# changelog

author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.2.16-1
changelog:
  - Release 1.3.2.16 (This release is 1.3.2.13 + Ticket 47739)
  - Ticket 47739 - directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.2.17-1
changelog:
  - Release 1.3.2.17
  - Ticket 47446 - logconv.pl memory continually grows
  - Ticket 47713 - Logconv.pl with an empty access log gives lots of errors
  - Ticket 47806 - Failed deletion of aci: no such attribute
  - bump version
  - Ticket 47720 - Normalization from old DN format to New DN format doesnt handel condition properly when there is space in a suffix after the seperator operator.
  - Ticket 47670 - Aci warnings in error log
  - Ticket 47721 - Schema Replication Issue (follow up)
  - Ticket 47721 - Schema Replication Issue (follow up + cleanup)
  - Ticket 47721 - Schema Replication Issue
  - Ticket 47676 - (cont.) Replication of the schema fails 'master branch' -> 1.2.11 or 1.3.1
  - Ticket 47676 - Replication of the schema fails 'master branch' -> 1.2.11 or 1.3.1
  - Ticket 47541 - Fix Jenkins errors
  - Ticket 47541 - Replication of the schema may overwrite  consumer 'attributetypes' even if  consumer definition is a superset
  - Ticket 47804 - db2bak.pl error with changelogdb
  - Ticket 47780 - Some VLV search request causes memory leaks
  - Ticket 47787 - A replicated MOD fails (Unwilling to perform) if it targets a tombstone
  - Ticket 47764 - Problem with deletion while replicated
  - Ticket 47750 - Creating a glue fails if one above level is a conflict or missing; Ticket 47696 - Large Searches Hang - Possibly entryrdn related
  - Ticket 47772 - fix coverity issue
  - Ticket 47793 - Server crashes if uniqueMember is invalid syntax and memberOf plugin is enabled.
  - Ticket 47792 - database plugins need a way to call betxn  plugins
  - Ticket 47707 - 389 DS Server crashes and dies while handles paged searches from clients
  - Ticket 47792 - code cleanup
  - Ticket 47779 - Need to lock server list when removing list
  - Ticket 47771 - Move parentsdn initialization to avoid crash
  - Ticket 47779 - Part of DNA shared configuration is deleted after server restart
  - Ticket 346   - Slow ldapmodify operation time for large quantities of multi-valued attribute values
  - Ticket 47782 - Parent numbordinate count can be incorrectly updated if an error occurs
  - Ticket 47772 - empty modify returns LDAP_INVALID_DN_SYNTAX
  - Ticket 47774 - mem leak in do_search - rawbase not freed upon certain errors
  - Ticket 47773 - mem leak in do_bind when there is an error
  - Ticket 47771 - Performing deletes during tombstone purging results in operation errors
  - Ticket 47767 - Nested tombstones become orphaned after purge
  - Ticket 47766 - Tombstone purging can crash the server if the backend is stopped/disabled
  - Ticket 47759 - Crash in replication when server is under write load
  - Ticket 47740 - Fix coverity issues(part 7)
  - Ticket 47748 - Simultaneous adding a user and binding as the user could fail in the password policy check
  - Ticket 47743 - Memory leak with proxy auth control
  - Ticket 47740 - Crash caused by changes to certmap.c
  - Ticket 47733 - ds logs many "Operation error fetching Null DN" messages
  - Ticket 47740 - Fix coverity issues: null deferences - Part 6
  - Ticket 47732 - ds logs many "SLAPI_PLUGIN_BE_TXN_POST_DELETE_FN plugin returned error" messages
  - Ticket 47740 - Coverity issue in 1.3.3
  - Ticket 47735 - e_uniqueid fails to set if an entry is a conflict entry
  - Ticket 47740 - Fix coverity issues - Part 5
  - Ticket 47740 - Fix coverity erorrs - Part 4
  - Ticket 47640 - Fix coverity issues - part 3
  - Ticket 47740 - Fix sync plugin resource leaks
  - Ticket 47538 - RFE: repl-monitor.pl plain text output, cmdline config options
  - Ticket 47740 - Coverity Fixes (Mark - part 1)
  - Ticket 47734 - Change made in resolving ticket #346 fails on Debian SPARC64
  - Ticket 47722 - Fixed filter not correctly identified
  - Ticket 47722 - rsearch filter error on any search filter


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.2.18-1
changelog:
  - Release 1.3.2.18
  - Ticket 47750 - Creating a glue fails if one above level is a conflict or missing
  - Ticket 47763 - winsync plugin modify is broken
  - Ticket 47821 - deref plugin cannot handle complex acis
  - Ticket 47831 - server restart wipes out index config if there is a default index
  - Ticket 47817 - The error result text message should be obtained just prior to sending result
  - Ticket 47815 - Add operations rejected by betxn plugins remain in cache
  - Ticket 47809 - find a way to remove replication plugin errors messages "changelog iteration code returned a dummy entry with csn %s, skipping ..."
  - Ticket 47704 - invalid sizelimits in aci group evaluation
  - Ticket 47813 - remove "goto bail" from previous commit
  - Ticket 47813 - managed entry plugin fails to update member  pointer on modrdn operation
  - Ticket 47808 - If be_txn plugin fails in ldbm_back_add, adding entry is double freed.
  - Ticket 47770 - #481 breaks possibility to reassemble memberuid list


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.2.19-1
changelog:
  - Release 1.3.2.19
  - Ticket 47779 - Potential deadlock after startup if a dna configuration change is made
  - Ticket 47839 - 389-ds production segfault: __memcpy_sse2_unaligned...


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.2.20-1
changelog:
  - Release 1.3.2.20
  - Ticket 47753 - Add switch to disable pre-hashed password checking
  - Ticket 47861 - Certain schema files are not replaced during upgrade
  - Ticket 47858 - Internal searches using OP_FLAG_REVERSE_CANDIDATE_ORDER can crash the server
  - Ticket 47797 - DB deadlock when two threads (on separated backend) try to record changes in retroCL
  - Ticket 47834 - Tombstone_to_glue: if parents are also converted to glue, the target entry's DN must be adjusted.
  - Ticket 47692 - single valued attribute replicated ADD does not work
  - Ticket 47781 - Server deadlock if online import started while  server is under load


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.2.21-1
changelog:
  - Release 1.3.2.21
  - Resolves: #1127833
              Ticket 47869 - unauthenticated information disclosure (Bug 1123477)
  - Ticket 47834 - Tombstone_to_glue: if parents are also converted to glue, the target entry's DN must be adjusted.
  - Ticket 47862 - repl-monitor fails to convert "*" to default values
  - Ticket 47824 - paged results control is not working in some cases when we have a subsuffix.
  - Ticket 47862 - Repl-monitor.pl ignores the provided connection parameters
  - Ticket 346   - Fixing memory leaks


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.2.22-1
changelog:
  - Release 1.3.2.21
  - Resolves: #1127833
              Ticket 47869 - unauthenticated information disclosure (Bug 1123477)
    389-ds-base-1.3.2.22 = 389-ds-base-1.3.2.19 + Bug 1127833 fix.


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.2.23-1
changelog:
  - Release 1.3.2.23
  - Ticket 47871 - 389-ds-base-1.3.2.21-1.fc20 crashed over the weekend
  - Ticket 47866 - Errors after upgrading related to attribute "dnaremotebindmethod"
  - Ticket 47816 - v2- internal syncrepl searches are flagged as unindexed
  - Ticket 47877 - check_and_add_entry fails for changetype: add and existing entry
  - Ticket 47834 - Tombstone_to_glue: if parents are also converted to glue, the target entry's DN must be adjusted.
  - Ticket 47875 - dirsrv not running with old openldap
  - Revert "Ticket #47875 - dirsrv not running with old openldap"
  - Ticket 47875 - dirsrv not running with old openldap
  - Ticket 47446 - logconv.pl memory continually grows
  - Ticket 47874 - Performance degradation with scope ONE after some load
  - Ticket 47872 - Filter AND with only one clause should be optimized
  - Ticket 47834 - Tombstone_to_glue: if parents are also converted to glue, the target entry's DN must be adjusted.
  - Ticket 47862 - repl-monitor fails to convert "*" to default values
  - Ticket 47824 - paged results control is not working in some cases when we have a subsuffix.
  - Ticket 47862 - Repl-monitor.pl ignores the provided connection parameters
  - Ticket 346   - Fixing memory leaks
  - Ticket 47753 - Add switch to disable pre-hashed password checking
  - Ticket 47861 - Certain schema files are not replaced during upgrade
  - Ticket 47858 - Internal searches using OP_FLAG_REVERSE_CANDIDATE_ORDER can crash the server
  - Ticket 47797 - fix the indentation
  - Ticket 47797 - DB deadlock when two threads (on separated backend) try to record changes in retroCL
  - Ticket 47692 - single valued attribute replicated ADD does not work
  - Ticket 47781 - Server deadlock if online import started while  server is under load


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.2.24-1
changelog:
  - Release 1.3.2.24
  - Ticket 47922 - dynamically added macro aci is not evaluated on the fly
  - Ticket 47897 - Need to move slapi_pblock_set(pb, SLAPI_MODRDN_EXISTING_ENTRY, original_entry->ep_entry) prior to original_entry overwritten
  - Ticket 47920 - Encoding of SearchResultEntry is missing tag
  - Ticket 47919 - ldbm_back_modify SLAPI_PLUGIN_BE_PRE_MODIFY_FN does not return even if one of the preop plugins fails.
  - Ticket 47918 - result of dna_dn_is_shared_config is incorrectly used
  - Ticket 47900 - Server fails to start if password admin is set
  - Ticket 47750 - Creating a glue fails if one above level is a conflict or missing
  - Ticket 47900 - Adding an entry with an invalid password as rootDN is incorrectly rejected
  - Ticket 47907 - ldclt: assertion failure with -e "add,counteach" -e "object=<ldif file>,rdn=uid:test[A=INCRNNOLOOP(0;24
  - Ticket 47889 - DS crashed during ipa-server-install on test_ava_filter
  - Ticket 47885 - did not always return a response control
  - Ticket 47834 - Tombstone_to_glue: if parents are also converted to glue, the target entry's DN must be adjusted.
  - Ticket 47748 - Simultaneous adding a user and binding as the user could fail in the password policy check
  - Ticket 47875 - dirsrv not running with old openldap
  - Ticket 47875 - dirsrv not running with old openldap
  - Ticket 47885 - deref plugin should not return references with noc access rights
  - Ticket 47457 - default nsslapd-sasl-max-buffer-size should be 2MB


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.2.25-1
changelog:
  - Release 1.3.2.25
  - Ticket 47659 - ldbm_usn_init: Valgrind reports Invalid read / SIGSEGV
  - Ticket 47880 - provide enabled ciphers as search result
  - Ticket 47945 - Add SSL/TLS version info to the access log
  - Ticket 47928 - Disable SSL v3, by default [389-ds-base-1.2.11 only]
  - Ticket 47949 - logconv.pl -- support parsing/showing/reporting different protocol versions
  - Ticket 47981 - COS cache doesn't properly mark vattr cache as  invalid when there are multiple suffixes
  - Ticket 47980 - Nested COS definitions can be incorrectly  processed
  - Ticket 47750 - During delete operation do not refresh cache entry if it is a tombstone
  - Ticket 47965 - Fix coverity issues (2014/12/16)
  - Ticket 47935 - Error: failed to open an LDAP connection to host 'example.org' port '389' as user 'cn=Directory Manager'. Error: unknown.
  - Ticket 47750 - Need to refresh cache entry after called betxn postop plugins
  - Ticket 47942: DS hangs during online total update
  - Ticket 47722 - Using the filter file does not work
  - Ticket 47965 - Fix coverity issues (2014/11/24)
  - Ticket 47969 - Fix coverity issue
  - Ticket 47970 - add lib389 testcase
  - Ticket 47970 - Account lockout attributes incorrectly updated after failed SASL Bind
  - Ticket 47969 - COS memory leak when rebuilding the cache
  - Ticket 47967 - cos_cache_build_definition_list does not stop during server shutdown
  - Ticket 47963 - skip nested groups breaks memberof fixup task
  - Ticket 47963 - RFE - memberOf - add option to skip nested  group lookups during delete operations
  - Ticket 47950 - Bind DN tracking unable to write to internalModifiersName without special permissions
  - Ticket 47958 - Memory leak in password admin if the admin entry does not exist
  - Ticket 47952 - PasswordAdminDN attribute is not properly returned to client
  - Ticket 47953 - Should not check aci syntax when deleting an aci
  - Ticket 47948 - ldap_sasl_bind fails assertion (ld != NULL) if it is called from chainingdb_bind over SSL/startTLS
  - Ticket 47937 - Crash in entry_add_present_values_wsi_multi_valued


