# changelog

author: Rich Megginson <rmeggins@redhat.com> - 1.2.10.6-1
changelog:
  - Bug 808770 - [abrt] 389-ds-base-1.2.10.4-2.fc16: index_range_read_ext: Process /usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV)
  - typo in previous patch


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10.7-1
changelog:
  - Ticket #348 - crash in ldap_initialize with multiple threads
  - Ticket #347 - IPA dirsvr seg-fault during system longevity test


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10.8-1
changelog:
  - Ticket #348 - crash in ldap_initialize with multiple threads
  -  previous fix would crash in ldclt - this fixes that crash


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10.9-1
changelog:
  - Ticket #382 - DS Shuts down intermittently
  - Trac Ticket #359 - Database RUV could mismatch the one in changelog under the stress
  - Bug #361: Bad DNs in ACIs can segfault ns-slapd
  - Trac Ticket #338 - letters in object's cn get converted to lowercase when renaming object


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10.10-1
changelog:
  - Ticket #390 - [abrt] 389-ds-base-1.2.10.6-1.fc16: slapi_attr_value_cmp: Process /usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV)


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10.11-1
changelog:
  - Ticket #378 - audit log does not log unhashed password: enabled, by default.
  - Ticket #378 - unhashed#user#password visible after changing password
  - Ticket #365 - passwords in clear text in the audit log


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10.12-1
changelog:
  - Ticket 378 - unhashed#user#password visible after changing password
  -  fix typo in previous patch
  - Trac Ticket 396 - Account Usability Control Not Working


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10.13-1
changelog:
  - Ticket #406 - Impossible to rename entry (modrdn) with Attribute Uniqueness plugin enabled
  - Ticket #405 - referint modrdn not working if case is different


author: Mark Reynolds <mareynol@redhat.com> - 1.2.11.11-1
changelog:
  6c0778f bumped version to 1.2.11.11
  Ticket 429 - added nsslapd-readonly to DS schema
  Ticket 403 - fix CLEANALLRUV regression from last commit
  Trac Ticket #346 - Slow ldapmodify operation time for large quantities of multi-valued attribute values


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.12-1
changelog:
  - 8e5087a Coverity defects - 13089: Dereference after null check ldbm_back_delete
  - Trac Ticket #437 - variable dn should not be used in ldbm_back_delete
  - ba1f5b2 fix coverity resource leak in windows_plugin_add
  - e3e81db Simplify program flow: change while loops to for
  - a0d5dc0 Fix logic errors: del_mod should be latched (might not be last mod), and avoid skipping add-mods (int value 0)
  - 0808f7e Simplify program flow: make adduids/moduids/deluids action blocks all similar
  - 77eb760 Simplify program flow: eliminate unnecessary continue
  - c9e9db7 Memory leaks: unmatched slapi_attr_get_valueset and slapi_value_new
  - a4ca0cc Change "return"s in modGroupMembership to "break"s to avoid leaking
  - d49035c Factorize into new isPosixGroup function
  - 3b61c03 coverity - posix winsync mem leaks, null check, deadcode, null ref, use after free
  - 33ce2a9 fix mem leaks with parent dn log message, setting winsync windows domain
  - Ticket #440 - periodic dirsync timed event causes server to loop repeatedly
  - Ticket #355 - winsync should not delete entry that appears to be out of scope
  - Ticket 436 - nsds5ReplicaEnabled can be set with any invalid values.
  - 487932d coverity - mbo dead code - winsync leaks, deadcode, null check, test code
  - 2734a71 CLEANALLRUV coverity fixes
  - Ticket #426 - support posix schema for user and group sync
  - Ticket #430 - server to server ssl client auth broken with latest openldap


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.13-1
changelog:
  - Ticket #426 - support posix schema for user and group sync
  -   1) plugin config ldif must contain pluginid, etc. during upgrade or it
  -      will fail due to schema errors
  -   2) posix winsync should have a lower precedence (25) than the default (50)
  -      so that it will be run first
  -   3) posix winsync should support the Winsync API v3 - the v2 functions are
  -      just stubs for now - but the precedence cb is active


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.14-1
changelog:
  - Ticket 450 - CLEANALLRUV task gets stuck on winsync replication agreement
  - Ticket 386 - large memory growth with ldapmodify(heap fragmentation)
  -  this patch doesn't fix the bug - it allows us to experiment with
  -  different values of mxfast
  - Ticket #374 - consumer can go into total update mode for no reason


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.15-1
changelog:
  - Ticket 470 - 389 prevents from adding a posixaccount with userpassword after schema reload
  - Ticket 477 - CLEANALLRUV if there are only winsync agmts task will hang
  - Ticket 457 - dirsrv init script returns 0 even when few or all instances fail to start
  - Ticket 473 - change VERSION.sh to have console version be major.minor
  - Ticket 475 - Root DN Access Control - improve value checking for config
  - Trac Ticket #466 - entry_apply_mod - ADD: Failed to set unhashed#user#password to extension
  - Ticket 474 - Root DN Access Control - days allowed not working correctly
  - Ticket 467 - CLEANALLRUV abort task should be able to ignore down replicas
  - 0b79915 fix compiler warnings in ticket 374 code
  - Ticket 452 - automember rebuild task adds users to groups that do not match the configuration scope


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.16-1
changelog:
  - Ticket 340 - Change on SLAPI_MODRDN_NEWSUPERIOR is not evaluated in acl
  - Ticket 446 - anonymous limits are being applied to directory manager
  - Ticket 478 - passwordTrackUpdateTime stops working with subtree password policies
  - Ticket 481 - expand nested posix groups
  - Ticket 485 - Dirsrv deadlock locking up IPA


author: Mark Reynolds <mreynolds@redhat.com> - 1.2.11.17-1
changelog:
  - 94d5ea3 bump verison to 1.2.11.17
  - Ticket 527 - ns-slapd segfaults if it cannot rename the logs
  - 39b0938 Coverity Issues for 1.2.11
  - Ticket 216 - disable replication agreements
  - Ticket 20 - Allow automember to work on entries that have already been added
  - 7d22bc2 Coverity Fixes
  - Ticket 337 - improve CLEANRUV functionality
  - Ticket 495 - internalModifiersname not updated by DNA plugin
  - Ticket 517 - crash in DNA if no dnaMagicRegen is specified
  - Trac Ticket #520 - RedHat Directory Server crashes (segfaults) when moving ldap entry
  - Trac Ticket #519 - Search with a complex filter including range search is slow
  - Trac Ticket #500 - Newly created users with organizationalPerson objectClass fails to sync from AD to DS with missing attribute error
  - Ticket #503 - Improve AD version in winsync log message
  - Trac Ticket #498 - Cannot abaondon simple paged result search
  - 55997a6 Coverity defects
  - Trac Ticket #494 - slapd entered to infinite loop during new index addition
  - 56ebbb2 Fixing compiler warnings in the posix-winsync plugin
  - a57d913 Coverity defects
  - Ticket 468 - if pam_passthru is enabled, need to AC_CHECK_HEADERS([security/pam_appl.h])
  - Ticket 486 - nsslapd-enablePlugin should not be multivalued
  - Ticket 488 - Doc: DS error log messages with typo
  - Ticket #491 - multimaster_extop_cleanruv returns wrong error codes


author: Mark Reynolds <mreynolds@redhat.com> - 1.2.11.18-1
changelog:
  12420d9 bump version to 1.2.11.18
  Ticket 556 - Don't overwrite certmap.conf during upgrade
  Ticket 495 - 1.2.11 - plugin dn is missing from pblock
  Ticket 549 - DNA plugin no longer reports additional info when range is depleted
  Ticket 541 - need to set plugin as off in ldif template
  Ticket 541 - RootDN Access Control plugin is missing after upgrade
  Ticket 527 - ns-slapd segfaults if it cannot rename the logs
  39b0938 Coverity Issues for 1.2.11
  Ticket 216 - disable replication agreements
  Ticket 20 - Allow automember to work on entries that have already been added
  7d22bc2 Coverity Fixes
  Ticket 337 - improve CLEANRUV functionality
  Ticket 495 - internalModifiersname not updated by DNA plugin
  Ticket 517 - crash in DNA if no dnaMagicRegen is specified
  Trac Ticket #520 - RedHat Directory Server crashes (segfaults) when moving ldap entry
  Trac Ticket #519 - Search with a complex filter including range search is slow
  Trac Ticket #500 - Newly created users with organizationalPerson objectClass fails to sync from AD to DS with missing attribute error
  Ticket #503 - Improve AD version in winsync log message
  Trac Ticket #498 - Cannot abaondon simple paged result search
  55997a6 Coverity defects
  Trac Ticket #494 - slapd entered to infinite loop during new index addition
  56ebbb2 Fixing compiler warnings in the posix-winsync plugin
  a57d913 Coverity defects
  Ticket 468 - if pam_passthru is enabled, need to AC_CHECK_HEADERS([security/pam_appl.h])
  Ticket 486 - nsslapd-enablePlugin should not be multivalued
  Ticket 488 - Doc: DS error log messages with typo
  Ticket #491 - multimaster_extop_cleanruv returns wrong error codes


author: Mark Reynolds <mreynolds@redhat.com> - 1.2.11.19-1
changelog:
  c535f7d bump version to 1.2.11.19
  Bug 912964 - CVE-2013-0312 389-ds: unauthenticated denial of service vulnerability in handling of LDAPv3 control data
  Ticket 590 - ns-slapd segfaults while trying to delete a tombstone entry
  Ticket 518 - dse.ldif is 0 length after server kill or machine kill
  Ticket #579 - Error messages encountered when using POSIX winsync
  Ticket #576 - DNA: use event queue for config update only at the start up
  Ticket 367 - Invalid chaining config triggers a disk full error and shutdown
  Ticket 570 - DS returns error 20 when replacing values of a multi-valued attribute  (only when replication is enabled)
  Bug 906005 - Valgrind reports memleak in modify_update_last_modified_attr
  Ticket #572 - PamConfig schema not updated during upgrade


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.20-1
changelog:
  bump version to 1.2.11.20
  Ticket 623 - cleanAllRUV task fails to cleanup config upon completion
  Ticket #47308 - unintended information exposure when anonymous access is set to rootdse
  Ticket 628 - crash in aci evaluation
  Ticket #627 - ns-slapd crashes sporadically with segmentation fault in libslapd.so
  Ticket #634 - Deadlock in DNA plug-in
  f6a6514 Coverity issue 13091
  Ticket 632 - 389-ds-base cannot handle Kerberos tickets with PAC
  Ticket 623 - cleanAllRUV task fails to cleanup config upon completion


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.20-1
changelog:
  46bfabb bump version to 1.2.11.20
  Ticket 623 - cleanAllRUV task fails to cleanup config upon completion
  Ticket #47308 - unintended information exposure when anonymous access is set to rootdse
  Ticket 628 - crash in aci evaluation
  Ticket #627 - ns-slapd crashes sporadically with segmentation fault in libslapd.so
  Ticket #634 - Deadlock in DNA plug-in
  f6a6514 Coverity issue 13091
  Ticket 632 - 389-ds-base cannot handle Kerberos tickets with PAC
  Ticket 623 - cleanAllRUV task fails to cleanup config upon completion


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.22-1
changelog:
  - 89a98eb fix coverity 11895 - null deref - caused by fix to ticket 47392
  - 9750ea7 fix compiler warning in posix winsync code for posix_group_del_memberuid_callback
  - 12d47a2 Fix compiler warnings for Ticket 47395 and 47397
  - d9a1c7b fix compiler warning
  - 855d289 Ticket #543 - Sorting with attributes in ldapsearch gives incorrect result
  - CVE-2013-2219 ACLs inoperative in some search scenarios
  - Ticket #47378 - fix recent compiler warnings
  - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold
  - Ticket 47449 - deadlock after adding and deleting entries
  - Ticket 47421 - memory leaks in set_krb5_creds
  - Ticket 47441 - Disk Monitoring not checking filesystem with logs
  - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold
  - Ticket #47435 - Very large entryusn values after enabling the USN plugin and the lastusn value is negative.
  - Ticket #47424 - Replication problem with add-delete requests on single-valued attributes
  - Ticket #47428 - Memory leak in 389-ds-base 1.2.11.15
  - Ticket #47392 - ldbm errors when adding/modifying/deleting entries
  - Ticket 47385 - Disk Monitoring is not triggered as expected.
  - Ticket #47410 - changelog db deadlocks with DNA and replication
  - Ticket #47409 - allow setting db deadlock rejection policy
  - Ticket #47412 - Modify RUV should be serialized in ldbm_back_modify/add
  - Ticket #47409 - allow setting db deadlock rejection policy
  - Ticket 47393 - Attribute are not encrypted on a consumer after a full initialization
  - Ticket 47396 - crash on modrdn of tombstone
  - Ticket 47395 47397 v2 correct behaviour of account policy if only stateattr is configured or no alternate attr is configured
  - Ticket #47402 - Attribute names are incorrect in search results
  - Ticket #47391 - deleting and adding userpassword fails to update the password
  - e3b8e2f Coverity Fixes (Part 7)
  - Ticket 47376 - DESC should not be empty as per RFC 2252 (ldapv3)
  - Ticket #47375 - flush_ber error sending back start_tls response will deadlock
  - Ticket #47377 - make listen backlog size configurable
  - Ticket #47367 - (phase 1) ldapdelete returns non-leaf entry error while trying to remove a leaf entry
  - Ticket 47383 - connections attribute in cn=snmp,cn=monitor is counted twice
  - Ticket 47385 - DS not shutting down when disk monitoring threshold is reached
  - Ticket #47378 - fix recent compiler warnings
  - 9ac276a Coverity Fixes (Part 5)
  - 3ab5aba Coverity Fixes (Part 4)
  - 36f2572 Coverity Fixes (Part 3)
  - 41a8827 Coverity Fixes (Part 2)
  - f771f95 Coverity Fixes (part 1)
  - Ticket 580 - Wrong error code return when using EXTERNAL SASL and no client certificate
  - Ticket #47349 - DS instance crashes under a high load
  - Ticket #47359 - new ldap connections can block ldaps and ldapi connections
  - Ticket #47327 - error syncing group if group member user is not synced
  - Ticket #47362 - ipa upgrade selinuxusermap data not replicating
  - Ticket 47361 - Empty control list causes LDAP protocol error is thrown
  - Trac Ticket #531 - loading an entry from the database should use str2entry_fast
  - Ticket #47347 - Simple paged results should support async search
  - Ticket 623 - cleanAllRUV task fails to cleanup config upon completion
  - 6abec15 Coverity fix 13139 - Dereference after NULL check in slapi_attr_value_normalize_ext()


