SASL Mapping regex test feature
* Issue 5221 - User with expired password can still login with full privledges
* Tue Mar 22 2022 william.brownAATTsuse.com- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry- Update to version 2.0.14~git25.e6431d959:
* Issue 5221 - User with expired password can still login with full privledges
* Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
* Issue 5200 - dscontainer should use environment variables with DS_ prefix
* Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
* Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
* Issue 5188 - UI - LDAP editor - add entry and group types
* Issue 5184 - memberOf does not work correctly with multiple include scopes
* Issue 5162 - BUG - error on importing chain files (#5164)
* Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
* Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)
* Wed Feb 02 2022 william.brownAATTsuse.com- Update to version 2.0.14~git3.c9226ad90:
* Issue 4299 - UI - fix minor issues with ldap editor (table view)
* Issue 4299 - UI - fix minor issues with ldap editor
* Issue 5103 - UI - Add support for TPR to web console (#5111)- Add improvements for suppor config to show certificate usage
* Tue Feb 01 2022 william.brownAATTsuse.com- Update to version 2.0.14~git0.eccfa2af9:
* Bump version to 2.0.14
* Issue 5127 - ds_selinux_restorecon.sh: always exit 0
* Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
* Issue 4992 - BUG - slapd.socket container fix (#4993)
* Issue 5079 - BUG - multiple ways to specific primary (#5087)
* Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
* Issue 5135 - UI - Disk monitoring threshold does update properly
* Tue Jan 25 2022 William Brown - Update support config to latest version
* Tue Jan 25 2022 william.brownAATTsuse.com- Update to version 2.0.13~git1.72eb93ac9:
* Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
* Bump version to 2.0.13
* Issue 5132 - Update Rust crate lru to fix CVE
* Issue 3555 - UI - fix audit issue with npm nanoid
* Issue 4299 - UI - Add ACI editing features
* Issue 4299 - UI LDAP editor - add \"edit\" and \"rename\" functionality
* Issue 5127 - run restorecon on /dev/shm at server startup
* Issue 5124 - dscontainer fails to create an instance
* Issue 4312 - fix compiler warning
* Issue 5115 - AttributeError: type object \'build_manpages\' has no attribute \'build_manpages\'
* Tue Jan 25 2022 william.brownAATTsuse.com- Update to version 2.0.13~git1.72eb93ac9:
* Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
* Bump version to 2.0.13
* Issue 5132 - Update Rust crate lru to fix CVE
* Issue 3555 - UI - fix audit issue with npm nanoid
* Issue 4299 - UI - Add ACI editing features
* Issue 4299 - UI LDAP editor - add \"edit\" and \"rename\" functionality
* Issue 5127 - run restorecon on /dev/shm at server startup
* Issue 5124 - dscontainer fails to create an instance
* Issue 4312 - fix compiler warning
* Issue 5115 - AttributeError: type object \'build_manpages\' has no attribute \'build_manpages\'
* Mon Jan 24 2022 William Brown - Add missing dependency on python slugify- Change ssl dependency to openssl as libressl does not link correctly
* Sat Jan 15 2022 William Brown - Fix %pre macro in pkg for systemd services
* Thu Jan 13 2022 William Brown - Remove recommends on supportutils per review- Remove insecure recommends on md5 sasl auth
* Mon Jan 10 2022 William Brown - Add missing support utils plugin
* Mon Jan 10 2022 william.brownAATTsuse.com- Update to version 2.0.11~git13.e14935725:
* Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
* Issue 5079 - BUG - multiple ways to specific primary (#5087)
* Issue 4992 - BUG - slapd.socket container fix (#4993)
* Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
* Issue 4299 - UI LDAP editor - add \"edit\" and \"rename\" functionality
* Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
* Issue 5046 - BUG - update concread (#5047)
* Issue 5043 - BUG - Result must be used compiler warning (#5045)
* Issue 4165 - Don\'t apply RootDN access control restrictions to UNIX connections
* Issue 4931 - RFE: dsidm - add creation of service accounts
* Issue 5024 - BUG - windows ro replica sigsegv (#5027)
* Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
* Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
* Mon Jan 10 2022 william.brownAATTsuse.com- Resolve boo#1194068 by adding required schema- Update to version 2.0.11~git0.237913e86:
* Bump version to 2.0.11
* Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
* Issue 5014 - UI - Add group creation to LDAP editor
* Issue 5006 - UI - LDAP editor tree not being properly updated
* Issue 5001 - Update CI test for new availableSASLMechs attribute
* Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
* Issue 5001 - Fix next round of UI bugs:
* Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
* Issue 4978 - use more portable python command for checking containers
* Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
* Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
* Issue 4978 - make installer robust
* Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
* Issue 4973 - update snmp to use /run/dirsrv for PID file
* Issue 4962 - Fix various UI bugs - Plugins (#4969)
* Issue 4973 - installer changes permissions on /run
* Issue 4092 - systemd-tmpfiles warnings
* Issue 4956 - Automember allows invalid regex, and does not log proper error
* Issue 4731 - Promoting/demoting a replica can crash the server
* Issue 4962 - Fix various UI bugs part 1
* Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
* Issue 4943 - Fix csn generator to limit time skew drift (#4946)
* Issue 2790 - Set db home directory by default
* Bump github contianer shm size to 4 gigs
* Issue 4299 - Merge LDAP editor code into Cockpit UI
* Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
* Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
* Issue 4847 - BUG - potential deadlock in replica (#4936)
* Issue 4513 - fix ACI CI tests involving ip/hostname rules
* Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
* Issue 4916 - Memory leak in ldap-agent