Hello community, here is the log from the commit of package 389-ds for openSUSE:Factory checked in at 2019-04-08 10:36:29 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/389-ds (Old) and /work/SRC/openSUSE:Factory/.389-ds.new.3908 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "389-ds" Mon Apr 8 10:36:29 2019 rev:19 rq:691893 version:1.4.1.2~git0.9a126614a Changes: -------- --- /work/SRC/openSUSE:Factory/389-ds/389-ds.changes 2019-03-18 10:43:58.839105903 +0100 +++ /work/SRC/openSUSE:Factory/.389-ds.new.3908/389-ds.changes 2019-04-08 10:36:34.799224269 +0200 @@ -1,0 +2,93 @@ +Thu Apr 4 08:22:39 UTC 2019 - [email protected] + +- fix permissions handling (boo#1120189) + +------------------------------------------------------------------- +Mon Apr 01 02:14:26 UTC 2019 - [email protected] + +- Update to version 1.4.1.2~git0.9a126614a: + * Removes sysconfig from RPM as we no longer create it to detect + instance existance or settings. Older installs will still have + their sysconfig parsed, but new installs should use systemd + environment variables. + * Bump version to 1.4.1.2 + * Ticket 50308 - Revise memory leak fix + * Ticket 50308 - Fix memory leaks for repeat binds and replication + * Use PKG_CHECK_MODULES to detect the systemd library + * Use PKG_CHECK_MODULES to detect the kerberos library + * Use pkg-config from the host system to better support cross-compiling + * Use PKG_CHECK_MODULES to detect the libsasl2 library + * configure.ac: Add missing comma to an AC_ARG_ENABLE macro + * configure.ac: Remove unpaired parentheses from two help strings + * m4/doxygen.m4: Fix spelling of Doxygen in a message + * Use PKG_CHECK_MODULES to detect the pcre library + * Use PKG_CHECK_MODULES to detect the cmocka library + * Use PKG_CHECK_MODULES to detect the nss library + * Use PKG_CHECK_MODULES to detect the nspr library + * Use PKG_CHECK_MODULES to detect the event library + * Ticket 49873 - (cont 3rd) cleanup debug log + * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup + * Issue 50292 - Fix Plugin CLI and UI issues + * Issue:50112 - Port ACI test suit from TET to python3(misc and syntax) + * Ticket 50289 - Fix various database UI issues + * Ticket 49463 After cleanALLruv, replication is looping on keep alive DEL + * Ticket 50300 - Fix memory leak in automember plugin + * Ticket 50265: the warning about skew time could last forever + * Ticket 50260 - Invalid cache flushing improvements + * Ticket 49561 - MEP plugin, upon direct op failure, will delete twice the same managed entry + * Ticket 50077 - Do not automatically turn automember postop modifies on + * Ticket 50282 - OPERATIONS ERROR when trying to delete a group with automember members + * Ticket 49715 - extend account functionality + * Ticket 49873: (cont) Contention on virtual attribute lookup + * Ticket 50260 - backend txn plugins can corrupt entry cache + * Ticket 50255 - Port password policy test to use DSLdapObject + * Ticket 49667 - 49668 - remove old spec files + * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present + * Issue: 50112 - Port ACI test suit from TET to python3(Search) + * Ticket 50259 - implement dn construction test + * Ticket 50273 - reduce default replicaton agmt timeout + * Ticket 50208 - lib389- Fix issue with list all instances + * Issue: 50112 - Port ACI test suit from TET to python3(Global Group) + * Issue 50041 - Add CLI functionality for special plugins + * Issue 50263 - LDAPS port not listening after installation + * Ticket 49575 - Indicate autosize value errors and corrective actions + * Ticket 50137 - create should not check in non-stateful mode for exist + * Ticket 49655 - remove doap file + * Issue 50197 - Fix dscreate regression + * Ticket 50234 - one level search returns not matching entry + * Ticket 50257 - lib389 - password policy user vs subtree checks are broken + * Issue: 50253 - Making an nsManagedRoleDefinition type in src/lib389/lib389/idm/nsrole.py + * Issue 49029 - [RFE] improve internal operations logging + * Ticket 50230 - improve ioerror msg when not root/dirsrv + * Issue 50246 - Fix the regression in old control tools + * Ticket 50197 - Container integration part 2 + * Ticket 50197 - Container init tools + * Ticket 50232 - export creates not importable ldif file + * Ticket 50215 - UI - implement Database Tab in reachJS + * Ticket 50243 - refint modrdn stress test + * Ticket 50238 - Failed modrdn can corrupt entry cache + * Ticket 50236 - memberOf should be more robust + * Ticket 50213 - fix list instance issue + * Issue: 50219 - Add generic filter to DSLdapObjects + * Issue: 50227 - Making an cosClassicDefinition type in src/lib389/lib389/cos.py + * Issue: 50112 - Port ACI test suit from TET to python3(modify) + * Ticket 50224 - warnings on deprecated API usage + * Issue:50112 - Port ACI test suit from TET to python3(valueaci) + * Issue: 50112 Port ACI test suit from TET to python3(Aci Atter) + * Ticket 50208 - make instances mark off based on dse.ldif not sysconfig + * Issue: 50170 - composable object types for nsRole in lib389 + * Ticket 50199 - disable perl by default + * Issue:50211 - Making an actual Anonymous type in lib389/idm/account.py + * Ticket 50155 - password history check has no way to just check the current password + * Ticket 49873 - Contention on virtual attribute lookup + * Ticket 50197 - Container integration improvements + * Ticket 50195 - improve selinux error messages in interactive + * Ticket 49658 - In replicated topology a single-valued attribute can diverge + * Ticket 50111: Use pkg-config to detect icu + * Ticket 50165 - Fix issues with dscreate + * Ticket 50177 - import task should not be deleted too rapidely after import finishes to be able to query the status + * Ticket 50140 - Use high ports in container installs + * Ticket 50184 - Add cli tool parity to dsconf/dsctl + * Ticket 50159 - sssd and config display + +------------------------------------------------------------------- Old: ---- 389-ds-base-1.4.1.1~git0.af9bb7206.tar.bz2 New: ---- 389-ds-base-1.4.1.2~git0.9a126614a.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ 389-ds.spec ++++++ --- /var/tmp/diff_new_pack.xNr0EY/_old 2019-04-08 10:36:43.527227484 +0200 +++ /var/tmp/diff_new_pack.xNr0EY/_new 2019-04-08 10:36:43.555227494 +0200 @@ -12,15 +12,10 @@ # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. -# Please submit bugfixes or comments via https://bugs.opensuse.org/ +# Please submit bugfixes or comments via http://bugs.opensuse.org/ # -#Compat macro for new _fillupdir macro introduced in Nov 2017 -%if ! %{defined _fillupdir} - %define _fillupdir /var/adm/fillup-templates -%endif - %bcond_with rust %if 0%{?suse_version} >= 1500 %bcond_without lib389 @@ -48,7 +43,7 @@ %define svrcorelib libsvrcore0 Name: 389-ds -Version: 1.4.1.1~git0.af9bb7206 +Version: 1.4.1.2~git0.9a126614a Release: 0 Summary: 389 Directory Server License: GPL-2.0-only AND MPL-2.0 @@ -141,6 +136,7 @@ Requires(post): fillup Requires(pre): shadow +PreReq: permissions Obsoletes: 389-ds-base < %{version}-%{release} Provides: 389-ds-base = %{version}-%{release} %{?systemd_requires} @@ -313,11 +309,6 @@ # bring OpenLDAP copyright notice here because it is referenced by several extra schema files cp %{SOURCE2} ./ -install -d "%{buildroot}%{_fillupdir}" -for i in "%{buildroot}%{_sysconfdir}/sysconfig"/*; do - mv "$i" "%{buildroot}%{_fillupdir}/sysconfig.${i##*/}" -done - rm -rv %{buildroot}/usr/share/cockpit/ rm -rv %{buildroot}/usr/share/metainfo/389-console/ mv src/svrcore/README{,.svrcore} @@ -333,6 +324,10 @@ %post %fillup_only -n dirsrv +%set_permissions %{_sbindir}/ns-slapd + +%verifyscript +%verify_permissions -e %{_sbindir}/ns-slapd %postun output=/dev/null @@ -341,54 +336,6 @@ # reload to pick up any shared lib changes %fillup_only -n dirsrv %fillup_only -n dirsrv.systemd -# find all instances -instances="" # instances that require a restart after upgrade -ninst=0 # number of instances found in total -if [ -n "$DEBUGPOSTTRANS" ] ; then - output=$DEBUGPOSTTRANS -fi - -echo looking for instances in %{_sysconfdir}/%{pkgname} > $output 2>&1 || : -instbase="%{_sysconfdir}/%{pkgname}" -for dir in $instbase/slapd-* ; do - echo dir = $dir >> $output 2>&1 || : - if [ ! -d "$dir" ] ; then continue ; fi - case "$dir" in *.removed) continue ;; esac - basename=`basename $dir` - inst="%{pkgname}@`echo $basename | sed -e 's/slapd-//g'`" - echo found instance $inst - getting status >> $output 2>&1 || : - if /bin/systemctl -q is-active $inst ; then - echo instance $inst is running >> $output 2>&1 || : - instances="$instances $inst" - else - echo instance $inst is not running >> $output 2>&1 || : - fi - ninst=`expr $ninst + 1` -done -if [ $ninst -eq 0 ] ; then - echo no instances to upgrade >> $output 2>&1 || : - exit 0 # have no instances to upgrade - just skip the rest -fi -# shutdown all instances -echo shutting down all instances . . . >> $output 2>&1 || : -for inst in $instances ; do - echo stopping instance $inst >> $output 2>&1 || : - /bin/systemctl stop $inst >> $output 2>&1 || : -done -# do the upgrade -echo upgrading instances . . . >> $output 2>&1 || : -DEBUGPOSTSETUPOPT=`/usr/bin/echo $DEBUGPOSTSETUP | /usr/bin/sed -e "s/[^d]//g"` -if [ -n "$DEBUGPOSTSETUPOPT" ] ; then - %{_sbindir}/setup-ds.pl -l $output -$DEBUGPOSTSETUPOPT -u -s General.UpdateMode=offline >> $output 2>&1 || : -else - %{_sbindir}/setup-ds.pl -l $output -u -s General.UpdateMode=offline >> $output 2>&1 || : -fi - -# restart instances that require it -for inst in $instances ; do - echo restarting instance $inst >> $output 2>&1 || : - /bin/systemctl start $inst >> $output 2>&1 || : -done exit 0 %preun @@ -434,7 +381,6 @@ %if %{with rust} %{_libdir}/dirsrv/librsds.so %endif -%{_fillupdir}/sysconfig.* %exclude %{_mandir}/man1/ldap-agent* %{_mandir}/man1/* %{_mandir}/man5/* @@ -489,7 +435,7 @@ # TODO: audit bug running https://bugzilla.opensuse.org/show_bug.cgi?id=1111564 # This also needs a lot more work on the service file #attr(750,root,dirsrv) #caps(CAP_NET_BIND_SERVICE=pe) #{_sbindir}/ns-slapd -%verify(not mode caps) %attr(750,root,dirsrv) %{_sbindir}/ns-slapd +%verify(not caps) %attr(750,root,dirsrv) %{_sbindir}/ns-slapd %if ! %{with lib389} %{_sbindir}/bak2db %{_sbindir}/bak2db.pl @@ -581,6 +527,7 @@ %doc src/lib389/README* %{_sbindir}/dsconf %{_sbindir}/dscreate +%{_sbindir}/dscontainer %{_sbindir}/dsctl %{_sbindir}/dsidm %{_mandir}/man8/dsconf.8.gz ++++++ 389-ds-base-1.4.1.1~git0.af9bb7206.tar.bz2 -> 389-ds-base-1.4.1.2~git0.9a126614a.tar.bz2 ++++++ ++++ 38674 lines of diff (skipped) ++++++ 389-ds-base.obsinfo ++++++ --- /var/tmp/diff_new_pack.xNr0EY/_old 2019-04-08 10:36:48.087228963 +0200 +++ /var/tmp/diff_new_pack.xNr0EY/_new 2019-04-08 10:36:48.087228963 +0200 @@ -1,5 +1,5 @@ name: 389-ds-base -version: 1.4.1.1~git0.af9bb7206 -mtime: 1548878932 -commit: af9bb7206aa39bb0c4c6fdbaa2653391f120671f +version: 1.4.1.2~git0.9a126614a +mtime: 1553889974 +commit: 9a126614a5ed10b5d999680a2be2ae83d94eb55c ++++++ _service ++++++ --- /var/tmp/diff_new_pack.xNr0EY/_old 2019-04-08 10:36:48.127228977 +0200 +++ /var/tmp/diff_new_pack.xNr0EY/_new 2019-04-08 10:36:48.127228977 +0200 @@ -6,9 +6,9 @@ <param name="versionformat">@PARENT_TAG@~git@TAG_OFFSET@.%h</param> <param name="scm">git</param> <!-- use 1.4 branch --> - <param name="revision">389-ds-base-1.4.1.1</param> + <param name="revision">389-ds-base-1.4.1.2</param> <!-- use 1.4.0.20 tag as base --> - <param name="match-tag">389-ds-base-1.4.1.1</param> + <param name="match-tag">389-ds-base-1.4.1.2</param> <!-- remove the extra prefix from the tag again it looks so funny because the service removed "-" from the string before--> <param name="versionrewrite-pattern">389dsbase(.*)</param> <param name="versionrewrite-replacement">\1</param> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.xNr0EY/_old 2019-04-08 10:36:48.143228981 +0200 +++ /var/tmp/diff_new_pack.xNr0EY/_new 2019-04-08 10:36:48.143228981 +0200 @@ -1,4 +1,4 @@ <servicedata> <service name="tar_scm"> <param name="url">https://pagure.io/389-ds-base.git</param> - <param name="changesrevision">af9bb7206aa39bb0c4c6fdbaa2653391f120671f</param></service></servicedata> \ No newline at end of file + <param name="changesrevision">9a126614a5ed10b5d999680a2be2ae83d94eb55c</param></service></servicedata> \ No newline at end of file
