[389-announce] Announcing 389 Directory Server 2.0.17

389 Directory Server 2.0.17

The 389 Directory Server team is proud to announce 389-ds-base version 2.0.17

Fedora packages are available on Fedora 35

Fedora 35:

https://koji.fedoraproject.org/koji/taskinfo?taskID=94300237 - Koji

https://bodhi.fedoraproject.org/updates/FEDORA-2022-0c22c46d13 - Bodhi

The new packages and versions are:

• 389-ds-base-2.0.17-1

Source tarballs are available for download at Download 389-ds-base Source

Highlights in 2.0.17

• Enhancements, Bugs and Security fixes

Installation and Upgrade

See Download for information about setting up your yum repositories.

To install the server use dnf install 389-ds-base

To install the Cockpit UI plugin use dnf install cockpit-389-ds

After rpm install completes, run dscreate interactive

For upgrades, simply install the package. There are no further steps required.

There are no upgrade steps besides installing the new rpms

See Install_Guide for more information about the initial installation and setup

See Source for information about source tarballs and SCM (git) access.

Feedback

We are very interested in your feedback!

Please provide feedback and comments to the 389-users mailing list: https://lists.fedoraproject.org/admin/lists/389-users.lists.fedoraproject.org

If you find a bug, or would like to see a new feature, file it in our GitHub project: https://github.com/389ds/389-ds-base

• Bump version to 2.0.17
• Issue 5534 - Add copyright text to the repository files
• Issue 5532 - Make db compaction TOD day more robust.
• Issue 5529 - UI - Fix npm vulnerability in loader-utils
• Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
• Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
• Issue 5162 - RFE - CLI allow adding CA certificate bundles
• Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)
• Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
• Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
• Issue 5502 - RFE - Add option to display entry attributes in audit log
• Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)
• Issue 5495 - RFE - skip dds during migration. (#5496)
• Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
• Issue 5368 - Retro Changelog trimming does not work (#5486)
• Issue 5487 - Fix various issues with logconv.pl
• Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
• Issue 4776 - Fix entryuuid fixup task (#5483)
• Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
• Issue 3061 - RFE - Add password policy debug log level
• Issue 5462 - RFE - add missing default indexes (#5464)
• Issue 4324 - Revert recursive pthread mutex usage in factory.c
• Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264)
• Issue 4324 - Revert recursive pthread mutex change (#5463)
• Issue 5305 - OpenLDAP version autodetection doesn't work
• Issue 5032 - Fix OpenLDAP version check (#5091)
• Issue 5032 - OpenLDAP is not shipped with non-threaded version of libldap (#5033) (#5456)
• Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
• Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
• Issue 5453 - UI/CLI - Changing Root DN breaks UI
• Issue 5446 - Fix some covscan issues (#5451)
• Issue 5294 - Report Portal 5 is not processing an XML file with (#5358)
• Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
• Issue 4308 - checking if an entry is a referral is expensive
• Issue 5447 - UI - add NDN max cache size to UI
• Issue 5443 - UI - disable save button while saving
• Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)
• Issue 5413 - Allow only one MemberOf fixup task at a time
• Issue 5158 - entryuuid fixup tasks fails in replicated topology (#5439)
• Issue 4592 - dscreate error with custom dir_path (#5434)
• Issue 5397 - Fix memory leak with the intent filter
• Issue 5356 - For RUST build update the default password storage scheme
• Issue 5423 - Fix missing 'not' in description
• Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
• Issue 3903 - fix repl keep alive event interval
• Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
• Issue 5415 - Hostname when set to localhost causing failures in other tests
• Issue 5412 - lib389 - do not set backend name to lowercase
• Issue 3903 - keep alive update event starts too soon
• Issue 5397 - Fix various memory leaks
• Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
• Issue 3903 - Supplier should do periodic updates
• Issue 5392 - dscreate fails when using alternative ports in the SELinux hi_reserved_port_t label range
• Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
• Issue 5383 - UI - Various fixes and RFE's for UI
• Issue 4656 - Remove problematic language from source code
• Issue 5380 - Separate cleanAllRUV code into new file
• Issue 5322 - optime & wtime on rejected connections is not properly set
• Issue 5375 - CI - disable TLS hostname checking
• Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
• Issue 5371 - Update npm and cargo packages
• Issue 3069 - Support ECDSA private keys for TLS (#5365)

--   Directory Server Development Team