389-users August 2016

389-users@lists.fedoraproject.org

12 participants
15 discussions

problems with memberof attribute updating
by Anderson, Cary＠CIO 12 Aug '16

12 Aug '16

All, I am not able to get the memberof attribute to update when I add a user to a group. I have added users to a group using CLI LDIF and via the 389 Console. Any thoughts on what I may be missing? I have enabled the following plugins and have restarted the directory server: Auto Membership Plugin MemberOf Plugin Referential Integrity postoperation I am using the following 389 RPM's from RH: 389-ds-base-1.3.4.0-33.el7_2.x86_64 389-console-1.1.9-1.el7.noarch 389-admin-1.1.38-1.el7.x86_64 389-ds-console-1.2.12-1.el7.noarch 389-ds-base-libs-1.3.4.0-33.el7_2.x86_64 389-adminutil-1.1.21-2.el7.x86_64 389-admin-console-1.1.10-1.el7.noarch Cary Anderson 916.228.6057 Linux Support | Engineering Div. [Sandwich]

2 1

Announcing 389 Directory Server version 1.3.4.14
by Noriko Hosoi 12 Aug '16

12 Aug '16

389 Directory Server 1.3.4.14 The 389 Directory Server team is proud to announce 389-ds-base version 1.3.4.14. Fedora packages are available from the Fedora 23 repository. The new packages and versions are: * 389-ds-base-1.3.4.14-1 Source tarballs are available for download at Download 389-ds-base Source <http://www.port389.org/binaries/389-ds-base-1.3.4.14.tar.bz2> and Download nunc-stans Source <http://www.port389.org/binaries/nunc-stans-0.1.5.tar.bz2>. Highlights in 1.3.4.14 * Various bugs are fixed. Installation and Upgrade See Download <http://www.port389.org/docs/389ds/download.html> for information about setting up your yum repositories. To install, use *yum install 389-ds* yum install 389-ds After install completes, run *setup-ds-admin.pl* to set up your directory server. setup-ds-admin.pl To upgrade, use *yum upgrade* yum upgrade After upgrade completes, run *setup-ds-admin.pl -u* to update your directory server/admin server/console information. setup-ds-admin.pl -u See Install_Guide <http://www.port389.org/docs/389ds/legacy/install-guide.html> for more information about the initial installation, setup, and upgrade See Source <http://www.port389.org/docs/389ds/development/source.html> for information about source tarballs and SCM (git) access. Feedback We are very interested in your feedback! Please provide feedback and comments to the 389-users mailing list: https://lists.fedoraproject.org/admin/lists/389-users.lists.fedoraproject.o… as well as https://admin.fedoraproject.org/updates/389-ds-base-1.3.4.14-1.fc23 <https://admin.fedoraproject.org/updates/389-ds-base-1.3.4.14-1.fc23>. If you find a bug, or would like to see a new feature, file it in our Trac instance: https://fedorahosted.org/389 Detailed Changelog since 1.3.4.9 * CVE-2016-4992 389-ds-base: Information disclosure via repeated use of LDAP ADD operation, etc. * Ticket 47538 - Fix repl-monitor color and lag times * Ticket 47538 - repl-monitor.pl legend not properly sorted * Ticket 47538 - repl-monitor.pl not displaying correct color code for lag time * Ticket 47819 - RFE - improve tombstone purging performance * Ticket 47888 - DES to AES password conversion fails if a backend is empty * Ticket 47888 - Add CI test * Ticket 48078 - CI test - paged_results - TET part * Ticket 48109 - substring index with nssubstrbegin: 1 is not being used with filters like (attr=x*) * Ticket 48492 - heap corruption at schema replication. * Ticket 48497 - uncomment pytest from CI test * Ticket 48636 - Fix config validation check * Ticket 48636 - Improve replication convergence * Ticket 48752 - Page result search should return empty cookie if there is no returned entry * Ticket 48752 - Add CI test * Ticket 48755 - moving an entry could make the online init fail * Ticket 48766 - Replication changelog can incorrectly skip over updates * Ticket 48767 - flow control in replication also blocks receiving results * Ticket 48795 - Make various improvements to create_test.py * Ticket 48798 - Enable DS to offer weaker DH params in NSS * Ticket 48799 - objectclass values could be dropped on the consumer * Ticket 48799 - Test cases for objectClass values being dropped. * Ticket 48808 - Add test case * Ticket 48808 - Paged results search returns the blank list of entries * Ticket 48813 - password history is not updated when an admin resets the password * Ticket 48848 - modrdn deleteoldrdn can fail to find old attribute value, perhaps due to case folding * Ticket 48854 - Running db2index with no options breaks replication * Ticket 48862 - At startup DES to AES password conversion causes timeout in start script * Ticket 48889 - ldclt - fix man page and usage info * Ticket 48898 - Crash during shutdown if nunc-stans is enabled * Ticket 48900 - Add connection perf stats to logconv.pl * Ticket 48922 - Fix crash when deleting backend while import is running * Ticket 48924 - Fixup tombstone task needs to set proper flag when updating tombstones * Ticket 48930 - Paged result search can hang the server * Ticket 48935 - Update dirsrv.systemd file http://www.port389.org/docs/389ds/releases/release-1-3-4-14.html

1 0

Announcing 389 Directory Server version 1.3.5.13
by Noriko Hosoi 12 Aug '16

12 Aug '16

389 Directory Server 1.3.5.13 The 389 Directory Server team is proud to announce 389-ds-base version 1.3.5.13. Fedora packages are available from the Fedora 24, 25 and Rawhide repositories. The new packages and versions are: * 389-ds-base-1.3.5.13-1 Source tarballs are available for download at Download 389-ds-base Source <http://www.port389.org/binaries/389-ds-base-1.3.5.13.tar.bz2> and Download nunc-stans Source <http://www.port389.org/binaries/nunc-stans-0.1.8.tar.bz2>. Highlights in 1.3.5.13 * A security bug fix and lots of bug fixes and enhancements Installation and Upgrade See Download <http://www.port389.org/docs/389ds/download.html> for information about setting up your yum repositories. To install, use *yum install 389-ds* yum install 389-ds After install completes, run *setup-ds-admin.pl* to set up your directory server. setup-ds-admin.pl To upgrade, use *yum upgrade* yum upgrade After upgrade completes, run *setup-ds-admin.pl -u* to update your directory server/admin server/console information. setup-ds-admin.pl -u See Install_Guide <http://www.port389.org/docs/389ds/legacy/install-guide.html> for more information about the initial installation, setup, and upgrade See Source <http://www.port389.org/docs/389ds/development/source.html> for information about source tarballs and SCM (git) access. Feedback We are very interested in your feedback! Please provide feedback and comments to the 389-users mailing list: https://lists.fedoraproject.org/admin/lists/389-users.lists.fedoraproject.o… as well as https://admin.fedoraproject.org/updates/389-ds-base-1.3.5.13-1.fc24 <https://admin.fedoraproject.org/updates/389-ds-base-1.3.5.13-1.fc24>. If you find a bug, or would like to see a new feature, file it in our Trac instance: https://fedorahosted.org/389 Detailed Changelog since 1.3.5.4 * CVE-2016-4992 389-ds-base: Information disclosure via repeated use of LDAP ADD operation, etc. * Ticket 47538 - Fix repl-monitor color and lag times * Ticket 47538 - repl-monitor.pl legend not properly sorted * Ticket 47538 - repl-monitor.pl not displaying correct color code for lag time * Ticket 47664 - Move CI test to the pr suite and refactor * Ticket 47824 - Remove CI test from tickets and add logging * Ticket 47911 - split out snmp agent into a subpackageTicket 47911 * Ticket 47976 - Add fixed CI test case * Ticket 47982 - Fix log hr timestamps when invalid value is set in cn=config * Ticket 48109 - substring index with nssubstrbegin: 1 is not being used with filters like (attr=x*) * Ticket 48144 - Add /usr/sbin/status-dirsrv script to get the status of the directory server instance. * Ticket 48191 - Move CI test to the pr suite and refactor * Ticket 48234 - “matching rules” in ACI’s “bind rules not fully evaluated * Ticket 48234 - CI test: test case for ticket 48234 * Ticket 48275 - search returns no entry when OR filter component contains non readable attribute * Ticket 48326 - Move CI test to config test suite and refactor * Ticket 48336 - Missing semanage dependency * Ticket 48336 - setup-ds should detect if port is already defined * Ticket 48346 - ldaputil code cleanup * Ticket 48346 - log too verbose when re-acquiring expired ticket * Ticket 48354 - Review of default ACI in the directory server * Ticket 48363 - CI test - add test suite * Ticket 48366 - proxyauth does not work bound as directory manager * Ticket 48404 - libslapd owned by libs and devel * Ticket 48449 - Import readNSState from richm’s repo * Ticket 48449 - Import readNSState.py from RichM’s repo * Ticket 48450 - Add prestart work around for systemd ask password * Ticket 48450 - Autotools components for ds_systemd_ask_password_acl * Ticket 48617 - Coverity fixes * Ticket 48636 - Fix config validation check * Ticket 48636 - Improve replication convergence * Ticket 48637 - DN cache is not always updated when ADD operation fails * Ticket 48743 - If a cipher is disabled do not attempt to look it up * Ticket 48745 - Matching Rule caseExactIA5Match indexes incorrectly values with upper cases * Ticket 48745 - Matching Rule caseExactIA5Match indexes incorrectly values with upper cases * Ticket 48747 - dirsrv service fails to start when nsslapd-listenhost is configured * Ticket 48752 - Page result search should return empty cookie if there is no returned entry * Ticket 48752 - Add CI test * Ticket 48754 - ldclt should support -H * Ticket 48755 - moving an entry could make the online init fail * Ticket 48755 - CI test: test case for ticket 48755 * Ticket 48766 - Replication changelog can incorrectly skip over updates * Ticket 48767 - flow control in replication also blocks receiving results * Ticket 48795 - Make various improvements to create_test.py * Ticket 48799 - Test cases for objectClass values being dropped. * Ticket 48815 - ns-accountstatus.pl - fix DN normalization * Ticket 48832 - Fix timing and localhost issues * Ticket 48832 - CI tests * Ticket 48833 - 389 showing inconsistent values for shadowMax and shadowWarning in 1.3.5.1 * Ticket 48834 - Fix jenkins: discared qualifier on auditlog.c * Ticket 48834 - Modifier’s name is not recorded in the audit log with modrdn and moddn operations * Ticket 48844 - Regression introduced in matching rules by DS 48746 * Ticket 48846 - 32 bit systems set low vmsize * Ticket 48846 - Older kernels do not expose memavailable * Ticket 48846 - Rlimit checks should detect RLIM_INFINITY * Ticket 48848 - modrdn deleteoldrdn can fail to find old attribute value, perhaps due to case folding * Ticket 48849 - Systemd introduced incompatible changes that breaks ds build * Ticket 48850 - Correct memory leaks in pwdhash-bin and ns-slapd * Ticket 48854 - Running db2index with no options breaks replication * Ticket 48855 - Add basic pwdPolicy tests * Ticket 48858 - Segfault changing nsslapd-rootpw * Ticket 48862 - At startup DES to AES password conversion causes timeout in start script * Ticket 48863 - remove check for vmsize from util_info_sys_pages * Ticket 48870 - Correct plugin execution order due to changes in exop * Ticket 48872 - Fix segfault and use after free in plugin shutdown * Ticket 48873 - Backend should accept the reduced cache allocation when issane == 1 * Ticket 48877 - Fixes for RPM spec with spectool * Ticket 48880 - adding pre/post extop ability * Ticket 48882 - server can hang in connection list processing * Ticket 48889 - ldclt - fix man page and usage info * Ticket 48891 - ns-slapd crashes during the shutdown after adding attribute with a matching rule * Ticket 48892 - Wrong result code display in audit-failure log * Ticket 48893 - cn=config should not have readable components to anonymous * Ticket 48895 - tests package should be noarch * Ticket 48898 - Crash during shutdown if nunc-stans is enabled * Ticket 48899 - Values of dbcachetries/dbcachehits in cn=monitor could overflow. * Ticket 48900 - Add connection perf stats to logconv.pl * Ticket 48902 - Strdup pwdstoragescheme name to prevent misbehaving plugins * Ticket 48904 - syncrepl search returning error 329; plugin sending a bad error code * Ticket 48905 - coverity defects * Ticket 48912 - ntUserNtPassword schema * Ticket 48914 - db2bak.pl task enters infinitive loop when bak fs is almost full * Ticket 48916 - DNA Threshold set to 0 causes SIGFPE * Ticket 48918 - Upgrade to 389-ds-base >= 1.3.5.5 doesn’t install 389-ds-base-snmp * Ticket 48919 - Compiler warnings while building 389-ds-base on RHEL7 * Ticket 48920 - Memory leak in pwdhash-bin * Ticket 48921 - Adding replication and reliability tests * Ticket 48922 - Fix crash when deleting backend while import is running * Ticket 48924 - Fixup tombstone task needs to set proper flag when updating tombstones * Ticket 48925 - slapd crash with SIGILL: Dsktune should detect lack of CMPXCHG16B * Ticket 48928 - log of page result cookie should log empty cookie with a different value than 0 * Ticket 48930 - Paged result search can hang the server * Ticket 48934 - remove-ds.pl deletes an instance even if wrong prefix was specified * Ticket 48935 - Update dirsrv.systemd file * Ticket 48936 - Duplicate collation entries * Ticket 48939 - nsslapd-workingdir is empty when ns-slapd is started by systemd * Ticket 48940 - DS logs have warning:ancestorid not indexed * Ticket 48943 - When fine-grained policy is applied, a sub-tree has a priority over a user while changing password * Ticket 48943 - Add CI Test for the password test suite http://www.port389.org/docs/389ds/releases/release-1-3-5-13.html

1 0

Announcing python-lib389 version 1.0.2
by Mark Reynolds 04 Aug '16

04 Aug '16

python-lib389-1.0.2 The 389 Directory Server team is proud to announce python-lib389 version 1.0.2. python-lib389 is a python library for accessing, configuring, and testing the 389 Directory Server. http://www.port389.org/docs/389ds/FAQ/upstream-test-framework.html Source tarballs are available for download at Download python-lib389 source code <http://www.port389.org/binaries/python-lib389-1.0.2-1.tar.bz2>. Fedora packages are available for Fedora 24. Highlights in 1.0.2 * Several functional areas have finally been completed * Various features have been made more portable * Many bug fixes Installation See Source <http://www.port389.org/docs/389ds/development/source.html> for information about source tarballs and SCM (git) access. Feedback We are very interested in your feedback! Please provide feedback and comments to the 389-users mailing list: https://lists.fedoraproject.org/admin/lists/389-users.lists.fedoraproject.o…. If you find a bug, or would like to see a new feature, file it using trac: https://fedorahosted.org/389/newticket Detailed Changelog since 1.0.1 * Bump version to 1.0.2 * Ticket 48946 - openConnection should not fully popluate DirSrv object * Ticket 48832 - Add DirSrvTools.getLocalhost() function * Ticket 48382 - Fix serverCmd to get sbin dir properly * Bug 1347760 - Information disclosure via repeated use of LDAP ADD operation, etc. * Ticket 48937 - Cleanup valgrind wrapper script * Ticket 48923 - Fix additional issue with serverCmd * Ticket 48923 - serverCmd timeout not working as expected * Ticket 48917 - Attribute presence * Ticket 48911 - Plugin improvements for lib389 * Ticket 48911 - Improve plugin support based on new mapped objects * Ticket 48910 - Fixes for backend tests and lib389 reliability. * Ticket 48860 - Add replication tools * Ticket 48888 - Correction to create of dsldapobject * Ticket 48886 - Fix NSS SSL library in lib389 * Ticket 48885 - Fix spec file requires * Ticket 48884 - Bugfixes for mapped object and new connections * Ticket 48878 - better style for backend in backend test.py * Ticket 48878 - pep8 fixes part 2 * Ticket 48878 - pep8 fixes and fix rpm to build * Ticket 48853 - Prerelease installer * Ticket 48820 - Begin to test compatability with py.test3, and the new orm * Ticket 48434 - Fix for negative tz offsets * Ticket 48857 - Remove python-krbV from lib389 * Ticket 48820 - Move Encryption and RSA to the new object types * Ticket 48431 - lib389 integrate ldclt * Ticket 48434 - lib389 logging tools * Ticket 48796 - add function to remove logs * Ticket 48771 - lib389 - get ns-slapd version * Ticket 48830 - Convert lib389 to ip route tools * Ticket 48763 - backup should run regardless of existing backups. * Ticket 48434 - lib389 logging tools * Ticket 48798 - EL6 compat for lib389 tests for DH params * Ticket 48798 - lib389 add ability to create nss ca and certificate * Ticket 48433 - Aci linting tools * Ticket 48791 - format args in server tools * Ticket 48399 - Helper makefile is missing mkdir dist * Ticket 48399 - Helper makefile is missing mkdir dist * Ticket 48794 - lib389 build requires are on a single line * Ticket 48660 - Add function to convert binary values in an entry to base64 * Ticket 48764 - Fix mit krb password to be random. * Ticket 48765 - Change default ports for standalone topology * Ticket 48750 - Clean up logging to improve command experience * Ticket 48751 - Improve lib389 ldapi support * Ticket 48399 - Add helper makefile to lib389 to build and install * Ticket 48661 - Agreement test suite fails at the test changes case * Ticket 48407 - Add test coverage module for lib389 repo * Ticket 48357 - clitools should standarise their args * Ticket 48560 - Make verbose handling consistent * Ticket 48419 - getadminport() should not a be a static method * Ticket 48415 - Add default domain parameter * Ticket 48408 - RFE escaped default suffix for tests * Ticket 48405 - python-lib389 in rawhide is missing dependencies * Ticket 48401 - Revert typecheck * Ticket 48401 - lib389 Entry hasAttr returs dict instead of false * Ticket 48390 - RFE Improvements to lib389 monitor features for rest389 * Ticket 48358 - Add new spec file * Ticket 48371 - weaker host check on localhost.localdomain

1 0

Promoting two replicas to master/replica
by Gary Algier 01 Aug '16

01 Aug '16

Hello, I have an old directory server (Sun's) as a master and it is replicating to two slave 389 servers. I want to pull the plug on the old server and promote one of the replicas to a master. Here's what it looks like: - Server A, running old DS. Master. - Server B, running 389 DS. Consumer of A. - Server C, running 389 DS. Consumer of A. I want: - Server B, running 389 DS. Master. - Server C, running 389 DS. Consumer of B. What's the easiest way to make this happen with minimal (0?) downtime? My guess would be I should first make C and consumer of B. But how do I easily "promote" B? All the docs I find talk about multimaster. I don't think I am ready to go there yet. -- Gary Algier

2 4

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

389-users August 2016