%global pkgname   dirsrv

# for a pre-release, define the prerel field e.g. .a1 .rc2 - comment out for official release

# also remove the space between % and global - this space is needed because

# fedpkg verrel stupidly ignores comment lines

# % global prerel .a1

# also need the relprefix field for a pre-release e.g. .0 - also comment out for official release

# % global relprefix 0.

%global use_openldap 1

%global use_db4 1

# If perl-Socket-2.000 or newer is available, set 0 to use_Socket6.

%global use_Socket6 1

# if system doesn't support tmpfiles.d, comment this out

#%{!?with_tmpfiles_d: %global with_tmpfiles_d %{_sysconfdir}/tmpfiles.d}

# systemd support

%global groupname %{pkgname}.target

Summary:          389 Directory Server (base)

Name:             389-ds-base

Version:          1.2.11.32

Release:          %{?relprefix}1%{?prerel}%{?dist}

License:          GPLv2 with exceptions

URL:              http://port389.org/

Group:            System Environment/Daemons

BuildRoot:        %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)

Requires:         %{name}-libs = %{version}-%{release}

Provides:         ldif2ldbm 

BuildRequires:    nspr-devel

BuildRequires:    nss-devel

BuildRequires:    svrcore-devel

%if %{use_openldap}

BuildRequires:    openldap-devel

%else

BuildRequires:    mozldap-devel

%endif

%if %{use_db4}

BuildRequires:    db4-devel

%else

BuildRequires:    libdb-devel

%endif

BuildRequires:    cyrus-sasl-devel

BuildRequires:    icu

BuildRequires:    libicu-devel

BuildRequires:    pcre-devel

BuildRequires:    gcc-c++

# The following are needed to build the snmp ldap-agent

BuildRequires:    net-snmp-devel

%ifnarch sparc sparc64 ppc ppc64 s390 s390x

BuildRequires:    lm_sensors-devel

%endif

BuildRequires:    bzip2-devel

BuildRequires:    zlib-devel

BuildRequires:    openssl-devel

BuildRequires:    tcp_wrappers

# the following is for the pam passthru auth plug-in

BuildRequires:    pam-devel

# this is needed for using semanage from our setup scripts

Requires:         policycoreutils-python

# the following are needed for some of our scripts

%if %{use_openldap}

Requires:         openldap-clients

%else

Requires:         mozldap-tools

%endif

# use_openldap assumes perl-Mozilla-LDAP is built with openldap support

Requires:         perl-Mozilla-LDAP

# this is needed to setup SSL if you are not using the

# administration server package

Requires:         nss-tools

# these are not found by the auto-dependency method

# they are required to support the mandatory LDAP SASL mechs

Requires:         cyrus-sasl-gssapi

Requires:         cyrus-sasl-md5

# this is needed for verify-db.pl

%if %{use_db4}

Requires:         db4-utils

%else

Requires:         libdb-utils

%endif

# for setup-ds.pl to support ipv6 

%if %{use_Socket6}

Requires:         perl-Socket6

%else

Requires:         perl-Socket

%endif

Requires:         perl-NetAddr-IP

# This picks up libperl.so as a Requires, so we add this versioned one

Requires:         perl(:MODULE_COMPAT_%(eval "`%{__perl} -V:version`"; echo $version))

# for the init script

Requires(post): /sbin/chkconfig

Requires(preun): /sbin/chkconfig

Requires(preun): /sbin/service

Source0:          http://port389.org/binaries/%{name}-%{version}%{?prerel}.tar.bz2

# 389-ds-git.sh should be used to generate the source tarball from git

Source1:          %{name}-git.sh

Source2:          %{name}-devel.README

%description

389 Directory Server is an LDAPv3 compliant server.  The base package includes

the LDAP server and command line utilities for server administration.

%package          libs

Summary:          Core libraries for 389 Directory Server

Group:            System Environment/Daemons

BuildRequires:    nspr-devel

BuildRequires:    nss-devel

BuildRequires:    svrcore-devel

%if %{use_openldap}

BuildRequires:    openldap-devel

%else

BuildRequires:    mozldap-devel

%endif

%if %{use_db4}

BuildRequires:    db4-devel

%else

BuildRequires:    libdb-devel

%endif

BuildRequires:    cyrus-sasl-devel

BuildRequires:    libicu-devel

BuildRequires:    pcre-devel

%description      libs

Core libraries for the 389 Directory Server base package.  These libraries

are used by the main package and the -devel package.  This allows the -devel

package to be installed with just the -libs package and without the main package.

%package          devel

Summary:          Development libraries for 389 Directory Server

Group:            Development/Libraries

Requires:         %{name}-libs = %{version}-%{release}

Requires:         pkgconfig

Requires:         nspr-devel

Requires:         nss-devel

Requires:         svrcore-devel

%if %{use_openldap}

Requires:         openldap-devel

%else

Requires:         mozldap-devel

%endif

%description      devel

Development Libraries and headers for the 389 Directory Server base package.

%prep

%setup -q -n %{name}-%{version}%{?prerel}

cp %{SOURCE2} README.devel

%build

%if %{use_openldap}

OPENLDAP_FLAG="--with-openldap"

%endif

%{?with_tmpfiles_d: TMPFILES_FLAG="--with-tmpfiles-d=%{with_tmpfiles_d}"}

%configure --enable-autobind --with-selinux $OPENLDAP_FLAG $TMPFILES_FLAG

# Generate symbolic info for debuggers

export XCFLAGS=$RPM_OPT_FLAGS

%ifarch x86_64 ppc64 ia64 s390x sparc64

export USE_64=1

%endif

make %{?_smp_mflags}

%install

rm -rf $RPM_BUILD_ROOT 

make DESTDIR="$RPM_BUILD_ROOT" install

mkdir -p $RPM_BUILD_ROOT/var/log/%{pkgname}

mkdir -p $RPM_BUILD_ROOT/var/lib/%{pkgname}

mkdir -p $RPM_BUILD_ROOT/var/lock/%{pkgname}

#remove libtool and static libs

rm -f $RPM_BUILD_ROOT%{_libdir}/%{pkgname}/*.a

rm -f $RPM_BUILD_ROOT%{_libdir}/%{pkgname}/*.la

rm -f $RPM_BUILD_ROOT%{_libdir}/%{pkgname}/plugins/*.a

rm -f $RPM_BUILD_ROOT%{_libdir}/%{pkgname}/plugins/*.la

# make sure perl scripts have a proper shebang 

sed -i -e 's|#{{PERL-EXEC}}|#!/usr/bin/perl|' $RPM_BUILD_ROOT%{_datadir}/%{pkgname}/script-templates/template-*.pl

%clean

rm -rf $RPM_BUILD_ROOT

%post

/sbin/chkconfig --add %{pkgname}

/sbin/ldconfig

/sbin/chkconfig --add %{pkgname}-snmp

# restart the snmp subagent if needed

/sbin/service %{pkgname}-snmp condrestart > /dev/null 2>&1

instbase="%{_sysconfdir}/%{pkgname}"

# echo posttrans - upgrading - looking for instances in $instbase

# find all instances

instances="" # instances that require a restart after upgrade

ninst=0 # number of instances found in total

for dir in $instbase/slapd-* ; do

# echo dir = $dir

    if [ ! -d "$dir" ] ; then continue ; fi

    case "$dir" in *.removed) continue ;; esac

    basename=`basename $dir`

    inst=`echo $basename | sed -e 's/slapd-//g'`

#   echo found instance $inst - getting status

    if /sbin/service %{pkgname} status $inst >/dev/null 2>&1 ; then

#      echo instance $inst is running

       instances="$instances $inst"

    else

#      echo instance $inst is not running

       :

    fi

    ninst=`expr $ninst + 1`

done

if [ $ninst -eq 0 ] ; then

    exit 0 # have no instances to upgrade - just skip the rest

fi

# shutdown all instances

# echo shutting down all instances . . .

/sbin/service %{pkgname} stop > /dev/null 2>&1

# do the upgrade

# echo upgrading instances . . .

%{_sbindir}/setup-ds.pl -l /dev/null -u -s General.UpdateMode=offline > /dev/null 2>&1

# restart instances that require it

for inst in $instances ; do

#   echo restarting instance $inst

    /sbin/service %{pkgname} start $inst >/dev/null 2>&1

done

exit 0

%preun

if [ $1 = 0 ]; then # Final removal

        /sbin/service %{pkgname} stop >/dev/null 2>&1 || :

        /sbin/chkconfig --del %{pkgname}

        /sbin/service %{pkgname}-snmp stop >/dev/null 2>&1 || :

        /sbin/chkconfig --del %{pkgname}-snmp

fi

%postun

/sbin/ldconfig

if [ $1 = 0 ]; then # Final removal

    rm -rf /var/run/%{pkgname}

fi

%files

%defattr(-,root,root,-)

%doc LICENSE EXCEPTION LICENSE.GPLv2

%dir %{_sysconfdir}/%{pkgname}

%dir %{_sysconfdir}/%{pkgname}/schema

%config(noreplace)%{_sysconfdir}/%{pkgname}/schema/*.ldif

%dir %{_sysconfdir}/%{pkgname}/config

%config(noreplace)%{_sysconfdir}/%{pkgname}/config/slapd-collations.conf

%config(noreplace)%{_sysconfdir}/%{pkgname}/config/certmap.conf

%config(noreplace)%{_sysconfdir}/%{pkgname}/config/ldap-agent.conf

%config(noreplace)%{_sysconfdir}/%{pkgname}/config/template-initconfig

%config(noreplace)%{_sysconfdir}/sysconfig/%{pkgname}

%{_datadir}/%{pkgname}

%{_sysconfdir}/rc.d/init.d/%{pkgname}

%{_sysconfdir}/rc.d/init.d/%{pkgname}-snmp

%{_bindir}/*

%{_sbindir}/*

%{_libdir}/%{pkgname}/libns-dshttpd.so*

%{_libdir}/%{pkgname}/perl

%dir %{_libdir}/%{pkgname}/plugins

%{_libdir}/%{pkgname}/plugins/*.so

%dir %{_localstatedir}/lib/%{pkgname}

%dir %{_localstatedir}/log/%{pkgname}

%ghost %dir %{_localstatedir}/lock/%{pkgname}

%{_mandir}/man1/*

%{_mandir}/man8/*

%files devel

%defattr(-,root,root,-)

%doc LICENSE EXCEPTION LICENSE.GPLv2 README.devel

%{_includedir}/%{pkgname}

%{_libdir}/%{pkgname}/libslapd.so

%{_libdir}/pkgconfig/*

%files libs

%defattr(-,root,root,-)

%doc LICENSE EXCEPTION LICENSE.GPLv2 README.devel

%dir %{_libdir}/%{pkgname}

%{_libdir}/%{pkgname}/libslapd.so.*

%changelog

* Thu Sep  4 2014 Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.32-1

- bump version to 1.2.11.32

- Ticket 47875 - dirsrv not running with old openldap

- Ticket 47457 - default nsslapd-sasl-max-buffer-size should be 2MB

* Tue Sep  2 2014 Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.31-1

- bump version to 1.2.11.31

- Bug 1129660  - Adding users to user group throws Internal server error.

- Ticket 47875 - dirsrv not running with old openldap

- Ticket 47446 - logconv.pl memory continually grows

- Ticket 443   - Deleting attribute present in nsslapd-allowed-to-delete-attrs returns Operations error

- Ticket 415   - winsync doesn't sync DN valued attributes if DS DN value doesn't exist

- Ticket 47874 - Performance degradation with scope ONE after some load

- Ticket 47872 - Filter AND with only one clause should be optimized

* Thu Aug  7 2014 Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.30-1

- bump version to 1.2.11.30

- Resolves: #1123477

            Ticket 47869 - unauthenticated information disclosure (Bug 1123477)

- Ticket 616   - High contention on computed attribute lock

- Ticket 47862 - repl-monitor fails to convert "*" to default values

- Ticket 47824 - paged results control is not working in some cases when we have a subsuffix.

- Ticket 47862 - Repl-monitor.pl ignores the provided connection parameters

- Ticket 346   - Fixing memory leaks

- Ticket 443   - Deleting attribute present in nsslapd-allowed-to-delete-attrs returns Operations error

- Ticket 47863 - New defects found in 389-ds-base-1.2.11

- Ticket 47861 - Certain schema files are not replaced during upgrade

- Ticket 47858 - Internal searches using OP_FLAG_REVERSE_CANDIDATE_ORDER can crash the server

- Ticket 47692 - single valued attribute replicated ADD does not work

- Ticket 47781 - Server deadlock if online import started while  server is under load

- Ticket 47821 - deref plugin cannot handle complex acis

- Ticket 47831 - server restart wipes out index config if there is a default index

- Ticket 47820 - 1.2.11 branch: coverity errors

- Ticket 47817 - The error result text message should be obtained just prior to sending result

- Ticket 47331 - Self entry access ACI not working properly

- Ticket 47426 - Coverity issue with last commit(move compute_idletimeout out of handle_pr_read_ready)

- Ticket 47426 - move compute_idletimeout out of handle_pr_read_ready

- Ticket 47809 - find a way to remove replication plugin errors messages "changelog iteration code returned a dummy entry with csn %s, skipping ..."

- Ticket 47813 - remove "goto bail" from previous commit

- Ticket 47813 - managed entry plugin fails to update member  pointer on modrdn operation

- Ticket 47770 - #481 breaks possibility to reassemble memberuid list

- Ticket 47446 - logconv.pl memory continually grows

- Ticket 47713 - Logconv.pl with an empty access log gives lots of errors

- Ticket 47670 - Aci warnings in error log

- Ticket 47804 - db2bak.pl error with changelogdb

- Ticket 47780 - Some VLV search request causes memory leaks

- Ticket 47787 - A replicated MOD fails (Unwilling to perform) if it targets a tombstone

- Ticket 47764 - Problem with deletion while replicated

- Ticket 47750 - Creating a glue fails if one above level is a conflict or missing

- Ticket 47649 - Server hangs in cos_cache when adding a user entry

- Ticket 47772 - fix coverity issue

- Ticket 47793 - Server crashes if uniqueMember is invalid syntax and memberOf                plugin is enabled.

- Ticket 47707 - 389 DS Server crashes and dies while handles paged searches from clients

- Ticket 47771 - Move parentsdn initialization to avoid crash

- Ticket 47771 - Cherry pick issue parentsdn freed twice

- Ticket 47771 - Performing deletes during tombstone purging results in operation errors

- Ticket 346   - Slow ldapmodify operation time for large quantities of multi-valued attribute values

- Ticket 47782 - Parent numbordinate count can be incorrectly updated if an error occurs

- Ticket 47772 - empty modify returns LDAP_INVALID_DN_SYNTAX

- Ticket 47736 - Import incorrectly updates numsubordinates for tombstone entries

- Ticket 47774 - mem leak in do_search - rawbase not freed upon certain errors

- Ticket 47773 - mem leak in do_bind when there is an error

- Ticket 47767 - Nested tombstones become orphaned after purge

* Fri Apr  4 2014 Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.29-1

- bump version to 1.2.11.29

- Ticket 47766 - Tombstone purging can crash the server if the backend is stopped/disabled

- Ticket 47492 - PassSync removes User must change password flag on the Windows side

- Ticket 47448 - Segfault in 389-ds-base-1.3.1.4-1.fc19 when setting up FreeIPA replication

- Ticket 47740 - Fix coverity issues(part 7)

- Ticket 47748 - Simultaneous adding a user and binding as the user could fail in the password policy check

- Ticket 47743 - Memory leak with proxy auth control

- Ticket 47740 - Crash caused by changes to certmap.c

- Ticket 47740 - Fix coverity issues: null deferences - Part 6

- Ticket 47735 - e_uniqueid fails to set if an entry is a conflict entry

- Ticket 47740 - Coverity issue in 1.3.3

- Ticket 47740 - Fix coverity issues - Part 5

- Ticket 47740 - Fix coverity erorrs - Part 4

- Ticket 47640 - Fix coverity issues - part 3

- Ticket 47538 - RFE: repl-monitor.pl plain text output, cmdline config options

- Ticket 47740 - Coverity Fixes (Mark - part 1)

- Ticket 47734 - Change made in resolving ticket #346 fails on Debian SPARC64

- Ticket 47722 - Fixed filter not correctly identified

- Ticket 47722 - rsearch filter error on any search filter

- Ticket 47704 - invalid sizelimits in aci group evaluation

- Ticket 47737 - Under heavy stress, failure of turning a tombstone into glue makes the server hung

- Ticket 47735 - e_uniqueid fails to set if an entry is a conflict entry

- Ticket 47731 - A tombstone entry is deleted by ldapdelete

- Ticket 47729 - Directory Server crashes if shutdown during a replication initialization

- Ticket 47637 - rsa_null_sha should not be enabled by default

- Ticket 417, 458, 47522 - Password Administrator Backport

- Ticket 47455 - valgrind - value mem leaks, uninit mem usage

- fix coverity 11915 - dead code - introduced with fix for ticket 346

- Ticket 47369 - version2 - provide default syntax plugin

- Ticket 346   - version 4 Slow ldapmodify operation time for large quantities of multi-valued attribute values

- Ticket 415   - winsync doesn't sync DN valued attributes if DS DN value doesn't exist

- Ticket 47642 - Windows Sync group issues

- Ticket 47692 - single valued attribute replicated ADD does not work

- Ticket 47677 - Size returned by slapi_entry_size is not accurate

- Ticket 47693 - Environment variables are not passed when DS is started via service

- Ticket 47693 - Environment variables are not passed when DS is started via service

- Ticket 471   - logconv.pl tool removes the access logs contents if "-M" is not correctly used

- Ticket 47463 - IDL-style can become mismatched during partial restoration

- Ticket 47638 - Overflow in nsslapd-disk-monitoring-threshold on 32bit platform

- Ticket 47641 - 7-bit check plugin not checking MODRDN operation

- Ticket 47678 - modify-delete userpassword

- Ticket 47516 - replication stops with excessive clock skew

- Ticket 47627 - Fix replication logging

- Ticket 47627 - changelog iteration should ignore cleaned rids when getting the minCSN

- Ticket 47623 - fix memleak caused by 47347

- Ticket 47587 - hard coded limit of 64 masters in agreement and changelog code

- Ticket 47591 - entries with empty objectclass attribute value can be hidden

- Ticket 47596 - attrcrypt fails to find unlocked key

* Fri Mar 14 2014 Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.28-1

- bump version to 1.2.11.28 (This release is based upon 1.2.11.25 + following tickets.)

- Ticket 47739 - directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind

- Ticket 47731 - A tombstone entry is deleted by ldapdelete

- Ticket 47729 - Directory Server crashes if shutdown during a replication initialization

- Ticket 47637 - rsa_null_sha should not be enabled by default

- Ticket 417, 458, 47522 - Password Administrator Backport

- Ticket 47455 - valgrind - value mem leaks, uninit mem usage

- fix coverity 11915 - dead code - introduced with fix for ticket 346

- Ticket 47369  version2 - provide default syntax plugin

- Ticket 346 - version 4 Slow ldapmodify operation time for large quantities of multi-valued attribute values

- Ticket 415 - winsync doesn't sync DN valued attributes if DS DN value doesn't exist

- Ticket 47642 - Windows Sync group issues

- Ticket 47692 - single valued attribute replicated ADD does not work

- Ticket 47677 - Size returned by slapi_entry_size is not accurate

- Ticket 47693 - Environment variables are not passed when DS is started via service

- Ticket 47693 - Environment variables are not passed when DS is started via service

- Ticket 471 - logconv.pl tool removes the access logs contents if "-M" is not correctly used

- Ticket 47463 - IDL-style can become mismatched during partial restoration

- Ticket 47638 - Overflow in nsslapd-disk-monitoring-threshold on 32bit platform

- Ticket 47641 - 7-bit check plugin not checking MODRDN operation

- Ticket 47678 - modify-delete userpassword

- Ticket 47516 - replication stops with excessive clock skew

- Ticket 47627 - Fix replication logging

- Ticket 47627 - changelog iteration should ignore cleaned rids when getting the minCSN

- Ticket 47623 - fix memleak caused by 47347

- Ticket 47587 - hard coded limit of 64 masters in agreement and changelog code

- Ticket 47591 - entries with empty objectclass attribute value can be hidden

- Ticket 47596 - attrcrypt fails to find unlocked key

* Tue Mar 11 2014 Rich Megginson <rmeggins@redhat.com> - 1.2.11.26-2

- remove the wip patch

* Mon Mar 10 2014 Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.26-1

- bump version to 1.2.11.26

- Ticket 47739 - directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind

- Ticket 47704 - invalid sizelimits in aci group evaluation

- Ticket 47737 - Under heavy stress, failure of turning a tombstone into glue makes the server hung

- Ticket 47735 - e_uniqueid fails to set if an entry is a conflict entry

- Ticket 47731 - A tombstone entry is deleted by ldapdelete

- Ticket 47729 - Directory Server crashes if shutdown during a replication initialization

- Ticket 47637 - rsa_null_sha should not be enabled by default

- Ticket 417, 458, 47522 - Password Administrator Backport

- Ticket 47455 - valgrind - value mem leaks, uninit mem usage

- fix coverity 11915 - dead code - introduced with fix for ticket 346

- Ticket 47369  version2 - provide default syntax plugin

- Ticket 346 - version 4 Slow ldapmodify operation time for large quantities of multi-valued attribute values

- Ticket 415 - winsync doesn't sync DN valued attributes if DS DN value doesn't exist

- Ticket 47642 - Windows Sync group issues

- Ticket 47692 - single valued attribute replicated ADD does not work

- Ticket 47677 - Size returned by slapi_entry_size is not accurate

- Ticket 47693 - Environment variables are not passed when DS is started via service

- Ticket 47693 - Environment variables are not passed when DS is started via service

- Ticket 471 - logconv.pl tool removes the access logs contents if "-M" is not correctly used

- Ticket 47463 - IDL-style can become mismatched during partial restoration

- Ticket 47638 - Overflow in nsslapd-disk-monitoring-threshold on 32bit platform

- Ticket 47641 - 7-bit check plugin not checking MODRDN operation

- Ticket 47678 - modify-delete userpassword

- Ticket 47516 - replication stops with excessive clock skew

- Ticket 47627 - Fix replication logging

- Ticket 47627 - changelog iteration should ignore cleaned rids when getting the minCSN

- Ticket 47623 - fix memleak caused by 47347

- Ticket 47587 - hard coded limit of 64 masters in agreement and changelog code

- Ticket 47591 - entries with empty objectclass attribute value can be hidden

- Ticket 47596 - attrcrypt fails to find unlocked key

* Thu Nov 21 2013 Rich Megginson <rmeggins@redhat.com> - 1.2.11.25-1

- Ticket #47605 CVE-2013-4485: DoS due to improper handling of ger attr searches

- Ticket #47596 attrcrypt fails to find unlocked key

- Revert "Ticket #47559 hung server - related to sasl and initialize"

- Ticket #47585 Replication Failures related to skipped entries due to cleaned rids

- Ticket #47581 - Winsync plugin segfault during incremental backoff (phase 2)

- Ticket #47581 - Winsync plugin segfault during incremental backoff

- Ticket 47577 - crash when removing entries from cache

- Ticket #47559 hung server - related to sasl and initialize

- fe52f44 ticket #47550 wip

- Ticket #47550 logconv: failed logins: Use of uninitialized value in numeric comparison at logconv.pl line 949

- Ticket #47551 logconv: -V does not produce unindexed search report

- Ticket 47517 - fix memory leak in ldbm_delete.c

- Ticket #47488 - Users from AD sub OU does not sync to IPA

- minor fixes for bdb 4.2/4.3 and mozldap

- Tickets: 47510 & 47543 - 389 fails to build when using Mozldap

* Tue Oct 15 2013 Rich Megginson <rmeggins@redhat.com> - 1.2.11.23-3.1

- add mutex around ldap ssl functions/bind/unbind

* Wed Oct  2 2013 Rich Megginson <rmeggins@redhat.com> - 1.2.11.23-3

- bump version to rebuild again

* Wed Oct  2 2013 Rich Megginson <rmeggins@redhat.com> - 1.2.11.23-2

- forgot to bump the source version

* Wed Oct  2 2013 Rich Megginson <rmeggins@redhat.com> - 1.2.11.23-1

- Ticket #422 - 389-ds-base - Can't call method "getText"

- Ticket 47509 - CLEANALLRUV doesnt run across all replicas

- Ticket 47533 logconv: some stats do not work across server restarts

- Ticket #47501 logconv.pl uses /var/tmp for BDB temp files

- Ticket 47520 - Fix various issues with logconv.pl

- Ticket #47387 - improve logconv.pl performance with large access logs

- Ticket 47354 - Indexed search are logged with 'notes=U' in the access logs

- Ticket 47461 - logconv.pl - Use of comma-less variable list is deprecated

- Ticket 47447 - logconv.pl man page missing -m,-M,-B,-D

- Ticket #47348 - add etimes to per second/minute stats

- Ticket #47341 - logconv.pl -m time calculation is wrong

- Ticket #47336 - logconv.pl -m not working for all stats

- Ticket 611 - logconv.pl missing stats for StartTLS, LDAPI, and AUTOBIND

- TIcket 419 - logconv.pl - improve memory management

- Ticket 471 - logconv.pl tool removes the access logs contents if "-M" is not correctly used

- Ticket 539 - logconv.pl should handle microsecond timing

- Ticket #356 - RFE - Track bind info

- Ticket #47534 - RUV tombstone search with scope "one" doesn`t work

- Ticket 47489 - Under specific values of nsDS5ReplicaName, replication may get broken or updates missing

- Ticket #47523 - Set up replcation/agreement before initializing the sub suffix, the sub suffix is not found by ldapsearch

- Ticket #47504 idlistscanlimit per index/type/value

- Ticket #47492 - PassSync removes User must change password flag on the Windows side

- Ticket #47516 replication stops with excessive clock skew

- Bug 999634 - ns-slapd crash due to bogus DN

* Fri Aug  2 2013 Rich Megginson <rmeggins@redhat.com> - 1.2.11.22-3

- use socket6 instead of socket

* Thu Aug  1 2013 Rich Megginson <rmeggins@redhat.com> - 1.2.11.22-2

- remove the dependency and conflict with selinux versions

* Wed Jul 31 2013 Rich Megginson <rmeggins@redhat.com> - 1.2.11.22-1

- 89a98eb fix coverity 11895 - null deref - caused by fix to ticket 47392

- 9750ea7 fix compiler warning in posix winsync code for posix_group_del_memberuid_callback

- 12d47a2 Fix compiler warnings for Ticket 47395 and 47397

- d9a1c7b fix compiler warning

- 855d289 Ticket #543 - Sorting with attributes in ldapsearch gives incorrect result

- CVE-2013-2219 ACLs inoperative in some search scenarios

- Ticket #47378 - fix recent compiler warnings

- Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold

- Ticket 47449 - deadlock after adding and deleting entries

- Ticket 47421 - memory leaks in set_krb5_creds

- Ticket 47441 - Disk Monitoring not checking filesystem with logs

- Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold

- Ticket #47435 - Very large entryusn values after enabling the USN plugin and the lastusn value is negative.

- Ticket #47424 - Replication problem with add-delete requests on single-valued attributes

- Ticket #47428 - Memory leak in 389-ds-base 1.2.11.15

- Ticket #47392 - ldbm errors when adding/modifying/deleting entries

- Ticket 47385 - Disk Monitoring is not triggered as expected.

- Ticket #47410 - changelog db deadlocks with DNA and replication

- Ticket #47409 - allow setting db deadlock rejection policy

- Ticket #47412 - Modify RUV should be serialized in ldbm_back_modify/add

- Ticket #47409 - allow setting db deadlock rejection policy

- Ticket 47393 - Attribute are not encrypted on a consumer after a full initialization

- Ticket 47396 - crash on modrdn of tombstone

- Ticket 47395 47397 v2 correct behaviour of account policy if only stateattr is configured or no alternate attr is configured

- Ticket #47402 - Attribute names are incorrect in search results

- Ticket #47391 - deleting and adding userpassword fails to update the password

- e3b8e2f Coverity Fixes (Part 7)

- Ticket 47376 - DESC should not be empty as per RFC 2252 (ldapv3)

- Ticket #47375 - flush_ber error sending back start_tls response will deadlock

- Ticket #47377 - make listen backlog size configurable

- Ticket #47367 - (phase 1) ldapdelete returns non-leaf entry error while trying to remove a leaf entry

- Ticket 47383 - connections attribute in cn=snmp,cn=monitor is counted twice

- Ticket 47385 - DS not shutting down when disk monitoring threshold is reached

- Ticket #47378 - fix recent compiler warnings

- 9ac276a Coverity Fixes (Part 5)

- 3ab5aba Coverity Fixes (Part 4)

- 36f2572 Coverity Fixes (Part 3)

- 41a8827 Coverity Fixes (Part 2)

- f771f95 Coverity Fixes (part 1)

- Ticket 580 - Wrong error code return when using EXTERNAL SASL and no client certificate

- Ticket #47349 - DS instance crashes under a high load

- Ticket #47359 - new ldap connections can block ldaps and ldapi connections

- Ticket #47327 - error syncing group if group member user is not synced

- Ticket #47362 - ipa upgrade selinuxusermap data not replicating

- Ticket 47361 - Empty control list causes LDAP protocol error is thrown

- Trac Ticket #531 - loading an entry from the database should use str2entry_fast

- Ticket #47347 - Simple paged results should support async search

- Ticket 623 - cleanAllRUV task fails to cleanup config upon completion

- 6abec15 Coverity fix 13139 - Dereference after NULL check in slapi_attr_value_normalize_ext()

* Tue Apr 9 2013 Mark Reynolds <mreynolds@redhat.com> - 1.2.11.21-1

9a7ba7d bump verison to 1.2.11.21

Ticket 47318 - server fails to start after upgrade(schema error)

* Thu Mar 28 2013 Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.20-1

46bfabb bump version to 1.2.11.20

Ticket 623 - cleanAllRUV task fails to cleanup config upon completion

Ticket #47308 - unintended information exposure when anonymous access is set to rootdse

Ticket 628 - crash in aci evaluation

Ticket #627 - ns-slapd crashes sporadically with segmentation fault in libslapd.so

Ticket #634 - Deadlock in DNA plug-in

f6a6514 Coverity issue 13091

Ticket 632 - 389-ds-base cannot handle Kerberos tickets with PAC

Ticket 623 - cleanAllRUV task fails to cleanup config upon completion

* Mon Mar 11 2013 Mark Reynolds <mreynolds@redhat.com> - 1.2.11.19-1

c535f7d bump version to 1.2.11.19

Bug 912964 - CVE-2013-0312 389-ds: unauthenticated denial of service vulnerability in handling of LDAPv3 control data

Ticket 590 - ns-slapd segfaults while trying to delete a tombstone entry

Ticket 518 - dse.ldif is 0 length after server kill or machine kill

Ticket #579 - Error messages encountered when using POSIX winsync

Ticket #576 - DNA: use event queue for config update only at the start up

Ticket 367 - Invalid chaining config triggers a disk full error and shutdown

Ticket 570 - DS returns error 20 when replacing values of a multi-valued attribute  (only when replication is enabled)

Bug 906005 - Valgrind reports memleak in modify_update_last_modified_attr

Ticket #572 - PamConfig schema not updated during upgrade

* Thu Jan 24 2013 Mark Reynolds <mreynolds@redhat.com> - 1.2.11.18-1

12420d9 bump version to 1.2.11.18

Ticket 556 - Don't overwrite certmap.conf during upgrade

Ticket 495 - 1.2.11 - plugin dn is missing from pblock

Ticket 549 - DNA plugin no longer reports additional info when range is depleted

Ticket 541 - need to set plugin as off in ldif template

Ticket 541 - RootDN Access Control plugin is missing after upgrade

Ticket 527 - ns-slapd segfaults if it cannot rename the logs

39b0938 Coverity Issues for 1.2.11

Ticket 216 - disable replication agreements

Ticket 20 - Allow automember to work on entries that have already been added

7d22bc2 Coverity Fixes

Ticket 337 - improve CLEANRUV functionality

Ticket 495 - internalModifiersname not updated by DNA plugin

Ticket 517 - crash in DNA if no dnaMagicRegen is specified

Trac Ticket #520 - RedHat Directory Server crashes (segfaults) when moving ldap entry

Trac Ticket #519 - Search with a complex filter including range search is slow

Trac Ticket #500 - Newly created users with organizationalPerson objectClass fails to sync from AD to DS with missing attribute error

Ticket #503 - Improve AD version in winsync log message

Trac Ticket #498 - Cannot abaondon simple paged result search

55997a6 Coverity defects

Trac Ticket #494 - slapd entered to infinite loop during new index addition

56ebbb2 Fixing compiler warnings in the posix-winsync plugin

a57d913 Coverity defects

Ticket 468 - if pam_passthru is enabled, need to AC_CHECK_HEADERS([security/pam_appl.h])

Ticket 486 - nsslapd-enablePlugin should not be multivalued

Ticket 488 - Doc: DS error log messages with typo

Ticket #491 - multimaster_extop_cleanruv returns wrong error codes

* Mon Dec 10 2012 Mark Reynolds <mreynolds@redhat.com> - 1.2.11.17-1

- 94d5ea3 bump verison to 1.2.11.17

- Ticket 527 - ns-slapd segfaults if it cannot rename the logs

- 39b0938 Coverity Issues for 1.2.11

- Ticket 216 - disable replication agreements

- Ticket 20 - Allow automember to work on entries that have already been added

- 7d22bc2 Coverity Fixes

- Ticket 337 - improve CLEANRUV functionality

- Ticket 495 - internalModifiersname not updated by DNA plugin

- Ticket 517 - crash in DNA if no dnaMagicRegen is specified

- Trac Ticket #520 - RedHat Directory Server crashes (segfaults) when moving ldap entry

- Trac Ticket #519 - Search with a complex filter including range search is slow

- Trac Ticket #500 - Newly created users with organizationalPerson objectClass fails to sync from AD to DS with missing attribute error

- Ticket #503 - Improve AD version in winsync log message

- Trac Ticket #498 - Cannot abaondon simple paged result search

- 55997a6 Coverity defects

- Trac Ticket #494 - slapd entered to infinite loop during new index addition

- 56ebbb2 Fixing compiler warnings in the posix-winsync plugin

- a57d913 Coverity defects

- Ticket 468 - if pam_passthru is enabled, need to AC_CHECK_HEADERS([security/pam_appl.h])

- Ticket 486 - nsslapd-enablePlugin should not be multivalued

- Ticket 488 - Doc: DS error log messages with typo

- Ticket #491 - multimaster_extop_cleanruv returns wrong error codes

* Wed Oct 10 2012 Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.16-1

- Ticket 340 - Change on SLAPI_MODRDN_NEWSUPERIOR is not evaluated in acl

- Ticket 446 - anonymous limits are being applied to directory manager

- Ticket 478 - passwordTrackUpdateTime stops working with subtree password policies

- Ticket 481 - expand nested posix groups

- Ticket 485 - Dirsrv deadlock locking up IPA

* Tue Sep 25 2012 Rich Megginson <rmeggins@redhat.com> - 1.2.11.15-1

- Ticket 470 - 389 prevents from adding a posixaccount with userpassword after schema reload

- Ticket 477 - CLEANALLRUV if there are only winsync agmts task will hang

- Ticket 457 - dirsrv init script returns 0 even when few or all instances fail to start

- Ticket 473 - change VERSION.sh to have console version be major.minor

- Ticket 475 - Root DN Access Control - improve value checking for config

- Trac Ticket #466 - entry_apply_mod - ADD: Failed to set unhashed#user#password to extension

- Ticket 474 - Root DN Access Control - days allowed not working correctly

- Ticket 467 - CLEANALLRUV abort task should be able to ignore down replicas

- 0b79915 fix compiler warnings in ticket 374 code

- Ticket 452 - automember rebuild task adds users to groups that do not match the configuration scope

* Fri Sep  7 2012 Rich Megginson <rmeggins@redhat.com> - 1.2.11.14-1

- Ticket 450 - CLEANALLRUV task gets stuck on winsync replication agreement

- Ticket 386 - large memory growth with ldapmodify(heap fragmentation)

-  this patch doesn't fix the bug - it allows us to experiment with

-  different values of mxfast

- Ticket #374 - consumer can go into total update mode for no reason

* Tue Sep  4 2012 Rich Megginson <rmeggins@redhat.com> - 1.2.11.13-1

- Ticket #426 - support posix schema for user and group sync

-   1) plugin config ldif must contain pluginid, etc. during upgrade or it

-      will fail due to schema errors

-   2) posix winsync should have a lower precedence (25) than the default (50)

-      so that it will be run first

-   3) posix winsync should support the Winsync API v3 - the v2 functions are

-      just stubs for now - but the precedence cb is active

* Thu Aug 30 2012 Rich Megginson <rmeggins@redhat.com> - 1.2.11.12-1

- 8e5087a Coverity defects - 13089: Dereference after null check ldbm_back_delete

- Trac Ticket #437 - variable dn should not be used in ldbm_back_delete

- ba1f5b2 fix coverity resource leak in windows_plugin_add

- e3e81db Simplify program flow: change while loops to for

- a0d5dc0 Fix logic errors: del_mod should be latched (might not be last mod), and avoid skipping add-mods (int value 0)

- 0808f7e Simplify program flow: make adduids/moduids/deluids action blocks all similar

- 77eb760 Simplify program flow: eliminate unnecessary continue

- c9e9db7 Memory leaks: unmatched slapi_attr_get_valueset and slapi_value_new

- a4ca0cc Change "return"s in modGroupMembership to "break"s to avoid leaking

- d49035c Factorize into new isPosixGroup function

- 3b61c03 coverity - posix winsync mem leaks, null check, deadcode, null ref, use after free

- 33ce2a9 fix mem leaks with parent dn log message, setting winsync windows domain

- Ticket #440 - periodic dirsync timed event causes server to loop repeatedly

- Ticket #355 - winsync should not delete entry that appears to be out of scope

- Ticket 436 - nsds5ReplicaEnabled can be set with any invalid values.

- 487932d coverity - mbo dead code - winsync leaks, deadcode, null check, test code

- 2734a71 CLEANALLRUV coverity fixes

- Ticket #426 - support posix schema for user and group sync

- Ticket #430 - server to server ssl client auth broken with latest openldap

* Mon Aug 20 2012 Mark Reynolds <mareynol@redhat.com> - 1.2.11.11-1

6c0778f bumped version to 1.2.11.11

Ticket 429 - added nsslapd-readonly to DS schema

Ticket 403 - fix CLEANALLRUV regression from last commit

Trac Ticket #346 - Slow ldapmodify operation time for large quantities of multi-valued attribute values

* Wed Aug 15 2012 Mark Reynolds <mareynol@redhat.com> - 1.2.11.10-1

db6b354 bumped version to 1.2.11.10

Ticket 403 - CLEANALLRUV revisions

* Tue Aug 7 2012 Mark Reynolds <mareynol@redhat.com> - 1.2.11.9-1

ea05e69 Bumped version to 1.2.11.9

Ticket 407 - dna memory leak - fix crash from prev fix

* Fri Aug 3 2012 Mark Reynolds <mareynol@redhat.com> - 1.2.11.8-1

ddcf669 bump version to 1.2.11.8 for offical release

Ticket #425 - support multiple winsync plugins

Ticket 403 - cleanallruv coverity fixes

Ticket 407 - memory leak in dna plugin

Ticket 403 - CLEANALLRUV feature

Ticket 413 - "Server is unwilling to perform" when running ldapmodify on nsds5ReplicaStripAttrs

3168f04 Coverity defects

5ff0a02 COVERITY FIXES

Ticket #388 - Improve replication agreement status messages

0760116 Update the slapi-plugin documentation on new slapi functions, and added a slapi function for checking on shutdowns

Ticket #369 - restore of replica ldif file on second master after deleting two records shows only 1 deletion

Ticket #409 - Report during startup if nsslapd-cachememsize is too small

Ticket #412 - memberof performance enhancement

12813: Uninitialized pointer read string_values2keys