389-users February 2025

389-users@lists.fedoraproject.org

7 participants
7 discussions

New error messages with EL9
by Orion Poplawski 06 Mar '25

06 Mar '25

We recently updated all 6 of our IPA replicas to EL9 and so we're monitoring them closely for any issues. I've seen the following message in the slapd errors log a couple of times on different servers and am wondering if it is anything to be concerned about: [02/Feb/2025:20:27:54.176404718 -0700] - WARN - content-sync-plugin - sync_update_persist_betxn_pre_op - DB retried operation targets "dc=nwra,dc=com" (op=0x7f840be70e00 idx_pl=0) => op not changed in PL [02/Feb/2025:20:57:56.553507369 -0700] - ERR - decode_repl_ext_response - decoding failed: response_code (Ok) ruv_bervals (Ok) data_guid (Ok) data (Ok) bvdata (No data) [02/Feb/2025:20:57:56.555181048 -0700] - ERR - NSMMReplicationPlugin - release_replica - agmt="cn=IPA2-IPA1" (IPA1:389): Unable to parse the response to the endReplication extended operation. Thanks, Orion -- Orion Poplawski he/him/his - surely the least important thing about me IT Systems Manager 720-772-5637 NWRA, Boulder/CoRA Office FAX: 303-415-9702 3380 Mitchell Lane orion(a)nwra.com Boulder, CO 80301 https://www.nwra.com/

2 7

Odd behavior on dsconf backend export
by CHAMBERLAIN James 28 Feb '25

28 Feb '25

When I back up my directory server, I see a bunch of entries in the resulting LDIF which only include the RDN rather than the full DN. Here is one example: # entry-id: 3 dn: ou=Groups nsUniqueId: 59ac5a03-1dce11ee-ae5b886f-9de8b2ea objectClass: top objectClass: organizationalunit ou: Groups creatorsName: cn=directory manager modifiersName: cn=directory manager createTimestamp: 20230708203145Z modifyTimestamp: 20230708203145Z I can’t find that entry when I search for its nsUniqueId. Restoring the LDIF to a new DS on a fresh OS install must put the entries in there, as they show up in the new system's backups; but ldapsearch can’t find them and affected user accounts are unusable. The command I’m using for the backup is: /usr/sbin/dsconf -D "$bind_dn" -y $pass_file ldap://localhost backend export -l $ldif_file userRoot The command for restores is likewise: /usr/sbin/dsconf -vvv -D "$bind_dn" -y $pass_file ldap://localhost backend import userRoot $ldif_file We loop checking the status of the import task, and when it has completed run a reindex. The LDIF file has 16,000 entries: 10000 with “good” DNs and 6000 with “bad” DNs: $ grep "^dn:" userRoot-latest.ldif | grep ',' | wc -l 9953 $ grep "^dn:" userRoot-latest.ldif | grep -v ',' | wc -l 5957 My system is running Rocky Linux 8.10 with 389-ds-base-2.0.15-1.module_el8+14185+adb3f555.x86_64. Anyone have any idea what’s going on, and how I might fix it? Have I missed something in the documentation? Thanks, James This email and any attachments are intended solely for the use of the individual or entity to whom it is addressed and may be confidential and/or privileged. If you are not one of the named recipients or have received this email in error, (i) you should not read, disclose, or copy it, (ii) please notify sender of your receipt by reply email and delete this email and all attachments, (iii) Dassault Systèmes does not accept or assume any liability or responsibility for any use of or reliance on this email. Please be informed that your personal data are processed according to our data privacy policy as described on our website. Should you have any questions related to personal data protection, please contact 3DS Data Protection Officer https://www.3ds.com/privacy-policy/contact/

1 0

Debugging schema replication errors
by John Thurston 20 Feb '25

20 Feb '25

We have a three-server installation; one R/W, replicating to two R/O instances. They are running 389-Directory/2.5.2 On the R/W instance, we are seeing a steady stream of errors of like: > ERR - NSMMReplicationPlugin - agmt="cn=S1" (az1:636): Schema > replication update failed: Constraint violation > ERR - NSMMReplicationPlugin - agmt="cn=S1" (az1:636): Warning: unable > to replicate schema: rc=1 for both replication targets (i.e. both S1 and S2) I've exported, and examined, the replication change log. I don't see anything in it I don't expect to see. It's full of normal, day-to-day attribute adjustments. I think the next step is enabling replication logging on a consumer. And I think this is accomplished by adding 8,192 to the value in nsslapd-errorlog-level of cn=config On our test servers, I've found I can change this value by stopping the instance and editing the dse.ldif Is there another way to do this which does not require stopping and starting the instance? -- -- Do things because you should, not just because you can. John Thurston 907-465-8591 John.Thurston(a)alaska.gov Department of Administration State of Alaska

2 1

Re: Adding the source IP to All slapd logs
by Florian GESLOT 19 Feb '25

19 Feb '25

Hello Thierry, Thank you very much for your response ! Yes, indeed, I have tried OpenLDAP and 389DS numerous times to see if either of them offers a solution. If I go through my 389 logs, the results are almost equivalent. I get this type of log from 389: [19/Feb/2025:10:46:57.918666986 +0000] conn=99 fd=65 slot=65 connection from 192.168.1.100 to 192.168.1.111 [19/Feb/2025:10:46:57.919765771 +0000] conn=99 op=0 BIND dn="cn=Directory Manager" method=128 version=3 [19/Feb/2025:10:46:57.951976255 +0000] conn=99 op=0 RESULT err=0 tag=97 nentries=0 wtime=0.000183881 optime=0.032260351 etime=0.032440135 dn="cn=directory manager" [19/Feb/2025:10:46:57.953472603 +0000] conn=99 op=1 SRCH base="dc=example,dc=com" scope=2 filter="(objectClass=*)" attrs="* aci" [19/Feb/2025:10:46:57.953600654 +0000] conn=99 op=1 RESULT err=32 tag=101 nentries=0 wtime=0.000169513 optime=0.000132287 etime=0.000297635 [19/Feb/2025:10:46:57.954663998 +0000] conn=99 op=2 UNBIND [19/Feb/2025:10:46:57.954685151 +0000] conn=99 op=2 fd=65 Disconnect - Cleanly Closed Connection - U1 Whereas I would like to have the IPs on all the lines, something that looks like this: [19/Feb/2025:10:46:57.918666986 +0000] conn=99 fd=65 slot=65 connection from 192.168.1.100 to 192.168.1.111 [19/Feb/2025:10:46:57.919765771 +0000] conn=99 op=0 BIND dn="cn=Directory Manager" method=128 version=3 from ip 192.168.1.100 [19/Feb/2025:10:46:57.951976255 +0000] conn=99 op=0 RESULT err=0 tag=97 nentries=0 wtime=0.000183881 optime=0.032260351 etime=0.032440135 dn="cn=directory manager" from ip 192.168.1.100 [19/Feb/2025:10:46:57.953472603 +0000] conn=99 op=1 SRCH base="dc=example,dc=com" scope=2 filter="(objectClass=*)" attrs="* aci" from ip 192.168.1.100 [19/Feb/2025:10:46:57.953600654 +0000] conn=99 op=1 RESULT err=32 tag=101 nentries=0 wtime=0.000169513 optime=0.000132287 etime=0.000297635 from ip 192.168.1.100 [19/Feb/2025:10:46:57.954663998 +0000] conn=99 op=2 UNBIND from ip 192.168.1.100 [19/Feb/2025:10:46:57.954685151 +0000] conn=99 op=2 fd=65 Disconnect - Cleanly Closed Connection - U1 from ip 192.168.1.100 Is there a specific configuration in 389DS to achieve this result? Sincerely, Florian

2 1

Adding the source IP to All slapd logs
by florian geslot 19 Feb '25

19 Feb '25

Hello everyone, I’m looking for a solution to add the source IP address to all logs generated by slapd. The goal is to be able to identify where all requests are coming from, whether it's authentication, search queries, or entry modifications in the LDAP server. I would like this IP address to be included in every log entry, regardless of the event being logged, to make it easier to analyze and track actions performed on the server. I know there is a session ID used to track all queries, and this field can be used to find the source IP, but this is not convenient in my case. Basic logs are like this: 2025-02-18T21:19:45.742134+00:00 c4502f9415ba slapd[13]: conn=1001 fd=11 ACCEPT from IP=172.17.0.1:40632 (IP=0.0.0.0:389) 2025-02-18T21:19:45.742880+00:00 c4502f9415ba slapd[13]: conn=1001 op=0 do_bind 2025-02-18T21:19:45.742973+00:00 c4502f9415ba slapd[13]: conn=1001 op=0 BIND dn="" method=128 2025-02-18T21:19:45.743018+00:00 c4502f9415ba slapd[13]: send_ldap_result: conn=1001 op=0 p=3 2025-02-18T21:19:45.744072+00:00 c4502f9415ba slapd[13]: conn=1001 op=0 RESULT tag=97 err=0 qtime=0.000075 etime=0.001256 text= But I want these logs to include the IP in every entry: 2025-02-18T21:19:45.742134+00:00 c4502f9415ba slapd[13]: conn=1001 fd=11 ACCEPT from IP=172.17.0.1:40632 (IP=0.0.0.0:389) 2025-02-18T21:19:45.742880+00:00 c4502f9415ba slapd[13]: conn=1001 op=0 do_bind from IP=172.17.0.1:40632 2025-02-18T21:19:45.742973+00:00 c4502f9415ba slapd[13]: conn=1001 op=0 BIND dn="" method=128 from IP=172.17.0.1:40632 2025-02-18T21:19:45.743018+00:00 c4502f9415ba slapd[13]: send_ldap_result: conn=1001 op=0 p=3 from IP=172.17.0.1:40632 2025-02-18T21:19:45.744072+00:00 c4502f9415ba slapd[13]: conn=1001 op=0 RESULT tag=97 err=0 qtime=0.000075 etime=0.001256 text= from IP=172.17.0.1:40632 If anyone has already implemented this functionality or has any advice on how to configure this in slapd, I would greatly appreciate your feedback. I have tried many slapd and rsyslog configurations, but nothing has worked so far. Thank you in advance for your help!

2 1

Announcing 389 Directory Server 3.1.2
by Viktor Ashirov 14 Feb '25

14 Feb '25

389 Directory Server 3.1.2 The 389 Directory Server team is proud to announce 389-ds-base version 3.1.2. Fedora packages are available on Fedora 41: https://koji.fedoraproject.org/koji/buildinfo?buildID=2659487 - Koji https://bodhi.fedoraproject.org/updates/FEDORA-2025-1c874c201f - Bodhi The new packages and versions are: - 389-ds-base-3.1.2 Source tarballs are available for download at GitHub Releases page <https://github.com/389ds/389-ds-base/releases/tag/389-ds-base-3.1.2> - https://github.com/389ds/389-ds-base/releases/download/389-ds-base-3.1.2/38… Highlights in 3.1.2 - Enhancements - Issue 3342 <https://github.com/389ds/389-ds-base/issues/3342> - RFE logconv.pl should have a replacement in CLI tools #6444 <https://github.com/389ds/389-ds-base/pull/6444> - Issue 6269 <https://github.com/389ds/389-ds-base/issues/6269> - RFE - Add nsslapd-pwdPBKDF2Rounds configuration to PBKDF2-* plugins #6447 <https://github.com/389ds/389-ds-base/pull/6447> - Issue 6468 <https://github.com/389ds/389-ds-base/issues/6468> - RFE - CLI - Add logging settings to dsconf - Issue 6367 <https://github.com/389ds/389-ds-base/issues/6367> - RFE support of Session Tracking Control internet draft #6403 <https://github.com/389ds/389-ds-base/pull/6403> - Issue 6340 <https://github.com/389ds/389-ds-base/issues/6340> - RFE - extract keys once #6413 <https://github.com/389ds/389-ds-base/pull/6413> - Issue 6349 <https://github.com/389ds/389-ds-base/issues/6349> - RFE - Use previously extracted key path #6363 <https://github.com/389ds/389-ds-base/pull/6363> - Issue 6304 <https://github.com/389ds/389-ds-base/issues/6304> - RFE when memberof is enabled, defer updates of members from the update of the group #6305 <https://github.com/389ds/389-ds-base/pull/6305> - Issue 5842 <https://github.com/389ds/389-ds-base/issues/5842> - Add log buffering for error log - Bug fixes Installation and Upgrade See Download <https://www.port389.org/docs/389ds/download.html> for information about setting up your DNF repositories. To install the server use dnf install 389-ds-base To install the Cockpit UI plugin use dnf install cockpit-389-ds After rpm install completes, run dscreate interactive For upgrades, simply install the package. There are no further steps required. There are no upgrade steps besides installing the new rpms. See Install Guide <https://www.port389.org/docs/389ds/howto/howto-install-389.html> for more information about the initial installation and setup. See Source <https://www.port389.org/docs/389ds/development/source.html> for information about source tarballs and SCM (git) access. Feedback We are very interested in your feedback! Please provide feedback and comments here: - 389-users mailing list: https://lists.fedoraproject.org/admin/lists/389-users.lists.fedoraproject.o… - 389ds discussion channel: https://github.com/389ds/389-ds-base/discussions If you find a bug, or would like to see a new feature, file it in our GitHub project: https://github.com/389ds/389-ds-base Changelog between 389-ds-base-3.1.1 and 389-ds-base-3.1.2: - Bump version to 3.1.2 - Issue 3342 <https://github.com/389ds/389-ds-base/issues/3342> - RFE logconv.pl should have a replacement in CLI tools #6444 <https://github.com/389ds/389-ds-base/pull/6444> - Issue 6531 <https://github.com/389ds/389-ds-base/issues/6531> - Fix CI Tests - Decrease mdb map size for large topologies #6532 <https://github.com/389ds/389-ds-base/pull/6532> - Issue 6359 <https://github.com/389ds/389-ds-base/issues/6359> - Fix incorrect License tag - Issue 6424 <https://github.com/389ds/389-ds-base/issues/6424> - Filling in dsidm group tests - Issue 6516 <https://github.com/389ds/389-ds-base/issues/6516> - Allow to configure the password scheme not updated on bind #6517 <https://github.com/389ds/389-ds-base/pull/6517> - Issue 6521 <https://github.com/389ds/389-ds-base/issues/6521> - Typo in dsidm (unique)group add_member prompt - Issue 6523 <https://github.com/389ds/389-ds-base/issues/6523> - dsidm uniquegroup members not implemented - Issue 6513 <https://github.com/389ds/389-ds-base/issues/6513> - Add basic dsidm uniquegroup tests - Issue 6525 <https://github.com/389ds/389-ds-base/issues/6525> - Fix srpm generation in COPR - Issue 6505 <https://github.com/389ds/389-ds-base/issues/6505> - Add basic dsidm role tests - Issue 6509 <https://github.com/389ds/389-ds-base/issues/6509> - Race condition with Paged Result searches - Issue 6507 <https://github.com/389ds/389-ds-base/issues/6507> - changelog modifiers operation not displayed in dbscan #6511 <https://github.com/389ds/389-ds-base/pull/6511> - Issue 6453 <https://github.com/389ds/389-ds-base/issues/6453> - (cont) Fix memory leaks in entryrdn #6504 <https://github.com/389ds/389-ds-base/pull/6504> - Issue 6481 <https://github.com/389ds/389-ds-base/issues/6481> - UI - When ports that are in use are used to update a DS instance the error message is not helpful #6482 <https://github.com/389ds/389-ds-base/pull/6482> - Issue 6497 <https://github.com/389ds/389-ds-base/issues/6497> - lib389 - Configure replication for multiple suffixes #6498 <https://github.com/389ds/389-ds-base/pull/6498> - Issue 6470 <https://github.com/389ds/389-ds-base/issues/6470> - Some replication status data are reset upon a restart #6471 <https://github.com/389ds/389-ds-base/pull/6471> - Issue 6453 <https://github.com/389ds/389-ds-base/issues/6453> - Fix memory leaks in entryrdn - Issue 6490 <https://github.com/389ds/389-ds-base/issues/6490> - Add a new macro function and print rounds on startup #6496 <https://github.com/389ds/389-ds-base/pull/6496> - Issue 6494 <https://github.com/389ds/389-ds-base/issues/6494> - Various errors when using extended matching rule on vlv sort filter #6495 <https://github.com/389ds/389-ds-base/pull/6495> - Issue 6417 <https://github.com/389ds/389-ds-base/issues/6417> - (3rd) If an entry RDN is identical to the suffix, then Entryrdn gets broken during a reindex #6480 <https://github.com/389ds/389-ds-base/pull/6480> - Issue 6490 <https://github.com/389ds/389-ds-base/issues/6490> - Remove the rust error log message for pbkdf2 rounds - Issue 6485 <https://github.com/389ds/389-ds-base/issues/6485> - Fix double free in USN cleanup task - Issue 6483 <https://github.com/389ds/389-ds-base/issues/6483> - CI - fix filter_test - test_match_large_valueset - Issue 6269 <https://github.com/389ds/389-ds-base/issues/6269> - RFE - Add nsslapd-pwdPBKDF2Rounds configuration to PBKDF2-* plugins #6447 <https://github.com/389ds/389-ds-base/pull/6447> - Issue 6478 <https://github.com/389ds/389-ds-base/issues/6478> - fix compilation warning related to deferred memberof delay #6479 <https://github.com/389ds/389-ds-base/pull/6479> - Issue 6372 <https://github.com/389ds/389-ds-base/issues/6372> - Deadlock while doing online backup #6475 <https://github.com/389ds/389-ds-base/pull/6475> - Issue 6438 <https://github.com/389ds/389-ds-base/issues/6438> - Add basic dsidm organizational unit tests - Issue 6439 <https://github.com/389ds/389-ds-base/issues/6439> - Fix dsidm service get_dn option - Issue 6468 <https://github.com/389ds/389-ds-base/issues/6468> - CLI - Remove security log settings that don't exist - Issue 6468 <https://github.com/389ds/389-ds-base/issues/6468> - RFE - CLI - Add logging settings to dsconf - Issue 6472 <https://github.com/389ds/389-ds-base/issues/6472> - CLI - Improve error message format - Issue 6417 <https://github.com/389ds/389-ds-base/issues/6417> - (2nd) If an entry RDN is identical to the suffix, then Entryrdn gets broken during a reindex #6460 <https://github.com/389ds/389-ds-base/pull/6460> - Issue 6459 <https://github.com/389ds/389-ds-base/issues/6459> - crash on 3.0/3.1 branch #6461 <https://github.com/389ds/389-ds-base/pull/6461> - Issue 6368 <https://github.com/389ds/389-ds-base/issues/6368> - Fix crash when testing access json logging - Issue 6464 <https://github.com/389ds/389-ds-base/issues/6464> - UI - Fixed spelling in cockpit messages - PR 6462 - UI - Fix spelling error in cockpit-389-ds certificateManagement.jsx - Issue 6441 <https://github.com/389ds/389-ds-base/issues/6441> - Add basic dsidm posixgroup tests - Issue 6442 <https://github.com/389ds/389-ds-base/issues/6442> - Fix latest covscan memory leaks (part 2) - Issue 6442 <https://github.com/389ds/389-ds-base/issues/6442> - Fix latest covscan memory leaks - Issue 3555 <https://github.com/389ds/389-ds-base/issues/3555> - UI - Fix issues reported by npm audit - Issue 6368 <https://github.com/389ds/389-ds-base/issues/6368> - fix basic test suite - Issue 6446 <https://github.com/389ds/389-ds-base/issues/6446> - on replica consumer, account policy plugin fails to manage the last login history #6448 <https://github.com/389ds/389-ds-base/pull/6448> - Issue 6424 <https://github.com/389ds/389-ds-base/issues/6424> - Add basic dsidm group tests - Issue 6258 <https://github.com/389ds/389-ds-base/issues/6258> - Mitigate race condition in paged_results_test.py #6433 <https://github.com/389ds/389-ds-base/pull/6433> - Issue 6432 <https://github.com/389ds/389-ds-base/issues/6432> - Crash during bind when acct policy plugin does not have "alwaysrecordlogin" set - Issue 5798 <https://github.com/389ds/389-ds-base/issues/5798> - Fix dsconf config multi-valued attr operations #6426 <https://github.com/389ds/389-ds-base/pull/6426> - Issue 6302 <https://github.com/389ds/389-ds-base/issues/6302> - Allow to run replication status without a prompt #6410 <https://github.com/389ds/389-ds-base/pull/6410> - Issue 6368 <https://github.com/389ds/389-ds-base/issues/6368> - UI - fix regression with onChange parameters for new - Issue 6268 - write access log format infrastructure (part 1) - Issue 6427 <https://github.com/389ds/389-ds-base/issues/6427> - fix various memory leaks - Issue 6375 <https://github.com/389ds/389-ds-base/issues/6375> - UI - Update cockpit.js code to the latest version #6376 <https://github.com/389ds/389-ds-base/pull/6376> - Issue 6417 <https://github.com/389ds/389-ds-base/issues/6417> - If an entry RDN is identical to the suffix, then Entryrdn gets broken during a reindex #6418 <https://github.com/389ds/389-ds-base/pull/6418> - Issue 6367 <https://github.com/389ds/389-ds-base/issues/6367> - RFE support of Session Tracking Control internet draft #6403 <https://github.com/389ds/389-ds-base/pull/6403> - Issue 6422 <https://github.com/389ds/389-ds-base/issues/6422> - test_db_home_dir_online_backup CI test break other tests #6423 <https://github.com/389ds/389-ds-base/pull/6423> - Issue 6340 <https://github.com/389ds/389-ds-base/issues/6340> - RFE - extract keys once #6413 <https://github.com/389ds/389-ds-base/pull/6413> - Issue 6415 <https://github.com/389ds/389-ds-base/issues/6415> - BUG - Incorrect icu linking #6416 <https://github.com/389ds/389-ds-base/pull/6416> - Issue 6420 <https://github.com/389ds/389-ds-base/issues/6420> - Update dsidm user get_dn test #6421 <https://github.com/389ds/389-ds-base/pull/6421> - Issue 6258 <https://github.com/389ds/389-ds-base/issues/6258> - Resolve race condition for two tests in health_config.py - Bump cross-spawn from 7.0.3 to 7.0.6 in /src/cockpit/389-console #6407 <https://github.com/389ds/389-ds-base/pull/6407> - Issue 6386 <https://github.com/389ds/389-ds-base/issues/6386> - backup/restore broken after db log rotation #6406 <https://github.com/389ds/389-ds-base/pull/6406> - Issue 6401 <https://github.com/389ds/389-ds-base/issues/6401> - Remove logging macros - Issue 6404 <https://github.com/389ds/389-ds-base/issues/6404> - UI - Add npm pretter package - Issue 6374 <https://github.com/389ds/389-ds-base/issues/6374> - nsslapd-mdb-max-dbs autotuning doesn't work properly #6400 <https://github.com/389ds/389-ds-base/pull/6400> - Issue 5842 <https://github.com/389ds/389-ds-base/issues/5842> - Add log buffering for error log - Issue 6397 <https://github.com/389ds/389-ds-base/issues/6397> - Remove deprecated setting for HR time stamps in logs - Issue 6390 <https://github.com/389ds/389-ds-base/issues/6390> - Adjust cleanAllRUV max per txn and interval limits - Issue 6349 <https://github.com/389ds/389-ds-base/issues/6349> - RFE - extract keys once #6363 <https://github.com/389ds/389-ds-base/pull/6363> #6363 <https://github.com/389ds/389-ds-base/pull/6363> - Issue 6387 <https://github.com/389ds/389-ds-base/issues/6387> - Use make macro in the spec file - Issue 6359 <https://github.com/389ds/389-ds-base/issues/6359> - Add exception to GPL license in license tag - Issue 6381 <https://github.com/389ds/389-ds-base/issues/6381> - CleanAllRUV - move changelog purging to the very end of the task - Issue 5920 <https://github.com/389ds/389-ds-base/issues/5920> - pamModuleIsThreadSafe is missing in the schema - Issue 6377 <https://github.com/389ds/389-ds-base/issues/6377> - syntax error in setup.py #6378 <https://github.com/389ds/389-ds-base/pull/6378> - Issue 6349 <https://github.com/389ds/389-ds-base/issues/6349> - RFE - Use previously extracted key path #6363 <https://github.com/389ds/389-ds-base/pull/6363> - Issue 6067 <https://github.com/389ds/389-ds-base/issues/6067> - Update dsidm to prioritize basedn from .dsrc over interactive input #6362 <https://github.com/389ds/389-ds-base/pull/6362> - Issue 6347 <https://github.com/389ds/389-ds-base/issues/6347> - better fix for desyncronized vlv cache #6358 <https://github.com/389ds/389-ds-base/pull/6358> - Issue 6243 <https://github.com/389ds/389-ds-base/issues/6243> - dsctl bdb2mdb should cleanly fail if bundled libdb is not available #6351 <https://github.com/389ds/389-ds-base/pull/6351> - Issue 6331 <https://github.com/389ds/389-ds-base/issues/6331> - UI - Instance fails to load when DB backup directory doesn't exist #6332 <https://github.com/389ds/389-ds-base/pull/6332> - Issue 6356 <https://github.com/389ds/389-ds-base/issues/6356> - On LMDB, after an update the impact VLV index, the vlv recno cache is not systematically cleared #6357 <https://github.com/389ds/389-ds-base/pull/6357> - Issue 6056 <https://github.com/389ds/389-ds-base/issues/6056> - WebUI supports only instances with BDB #6299 <https://github.com/389ds/389-ds-base/pull/6299> - Issue 6339 <https://github.com/389ds/389-ds-base/issues/6339> - Address Coverity scan issues in memberof and bdb_layer #6353 <https://github.com/389ds/389-ds-base/pull/6353> - Issue 6328 <https://github.com/389ds/389-ds-base/issues/6328> - vlv control may not be logged #6354 <https://github.com/389ds/389-ds-base/pull/6354> - Issue 6347 <https://github.com/389ds/389-ds-base/issues/6347> - VLV search sometime fails with operation error #6349 <https://github.com/389ds/389-ds-base/pull/6349> - Issue 6343 <https://github.com/389ds/389-ds-base/issues/6343> - Improve online import robustness when the server is under load - Issue 6345 <https://github.com/389ds/389-ds-base/issues/6345> - Ensure all slapi_log_err calls end format strings with newline character \n #6346 <https://github.com/389ds/389-ds-base/pull/6346> - Issue 6064 <https://github.com/389ds/389-ds-base/issues/6064> - bdb2mdb shows errors #6341 <https://github.com/389ds/389-ds-base/pull/6341> - Issue 6336 <https://github.com/389ds/389-ds-base/issues/6336> - Fix failing CI tests (roles) due to slow import #6337 <https://github.com/389ds/389-ds-base/pull/6337> - Fix duplicate detection logic by ensuring exact match on string length #6333 <https://github.com/389ds/389-ds-base/pull/6333> - Issue 6304 <https://github.com/389ds/389-ds-base/issues/6304> - RFE when memberof is enabled, defer updates of members from the update of the group #6305 <https://github.com/389ds/389-ds-base/pull/6305> - Issue 6329 <https://github.com/389ds/389-ds-base/issues/6329> - lmdb typo in error log notice message #6330 <https://github.com/389ds/389-ds-base/pull/6330> - Issue 6324 <https://github.com/389ds/389-ds-base/issues/6324> - Provide more information in the error message during setup_ol_tls_conn() #6325 <https://github.com/389ds/389-ds-base/pull/6325> - Issue 5965 <https://github.com/389ds/389-ds-base/issues/5965> - UI, CLI - Fix Account Policy Plugin functionality issues #6323 <https://github.com/389ds/389-ds-base/pull/6323> - Issue 6188 <https://github.com/389ds/389-ds-base/issues/6188> - Check if nsslapd-haproxy-trusted-ip attribute is returned in default schema - Issue 6319 <https://github.com/389ds/389-ds-base/issues/6319> - bdb subpackage has %description in the wrong place - Issue 6321 <https://github.com/389ds/389-ds-base/issues/6321> - lib389 get_db_lib function may returns the wrong db type #6322 <https://github.com/389ds/389-ds-base/pull/6322> - Issue 6245 <https://github.com/389ds/389-ds-base/issues/6245> - Fix some other coverity scan regressions #6273 <https://github.com/389ds/389-ds-base/pull/6273> - Issue 6316 <https://github.com/389ds/389-ds-base/issues/6316> - lmdb reindex is broken if index type is specified #6318 <https://github.com/389ds/389-ds-base/pull/6318> - Issue 6090 <https://github.com/389ds/389-ds-base/issues/6090> - Fix dbscan options and man pages #6315 <https://github.com/389ds/389-ds-base/pull/6315> - Issue 6307 <https://github.com/389ds/389-ds-base/issues/6307> - Wrong set of entries returned for some search filters #6308 <https://github.com/389ds/389-ds-base/pull/6308> - Issue 2472 <https://github.com/389ds/389-ds-base/issues/2472> - Add a CI test #6314 <https://github.com/389ds/389-ds-base/pull/6314> - Issue 6276 <https://github.com/389ds/389-ds-base/issues/6276> - Schema lib389 object is not keeping custom schema data upon editing #6279 <https://github.com/389ds/389-ds-base/pull/6279> - Issue 3555 <https://github.com/389ds/389-ds-base/issues/3555> - UI - Fix audit issue with npm - micromatch #6310 <https://github.com/389ds/389-ds-base/pull/6310> - Issue 5843 <https://github.com/389ds/389-ds-base/issues/5843> - Fix size formatting in dscreate output and enhance tests #6309 <https://github.com/389ds/389-ds-base/pull/6309> - Issue 6301 <https://github.com/389ds/389-ds-base/issues/6301> - Fix long delay when setting replication agreement with dsconf #6303 <https://github.com/389ds/389-ds-base/pull/6303> - Issue 6280 <https://github.com/389ds/389-ds-base/issues/6280> - Changelog trims updates from a given RID even if a consumer has not received any of them #6281 <https://github.com/389ds/389-ds-base/pull/6281> - Issue 6296 <https://github.com/389ds/389-ds-base/issues/6296> - basic_test.py::test_conn_limits fails in main branch #6300 <https://github.com/389ds/389-ds-base/pull/6300> - Issue 6295 <https://github.com/389ds/389-ds-base/issues/6295> - test_password_modify_non_utf8 should set default password storage scheme - Issue 6294 <https://github.com/389ds/389-ds-base/issues/6294> - Nightly copr builds are failing - Issue 6288 <https://github.com/389ds/389-ds-base/issues/6288> - dsidm crash with account policy when alt-state-attr is disabled #6292 <https://github.com/389ds/389-ds-base/pull/6292> - Issue 2324 <https://github.com/389ds/389-ds-base/issues/2324> - Add a CI test #6289 <https://github.com/389ds/389-ds-base/pull/6289> - Issue 6284 <https://github.com/389ds/389-ds-base/issues/6284> - BUG - freelist ordering causes high wtime #6285 <https://github.com/389ds/389-ds-base/pull/6285> - Issue 6282 <https://github.com/389ds/389-ds-base/issues/6282> - BUG - out of tree build fails #6283 <https://github.com/389ds/389-ds-base/pull/6283>

1 0

Announcing 389 Directory Server 3.0.6
by Viktor Ashirov 14 Feb '25

14 Feb '25

389 Directory Server 3.0.6 The 389 Directory Server team is proud to announce 389-ds-base version 3.0.6. Fedora packages are available on Fedora 40: https://koji.fedoraproject.org/koji/buildinfo?buildID=2659464 - Koji https://bodhi.fedoraproject.org/updates/FEDORA-2025-c20c29a01b - Bodhi The new packages and versions are: - 389-ds-base-3.0.6 Source tarballs are available for download at GitHub Releases page <https://github.com/389ds/389-ds-base/releases/tag/389-ds-base-3.0.6> - https://github.com/389ds/389-ds-base/releases/download/389-ds-base-3.0.6/38… Highlights in 3.0.6 - Enhancements - Issue 6269 <https://github.com/389ds/389-ds-base/issues/6269> - RFE - Add nsslapd-pwdPBKDF2Rounds configuration to PBKDF2-* plugins #6447 <https://github.com/389ds/389-ds-base/pull/6447> - Issue 3342 <https://github.com/389ds/389-ds-base/issues/3342> - RFE logconv.pl should have a replacement in CLI tools #6444 <https://github.com/389ds/389-ds-base/pull/6444> - Bug fixes Installation and Upgrade See Download <https://www.port389.org/docs/389ds/download.html> for information about setting up your DNF repositories. To install the server use dnf install 389-ds-base To install the Cockpit UI plugin use dnf install cockpit-389-ds After rpm install completes, run dscreate interactive For upgrades, simply install the package. There are no further steps required. There are no upgrade steps besides installing the new rpms. See Install Guide <https://www.port389.org/docs/389ds/howto/howto-install-389.html> for more information about the initial installation and setup. See Source <https://www.port389.org/docs/389ds/development/source.html> for information about source tarballs and SCM (git) access. Feedback We are very interested in your feedback! Please provide feedback and comments here: - 389-users mailing list: https://lists.fedoraproject.org/admin/lists/389-users.lists.fedoraproject.o… - 389ds discussion channel: https://github.com/389ds/389-ds-base/discussions If you find a bug, or would like to see a new feature, file it in our GitHub project: https://github.com/389ds/389-ds-base Changelog between 389-ds-base-3.0.5 and 389-ds-base-3.0.6: - Bump version to 3.0.6 - Issue 3342 <https://github.com/389ds/389-ds-base/issues/3342> - RFE logconv.pl should have a replacement in CLI tools #6444 <https://github.com/389ds/389-ds-base/pull/6444> - Issue 6516 <https://github.com/389ds/389-ds-base/issues/6516> - Allow to configure the password scheme not updated on bind #6517 <https://github.com/389ds/389-ds-base/pull/6517> - Issue 6509 <https://github.com/389ds/389-ds-base/issues/6509> - Race condition with Paged Result searches - Issue 6191 <https://github.com/389ds/389-ds-base/issues/6191> - Node.js 16 actions are deprecated - Issue 6453 <https://github.com/389ds/389-ds-base/issues/6453> - (cont) Fix memory leaks in entryrdn #6504 <https://github.com/389ds/389-ds-base/pull/6504> - Issue 6481 <https://github.com/389ds/389-ds-base/issues/6481> - UI - When ports that are in use are used to update a DS instance the error message is not helpful #6482 <https://github.com/389ds/389-ds-base/pull/6482> - Issue 6497 <https://github.com/389ds/389-ds-base/issues/6497> - lib389 - Configure replication for multiple suffixes #6498 <https://github.com/389ds/389-ds-base/pull/6498> - Issue 6453 <https://github.com/389ds/389-ds-base/issues/6453> - Fix memory leaks in entryrdn - Issue 6470 <https://github.com/389ds/389-ds-base/issues/6470> - Some replication status data are reset upon a restart #6471 <https://github.com/389ds/389-ds-base/pull/6471> - Issue 6386 <https://github.com/389ds/389-ds-base/issues/6386> - backup/restore broken after db log rotation #6406 <https://github.com/389ds/389-ds-base/pull/6406> - Issue 6490 <https://github.com/389ds/389-ds-base/issues/6490> - Add a new macro function and print rounds on startup #6496 <https://github.com/389ds/389-ds-base/pull/6496> - Issue 6494 <https://github.com/389ds/389-ds-base/issues/6494> - Various errors when using extended matching rule on vlv sort filter #6495 <https://github.com/389ds/389-ds-base/pull/6495> - Issue 6417 <https://github.com/389ds/389-ds-base/issues/6417> - (3rd) If an entry RDN is identical to the suffix, then Entryrdn gets broken during a reindex #6480 <https://github.com/389ds/389-ds-base/pull/6480> - Issue 6490 <https://github.com/389ds/389-ds-base/issues/6490> - Remove the rust error log message for pbkdf2 rounds - Issue 6485 <https://github.com/389ds/389-ds-base/issues/6485> - Fix double free in USN cleanup task - Issue 6483 <https://github.com/389ds/389-ds-base/issues/6483> - CI - fix filter_test - test_match_large_valueset - Issue 6269 <https://github.com/389ds/389-ds-base/issues/6269> - RFE - Add nsslapd-pwdPBKDF2Rounds configuration to PBKDF2-* plugins #6447 <https://github.com/389ds/389-ds-base/pull/6447> - Issue 6375 <https://github.com/389ds/389-ds-base/issues/6375> - UI - Update cockpit.js code to the latest version #6376 <https://github.com/389ds/389-ds-base/pull/6376> - Issue 6372 <https://github.com/389ds/389-ds-base/issues/6372> - Deadlock while doing online backup #6475 <https://github.com/389ds/389-ds-base/pull/6475> - Issue 6468 <https://github.com/389ds/389-ds-base/issues/6468> - CLI - Remove security log settings that don't exist - Issue 6468 <https://github.com/389ds/389-ds-base/issues/6468> - RFE - CLI - Add logging settings to dsconf - Issue 6472 <https://github.com/389ds/389-ds-base/issues/6472> - CLI - Improve error message format - Issue 6417 <https://github.com/389ds/389-ds-base/issues/6417> - (2nd) If an entry RDN is identical to the suffix, then Entryrdn gets broken during a reindex #6460 <https://github.com/389ds/389-ds-base/pull/6460> - Issue 6368 <https://github.com/389ds/389-ds-base/issues/6368> - Fix crash when testing access json logging - Issue 6442 <https://github.com/389ds/389-ds-base/issues/6442> - Fix latest covscan memory leaks (part 2) - Issue 6442 <https://github.com/389ds/389-ds-base/issues/6442> - Fix latest covscan memory leaks

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

389-users February 2025