Release Notes

From 389 Directory Server

389 Directory Server 1.2.10.rc1 (Release Candidate 1) Testing - February 6, 2012

389-ds-base version 1.2.10.rc1 is released to the Testing repositories. This release contains many fixes for bugs found in a8 testing, and in earlier releases. No new features were introduced between alpha 8 and rc1.

We have moved our ticket tracking system from the Red Hat Bugzilla https://bugzilla.redhat.com/enter_bug.cgi?product=389 to our Fedora Hosted Trac https://fedorahosted.org/389. All of the old 389 bugs have been copied to Trac. All new bugs, feature requests, and tasks should be entered in Trac.

WARNING: If you are upgrading from a previous 1.2.6 release candidate, you will need to run fixfiles to fix some SELinux AVCs, or directory server will not start. See bug https://bugzilla.redhat.com/show_bug.cgi?id=622882

To fix, run this:

fixfiles -R 389-ds-base restore

If you are upgrading from 1.2.5 or earlier, or a stable 1.2.6 or later, there is no problem.

WARNING: If you are upgrading from a 1.2.6 alpha or release candidate, you will need to manually fix your entryrdn index files. See Subtree Rename Warning for more information. If you are upgrading from 1.2.5 or earlier, or a stable 1.2.6 or later, there is no problem.

WARNING Plugin Writers: Plugins should be made transaction aware so that they can be called from within a backend pre/post transaction plugin. Otherwise, attempting to perform an internal operation will cause a deadlock. See Plugins

The new packages and versions are:

  • 389-ds-base 1.2.10.rc1
  • 389-admin 1.1.27
  • 389-dsgw 1.1.9
  • 389-adminutil 1.1.15

Installation

See Download for information about setting up your yum repositories. Then use yum install 389-ds

yum install 389-ds

After install completes, run setup-ds-admin.pl to set up your directory server.

setup-ds-admin.pl

Upgrade

See Download for information about setting up your yum repositories. Then use yum upgrade

yum upgrade

After upgrade completes, run setup-ds-admin.pl -u to update your directory server/admin server/console information.

setup-ds-admin.pl -u

See Download for more information about setting up yum access.

See Install_Guide for more information about the initial installation, setup, and upgrade.

See Source for information about source tarballs and SCM (git) access.

EL6 - see Download for EL6 instructions

Your Feedback is Important!

The best way to provide feedback is via the Fedora Update system.

  • Go to https://admin.fedoraproject.org/updates
  • In the Search box in the upper right hand corner, type in the name of the package
  • In the list, find the version and release you are using (if you're not sure, use rpm -qi <package name> on your system) and click on the release
  • On the page for the update, scroll down to "Add a comment" and provide your input

Or just send us an email to 389-users@lists.fedoraproject.org

If you find a bug, or would like to see a new feature, use the 389 Trac - https://fedorahosted.org/389

Notes

NOTE: Fedora versions below 15 are no longer supported. If you are running Fedora 14 or earlier, you should upgrade.

NOTE: If you are using the console, after installing the updates, you must run setup-ds-admin.pl -u to refresh your console and admin server configuration with the new version information.

WARNING: If you are upgrading from 389 1.2.6 rcN (N < 6), simple upgrade won't work due to the entryrdn format change (See also Bug 616608 - SIGBUS in RDN index reads on platforms with strict alignments ). Please follow the steps described in this section.

WARNING: If you are upgrading from a previous 1.2.6 release candidate, you will need to run fixfiles to fix some SELinux AVCs, or directory server will not start. See bug https://bugzilla.redhat.com/show_bug.cgi?id=622882

To fix, run this:

fixfiles -R 389-ds-base restore

New features (up to and including 1.2.10.a8 - none in 1.2.10.rc1)

  • Account Usability Control support
  • database transaction pre/post plugins
    • Changelog writes use main database transaction
    • All plugins are transaction aware
  • native systemd support (Fedora 16 and later)
  • slapi_rwlock support replaces direct NSPR PR_RWLock support - solves some deadlock issues in certain cases
  • improved entryrdn index
  • Performance improvements
    • Reduce DN normalization
    • speed up searches that use large filters with large result sets
  • Automember and Managed Entry improvements

Tickets for 1.2.10

These are all of the tickets targeted for 1.2.10. Tickets with Status closed and Resolution fixed have been fixed in this release.

Download, Install, Setup

The Download page has information about how to get the binaries. The Install_Guide has information about installation and setup.

389 Directory Server 1.2.10.a8 Testing - January 25, 2012

389-ds-base version 1.2.10.a8 is released to the Testing repositories. This release contains some new features, support for SystemD on Fedora 16 and later, and many bug fixes. The other big change is that we have moved our ticket tracking system from the Red Hat Bugzilla https://bugzilla.redhat.com/enter_bug.cgi?product=389 to our Fedora Hosted Trac https://fedorahosted.org/389. All of the old 389 bugs have been copied to Trac. All new bugs, feature requests, and tasks should be entered in Trac.

WARNING: If you are upgrading from a previous 1.2.6 release candidate, you will need to run fixfiles to fix some SELinux AVCs, or directory server will not start. See bug https://bugzilla.redhat.com/show_bug.cgi?id=622882

To fix, run this:

fixfiles -R 389-ds-base restore

If you are upgrading from 1.2.5 or earlier, or a stable 1.2.6 or later, there is no problem.

WARNING: If you are upgrading from a 1.2.6 alpha or release candidate, you will need to manually fix your entryrdn index files. See Subtree Rename Warning for more information. If you are upgrading from 1.2.5 or earlier, or a stable 1.2.6 or later, there is no problem.

WARNING Plugin Writers: Plugins should be made transaction aware so that they can be called from within a backend pre/post transaction plugin. Otherwise, attempting to perform an internal operation will cause a deadlock. See Plugins

The new packages and versions are:

  • 389-ds-base 1.2.10.a8
  • 389-admin 1.1.26

Installation

See Download for information about setting up your yum repositories. Then use yum install 389-ds

yum install 389-ds

After install completes, run setup-ds-admin.pl to set up your directory server.

setup-ds-admin.pl

Upgrade

See Download for information about setting up your yum repositories. Then use yum upgrade

yum upgrade

After upgrade completes, run setup-ds-admin.pl -u to update your directory server/admin server/console information.

setup-ds-admin.pl -u

See Download for more information about setting up yum access.

See Install_Guide for more information about the initial installation, setup, and upgrade.

See Source for information about source tarballs and SCM (git) access.

EL6 - see Download for EL6 instructions

Your Feedback is Important!

The best way to provide feedback is via the Fedora Update system.

  • Go to https://admin.fedoraproject.org/updates
  • In the Search box in the upper right hand corner, type in the name of the package
  • In the list, find the version and release you are using (if you're not sure, use rpm -qi <package name> on your system) and click on the release
  • On the page for the update, scroll down to "Add a comment" and provide your input

Or just send us an email to 389-users@lists.fedoraproject.org

If you find a bug, or would like to see a new feature, use the 389 Trac - https://fedorahosted.org/389

Notes

NOTE: Fedora versions below 15 are no longer supported. If you are running Fedora 14 or earlier, you should upgrade.

NOTE: If you are using the console, after installing the updates, you must run setup-ds-admin.pl -u to refresh your console and admin server configuration with the new version information.

WARNING: If you are upgrading from 389 1.2.6 rcN (N < 6), simple upgrade won't work due to the entryrdn format change (See also Bug 616608 - SIGBUS in RDN index reads on platforms with strict alignments ). Please follow the steps described in this section.

WARNING: If you are upgrading from a previous 1.2.6 release candidate, you will need to run fixfiles to fix some SELinux AVCs, or directory server will not start. See bug https://bugzilla.redhat.com/show_bug.cgi?id=622882

To fix, run this:

fixfiles -R 389-ds-base restore

New features

  • Account Usability Control support
  • database transaction pre/post plugins
    • Changelog writes use main database transaction
    • All plugins are transaction aware
  • native systemd support (Fedora 16 and later)
  • slapi_rwlock support replaces direct NSPR PR_RWLock support - solves some deadlock issues in certain cases
  • improved entryrdn index
  • Performance improvements
    • Reduce DN normalization
    • speed up searches that use large filters with large result sets
  • Automember and Managed Entry improvements

Tickets for 1.2.10

These are all of the tickets targeted for 1.2.10. Tickets with Status closed and Resolution fixed have been fixed in 1.2.10.a7 or earlier 1.2.10 alpha release. Other tickets are planned for 1.2.10.rc1.

Download, Install, Setup

The Download page has information about how to get the binaries. The Install_Guide has information about installation and setup.

389 Directory Server 1.2.9.9 - September 7, 2011

389-ds-base version 1.2.9.9 is released to the Stable repositories. This release contains fixes for bugs found in 1.2.8.x and 1.2.9.x. On those platforms which have OpenLDAP built with Mozilla NSS crypto support (Fedora 14 and later), the packages are built with OpenLDAP instead of the Mozilla LDAP C SDK. Other 389 packages have been updated as well. See below for the new packages and versions.

WARNING: If you are upgrading from a previous 1.2.6 release candidate, you will need to run fixfiles to fix some SELinux AVCs, or directory server will not start. See bug https://bugzilla.redhat.com/show_bug.cgi?id=622882

To fix, run this:

fixfiles -R 389-ds-base restore

If you are upgrading from 1.2.5 or earlier, or a stable 1.2.6 or 1.2.7 or 1.2.8, there is no problem.

WARNING: If you are upgrading from a 1.2.6 alpha or release candidate, you will need to manually fix your entryrdn index files. See Subtree Rename Warning for more information. If you are upgrading from 1.2.5 or earlier, or a stable 1.2.6 or later, there is no problem.

The new packages and versions are:

  • 389-ds-base 1.2.9.9
  • 389-admin 1.1.23

Installation

See Download for information about setting up your yum repositories. Then use yum install 389-ds

yum install 389-ds

After install completes, run setup-ds-admin.pl to set up your directory server.

setup-ds-admin.pl

Upgrade

See Download for information about setting up your yum repositories. Then use yum upgrade

yum upgrade

After upgrade completes, run setup-ds-admin.pl -u to update your directory server/admin server/console information.

setup-ds-admin.pl -u

See Download for more information about setting up yum access.

See Install_Guide for more information about the initial installation, setup, and upgrade.

See Source for information about source tarballs and SCM (git) access.

EL6 - see Download for EL6 instructions

Your Feedback is Important!

The best way to provide feedback is via the Fedora Update system.

  • Go to https://admin.fedoraproject.org/updates
  • In the Search box in the upper right hand corner, type in the name of the package
  • In the list, find the version and release you are using (if you're not sure, use rpm -qi <package name> on your system) and click on the release
  • On the page for the update, scroll down to "Add a comment" and provide your input

Or just send us an email to 389-users@lists.fedoraproject.org

If you find a bug, or would like to see a new feature, you can enter it here - https://bugzilla.redhat.com/enter_bug.cgi?product=389

Notes

NOTE: Fedora versions below 14 are no longer supported. If you are running Fedora 13 or earlier, you should upgrade.

NOTE: If you are using the console, after installing the updates, you must run setup-ds-admin.pl -u to refresh your console and admin server configuration with the new version information.

WARNING: If you are upgrading from 389 1.2.6 rcN (N < 6), simple upgrade won't work due to the entryrdn format change (See also Bug 616608 - SIGBUS in RDN index reads on platforms with strict alignments ). Please follow the steps described in this section.

WARNING: If you are upgrading from a previous 1.2.6 release candidate, you will need to run fixfiles to fix some SELinux AVCs, or directory server will not start. See bug https://bugzilla.redhat.com/show_bug.cgi?id=622882

To fix, run this:

fixfiles -R 389-ds-base restore

New features

Bugs Fixed

NOTE: bugs marked MODIFIED have been fixed but not fully tested and verified.

Download, Install, Setup

The Download page has information about how to get the binaries. The Install_Guide has information about installation and setup.

389 Directory Server 1.2.9.8 Testing - September 1, 2011

389-ds-base version 1.2.9.8 is released to the Testing repositories. This release contains fixes for bugs found in 1.2.8.x and 1.2.9.x. On those platforms which have OpenLDAP built with Mozilla NSS crypto support (Fedora 14 and later), the packages are built with OpenLDAP instead of the Mozilla LDAP C SDK. Other 389 packages have been updated as well. See below for the new packages and versions.

WARNING: If you are upgrading from a previous 1.2.6 release candidate, you will need to run fixfiles to fix some SELinux AVCs, or directory server will not start. See bug https://bugzilla.redhat.com/show_bug.cgi?id=622882

To fix, run this:

fixfiles -R 389-ds-base restore

If you are upgrading from 1.2.5 or earlier, or a stable 1.2.6 or 1.2.7 or 1.2.8, there is no problem.

WARNING: If you are upgrading from a 1.2.6 alpha or release candidate, you will need to manually fix your entryrdn index files. See Subtree Rename Warning for more information. If you are upgrading from 1.2.5 or earlier, or a stable 1.2.6 or later, there is no problem.

The new packages and versions are:

  • 389-ds-base 1.2.9.8
  • 389-admin 1.1.23

Installation

yum install --enablerepo=updates-testing 389-ds
OR
yum install --enablerepo=epel-testing 389-ds
setup-ds-admin.pl

Upgrade

yum upgrade --enablerepo=updates-testing 389-ds-base \
 389-admin idm-console-framework 389-ds-console 389-admin-console \
 389-adminutil 389-dsgw 389-console
OR
yum upgrade --enablerepo=epel-testing 389-ds-base \
 389-admin idm-console-framework 389-ds-console 389-admin-console \
 389-adminutil 389-dsgw 389-console
setup-ds-admin.pl -u

See Download for more information about setting up yum access.

See Install_Guide for more information about the initial installation, setup, and upgrade.

See Source for information about source tarballs and SCM (git) access.

EL6 - see Download for EL6 instructions

Your Feedback is Important!

The best way to provide feedback is via the Fedora Update system.

  • Go to https://admin.fedoraproject.org/updates
  • In the Search box in the upper right hand corner, type in the name of the package
  • In the list, find the version and release you are using (if you're not sure, use rpm -qi <package name> on your system) and click on the release
  • On the page for the update, scroll down to "Add a comment" and provide your input

Or just send us an email to 389-users@lists.fedoraproject.org

If you find a bug, or would like to see a new feature, you can enter it here - https://bugzilla.redhat.com/enter_bug.cgi?product=389

Notes

NOTE: Fedora versions below 14 are no longer supported. If you are running Fedora 13 or earlier, you should upgrade.

NOTE: If you are using the console, after installing the updates, you must run setup-ds-admin.pl -u to refresh your console and admin server configuration with the new version information.

WARNING: If you are upgrading from 389 1.2.6 rcN (N < 6), simple upgrade won't work due to the entryrdn format change (See also Bug 616608 - SIGBUS in RDN index reads on platforms with strict alignments ). Please follow the steps described in this section.

WARNING: If you are upgrading from a previous 1.2.6 release candidate, you will need to run fixfiles to fix some SELinux AVCs, or directory server will not start. See bug https://bugzilla.redhat.com/show_bug.cgi?id=622882

To fix, run this:

fixfiles -R 389-ds-base restore

New features

Bugs Fixed

NOTE: bugs marked MODIFIED have been fixed but not fully tested and verified.

Download, Install, Setup

The Download page has information about how to get the binaries. The Install_Guide has information about installation and setup.

389 Directory Server 1.2.9.6 Testing - August 12, 2011

389-ds-base version 1.2.9.6 is released to the Testing repositories. This release contains fixes for bugs found in 1.2.8.x and 1.2.9.x. On those platforms which have OpenLDAP built with Mozilla NSS crypto support (Fedora 14 and later), the packages are built with OpenLDAP instead of the Mozilla LDAP C SDK. Other 389 packages have been updated as well. See below for the new packages and versions.

WARNING: If you are upgrading from a previous 1.2.6 release candidate, you will need to run fixfiles to fix some SELinux AVCs, or directory server will not start. See bug https://bugzilla.redhat.com/show_bug.cgi?id=622882

To fix, run this:

fixfiles -R 389-ds-base restore

If you are upgrading from 1.2.5 or earlier, or a stable 1.2.6 or 1.2.7 or 1.2.8, there is no problem.

WARNING: If you are upgrading from a 1.2.6 alpha or release candidate, you will need to manually fix your entryrdn index files. See Subtree Rename Warning for more information. If you are upgrading from 1.2.5 or earlier, or a stable 1.2.6 or later, there is no problem.

The new packages and versions are:

  • 389-ds-base 1.2.9.6
  • 389-admin 1.1.22
  • 389-admin-console 1.1.8

Installation

yum install --enablerepo=updates-testing 389-ds
OR
yum install --enablerepo=epel-testing 389-ds
setup-ds-admin.pl

Upgrade

yum upgrade --enablerepo=updates-testing 389-ds-base \
 389-admin idm-console-framework 389-ds-console 389-admin-console \
 389-adminutil 389-dsgw 389-console
OR
yum upgrade --enablerepo=epel-testing 389-ds-base \
 389-admin idm-console-framework 389-ds-console 389-admin-console \
 389-adminutil 389-dsgw 389-console
setup-ds-admin.pl -u

See Download for more information about setting up yum access.

See Install_Guide for more information about the initial installation, setup, and upgrade.

See Source for information about source tarballs and SCM (git) access.

EL6 - see Download for EL6 instructions

Your Feedback is Important!

The best way to provide feedback is via the Fedora Update system.

  • Go to https://admin.fedoraproject.org/updates
  • In the Search box in the upper right hand corner, type in the name of the package
  • In the list, find the version and release you are using (if you're not sure, use rpm -qi <package name> on your system) and click on the release
  • On the page for the update, scroll down to "Add a comment" and provide your input

Or just send us an email to 389-users@lists.fedoraproject.org

If you find a bug, or would like to see a new feature, you can enter it here - https://bugzilla.redhat.com/enter_bug.cgi?product=389

Notes

NOTE: Fedora versions below 14 are no longer supported. If you are running Fedora 13 or earlier, you should upgrade.

NOTE: If you are using the console, after installing the updates, you must run setup-ds-admin.pl -u to refresh your console and admin server configuration with the new version information.

WARNING: If you are upgrading from 389 1.2.6 rcN (N < 6), simple upgrade won't work due to the entryrdn format change (See also Bug 616608 - SIGBUS in RDN index reads on platforms with strict alignments ). Please follow the steps described in this section.

WARNING: If you are upgrading from a previous 1.2.6 release candidate, you will need to run fixfiles to fix some SELinux AVCs, or directory server will not start. See bug https://bugzilla.redhat.com/show_bug.cgi?id=622882

To fix, run this:

fixfiles -R 389-ds-base restore

New features

Bugs Fixed

NOTE: bugs marked MODIFIED have been fixed but not fully tested and verified.

Download, Install, Setup

The Download page has information about how to get the binaries. The Install_Guide has information about installation and setup.

389 Directory Server 1.2.9.0 - July 25, 2011

389-ds-base version 1.2.9.0 is released to the Stable repositories. This release contains fixes for bugs found in 1.2.8.x and 1.2.9 alpha testing. On those platforms which have OpenLDAP built with Mozilla NSS crypto support (Fedora 14 and later), the packages are built with OpenLDAP instead of the Mozilla LDAP C SDK. Other 389 packages have been updated as well. See below for the new packages and versions.

WARNING: If you are upgrading from a previous 1.2.6 release candidate, you will need to run fixfiles to fix some SELinux AVCs, or directory server will not start. See bug https://bugzilla.redhat.com/show_bug.cgi?id=622882

To fix, run this:

fixfiles -R 389-ds-base restore

If you are upgrading from 1.2.5 or earlier, or a stable 1.2.6 or 1.2.7 or 1.2.8, there is no problem.

WARNING: If you are upgrading from a 1.2.6 alpha or release candidate, you will need to manually fix your entryrdn index files. See Subtree Rename Warning for more information. If you are upgrading from 1.2.5 or earlier, or a stable 1.2.6 or later, there is no problem.

The new packages and versions are:

  • 389-ds-base 1.2.9.0
  • 389-admin 1.1.20
  • idm-console-framework 1.1.7 (note - built from source in git instead of CVS)
  • 389-ds-console 1.2.6
  • 389-admin-console 1.1.7
  • 389-console 1.1.7
  • 389-adminutil-1.1.14
  • 389-dsgw-1.1.7

Installation

yum install 389-ds
setup-ds-admin.pl

Upgrade

yum upgrade 389-ds-base \
 389-admin idm-console-framework 389-ds-console 389-admin-console \
 389-adminutil 389-dsgw 389-console
setup-ds-admin.pl -u

See Download for more information about setting up yum access.

See Install_Guide for more information about the initial installation, setup, and upgrade.

See Source for information about source tarballs and SCM (git) access.

EL6 - see Download for EL6 instructions

Your Feedback is Important!

The best way to provide feedback is via the Fedora Update system.

  • Go to https://admin.fedoraproject.org/updates
  • In the Search box in the upper right hand corner, type in the name of the package
  • In the list, find the version and release you are using (if you're not sure, use rpm -qi <package name> on your system) and click on the release
  • On the page for the update, scroll down to "Add a comment" and provide your input

Or just send us an email to 389-users@lists.fedoraproject.org

If you find a bug, or would like to see a new feature, you can enter it here - https://bugzilla.redhat.com/enter_bug.cgi?product=389

Notes

NOTE: Fedora versions below 14 are no longer supported. If you are running Fedora 13 or earlier, you should upgrade.

NOTE: If you are using the console, after installing the updates, you must run setup-ds-admin.pl -u to refresh your console and admin server configuration with the new version information.

WARNING: If you are upgrading from 389 1.2.6 rcN (N < 6), simple upgrade won't work due to the entryrdn format change (See also Bug 616608 - SIGBUS in RDN index reads on platforms with strict alignments ). Please follow the steps described in this section.

WARNING: If you are upgrading from a previous 1.2.6 release candidate, you will need to run fixfiles to fix some SELinux AVCs, or directory server will not start. See bug https://bugzilla.redhat.com/show_bug.cgi?id=622882

To fix, run this:

fixfiles -R 389-ds-base restore

New features

Bugs Fixed

NOTE: bugs marked MODIFIED have been fixed but not fully tested and verified.

Download, Install, Setup

The Download page has information about how to get the binaries. The Install_Guide has information about installation and setup.

389 Directory Server 1.2.8.3 - May 24, 2011

389-ds-base version 1.2.8.3 is released to the Stable repositories. This release contains fixes for bugs found in 1.2.8.2 testing. On those platforms which have OpenLDAP built with Mozilla NSS crypto support (Fedora 14 and later), the packages are built with OpenLDAP instead of the Mozilla LDAP C SDK. We have removed the SELinux policy from the 389-ds-base and 389-admin packages on Fedora. The policy will be provided by the SELinux policy in the base OS. On EL, the policy will continue to be provided by the 389 packages. Other 389 packages have been updated as well. See below for the new packages and versions.

WARNING: If you are upgrading from a previous 1.2.6 release candidate, you will need to run fixfiles to fix some SELinux AVCs, or directory server will not start. See bug https://bugzilla.redhat.com/show_bug.cgi?id=622882

To fix, run this:

fixfiles -R 389-ds-base restore

If you are upgrading from 1.2.5 or earlier, or a stable 1.2.6 or 1.2.7, there is no problem.

WARNING: If you are upgrading from a 1.2.6 alpha or release candidate, you will need to manually fix your entryrdn index files. See Subtree Rename Warning for more information. If you are upgrading from 1.2.5 or earlier, or a stable 1.2.6, there is no problem.

The new packages and versions are:

  • 389-ds-base 1.2.8.3
  • 389-admin 1.1.16
  • idm-console-framework 1.1.7
  • 389-ds-console 1.2.5
  • 389-admin-console 1.1.7

Installation

yum install --enablerepo=[updates-testing|epel-testing] 389-ds
setup-ds-admin.pl

Upgrade

yum upgrade --enablerepo=[updates-testing|epel-testing] 389-ds-base \
 389-admin idm-console-framework 389-ds-console 389-admin-console
setup-ds-admin.pl -u

See Download for more information about setting up yum access. See Install_Guide for more information about the initial installation, setup, and upgrade

Your Feedback is Important!

The best way to provide feedback is via the Fedora Update system. Each update is broken down by package and platform. For example, if you are using Fedora 13, and you have successfully installed or upgraded all of the packages, and the console and etc. works, then go to the links below for Fedora 13 and provide feedback.

scroll down to the bottom of the page, and click on the Add a comment >> link

  • select one of the Works for me or Does not work radio buttons, add text, and click on the Add Comment button

If you are using a build on another platform, just send us an email to 389-users@lists.fedoraproject.org

If you find a bug, or would like to see a new feature, you can enter it here - https://bugzilla.redhat.com/enter_bug.cgi?product=389

Notes

NOTE: There is a new sub package 389-ds-base-libs. This package contains libraries used by 389-ds-base and 389-ds-base-devel. If you use yum to install 389-ds-base, this dependency will automatically be taken care of. To remove the 389-ds-base package from the system, you must also remove the -libs package. If you use yum erase 389-ds-base-libs it will also remove 389-ds-base and any other dependent package.

NOTE: Fedora versions below 13 are no longer supported. If you are running Fedora 12 or earlier, you should upgrade.

NOTE: If you are using the console, after installing the updates, you must run setup-ds-admin.pl -u to refresh your console and admin server configuration with the new version information.

NOTE: 389-console is the command to run the console. This replaces fedora-idm-console.

WARNING: If you are upgrading from 389 1.2.6 rcN (N < 6), simple upgrade won't work due to the entryrdn format change (See also Bug 616608 - SIGBUS in RDN index reads on platforms with strict alignments ). Please follow the steps described in this section.

WARNING: If you are upgrading from a previous 1.2.6 release candidate, you will need to run fixfiles to fix some SELinux AVCs, or directory server will not start. See bug https://bugzilla.redhat.com/show_bug.cgi?id=622882

To fix, run this:

fixfiles -R 389-ds-base restore

New features

This is a bug fix release, no new features

Bugs Fixed

NOTE: bugs marked MODIFIED have been fixed but not fully tested and verified.

Bugs fixed since 1.2.8.2 in 389-ds-base:

  • Bug 700145 - userpasswd not replicating
  • Bug 700557 - Linked attrs callbacks access free'd pointers after close
  • Bug 694336 - Group sync hangs Windows initial Sync
  • Bug 700215 - ldclt core dumps
  • Bug 695779 - windows sync can lose old values when a new value is added
  • Bug 697027 - 12 - minor memory leaks found by Valgrind + TET

Download, Install, Setup

The Download page has information about how to get the binaries. The Install_Guide has information about installation and setup.

389 Directory Server 1.2.8.2 - April 25, 2011

389-ds-base version 1.2.8.2 is released to the Stable repositories. This release contains a fix for a bug found in 1.2.8.1 testing. On those platforms which have OpenLDAP built with Mozilla NSS crypto support (Fedora 14 and later), the packages are built with OpenLDAP instead of the Mozilla LDAP C SDK. We have removed the SELinux policy from the 389-ds-base and 389-admin packages on Fedora. The policy will be provided by the SELinux policy in the base OS. On EL, the policy will continue to be provided by the 389 packages. Other 389 packages have been updated as well. See below for the new packages and versions.

WARNING: If you are upgrading from a previous 1.2.6 release candidate, you will need to run fixfiles to fix some SELinux AVCs, or directory server will not start. See bug https://bugzilla.redhat.com/show_bug.cgi?id=622882

To fix, run this:

fixfiles -R 389-ds-base restore

If you are upgrading from 1.2.5 or earlier, or a stable 1.2.6 or 1.2.7, there is no problem.

WARNING: If you are upgrading from a 1.2.6 alpha or release candidate, you will need to manually fix your entryrdn index files. See Subtree Rename Warning for more information. If you are upgrading from 1.2.5 or earlier, or a stable 1.2.6, there is no problem.

The new packages and versions are:

  • 389-ds-base 1.2.8.2
  • 389-admin 1.1.16
  • idm-console-framework 1.1.7
  • 389-ds-console 1.2.5
  • 389-admin-console 1.1.7

Installation

yum install --enablerepo=[updates-testing|epel-testing] 389-ds
setup-ds-admin.pl

Upgrade

yum upgrade --enablerepo=[updates-testing|epel-testing] 389-ds-base \
 389-admin idm-console-framework 389-ds-console 389-admin-console
setup-ds-admin.pl -u

See Download for more information about setting up yum access. See Install_Guide for more information about the initial installation, setup, and upgrade

Your Feedback is Important!

The best way to provide feedback is via the Fedora Update system. Each update is broken down by package and platform. For example, if you are using Fedora 13, and you have successfully installed or upgraded all of the packages, and the console and etc. works, then go to the links below for Fedora 13 and provide feedback.

scroll down to the bottom of the page, and click on the Add a comment >> link

  • select one of the Works for me or Does not work radio buttons, add text, and click on the Add Comment button

If you are using a build on another platform, just send us an email to 389-users@lists.fedoraproject.org

If you find a bug, or would like to see a new feature, you can enter it here - https://bugzilla.redhat.com/enter_bug.cgi?product=389

Notes

NOTE: There is a new sub package 389-ds-base-libs. This package contains libraries used by 389-ds-base and 389-ds-base-devel. If you use yum to install 389-ds-base, this dependency will automatically be taken care of. To remove the 389-ds-base package from the system, you must also remove the -libs package. If you use yum erase 389-ds-base-libs it will also remove 389-ds-base and any other dependent package.

NOTE: Fedora versions below 13 are no longer supported. If you are running Fedora 12 or earlier, you should upgrade.

NOTE: If you are using the console, after installing the updates, you must run setup-ds-admin.pl -u to refresh your console and admin server configuration with the new version information.

NOTE: 389-console is the command to run the console. This replaces fedora-idm-console.

WARNING: If you are upgrading from 389 1.2.6 rcN (N < 6), simple upgrade won't work due to the entryrdn format change (See also Bug 616608 - SIGBUS in RDN index reads on platforms with strict alignments ). Please follow the steps described in this section.

WARNING: If you are upgrading from a previous 1.2.6 release candidate, you will need to run fixfiles to fix some SELinux AVCs, or directory server will not start. See bug https://bugzilla.redhat.com/show_bug.cgi?id=622882

To fix, run this:

fixfiles -R 389-ds-base restore

New features

This is a bug fix release, no new features

Bugs Fixed

NOTE: bugs marked MODIFIED have been fixed but not fully tested and verified.

Bugs fixed since 1.2.8.1 in 389-ds-base:

  • Bug 696407 - If an entry with a mixed case RDN is turned to be a tombstone, it fails to assemble DN from entryrdn

Download, Install, Setup

The Download page has information about how to get the binaries. The Install_Guide has information about installation and setup.

389 Directory Server 1.2.8.2 Testing - April 18, 2011

389-ds-base version 1.2.8.2 has been released to the Testing repositories. This release contains a fix for a bug found in 1.2.8.1 testing. On those platforms which have OpenLDAP built with Mozilla NSS crypto support (Fedora 14 and later), the packages are built with OpenLDAP instead of the Mozilla LDAP C SDK. We have removed the SELinux policy from the 389-ds-base and 389-admin packages on Fedora. The policy will be provided by the SELinux policy in the base OS. On EL, the policy will continue to be provided by the 389 packages.

WARNING: If you are upgrading from a previous 1.2.6 release candidate, you will need to run fixfiles to fix some SELinux AVCs, or directory server will not start. See bug https://bugzilla.redhat.com/show_bug.cgi?id=622882

To fix, run this:

fixfiles -R 389-ds-base restore

If you are upgrading from 1.2.5 or earlier, or a stable 1.2.6 or 1.2.7, there is no problem.

WARNING: If you are upgrading from a 1.2.6 alpha or release candidate, you will need to manually fix your entryrdn index files. See Subtree Rename Warning for more information. If you are upgrading from 1.2.5 or earlier, or a stable 1.2.6, there is no problem.

The new packages and versions are:

  • 389-ds-base 1.2.8.2

Installation

yum install --enablerepo=[updates-testing|epel-testing] 389-ds
setup-ds-admin.pl

Upgrade

yum upgrade --enablerepo=[updates-testing|epel-testing] 389-ds-base \
 389-admin idm-console-framework 389-ds-console 389-admin-console
setup-ds-admin.pl -u

See Download for more information about setting up yum access. See Install_Guide for more information about the initial installation, setup, and upgrade

Your Feedback is Important!

The best way to provide feedback is via the Fedora Update system. Each update is broken down by package and platform. For example, if you are using Fedora 13, and you have successfully installed or upgraded all of the packages, and the console and etc. works, then go to the links below for Fedora 13 and provide feedback.

scroll down to the bottom of the page, and click on the Add a comment >> link

  • select one of the Works for me or Does not work radio buttons, add text, and click on the Add Comment button

If you are using a build on another platform, just send us an email to 389-users@lists.fedoraproject.org

If you find a bug, or would like to see a new feature, you can enter it here - https://bugzilla.redhat.com/enter_bug.cgi?product=389

Notes

NOTE: There is a new sub package 389-ds-base-libs. This package contains libraries used by 389-ds-base and 389-ds-base-devel. If you use yum to install 389-ds-base, this dependency will automatically be taken care of. To remove the 389-ds-base package from the system, you must also remove the -libs package. If you use yum erase 389-ds-base-libs it will also remove 389-ds-base and any other dependent package.

NOTE: Fedora versions below 13 are no longer supported. If you are running Fedora 12 or earlier, you should upgrade.

NOTE: If you are using the console, after installing the updates, you must run setup-ds-admin.pl -u to refresh your console and admin server configuration with the new version information.

NOTE: 389-console is the command to run the console. This replaces fedora-idm-console.

WARNING: If you are upgrading from 389 1.2.6 rcN (N < 6), simple upgrade won't work due to the entryrdn format change (See also Bug 616608 - SIGBUS in RDN index reads on platforms with strict alignments ). Please follow the steps described in this section.

WARNING: If you are upgrading from a previous 1.2.6 release candidate, you will need to run fixfiles to fix some SELinux AVCs, or directory server will not start. See bug https://bugzilla.redhat.com/show_bug.cgi?id=622882

To fix, run this:

fixfiles -R 389-ds-base restore

New features

This is a bug fix release, no new features

Bugs Fixed

NOTE: bugs marked MODIFIED have been fixed but not fully tested and verified.

Bugs fixed since 1.2.8.1 in 389-ds-base:

  • Bug 696407 - If an entry with a mixed case RDN is turned to be a tombstone, it fails to assemble DN from entryrdn

Download, Install, Setup

The Download page has information about how to get the binaries. The Install_Guide has information about installation and setup.

389 Directory Server 1.2.8.1 Testing - April 11, 2011

389-ds-base version 1.2.8.1 has been released to the Testing repositories. This release contains many fixes for bugs found in 1.2.7 and 1.2.8 testing. On those platforms which have OpenLDAP built with Mozilla NSS crypto support (Fedora 14 and later), the packages are built with OpenLDAP instead of the Mozilla LDAP C SDK. We have removed the SELinux policy from the 389-ds-base and 389-admin packages on Fedora. The policy will be provided by the SELinux policy in the base OS. On EL, the policy will continue to be provided by the 389 packages.

WARNING: If you are upgrading from a previous 1.2.6 release candidate, you will need to run fixfiles to fix some SELinux AVCs, or directory server will not start. See bug https://bugzilla.redhat.com/show_bug.cgi?id=622882

To fix, run this:

fixfiles -R 389-ds-base restore

If you are upgrading from 1.2.5 or earlier, or a stable 1.2.6 or 1.2.7, there is no problem.

WARNING: If you are upgrading from a 1.2.6 alpha or release candidate, you will need to manually fix your entryrdn index files. See Subtree Rename Warning for more information. If you are upgrading from 1.2.5 or earlier, or a stable 1.2.6, there is no problem.

The new packages and versions are:

  • 389-ds-base 1.2.8.1

Installation

yum install --enablerepo=[updates-testing|epel-testing] 389-ds
setup-ds-admin.pl

Upgrade

yum upgrade --enablerepo=[updates-testing|epel-testing] 389-ds-base \
 389-admin idm-console-framework 389-ds-console 389-admin-console
setup-ds-admin.pl -u

See Download for more information about setting up yum access. See Install_Guide for more information about the initial installation, setup, and upgrade

Your Feedback is Important!

The best way to provide feedback is via the Fedora Update system. Each update is broken down by package and platform. For example, if you are using Fedora 13, and you have successfully installed or upgraded all of the packages, and the console and etc. works, then go to the links below for Fedora 13 and provide feedback.

scroll down to the bottom of the page, and click on the Add a comment >> link

  • select one of the Works for me or Does not work radio buttons, add text, and click on the Add Comment button

If you are using a build on another platform, just send us an email to 389-users@lists.fedoraproject.org

If you find a bug, or would like to see a new feature, you can enter it here - https://bugzilla.redhat.com/enter_bug.cgi?product=389

Notes

NOTE: There is a new sub package 389-ds-base-libs. This package contains libraries used by 389-ds-base and 389-ds-base-devel. If you use yum to install 389-ds-base, this dependency will automatically be taken care of. To remove the 389-ds-base package from the system, you must also remove the -libs package. If you use yum erase 389-ds-base-libs it will also remove 389-ds-base and any other dependent package.

NOTE: Fedora versions below 13 are no longer supported. If you are running Fedora 12 or earlier, you should upgrade.

NOTE: If you are using the console, after installing the updates, you must run setup-ds-admin.pl -u to refresh your console and admin server configuration with the new version information.

NOTE: 389-console is the command to run the console. This replaces fedora-idm-console.

WARNING: If you are upgrading from 389 1.2.6 rcN (N < 6), simple upgrade won't work due to the entryrdn format change (See also Bug 616608 - SIGBUS in RDN index reads on platforms with strict alignments ). Please follow the steps described in this section.

WARNING: If you are upgrading from a previous 1.2.6 release candidate, you will need to run fixfiles to fix some SELinux AVCs, or directory server will not start. See bug https://bugzilla.redhat.com/show_bug.cgi?id=622882

To fix, run this:

fixfiles -R 389-ds-base restore

New features

This is a bug fix release, no new features

Bugs Fixed

NOTE: bugs marked MODIFIED have been fixed but not fully tested and verified.

Bugs fixed since 1.2.8 RC 5 in 389-ds-base:

  • Bug 693962 - Full replica push loses some entries with multi-valued RDNs
  • Bug 693473 - rhds82 rfe - windows_tot_run to log Sizelimit exceeded instead of LDAP error - -1
  • Bug 692991 - rhds82 - windows_tot_run: failed to obtain data to send to the consumer; LDAP error - -1
  • Bug 693466 - Unable to change schema online
  • Bug 693503 - matching rules do not inherit from superior attribute type
  • Bug 693455 - nsMatchingRule does not work with multiple values
  • Bug 693451 - cannot use localized matching rules
  • Bug 692331 - Segfault on index update during full replication push on 1.2.7.5

Download, Install, Setup

The Download page has information about how to get the binaries. The Install_Guide has information about installation and setup.

389 Directory Server 1.2.8 Release Candidate 4 Testing - March 31, 2011

389-ds-base version 1.2.8 Release Candidate 4 (1.2.8.rc4) has been released to the Testing repositories. This release contains many fixes for bugs found in 1.2.7 and 1.2.8 testing. On those platforms which have OpenLDAP built with Mozilla NSS crypto support (Fedora 14 and later), the packages are built with OpenLDAP instead of the Mozilla LDAP C SDK. We have removed the SELinux policy from the 389-ds-base and 389-admin packages on Fedora. The policy will be provided by the SELinux policy in the base OS. On EL, the policy will continue to be provided by the 389 packages.

WARNING: If you are upgrading from a previous 1.2.6 release candidate, you will need to run fixfiles to fix some SELinux AVCs, or directory server will not start. See bug https://bugzilla.redhat.com/show_bug.cgi?id=622882

To fix, run this:

fixfiles -R 389-ds-base restore

If you are upgrading from 1.2.5 or earlier, or a stable 1.2.6 or 1.2.7, there is no problem.

WARNING: If you are upgrading from a 1.2.6 alpha or release candidate, you will need to manually fix your entryrdn index files. See Subtree Rename Warning for more information. If you are upgrading from 1.2.5 or earlier, or a stable 1.2.6, there is no problem.

The new packages and versions are:

  • 389-ds-base 1.2.8.rc4
  • 389-admin 1.1.16
  • idm-console-framework 1.1.7
  • 389-ds-console 1.2.5
  • 389-admin-console 1.1.7

Installation

yum install --enablerepo=[updates-testing|epel-testing] 389-ds
setup-ds-admin.pl

Upgrade

yum upgrade --enablerepo=[updates-testing|epel-testing] 389-ds-base \
 389-admin idm-console-framework 389-ds-console 389-admin-console
setup-ds-admin.pl -u

See Download for more information about setting up yum access. See Install_Guide for more information about the initial installation, setup, and upgrade

Your Feedback is Important!

The best way to provide feedback is via the Fedora Update system. Each update is broken down by package and platform. For example, if you are using Fedora 13, and you have successfully installed or upgraded all of the packages, and the console and etc. works, then go to the links below for Fedora 13 and provide feedback.

scroll down to the bottom of the page, and click on the Add a comment >> link

  • select one of the Works for me or Does not work radio buttons, add text, and click on the Add Comment button

If you are using a build on another platform, just send us an email to 389-users@lists.fedoraproject.org

If you find a bug, or would like to see a new feature, you can enter it here - https://bugzilla.redhat.com/enter_bug.cgi?product=389

Notes

NOTE: There is a new sub package 389-ds-base-libs. This package contains libraries used by 389-ds-base and 389-ds-base-devel. If you use yum to install 389-ds-base, this dependency will automatically be taken care of. To remove the 389-ds-base package from the system, you must also remove the -libs package. If you use yum erase 389-ds-base-libs it will also remove 389-ds-base and any other dependent package.

NOTE: Fedora versions below 13 are no longer supported. If you are running Fedora 12 or earlier, you should upgrade.

NOTE: If you are using the console, after installing the updates, you must run setup-ds-admin.pl -u to refresh your console and admin server configuration with the new version information.

NOTE: 389-console is the command to run the console. This replaces fedora-idm-console.

WARNING: If you are upgrading from 389 1.2.6 rcN (N < 6), simple upgrade won't work due to the entryrdn format change (See also Bug 616608 - SIGBUS in RDN index reads on platforms with strict alignments ). Please follow the steps described in this section.

WARNING: If you are upgrading from a previous 1.2.6 release candidate, you will need to run fixfiles to fix some SELinux AVCs, or directory server will not start. See bug https://bugzilla.redhat.com/show_bug.cgi?id=622882

To fix, run this:

fixfiles -R 389-ds-base restore

New features

This is a bug fix release, no new features

Bugs Fixed

NOTE: bugs marked MODIFIED have been fixed but not fully tested and verified.

Bugs fixed since 1.2.8.rc2 in 389-ds-base:

  • Bug 668385 - DS pipe log script is executed as many times as the dirsrv service is restarted
  • Bug 690955 - Mrclone fails due to the replica generation id mismatch

Bugs fixed in admin server and console:

  • Bug 476925 - Admin Server: Do not allow 8-bit passwords for the admin user
  • Bug 614690 - Don't use exec to call genrb
  • Bug 158926 - Unable to install CA certificate when using hardware token ( LunaSA )
  • Bug 211296 - Clean up all HTML pages (Admin Express, Repl Monitor, etc)
  • Bug 622436 - Removal of Security:domestic from Console
  • Bug 229699 - objectclass without parent causes StringIndexOutOfBounds in console
  • Bug 583652 - Console caches magic numbers instead of DNA-generated values
  • Bug 616707 - Add attribute matching rule UI to Console
  • Bug 533505 - Warn about CA cert trust when enabling SSL in Console
  • Bug 158262 - Windows Sync UI is inconistent
  • Bug 504803 - Allow nsslapd-*-logmaxdiskspace to be set to -1 in UI
  • Bug 474113 - Allow access log level to be configured from Console
  • Bug 229693 - Update naming attribute when objectclass is removed

Download, Install, Setup

The Download page has information about how to get the binaries. The Install_Guide has information about installation and setup.

389 Directory Server 1.2.8 Release Candidate 2 Testing - March 25, 2011

389-ds-base version 1.2.8 Release Candidate 2 (1.2.8.rc2) has been released to the Testing repositories. This release contains many fixes for bugs found in 1.2.7 and 1.2.8 testing. On those platforms which have OpenLDAP built with Mozilla NSS crypto support (Fedora 14 and later), the packages are built with OpenLDAP instead of the Mozilla LDAP C SDK. We have removed the SELinux policy from the 389-ds-base and 389-admin packages on Fedora. The policy will be provided by the SELinux policy in the base OS. On EL, the policy will continue to be provided by the 389 packages.

WARNING: If you are upgrading from a previous 1.2.6 release candidate, you will need to run fixfiles to fix some SELinux AVCs, or directory server will not start. See bug https://bugzilla.redhat.com/show_bug.cgi?id=622882

To fix, run this:

fixfiles -R 389-ds-base restore

If you are upgrading from 1.2.5 or earlier, or a stable 1.2.6 or 1.2.7, there is no problem.

WARNING: If you are upgrading from a 1.2.6 alpha or release candidate, you will need to manually fix your entryrdn index files. See Subtree Rename Warning for more information. If you are upgrading from 1.2.5 or earlier, or a stable 1.2.6, there is no problem.

The new packages and versions are:

  • 389-ds-base 1.2.8.rc2

Installation

yum install --enablerepo=[updates-testing|epel-testing] 389-ds
setup-ds-admin.pl

Upgrade

yum upgrade --enablerepo=[updates-testing|epel-testing] 389-ds-base \
 389-admin idm-console-framework 389-ds-console 389-admin-console
setup-ds-admin.pl -u

See Download for more information about setting up yum access. See Install_Guide for more information about the initial installation, setup, and upgrade

Your Feedback is Important!

The best way to provide feedback is via the Fedora Update system. Each update is broken down by package and platform. For example, if you are using Fedora 13, and you have successfully installed or upgraded all of the packages, and the console and etc. works, then go to the links below for Fedora 13 and provide feedback.

scroll down to the bottom of the page, and click on the Add a comment >> link

  • select one of the Works for me or Does not work radio buttons, add text, and click on the Add Comment button

If you are using a build on another platform, just send us an email to 389-users@lists.fedoraproject.org

If you find a bug, or would like to see a new feature, you can enter it here - https://bugzilla.redhat.com/enter_bug.cgi?product=389

Notes

NOTE: There is a new sub package 389-ds-base-libs. This package contains libraries used by 389-ds-base and 389-ds-base-devel. If you use yum to install 389-ds-base, this dependency will automatically be taken care of. To remove the 389-ds-base package from the system, you must also remove the -libs package. If you use yum erase 389-ds-base-libs it will also remove 389-ds-base and any other dependent package.

NOTE: Fedora versions below 13 are no longer supported. If you are running Fedora 12 or earlier, you should upgrade.

NOTE: If you are using the console, after installing the updates, you must run setup-ds-admin.pl -u to refresh your console and admin server configuration with the new version information.

NOTE: 389-console is the command to run the console. This replaces fedora-idm-console.

WARNING: If you are upgrading from 389 1.2.6 rcN (N < 6), simple upgrade won't work due to the entryrdn format change (See also Bug 616608 - SIGBUS in RDN index reads on platforms with strict alignments ). Please follow the steps described in this section.

WARNING: If you are upgrading from a previous 1.2.6 release candidate, you will need to run fixfiles to fix some SELinux AVCs, or directory server will not start. See bug https://bugzilla.redhat.com/show_bug.cgi?id=622882

To fix, run this:

fixfiles -R 389-ds-base restore

New features

This is a bug fix release, no new features

Bugs Fixed

NOTE: bugs marked MODIFIED have been fixed but not fully tested and verified.

Bugs fixed since 1.2.8.rc1 in 389-ds-base:

  • Bug 689537 - (cov#10610) Fix Coverity NULL pointer dereferences
  • Bug 689866 - ns-newpwpolicy.pl needs to use the new DN format
  • Bug 681015 - RFE: allow fine grained password policy duration attributes in days, hours, minutes, as well
  • Bug 684996 - Exported tombstone cannot be imported correctly
  • Bug 683250 - slapd crashing when traffic replayed
  • Bug 668909 - Can't modify replication agreement in some cases
  • Bug 504803 - Allow maxlogsize to be set if logmaxdiskspace is -1
  • Bug 644784 - Memory leak in "testbind.c" plugin
  • Bug 680558 - Winsync plugin fails to restrain itself to the configured subtree

Download, Install, Setup

The Download page has information about how to get the binaries. The Install_Guide has information about installation and setup.

389 Directory Server 1.2.8 Release Candidate 1 Testing - March 3, 2011

389-ds-base version 1.2.8 Release Candidate 1 (1.2.8.rc1) has been released to the Testing repositories. This release contains many fixes for bugs found in 1.2.7 and 1.2.8 alpha testing. On those platforms which have OpenLDAP built with Mozilla NSS crypto support (Fedora 14 and later), the packages are built with OpenLDAP instead of the Mozilla LDAP C SDK. We have removed the SELinux policy from the 389-ds-base and 389-admin packages on Fedora. The policy will be provided by the SELinux policy in the base OS. On EL, the policy will continue to be provided by the 389 packages.

WARNING: If you are upgrading from a previous 1.2.6 release candidate, you will need to run fixfiles to fix some SELinux AVCs, or directory server will not start. See bug https://bugzilla.redhat.com/show_bug.cgi?id=622882

To fix, run this:

fixfiles -R 389-ds-base restore

If you are upgrading from 1.2.5 or earlier, or a stable 1.2.6 or 1.2.7, there is no problem.

WARNING: If you are upgrading from a 1.2.6 alpha or release candidate, you will need to manually fix your entryrdn index files. See Subtree Rename Warning for more information. If you are upgrading from 1.2.5 or earlier, or a stable 1.2.6, there is no problem.

The new packages and versions are:

  • 389-ds-base 1.2.8.rc1

Installation

yum install --enablerepo=[updates-testing|epel-testing] 389-ds
setup-ds-admin.pl

Upgrade

yum upgrade --enablerepo=[updates-testing|epel-testing] 389-ds-base \
 389-admin idm-console-framework 389-ds-console 389-admin-console
setup-ds-admin.pl -u

See Download for more information about setting up yum access. See Install_Guide for more information about the initial installation, setup, and upgrade

Your Feedback is Important!

The best way to provide feedback is via the Fedora Update system. Each update is broken down by package and platform. For example, if you are using Fedora 13, and you have successfully installed or upgraded all of the packages, and the console and etc. works, then go to the links below for Fedora 13 and provide feedback.

scroll down to the bottom of the page, and click on the Add a comment >> link

  • select one of the Works for me or Does not work radio buttons, add text, and click on the Add Comment button

If you are using a build on another platform, just send us an email to 389-users@lists.fedoraproject.org

If you find a bug, or would like to see a new feature, you can enter it here - https://bugzilla.redhat.com/enter_bug.cgi?product=389

Notes

NOTE: There is a new sub package 389-ds-base-libs. This package contains libraries used by 389-ds-base and 389-ds-base-devel. If you use yum to install 389-ds-base, this dependency will automatically be taken care of. To remove the 389-ds-base package from the system, you must also remove the -libs package. If you use yum erase 389-ds-base-libs it will also remove 389-ds-base and any other dependent package.

NOTE: Fedora versions below 13 are no longer supported. If you are running Fedora 12 or earlier, you should upgrade.

NOTE: If you are using the console, after installing the updates, you must run setup-ds-admin.pl -u to refresh your console and admin server configuration with the new version information.

NOTE: 389-console is the command to run the console. This replaces fedora-idm-console.

WARNING: If you are upgrading from 389 1.2.6 rcN (N < 6), simple upgrade won't work due to the entryrdn format change (See also Bug 616608 - SIGBUS in RDN index reads on platforms with strict alignments ). Please follow the steps described in this section.

WARNING: If you are upgrading from a previous 1.2.6 release candidate, you will need to run fixfiles to fix some SELinux AVCs, or directory server will not start. See bug https://bugzilla.redhat.com/show_bug.cgi?id=622882

To fix, run this:

fixfiles -R 389-ds-base restore

New features

This is a bug fix release, no new features

Bugs Fixed

NOTE: bugs marked MODIFIED have been fixed but not fully tested and verified.

Bugs fixed since 1.2.8.a3 in 389-ds-base:

  • Bug 518890 - setup-ds-admin.pl - improve hostname validation
  • Bug 681015 - RFE: allow fine grained password policy duration attributes in days, hours, minutes, as well
  • Bug 514190 - setup-ds-admin.pl --debug does not log to file
  • Bug 680555 - ns-slapd segfaults if I have more than 100 DBs
  • Bug 681345 - setup-ds.pl should set SuiteSpotGroup automatically
  • Bug 674852 - crash in ldap-agent when using OpenLDAP
  • Bug 679978 - modifying attr value crashes the server, which is supposed to be indexed as substring type, but has octetstring syntax
  • Bug 676655 - winsync stops working after server restart
  • Bug 677705 - ds-logpipe.py script is failing to validate "-s" and "--serverpid" options with "-t".
  • Bug 625424 - repl-monitor.pl doesn't work in hub node

Download, Install, Setup

The Download page has information about how to get the binaries. The Install_Guide has information about installation and setup.

389 Directory Server 1.2.8 Alpha 3 Testing - February 25, 2011

389-ds-base version 1.2.8 Alpha 3 (1.2.8.a3) has been released to the Testing repositories. This release contains many fixes for bugs found in 1.2.7 and 1.2.8 alpha testing. On those platforms which have OpenLDAP built with Mozilla NSS crypto support (Fedora 14 and later), the packages are built with OpenLDAP instead of the Mozilla LDAP C SDK. We have removed the SELinux policy from the 389-ds-base and 389-admin packages on Fedora. The policy will be provided by the SELinux policy in the base OS. On EL, the policy will continue to be provided by the 389 packages.

WARNING: If you are upgrading from a previous 1.2.6 release candidate, you will need to run fixfiles to fix some SELinux AVCs, or directory server will not start. See bug https://bugzilla.redhat.com/show_bug.cgi?id=622882

To fix, run this:

fixfiles -R 389-ds-base restore

If you are upgrading from 1.2.5 or earlier, or a stable 1.2.6 or 1.2.7, there is no problem.

WARNING: If you are upgrading from a 1.2.6 alpha or release candidate, you will need to manually fix your entryrdn index files. See Subtree Rename Warning for more information. If you are upgrading from 1.2.5 or earlier, or a stable 1.2.6, there is no problem.

The new packages and versions are:

  • 389-ds-base 1.2.8.a3
  • idm-console-framework 1.1.6
  • 389-admin 1.1.15
  • 389-ds-console 1.2.4
  • 389-admin-console 1.1.6

Installation

yum install --enablerepo=[updates-testing|epel-testing] 389-ds
setup-ds-admin.pl

Upgrade

yum upgrade --enablerepo=[updates-testing|epel-testing] 389-ds-base \
 389-admin idm-console-framework 389-ds-console 389-admin-console
setup-ds-admin.pl -u

See Download for more information about setting up yum access. See Install_Guide for more information about the initial installation, setup, and upgrade

Your Feedback is Important!

The best way to provide feedback is via the Fedora Update system. Each update is broken down by package and platform. For example, if you are using Fedora 13, and you have successfully installed or upgraded all of the packages, and the console and etc. works, then go to the links below for Fedora 13 and provide feedback.

scroll down to the bottom of the page, and click on the Add a comment >> link

  • select one of the Works for me or Does not work radio buttons, add text, and click on the Add Comment button

If you are using a build on another platform, just send us an email to 389-users@lists.fedoraproject.org

If you find a bug, or would like to see a new feature, you can enter it here - https://bugzilla.redhat.com/enter_bug.cgi?product=389

Notes

NOTE: Fedora versions below 13 are no longer supported. If you are running Fedora 12 or earlier, you should upgrade.

NOTE: If you are using the console, after installing the updates, you must run setup-ds-admin.pl -u to refresh your console and admin server configuration with the new version information.

NOTE: 389-console is the command to run the console. This replaces fedora-idm-console.

WARNING: If you are upgrading from 389 1.2.6 rcN (N < 6), simple upgrade won't work due to the entryrdn format change (See also Bug 616608 - SIGBUS in RDN index reads on platforms with strict alignments ). Please follow the steps described in this section.

WARNING: If you are upgrading from a previous 1.2.6 release candidate, you will need to run fixfiles to fix some SELinux AVCs, or directory server will not start. See bug https://bugzilla.redhat.com/show_bug.cgi?id=622882

To fix, run this:

fixfiles -R 389-ds-base restore

New features

This is a bug fix release, no new features

Bugs Fixed

NOTE: bugs marked MODIFIED have been fixed but not fully tested and verified.

Bugs fixed since 1.2.8.a2 in 389-ds-base:

  • Bug 675320 - empty modify operation with repl on or lastmod off will crash server
  • Bug 666076 - dirsrv crash (1.2.7.5) with multiple simple paged result searches
  • Bug 672468 - Don't use empty path elements in LD_LIBRARY_PATH
  • Bug 671199 - Don't allow other to write to rundir
  • Bug 678646 - Ignore tombstone operations in managed entry plug-in
  • Bug 677774 - DS fails to start after reboot
  • Bug 676053 - export task followed by import task causes cache assertion
  • Bug 677440 - clean up compiler warnings in 389-ds-base 1.2.8
  • Bug 675113 - ns-slapd core dump in windows_tot_run if oneway sync is used
  • Bug 676689 - crash while adding a new user to be synced to windows
  • Bug 604881 - admin server log files have incorrect permissions/ownerships
  • Bug 668385 - DS pipe log script is executed as many times as the dirsrv service is restarted
  • Bug 675853 - dirsrv crash segfault in need_new_pw()
  • Bug 675265 - preventryusn gets added to entries on a failed delete

Bugs fixed in other packages:

  • Bug 594939 - ACI editing dialog initial size is not big enough to display
  • Bug 151705 - Need to update Console Cipher Preferences with new ciphers
  • fix fourth step of cert wizard for installing cert
  • Bug 668950 - Add posixGroup support to Console
  • Bug 583652 - Console caches magic numbers instead of DNA-generated values
  • Bug 493424 - remove unneeded modules for admin server apache config
  • Bug 618897 - Wrong permissions when creating instance from Console
  • Bug 672468 - Don't use empty path elements in LD_LIBRARY_PATH
  • Bug 245278 - Changing to a password with a single quote does not work
  • Bug 604881 - admin server log files have incorrect permissions/ownerships
  • Bug 387981 - plain files can be chosen on the Restore Directory dialog
  • Bug 618858 - move start-ds-admin env file into main admin server config path
  • Bug 616260 - libds-admin-serv linking fails due to unresolved link-time dependencies
  • start-ds-admin.in -- replaced "return 1" with "exit 1"
  • Bug 470576 - Migration could do addition checks before commiting actions
  • Bug 450016 - RFE- Console display values in KB/MB/GB
  • Bug 661116 - 389-console Configuration tab admin permissions (nsslapd-referral ?) and folder not expending immediatly
  • Bug 553066 - Directory Console: do not display "subtree" index type
  • Bug 599732 - Root node in directory browser shows DN syntax error

Download, Install, Setup

The Download page has information about how to get the binaries. The Install_Guide has information about installation and setup.

389 Directory Server 1.2.8 Alpha 2 Testing - February 8, 2011

389-ds-base version 1.2.8 Alpha 2 (1.2.8.a2) has been released to the Testing repositories. This release contains many fixes for bugs found in 1.2.7 and 1.2.8.a1 testing. On those platforms which have OpenLDAP built with Mozilla NSS crypto support (Fedora 14 and later), the packages are built with OpenLDAP instead of the Mozilla LDAP C SDK. We have removed the SELinux policy from the 389-ds-base and 389-admin packages on Fedora. The policy will be provided by the SELinux policy in the base OS. On EL, the policy will continue to be provided by the 389 packages.

WARNING: If you are upgrading from a previous 1.2.6 release candidate, you will need to run fixfiles to fix some SELinux AVCs, or directory server will not start. See bug https://bugzilla.redhat.com/show_bug.cgi?id=622882

To fix, run this:

fixfiles -R 389-ds-base restore

If you are upgrading from 1.2.5 or earlier, or a stable 1.2.6 or 1.2.7, there is no problem.

WARNING: If you are upgrading from a 1.2.6 alpha or release candidate, you will need to manually fix your entryrdn index files. See Subtree Rename Warning for more information. If you are upgrading from 1.2.5 or earlier, or a stable 1.2.6, there is no problem.

The new packages and versions are:

  • 389-ds-base 1.2.8.a2

Installation

yum install --enablerepo=[updates-testing|epel-testing] 389-ds
setup-ds-admin.pl

Upgrade

yum upgrade --enablerepo=[updates-testing|epel-testing] 389-ds-base
setup-ds-admin.pl -u

See Download for more information about setting up yum access. See Install_Guide for more information about the initial installation, setup, and upgrade

Your Feedback is Important!

The best way to provide feedback is via the Fedora Update system. Each update is broken down by package and platform. For example, if you are using Fedora 13, and you have successfully installed or upgraded all of the packages, and the console and etc. works, then go to the links below for Fedora 13 and provide feedback.

scroll down to the bottom of the page, and click on the Add a comment >> link

  • select one of the Works for me or Does not work radio buttons, add text, and click on the Add Comment button

If you are using a build on another platform, just send us an email to 389-users@lists.fedoraproject.org

If you find a bug, or would like to see a new feature, you can enter it here - https://bugzilla.redhat.com/enter_bug.cgi?product=389

Notes

NOTE: Fedora versions below 13 are no longer supported. If you are running Fedora 12 or earlier, you should upgrade.

NOTE: If you are using the console, after installing the updates, you must run setup-ds-admin.pl -u to refresh your console and admin server configuration with the new version information.

NOTE: 389-console is the command to run the console. This replaces fedora-idm-console.

WARNING: If you are upgrading from 389 1.2.6 rcN (N < 6), simple upgrade won't work due to the entryrdn format change (See also Bug 616608 - SIGBUS in RDN index reads on platforms with strict alignments ). Please follow the steps described in this section.

WARNING: If you are upgrading from a previous 1.2.6 release candidate, you will need to run fixfiles to fix some SELinux AVCs, or directory server will not start. See bug https://bugzilla.redhat.com/show_bug.cgi?id=622882

To fix, run this:

fixfiles -R 389-ds-base restore

New features

This is primarily a bug fix release, but there are some minor new features of interest to plugin authors

  • 389-ds-base-devel subpackage enhanced for use by plugin writers
  • BIND operation plugins now work for SASL binds

Bugs Fixed

NOTE: bugs marked MODIFIED have been fixed but not fully tested and verified.

Bugs fixed since 1.2.8.a1

  • Bug 675265 - preventryusn gets added to entries on a failed delete
  • Bug 674430 - Improve error messages for attribute uniqueness
  • Bug 616213 - insufficient stack size for HP-UX on PA-RISC
  • Bug 615052 - intrinsics and 64-bit atomics code fails to compile on PA-RISC
  • Bug 151705 - Need to update Console Cipher Preferences with new ciphers
  • Bug 668862 - init scripts return wrong error code
  • Bug 670616 - Allow SSF to be set for local (ldapi) connections
  • Bug 667935 - DS pipe log script's logregex.py plugin is not redirecting the log output to the text file
  • Bug 668619 - slapd stops responding
  • Bug 624547 - attrcrypt should query the given slot/token for supported ciphers
  • Bug 646381 - Faulty password for nsmultiplexorcredentials does not give any error message in logs

Download, Install, Setup

The Download page has information about how to get the binaries. The Install_Guide has information about installation and setup.

389 Directory Server 1.2.8 Alpha 1 Testing - January 25, 2011

389-ds-base version 1.2.8 Alpha 1 (1.2.8.a1) has been released to the Testing repositories. This release contains many fixes for bugs found in 1.2.7. On those platforms which have OpenLDAP built with Mozilla NSS crypto support (Fedora 14 and later), the packages are built with OpenLDAP instead of the Mozilla LDAP C SDK. We have removed the SELinux policy from the 389-ds-base and 389-admin packages on Fedora. The policy will be provided by the SELinux policy in the base OS. On EL, the policy will continue to be provided by the 389 packages.

WARNING: If you are upgrading from a previous 1.2.6 release candidate, you will need to run fixfiles to fix some SELinux AVCs, or directory server will not start. See bug https://bugzilla.redhat.com/show_bug.cgi?id=622882

To fix, run this:

fixfiles -R 389-ds-base restore

If you are upgrading from 1.2.5 or earlier, or a stable 1.2.6 or 1.2.7, there is no problem.

WARNING: If you are upgrading from a 1.2.6 alpha or release candidate, you will need to manually fix your entryrdn index files. See Subtree Rename Warning for more information. If you are upgrading from 1.2.5 or earlier, or a stable 1.2.6, there is no problem.

The new packages and versions are:

  • 389-ds-base 1.2.8.a1

Installation

yum install --enablerepo=[updates-testing|epel-testing] 389-ds
setup-ds-admin.pl

Upgrade

yum upgrade --enablerepo=[updates-testing|epel-testing] 389-ds-base
setup-ds-admin.pl -u

See Download for more information about setting up yum access. See Install_Guide for more information about the initial installation, setup, and upgrade

Your Feedback is Important!

The best way to provide feedback is via the Fedora Update system. Each update is broken down by package and platform. For example, if you are using Fedora 13, and you have successfully installed or upgraded all of the packages, and the console and etc. works, then go to the links below for Fedora 13 and provide feedback.

scroll down to the bottom of the page, and click on the Add a comment >> link

  • select one of the Works for me or Does not work radio buttons, add text, and click on the Add Comment button

If you are using a build on another platform, just send us an email to 389-users@lists.fedoraproject.org

If you find a bug, or would like to see a new feature, you can enter it here - https://bugzilla.redhat.com/enter_bug.cgi?product=389

Notes

NOTE: Fedora versions below 13 are no longer supported. If you are running Fedora 12 or earlier, you should upgrade.

NOTE: If you are using the console, after installing the updates, you must run setup-ds-admin.pl -u to refresh your console and admin server configuration with the new version information.

NOTE: 389-console is the command to run the console. This replaces fedora-idm-console.

WARNING: If you are upgrading from 389 1.2.6 rcN (N < 6), simple upgrade won't work due to the entryrdn format change (See also Bug 616608 - SIGBUS in RDN index reads on platforms with strict alignments ). Please follow the steps described in this section.

WARNING: If you are upgrading from a previous 1.2.6 release candidate, you will need to run fixfiles to fix some SELinux AVCs, or directory server will not start. See bug https://bugzilla.redhat.com/show_bug.cgi?id=622882

To fix, run this:

fixfiles -R 389-ds-base restore

New features

This is primarily a bug fix release, but there are some minor new features of interest to plugin authors

  • 389-ds-base-devel subpackage enhanced for use by plugin writers
  • BIND operation plugins now work for SASL binds

Bugs Fixed

NOTE: bugs marked MODIFIED have been fixed but not fully tested and verified.

Download, Install, Setup

The Download page has information about how to get the binaries. The Install_Guide has information about installation and setup.

389 Directory Server 1.2.7.5 - December 17, 2010

389-ds-base version 1.2.7.5 fixes some key bugs found in 1.2.7.2, .3, and .4 testing. On those platforms which have OpenLDAP built with Mozilla NSS crypto support (Fedora 14 and later), the packages are built with OpenLDAP instead of the Mozilla LDAP C SDK. We have removed the SELinux policy from the 389-ds-base and 389-admin packages on Fedora. The policy will be provided by the SELinux policy in the base OS. On EL, the policy will continue to be provided by the 389 packages.

WARNING: If you are upgrading from a previous 1.2.6 release candidate, you will need to run fixfiles to fix some SELinux AVCs, or directory server will not start. See bug https://bugzilla.redhat.com/show_bug.cgi?id=622882

To fix, run this:

fixfiles -R 389-ds-base restore

If you are upgrading from 1.2.5 or earlier, or a stable 1.2.6, there is no problem.

WARNING: If you are upgrading from a 1.2.6 alpha or release candidate, you will need to manually fix your entryrdn index files. See Subtree Rename Warning for more information. If you are upgrading from 1.2.5 or earlier, or a stable 1.2.6, there is no problem.

The new packages and versions are:

  • 389-ds-base 1.2.7.5

Installation

yum install 389-ds
setup-ds-admin.pl

Upgrade

yum upgrade 389-ds-base
setup-ds-admin.pl -u

See Download for more information about setting up yum access. See Install_Guide for more information about the initial installation, setup, and upgrade

Your Feedback is Important!

The best way to provide feedback is via the Fedora Update system. Each update is broken down by package and platform. For example, if you are using Fedora 13, and you have successfully installed or upgraded all of the packages, and the console and etc. works, then go to the links below for Fedora 13 and provide feedback.

scroll down to the bottom of the page, and click on the Add a comment >> link

  • select one of the Works for me or Does not work radio buttons, add text, and click on the Add Comment button

If you are using a build on another platform, just send us an email to 389-users@lists.fedoraproject.org

If you find a bug, or would like to see a new feature, you can enter it here - https://bugzilla.redhat.com/enter_bug.cgi?product=389

Notes

NOTE: Fedora versions below 12 are no longer supported. If you are running Fedora 11 or earlier, you should upgrade.

NOTE: If you are using the console, after installing the updates, you must run setup-ds-admin.pl -u to refresh your console and admin server configuration with the new version information. 1.2.3 fixed some bugs related to update - it will remove old Fedora servers from the console, and will preserve TLS/SSL configuration. For more information, see the 1.2.3 release notes.

NOTE: 389-console is the command to run the console. This replaces fedora-idm-console.

WARNING: If you are upgrading from 389 1.2.6 rcN (N < 6), simple upgrade won't work due to the entryrdn format change (See also Bug 616608 - SIGBUS in RDN index reads on platforms with strict alignments ). Please follow the steps described in this section.

WARNING: If you are upgrading from a previous 1.2.6 release candidate, you will need to run fixfiles to fix some SELinux AVCs, or directory server will not start. See bug https://bugzilla.redhat.com/show_bug.cgi?id=622882

To fix, run this:

fixfiles -R 389-ds-base restore

New features (in 1.2.7, not 1.2.7.5)

  • Use OpenLDAP instead of Mozilla LDAP - On Fedora 14 and later, the 389 packages are built with OpenLDAP instead of Mozilla LDAP
  • Account_Policy_Design - keep track of last login, automatically disable unused accounts
  • Move_changelog - the replication changelog has been moved into the main server database environment
  • MemberOf_Multiple_Grouping_Enhancements - Member Of supports multiple membership attributes
  • SELinux policy has been removed from 389-ds-base and 389-admin on Fedora - policy now supplied by base OS - does not apply to EL where we still have separate policy modules

Bugs Fixed

The following bugs were fixed since 1.2.7.2:

  • Bug 663597 - Memory leaks in normalization code
  • Bug 661792 - Valid managed entry config rejected
  • Bug 658312 - Invalid free in Managed Entry plug-in
  • Bug 641944 - Don't normalize non-DN RDN values

For 1.2.7, we ran Coverity against the 389-ds-base code, found hundreds of issues (most of which were not serious and not security issues) and fixed them. The code is now Coverity clean. This release also contains fixes for some of the upgrade problems reported by the community, as well as many other bug fixes. NOTE: bugs marked MODIFIED have been fixed but not fully tested and verified.

Download, Install, Setup

The Download page has information about how to get the binaries. The Install_Guide has information about installation and setup.

389 Directory Server 1.2.7.2 Testing - December 6, 2010

389-ds-base version 1.2.7.2 has been released to the Testing repositories. This release fixes some key bugs found in 1.2.7 and 1.2.7.1 testing. On those platforms which have OpenLDAP built with Mozilla NSS crypto support (Fedora 14 and later), the packages are built with OpenLDAP instead of the Mozilla LDAP C SDK. We have removed the SELinux policy from the 389-ds-base and 389-admin packages on Fedora. The policy will be provided by the SELinux policy in the base OS. On EL, the policy will continue to be provided by the 389 packages.

WARNING: If you are upgrading from a previous 1.2.6 release candidate, you will need to run fixfiles to fix some SELinux AVCs, or directory server will not start. See bug https://bugzilla.redhat.com/show_bug.cgi?id=622882

To fix, run this:

fixfiles -R 389-ds-base restore

If you are upgrading from 1.2.5 or earlier, or a stable 1.2.6, there is no problem.

WARNING: If you are upgrading from a 1.2.6 alpha or release candidate, you will need to manually fix your entryrdn index files. See Subtree Rename Warning for more information. If you are upgrading from 1.2.5 or earlier, or a stable 1.2.6, there is no problem.

The new packages and versions are:

  • 389-ds-base 1.2.7.2
  • 389-admin 1.1.13

Installation

yum install --enablerepo=[updates-testing|epel-testing] 389-ds
setup-ds-admin.pl

Upgrade

yum upgrade --enablerepo=[updates-testing|epel-testing] 389-ds-base 389-admin 389-adminutil 389-dsgw perl-Mozilla-LDAP
setup-ds-admin.pl -u

See Download for more information about setting up yum access. See Install_Guide for more information about the initial installation, setup, and upgrade

Your Feedback is Important!

The best way to provide feedback is via the Fedora Update system. Each update is broken down by package and platform. For example, if you are using Fedora 13, and you have successfully installed or upgraded all of the packages, and the console and etc. works, then go to the links below for Fedora 13 and provide feedback.

scroll down to the bottom of the page, and click on the Add a comment >> link

  • select one of the Works for me or Does not work radio buttons, add text, and click on the Add Comment button

If you are using a build on another platform, just send us an email to 389-users@lists.fedoraproject.org

If you find a bug, or would like to see a new feature, you can enter it here - https://bugzilla.redhat.com/enter_bug.cgi?product=389

Notes

NOTE: Fedora versions below 12 are no longer supported. If you are running Fedora 11 or earlier, you should upgrade.

NOTE: If you are using the console, after installing the updates, you must run setup-ds-admin.pl -u to refresh your console and admin server configuration with the new version information. 1.2.3 fixed some bugs related to update - it will remove old Fedora servers from the console, and will preserve TLS/SSL configuration. For more information, see the 1.2.3 release notes.

NOTE: 389-console is the command to run the console. This replaces fedora-idm-console.

WARNING: If you are upgrading from 389 1.2.6 rcN (N < 6), simple upgrade won't work due to the entryrdn format change (See also Bug 616608 - SIGBUS in RDN index reads on platforms with strict alignments ). Please follow the steps described in this section.

WARNING: If you are upgrading from a previous 1.2.6 release candidate, you will need to run fixfiles to fix some SELinux AVCs, or directory server will not start. See bug https://bugzilla.redhat.com/show_bug.cgi?id=622882

To fix, run this:

fixfiles -R 389-ds-base restore

New features (in 1.2.7, not 1.2.7.2)

  • Use OpenLDAP instead of Mozilla LDAP - On Fedora 14 and later, the 389 packages are built with OpenLDAP instead of Mozilla LDAP
  • Account_Policy_Design - keep track of last login, automatically disable unused accounts
  • Move_changelog - the replication changelog has been moved into the main server database environment
  • MemberOf_Multiple_Grouping_Enhancements - Member Of supports multiple membership attributes
  • SELinux policy has been removed from 389-ds-base and 389-admin on Fedora - policy now supplied by base OS - does not apply to EL where we still have separate policy modules

Bugs Fixed

The following bugs from 1.2.7, 1.2.7.1 and 1.1.12 were fixed in 1.2.7.2:

  • Bug 659456 - Incorrect usage of ber_printf() in winsync code
  • Bug 658309 - Process escaped characters in managed entry mappings
  • Bug 197886 - Initialize return value for UUID generation code
  • Bug 658312 - Allow mapped attribute types to be quoted
  • Bug 197886 - Avoid overflow of UUID generator

For 1.2.7, we ran Coverity against the 389-ds-base code, found hundreds of issues (most of which were not serious and not security issues) and fixed them. The code is now Coverity clean. This release also contains fixes for some of the upgrade problems reported by the community, as well as many other bug fixes. NOTE: bugs marked MODIFIED have been fixed but not fully tested and verified.

Download, Install, Setup

The Download page has information about how to get the binaries. The Install_Guide has information about installation and setup.

389 Directory Server 1.2.7.1 Testing - November 29, 2010

389-ds-base version 1.2.7.1 has been released to the Testing repositories. This release fixes some key bugs found in 1.2.7 testing. On those platforms which have OpenLDAP built with Mozilla NSS crypto support (Fedora 14 and later), the packages are built with OpenLDAP instead of the Mozilla LDAP C SDK. We have removed the SELinux policy from the 389-ds-base and 389-admin packages on Fedora. The policy will be provided by the SELinux policy in the base OS. On EL, the policy will continue to be provided by the 389 packages.

WARNING: If you are upgrading from a previous 1.2.6 release candidate, you will need to run fixfiles to fix some SELinux AVCs, or directory server will not start. See bug https://bugzilla.redhat.com/show_bug.cgi?id=622882

To fix, run this:

fixfiles -R 389-ds-base restore

If you are upgrading from 1.2.5 or earlier, or a stable 1.2.6, there is no problem.

WARNING: If you are upgrading from a 1.2.6 alpha or release candidate, you will need to manually fix your entryrdn index files. See Subtree Rename Warning for more information. If you are upgrading from 1.2.5 or earlier, or a stable 1.2.6, there is no problem.

The new packages and versions are:

  • 389-ds-base 1.2.7.1
  • 389-admin 1.1.13

Installation

yum install --enablerepo=[updates-testing|epel-testing] 389-ds
setup-ds-admin.pl

Upgrade

yum upgrade --enablerepo=[updates-testing|epel-testing] 389-ds-base 389-admin 389-adminutil 389-dsgw perl-Mozilla-LDAP
setup-ds-admin.pl -u

See Download for more information about setting up yum access. See Install_Guide for more information about the initial installation, setup, and upgrade

Your Feedback is Important!

The best way to provide feedback is via the Fedora Update system. Each update is broken down by package and platform. For example, if you are using Fedora 12, and you have successfully installed or upgraded all of the packages, and the console and etc. works, then go to the links below for Fedora 12 and provide feedback.

scroll down to the bottom of the page, and click on the Add a comment >> link

  • select one of the Works for me or Does not work radio buttons, add text, and click on the Add Comment button

If you are using a build on another platform, just send us an email to 389-users@lists.fedoraproject.org

If you find a bug, or would like to see a new feature, you can enter it here - https://bugzilla.redhat.com/enter_bug.cgi?product=389

Notes

NOTE: Fedora versions below 12 are no longer supported. If you are running Fedora 11 or earlier, you should upgrade.

NOTE: If you are using the console, after installing the updates, you must run setup-ds-admin.pl -u to refresh your console and admin server configuration with the new version information. 1.2.3 fixed some bugs related to update - it will remove old Fedora servers from the console, and will preserve TLS/SSL configuration. For more information, see the 1.2.3 release notes.

NOTE: 389-console is the command to run the console. This replaces fedora-idm-console.

WARNING: If you are upgrading from 389 1.2.6 rcN (N < 6), simple upgrade won't work due to the entryrdn format change (See also Bug 616608 - SIGBUS in RDN index reads on platforms with strict alignments ). Please follow the steps described in this section.

WARNING: If you are upgrading from a previous 1.2.6 release candidate, you will need to run fixfiles to fix some SELinux AVCs, or directory server will not start. See bug https://bugzilla.redhat.com/show_bug.cgi?id=622882

To fix, run this:

fixfiles -R 389-ds-base restore

New features (in 1.2.7, not 1.2.7.1)

  • Use OpenLDAP instead of Mozilla LDAP - On Fedora 14 and later, the 389 packages are built with OpenLDAP instead of Mozilla LDAP
  • Account_Policy_Design - keep track of last login, automatically disable unused accounts
  • Move_changelog - the replication changelog has been moved into the main server database environment
  • MemberOf_Multiple_Grouping_Enhancements - Member Of supports multiple membership attributes
  • SELinux policy has been removed from 389-ds-base and 389-admin on Fedora - policy now supplied by base OS - does not apply to EL where we still have separate policy modules

Bugs Fixed

The following bugs from 1.2.7 and 1.1.12 were fixed in 1.2.7.1 and 1.1.13:

  • Bug 656515 - Allow Name and Optional UID syntax for grouping attributes
  • Bug 656392 - Remove calls to ber_err_print()
  • Bug 625950 - hash nsslapd-rootpw changes in audit log
  • Bug 656441 - Missing library path entry causes LD_PRELOAD error
  • setup-ds-admin.pl -u exits with ServerAdminID and as_uid related error

For 1.2.7, we ran Coverity against the 389-ds-base code, found hundreds of issues (most of which were not serious and not security issues) and fixed them. The code is now Coverity clean. This release also contains fixes for some of the upgrade problems reported by the community, as well as many other bug fixes. NOTE: bugs marked MODIFIED have been fixed but not fully tested and verified.

Download, Install, Setup

The Download page has information about how to get the binaries. The Install_Guide has information about installation and setup.

389 Directory Server 1.2.7 Testing - November 22, 2010

389-ds-base version 1.2.7 has been released to the Testing repositories. This release has some new features and many bug fixes. On those platforms which have OpenLDAP built with Mozilla NSS crypto support (Fedora 14 and later), the packages are built with OpenLDAP instead of the Mozilla LDAP C SDK. We have removed the SELinux policy from the 389-ds-base and 389-admin packages on Fedora. The policy will be provided by the SELinux policy in the base OS. On EL, the policy will continue to be provided by the 389 packages.

WARNING: If you are upgrading from a previous 1.2.6 release candidate, you will need to run fixfiles to fix some SELinux AVCs, or directory server will not start. See bug https://bugzilla.redhat.com/show_bug.cgi?id=622882

To fix, run this:

fixfiles -R 389-ds-base restore

If you are upgrading from 1.2.5 or earlier, or a stable 1.2.6, there is no problem.

WARNING: If you are upgrading from a 1.2.6 alpha or release candidate, you will need to manually fix your entryrdn index files. See Subtree Rename Warning for more information. If you are upgrading from 1.2.5 or earlier, or a stable 1.2.6, there is no problem.

The new packages and versions are:

  • 389-ds-base 1.2.7
  • 389-admin 1.1.12
  • 389-adminutil 1.1.13
  • 389-dsgw 1.1.6
  • perl-Mozilla-LDAP 1.5.3 (Fedora 14 and later)

Installation

yum install --enablerepo=[updates-testing|epel-testing] 389-ds
setup-ds-admin.pl

Upgrade

yum upgrade --enablerepo=[updates-testing|epel-testing] 389-ds-base 389-admin 389-adminutil 389-dsgw perl-Mozilla-LDAP
setup-ds-admin.pl -u

See Download for more information about setting up yum access. See Install_Guide for more information about the initial installation, setup, and upgrade

Your Feedback is Important!

The best way to provide feedback is via the Fedora Update system. Each update is broken down by package and platform. For example, if you are using Fedora 12, and you have successfully installed or upgraded all of the packages, and the console and etc. works, then go to the links below for Fedora 12 and provide feedback.

scroll down to the bottom of the page, and click on the Add a comment >> link

  • select one of the Works for me or Does not work radio buttons, add text, and click on the Add Comment button

If you are using a build on another platform, just send us an email to 389-users@lists.fedoraproject.org

If you find a bug, or would like to see a new feature, you can enter it here - https://bugzilla.redhat.com/enter_bug.cgi?product=389

Notes

NOTE: Fedora versions below 12 are no longer supported. If you are running Fedora 11 or earlier, you should upgrade.

NOTE: If you are using the console, after installing the updates, you must run setup-ds-admin.pl -u to refresh your console and admin server configuration with the new version information. 1.2.3 fixed some bugs related to update - it will remove old Fedora servers from the console, and will preserve TLS/SSL configuration. For more information, see the 1.2.3 release notes.

NOTE: 389-console is the command to run the console. This replaces fedora-idm-console.

WARNING: If you are upgrading from 389 1.2.6 rcN (N < 6), simple upgrade won't work due to the entryrdn format change (See also Bug 616608 - SIGBUS in RDN index reads on platforms with strict alignments ). Please follow the steps described in this section.

WARNING: If you are upgrading from a previous 1.2.6 release candidate, you will need to run fixfiles to fix some SELinux AVCs, or directory server will not start. See bug https://bugzilla.redhat.com/show_bug.cgi?id=622882

To fix, run this:

fixfiles -R 389-ds-base restore

New features

  • Use OpenLDAP instead of Mozilla LDAP - On Fedora 14 and later, the 389 packages are built with OpenLDAP instead of Mozilla LDAP
  • Account_Policy_Design - keep track of last login, automatically disable unused accounts
  • Move_changelog - the replication changelog has been moved into the main server database environment
  • MemberOf_Multiple_Grouping_Enhancements - Member Of supports multiple membership attributes
  • SELinux policy has been removed from 389-ds-base and 389-admin on Fedora - policy now supplied by base OS - does not apply to EL where we still have separate policy modules

Bugs Fixed

We ran Coverity against the 389-ds-base code, found hundreds of issues (most of which were not serious and not security issues) and fixed them. The code is now Coverity clean. This release also contains fixes for some of the upgrade problems reported by the community, as well as many other bug fixes. NOTE: bugs marked MODIFIED have been fixed but not fully tested and verified.

Download, Install, Setup

The Download page has information about how to get the binaries. The Install_Guide has information about installation and setup.

389 Directory Server 1.2.7.a3 (Alpha 3) Testing - October 29, 2010

389-ds-base version 1.2.7 Alpha 3 has been released to the Testing repositories. This release has some new features and many bug fixes. On those platforms which have OpenLDAP built with Mozilla NSS crypto support (Fedora 14 and later), the packages are built with OpenLDAP instead of the Mozilla LDAP C SDK.

WARNING: If you are upgrading from a previous 1.2.6 release candidate, you will need to run fixfiles to fix some SELinux AVCs, or directory server will not start. See bug https://bugzilla.redhat.com/show_bug.cgi?id=622882

To fix, run this:

fixfiles -R 389-ds-base restore

If you are upgrading from 1.2.5 or earlier, or a stable 1.2.6, there is no problem.

WARNING: If you are upgrading from a 1.2.6 alpha or release candidate, you will need to manually fix your entryrdn index files. See Subtree Rename Warning for more information. If you are upgrading from 1.2.5 or earlier, or a stable 1.2.6, there is no problem.

The new packages and versions are:

  • 389-ds-base 1.2.7.a3
  • 389-admin 1.1.12.a2
  • 389-adminutil 1.1.13
  • 389-dsgw 1.1.6
  • perl-Mozilla-LDAP 1.5.3 (Fedora 14 and later)

Installation

yum install --enablerepo=[updates-testing|epel-testing] 389-ds
setup-ds-admin.pl

Upgrade

yum upgrade --enablerepo=[updates-testing|epel-testing] 389-ds-base 389-admin 389-adminutil 389-dsgw perl-Mozilla-LDAP
setup-ds-admin.pl -u

See Download for more information about setting up yum access. See Install_Guide for more information about the initial installation, setup, and upgrade

Your Feedback is Important!

The best way to provide feedback is via the Fedora Update system. Each update is broken down by package and platform. For example, if you are using Fedora 12, and you have successfully installed or upgraded all of the packages, and the console and etc. works, then go to the links below for Fedora 12 and provide feedback.

scroll down to the bottom of the page, and click on the Add a comment >> link

  • select one of the Works for me or Does not work radio buttons, add text, and click on the Add Comment button

If you are using a build on another platform, just send us an email to 389-users@lists.fedoraproject.org

If you find a bug, or would like to see a new feature, you can enter it here - https://bugzilla.redhat.com/enter_bug.cgi?product=389

Notes

NOTE: Fedora versions below 12 are no longer supported. If you are running Fedora 11 or earlier, you should upgrade.

NOTE: If you are using the console, after installing the updates, you must run setup-ds-admin.pl -u to refresh your console and admin server configuration with the new version information. 1.2.3 fixed some bugs related to update - it will remove old Fedora servers from the console, and will preserve TLS/SSL configuration. For more information, see the 1.2.3 release notes.

NOTE: 389-console is the command to run the console. This replaces fedora-idm-console.

WARNING: If you are upgrading from 389 1.2.6 rcN (N < 6), simple upgrade won't work due to the entryrdn format change (See also Bug 616608 - SIGBUS in RDN index reads on platforms with strict alignments ). Please follow the steps described in this section.

WARNING: If you are upgrading from a previous 1.2.6 release candidate, you will need to run fixfiles to fix some SELinux AVCs, or directory server will not start. See bug https://bugzilla.redhat.com/show_bug.cgi?id=622882

To fix, run this:

fixfiles -R 389-ds-base restore

New features

Bugs Fixed

We ran Coverity against the 389-ds-base code, found hundreds of issues (most of which were not serious and not security issues) and fixed them. The code is now Coverity clean. This release also contains fixes for some of the upgrade problems reported by the community, as well as many other bug fixes. NOTE: bugs marked MODIFIED have been fixed but not fully tested and verified.

Download, Install, Setup

The Download page has information about how to get the binaries. The Install_Guide has information about installation and setup.

389 Directory Server 1.2.6.1 - October 15, 2010

The 389-ds-base 1.2.6.1 release is a bug fix release to fix a couple of crash problems and a couple of other problems.

WARNING: If you are upgrading from a previous 1.2.6 release candidate, you will need to run fixfiles to fix some SELinux AVCs, or directory server will not start. See bug https://bugzilla.redhat.com/show_bug.cgi?id=622882

To fix, run this:

fixfiles -R 389-ds-base restore

If you are upgrading from 1.2.5 or earlier, there is no problem.

WARNING: If you are upgrading from a 1.2.6 alpha or release candidate, you will need to manually fix your entryrdn index files. See Subtree Rename Warning for more information. If you are upgrading from 1.2.5 or earlier, there is no problem.

The new packages and versions are:

  • 389-ds-base 1.2.6.1 (1.2.6.1-3 for rawhide, 1.2.6.1-2 for other platforms - do not use 1.2.6.1-1)

Installation

yum install 389-ds
setup-ds-admin.pl

Upgrade

yum upgrade 389-ds-base
setup-ds-admin.pl -u

See Download for more information about setting up yum access. See Install_Guide for more information about the initial installation, setup, and upgrade

Your Feedback is Important!

The best way to provide feedback is via the Fedora Update system. Each update is broken down by package and platform. For example, if you are using Fedora 12, and you have successfully installed or upgraded all of the packages, and the console and etc. works, then go to the links below for Fedora 12 and provide feedback.

scroll down to the bottom of the page, and click on the Add a comment >> link

  • select one of the Works for me or Does not work radio buttons, add text, and click on the Add Comment button

If you are using a build on another platform, just send us an email to 389-users@lists.fedoraproject.org

If you find a bug, or would like to see a new feature, you can enter it here - https://bugzilla.redhat.com/enter_bug.cgi?product=389

Notes

NOTE: Fedora versions below 12 are no longer supported. If you are running Fedora 11 or earlier, you should upgrade.

NOTE: If you are using the console, after installing the updates, you must run setup-ds-admin.pl -u to refresh your console and admin server configuration with the new version information. 1.2.3 fixed some bugs related to update - it will remove old Fedora servers from the console, and will preserve TLS/SSL configuration. For more information, see the 1.2.3 release notes.

NOTE: 389-console is the command to run the console. This replaces fedora-idm-console.

WARNING: If you are upgrading from 389 1.2.6 rcN (N < 6), simple upgrade won't work due to the entryrdn format change (See also Bug 616608 - SIGBUS in RDN index reads on platforms with strict alignments ). Please follow the steps described in this section.

WARNING: If you are upgrading from a previous 1.2.6 release candidate, you will need to run fixfiles to fix some SELinux AVCs, or directory server will not start. See bug https://bugzilla.redhat.com/show_bug.cgi?id=622882

To fix, run this:

fixfiles -R 389-ds-base restore

New features

There are no new features in this release. This is a bug fix release only.

Bugs Fixed

This release contains some important bug fixes. Note that bugs marked as MODIFIED have been fixed but are still in testing.

  • Bug 635987 - Incorrect sub scope search result with ACL containing ldap:///self
  • Bug 612264 - ACI issue with (targetattr='userPassword')
  • Bug 606920 - anonymous resource limit- nstimelimit - also applied to "cn=directory manager"
  • Bug 631862 - crash - delete entries not in cache + referint
  • Bug 634561 - Server crushes when using Windows Sync Agreement

Download, Install, Setup

The Download page has information about how to get the binaries. The Install_Guide has information about installation and setup.

389 Directory Server 1.2.6 - September 13, 2010

The 389-ds-base 1.2.6 release is essentially the same as the 1.2.6.rc7 release. The 389-admin-1.1.11 release is essentially the same as the 1.1.11.rc2 release. 1.2.6 contains several new features and many bug fixes.

WARNING: If you are upgrading from a previous 1.2.6 release candidate, you will need to run fixfiles to fix some SELinux AVCs, or directory server will not start. See bug https://bugzilla.redhat.com/show_bug.cgi?id=622882

To fix, run this:

fixfiles -R 389-ds-base restore

If you are upgrading from 1.2.5 or earlier, there is no problem.

WARNING: If you are upgrading from a 1.2.6 alpha or release candidate, you will need to manually fix your entryrdn index files. See Subtree Rename Warning for more information. If you are upgrading from 1.2.5 or earlier, there is no problem.

The new packages and versions are:

  • 389-ds-base 1.2.6
  • 389-admin 1.1.11
  • 389-adminutil 1.1.10
  • idm-console-framework 1.1.5
  • 389-console 1.1.4
  • 389-ds-console 1.2.3
  • 389-dsgw 1.1.5
  • 389-ds 1.2.1

Installation

yum install 389-ds
setup-ds-admin.pl

Upgrade

yum upgrade
setup-ds-admin.pl -u

See Download for more information about setting up yum access. See Install_Guide for more information about the initial installation, setup, and upgrade

Your Feedback is Important!

The best way to provide feedback is via the Fedora Update system. Each update is broken down by package and platform. For example, if you are using Fedora 12, and you have successfully installed or upgraded all of the packages, and the console and etc. works, then go to the links below for Fedora 12 and provide feedback.

scroll down to the bottom of the page, and click on the Add a comment >> link

  • select one of the Works for me or Does not work radio buttons, add text, and click on the Add Comment button

If you are using a build on another platform, just send us an email to 389-users@lists.fedoraproject.org

If you find a bug, or would like to see a new feature, you can enter it here - https://bugzilla.redhat.com/enter_bug.cgi?product=389

Notes

NOTE: Fedora versions below 12 are no longer supported. If you are running Fedora 11 or earlier, you should upgrade.

NOTE: If you are using the console, after installing the updates, you must run setup-ds-admin.pl -u to refresh your console and admin server configuration with the new version information. 1.2.3 fixed some bugs related to update - it will remove old Fedora servers from the console, and will preserve TLS/SSL configuration. For more information, see the 1.2.3 release notes.

NOTE: 389-console is the command to run the console. This replaces fedora-idm-console.

WARNING: If you are upgrading from 389 1.2.6 rcN (N < 6), simple upgrade won't work due to the entryrdn format change (See also Bug 616608 - SIGBUS in RDN index reads on platforms with strict alignments ). Please follow the steps described in this section.

WARNING: If you are upgrading from a previous 1.2.6 release candidate, you will need to run fixfiles to fix some SELinux AVCs, or directory server will not start. See bug https://bugzilla.redhat.com/show_bug.cgi?id=622882

To fix, run this:

fixfiles -R 389-ds-base restore

New features

  • Upgrade_to_New_DN_Format
    • in order to make sure DN valued attributes can be searched correctly, an upgrade will automatically fix these values in the database
  • Managed Entries
    • Used, for example, to automatically create the user's group entry when adding a user entry
  • Matching rules
    • support for all RFC 4517 matching rules (except the FirstComponent ones)

Bugs Fixed

This release contains many, many bug fixes. The complete list of bugs fixed is found at the link below. Note that bugs marked as MODIFIED have been fixed but are still in testing.

Download, Install, Setup

The Download page has information about how to get the binaries. The Install_Guide has information about installation and setup.

Release Notes For Older Versions

Old_Release_Notes