389 Directory Server 1.3.2.2
The 389 Directory Server team is proud to announce 389-ds-base version
1.3.2.2.
Fedora packages are available from the Fedora 20 Testing repositories.
The new packages and versions are:
* 389-ds-base-1.3.2.2-1
A source tarball is available for download at
http://port389.org/sources/389-ds-base-1.3.2.2.tar.bz2
Highlights in 1.3.2.2
* Support 'Content Synchronization Operation' (SyncRepl) - RFC 4533
<
http://tools.ietf.org/html/rfc4533>
* Support "whoami" extended operation
* Add ACI support for ldapi
* WinSync enhancement
o support range retrieval
o support multiple subtrees and filters
* Performance improvements
* bug fixes
Installation and Upgrade
See Download <
http://directory.fedoraproject.org/wiki/Download> for
information about setting up your yum repositories.
To install, use *yum install 389-ds* yum install 389-ds After install
completes, run *setup-ds-admin.pl* to set up your directory server.
setup-ds-admin.pl
To upgrade, use *yum upgrade* yum upgrade After upgrade completes, run
*setup-ds-admin.pl -u* to update your directory server/admin
server/console information. setup-ds-admin.pl -u
See Install_Guide
<
http://directory.fedoraproject.org/wiki/Install_Guide> for more
information about the initial installation, setup, and upgrade
See Source <
http://directory.fedoraproject.org/wiki/Source> for
information about source tarballs and SCM (git) access.
Feedback
We are very interested in your feedback!
Please provide feedback and comments to the 389-users mailing list:
https://admin.fedoraproject.org/mailman/listinfo/389-users
If you find a bug, or would like to see a new feature, file it in our
Trac instance:
https://fedorahosted.org/389
Detailed Changelog since 1.3.1
* Ticket 48 - Active Directory has certain uids which are reserved and
will cause a Directory Server replica initialization of an AD server
to abort.
* Ticket 53 - Need to update supported locales
* Ticket 54 - locale "nl" not supported by collation plugin
* Ticket 77 - [RFE] Add ACI support for ldapi
* Ticket 123 - Enhancement request: "whoami" extended operation
* Ticket 153 - Schema file parsing overly picky?
* Ticket 182 - Pwd retry counters replication not enabled by default,
and enabling it could lead to undesired results
* Ticket 197 - rhds82 rfe - BDB backend - clear free page files to
reduce changelog size
* Ticket 205 - rhds81 rfe - snmp counters index strings for multiple
network interfaces with ip addr and tcp port pairs
* Ticket 208 - [RFE] Roles with explicit scoping in RHDS
* Ticket 283 - Expose slapi_eq_* API
* Ticket 314 - ChainOnUpdate: "cn=directory manager" can modify
userRoot on consumer without changes being chained or replicated.
Directory integrity compromised.
* Ticket 411 - [RFE] mods optimizer
* Ticket 415 - winsync doesn't sync DN valued attributes if DS DN
value doesn't exist
* Ticket 428 - posix winsync should support ADD user/group entries
from DS to AD
* Ticket 460 - support multiple subtrees and filters
* Ticket 512 - improve performance of vattr code
* Ticket 513 - recycle operation pblocks
* Ticket 514 - investigate connection locking
* Ticket 521 - modrdn + NSMMReplicationPlugin - Consumer failed to
replay change
* Ticket 564 - Is ldbm_txn_ruv_modify_context still required ?
* Ticket 568 - using transaction batchval violates durability
* Ticket 569 - examine replication code to reduce amount of stored
state information
* Ticket 586 - selinux errors with /usr/sbin/setup-ds-admin.pl
* Ticket 589 - [RFE] Support RFC 4527
<
http://tools.ietf.org/html/rfc4527> Read Entry Controls
* Ticket 601 - multi master replication allows schema violation
* Ticket 602 - replication inconsistency if attribute is modified
several times in one operaion
* Ticket 607 - Replication issue: Entry can diverge betwen servers
* Ticket 609 - nsDS5BeginReplicaRefresh attribute accepts any value
and it doesn't throw any error when server restarts.
* Ticket 615 - High contention on cos cache lock
* Ticket 617 - Possible to add invalid ACI value
* Ticket 626 - Possible to add nonexistent target to ACI
* Ticket 630 - The backend name provided to bak2db is not validated
* Ticket 47306 - execute index_add_mods only for indexed attributes
* Ticket 47310 - Attribute "dsOnlyMemberUid" not allowed when syncing
nested posix groups from AD with posixWinsync
* Ticket 47313 - Indexed search with filter containing '&' and
"!"
with attribute subtypes gives wrong result
* Ticket 47314 - Winsync should support range retrieval
* Ticket 47316 - Search against 'view' is always reported as unindexed
* Ticket 47317 - should set LDAP_OPT_X_SASL_NOCANON to LDAP_OPT_ON by
default
* Ticket 47319 - make connection buffer size adjustable
* Ticket 47320 - put conn on work_q not poll list if conn has buffered
more_data
* Ticket 47323 - resurrected entry is not correctly indexed
* Ticket 47326 - idl switch does not work
* Ticket 47329 - Improve slapi_back_transaction_begin() return code
when transactions are not available
* Ticket 47331 - Self entry access ACI not working properly
* Ticket 47337 - mep_pre_op: Unable to fetch origin entry
* Ticket 47340 - Deleting a separator ',' in 7-bit check plugin
arguments makes the server fail to start with segfault
* Ticket 47350 - Allow search to look up 'in memory RUV'
* Ticket 47354 - Indexed search are logged with 'notes=U' in the
access logs
* Ticket 47358 - backend performance - introduce optimization levels
* Ticket 47360 - Delete attribute could crash the server
* Ticket 47363 - 7-bit checking is not necessary for userPassword
* Ticket 47370 - DS crashes with some 7-bit check plugin configurations
* Ticket 47371 - Some updates of "passwordgraceusertime" are useless
when updating "userpassword"
* Ticket 47372 - make old-idl tunable
* Ticket 47381 - nsslapd-db-transaction-batch-val turns to -1
* Ticket 47382 - Add a warning message when a connection hits the max
number of threads
* Ticket 47384 - Plugin library path validation
* Ticket 47387 - improve logconv.pl performance with large access logs
* Ticket 47388 - [RFE] Support 'Content Synchronization Operation'
(SyncRepl) - RFC 4533 <
http://tools.ietf.org/html/rfc4533>
* Ticket 47389 - Non-directory manager can change the individual
userPassword's storage scheme
* Ticket 47394 - remove-ds.pl should remove /var/lock/dirsrv
* Ticket 47400 - MMR stress test with dna enabled causes a deadlock
* Ticket 47411 - Replace substring search with plain search in
referint plugin
* Ticket 47416 - IPA replica's - "SASL encrypted packet length exceeds
maximum allowed limit"
* Ticket 47423 - 7-bit check plugin does not work for userpassword
attribute
* Ticket 47425 - should only call windows_update_done if repl agmt
type is windows
* Ticket 47426 - move compute_idletimeout out of handle_pr_read_ready
* Ticket 47433 - With SeLinux, ports can be labelled per range.
setup-ds.pl or setup-ds-admin.pl fail to detect already ranged
labelled ports
* Ticket 47463 - IDL-style can become mismatched during partial
restoration
* Ticket 47487 - enhance retro changelog
* Ticket 47490 - Schema replication between DS versions may overwrite
newer base schema
* Ticket 47502 - updates to ruv entry are written to retro changelog
* Ticket 47504 - idlistscanlimit per index/type/value
* Ticket 47505 - get rid of valueset_add_valuearray_ext
* Ticket 47513 - tmpfiles.d references /var/lock when they should
reference /run/lock
* Ticket 47517 - memory leak in range searches and other various leaks
* Ticket 47520 - Fix various issues with logconv.pl
* Ticket 47522 - Password administrators should be able to violate
password policy
* Ticket 47531 - 1.3.2 with mozldap - need to redo sasl_io_recv
* Ticket 47532 - 1.3.2 with mozldap - crashes in new operation work_q
* Ticket 47539 - Disabling DNA plug-in throws error 53
* Ticket 47543 - mozldap - fix compiler warnings
* Ticket 47551 - logconv: -V does not produce unindexed search report
* Ticket 47550 - logconv: failed logins: Use of uninitialized value in
numeric comparison at logconv.pl line 949
* ticket 47550 - wip (cherry picked from commit
82377636267787be5182457d619d5a0b662d2658)