%global pkgname   dirsrv

%global srcname   389-ds-base

# Exclude i686 bit arches

ExcludeArch: i686 

# for a pre-release, define the prerel field e.g. .a1 .rc2 - comment out for official release

# also remove the space between % and global - this space is needed because

# fedpkg verrel stupidly ignores comment lines

#% global prerel .rc3

# also need the relprefix field for a pre-release e.g. .0 - also comment out for official release

#% global relprefix 0.

# If perl-Socket-2.000 or newer is available, set 0 to use_Socket6.

%global use_Socket6 0

%global use_asan 0

%global use_rust 0

%global use_perl 1

%if %{use_asan}

%global use_tcmalloc 0

%else

%if %{_arch} != "s390x" && %{_arch} != "s390" && %{_arch} != "ppc64" && %{_arch} != "ppc64le"

%global use_tcmalloc 1

%else

%global use_tcmalloc 0

%endif

%endif

# Use Clang instead of GCC

%global use_clang 0

# fedora 15 and later uses tmpfiles.d

# otherwise, comment this out

%{!?with_tmpfiles_d: %global with_tmpfiles_d %{_sysconfdir}/tmpfiles.d}

# systemd support

%global groupname %{pkgname}.target

# set PIE flag

%global _hardened_build 1

Summary:          389 Directory Server (base)

Name:             389-ds-base

Version:          1.4.0.9

Release:          %{?relprefix}2%{?prerel}%{?dist}

License:          GPLv3+

URL:              http://www.port389.org

Group:            System Environment/Daemons

Conflicts:        selinux-policy-base < 3.9.8

Conflicts:        freeipa-server < 4.0.3

Requires:         %{name}-libs = %{version}-%{release}

Provides:         ldif2ldbm >= 0

BuildRequires:    nspr-devel

BuildRequires:    nss-devel >= 3.34

BuildRequires:    perl-generators

BuildRequires:    openldap-devel

BuildRequires:    libdb-devel

BuildRequires:    cyrus-sasl-devel

BuildRequires:    icu

BuildRequires:    libicu-devel

BuildRequires:    pcre-devel

%if %{use_clang}

BuildRequires:    libatomic

BuildRequires:    clang

%else

BuildRequires:    gcc

BuildRequires:    gcc-c++

%endif

# The following are needed to build the snmp ldap-agent

BuildRequires:    net-snmp-devel

BuildRequires:    lm_sensors-devel

BuildRequires:    bzip2-devel

BuildRequires:    zlib-devel

BuildRequires:    openssl-devel

# the following is for the pam passthru auth plug-in

BuildRequires:    pam-devel

BuildRequires:    systemd-units

BuildRequires:    systemd-devel

%if %{use_asan}

BuildRequires:    libasan

%endif

# If rust is enabled

%if %{use_rust}

BuildRequires: cargo

BuildRequires: rust

%endif

BuildRequires:    pkgconfig

BuildRequires:    pkgconfig(systemd)

# Needed to support regeneration of the autotool artifacts.

BuildRequires:    autoconf

BuildRequires:    automake

BuildRequires:    libtool

# For our documentation

BuildRequires:    doxygen

# For tests!

BuildRequires:    libcmocka-devel

BuildRequires:    libevent-devel

BuildRequires:    python%{python3_pkgversion}

BuildRequires:    python%{python3_pkgversion}-devel

BuildRequires:    python%{python3_pkgversion}-setuptools

%if %{use_tcmalloc}

BuildRequires:    gperftools-devel

BuildRequires:    gperftools-libs

%endif

# for python3 macros

BuildRequires:    python3-devel

%if %{use_tcmalloc}

Requires:         gperftools-libs

%endif

# this is needed for using semanage from our setup scripts

Requires:         policycoreutils-python-utils

Requires:         /usr/sbin/semanage

Requires:         libsemanage-python%{python3_pkgversion}

Requires:         selinux-policy >= 3.13.1-137

# the following are needed for some of our scripts

Requires:         openldap-clients

Requires:         openssl-perl

Requires:         python%{python3_pkgversion}-ldap

# use_openldap assumes perl-Mozilla-LDAP is built with openldap support

Requires:         perl-Mozilla-LDAP

# this is needed to setup SSL if you are not using the

# administration server package

Requires:         nss-tools

# these are not found by the auto-dependency method

# they are required to support the mandatory LDAP SASL mechs

Requires:         cyrus-sasl-gssapi

Requires:         cyrus-sasl-md5

Requires:         cyrus-sasl-plain

# this is needed for verify-db.pl

Requires:         libdb-utils

# This picks up libperl.so as a Requires, so we add this versioned one

Requires:         perl(:MODULE_COMPAT_%(eval "`%{__perl} -V:version`"; echo $version))

Requires:         perl-Errno >= 1.23-360

# for the init script

Requires(post):   systemd-units

Requires(preun):  systemd-units

Requires(postun): systemd-units

# for setup-ds.pl

Requires:         bind-utils

# for setup-ds.pl to support ipv6 

%if %{use_Socket6}

Requires:         perl-Socket6

%else

Requires:         perl-Socket

%endif

Requires:         perl-NetAddr-IP

Requires:         systemd-libs

Obsoletes:        %{name} <= 1.3.5.4

Source0:          https://releases.pagure.org/389-ds-base/%{name}-%{version}%{?prerel}.tar.bz2

# 389-ds-git.sh should be used to generate the source tarball from git

Source1:          %{name}-git.sh

Source2:          %{name}-devel.README

%description

389 Directory Server is an LDAPv3 compliant server.  The base package includes

the LDAP server and command line utilities for server administration.

%if %{use_asan}

WARNING! This build is linked to Address Sanitisation libraries. This probably

isn't what you want. Please contact support immediately.

Please see http://seclists.org/oss-sec/2016/q1/363 for more information.

%endif

%package          libs

Summary:          Core libraries for 389 Directory Server

Group:            System Environment/Daemons

BuildRequires:    nspr-devel

BuildRequires:    nss-devel >= 3.34

BuildRequires:    openldap-devel

BuildRequires:    libdb-devel

BuildRequires:    cyrus-sasl-devel

BuildRequires:    libicu-devel

BuildRequires:    pcre-devel

BuildRequires:    libtalloc-devel

BuildRequires:    libevent-devel

BuildRequires:    libtevent-devel

Requires:         libevent

BuildRequires:    systemd-devel

Provides:         svrcore = 4.1.4

Conflicts:        svrcore

Obsoletes:        svrcore <= 4.1.3

%description      libs

Core libraries for the 389 Directory Server base package.  These libraries

are used by the main package and the -devel package.  This allows the -devel

package to be installed with just the -libs package and without the main package.

%package          devel

Summary:          Development libraries for 389 Directory Server

Group:            Development/Libraries

Requires:         %{name}-libs = %{version}-%{release}

Requires:         pkgconfig

Requires:         nspr-devel

Requires:         nss-devel >= 3.34

Requires:         openldap-devel

Requires:         libtalloc

Requires:         libevent

Requires:         libtevent

Requires:         systemd-libs

Provides:         svrcore-devel = 4.1.4

Conflicts:        svrcore-devel

Obsoletes:        svrcore-devel <= 4.1.3

%description      devel

Development Libraries and headers for the 389 Directory Server base package.

%package          snmp

Summary:          SNMP Agent for 389 Directory Server

Group:            System Environment/Daemons

Requires:         %{name} = %{version}-%{release}

Obsoletes:        %{name} <= 1.4.0.0

%description      snmp

SNMP Agent for the 389 Directory Server base package.

%package -n python%{python3_pkgversion}-lib389

Summary:  A library for accessing, testing, and configuring the 389 Directory Server

BuildArch:        noarch

Group:            Development/Libraries

Requires: krb5-workstation

Requires: krb5-server

Requires: openssl

Requires: iproute

Requires: python%{python3_pkgversion}

Requires: python%{python3_pkgversion}-pytest

Requires: python%{python3_pkgversion}-pyldap

Requires: python%{python3_pkgversion}-six

Requires: python%{python3_pkgversion}-pyasn1

Requires: python%{python3_pkgversion}-pyasn1-modules

Requires: python%{python3_pkgversion}-dateutil

%{?python_provide:%python_provide python%{python3_pkgversion}-lib389}

%description -n python%{python3_pkgversion}-lib389

This module contains tools and libraries for accessing, testing,

 and configuring the 389 Directory Server.

%package -n python%{python3_pkgversion}-%{srcname}-tests

Summary:          The lib389 Continuous Integration Tests

Group:            Development/Libraries

BuildArch:        noarch

Requires:         python%{python3_pkgversion}

Requires:         python%{python3_pkgversion}-lib389

%description  -n  python%{python3_pkgversion}-%{srcname}-tests

The lib389 CI tests that can be run against the Directory Server.

%prep

%setup -q -n %{name}-%{version}%{?prerel}

cp %{SOURCE2} README.devel

# Make sure python3 is used in shebangs

# FIX ME!!  This should be fixed in the source code !!!

sed -r -i '1s|^#!\s*/usr/bin.*python.*|#!%{__python3}|' ldap/admin/src/scripts/{*.py,ds-replcheck}

%build

OPENLDAP_FLAG="--with-openldap"

%{?with_tmpfiles_d: TMPFILES_FLAG="--with-tmpfiles-d=%{with_tmpfiles_d}"}

# hack hack hack https://bugzilla.redhat.com/show_bug.cgi?id=833529

NSSARGS="--with-nss-lib=%{_libdir} --with-nss-inc=%{_includedir}/nss3"

%if %{use_asan}

ASAN_FLAGS="--enable-asan --enable-debug"

%endif

%if %{use_tcmalloc}

TCMALLOC_FLAGS="--enable-tcmalloc"

%endif

%if %{use_rust}

RUST_FLAGS="--enable-rust"

%endif

%if !%{use_perl}

PERL_FLAGS="--disable-perl"

%endif

%if %{use_clang}

export CC=clang

export CXX=clang++

CLANG_FLAGS="--enable-clang"

%endif

# Enforce strict linking

%define _strict_symbol_defs_build 1

# Rebuild the autotool artifacts now.

autoreconf -fiv

%configure --enable-autobind --with-selinux $OPENLDAP_FLAG $TMPFILES_FLAG \

           --with-systemdsystemunitdir=%{_unitdir} \

           --with-systemdsystemconfdir=%{_sysconfdir}/systemd/system \

           --with-perldir=/usr/bin \

           --with-pythonexec=%{__python3} \

           --with-systemdgroupname=%{groupname} $NSSARGS $ASAN_FLAGS \

           --with-systemd $TCMALLOC_FLAGS $RUST_FLAGS $PERL_FLAGS $CLANG_FLAGS \

           --enable-cmocka 

make setup.py

# lib389

pushd ./src/lib389

%py3_build

popd

# tests

%py3_build

# Generate symbolic info for debuggers

export XCFLAGS=$RPM_OPT_FLAGS

#make %{?_smp_mflags}

make

%install

make DESTDIR="$RPM_BUILD_ROOT" install

mkdir -p %{buildroot}%{_datadir}/gdb/auto-load%{_sbindir}

# Copy in our docs from doxygen.

cp -r %{_builddir}/%{name}-%{version}%{?prerel}/man/man3 $RPM_BUILD_ROOT/%{_mandir}/man3

# lib389

pushd src/lib389

%py3_install

popd

# tests

%py3_install

mkdir -p $RPM_BUILD_ROOT/var/log/%{pkgname}

mkdir -p $RPM_BUILD_ROOT/var/lib/%{pkgname}

mkdir -p $RPM_BUILD_ROOT/var/lock/%{pkgname}

# for systemd

mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/systemd/system/%{groupname}.wants

#remove libtool archives and static libs

find %{buildroot} -type f -name "*.la" -delete

find %{buildroot} -type f -name "*.a" -delete

%if %{use_perl}

# make sure perl scripts have a proper shebang

sed -i -e 's|#{{PERL-EXEC}}|#!/usr/bin/perl|' $RPM_BUILD_ROOT%{_datadir}/%{pkgname}/script-templates/template-*.pl

%endif

# DISABLE FOR NOW

#%check

# This checks the code, if it fails it prints why, then re-raises the fail to shortcircuit the rpm build.

#if ! make DESTDIR="$RPM_BUILD_ROOT" check; then cat ./test-suite.log && false; fi

%post

output=/dev/null

# reload to pick up any changes to systemd files

/bin/systemctl daemon-reload >$output 2>&1 || :

# reload to pick up any shared lib changes

/sbin/ldconfig

# find all instances

instances="" # instances that require a restart after upgrade

ninst=0 # number of instances found in total

if [ -n "$DEBUGPOSTTRANS" ] ; then

   output=$DEBUGPOSTTRANS

fi

# https://fedoraproject.org/wiki/Packaging:UsersAndGroups#Soft_static_allocation

# Soft static allocation for UID and GID

USERNAME="dirsrv"

ALLOCATED_UID=389

GROUPNAME="dirsrv"

ALLOCATED_GID=389

HOMEDIR="/usr/share/dirsrv"

getent group $GROUPNAME >/dev/null || /usr/sbin/groupadd -f -g $ALLOCATED_GID -r $GROUPNAME

if ! getent passwd $USERNAME >/dev/null ; then

    if ! getent passwd $ALLOCATED_UID >/dev/null ; then

      /usr/sbin/useradd -r -u $ALLOCATED_UID -g $GROUPNAME -d $HOMEDIR -s /sbin/nologin -c "user for 389-ds-base" $USERNAME

    else

      /usr/sbin/useradd -r -g $GROUPNAME -d $HOMEDIR -s /sbin/nologin -c "user for 389-ds-base" $USERNAME

    fi

fi

# Reload our sysctl before we restart (if we can)

sysctl --system &> $output; true

%if %{use_perl}

# START UPGRADE SCRIPT

echo looking for instances in %{_sysconfdir}/%{pkgname} > $output 2>&1 || :

instbase="%{_sysconfdir}/%{pkgname}"

for dir in $instbase/slapd-* ; do

    echo dir = $dir >> $output 2>&1 || :

    if [ ! -d "$dir" ] ; then continue ; fi

    case "$dir" in *.removed) continue ;; esac

    basename=`basename $dir`

    inst="%{pkgname}@`echo $basename | sed -e 's/slapd-//g'`"

    echo found instance $inst - getting status  >> $output 2>&1 || :

    if /bin/systemctl -q is-active $inst ; then

       echo instance $inst is running >> $output 2>&1 || :

       instances="$instances $inst"

    else

       echo instance $inst is not running >> $output 2>&1 || :

    fi

    ninst=`expr $ninst + 1`

done

if [ $ninst -eq 0 ] ; then

    echo no instances to upgrade >> $output 2>&1 || :

    exit 0 # have no instances to upgrade - just skip the rest

fi

# shutdown all instances

echo shutting down all instances . . . >> $output 2>&1 || :

for inst in $instances ; do

    echo stopping instance $inst >> $output 2>&1 || :

    /bin/systemctl stop $inst >> $output 2>&1 || :

done

echo remove pid files . . . >> $output 2>&1 || :

/bin/rm -f /var/run/%{pkgname}*.pid /var/run/%{pkgname}*.startpid

# do the upgrade

echo upgrading instances . . . >> $output 2>&1 || :

DEBUGPOSTSETUPOPT=`/usr/bin/echo $DEBUGPOSTSETUP | /usr/bin/sed -e "s/[^d]//g"`

if [ -n "$DEBUGPOSTSETUPOPT" ] ; then

    %{_sbindir}/setup-ds.pl -$DEBUGPOSTSETUPOPT -u -s General.UpdateMode=offline >> $output 2>&1 || :

else

    %{_sbindir}/setup-ds.pl -u -s General.UpdateMode=offline >> $output 2>&1 || :

fi

# restart instances that require it

for inst in $instances ; do

    echo restarting instance $inst >> $output 2>&1 || :

    /bin/systemctl start $inst >> $output 2>&1 || :

done

#END UPGRADE

%endif

exit 0

%preun

if [ $1 -eq 0 ]; then # Final removal

    # remove instance specific service files/links

    rm -rf %{_sysconfdir}/systemd/system/%{groupname}.wants/* > /dev/null 2>&1 || :

fi

%postun

/sbin/ldconfig

if [ $1 = 0 ]; then # Final removal

    rm -rf /var/run/%{pkgname}

fi

%post snmp

%systemd_post %{pkgname}-snmp.service

%preun snmp

%systemd_preun %{pkgname}-snmp.service %{groupname}

%postun snmp

%systemd_postun_with_restart %{pkgname}-snmp.service

%files

%defattr(-,root,root,-)

%doc LICENSE LICENSE.GPLv3+ LICENSE.openssl

%dir %{_sysconfdir}/%{pkgname}

%dir %{_sysconfdir}/%{pkgname}/schema

%config(noreplace)%{_sysconfdir}/%{pkgname}/schema/*.ldif

%dir %{_sysconfdir}/%{pkgname}/config

%dir %{_sysconfdir}/systemd/system/%{groupname}.wants

%config(noreplace)%{_sysconfdir}/%{pkgname}/config/slapd-collations.conf

%config(noreplace)%{_sysconfdir}/%{pkgname}/config/certmap.conf

%config(noreplace)%{_sysconfdir}/%{pkgname}/config/template-initconfig

%config(noreplace)%{_sysconfdir}/sysconfig/%{pkgname}

%config(noreplace)%{_sysconfdir}/sysconfig/%{pkgname}.systemd

%{_datadir}/%{pkgname}

%{_datadir}/gdb/auto-load/*

%{_unitdir}

%{_bindir}/*

%caps(CAP_NET_BIND_SERVICE=pe) %{_sbindir}/ns-slapd

%{_sbindir}/dsconf

%{_sbindir}/dscreate

%{_sbindir}/dsctl

%{_sbindir}/dsidm

%{_sbindir}/ds-cockpit-setup

%{_sbindir}/ds_selinux_enabled

%{_sbindir}/ds_selinux_port_query

%{_sbindir}/ds_systemd_ask_password_acl

%if %{use_perl}

%{_sbindir}/bak2db

%{_sbindir}/bak2db.pl

%{_sbindir}/cleanallruv.pl

%{_sbindir}/db2bak

%{_sbindir}/db2bak.pl

%{_sbindir}/db2index

%{_sbindir}/db2index.pl

%{_sbindir}/db2ldif

%{_sbindir}/db2ldif.pl

%{_sbindir}/dbmon.sh

%{_sbindir}/dbverify

%{_sbindir}/dn2rdn

%{_sbindir}/fixup-linkedattrs.pl

%{_sbindir}/fixup-memberof.pl

%{_sbindir}/ldif2db

%{_sbindir}/ldif2db.pl

%{_sbindir}/ldif2ldap

%{_sbindir}/migrate-ds.pl

%{_sbindir}/monitor

%{_sbindir}/ns-accountstatus.pl

%{_sbindir}/ns-activate.pl

%{_sbindir}/ns-inactivate.pl

%{_sbindir}/ns-newpwpolicy.pl

%{_sbindir}/remove-ds.pl

%{_sbindir}/restart-dirsrv

%{_sbindir}/restoreconfig

%{_sbindir}/saveconfig

%{_sbindir}/schema-reload.pl

%{_sbindir}/setup-ds.pl

%{_sbindir}/start-dirsrv

%{_sbindir}/status-dirsrv

%{_sbindir}/stop-dirsrv

%{_sbindir}/suffix2instance

%{_sbindir}/syntax-validate.pl

%{_sbindir}/upgradedb

%{_sbindir}/upgradednformat

%{_sbindir}/usn-tombstone-cleanup.pl

%{_sbindir}/verify-db.pl

%{_sbindir}/vlvindex

%{_libdir}/%{pkgname}/perl

%endif

%{_libdir}/%{pkgname}/python

%dir %{_libdir}/%{pkgname}/plugins

%{_libdir}/%{pkgname}/plugins/*.so

%dir %{_localstatedir}/lib/%{pkgname}

%dir %{_localstatedir}/log/%{pkgname}

%ghost %dir %{_localstatedir}/lock/%{pkgname}

%{_mandir}/man1/*

%{_mandir}/man8/*

%exclude %{_sbindir}/ldap-agent*

%exclude %{_mandir}/man1/ldap-agent.1.gz

%exclude %{_unitdir}/%{pkgname}-snmp.service

# This has to be hardcoded to /lib - $libdir changes between lib/lib64, but

# sysctl.d is always in /lib.

%{_prefix}/lib/sysctl.d/*

%files devel

%defattr(-,root,root,-)

%doc LICENSE LICENSE.GPLv3+ LICENSE.openssl README.devel

%{_mandir}/man3/*

%{_includedir}/svrcore.h

%{_includedir}/%{pkgname}

%{_libdir}/libsvrcore.so

%{_libdir}/%{pkgname}/libslapd.so

%{_libdir}/%{pkgname}/libns-dshttpd.so

%{_libdir}/%{pkgname}/libnunc-stans.so

%{_libdir}/%{pkgname}/libsds.so

%{_libdir}/%{pkgname}/libldaputil.so

%{_libdir}/pkgconfig/svrcore.pc

%{_libdir}/pkgconfig/dirsrv.pc

%{_libdir}/pkgconfig/libsds.pc

%{_libdir}/pkgconfig/nunc-stans.pc

%files libs

%defattr(-,root,root,-)

%doc LICENSE LICENSE.GPLv3+ LICENSE.openssl README.devel

%dir %{_libdir}/%{pkgname}

%{_libdir}/libsvrcore.so.*

%{_libdir}/%{pkgname}/libslapd.so.*

%{_libdir}/%{pkgname}/libns-dshttpd-*.so

%{_libdir}/%{pkgname}/libnunc-stans.so.*

%{_libdir}/%{pkgname}/libsds.so.*

%{_libdir}/%{pkgname}/libldaputil.so.*

%if %{use_rust}

%{_libdir}/%{pkgname}/librsds.so

%endif

%files snmp

%defattr(-,root,root,-)

%doc LICENSE LICENSE.GPLv3+ LICENSE.openssl README.devel

%config(noreplace)%{_sysconfdir}/%{pkgname}/config/ldap-agent.conf

%{_sbindir}/ldap-agent*

%{_mandir}/man1/ldap-agent.1.gz

%{_unitdir}/%{pkgname}-snmp.service

%files -n python%{python3_pkgversion}-lib389

%defattr(-,root,root,-)

%doc LICENSE LICENSE.GPLv3+

%{_sbindir}/dsconf

%{_sbindir}/dscreate

%{_sbindir}/dsctl

%{_sbindir}/dsidm

%{python3_sitelib}/lib389*

%files -n python%{python3_pkgversion}-%{srcname}-tests

%defattr(-,root,root,-)

%doc LICENSE LICENSE.GPLv3+

%{python3_sitelib}/dirsrvtests*

%changelog

* Tue May 15 2018 Mark Reynolds <mreynolds@redhat.com> - 1.4.0.9-2

- Bump version to 1.4.0.9-2

- Add openssl-perl requirement for new python installer

* Tue May 8 2018 Mark Reynolds <mreynolds@redhat.com> - 1.4.0.9-1

- Bump version to 1.4.0.9

- Ticket 49661 - CVE-2018-1089 - Crash from long search filter

- Ticket 49652 - DENY aci's are not handled properly

- Ticket 49650 - lib389 enable_tls doesn't work on F28

- Ticket 49538 - replace cacertdir_rehash with openssl rehash

- Ticket 49406 - Port backend_test.py test to DSLdapObject implementation

- Ticket 49649 - Use reentrant crypt_r()

- Ticket 49642 - lib389 should generate a more complex password

- Ticket 49612 - lib389 remove_ds_instance() does not remove systemd units

- Ticket 49644 - crash in debug build

* Mon Apr 30 2018 Pete Walter <pwalter@fedoraproject.org> - 1.4.0.8-1.1

- Rebuild for ICU 61.1

* Thu Apr 19 2018 Mark Reynolds <mreynolds@redhat.com> - 1.4.0.8-1

- Bump version to 1.4.0.8-1

- Ticket 49639 - Crash when failing to read from SASL conn

- Ticket 49109 - nsDS5ReplicaTransportInfo should accept StartTLS as an option

- Ticket 49586 - Add py3 support to plugins test suite

- Ticket 49511 - memory leak in pwdhash

* Mon Apr 16 2018 Mark Reynolds <mreynolds@redhat.com> - 1.4.0.7-2

- Bump version to 1.4.0.7-2

- Fix the devel srvcore requirements

* Fri Apr 13 2018 Mark Reynolds <mreynolds@redhat.com> - 1.4.0.7-1

- Bump version to 1.4.0.7

- Ticket 49477 - Missing pbkdf python

- Ticket 49552 - Fix the last of the build issues on F28/29

- Ticket 49522 - Fix build issues on F28

- Ticket 49631 - same csn generated twice

- Ticket 49585 - Add py3 support to password test suite : part-3

- Ticket 49585 - Add py3 support to password test suite : part-2

- Ticket 48184 - revert previous patch around unuc-stans shutdown crash

- Ticket 49585 - Add py3 support to password test suite

- Ticket 46918 - Fix compiler warnings on arm

- Ticket 49601 - Replace HAVE_SYSTEMD define with WITH_SYSTEMD in svrcore

- Ticket 49619 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received

- Ticket 49608 - Add support for gcc/clang sanitizers

- Ticket 49606 - Improve lib389 documentation

- Ticket 49552 - Fix build issues on F28

- Ticket 49603 - 389-ds-base package rebuilt on EPEL can't be installed due to missing dependencies

- Ticket 49593 - NDN cache stats should be under the global stats

- Ticket 49599 - Revise replication total init status messages

- Ticket 49596 - repl-monitor.pl fails to find db tombstone/RUV entry

- Ticket 49589 - merge svrcore into 389-ds-base

- Ticket 49560 - Add a test case for extract-pemfiles

- Ticket 49239 - Add a test suite for ds-replcheck tool RFE

- Ticket 49369 - merge svrcore into 389-ds-base

* Thu Mar 29 2018 Till Maas <opensource@till.name> - 1.4.0.6-3

- Remove BR on tcp_wrappers (https://bugzilla.redhat.com/show_bug.cgi?id=1518749)

* Tue Mar 6 2018 Mark Reynolds <mreynolds@redhat.com> - 1.4.0.6-1

- Bump version to 1.4.0.6

- Ticket 49545 - final substring extended filter search returns invalid result

- Ticket 49572 - ns_job_wait race on condvar

- Ticket 49584 - Fix Tickets with paged_results test suite

- Ticket 49161 - memberof fails if group is moved into scope

- Ticket 49447 - PBKDF2 on upgrade

- ticket 49551 - correctly handle subordinates and tombstone numsubordinates

- Ticket 49043 - Add replica conflict test suite

- Ticket 49296 - Fix race condition in connection code with  anonymous limits

- Ticket 49568 - Fix integer overflow on 32bit platforms

- Ticket 48085 - Add encryption cl5 test suite

- Ticket 49566 - ds-replcheck needs to work with hidden conflict entries

- Ticket 49519 - Add more Cockpit UI content

- Ticket 49551 - fix memory leak found by coverity

- Ticket 49551 - v3 - correct handling of numsubordinates for cenotaphs and tombstone delete

- Ticket 49278 - Add a new CI test case

- Ticket 49560 - nsslapd-extract-pemfiles should be enabled by default as openldap is moving to openssl

- Ticket 49557 - Add config option for checking CRL on outbound SSL Connections

- Ticket 49446 - Add CI test case

- Ticket 35 -    Description: Add support for managing automember to dsconf

- Ticket 49544 - cli release preperation

- Ticket 48006 - Add a new CI test case

* Mon Feb 19 2018 Mark Reynolds <mreynolds@redhat.com> - 1.4.0.5-1.7

- Add cyrus-sasl-plain requirement

* Thu Feb 15 2018 Mark Reynolds <mreynolds@redhat.com> - 1.4.0.5-1.6

- Fix python requirements for policycoreutils-python-utils

* Thu Feb 15 2018 Mark Reynolds <mreynolds@redhat.com> - 1.4.0.5-1.5

- Fix package requirements to use Python 3 packages for LDAP and SELinux

* Thu Feb 15 2018 Mark Reynolds <mreynolds@redhat.com> - 1.4.0.5-1.4

- Only exclude Ix86 arches

* Thu Feb 15 2018 Adam Williamson <awilliam@redhat.com> - 1.4.0.5-1.3

- Rebuild for libevent soname bump

* Fri Feb 09 2018 Igor Gnatenko <ignatenkobrain@fedoraproject.org> - 1.4.0.5-1.2

- Escape macros in %%changelog

* Wed Feb 07 2018 Fedora Release Engineering <releng@fedoraproject.org> - 1.4.0.5-1.1

- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

* Wed Jan 31 2018 Mark Reynolds <mreynolds@redhat.com> - 1.4.0.5-1

- Bump version to 1.4.0.5

- CVE-2017-15134 389-ds-base: Remote DoS via search filters in slapi_filter_sprintf

- Ticket 49546 - Fix broken snmp MIB file

- Ticket 49554 - update readme

- Ticket 49554 - Update Makefile for README.md

- Ticket 49400 - Make CLANG configurable

- Ticket 49530 - Add pseudolocalization option for dbgen

- Ticket 49523 - Fixed skipif marker, topology fixture and log message

- Ticket 49544 - Double check pw prompts

- Ticket 49548 - Cockpit UI - installer should also setup Cockpit

* Fri Jan 26 2018 Mark Reynolds <mreynolds@redhat.com> - 1.4.0.4-1

- Bump version to 1.4.0.4

- Ticket 49540 - Indexing task is reported finished too early regarding the backend status

- Ticket 49534 - Fix coverity regression

- Ticket 49544 - cli release preperation, group improvements

- Ticket 49542 - Unpackaged files on el7 break rpm build

- Ticket 49541 - repl config should not allow rid 65535 for masters

- Ticket 49370 - Add all the password policy defaults to a new local policy

- Ticket 49425 - improve demo objects for install