389-users July 2024

389-users@lists.fedoraproject.org

15 participants
12 discussions

Announcing 389 Directory Server 3.1.1
by Viktor Ashirov 31 Jul '24

31 Jul '24

389 Directory Server 3.1.1 The 389 Directory Server team is proud to announce 389-ds-base version 3.1.1. Fedora packages are available on Fedora 41: https://koji.fedoraproject.org/koji/buildinfo?buildID=2518706 - Koji https://bodhi.fedoraproject.org/updates/FEDORA-2024-48c0a7fa73 - Bodhi The new packages and versions are: - 389-ds-base-3.1.1 Source tarballs are available for download at GitHub Releases page <https://github.com/389ds/389-ds-base/releases/tag/389-ds-base-3.1.1> - https://github.com/389ds/389-ds-base/releases/download/389-ds-base- 3.1.1/389-ds-base-3.1.1.tar.bz2 <https://github.com/389ds/389-ds-base/releases/download/389-ds-base-3.1.1/38…> Highlights in 3.1.1 - Enhancements - Issue 6172 <https://github.com/389ds/389-ds-base/issues/6172> - RFE: improve the performance of evaluation of filter component when tested against a large valueset (like group members) #6173 <https://github.com/389ds/389-ds-base/pull/6173> - Issue 6181 <https://github.com/389ds/389-ds-base/issues/6181> - RFE - Allow system to manage uid/gid at startup - Issue 6238 <https://github.com/389ds/389-ds-base/issues/6238> - RFE - add option to write audit log in JSON format - Issue 6241 <https://github.com/389ds/389-ds-base/issues/6241> - Add support for CRYPT-YESCRYPT #6242 <https://github.com/389ds/389-ds-base/pull/6242> - Bug fixes - Issue 5772 <https://github.com/389ds/389-ds-base/issues/5772> - ONE LEVEL search fails to return sub-suffixes #6219 <https://github.com/389ds/389-ds-base/pull/6219> - Issue 6123 <https://github.com/389ds/389-ds-base/issues/6123> - Allow DNA plugin to reuse global config for bind method and connection protocol #6124 <https://github.com/389ds/389-ds-base/pull/6124> - Issue 6155 <https://github.com/389ds/389-ds-base/issues/6155> - ldap-agent fails to start because of permission error #6179 <https://github.com/389ds/389-ds-base/pull/6179> - Issue 6170 <https://github.com/389ds/389-ds-base/issues/6170> - audit log buffering doesn’t handle large updates - Issue 6175 <https://github.com/389ds/389-ds-base/issues/6175> - Referential integrity plugin - in referint_thread_func does not handle null from ldap_utf8strtok #6168 <https://github.com/389ds/389-ds-base/pull/6168> - Issue 6183 <https://github.com/389ds/389-ds-base/issues/6183> - Slow ldif2db import on a newly created BDB backend #6208 <https://github.com/389ds/389-ds-base/pull/6208> - Issue 6199 <https://github.com/389ds/389-ds-base/issues/6199> - unprotected search query during certificate based authentication #6205 <https://github.com/389ds/389-ds-base/pull/6205> - Issue 6224 <https://github.com/389ds/389-ds-base/issues/6224> - d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes #6225 <https://github.com/389ds/389-ds-base/pull/6225> - Issue 6229 <https://github.com/389ds/389-ds-base/issues/6229> - After an initial failure, subsequent online backups fail #6230 <https://github.com/389ds/389-ds-base/pull/6230> - Issue 6254 <https://github.com/389ds/389-ds-base/issues/6254> - Enabling replication for a sub suffix crashes browser #6255 <https://github.com/389ds/389-ds-base/pull/6255> - Issue 6256 <https://github.com/389ds/389-ds-base/issues/6256> - nsslapd-numlisteners limit is not enforced - Issue 6265 <https://github.com/389ds/389-ds-base/issues/6265> - lmdb - missing entries in range searches #6266 <https://github.com/389ds/389-ds-base/pull/6266> - Security fixes: - CVE-2024-6237 <https://access.redhat.com/security/cve/CVE-2024-6237> - CVE-2024-5953 <https://access.redhat.com/security/cve/CVE-2024-5953> - CVE-2024-3657 <https://access.redhat.com/security/cve/CVE-2024-3657> - CVE-2024-2199 <https://access.redhat.com/security/cve/CVE-2024-2199> Installation and Upgrade See Download <https://www.port389.org/docs/389ds/download.html> for information about setting up your DNF repositories. To install the server use dnf install 389-ds-base To install the Cockpit UI plugin use dnf install cockpit-389-ds After rpm install completes, run dscreate interactive For upgrades, simply install the package. There are no further steps required. There are no upgrade steps besides installing the new rpms. See Install Guide <https://www.port389.org/docs/389ds/howto/howto-install-389.html> for more information about the initial installation and setup. See Source <https://www.port389.org/docs/389ds/development/source.html> for information about source tarballs and git access. Feedback We are very interested in your feedback! Please provide feedback and comments here: - 389-users mailing list: https://lists.fedoraproject.org/admin/lists/389-users.lists.fedoraproject.o… - 389ds discussion channel: https://github.com/389ds/389-ds-base/discussions If you find a bug, or would like to see a new feature, file it in our GitHub project: https://github.com/389ds/389-ds-base Changelog between 389-ds-base-3.1.0 and 389-ds-base-3.1.1: - Bump version to 3.1.1 - Issue 6256 <https://github.com/389ds/389-ds-base/issues/6256> - nsslapd-numlisteners limit is not enforced #6257 <https://github.com/389ds/389-ds-base/pull/6257> - Issue 5327 <https://github.com/389ds/389-ds-base/issues/5327> - Fix test metadata - Security fix for CVE-2024-6237 <https://access.redhat.com/security/cve/CVE-2024-6237> - Security fix for CVE-2024-5953 <https://access.redhat.com/security/cve/CVE-2024-5953> - Security fix for CVE-2024-3657 <https://access.redhat.com/security/cve/CVE-2024-3657> - Security fix for CVE-2024-2199 <https://access.redhat.com/security/cve/CVE-2024-2199> - Issue 6256 <https://github.com/389ds/389-ds-base/issues/6256> - nsslapd-numlisteners limit is not enforced - Issue 6265 <https://github.com/389ds/389-ds-base/issues/6265> - lmdb - missing entries in range searches #6266 <https://github.com/389ds/389-ds-base/pull/6266> - Issue 5853 <https://github.com/389ds/389-ds-base/issues/5853> - Update Cargo.lock - Bump openssl from 0.10.64 to 0.10.66 in /src - Issue 6245 <https://github.com/389ds/389-ds-base/issues/6245> - Revert __COVERITY__ ifndef #6268 <https://github.com/389ds/389-ds-base/pull/6268> - Issue 6248 <https://github.com/389ds/389-ds-base/issues/6248> - fix fanalyzer warnings #6253 <https://github.com/389ds/389-ds-base/pull/6253> - Issue 6238 <https://github.com/389ds/389-ds-base/issues/6238> - Fix test_audit_json_logging CI test regression #6264 <https://github.com/389ds/389-ds-base/pull/6264> - Issue 6254 <https://github.com/389ds/389-ds-base/issues/6254> - Enabling replication for a sub suffix crashes browser #6255 <https://github.com/389ds/389-ds-base/pull/6255> - Issue 6155 <https://github.com/389ds/389-ds-base/issues/6155> - ldap-agent fails to start because of permission error #6179 <https://github.com/389ds/389-ds-base/pull/6179> - Issue 6238 <https://github.com/389ds/389-ds-base/issues/6238> - RFE - add option to write audit log in JSON format - Issue 6216 <https://github.com/389ds/389-ds-base/issues/6216> - CI test_fast_slow_import sometime fail #6247 <https://github.com/389ds/389-ds-base/pull/6247> - Issue 6245 <https://github.com/389ds/389-ds-base/issues/6245> - covscan fixes #6246 <https://github.com/389ds/389-ds-base/pull/6246> - Issue 6241 <https://github.com/389ds/389-ds-base/issues/6241> - Add support for CRYPT-YESCRYPT #6242 <https://github.com/389ds/389-ds-base/pull/6242> - Issue 6229 <https://github.com/389ds/389-ds-base/issues/6229> - After an initial failure, subsequent online backups fail #6230 <https://github.com/389ds/389-ds-base/pull/6230> - Issue 6236 <https://github.com/389ds/389-ds-base/issues/6236> - rpm: fix compatibility with RPM 4.20 - Issue 6227 <https://github.com/389ds/389-ds-base/issues/6227> - dsconf schema does not show inChain matching rule #6228 <https://github.com/389ds/389-ds-base/pull/6228> - Issue 6233 <https://github.com/389ds/389-ds-base/issues/6233> - CI test wait_for_async_feature_test sometime fails #6234 <https://github.com/389ds/389-ds-base/pull/6234> - Bump ws from 7.5.9 to 7.5.10 in /src/cockpit/389-console - Issue 6224 <https://github.com/389ds/389-ds-base/issues/6224> - d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes #6225 <https://github.com/389ds/389-ds-base/pull/6225> - Issue 6222 <https://github.com/389ds/389-ds-base/issues/6222> - CI test acl/test_timeofday_keyword sometime fails #6223 <https://github.com/389ds/389-ds-base/pull/6223> - Issue 6120 <https://github.com/389ds/389-ds-base/issues/6120> - /usr/lib64/dirsrv/plugins/libback-bdb.so has an invalid-looking DT_RPATH : /usr/lib/dirsrv - Issue 5772 <https://github.com/389ds/389-ds-base/issues/5772> - ONE LEVEL search fails to return sub-suffixes #6219 <https://github.com/389ds/389-ds-base/pull/6219> - Issue 6183 <https://github.com/389ds/389-ds-base/issues/6183> - Slow ldif2db import on a newly created BDB backend #6208 <https://github.com/389ds/389-ds-base/pull/6208> - Issue 6207 <https://github.com/389ds/389-ds-base/issues/6207> - Random crash in test_long_rdn CI test #6215 <https://github.com/389ds/389-ds-base/pull/6215> - Bump braces from 3.0.2 to 3.0.3 in /src/cockpit/389-console - Issue 6191 <https://github.com/389ds/389-ds-base/issues/6191> - Node.js 16 actions are deprecated - Issue 6199 <https://github.com/389ds/389-ds-base/issues/6199> - unprotected search query during certificate based authentication #6205 <https://github.com/389ds/389-ds-base/pull/6205> - Issue 6200 <https://github.com/389ds/389-ds-base/issues/6200> - Disable WebUI CI tests - Issue 6192 <https://github.com/389ds/389-ds-base/issues/6192> - Test failure: test_match_large_valueset - Issue 6181 <https://github.com/389ds/389-ds-base/issues/6181> - RFE - Allow system to manage uid/gid at startup - Issue 6188 <https://github.com/389ds/389-ds-base/issues/6188> - Add nsslapd-haproxy-trusted-ip to cn=schema #6201 <https://github.com/389ds/389-ds-base/pull/6201> - Issue 6181 <https://github.com/389ds/389-ds-base/issues/6181> - RFE - Allow system to manage uid/gid at startup #6182 <https://github.com/389ds/389-ds-base/pull/6182> - Issue 6170 <https://github.com/389ds/389-ds-base/issues/6170> - audit log buffering doesn’t handle large updates - Issue 6193 <https://github.com/389ds/389-ds-base/issues/6193> - Test failure: test_tls_command_returns_error_text - Issue 6177 <https://github.com/389ds/389-ds-base/issues/6177> - Spec file cleanup - Issue 6189 <https://github.com/389ds/389-ds-base/issues/6189> - CI tests fail with [Errno 2] No such file or directory: '/var/cache/dnf/metadata\_lock.pid' - Issue 6175 <https://github.com/389ds/389-ds-base/issues/6175> - Referential integrity plugin - in referint_thread_func does not handle null from ldap_utf8strtok #6168 <https://github.com/389ds/389-ds-base/pull/6168> - Issue 6186 <https://github.com/389ds/389-ds-base/issues/6186> - Change default salt sizes generated in crypt_pwd #6185 <https://github.com/389ds/389-ds-base/pull/6185> - Issue 6123 <https://github.com/389ds/389-ds-base/issues/6123> - Allow DNA plugin to reuse global config for bind method and connection protocol #6124 <https://github.com/389ds/389-ds-base/pull/6124> - Issue 6159 <https://github.com/389ds/389-ds-base/issues/6159> - Add a test to check URP add and delete conflict #6160 <https://github.com/389ds/389-ds-base/pull/6160> - Issue 6151 <https://github.com/389ds/389-ds-base/issues/6151> - Use %bcond macro for conditional builds in the spec file - Issue 6172 <https://github.com/389ds/389-ds-base/issues/6172> - RFE: improve the performance of evaluation of filter component when tested against a large valueset (like group members) #6173 <https://github.com/389ds/389-ds-base/pull/6173>

1 0

Announcing 389 Directory Server 3.0.4
by Viktor Ashirov 31 Jul '24

31 Jul '24

389 Directory Server 3.0.4 The 389 Directory Server team is proud to announce 389-ds-base version 3.0.4. Fedora packages are available on Fedora 40: https://koji.fedoraproject.org/koji/buildinfo?buildID=2518722 - Koji https://bodhi.fedoraproject.org/updates/FEDORA-2024-ac07913be8 - Bodhi The new packages and versions are: - 389-ds-base-3.0.4 Source tarballs are available for download at GitHub Releases page <https://github.com/389ds/389-ds-base/releases/tag/389-ds-base-3.0.4> - https://github.com/389ds/389-ds-base/releases/download/389-ds-base- 3.0.4/389-ds-base-3.0.4.tar.bz2 <https://github.com/389ds/389-ds-base/releases/download/389-ds-base-3.0.4/38…> Highlights in 3.0.4 - Enhancements - Issue 6172 <https://github.com/389ds/389-ds-base/issues/6172> - RFE: improve the performance of evaluation of filter component when tested against a large valueset (like group members) #6173 <https://github.com/389ds/389-ds-base/pull/6173> - Bug fixes - Issue 5772 <https://github.com/389ds/389-ds-base/issues/5772> - ONE LEVEL search fails to return sub-suffixes #6219 <https://github.com/389ds/389-ds-base/pull/6219> - Issue 6123 <https://github.com/389ds/389-ds-base/issues/6123> - Allow DNA plugin to reuse global config for bind method and connection protocol #6124 <https://github.com/389ds/389-ds-base/pull/6124> - Issue 6155 <https://github.com/389ds/389-ds-base/issues/6155> - ldap-agent fails to start because of permission error #6179 <https://github.com/389ds/389-ds-base/pull/6179> - Issue 6170 <https://github.com/389ds/389-ds-base/issues/6170> - audit log buffering doesn’t handle large updates - Issue 6183 <https://github.com/389ds/389-ds-base/issues/6183> - Slow ldif2db import on a newly created BDB backend #6208 <https://github.com/389ds/389-ds-base/pull/6208> - Issue 6199 <https://github.com/389ds/389-ds-base/issues/6199> - unprotected search query during certificate based authentication #6205 <https://github.com/389ds/389-ds-base/pull/6205> - Issue 6224 <https://github.com/389ds/389-ds-base/issues/6224> - d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes #6225 <https://github.com/389ds/389-ds-base/pull/6225> - Issue 6254 <https://github.com/389ds/389-ds-base/issues/6254> - Enabling replication for a sub suffix crashes browser #6255 <https://github.com/389ds/389-ds-base/pull/6255> - Issue 6256 <https://github.com/389ds/389-ds-base/issues/6256> - nsslapd-numlisteners limit is not enforced - Issue 6265 <https://github.com/389ds/389-ds-base/issues/6265> - lmdb - missing entries in range searches #6266 <https://github.com/389ds/389-ds-base/pull/6266> - Security fixes - CVE-2024-6237 <https://access.redhat.com/security/cve/CVE-2024-6237> - CVE-2024-5953 <https://access.redhat.com/security/cve/CVE-2024-5953> - CVE-2024-3657 <https://access.redhat.com/security/cve/CVE-2024-3657> - CVE-2024-2199 <https://access.redhat.com/security/cve/CVE-2024-2199> Installation and Upgrade See Download <https://www.port389.org/docs/389ds/download.html> for information about setting up your DNF repositories. To install the server use dnf install 389-ds-base To install the Cockpit UI plugin use dnf install cockpit-389-ds After rpm install completes, run dscreate interactive For upgrades, simply install the package. There are no further steps required. There are no upgrade steps besides installing the new rpms. See Install Guide <https://www.port389.org/docs/389ds/howto/howto-install-389.html> for more information about the initial installation and setup. See Source <https://www.port389.org/docs/389ds/development/source.html> for information about source tarballs and SCM (git) access. Feedback We are very interested in your feedback! Please provide feedback and comments here: - 389-users mailing list: https://lists.fedoraproject.org/admin/lists/389-users.lists.fedoraproject.o… - 389ds discussion channel: https://github.com/389ds/389-ds-base/discussions If you find a bug, or would like to see a new feature, file it in our GitHub project: https://github.com/389ds/389-ds-base *Changelog between 389-ds-base-3.0.3 and 389-ds-base-3.0.4:* - Bump version to 3.0.4 - Issue 6256 <https://github.com/389ds/389-ds-base/issues/6256> - nsslapd-numlisteners limit is not enforced #6257 <https://github.com/389ds/389-ds-base/pull/6257> - Issue 6256 <https://github.com/389ds/389-ds-base/issues/6256> - nsslapd-numlisteners limit is not enforced - Issue 5327 <https://github.com/389ds/389-ds-base/issues/5327> - Fix test metadata - Security fix for CVE-2024-6237 <https://access.redhat.com/security/cve/CVE-2024-6237> - Security fix for CVE-2024-5953 <https://access.redhat.com/security/cve/CVE-2024-5953> - Security fix for CVE-2024-3657 <https://access.redhat.com/security/cve/CVE-2024-3657> - Security fix for CVE-2024-2199 <https://access.redhat.com/security/cve/CVE-2024-2199> - Issue 6265 <https://github.com/389ds/389-ds-base/issues/6265> - lmdb - missing entries in range searches #6266 <https://github.com/389ds/389-ds-base/pull/6266> - Issue 5853 <https://github.com/389ds/389-ds-base/issues/5853> - Update Cargo.lock - Issue 5962 <https://github.com/389ds/389-ds-base/issues/5962> - Rearrange includes for 32-bit support logic - Bump ws from 7.5.9 to 7.5.10 in /src/cockpit/389-console - Bump braces from 3.0.2 to 3.0.3 in /src/cockpit/389-console - Issue 6254 <https://github.com/389ds/389-ds-base/issues/6254> - Enabling replication for a sub suffix crashes browser #6255 <https://github.com/389ds/389-ds-base/pull/6255> - Issue 6155 <https://github.com/389ds/389-ds-base/issues/6155> - ldap-agent fails to start because of permission error #6179 <https://github.com/389ds/389-ds-base/pull/6179> - Issue 6227 <https://github.com/389ds/389-ds-base/issues/6227> - dsconf schema does not show inChain matching rule #6228 <https://github.com/389ds/389-ds-base/pull/6228> - Issue 6224 <https://github.com/389ds/389-ds-base/issues/6224> - d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes #6225 <https://github.com/389ds/389-ds-base/pull/6225> - Issue 6120 <https://github.com/389ds/389-ds-base/issues/6120> - /usr/lib64/dirsrv/plugins/libback-bdb.so has an invalid-looking DT_RPATH : /usr/lib/dirsrv - Issue 5772 <https://github.com/389ds/389-ds-base/issues/5772> - ONE LEVEL search fails to return sub-suffixes #6219 <https://github.com/389ds/389-ds-base/pull/6219> - Issue 6183 <https://github.com/389ds/389-ds-base/issues/6183> - Slow ldif2db import on a newly created BDB backend #6208 <https://github.com/389ds/389-ds-base/pull/6208> - Issue 6188 <https://github.com/389ds/389-ds-base/issues/6188> - Add nsslapd-haproxy-trusted-ip to cn=schema #6201 <https://github.com/389ds/389-ds-base/pull/6201> - Issue 6170 <https://github.com/389ds/389-ds-base/issues/6170> - audit log buffering doesn’t handle large updates - Issue 6193 <https://github.com/389ds/389-ds-base/issues/6193> - Test failure: test_tls_command_returns_error_text - Issue 6189 <https://github.com/389ds/389-ds-base/issues/6189> - CI tests fail with [Errno 2] No such file or directory: '/var/cache/dnf/metadata\_lock.pid' - Issue 5105 <https://github.com/389ds/389-ds-base/issues/5105> - lmdb - Cannot create entries with long rdn - fix covscan #6131 <https://github.com/389ds/389-ds-base/pull/6131> - Issue 6123 <https://github.com/389ds/389-ds-base/issues/6123> - Allow DNA plugin to reuse global config for bind method and connection protocol #6124 <https://github.com/389ds/389-ds-base/pull/6124> - Issue 6172 <https://github.com/389ds/389-ds-base/issues/6172> - RFE: improve the performance of evaluation of filter component when tested against a large valueset (like group members) #6173 <https://github.com/389ds/389-ds-base/pull/6173>

1 0

Announcing 389 Directory Server 2.5.2
by Viktor Ashirov 31 Jul '24

31 Jul '24

389 Directory Server 2.5.2 The 389 Directory Server team is proud to announce 389-ds-base version 2.5.2. The new packages and versions are: - 389-ds-base-2.5.2 Source tarballs are available for download at GitHub Releases page <https://github.com/389ds/389-ds-base/releases/tag/389-ds-base-2.5.2> - https://github.com/389ds/389-ds-base/releases/download/389-ds-base- 2.5.2/389-ds-base-2.5.2.tar.bz2 <https://github.com/389ds/389-ds-base/releases/download/389-ds-base-2.5.2/38…> Highlights in 2.5.2 - Enhancements - Issue 6142 <https://github.com/389ds/389-ds-base/issues/6142> - [RFE] Add LMDB configuration related checks into Healthcheck tool #6143 <https://github.com/389ds/389-ds-base/pull/6143> - Issue 6172 <https://github.com/389ds/389-ds-base/issues/6172> - RFE: improve the performance of evaluation of filter component when tested against a large valueset (like group members) #6173 <https://github.com/389ds/389-ds-base/pull/6173> - Bug fixes - Issue 5105 <https://github.com/389ds/389-ds-base/issues/5105> - lmdb - Cannot create entries with long rdn - fix covscan #6131 <https://github.com/389ds/389-ds-base/pull/6131> - Issue 5772 <https://github.com/389ds/389-ds-base/issues/5772> - ONE LEVEL search fails to return sub-suffixes #6219 <https://github.com/389ds/389-ds-base/pull/6219> - Issue 6049 <https://github.com/389ds/389-ds-base/issues/6049> - lmdb - changelog is wrongly recreated by reindex task #6050 <https://github.com/389ds/389-ds-base/pull/6050> - Issue 6057 <https://github.com/389ds/389-ds-base/issues/6057> - vlv search may result wrong result with lmdb #6091 <https://github.com/389ds/389-ds-base/pull/6091> - Issue 6105 <https://github.com/389ds/389-ds-base/issues/6105> - lmdb - Cannot create entries with long rdn #6130 <https://github.com/389ds/389-ds-base/pull/6130> - Issue 6123 <https://github.com/389ds/389-ds-base/issues/6123> - Allow DNA plugin to reuse global config for bind method and connection protocol #6124 <https://github.com/389ds/389-ds-base/pull/6124> - Issue 6155 <https://github.com/389ds/389-ds-base/issues/6155> - ldap-agent fails to start because of permission error #6179 <https://github.com/389ds/389-ds-base/pull/6179> - Issue 6170 <https://github.com/389ds/389-ds-base/issues/6170> - audit log buffering doesn’t handle large updates - Issue 6183 <https://github.com/389ds/389-ds-base/issues/6183> - Slow ldif2db import on a newly created BDB backend #6208 <https://github.com/389ds/389-ds-base/pull/6208> - Issue 6224 <https://github.com/389ds/389-ds-base/issues/6224> - d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes #6225 <https://github.com/389ds/389-ds-base/pull/6225> - Issue 6227 <https://github.com/389ds/389-ds-base/issues/6227> - dsconf schema does not show inChain matching rule #6228 <https://github.com/389ds/389-ds-base/pull/6228> - Issue 6254 <https://github.com/389ds/389-ds-base/issues/6254> - Enabling replication for a sub suffix crashes browser #6255 <https://github.com/389ds/389-ds-base/pull/6255> - Issue 6256 <https://github.com/389ds/389-ds-base/issues/6256> - nsslapd-numlisteners limit is not enforced - Issue 6265 <https://github.com/389ds/389-ds-base/issues/6265> - lmdb - missing entries in range searches #6266 <https://github.com/389ds/389-ds-base/pull/6266> - Security fixes: - CVE-2024-6237 <https://access.redhat.com/security/cve/CVE-2024-6237> - CVE-2024-5953 <https://access.redhat.com/security/cve/CVE-2024-5953> - CVE-2024-3657 <https://access.redhat.com/security/cve/CVE-2024-3657> - CVE-2024-2199 <https://access.redhat.com/security/cve/CVE-2024-2199> Installation and Upgrade See Download <https://www.port389.org/docs/389ds/download.html> for information about setting up your DNF repositories. To install the server use dnf install 389-ds-base To install the Cockpit UI plugin use dnf install cockpit-389-ds After rpm install completes, run dscreate interactive For upgrades, simply install the package. There are no further steps required. There are no upgrade steps besides installing the new rpms. See Install Guide <https://www.port389.org/docs/389ds/howto/howto-install-389.html> for more information about the initial installation and setup. See Source <https://www.port389.org/docs/389ds/development/source.html> for information about source tarballs and SCM (git) access. Feedback We are very interested in your feedback! Please provide feedback and comments here: - 389-users mailing list: https://lists.fedoraproject.org/admin/lists/389-users.lists.fedoraproject.o… - 389ds discussion channel: https://github.com/389ds/389-ds-base/discussions If you find a bug, or would like to see a new feature, file it in our GitHub project: https://github.com/389ds/389-ds-base *Changelog between 389-ds-base-2.5.1 and 389-ds-base-2.5.2:* - Bump version to 2.5.2 - Issue 6256 <https://github.com/389ds/389-ds-base/issues/6256> - nsslapd-numlisteners limit is not enforced #6257 <https://github.com/389ds/389-ds-base/pull/6257> - Issue 6256 <https://github.com/389ds/389-ds-base/issues/6256> - nsslapd-numlisteners limit is not enforced - Issue 5327 <https://github.com/389ds/389-ds-base/issues/5327> - Fix test metadata - Security fix for CVE-2024-6237 <https://access.redhat.com/security/cve/CVE-2024-6237> - Security fix for CVE-2024-5953 <https://access.redhat.com/security/cve/CVE-2024-5953> - Security fix for CVE-2024-3657 <https://access.redhat.com/security/cve/CVE-2024-3657> - Security fix for CVE-2024-2199 <https://access.redhat.com/security/cve/CVE-2024-2199> - Issue 6265 <https://github.com/389ds/389-ds-base/issues/6265> - lmdb - missing entries in range searches #6266 <https://github.com/389ds/389-ds-base/pull/6266> - Issue 5853 <https://github.com/389ds/389-ds-base/issues/5853> - Update Cargo.lock - Issue 5962 <https://github.com/389ds/389-ds-base/issues/5962> - Rearrange includes for 32-bit support logic - Bump ws from 7.5.9 to 7.5.10 in /src/cockpit/389-console - Bump braces from 3.0.2 to 3.0.3 in /src/cockpit/389-console - Issue 6254 <https://github.com/389ds/389-ds-base/issues/6254> - Enabling replication for a sub suffix crashes browser #6255 <https://github.com/389ds/389-ds-base/pull/6255> - Issue 6155 <https://github.com/389ds/389-ds-base/issues/6155> - ldap-agent fails to start because of permission error #6179 <https://github.com/389ds/389-ds-base/pull/6179> - Issue 6227 <https://github.com/389ds/389-ds-base/issues/6227> - dsconf schema does not show inChain matching rule #6228 <https://github.com/389ds/389-ds-base/pull/6228> - Issue 6224 <https://github.com/389ds/389-ds-base/issues/6224> - d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes #6225 <https://github.com/389ds/389-ds-base/pull/6225> - Issue 5772 <https://github.com/389ds/389-ds-base/issues/5772> - ONE LEVEL search fails to return sub-suffixes #6219 <https://github.com/389ds/389-ds-base/pull/6219> - Issue 6183 <https://github.com/389ds/389-ds-base/issues/6183> - Slow ldif2db import on a newly created BDB backend #6208 <https://github.com/389ds/389-ds-base/pull/6208> - Issue 6188 <https://github.com/389ds/389-ds-base/issues/6188> - Add nsslapd-haproxy-trusted-ip to cn=schema #6201 <https://github.com/389ds/389-ds-base/pull/6201> - Issue 6170 <https://github.com/389ds/389-ds-base/issues/6170> - audit log buffering doesn’t handle large updates - Issue 6193 <https://github.com/389ds/389-ds-base/issues/6193> - Test failure: test_tls_command_returns_error_text - Issue 6189 <https://github.com/389ds/389-ds-base/issues/6189> - CI tests fail with [Errno 2] No such file or directory: '/var/cache/dnf/metadata\_lock.pid' - Issue 6142 <https://github.com/389ds/389-ds-base/issues/6142> - [RFE] Add LMDB configuration related checks into Healthcheck tool #6143 <https://github.com/389ds/389-ds-base/pull/6143> - Issue 6142 <https://github.com/389ds/389-ds-base/issues/6142> - Fix CI tests #6161 <https://github.com/389ds/389-ds-base/pull/6161> - Issue 6141 <https://github.com/389ds/389-ds-base/issues/6141> - freeipa test_topology_TestCASpecificRUVs is failing #6144 <https://github.com/389ds/389-ds-base/pull/6144> - Issue 6136 <https://github.com/389ds/389-ds-base/issues/6136> - failure in freeipa tests #6137 <https://github.com/389ds/389-ds-base/pull/6137> - Issue 5105 <https://github.com/389ds/389-ds-base/issues/5105> - lmdb - Cannot create entries with long rdn - fix covscan #6131 <https://github.com/389ds/389-ds-base/pull/6131> - Issue 6057 <https://github.com/389ds/389-ds-base/issues/6057> - Fix3 - Fix covscan issues #6127 <https://github.com/389ds/389-ds-base/pull/6127> - Issue 6105 <https://github.com/389ds/389-ds-base/issues/6105> - lmdb - Cannot create entries with long rdn #6130 <https://github.com/389ds/389-ds-base/pull/6130> - Issue 6057 <https://github.com/389ds/389-ds-base/issues/6057> - vlv search may result wrong result with lmdb - Fix 2 #6121 <https://github.com/389ds/389-ds-base/pull/6121> - Issue 6057 <https://github.com/389ds/389-ds-base/issues/6057> - vlv search may result wrong result with lmdb #6091 <https://github.com/389ds/389-ds-base/pull/6091> - Issue 6049 <https://github.com/389ds/389-ds-base/issues/6049> - lmdb - changelog is wrongly recreated by reindex task #6050 <https://github.com/389ds/389-ds-base/pull/6050> - Issue 6123 <https://github.com/389ds/389-ds-base/issues/6123> - Allow DNA plugin to reuse global config for bind method and connection protocol #6124 <https://github.com/389ds/389-ds-base/pull/6124> - Issue 6172 <https://github.com/389ds/389-ds-base/issues/6172> - RFE: improve the performance of evaluation of filter component when tested against a large valueset (like group members) #6173 <https://github.com/389ds/389-ds-base/pull/6173>

1 0

Announcing 389 Directory Server 2.4.6
by Viktor Ashirov 31 Jul '24

31 Jul '24

389 Directory Server 2.4.6 The 389 Directory Server team is proud to announce 389-ds-base version 2.4.6. Fedora packages are available on Fedora 39: https://koji.fedoraproject.org/koji/buildinfo?buildID=2518751 - Koji https://bodhi.fedoraproject.org/updates/FEDORA-2024-c8290315df - Bodhi The new packages and versions are: - 389-ds-base-2.4.6 Source tarballs are available for download at GitHub Releases page <https://github.com/389ds/389-ds-base/releases/tag/389-ds-base-2.4.6> - https://github.com/389ds/389-ds-base/releases/download/389-ds-base- 2.4.6/389-ds-base-2.4.6.tar.bz2 <https://github.com/389ds/389-ds-base/releases/download/389-ds-base-2.4.6/38…> Highlights in 2.4.6 - Enhancements - Issue 5842 <https://github.com/389ds/389-ds-base/issues/5842> - Add log buffering to audit log - Issue 6112 <https://github.com/389ds/389-ds-base/issues/6112> - RFE - add new operation note for MFA authentications - Issue 6172 <https://github.com/389ds/389-ds-base/issues/6172> - RFE: improve the performance of evaluation of filter component when tested against a large valueset (like group members) #6173 <https://github.com/389ds/389-ds-base/pull/6173> - Bug fixes - Issue 5487 <https://github.com/389ds/389-ds-base/issues/5487> - Fix various isses with logconv.pl #6085 <https://github.com/389ds/389-ds-base/pull/6085> - Issue 5772 <https://github.com/389ds/389-ds-base/issues/5772> - ONE LEVEL search fails to return sub-suffixes #6219 <https://github.com/389ds/389-ds-base/pull/6219> - Issue 6010 <https://github.com/389ds/389-ds-base/issues/6010> - 389 ds ignores nsslapd-maxdescriptors #6027 <https://github.com/389ds/389-ds-base/pull/6027> - Issue 6032 <https://github.com/389ds/389-ds-base/issues/6032> - Replication broken after backup restore #6035 <https://github.com/389ds/389-ds-base/pull/6035> - Issue 6041 <https://github.com/389ds/389-ds-base/issues/6041> - dscreate ds-root - accepts relative path #6042 <https://github.com/389ds/389-ds-base/pull/6042> - Issue 6061 <https://github.com/389ds/389-ds-base/issues/6061> - Certificate lifetime displayed as NaN - Issue 6080 <https://github.com/389ds/389-ds-base/issues/6080> - ns-slapd crash in referint_get_config #6081 <https://github.com/389ds/389-ds-base/pull/6081> - Issue 6092 <https://github.com/389ds/389-ds-base/issues/6092> - passwordHistory is not updated with a pre-hashed password #6093 <https://github.com/389ds/389-ds-base/pull/6093> - Issue 6110 <https://github.com/389ds/389-ds-base/issues/6110> - Typo in Account Policy plugin message - Issue 6117 <https://github.com/389ds/389-ds-base/issues/6117> - Fix the UTC offset print #6118 <https://github.com/389ds/389-ds-base/pull/6118> - Issue 6123 <https://github.com/389ds/389-ds-base/issues/6123> - Allow DNA plugin to reuse global config for bind method and connection protocol #6124 <https://github.com/389ds/389-ds-base/pull/6124> - Issue 6125 <https://github.com/389ds/389-ds-base/issues/6125> - dscreate interactive fails when chosing mdb backend #6126 <https://github.com/389ds/389-ds-base/pull/6126> - Issue 6170 <https://github.com/389ds/389-ds-base/issues/6170> - audit log buffering doesn’t handle large updates - Issue 6183 <https://github.com/389ds/389-ds-base/issues/6183> - Slow ldif2db import on a newly created BDB backend #6208 <https://github.com/389ds/389-ds-base/pull/6208> - Issue 6224 <https://github.com/389ds/389-ds-base/issues/6224> - d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes #6225 <https://github.com/389ds/389-ds-base/pull/6225> - Issue 6227 <https://github.com/389ds/389-ds-base/issues/6227> - dsconf schema does not show inChain matching rule #6228 <https://github.com/389ds/389-ds-base/pull/6228> - Issue 6254 <https://github.com/389ds/389-ds-base/issues/6254> - Enabling replication for a sub suffix crashes browser #6255 <https://github.com/389ds/389-ds-base/pull/6255> - Issue 6256 <https://github.com/389ds/389-ds-base/issues/6256> - nsslapd-numlisteners limit is not enforced - Security fixes: - CVE-2024-6237 <https://access.redhat.com/security/cve/CVE-2024-6237> - CVE-2024-5953 <https://access.redhat.com/security/cve/CVE-2024-5953> - CVE-2024-3657 <https://access.redhat.com/security/cve/CVE-2024-3657> - CVE-2024-2199 <https://access.redhat.com/security/cve/CVE-2024-2199> Installation and Upgrade See Download <https://www.port389.org/docs/389ds/download.html> for information about setting up your DNF repositories. To install the server use dnf install 389-ds-base To install the Cockpit UI plugin use dnf install cockpit-389-ds After rpm install completes, run dscreate interactive For upgrades, simply install the package. There are no further steps required. There are no upgrade steps besides installing the new rpms. See Install Guide <https://www.port389.org/docs/389ds/howto/howto-install-389.html> for more information about the initial installation and setup. See Source <https://www.port389.org/docs/389ds/development/source.html> for information about source tarballs and SCM (git) access. Feedback We are very interested in your feedback! Please provide feedback and comments here: - 389-users mailing list: https://lists.fedoraproject.org/admin/lists/389-users.lists.fedoraproject.o… - 389ds discussion channel: https://github.com/389ds/389-ds-base/discussions If you find a bug, or would like to see a new feature, file it in our GitHub project: https://github.com/389ds/389-ds-base *Changelog between 389-ds-base-2.4.5 and 389-ds-base-2.4.6:* - Bump version to 2.4.6 - Issue 6256 <https://github.com/389ds/389-ds-base/issues/6256> - nsslapd-numlisteners limit is not enforced #6257 <https://github.com/389ds/389-ds-base/pull/6257> - Issue 6256 <https://github.com/389ds/389-ds-base/issues/6256> - nsslapd-numlisteners limit is not enforced - Issue 5327 <https://github.com/389ds/389-ds-base/issues/5327> - Fix test metadata - Security fix for CVE-2024-6237 <https://access.redhat.com/security/cve/CVE-2024-6237> - Security fix for CVE-2024-5953 <https://access.redhat.com/security/cve/CVE-2024-5953> - Security fix for CVE-2024-3657 <https://access.redhat.com/security/cve/CVE-2024-3657> - Security fix for CVE-2024-2199 <https://access.redhat.com/security/cve/CVE-2024-2199> - Issue 5853 <https://github.com/389ds/389-ds-base/issues/5853> - Update Cargo.lock - Issue 5962 <https://github.com/389ds/389-ds-base/issues/5962> - Rearrange includes for 32-bit support logic - Bump ws from 7.5.9 to 7.5.10 in /src/cockpit/389-console - Bump braces from 3.0.2 to 3.0.3 in /src/cockpit/389-console - Issue 6254 <https://github.com/389ds/389-ds-base/issues/6254> - Enabling replication for a sub suffix crashes browser #6255 <https://github.com/389ds/389-ds-base/pull/6255> - Issue 6227 <https://github.com/389ds/389-ds-base/issues/6227> - dsconf schema does not show inChain matching rule #6228 <https://github.com/389ds/389-ds-base/pull/6228> - Issue 6224 <https://github.com/389ds/389-ds-base/issues/6224> - d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes #6225 <https://github.com/389ds/389-ds-base/pull/6225> - Issue 5772 <https://github.com/389ds/389-ds-base/issues/5772> - ONE LEVEL search fails to return sub-suffixes #6219 <https://github.com/389ds/389-ds-base/pull/6219> - Issue 6183 <https://github.com/389ds/389-ds-base/issues/6183> - Slow ldif2db import on a newly created BDB backend #6208 <https://github.com/389ds/389-ds-base/pull/6208> - Issue 6188 <https://github.com/389ds/389-ds-base/issues/6188> - Add nsslapd-haproxy-trusted-ip to cn=schema #6201 <https://github.com/389ds/389-ds-base/pull/6201> - Issue 6170 <https://github.com/389ds/389-ds-base/issues/6170> - audit log buffering doesn’t handle large updates - Issue 6193 <https://github.com/389ds/389-ds-base/issues/6193> - Test failure: test_tls_command_returns_error_text - Issue 6189 <https://github.com/389ds/389-ds-base/issues/6189> - CI tests fail with [Errno 2] No such file or directory: '/var/cache/dnf/metadata\_lock.pid' - Issue 6123 <https://github.com/389ds/389-ds-base/issues/6123> - Allow DNA plugin to reuse global config for bind method and connection protocol #6124 <https://github.com/389ds/389-ds-base/pull/6124> - Issue 6172 <https://github.com/389ds/389-ds-base/issues/6172> - RFE: improve the performance of evaluation of filter component when tested against a large valueset (like group members) #6173 <https://github.com/389ds/389-ds-base/pull/6173> - Issue 6092 <https://github.com/389ds/389-ds-base/issues/6092> - passwordHistory is not updated with a pre-hashed password #6093 <https://github.com/389ds/389-ds-base/pull/6093> - Issue 6133 <https://github.com/389ds/389-ds-base/issues/6133> - Move slapi_pblock_set_flag_operation_notes() to slapi-plugin.h - Issue 6125 <https://github.com/389ds/389-ds-base/issues/6125> - dscreate interactive fails when chosing mdb backend #6126 <https://github.com/389ds/389-ds-base/pull/6126> - Issue 6110 <https://github.com/389ds/389-ds-base/issues/6110> - Typo in Account Policy plugin message - Issue 6080 <https://github.com/389ds/389-ds-base/issues/6080> - ns-slapd crash in referint_get_config #6081 <https://github.com/389ds/389-ds-base/pull/6081> - Issue 6117 <https://github.com/389ds/389-ds-base/issues/6117> - Fix the UTC offset print #6118 <https://github.com/389ds/389-ds-base/pull/6118> - Issue 5305 <https://github.com/389ds/389-ds-base/issues/5305> - Open LDAP version autodetection doesn’t work - Issue 6112 <https://github.com/389ds/389-ds-base/issues/6112> - RFE - add new operation note for MFA authentications - Issue 5842 <https://github.com/389ds/389-ds-base/issues/5842> - Add log buffering to audit log - Issue 3527 <https://github.com/389ds/389-ds-base/issues/3527> - Support HAProxy and Instance on the same machine configuration #6107 <https://github.com/389ds/389-ds-base/pull/6107> - Issue 6103 <https://github.com/389ds/389-ds-base/issues/6103> - New connection timeout error breaks errormap #6104 <https://github.com/389ds/389-ds-base/pull/6104> - Issue 6067 <https://github.com/389ds/389-ds-base/issues/6067> - Improve dsidm CLI No Such Entry handling #6079 <https://github.com/389ds/389-ds-base/pull/6079> - Issue 6096 <https://github.com/389ds/389-ds-base/issues/6096> - Improve connection timeout error logging #6097 <https://github.com/389ds/389-ds-base/pull/6097> - Issue 6010 <https://github.com/389ds/389-ds-base/issues/6010> - 389 ds ignores nsslapd-maxdescriptors #6027 <https://github.com/389ds/389-ds-base/pull/6027> - Issue 6067 <https://github.com/389ds/389-ds-base/issues/6067> - Add hidden -v and -j options to each CLI subcommand #6088 <https://github.com/389ds/389-ds-base/pull/6088> - Issue 5487 <https://github.com/389ds/389-ds-base/issues/5487> - Fix various isses with logconv.pl #6085 <https://github.com/389ds/389-ds-base/pull/6085> - Issue 6052 <https://github.com/389ds/389-ds-base/issues/6052> - Paged results test sets hostname to localhost on test collection - Issue 6061 <https://github.com/389ds/389-ds-base/issues/6061> - Certificate lifetime displayed as NaN - Issue 6043 <https://github.com/389ds/389-ds-base/issues/6043>, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both #6045 <https://github.com/389ds/389-ds-base/pull/6045> - Issue 3555 <https://github.com/389ds/389-ds-base/issues/3555> - Remove audit-ci from dependencies #6056 <https://github.com/389ds/389-ds-base/pull/6056> - Issue 6047 <https://github.com/389ds/389-ds-base/issues/6047> - Add a check for tagged commits - Issue 6041 <https://github.com/389ds/389-ds-base/issues/6041> - dscreate ds-root - accepts relative path #6042 <https://github.com/389ds/389-ds-base/pull/6042> - Issue 6032 <https://github.com/389ds/389-ds-base/issues/6032> - Replication broken after backup restore #6035 <https://github.com/389ds/389-ds-base/pull/6035> - Issue 6034 <https://github.com/389ds/389-ds-base/issues/6034> - Change replica_id from str to int

1 0

How do we set lastLoginHistorySize?
by Grant Byers 24 Jul '24

24 Jul '24

Hi, We've recently migrated our multi-supplier, multi-consumer 389 infra from 2.0.x to 2.2.9. The migration was relatively painless, but our logs are currently flooded with messages like the following; [24/Jul/2024:11:10:10.499567264 +0000] - ERR - acct_update_login_history - Modify error 20 on entry 'uid=xxxxx,ou=people,dc=example,dc=net' [24/Jul/2024:11:10:10.696468976 +0000] - ERR - attrlist_replace - attr_replace (lastLoginHistory, 20240724111004Z) failed. There's a bug report for this that matches ours[1], and the issue appears to have been addressed. It doesn't appear to have been addressed in 2.2.9 however, which is the latest version available in the copr repo[2] that effectively replaced epel8-modular. We have the AccountPolicy plugin enabled only to record lastLoginTime (a requirement from our security team), so we can't just disable it. We also use password policy, so we chain binds from consumers to suppliers. I've seen mention that the lastLoginHistory attribute can be disabled by setting lastLoginHistorySize to 0. I can't find any documentation on this anywhere though. I've tried setting it in the AccountPolicyPlugin config & also directly in cn=config, unsuccessfully. What are our options? Thanks, Grant [1] https://github.com/389ds/389-ds-base/issues/5834 [2] https://copr.fedorainfracloud.org/coprs/g/389ds/389-directory-server/

2 3

Re: where to find doc "What's new in 389-DS" last releases
by isabella.ghiurea＠nrc-cnrc.gc.ca 24 Jul '24

24 Jul '24

The content of this message was lost. It was probably cross-posted to multiple lists and previously handled on another list.

3 2

where to find doc "What's new in 389-DS" last releases
by Ghiurea, Isabella 23 Jul '24

23 Jul '24

Hello User 389-ds, I am looking over 389-ds.org website can not find the link to whats new in last versions for 389-ds for RHEL 8/9 ? I know there are bug fixes but how about what has been changed or new functionality ? thanks

2 1

Replication weirdness with 3.0.1 mdb instance
by tdarby＠arizona.edu 17 Jul '24

17 Jul '24

I have several 389ds instances using MMR, but only one at the moment that uses 3.0.1 and the new mdb. It's an instance I'm building from scratch and I script it with config files that are similar to the 2.5 instances. When I initiate replication, what I see is that it finishes without errors but only sends approx. 1000 entries to the consumer (there are over 1M entries). I've looked at all the config attributes that I'm aware of and I'm stumped. Can you think of anything that would prevent a replication account from sending over more than 1000 entries? Here's a typical snippet from the logs for this: [02/Jul/2024:17:22:05.137366809 +0000] - NOTICE - NSMMReplicationPlugin - multisupplier_be_state_change - Replica ou=netid,ou=ccit,o=university of arizona,c=us is going offline; disabling replication [02/Jul/2024:17:22:07.913831452 +0000] - INFO - dbmdb_import_monitor_threads - import dsroot: Import writer thread usage: run: 9.31% read: 69.38% write: 19.17% pause: 0.99% txnbegin: 0.00% txncommit: 1.15% [02/Jul/2024:17:22:07.978516129 +0000] - INFO - dbmdb_import_monitor_threads - import dsroot: Workers finished; cleaning up... [02/Jul/2024:17:22:07.981201324 +0000] - INFO - dbmdb_import_monitor_threads - import dsroot: Workers cleaned up. [02/Jul/2024:17:22:07.983442852 +0000] - INFO - dbmdb_public_dbmdb_import_main - import dsroot: Indexing complete. Post-processing... [02/Jul/2024:17:22:07.985709898 +0000] - INFO - dbmdb_public_dbmdb_import_main - import dsroot: Generating numsubordinates (this may take several minutes to complete)... [02/Jul/2024:17:22:07.991134437 +0000] - INFO - dbmdb_public_dbmdb_import_main - import dsroot: Generating numSubordinates complete. [02/Jul/2024:17:22:07.993601582 +0000] - INFO - dbmdb_public_dbmdb_import_main - import dsroot: Flushing caches... [02/Jul/2024:17:22:07.995667599 +0000] - INFO - dbmdb_public_dbmdb_import_main - import dsroot: Closing files... [02/Jul/2024:17:22:07.997941832 +0000] - INFO - dbmdb_public_dbmdb_import_main - import dsroot: Import complete. Processed 1097 entries in 3 seconds. (365.67 entries/sec)

5 6

help
by kamakshya nayak 17 Jul '24

17 Jul '24

I have a cascading multi setup 389-ds. I observed that on my supplier, hub and consumer are doing good in terms of replication. They are healthy. What I observe is supplier and hub is doing good with replication and size of changelog.db for one of the backend suffix is less. But, consumer changelog.db disk space utilization is more around 34 Gb and supplier and hub changelog.db disk space utilization is 40 mb. What could be the issue and why it's utilizing that high disk space for changelog.db ? And, why a consumer is holding changelog.db file.. where could be the issue. Thank you.

3 2

Enable SSHA hashing scheme
by Ralf Spenneberg 04 Jul '24

04 Jul '24

Hi there, I am trying to update a ldap tree from 389ds 1.3.11 (centos7) to 2.4.5 (almalinux9). After migrating the tree all passwords stop working including the Directory Manager. The old tree used SSHA. Setting the rootpwstoragescheme does not help for the Directory Manager. Only manually resetting the passwords using pwdhash in the dse.ldif file and using a PBKDF2-SHA512 password works. Is there a way to enable the old SSHA scheme? Kind regards, Ralf

6 16

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

389-users July 2024