# changelog

author: Rich Megginson <rmeggins@redhat.com> - 1.2.10.5-1
changelog:
  - Bug 808770 - [abrt] 389-ds-base-1.2.10.4-2.fc16: index_range_read_ext: Process /usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV)
  - same as Ticket #336


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10.6-1
changelog:
  - Bug 808770 - [abrt] 389-ds-base-1.2.10.4-2.fc16: index_range_read_ext: Process /usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV)
  - typo in previous patch


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10.7-1
changelog:
  - Ticket #348 - crash in ldap_initialize with multiple threads
  - Ticket #347 - IPA dirsvr seg-fault during system longevity test


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10.8-1
changelog:
  - Ticket #348 - crash in ldap_initialize with multiple threads
  -  previous fix would crash in ldclt - this fixes that crash


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10.9-1
changelog:
  - Ticket #382 - DS Shuts down intermittently
  - Trac Ticket #359 - Database RUV could mismatch the one in changelog under the stress
  - Bug #361: Bad DNs in ACIs can segfault ns-slapd
  - Trac Ticket #338 - letters in object's cn get converted to lowercase when renaming object


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10.10-1
changelog:
  - Ticket #390 - [abrt] 389-ds-base-1.2.10.6-1.fc16: slapi_attr_value_cmp: Process /usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV)


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10.11-1
changelog:
  - Ticket #378 - audit log does not log unhashed password: enabled, by default.
  - Ticket #378 - unhashed#user#password visible after changing password
  - Ticket #365 - passwords in clear text in the audit log


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10.12-1
changelog:
  - Ticket 378 - unhashed#user#password visible after changing password
  -  fix typo in previous patch
  - Trac Ticket 396 - Account Usability Control Not Working


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10.13-1
changelog:
  - Ticket #406 - Impossible to rename entry (modrdn) with Attribute Uniqueness plugin enabled
  - Ticket #405 - referint modrdn not working if case is different


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10.26-1
changelog:
  - changes since 1.2.10.14
  - Trac Ticket #520 - RedHat Directory Server crashes (segfaults) when moving ldap entry
  - Ticket #331 - transaction errors with db 4.3 and db 4.2
  - Ticket 332 - CLEANALLRUV 2.0 Testing
  - Bug 866623 - RHDS crash when attempting to free an invalid pointer
  - Ticket 403 - CLEANALLRUV - minor fixes and add support for replica-force-cleaning
  - Trac Ticket #340 - Change on SLAPI_MODRDN_NEWSUPERIOR is not evaluated in acl
  - Ticket #491 - multimaster_extop_cleanruv returns wrong error codes
  - 7bbaf35 COVERITY FIXES in replica_execute_cleanall_ruv_task
  - 1f356fa CLEANALLRUV - remove calls to agmt_get_enabled because this feature is not in 1.2.10
  - Ticket 477 - CLEANALLRUV if there are only winsync agmts task will hang
  - Ticket 467 - CLEANALLRUV abort task should be able to ignore down replicas
  - Ticket 450 - CLEANALLRUV task gets stuck on winsync replication agreement
  - 8545947 CLEANALLRUV coverity fixes
  - Ticket 403 - fix CLEANALLRUV regression from last commit
  - 4753f97 Update the slapi-plugin documentation on new slapi functions, and added a slapi function for checking on shutdowns
  - b3f5a71 Coverity Fix
  - Ticket 368 - Make the cleanAllRUV task one step
  - Ticket #337 - Improve CLEANRUV task
  - Ticket #353 - coverity 12625-12629 - leaks, dead code, unchecked return


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.20-1
changelog:
  46bfabb bump version to 1.2.11.20
  Ticket 623 - cleanAllRUV task fails to cleanup config upon completion
  Ticket #47308 - unintended information exposure when anonymous access is set to rootdse
  Ticket 628 - crash in aci evaluation
  Ticket #627 - ns-slapd crashes sporadically with segmentation fault in libslapd.so
  Ticket #634 - Deadlock in DNA plug-in
  f6a6514 Coverity issue 13091
  Ticket 632 - 389-ds-base cannot handle Kerberos tickets with PAC
  Ticket 623 - cleanAllRUV task fails to cleanup config upon completion


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.22-1
changelog:
  - 89a98eb fix coverity 11895 - null deref - caused by fix to ticket 47392
  - 9750ea7 fix compiler warning in posix winsync code for posix_group_del_memberuid_callback
  - 12d47a2 Fix compiler warnings for Ticket 47395 and 47397
  - d9a1c7b fix compiler warning
  - 855d289 Ticket #543 - Sorting with attributes in ldapsearch gives incorrect result
  - CVE-2013-2219 ACLs inoperative in some search scenarios
  - Ticket #47378 - fix recent compiler warnings
  - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold
  - Ticket 47449 - deadlock after adding and deleting entries
  - Ticket 47421 - memory leaks in set_krb5_creds
  - Ticket 47441 - Disk Monitoring not checking filesystem with logs
  - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold
  - Ticket #47435 - Very large entryusn values after enabling the USN plugin and the lastusn value is negative.
  - Ticket #47424 - Replication problem with add-delete requests on single-valued attributes
  - Ticket #47428 - Memory leak in 389-ds-base 1.2.11.15
  - Ticket #47392 - ldbm errors when adding/modifying/deleting entries
  - Ticket 47385 - Disk Monitoring is not triggered as expected.
  - Ticket #47410 - changelog db deadlocks with DNA and replication
  - Ticket #47409 - allow setting db deadlock rejection policy
  - Ticket #47412 - Modify RUV should be serialized in ldbm_back_modify/add
  - Ticket #47409 - allow setting db deadlock rejection policy
  - Ticket 47393 - Attribute are not encrypted on a consumer after a full initialization
  - Ticket 47396 - crash on modrdn of tombstone
  - Ticket 47395 47397 v2 correct behaviour of account policy if only stateattr is configured or no alternate attr is configured
  - Ticket #47402 - Attribute names are incorrect in search results
  - Ticket #47391 - deleting and adding userpassword fails to update the password
  - e3b8e2f Coverity Fixes (Part 7)
  - Ticket 47376 - DESC should not be empty as per RFC 2252 (ldapv3)
  - Ticket #47375 - flush_ber error sending back start_tls response will deadlock
  - Ticket #47377 - make listen backlog size configurable
  - Ticket #47367 - (phase 1) ldapdelete returns non-leaf entry error while trying to remove a leaf entry
  - Ticket 47383 - connections attribute in cn=snmp,cn=monitor is counted twice
  - Ticket 47385 - DS not shutting down when disk monitoring threshold is reached
  - Ticket #47378 - fix recent compiler warnings
  - 9ac276a Coverity Fixes (Part 5)
  - 3ab5aba Coverity Fixes (Part 4)
  - 36f2572 Coverity Fixes (Part 3)
  - 41a8827 Coverity Fixes (Part 2)
  - f771f95 Coverity Fixes (part 1)
  - Ticket 580 - Wrong error code return when using EXTERNAL SASL and no client certificate
  - Ticket #47349 - DS instance crashes under a high load
  - Ticket #47359 - new ldap connections can block ldaps and ldapi connections
  - Ticket #47327 - error syncing group if group member user is not synced
  - Ticket #47362 - ipa upgrade selinuxusermap data not replicating
  - Ticket 47361 - Empty control list causes LDAP protocol error is thrown
  - Trac Ticket #531 - loading an entry from the database should use str2entry_fast
  - Ticket #47347 - Simple paged results should support async search
  - Ticket 623 - cleanAllRUV task fails to cleanup config upon completion
  - 6abec15 Coverity fix 13139 - Dereference after NULL check in slapi_attr_value_normalize_ext()


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.23-1
changelog:
  - Ticket #422 - 389-ds-base - Can't call method "getText"
  - Ticket 47509 - CLEANALLRUV doesnt run across all replicas
  - Ticket 47533 logconv: some stats do not work across server restarts
  - Ticket #47501 logconv.pl uses /var/tmp for BDB temp files
  - Ticket 47520 - Fix various issues with logconv.pl
  - Ticket #47387 - improve logconv.pl performance with large access logs
  - Ticket 47354 - Indexed search are logged with 'notes=U' in the access logs
  - Ticket 47461 - logconv.pl - Use of comma-less variable list is deprecated
  - Ticket 47447 - logconv.pl man page missing -m,-M,-B,-D
  - Ticket #47348 - add etimes to per second/minute stats
  - Ticket #47341 - logconv.pl -m time calculation is wrong
  - Ticket #47336 - logconv.pl -m not working for all stats
  - Ticket 611 - logconv.pl missing stats for StartTLS, LDAPI, and AUTOBIND
  - TIcket 419 - logconv.pl - improve memory management
  - Ticket 471 - logconv.pl tool removes the access logs contents if "-M" is not correctly used
  - Ticket 539 - logconv.pl should handle microsecond timing
  - Ticket #356 - RFE - Track bind info
  - Ticket #47534 - RUV tombstone search with scope "one" doesn`t work
  - Ticket 47489 - Under specific values of nsDS5ReplicaName, replication may get broken or updates missing
  - Ticket #47523 - Set up replcation/agreement before initializing the sub suffix, the sub suffix is not found by ldapsearch
  - Ticket #47504 idlistscanlimit per index/type/value
  - Ticket #47492 - PassSync removes User must change password flag on the Windows side
  - Ticket #47516 replication stops with excessive clock skew
  - Bug 999634 - ns-slapd crash due to bogus DN


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.25-1
changelog:
  - Ticket #47605 CVE-2013-4485: DoS due to improper handling of ger attr searches
  - Ticket #47596 attrcrypt fails to find unlocked key
  - Revert "Ticket #47559 hung server - related to sasl and initialize"
  - Ticket #47585 Replication Failures related to skipped entries due to cleaned rids
  - Ticket #47581 - Winsync plugin segfault during incremental backoff (phase 2)
  - Ticket #47581 - Winsync plugin segfault during incremental backoff
  - Ticket 47577 - crash when removing entries from cache
  - Ticket #47559 hung server - related to sasl and initialize
  - fe52f44 ticket #47550 wip
  - Ticket #47550 logconv: failed logins: Use of uninitialized value in numeric comparison at logconv.pl line 949
  - Ticket #47551 logconv: -V does not produce unindexed search report
  - Ticket 47517 - fix memory leak in ldbm_delete.c
  - Ticket #47488 - Users from AD sub OU does not sync to IPA
  - minor fixes for bdb 4.2/4.3 and mozldap
  - Tickets: 47510 & 47543 - 389 fails to build when using Mozldap


