%global pkgname   dirsrv

# for a pre-release, define the prerel field e.g. .a1 .rc2 - comment out for official release

# also remove the space between % and global - this space is needed because

# fedpkg verrel stupidly ignores comment lines

#% global prerel .rc3

# also need the relprefix field for a pre-release e.g. .0 - also comment out for official release

#% global relprefix 0.

%global use_openldap 1

%global use_db4 0

# If perl-Socket-2.000 or newer is available, set 0 to use_Socket6.

%global use_Socket6 0

# fedora 15 and later uses tmpfiles.d

# otherwise, comment this out

%{!?with_tmpfiles_d: %global with_tmpfiles_d %{_sysconfdir}/tmpfiles.d}

# systemd support

%global groupname %{pkgname}.target

# set PIE flag

%global _hardened_build 1

Summary:          389 Directory Server (base)

Name:             389-ds-base

Version:          1.3.1.6

Release:          %{?relprefix}10%{?prerel}%{?dist}

License:          GPLv2 with exceptions

URL:              http://port389.org/

Group:            System Environment/Daemons

BuildRoot:        %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)

Obsoletes:        %{name}-selinux

Conflicts:        selinux-policy-base < 3.9.8

Requires:         %{name}-libs = %{version}-%{release}

Provides:         ldif2ldbm 

BuildRequires:    nspr-devel

BuildRequires:    nss-devel

BuildRequires:    svrcore-devel

%if %{use_openldap}

BuildRequires:    openldap-devel

%else

BuildRequires:    mozldap-devel

%endif

%if %{use_db4}

BuildRequires:    db4-devel

%else

BuildRequires:    libdb-devel

%endif

BuildRequires:    cyrus-sasl-devel

BuildRequires:    icu

BuildRequires:    libicu-devel

BuildRequires:    pcre-devel

BuildRequires:    gcc-c++

# The following are needed to build the snmp ldap-agent

BuildRequires:    net-snmp-devel

%ifnarch sparc sparc64 ppc ppc64 s390 s390x

BuildRequires:    lm_sensors-devel

%endif

BuildRequires:    bzip2-devel

BuildRequires:    zlib-devel

BuildRequires:    openssl-devel

BuildRequires:    tcp_wrappers

# the following is for the pam passthru auth plug-in

BuildRequires:    pam-devel

BuildRequires:    systemd-units

# this is needed for using semanage from our setup scripts

Requires:         policycoreutils-python

# the following are needed for some of our scripts

%if %{use_openldap}

Requires:         openldap-clients

%else

Requires:         mozldap-tools

%endif

# use_openldap assumes perl-Mozilla-LDAP is built with openldap support

Requires:         perl-Mozilla-LDAP

# this is needed to setup SSL if you are not using the

# administration server package

Requires:         nss-tools

# these are not found by the auto-dependency method

# they are required to support the mandatory LDAP SASL mechs

Requires:         cyrus-sasl-gssapi

Requires:         cyrus-sasl-md5

# this is needed for verify-db.pl

%if %{use_db4}

Requires:         db4-utils

%else

Requires:         libdb-utils

%endif

# This picks up libperl.so as a Requires, so we add this versioned one

Requires:         perl(:MODULE_COMPAT_%(eval "`%{__perl} -V:version`"; echo $version))

# for the init script

Requires(post):   systemd-units

Requires(preun):  systemd-units

Requires(postun): systemd-units

# for setup-ds.pl to support ipv6 

%if %{use_Socket6}

Requires:         perl-Socket6

%else

Requires:         perl-Socket

%endif

Requires:         perl-NetAddr-IP

Source0:          http://port389.org/sources/%{name}-%{version}%{?prerel}.tar.bz2

# 389-ds-git.sh should be used to generate the source tarball from git

Source1:          %{name}-git.sh

Source2:          %{name}-devel.README

Patch0:           0001-Ticket-47488-Users-from-AD-sub-OU-does-not-sync-to-I.patch

Patch1:           0002-Bug-999634-ns-slapd-crash-due-to-bogus-DN.patch

Patch2:           0003-Ticket-47500-start-dirsrv-restart-dirsrv-stop-disrv-.patch

Patch3:           0004-Ticket-47455-valgrind-value-mem-leaks-uninit-mem-usa.patch

Patch4:           0005-Ticket-47507-automember-rebuild-task-not-working-as-.patch

Patch5:           0006-Ticket-449-Allow-macro-aci-keywords-to-be-case-insen.patch

Patch6:           0007-Ticket-47489-Under-specific-values-of-nsDS5ReplicaNa.patch

Patch7:           0008-Ticket-47516-replication-stops-with-excessive-clock-.patch

Patch8:           0009-Ticket-47504-idlistscanlimit-per-index-type-value.patch

Patch9:           0010-Ticket-47504-idlistscanlimit-per-index-type-value.patch

Patch10:          0011-Ticket-47461-logconv.pl-Use-of-comma-less-variable-l.patch

Patch11:          0012-Ticket-47512-backend-txn-plugin-fixup-tasks-should-b.patch

Patch12:          0013-Coverity-fix-11952.patch

Patch13:          0014-Ticket-47509-CLEANALLRUV-doesnt-run-across-all-repli.patch

Patch14:          0015-Ticket-47509-Cleanallruv-jenkins-error.patch

Patch15:          0016-Ticket-47492-PassSync-removes-User-must-change-passw.patch

Patch16:          0017-Ticket-47513-tmpfiles.d-references-var-lock-when-the.patch

Patch17:          0018-Ticket-47523-Set-up-replcation-agreement-before-init.patch

Patch18:          0019-Ticket-47534-RUV-tombstone-search-with-scope-one-doe.patch

Patch19:          0020-Ticket-47513-Refine-the-check-for-localrundir.patch

Patch20:          0021-Ticket-47513-Set-localrundir-outside-of-the-with-fhs.patch

Patch21:          0022-Ticket-47354-Indexed-search-are-logged-with-notes-U-.patch

Patch22:          0023-Ticket-47387-improve-logconv.pl-performance-with-lar.patch

Patch23:          0024-Ticket-47387-improve-logconv.pl-performance-with-lar.patch

Patch24:          0025-Ticket-47520-Fix-various-issues-with-logconv.pl.patch

Patch25:          0026-Ticket-47501-logconv.pl-uses-var-tmp-for-BDB-temp-fi.patch

Patch26:          0027-Ticket-47533-logconv-some-stats-do-not-work-across-s.patch

Patch27:          0028-Coverity-fixes-12023-12024-and-12025.patch

Patch28:          0029-Ticket-47551-logconv-V-does-not-produce-unindexed-se.patch

Patch29:          0030-Ticket-54-locale-nl-not-supported-by-collation-plugi.patch

Patch30:          0031-Ticket-53-Need-to-update-supported-locales.patch

Patch31:          0032-Ticket-53-Need-to-update-supported-locales.patch

Patch32:          0033-Ticket-47517-memory-leak-in-range-searches-and-other.patch

Patch33:          0034-Ticket-53-Need-to-update-supported-locales.patch

Patch34:          0035-Ticket-47513-tmpfiles.d-references-var-lock-when-the.patch

Patch35:          0036-Ticket-47550-logconv-failed-logins-Use-of-uninitiali.patch

Patch36:          0037-Ticket-47329-Improve-slapi_back_transaction_begin-re.patch

Patch37:          0038-Coverity-Fixes.patch

Patch38:          0039-ticket-47550-wip.patch

Patch39:          0040-Ticket-47559-hung-server-related-to-sasl-and-initial.patch

Patch40:          0041-Ticket-47560-fixup-memberof-task-does-not-work-task-.patch

Patch41:          0042-Ticket-47379-DNA-plugin-failed-to-fetch-replication-.patch

Patch42:          0043-Ticket-47379-DNA-plugin-failed-to-fetch-replication-.patch

Patch43:          0044-Ticket-47577-crash-when-removing-entries-from-cache.patch

Patch44:          0045-Ticket-47379-DNA-plugin-failed-to-fetch-replication-.patch

Patch45:          0046-Ticket-47589-Winsync-replica-initialization-and-incr.patch

Patch46:          0047-Ticket-47585-Replication-Failures-related-to-skipped.patch

Patch47:          0048-Ticket-47581-Winsync-plugin-segfault-during-incremen.patch

Patch48:          0049-Ticket-47581-Winsync-plugin-segfault-during-incremen.patch

Patch49:          0050-Revert-Ticket-47559-hung-server-related-to-sasl-and-.patch

%description

389 Directory Server is an LDAPv3 compliant server.  The base package includes

the LDAP server and command line utilities for server administration.

%package          libs

Summary:          Core libraries for 389 Directory Server

Group:            System Environment/Daemons

BuildRequires:    nspr-devel

BuildRequires:    nss-devel

BuildRequires:    svrcore-devel

%if %{use_openldap}

BuildRequires:    openldap-devel

%else

BuildRequires:    mozldap-devel

%endif

%if %{use_db4}

BuildRequires:    db4-devel

%else

BuildRequires:    libdb-devel

%endif

BuildRequires:    cyrus-sasl-devel

BuildRequires:    libicu-devel

BuildRequires:    pcre-devel

%description      libs

Core libraries for the 389 Directory Server base package.  These libraries

are used by the main package and the -devel package.  This allows the -devel

package to be installed with just the -libs package and without the main package.

%package          devel

Summary:          Development libraries for 389 Directory Server

Group:            Development/Libraries

Requires:         %{name}-libs = %{version}-%{release}

Requires:         pkgconfig

Requires:         nspr-devel

Requires:         nss-devel

Requires:         svrcore-devel

%if %{use_openldap}

Requires:         openldap-devel

%else

Requires:         mozldap-devel

%endif

%description      devel

Development Libraries and headers for the 389 Directory Server base package.

%prep

%setup -q -n %{name}-%{version}%{?prerel}

cp %{SOURCE2} README.devel

%patch0 -p1

%patch1 -p1

%patch2 -p1

%patch3 -p1

%patch4 -p1

%patch5 -p1

%patch6 -p1

%patch7 -p1

%patch8 -p1

%patch9 -p1

%patch10 -p1

%patch11 -p1

%patch12 -p1

%patch13 -p1

%patch14 -p1

%patch15 -p1

%patch16 -p1

%patch17 -p1

%patch18 -p1

%patch19 -p1

%patch20 -p1

%patch21 -p1

%patch22 -p1

%patch23 -p1

%patch24 -p1

%patch25 -p1

%patch26 -p1

%patch27 -p1

%patch28 -p1

%patch29 -p1

%patch30 -p1

%patch31 -p1

%patch32 -p1

%patch33 -p1

%patch34 -p1

%patch35 -p1

%patch36 -p1

%patch37 -p1

%patch38 -p1

%patch39 -p1

%patch40 -p1

%patch41 -p1

%patch42 -p1

%patch43 -p1

%patch44 -p1

%patch45 -p1

%patch46 -p1

%patch47 -p1

%patch48 -p1

%patch49 -p1

%build

%if %{use_openldap}

OPENLDAP_FLAG="--with-openldap"

%endif

%{?with_tmpfiles_d: TMPFILES_FLAG="--with-tmpfiles-d=%{with_tmpfiles_d}"}

# hack hack hack https://bugzilla.redhat.com/show_bug.cgi?id=833529

NSSARGS="--with-svrcore-inc=%{_includedir} --with-svrcore-lib=%{_libdir} --with-nss-lib=%{_libdir} --with-nss-inc=%{_includedir}/nss3"

%configure --enable-autobind --with-selinux $OPENLDAP_FLAG $TMPFILES_FLAG \

           --with-systemdsystemunitdir=%{_unitdir} \

           --with-systemdsystemconfdir=%{_sysconfdir}/systemd/system \

           --with-systemdgroupname=%{groupname} $NSSARGS

# Generate symbolic info for debuggers

export XCFLAGS=$RPM_OPT_FLAGS

%ifarch x86_64 ppc64 ia64 s390x sparc64

export USE_64=1

%endif

make %{?_smp_mflags}

%install

rm -rf $RPM_BUILD_ROOT 

make DESTDIR="$RPM_BUILD_ROOT" install

mkdir -p $RPM_BUILD_ROOT/var/log/%{pkgname}

mkdir -p $RPM_BUILD_ROOT/var/lib/%{pkgname}

mkdir -p $RPM_BUILD_ROOT/var/lock/%{pkgname}

# for systemd

mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/systemd/system/%{groupname}.wants

#remove libtool and static libs

rm -f $RPM_BUILD_ROOT%{_libdir}/%{pkgname}/*.a

rm -f $RPM_BUILD_ROOT%{_libdir}/%{pkgname}/*.la

rm -f $RPM_BUILD_ROOT%{_libdir}/%{pkgname}/plugins/*.a

rm -f $RPM_BUILD_ROOT%{_libdir}/%{pkgname}/plugins/*.la

# make sure perl scripts have a proper shebang 

sed -i -e 's|#{{PERL-EXEC}}|#!/usr/bin/perl|' $RPM_BUILD_ROOT%{_datadir}/%{pkgname}/script-templates/template-*.pl

%clean

rm -rf $RPM_BUILD_ROOT

%post

output=/dev/null

%systemd_post %{pkgname}-snmp.service

# reload to pick up any changes to systemd files

/bin/systemctl daemon-reload >$output 2>&1 || :

# reload to pick up any shared lib changes

/sbin/ldconfig

# restart the snmp subagent if needed

/bin/systemctl try-restart %{pkgname}-snmp.service > $output 2>&1 || :

# find all instances

instances="" # instances that require a restart after upgrade

ninst=0 # number of instances found in total

if [ -n "$DEBUGPOSTTRANS" ] ; then

   output=$DEBUGPOSTTRANS

fi

echo looking for services in %{_sysconfdir}/systemd/system/%{groupname}.wants/* > $output 2>&1 || :

for service in %{_sysconfdir}/systemd/system/%{groupname}.wants/* ; do

    if [ ! -f "$service" ] ; then continue ; fi # in case nothing matches

    inst=`echo $service | sed -e 's,%{_sysconfdir}/systemd/system/%{groupname}.wants/,,'`

    echo found instance $inst - getting status > $output 2>&1 || :

    if /bin/systemctl -q is-active $inst ; then

       echo instance $inst is running > $output 2>&1 || :

       instances="$instances $inst"

    else

       echo instance $inst is not running > $output 2>&1 || :

    fi

    ninst=`expr $ninst + 1`

done

if [ $ninst -eq 0 ] ; then

    echo no instances to upgrade > $output 2>&1 || :

    exit 0 # have no instances to upgrade - just skip the rest

fi

# shutdown all instances

echo shutting down all instances . . . > $output 2>&1 || :

/bin/systemctl stop %{groupname} > $output 2>&1 || :

echo remove pid files . . . > $output 2>&1 || :

/bin/rm -f /var/run/%{pkgname}*.pid /var/run/%{pkgname}*.startpid

# do the upgrade

echo upgrading instances . . . > $output 2>&1 || :

%{_sbindir}/setup-ds.pl -l $output -u -s General.UpdateMode=offline > $output 2>&1 || :

# restart instances that require it

for inst in $instances ; do

    echo restarting instance $inst > $output 2>&1 || :

    /bin/systemctl start $inst > $output 2>&1 || :

done

exit 0

%preun

if [ $1 -eq 0 ]; then # Final removal

    # Package removal, not upgrade

    %systemd_preun %{pkgname}-snmp.service %{groupname}

    # remove instance specific service files/links

    rm -rf %{_sysconfdir}/systemd/system/%{groupname}.wants/* > /dev/null 2>&1 || :

fi

%postun

/sbin/ldconfig

if [ $1 = 0 ]; then # Final removal

    rm -rf /var/run/%{pkgname}

fi

%files

%defattr(-,root,root,-)

%doc LICENSE EXCEPTION LICENSE.GPLv2

%dir %{_sysconfdir}/%{pkgname}

%dir %{_sysconfdir}/%{pkgname}/schema

%config(noreplace)%{_sysconfdir}/%{pkgname}/schema/*.ldif

%dir %{_sysconfdir}/%{pkgname}/config

%dir %{_sysconfdir}/systemd/system/%{groupname}.wants

%config(noreplace)%{_sysconfdir}/%{pkgname}/config/slapd-collations.conf

%config(noreplace)%{_sysconfdir}/%{pkgname}/config/certmap.conf

%config(noreplace)%{_sysconfdir}/%{pkgname}/config/ldap-agent.conf

%config(noreplace)%{_sysconfdir}/%{pkgname}/config/template-initconfig

%config(noreplace)%{_sysconfdir}/sysconfig/%{pkgname}

%config(noreplace)%{_sysconfdir}/sysconfig/%{pkgname}.systemd

%{_datadir}/%{pkgname}

%{_unitdir}

%{_bindir}/*

%{_sbindir}/*

%{_libdir}/%{pkgname}/libns-dshttpd.so*

%{_libdir}/%{pkgname}/perl

%dir %{_libdir}/%{pkgname}/plugins

%{_libdir}/%{pkgname}/plugins/*.so

%dir %{_localstatedir}/lib/%{pkgname}

%dir %{_localstatedir}/log/%{pkgname}

%ghost %dir %{_localstatedir}/lock/%{pkgname}

%{_mandir}/man1/*

%{_mandir}/man8/*

%files devel

%defattr(-,root,root,-)

%doc LICENSE EXCEPTION LICENSE.GPLv2 README.devel

%{_includedir}/%{pkgname}

%{_libdir}/%{pkgname}/libslapd.so

%{_libdir}/pkgconfig/*

%files libs

%defattr(-,root,root,-)

%doc LICENSE EXCEPTION LICENSE.GPLv2 README.devel

%dir %{_libdir}/%{pkgname}

%{_libdir}/%{pkgname}/libslapd.so.*

%changelog

* Tue Nov 12 2013 Rich Megginson <rmeggins@redhat.com> - 1.3.1.6-10

- release 1.3.1.6-10

- Resolves: bug 1018893 DS91: ns-slapd stuck in DS_Sleep

-     had to revert earlier change - does not work and breaks ipa

* Tue Nov 12 2013 Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-9

- release 1.3.1.6-9

- Resolves: bug 1028440 - Winsync replica initialization and incremental updates from DS to AD fails on RHEL

- Resolves: bug 1027502 - Replication Failures related to skipped entries due to cleaned rids

- Resolves: bug 1027047 - Winsync plugin segfault during incremental backoff

* Wed Nov  6 2013 Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-8

- release 1.3.1.6-8

- Resolves: bug 971111 - DNA plugin failed to fetch replication agreement 

- Resolves: bug 1026931 - 1.2.11.29 crash when removing entries from cache

* Mon Oct 21 2013 Rich Megginson <rmeggins@redhat.com> - 1.3.1.6-7

- Resolves: bug 1018893 DS91: ns-slapd stuck in DS_Sleep

- Resolves: bug 1018914 fixup memberof task does not work: task entry not added 

* Fri Oct 11 2013 Rich Megginson <rmeggins@redhat.com> - 1.3.1.6-6

- Resolves: bug 1013900 - logconv: some stats do not work across server restarts

-  previous patch introduced regressions

-  fixed by c2eced0 ticket #47550 and e2a880b Ticket #47550 and 8b10f83 Ticket #47551

- Resolves: bug 1008610 - tmpfiles.d references /var/lock when they should reference /run/lock

-  previous patch not complete, fixed by a11be5c Ticket 47513

- Resolves: bug 1016749 - DS crashes when "cn=Directory Manager" is changing it's password

-  cherry picked upstream f786600 Ticket 47329 and b67e230 Coverity Fixes

- Resolves: bug 1015252 locale "nl" not supported by collation plugin

- Resolves: bug 1016317 Need to update supported locales

- Resolves: bug 1016722 memory leak in range searches

* Tue Oct  1 2013 Rich Megginson <rmeggins@redhat.com> - 1.3.1.6-5

- Resolves: bug 1013896 - logconv.pl - Use of comma-less variable list is deprecated

- Resolves: bug 1008256 - backend txn plugin fixup tasks should be done in a txn

- Resolves: bug 1013738 - CLEANALLRUV doesnt run across all replicas

- Resolves: bug 1011220 - PassSync removes User must change password flag on the Windows side

- Resolves: bug 1008610 - tmpfiles.d references /var/lock when they should reference /run/lock

- Resolves: bug 1012125 - Set up replcation/agreement before initializing the sub suffix, the sub suffix is not found by ldapsearch

- Resolves: bug 1013063 - RUV tombstone search with scope "one" doesn`t work

- Resolves: bug 1013893 - Indexed search are logged with 'notes=U' in the access logs

- Resolves: bug 1013894 - improve logconv.pl performance with large access logs

- Resolves: bug 1013898 - Fix various issues with logconv.pl

- Resolves: bug 1013897 - logconv.pl uses /var/tmp for BDB temp files

- Resolves: bug 1013900 - logconv: some stats do not work across server restarts

- Resolves: bug 1014354 - Coverity fixes - 12023, 12024, and 12025

* Fri Sep 13 2013 Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-4

- bump version to 1.3.1.6-4

- Resolves Bug 1007988 - Under specific values of nsDS5ReplicaName, replication may get broken or updates missing (Ticket 47489)

- Resolves Bug 853931 - Allow macro aci keywords to be case-insensitive (Ticket 449)

- Resolves Bug 1006563 - automember rebuild task not working as expected (Ticket 47507)

* Fri Sep  6 2013 Rich Megginson <rmeggins@redhat.com> - 1.3.1.6-3

- Ticket #47455 - valgrind - value mem leaks, uninit mem usage

- Ticket 47500 - start-dirsrv/restart-dirsrv/stop-disrv do not register with systemd correctly

* Mon Aug 26 2013 Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-2

- bump version to 1.3.1.6-2

- Resolves Bug 1000633 - ns-slapd crash due to bogus DN

- Ticket #47488 - Users from AD sub OU does not sync to IPA

* Tue Aug 01 2013 Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-1

- bump version to 1.3.1.6

- Ticket 47455 - valgrind - value mem leaks, uninit mem usage

- fix coverity 11915 - dead code - introduced with fix for ticket 346

- fix coverity 11895 - null deref - caused by fix to ticket 47392

- fix compiler warning in posix winsync code for posix_group_del_memberuid_callback

- Fix compiler warnings for Ticket 47395 and 47397

- fix compiler warning (cherry picked from commit 904416f4631d842a105851b4a9931ae17822a107)

- Ticket 47450 - Fix compiler formatting warning errors for 32/64 bit arch

- fix compiler warnings

- Fix compiler warning (cherry picked from commit ec6ebc0b0f085a82041d993ab2450a3922ef5502)

* Tue Jul 30 2013 Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.5-1

- bump version to 1.3.1.5

- Ticket 47456 - delete present values should append values to deleted values

- Ticket 47455 - valgrind - value mem leaks, uninit mem usage

- Ticket 47448 - Segfault in 389-ds-base-1.3.1.4-1.fc19 when setting up FreeIPA replication

- Ticket 47440 - Fix runtime errors caused by last patch.

- Ticket 47440 - Fix compilation warnings and header files

- Ticket 47405 - CVE-2013-2219 ACLs inoperative in some search scenarios

- Ticket 47447 - logconv.pl man page missing -m,-M,-B,-D

- Ticket 47378 - fix recent compiler warnings

- Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold

- Ticket 47449 - deadlock after adding and deleting entries

- Ticket 47441 - Disk Monitoring not checking filesystem with logs

- Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold

* Fri Jul 19 2013 Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.4-1

- bump version to 1.3.1.4

- Ticket 47435 - Very large entryusn values after enabling the USN plugin and the lastusn value is negat

- Ticket 47424 - Replication problem with add-delete requests on single-valued attributes

- Ticket 47367 - (phase 2) ldapdelete returns non-leaf entry error while trying to remove a leaf entry

- Ticket 47367 - (phase 1) ldapdelete returns non-leaf entry error while trying to remove a leaf entry

- Ticket 47421 - memory leaks in set_krb5_creds

- Ticket 346 - version 4 Slow ldapmodify operation time for large quantities of multi-valued attribute v

- Ticket 47369  version2 - provide default syntax plugin

- Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold

- Ticket 47339 - RHDS denies MODRDN access if ACI list contains any DENY rule

- Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold

- Ticket 47428 - Memory leak in 389-ds-base 1.2.11.15

- Ticket 47392 - ldbm errors when adding/modifying/deleting entries

- Ticket 47385 - Disk Monitoring is not triggered as expected.

- Ticket 47410 - changelog db deadlocks with DNA and replication

* Fri Jul 19 2013 Rich Megginson <rmeggins@redhat.com> - 1.3.1.3-1

- bump version to 1.3.1.3

- Ticket 47374 - flush.pl is not included in perl5

- Ticket 47391 - deleting and adding userpassword fails to update the password (additional fix)

- Ticket 47393 - Attribute are not encrypted on a consumer after a full initialization

- Ticket 47395 47397 - v2 correct behaviour of account policy if only stateattr is configured or no alternate attr is configured

- Ticket 47396 - crash on modrdn of tombstone

- Ticket 47400 - MMR stress test with dna enabled causes a deadlock

- Ticket 47409 - allow setting db deadlock rejection policy

- Ticket 47419 - Unhashed userpassword can accidentally get removed from mods

- Ticket 47420 - An upgrade script 80upgradednformat.pl fails to handle a server instance name incuding '-'

* Fri Jul 12 2013 Jan Safranek <jsafrane@redhat.com> - 1.3.1.2-2

- Rebuilt for new net-snmp

* Sat Jun 15 2013 Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.2-1

- bump version to 1.3.1.2

- Ticket 47391 - deleting and adding userpassword fails to update the password

- Coverity Fixes (Part 7)

* Fri Jun 14 2013 Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.1-1

- bump version to 1.3.1.1

- Ticket 402 - nhashed#user#password in entry extension

- Ticket 511 - Revision - allow turning off vattr lookup in search entry return

- Ticket 580 - Wrong error code return when using EXTERNAL SASL and no client certificate

- Ticket 47327 - error syncing group if group member user is not synced

- Ticket 47355 - dse.ldif doesn't replicate update to nsslapd-sasl-mapping-fallback

- Ticket 47359 - new ldap connections can block ldaps and ldapi connections

- Ticket 47362 - ipa upgrade selinuxusermap data not replicating

- Ticket 47375 - flush_ber error sending back start_tls response will deadlock

- Ticket 47376 - DESC should not be empty as per RFC 2252 (ldapv3)

- Ticket 47377 - make listen backlog size configurable

- Ticket 47378 - fix recent compiler warnings

- Ticket 47383 - connections attribute in cn=snmp,cn=monitor is counted twice

- Ticket 47385 - DS not shutting down when disk monitoring threshold is reached

- Coverity Fixes (part 1)

- Coverity Fixes (Part 2)

- Coverity Fixes (Part 3)

- Coverity Fixes (Part 4)

- Coverity Fixes (Part 5)

* Thu May 02 2013 Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.0-1

- bump version to 1.3.1.0

- Ticket 332 - Command line perl scripts should attempt most secure connection type first

- Ticket 342 - better error message when cache overflows

- Ticket 417 - RFE - forcing passwordmustchange attribute by non-cn=directory manager

- Ticket 419 - logconv.pl - improve memory management

- Ticket 422 - 389-ds-base - Can't call method "getText"

- Ticket 433 - multiple bugs in start-dirsrv, stop-dirsrv, restart-dirsrv scripts

- Ticket 458 - RFE - Make it possible for privileges to be provided to an admin user to import an LDIF file containing hashed passwords

- Ticket 471 - logconv.pl tool removes the access logs contents if "-M" is not correctly used

- Ticket 487 - Possible to add invalid attribute values to PAM PTA plugin configuration

- Ticket 502 - setup-ds.pl script should wait if "semanage.trans.LOCK" presen

- Ticket 505 - use lock-free access name2asi and oid2asi tables (additional)

- Ticket 508 - lock-free access to FrontendConfig structure

- Ticket 511 - allow turning off vattr lookup in search entry return

- Ticket 525 - Introducing a user visible configuration variable for controlling replication retry time

- Ticket 528 - RFE - get rid of instance specific scripts

- Ticket 529 - dn normalization must handle multiple space characters in attributes

- Ticket 532 - RUV is not getting updated for both Master and consumer

- Ticket 533 - only scan for attributes to decrypt if there are encrypted attrs configured

- Ticket 534 - RFE: Add SASL mappings fallback

- Ticket 537 - Improvement of range search

- Ticket 539 - logconv.pl should handle microsecond timing

- Ticket 543 - Sorting with attributes in ldapsearch gives incorrect result

- Ticket 545 - Segfault during initial LDIF import: str2entry_dupcheck()

- Ticket 547 - Incorrect assumption in ndn cache

- Ticket 550 - posix winsync will not create memberuid values if group entry become posix group in the same sync interval

- Ticket 551 - Multivalued rootdn-days-allowed in RootDN Access Control plugin always results in access control violation

- Ticket 552 - Adding rootdn-open-time without rootdn-close-time to RootDN Acess Control results in inconsistent configuration

- Ticket 558 - Replication - make timeout for protocol shutdown configurable

- Ticket 561 - disable writing unhashed#user#password to changelog

- Ticket 563 - DSCreate.pm: Error messages cannot be used in the if expression since they could be localized.

- Ticket 565 - turbo mode and replication - allow disable of turbo mode

- Ticket 571 - server does not accept 0 length LDAP Control sequence

- Ticket 574 - problems with dbcachesize disk space calculation

- Ticket 583 - dirsrv fails to start on reboot due to /var/run/dirsrv permissions

- Ticket 585 - Behaviours of "db2ldif -a <filename>" and "db2ldif.pl -a <filename>" are inconsistent

- Ticket 587 - Replication error messages in the DS error logs

- Ticket 588 - Create MAN pages for command line scripts

- Ticket 600 - Server should return unavailableCriticalExtension when processing a badly formed critical control

- Ticket 603 - A logic error in str2simple

- Ticket 604 - Required attribute not checked during search operation

- Ticket 608 - Posix Winsync plugin throws "posix_winsync_end_update_cb: failed to add task entry" error message

- Ticket 611 - logconv.pl missing stats for StartTLS, LDAPI, and AUTOBIND

- Ticket 612 - improve dbgen rdn generation, output

- Ticket 613 - ldclt: add timestamp, interval, nozeropad, other improvements

- Ticket 616 - High contention on computed attribute lock

- Ticket 618 - Crash at shutdown while stopping replica agreements

- Ticket 620 - Better logging of error messages for 389-ds-base

- Ticket 621 - modify operations without values need to be written to the changelog

- Ticket 622 - DS logging errors "libdb: BDB0171 seek: 2147483648: (262144 * 8192) + 0: No such file or directory

- Ticket 631 - Replication: "Incremental update started" status message without consumer initialized

- Ticket 633 - allow nsslapd-nagle to be disabled, and also tcp cork

- Ticket 47299 - allow cmdline scripts to work with non-root user

- Ticket 47302 - get rid of sbindir start/stop/restart slapd scripts

- Ticket 47303 - start/stop/restart dirsrv scripts should report and error if no instances

- Ticket 47304 - reinitialization of a master with a disabled agreement hangs

- Ticket 47311 - segfault in db2ldif(trigger by a cleanallruv task)

- Ticket 47312 - replace PR_GetFileInfo with PR_GetFileInfo64

- Ticket 47315 - filter option in fixup-memberof requires more clarification

- Ticket 47325 - Crash at shutdown on a replica aggrement

- Ticket 47330 - changelog db extension / upgrade is obsolete

- Ticket 47336 - logconv.pl -m not working for all stats

- Ticket 47341 - logconv.pl -m time calculation is wrong

- Ticket 47343 - 389-ds-base: Does not support aarch64 in f19 and rawhide

- Ticket 47347 - Simple paged results should support async search

- Ticket 47348 - add etimes to per second/minute stats

- Ticket 47349 - DS instance crashes under a high load

* Thu Mar 28 2013 Noriko Hosoi <nhosoi@redhat.com> - 1.3.0.5-1

- bump version to 1.3.0.5

- Ticket 47308 - unintended information exposure when anonymous access is set to rootdse

- Ticket 628 - crash in aci evaluation

- Ticket 627 - ns-slapd crashes sporadically with segmentation fault in libslapd.so

- Ticket 634 - Deadlock in DNA plug-in Ticket #576 - DNA: use event queue for config update only at the start up

- Ticket 632 - 389-ds-base cannot handle Kerberos tickets with PAC

- Ticket 623 - cleanAllRUV task fails to cleanup config upon completion

* Mon Mar 11 2013 Mark Reynolds <mreynolds@redhat.com> - 1.3.0.4-1

- e53d691 bump version to 1.3.0.4

- Bug 912964 - CVE-2013-0312 389-ds: unauthenticated denial of service vulnerability in handling of LDAPv3 control data

- Ticket 570 - DS returns error 20 when replacing values of a multi-valued attribute (only when replication is enabled)

- Ticket 490 - Slow role performance when using a lot of roles

- Ticket 590 - ns-slapd segfaults while trying to delete a tombstone entry

* Wed Feb 13 2013 Noriko Hosoi <nhosoi@redhat.com> - 1.3.0.3-1

- bump version to 1.3.0.3

- Ticket #584 - Existence of an entry is not checked when its password is to be deleted

- Ticket 562 - Crash when deleting suffix

* Fri Feb 01 2013 Parag Nemade <paragn AT fedoraproject DOT org> - 1.3.0.2-2

- Rebuild for icu 50

* Wed Jan 16 2013 Noriko Hosoi <nhosoi@redhat.com> - 1.3.0.2-1

- bump version to 1.3.0.2

- Ticket #542 - Cannot dynamically set nsslapd-maxbersize

* Wed Jan 16 2013 Noriko Hosoi <nhosoi@redhat.com> - 1.3.0.1-1

- bump version to 1.3.0.1

- Ticket 556 - Don't overwrite certmap.conf during upgrade

* Tue Jan 08 2013 Noriko Hosoi <nhosoi@redhat.com> - 1.3.0.0-1

- bump version to 1.3.0.0

* Tue Jan 08 2013 Noriko Hosoi <nhosoi@redhat.com> - 1.3.0-0.3.rc3

- bump version to 1.3.0.rc3

- Ticket 549 - DNA plugin no longer reports additional info when range is depleted

- Ticket 541 - need to set plugin as off in ldif template

- Ticket 541 - RootDN Access Control plugin is missing after upgrade 

* Fri Dec 14 2012 Noriko Hosoi <nhosoi@redhat.com> - 1.3.0-0.2.rc2

- bump version to 1.3.0.rc2

- Trac Ticket #497 - Escaped character cannot be used in the substring search filter

- Ticket 509 - lock-free access to be->be_suffixlock

- Trac Ticket #522 - betxn: upgrade is not implemented yet

* Tue Dec 11 2012 Noriko Hosoi <nhosoi@redhat.com> - 1.3.0-0.1.rc1

- bump version to 1.3.0.rc1

- Ticket #322 - Create DOAP description for the 389 Directory Server project

- Trac Ticket #499 - Handling URP results is not corrrect

- Ticket 509 - lock-free access to be->be_suffixlock

- Ticket 456 - improve entry cache sizing

- Trac Ticket #531 - loading an entry from the database should use str2entry_f

- Trac Ticket #536 - Clean up compiler warnings for 1.3

- Trac Ticket #531 - loading an entry from the database should use str2entry_fast

- Ticket 509 - lock-free access to be->be_suffixlock

- Ticket 527 - ns-slapd segfaults if it cannot rename the logs

- Ticket 395 - RFE: 389-ds shouldn't advertise in the rootDSE that we can handle a sasl mech if we really can't

- Ticket 216 - disable replication agreements

- Ticket 518 - dse.ldif is 0 length after server kill or machine kill

- Ticket 393 - Change in winSyncInterval does not take immediate effect

- Ticket 20 - Allow automember to work on entries that have already been added

- Coverity Fixes

- Ticket 349 - nsViewFilter syntax issue in 389DS 1.2.5

- Ticket 337 - improve CLEANRUV functionality

- Fix for ticket 504

- Ticket 394 - modify-delete userpassword

- minor fixes for bdb 4.2/4.3 and mozldap

- Trac Ticket #276 - Multiple threads simultaneously working on connection's private buffer causes ns-slapd to abort

- Fix for ticket 465: cn=monitor showing stats for other db instances

- Ticket 507 - use mutex for FrontendConfig lock instead of rwlock

- Fix for ticket 510 Avoid creating an attribute just to determine the syntax for a type, look up the syntax directly by type

- Coverity defect: Resource leak 13110

- Ticket 517 - crash in DNA if no dnaMagicRegen is specified

- Trac Ticket #520 - RedHat Directory Server crashes (segfaults) when moving ldap entry

- Trac Ticket #519 - Search with a complex filter including range search is slow

- Trac Ticket #500 - Newly created users with organizationalPerson objectClass fails to sync from AD to DS with missing attribute error

- Trac Ticket #311 - IP lookup failing with multiple DNS entries

- Trac Ticket #447 - Possible to add invalid attribute to nsslapd-allowed-to-delete-attrs

- Trac Ticket #443 - Deleting attribute present in nsslapd-allowed-to-delete-attrs returns Operations error

- Ticket #503 - Improve AD version in winsync log message

- Trac Ticket #190 - Un-resolvable server in replication agreement produces unclear error message

- Coverity fixes

- Trac Ticket #391 - Slapd crashes when deleting backends while operations are still in progress

- Trac Ticket #448 - Possible to set invalid macros in Macro ACIs

- Trac Ticket #498 - Cannot abaondon simple paged result search