389-ds-base-2.8.0-11.el9_8 RPM for aarch64

From AlmaLinux 9.8 AppStream for aarch64

389 Directory Server is an LDAPv3 compliant server.  The base package includes
the LDAP server and command line utilities for server administration.

Provides

• 389-ds-base
• 389-ds-base(aarch-64)
• bundled(crate(allocator-api2))
• bundled(crate(anyhow))
• bundled(crate(atty))
• bundled(crate(autocfg))
• bundled(crate(base64))
• bundled(crate(bitflags))
• bundled(crate(byteorder))
• bundled(crate(cbindgen))
• bundled(crate(cc))
• bundled(crate(cfg-if))
• bundled(crate(clap))
• bundled(crate(clap_lex))
• bundled(crate(concread))
• bundled(crate(crossbeam-epoch))
• bundled(crate(crossbeam-queue))
• bundled(crate(crossbeam-utils))
• bundled(crate(equivalent))
• bundled(crate(errno))
• bundled(crate(fastrand))
• bundled(crate(fernet))
• bundled(crate(find-msvc-tools))
• bundled(crate(foldhash))
• bundled(crate(foreign-types))
• bundled(crate(foreign-types-shared))
• bundled(crate(getrandom))
• bundled(crate(hashbrown))
• bundled(crate(heck))
• bundled(crate(hermit-abi))
• bundled(crate(id-arena))
• bundled(crate(indexmap))
• bundled(crate(itoa))
• bundled(crate(jobserver))
• bundled(crate(leb128fmt))
• bundled(crate(libc))
• bundled(crate(linux-raw-sys))
• bundled(crate(log))
• bundled(crate(lru))
• bundled(crate(memchr))
• bundled(crate(once_cell))
• bundled(crate(openssl))
• bundled(crate(openssl-macros))
• bundled(crate(openssl-sys))
• bundled(crate(os_str_bytes))
• bundled(crate(paste))
• bundled(crate(paste-impl))
• bundled(crate(pin-project-lite))
• bundled(crate(pkg-config))
• bundled(crate(prettyplease))
• bundled(crate(proc-macro-hack))
• bundled(crate(proc-macro2))
• bundled(crate(quote))
• bundled(crate(r-efi))
• bundled(crate(rustix))
• bundled(crate(semver))
• bundled(crate(serde))
• bundled(crate(serde_core))
• bundled(crate(serde_derive))
• bundled(crate(serde_json))
• bundled(crate(shlex))
• bundled(crate(smallvec))
• bundled(crate(sptr))
• bundled(crate(strsim))
• bundled(crate(syn))
• bundled(crate(tempfile))
• bundled(crate(termcolor))
• bundled(crate(textwrap))
• bundled(crate(tokio))
• bundled(crate(toml))
• bundled(crate(tracing))
• bundled(crate(tracing-attributes))
• bundled(crate(tracing-core))
• bundled(crate(unicode-ident))
• bundled(crate(unicode-xid))
• bundled(crate(uuid))
• bundled(crate(vcpkg))
• bundled(crate(wasi))
• bundled(crate(wasip2))
• bundled(crate(wasip3))
• bundled(crate(wasm-encoder))
• bundled(crate(wasm-metadata))
• bundled(crate(wasmparser))
• bundled(crate(winapi))
• bundled(crate(winapi-i686-pc-windows-gnu))
• bundled(crate(winapi-util))
• bundled(crate(winapi-x86_64-pc-windows-gnu))
• bundled(crate(windows-link))
• bundled(crate(windows-sys))
• bundled(crate(wit-bindgen))
• bundled(crate(wit-bindgen-core))
• bundled(crate(wit-bindgen-rust))
• bundled(crate(wit-bindgen-rust-macro))
• bundled(crate(wit-component))
• bundled(crate(wit-parser))
• bundled(crate(zeroize))
• bundled(crate(zeroize_derive))
• bundled(crate(zmij))
• config(389-ds-base)
• group(dirsrv)
• ldif2ldbm
• libacctpolicy-plugin.so()(64bit)
• libacctusability-plugin.so()(64bit)
• libacl-plugin.so()(64bit)
• libaddn-plugin.so()(64bit)
• libalias-entries-plugin.so()(64bit)
• libattr-unique-plugin.so()(64bit)
• libautomember-plugin.so()(64bit)
• libback-ldbm.so()(64bit)
• libbitwise-plugin.so()(64bit)
• libchainingdb-plugin.so()(64bit)
• libcollation-plugin.so()(64bit)
• libcontentsync-plugin.so()(64bit)
• libcos-plugin.so()(64bit)
• libderef-plugin.so()(64bit)
• libdistrib-plugin.so()(64bit)
• libdna-plugin.so()(64bit)
• libentryuuid-plugin.so()(64bit)
• libentryuuid-syntax-plugin.so()(64bit)
• liblinkedattrs-plugin.so()(64bit)
• libmanagedentries-plugin.so()(64bit)
• libmemberof-plugin.so()(64bit)
• libpam-passthru-plugin.so()(64bit)
• libpassthru-plugin.so()(64bit)
• libpbe-plugin.so()(64bit)
• libposix-winsync-plugin.so()(64bit)
• libpwdchan-plugin.so()(64bit)
• libpwdstorage-plugin.so()(64bit)
• libreferint-plugin.so()(64bit)
• libreplication-plugin.so()(64bit)
• libretrocl-plugin.so()(64bit)
• libroles-plugin.so()(64bit)
• librootdn-access-plugin.so()(64bit)
• libschemareload-plugin.so()(64bit)
• libstatechange-plugin.so()(64bit)
• libsyntax-plugin.so()(64bit)
• libusn-plugin.so()(64bit)
• libviews-plugin.so()(64bit)
• libwhoami-plugin.so()(64bit)
• user(dirsrv)

Requires

• /bin/sh
• /bin/sh
• /bin/sh
• /usr/bin/c_rehash
• /usr/bin/perl
• /usr/bin/python3
• /usr/bin/sh
• /usr/sbin/semanage
• 389-ds-base-libs = 2.8.0-11.el9_8
• acl
• config(389-ds-base) = 2.8.0-11.el9_8
• cracklib-dicts
• cyrus-sasl-gssapi
• cyrus-sasl-md5
• cyrus-sasl-plain
• json-c
• ld-linux-aarch64.so.1()(64bit)
• ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)
• libback-ldbm.so()(64bit)
• libc.so.6()(64bit)
• libc.so.6(GLIBC_2.17)(64bit)
• libc.so.6(GLIBC_2.18)(64bit)
• libc.so.6(GLIBC_2.25)(64bit)
• libc.so.6(GLIBC_2.27)(64bit)
• libc.so.6(GLIBC_2.28)(64bit)
• libc.so.6(GLIBC_2.29)(64bit)
• libc.so.6(GLIBC_2.30)(64bit)
• libc.so.6(GLIBC_2.32)(64bit)
• libc.so.6(GLIBC_2.33)(64bit)
• libc.so.6(GLIBC_2.34)(64bit)
• libcom_err.so.2()(64bit)
• libcrack.so.2()(64bit)
• libcrypt.so.2()(64bit)
• libcrypt.so.2(XCRYPT_2.0)(64bit)
• libcrypto.so.3()(64bit)
• libcrypto.so.3(OPENSSL_3.0.0)(64bit)
• libcrypto.so.3(OPENSSL_3.2.0)(64bit)
• libcrypto.so.3(OPENSSL_3.3.0)(64bit)
• libdb-5.3.so()(64bit)
• libdb-utils
• libgcc_s.so.1()(64bit)
• libgcc_s.so.1(GCC_3.0)(64bit)
• libgcc_s.so.1(GCC_3.3)(64bit)
• libgcc_s.so.1(GCC_4.2.0)(64bit)
• libicudata.so.67()(64bit)
• libicui18n.so.67()(64bit)
• libicuuc.so.67()(64bit)
• libjson-c.so.5()(64bit)
• libk5crypto.so.3()(64bit)
• libkrb5.so.3()(64bit)
• liblber.so.2()(64bit)
• liblber.so.2(OPENLDAP_2.200)(64bit)
• libldap.so.2()(64bit)
• libldap.so.2(OPENLDAP_2.200)(64bit)
• libldaputil.so.0()(64bit)
• liblmdb.so.0.0.0()(64bit)
• libm.so.6()(64bit)
• libm.so.6(GLIBC_2.29)(64bit)
• libns-dshttpd.so.0()(64bit)
• libnspr4.so()(64bit)
• libnss3.so()(64bit)
• libnss3.so(NSS_3.12)(64bit)
• libnss3.so(NSS_3.15)(64bit)
• libnss3.so(NSS_3.2)(64bit)
• libnss3.so(NSS_3.4)(64bit)
• libnss3.so(NSS_3.9.2)(64bit)
• libnssutil3.so()(64bit)
• libpam.so.0()(64bit)
• libpam.so.0(LIBPAM_1.0)(64bit)
• libpcre2-8.so.0()(64bit)
• libplc4.so()(64bit)
• libplds4.so()(64bit)
• libsasl2.so.3()(64bit)
• libsemanage-python3
• libslapd.so.0()(64bit)
• libsmime3.so()(64bit)
• libssl.so.3()(64bit)
• libssl.so.3(OPENSSL_3.0.0)(64bit)
• libssl.so.3(OPENSSL_3.3.0)(64bit)
• libssl3.so()(64bit)
• libssl3.so(NSS_3.14)(64bit)
• libssl3.so(NSS_3.2)(64bit)
• libssl3.so(NSS_3.7.4)(64bit)
• libstdc++.so.6()(64bit)
• libstdc++.so.6(CXXABI_1.3)(64bit)
• libstdc++.so.6(GLIBCXX_3.4)(64bit)
• libstdc++.so.6(GLIBCXX_3.4.11)(64bit)
• libsvrcore.so.0()(64bit)
• libsystemd.so.0()(64bit)
• libsystemd.so.0(LIBSYSTEMD_209)(64bit)
• libz.so.1()(64bit)
• lmdb-libs
• nspr >= 4.32
• nss >= 3.67.0-7
• nss >= 3.67.0-7
• nss-tools
• openldap-clients
• perl-Archive-Tar
• perl-DB_File
• perl-debugger
• perl-sigtrap
• policycoreutils-python-utils
• python3-ldap
• python3-lib389 = 2.8.0-11.el9_8
• rpmlib(CompressedFileNames) <= 3.0.4-1
• rpmlib(FileDigests) <= 4.6.0-1
• rpmlib(PayloadFilesHavePrefix) <= 4.0-1
• rpmlib(PayloadIsZstd) <= 5.4.18-1
• rtld(GNU_HASH)
• selinux-policy >= 3.14.1-29
• shadow-utils
• systemd
• systemd
• systemd
• zlib

License

GPL-3.0-or-later WITH GPL-3.0-389-ds-base-exception AND (Apache-2.0 OR Apache-2.0 WITH LLVM-exception OR MIT) AND (Apache-2.0 OR LGPL-2.1-or-later OR MIT) AND (Apache-2.0 OR MIT) AND (MIT OR Apache-2.0) AND Unicode-3.0 AND (MIT OR Unlicense) AND Apache-2.0 AND MIT AND MPL-2.0 AND Zlib

Changelog

* Tue Oct 20 2026 Thierry Bordaz <tbordaz@redhat.com> - 2.8.0-11
  - Resolves: RHEL-216720 - ERR - idl_new_range_fetch - Failed to build range candidate list on entryusn index [rhel-9.8.z]
  - Resolves: RHEL-234360 - Online reinitialization is failing with the supplier being busy calling idrange_add_id() [rhel-9.8.z]
  - Resolves: RHEL-252559 - MOD_REPLACE on groups/link attributes modifies overlap targets [rhel-9.8.z]
  - Resolves: RHEL-256995 - large IdM host group, missing memberof host group, authentication failures, high traffic and contention [rhel-9.8.z]
  - Resolves: RHEL-257002 - WARN - keys2idl - received NULL idl from index_read_ext_allids [rhel-9.8.z]
  - Resolves: RHEL-267288 - dsEntryDN is being updated when nsslapd-return-original-entrydn is set to off [rhel-9.8.z]
  - Resolves: RHEL-267317 - When fetching an entry from the DB, if nsslapd-return-original-entrydn is enabled the return dsEntryDN rather than normalized DN [rhel-9.8.z]
  - Resolves: RHEL-267322 - Differences on export ldif using online of off-line method on RHDS [rhel-9.8.z]
* Mon Aug 31 2026 Viktor Ashirov <vashirov@redhat.com> - 2.8.0-10
  - Resolves: RHEL-220502 - CVE-2026-18355 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasl_io_start_packet() [rhel-9.8.z]
  - Resolves: RHEL-222321 - CVE-2026-18453 389-ds-base: pre-authentication NULL pointer dereference via paged results and USE_ONE_BACKEND control in op_shared_search [rhel-9.8.z]
  - Resolves: RHEL-232854 - CVE-2026-18922 389-ds-base: SASL PLAIN authentication allows privilege escalation to Directory Manager via stale identity in Cyrus SASL auxiliary property [rhel-9.8.z]
  - Resolves: RHEL-244467 - lib389: set nsDS5ReplicaBindDNGroup before ensure_agreement() [rhel-9.8.z]
  - Resolves: RHEL-245374 - CVE-2026-76560 389-ds-base: anonymous LDAP client can defeat SELFDN ACI bind-rule checks via empty bind DN [rhel-9.8.z]
  - Resolves: RHEL-247865 - CVE-2026-78701 389-ds-base: CVE-2026-11610 incomplete fix may introduce a connection-stall DoS [rhel-9.8.z]
  - Resolves: RHEL-248766 - CVE-2026-11770 fix breaks replication total init when nsDS5ReplicaBindDNGroup is set after agreement creation [rhel-9.8.z]
* Mon Jul 27 2026 Viktor Ashirov <vashirov@redhat.com> - 2.8.0-9
  - Resolves: RHEL-183082 - CVE-2026-11770 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check [rhel-9.8.z]
  - Resolves: RHEL-190775 - CVE-2026-11788 389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser [rhel-9.8.z]
  - Resolves: RHEL-210875 - CVE-2026-15722 389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing [rhel-9.8.z]
* Thu Jun 25 2026 Viktor Ashirov <vashirov@redhat.com> - 2.8.0-8
  - Resolves: RHEL-182159 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-9.8.z]
  - Resolves: RHEL-183103 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow [rhel-9.8.z]
* Thu Jun 11 2026 Viktor Ashirov <vashirov@redhat.com> - 2.8.0-7
  - Resolves: RHEL-152356 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. [rhel-9.8.z]
  - Resolves: RHEL-168967 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. [rhel-9.8.z]
  - Resolves: RHEL-170269 - DS 12 does not handle escape char in bind user [rhel-9.8.z]
  - Resolves: RHEL-174524 - [RFE] Add OS-level thread names to all server threads [rhel-9.8.z]
  - Resolves: RHEL-178086 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-9.8]
  - Resolves: RHEL-180716 - Online export is failing when using the option "-s" [rhel-9.8.z]
  - Resolves: RHEL-183895 - Server shutdown during online reindex may lead to data loss [rhel-9.8.z]
* Thu Mar 05 2026 Viktor Ashirov <vashirov@redhat.com> - 2.8.0-6
  - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8]
* Fri Feb 27 2026 Viktor Ashirov <vashirov@redhat.com> - 2.8.0-5
  - Resolves: RHEL-137084 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.8]
  - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8]
  - Resolves: RHEL-152338 - Crash ( Segmentation fault ) in atomic_compare_exchange() [rhel-9.8]
* Fri Feb 20 2026 Viktor Ashirov <vashirov@redhat.com> - 2.8.0-4
  - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9]
  - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9]
  - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9]
  - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9]
  - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9]
  - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9]
  - Resolves: RHEL-150907 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9]
* Thu Feb 12 2026 Viktor Ashirov <vashirov@redhat.com> - 2.8.0-3
  - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9]
  - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9]
  - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9]
  - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9]
  - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9]
  - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9]
  - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9]
* Mon Jan 12 2026 Viktor Ashirov <vashirov@redhat.com> - 2.8.0-2
  - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9]
* Fri Jan 09 2026 Viktor Ashirov <vashirov@redhat.com> - 2.8.0-1
  - Resolves: RHEL-111229 - Error showing local password policy on web UI [rhel-9]
  - Resolves: RHEL-112680 - Statistics about index lookup report a wrong duration [rhel-9]
  - Resolves: RHEL-116426 - RetroCL plugin generates invalid LDIF [rhel-9]
  - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9]
  - Resolves: RHEL-117748 - The numSubordinates value is not matching the number of direct children. [rhel-9]
  - Resolves: RHEL-117771 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default
  - Resolves: RHEL-117782 - Ignore the memberOfDeferredUpdate setting when LMDB is used.  [rhel-9]
  - Resolves: RHEL-121170 - Units for changing MDB max size are not consistent across different tools [rhel-9]
  - Resolves: RHEL-123231 - Improve the way to detect asynchronous operations in the access logs [rhel-9]
  - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9]
  - Resolves: RHEL-123258 - Typo in errors log after a Memberof fixup task. [rhel-9]
  - Resolves: RHEL-123272 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX [rhel-9]
  - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9]
  - Resolves: RHEL-123368 - IPA health check up script shows time skew is over 24 hours [rhel-9]
  - Resolves: RHEL-123766 - 389-ds-base OpenScanHub Leaks Detected [rhel-9]
  - Resolves: RHEL-123893 - Improve output dsctl dbverify when backend does not exist [rhel-9]
  - Resolves: RHEL-123897 - [WebUI] Replication tab crashes after enabling replication as a consumer [rhel-9]
  - Resolves: RHEL-123923 - Changelog trimming - add number of scanned entries to the log [rhel-9]
  - Resolves: RHEL-126552 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly [rhel-9]
  - Resolves: RHEL-129559 - Online initialization of consumers fails with error -23 [rhel-9]
  - Resolves: RHEL-129580 - Fix paged result search locking [rhel-9]
  - Resolves: RHEL-138481 - Memory leak observed in ns-slapd with 389-ds-base-2.6.1-12 [rhel-9]
  - Resolves: RHEL-139825 - Rebase 389-ds-base to 2.8.x
  - Resolves: RHEL-140089 - Upgrading IDM  to latest version: 389-ds-base and ipa-server breaks replication  [rhel-9]
* Tue Sep 16 2025 Viktor Ashirov <vashirov@redhat.com> - 2.7.0-7
  - Resolves: RHEL-104591 - RHDS12: Web console doesn't show Server Version [rhel-9]
  - Resolves: RHEL-104593 - The numSubordinates value is not matching the number of direct children. [rhel-9]
  - Resolves: RHEL-109034 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9]
  - Resolves: RHEL-109885 - Wrong backend database name syntax causes "Red Hat Directory Server" => "Databases" menu blank in Cockpit [rhel-9]
  - Resolves: RHEL-109889 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9]
  - Resolves: RHEL-109892 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy.  [rhel-9]
  - Resolves: RHEL-109897 - AddressSanitizer: leak in do_search [rhel-9]
  - Resolves: RHEL-113981 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9]
* Tue Aug 05 2025 Viktor Ashirov <vashirov@redhat.com> - 2.7.0-5
  - Resolves: RHEL-89762 - dsidm Error: float() argument must be a string or a number, not 'NoneType' [rhel-9]
  - Resolves: RHEL-92041 - Memory leak in roles_cache_create_object_from_entry
  - Resolves: RHEL-95444 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] [rhel-9]
  - Resolves: RHEL-104821 - ipa-restore fails to restore SELinux contexts, causes ns-slapd AVC denials on /dev/shm after restore.
  - Resolves: RHEL-107005 - Failure to get Server monitoring data when NDN cache is disabled. [rhel-9]
  - Resolves: RHEL-107581 - segfault - error 4 in libpthread-2.28.so [rhel-9]
  - Resolves: RHEL-107585 - ns-slapd crashed when we add nsslapd-referral [rhel-9]
  - Resolves: RHEL-107586 - CWE-284 dirsrv log rotation creates files with world readable permission [rhel-9]
  - Resolves: RHEL-107587 - CWE-532 Created user password hash available to see in audit log [rhel-9]
  - Resolves: RHEL-107588 - CWE-778 Log doesn't show what user gets password changed by administrator [rhel-9]
* Mon Jul 21 2025 Viktor Ashirov <vashirov@redhat.com> - 2.7.0-4
  - Resolves: RHEL-61347 - Directory Server is unavailable after a restart with nsslapd-readonly=on and consumes 100% CPU
* Tue Jul 01 2025 Viktor Ashirov <vashirov@redhat.com> - 2.7.0-3
  - Resolves: RHEL-77983 - Defects found by OpenScanHub
  - Resolves: RHEL-79673 - Improve the "result" field of ipa-healthcheck if replicas are busy
  - Resolves: RHEL-80496 - Can't rename users member of automember rule [rhel-9]
  - Resolves: RHEL-81141 - Healthcheck tool should warn admin about creating a substring index on membership attribute [rhel-9]
  - Resolves: RHEL-89736 - dsconf backend replication monitor fails if replica id starts with 0 [rhel-9]
  - Resolves: RHEL-89745 - ns-slapd crash in dbmdb_import_prepare_worker_entry() [rhel-9]
  - Resolves: RHEL-89753 - Nested group does not receive memberOf attribute [rhel-9]
  - Resolves: RHEL-89769 - Crash in __strlen_sse2 when using the nsRole filter rewriter. [rhel-9]
  - Resolves: RHEL-89782 - RHDS12.2 NSMMReplicationPlugin - release_replica Unable to parse the response [rhel-9]
  - Resolves: RHEL-95768 - Improve error message when bulk import connection is closed [rhel-9]
  - Resolves: RHEL-101189 - lib389/replica.py is using unexisting datetime.UTC in python3.9
* Mon Jun 30 2025 Viktor Ashirov <vashirov@redhat.com> - 2.7.0-1
  - Resolves: RHEL-80163 - Rebase 389-ds-base to 2.7.x
* Fri Mar 14 2025 Viktor Ashirov <vashirov@redhat.com> - 2.6.1-6
  - Resolves: RHEL-82271 - ipa-restore is failing with "Failed to start Directory Service"
* Fri Mar 14 2025 Viktor Ashirov <vashirov@redhat.com> - 2.6.1-5
  - Resolves: RHEL-82271 - ipa-restore is failing with "Failed to start Directory Service"
* Wed Feb 19 2025 Viktor Ashirov <vashirov@redhat.com> - 2.6.1-4
  - Resolves: RHEL-78722 - Failed to set sslversionmax to TLS1.3 in FIPS mode with dsconf $INSTANCE security set --tls-protocol-max TLS1.3
* Wed Feb 12 2025 Viktor Ashirov <vashirov@redhat.com> - 2.6.1-3
  - Resolves: RHEL-18333 Can't rename users member of automember rule
  - Resolves: RHEL-61341 After an initial failure, subsequent online backups will not work.
  - Resolves: RHEL-63887 nsslapd-mdb-max-dbs autotuning doesn't work properly
  - Resolves: RHEL-63891 dbscan crashes when showing statistics for MDB
  - Resolves: RHEL-63998 dsconf should check for number of available named databases
  - Resolves: RHEL-78344 During import of entries without nsUniqueId, a supplier generates duplicate nsUniqueId (LMDB only) [rhel-9]
* Sat Feb 01 2025 Viktor Ashirov <vashirov@redhat.com> - 2.6.1-2
  - Resolves: RHEL-76748: ns-slapd crashes with data directory ≥ 2 days old
* Tue Jan 28 2025 Viktor Ashirov <vashirov@redhat.com> - 2.6.1-1
  - Update to 2.6.1
  - Resolves: RHEL-5151 - [RFE] defer memberof nested updates
  - Resolves: RHEL-54148 - leaked_storage: Variable "childelems" going out of scope leaks the storage it points to.
  - Resolves: RHEL-60135 - deadlock during cleanAllRuv
  - Resolves: RHEL-61341 - After an initial failure, subsequent online backups will not work.
  - Resolves: RHEL-61349 - Remove deprecated setting for HR time stamps in logs
  - Resolves: RHEL-62875 - Passwords are not being updated to use the configured storage scheme ( nsslapd-enable-upgrade-hash is enabled ).
  - Resolves: RHEL-64438 - VLV errors with RSNv3 and pruning enabled [rhel-9]
  - Resolves: RHEL-64854 - cleanallruv consums CPU and is slow
  - Resolves: RHEL-65506 - AddressSanitizer: double-free
  - Resolves: RHEL-65512 - AddressSanitizer: heap-use-after-free in import_abort_all
  - Resolves: RHEL-65561 - LeakSanitizer: detected memory leaks in dbmdb_public_db_op
  - Resolves: RHEL-65662 - Replication issue between masters using cert based authentication
  - Resolves: RHEL-65664 - LDAP unprotected search query during certificate based authentication
  - Resolves: RHEL-65665 - Ambiguous warning about SELinux in dscreate for non-root user
  - Resolves: RHEL-65741 - LeakSanitizer: memory leak in ldbm_entryrdn.c
  - Resolves: RHEL-65776 - Wrong set of entries returned for some search filters [rhel-9]
  - Resolves: RHEL-67004 - "dsconf config replace" should handle multivalued attributes.
  - Resolves: RHEL-67005 - Online backup hangs sporadically.
  - Resolves: RHEL-67008 - Some replication status data are reset upon a restart.
  - Resolves: RHEL-67020 - 389DirectoryServer Process Stops When Setting up Sorted VLV Index
  - Resolves: RHEL-67024 - Some nsslapd-haproxy-trusted-ip values are discarded upon a restart.
  - Resolves: RHEL-69806 - ipahealthcheck.ds.replication displays WARNING '1 conflict entries found under the replication suffix'
  - Resolves: RHEL-69826 - "Duplicated DN detected" errors when creating indexes or importing entries. [rhel-9]
  - Resolves: RHEL-70127 - Crash in attrlist_find() when the Account Policy plugin is enabled. [rhel-9]
  - Resolves: RHEL-70252 - Freelist ordering causes high wtime
  - Resolves: RHEL-71218 - Sub suffix causes "id2entry - Could not open id2entry err 0" error when the Directory Server starts [rhel-9]
  - Resolves: RHEL-74153 - backup/restore broken [rhel-9]
  - Resolves: RHEL-74158 - If an entry RDN is identical to the suffix, then Entryrdn gets broken during a reindex [rhel-9]
  - Resolves: RHEL-74163 - Crash during bind when acct policy plugin does not have "alwaysrecordlogin" set [rhel-9]
  - Resolves: RHEL-74168 - On replica consumer, account policy plugin fails to manage the last login history [rhel-9]
  - Resolves: RHEL-74174 - Replication broken after backup restore with freeipa configuration [rhel-9]
  - Resolves: RHEL-74353 - nsslapd-haproxy-trusted-ip is not in schema [rhel-9]
  - Resolves: RHEL-76019 - IPA LDAP error code T3 when no exceeded time limit from a paged search result [rhel-9]
* Mon Dec 16 2024 Viktor Ashirov <vashirov@redhat.com> - 2.6.0-2
  - Fix License tag
* Mon Dec 16 2024 Viktor Ashirov <vashirov@redhat.com> - 2.6.0-1
  - Update to 2.6.0
  - Resolves: RHEL-67195 - Rebase 389-ds-base to 2.6.0

Files

/etc/dirsrv
/etc/dirsrv/config
/etc/dirsrv/config/certmap.conf
/etc/dirsrv/config/slapd-collations.conf
/etc/dirsrv/schema
/etc/dirsrv/schema/99user.ldif
/etc/systemd/system/dirsrv.target.wants
/usr/bin/dbscan
/usr/bin/ds-logpipe.py
/usr/bin/ds-replcheck
/usr/bin/ldclt
/usr/bin/logconv.pl
/usr/bin/pwdhash
/usr/lib/.build-id
/usr/lib/.build-id/06
/usr/lib/.build-id/06/fb7dfd9c7704f727f7a1a1e10dc01e67fe5dd5
/usr/lib/.build-id/07
/usr/lib/.build-id/07/4710b7132f1bbfbae530a872281c24f7e4894a
/usr/lib/.build-id/08
/usr/lib/.build-id/08/a09edb08966fb49ffb5d5da5271345935e2173
/usr/lib/.build-id/1c
/usr/lib/.build-id/1c/984a5d33cbe96b6e222873001219c1c94cf7d0
/usr/lib/.build-id/1d
/usr/lib/.build-id/1d/cdfccf8bc46f2f59de688df1b59586e8848319
/usr/lib/.build-id/23
/usr/lib/.build-id/23/372a6fed981a1bf22cb38251cefe1dc89f4fd2
/usr/lib/.build-id/23/e3cd35b6f504ce1691914259ab8400642c16d2
/usr/lib/.build-id/26
/usr/lib/.build-id/26/30a15d545db5758642d50d65f4bcc242e5581b
/usr/lib/.build-id/3a
/usr/lib/.build-id/3a/860f81fe3a21a7a2c0b3f1c4ddbf8f128dd8d5
/usr/lib/.build-id/3b
/usr/lib/.build-id/3b/00b73d9aad8606506d9f8380749f19e4d0322a
/usr/lib/.build-id/3c
/usr/lib/.build-id/3c/e80ec165ffc228fa39ebefab4c045d4bb821b0
/usr/lib/.build-id/44
/usr/lib/.build-id/44/3f15e25a92b1a70ef3e73fd9795bd8447ec34e
/usr/lib/.build-id/48
/usr/lib/.build-id/48/bd336a7436d77f4651a5a43372e6079680629c
/usr/lib/.build-id/4c
/usr/lib/.build-id/4c/f72a605ec63fea88fc2ff9a4f98fb048952042
/usr/lib/.build-id/5a
/usr/lib/.build-id/5a/7b10b17630a629d6b63eda20c8fac795de3221
/usr/lib/.build-id/5c
/usr/lib/.build-id/5c/c457e602833397ebf05b8fd211b78e9956965a
/usr/lib/.build-id/5f
/usr/lib/.build-id/5f/2be5dc764dd442b3815c151e557ce6723d5865
/usr/lib/.build-id/61
/usr/lib/.build-id/61/3f3a04b1cdeb4931bad9547ad6551ad19d5b56
/usr/lib/.build-id/62
/usr/lib/.build-id/62/49d72514d3cea73d67ab311533657d94044bb6
/usr/lib/.build-id/66
/usr/lib/.build-id/66/9875519c9bb430da9d1dab3ccc5748bbedc857
/usr/lib/.build-id/66/9ce967849b1ef4fd91d8af5f64151c7759c7ea
/usr/lib/.build-id/6c
/usr/lib/.build-id/6c/42be237f2aff4021cddd4131007fb809e41e24
/usr/lib/.build-id/6f
/usr/lib/.build-id/6f/bc89a31872099945cda7bca14a9d16abb31800
/usr/lib/.build-id/7a
/usr/lib/.build-id/7a/8f611c9e2c0238f62a93fa0ba8b63a88596036
/usr/lib/.build-id/7f
/usr/lib/.build-id/7f/0be1fa4486b190cc3f2920e12539a1c48d9abd
/usr/lib/.build-id/8f
/usr/lib/.build-id/8f/04f6402296812b58cc5b0e7e69545ce1ba68ba
/usr/lib/.build-id/98
/usr/lib/.build-id/98/6ef75112a75273ceadba225cfd8f08f01c5c62
/usr/lib/.build-id/99
/usr/lib/.build-id/99/791d25e772817c81b319ddc40c7d4150a9d0b1
/usr/lib/.build-id/af
/usr/lib/.build-id/af/1c4913ce5d9c83a33d311156d907d192297ec7
/usr/lib/.build-id/b2
/usr/lib/.build-id/b2/997f8eccdb244988d17629ed1f39e317fe85ab
/usr/lib/.build-id/b5
/usr/lib/.build-id/b5/0e42937725db4c7765d1347c80d47c0c123768
/usr/lib/.build-id/bb
/usr/lib/.build-id/bb/32a2f75a500d6fe678dcfc8f77a108a2258fdc
/usr/lib/.build-id/be
/usr/lib/.build-id/be/765d99281c9a7cc2ccc4f8d0a47bc6de9178fd
/usr/lib/.build-id/c6
/usr/lib/.build-id/c6/9d3910db718270f3beae528655c2e41200263a
/usr/lib/.build-id/c9
/usr/lib/.build-id/c9/3176e716f90ad2b25c8c8b51ee9b18c31d9404
/usr/lib/.build-id/d9
/usr/lib/.build-id/d9/ee8d764beda4a60ed4513fdbbf08428939807b
/usr/lib/.build-id/db
/usr/lib/.build-id/db/67a24f0fa2a1e5be754a517308a434be6628f4
/usr/lib/.build-id/db/684353bb9aa87ac6d1300649082bc691d091b6
/usr/lib/.build-id/de
/usr/lib/.build-id/de/c5f8577c3fb91ee2496c59f92079bf30dd495d
/usr/lib/.build-id/e1
/usr/lib/.build-id/e1/0bab4d461d916bda9cb1230af38f25a2bdca8e
/usr/lib/.build-id/e1/479da8829583deecdd9e6226eac7f9cb218981
/usr/lib/.build-id/e6
/usr/lib/.build-id/e6/7b4e494622c80ca9d5532fc6aa257a62ec8a10
/usr/lib/.build-id/f4
/usr/lib/.build-id/f4/00ec0a7e42febefdac023fd72a5be6db3f9ce8
/usr/lib/.build-id/f7
/usr/lib/.build-id/f7/74fad5223c2435e9f6b9ff7d2a979285ad8382
/usr/lib/sysctl.d/70-dirsrv.conf
/usr/lib/systemd/system
/usr/lib/systemd/system/dirsrv.target
/usr/lib/systemd/system/dirsrv@.service
/usr/lib/systemd/system/dirsrv@.service.d
/usr/lib/systemd/system/dirsrv@.service.d/custom.conf
/usr/lib/sysusers.d/389-ds-base.conf
/usr/lib64/dirsrv/bin
/usr/lib64/dirsrv/bin/jeprof
/usr/lib64/dirsrv/lib
/usr/lib64/dirsrv/lib/libjemalloc.so.2
/usr/lib64/dirsrv/plugins
/usr/lib64/dirsrv/plugins/libacctpolicy-plugin.so
/usr/lib64/dirsrv/plugins/libacctusability-plugin.so
/usr/lib64/dirsrv/plugins/libacl-plugin.so
/usr/lib64/dirsrv/plugins/libaddn-plugin.so
/usr/lib64/dirsrv/plugins/libalias-entries-plugin.so
/usr/lib64/dirsrv/plugins/libattr-unique-plugin.so
/usr/lib64/dirsrv/plugins/libautomember-plugin.so
/usr/lib64/dirsrv/plugins/libback-ldbm.so
/usr/lib64/dirsrv/plugins/libbitwise-plugin.so
/usr/lib64/dirsrv/plugins/libchainingdb-plugin.so
/usr/lib64/dirsrv/plugins/libcollation-plugin.so
/usr/lib64/dirsrv/plugins/libcontentsync-plugin.so
/usr/lib64/dirsrv/plugins/libcos-plugin.so
/usr/lib64/dirsrv/plugins/libderef-plugin.so
/usr/lib64/dirsrv/plugins/libdistrib-plugin.so
/usr/lib64/dirsrv/plugins/libdna-plugin.so
/usr/lib64/dirsrv/plugins/libentryuuid-plugin.so
/usr/lib64/dirsrv/plugins/libentryuuid-syntax-plugin.so
/usr/lib64/dirsrv/plugins/liblinkedattrs-plugin.so
/usr/lib64/dirsrv/plugins/libmanagedentries-plugin.so
/usr/lib64/dirsrv/plugins/libmemberof-plugin.so
/usr/lib64/dirsrv/plugins/libpam-passthru-plugin.so
/usr/lib64/dirsrv/plugins/libpassthru-plugin.so
/usr/lib64/dirsrv/plugins/libpbe-plugin.so
/usr/lib64/dirsrv/plugins/libposix-winsync-plugin.so
/usr/lib64/dirsrv/plugins/libpwdchan-plugin.so
/usr/lib64/dirsrv/plugins/libpwdstorage-plugin.so
/usr/lib64/dirsrv/plugins/libreferint-plugin.so
/usr/lib64/dirsrv/plugins/libreplication-plugin.so
/usr/lib64/dirsrv/plugins/libretrocl-plugin.so
/usr/lib64/dirsrv/plugins/libroles-plugin.so
/usr/lib64/dirsrv/plugins/librootdn-access-plugin.so
/usr/lib64/dirsrv/plugins/libschemareload-plugin.so
/usr/lib64/dirsrv/plugins/libstatechange-plugin.so
/usr/lib64/dirsrv/plugins/libsyntax-plugin.so
/usr/lib64/dirsrv/plugins/libusn-plugin.so
/usr/lib64/dirsrv/plugins/libviews-plugin.so
/usr/lib64/dirsrv/plugins/libwhoami-plugin.so
/usr/lib64/dirsrv/python
/usr/lib64/dirsrv/python/failedbinds.py
/usr/lib64/dirsrv/python/logregex.py
/usr/libexec/dirsrv/ds_selinux_restorecon.sh
/usr/libexec/dirsrv/ds_systemd_ask_password_acl
/usr/sbin/ns-slapd
/usr/sbin/openldap_to_ds
/usr/share/dirsrv
/usr/share/dirsrv/data
/usr/share/dirsrv/data/10rfc2307bis.ldif
/usr/share/dirsrv/data/10rfc2307compat.ldif
/usr/share/dirsrv/data/60changelog.ldif
/usr/share/dirsrv/data/60inetmail.ldif
/usr/share/dirsrv/data/60kerberos.ldif
/usr/share/dirsrv/data/60krb5kdc.ldif
/usr/share/dirsrv/data/60nis.ldif
/usr/share/dirsrv/data/60qmail.ldif
/usr/share/dirsrv/data/60radius.ldif
/usr/share/dirsrv/data/60rfc4876.ldif
/usr/share/dirsrv/data/60samba.ldif
/usr/share/dirsrv/data/60sendmail.ldif
/usr/share/dirsrv/data/Ace.ldif
/usr/share/dirsrv/data/European.ldif
/usr/share/dirsrv/data/Eurosuffix.ldif
/usr/share/dirsrv/data/Example-roles.ldif
/usr/share/dirsrv/data/Example-views.ldif
/usr/share/dirsrv/data/Example.ldif
/usr/share/dirsrv/data/dbgen-FamilyNames
/usr/share/dirsrv/data/dbgen-GivenNames
/usr/share/dirsrv/data/dbgen-OrgUnits
/usr/share/dirsrv/data/dsee.schema
/usr/share/dirsrv/data/template-baseacis.ldif
/usr/share/dirsrv/data/template-country.ldif
/usr/share/dirsrv/data/template-domain.ldif
/usr/share/dirsrv/data/template-dse-minimal.ldif
/usr/share/dirsrv/data/template-dse.ldif
/usr/share/dirsrv/data/template-ldapi-autobind.ldif
/usr/share/dirsrv/data/template-ldapi-default.ldif
/usr/share/dirsrv/data/template-ldapi.ldif
/usr/share/dirsrv/data/template-locality.ldif
/usr/share/dirsrv/data/template-org.ldif
/usr/share/dirsrv/data/template-orgunit.ldif
/usr/share/dirsrv/data/template-sasl.ldif
/usr/share/dirsrv/data/template-state.ldif
/usr/share/dirsrv/data/template-suffix-db.ldif
/usr/share/dirsrv/data/template.ldif
/usr/share/dirsrv/inf
/usr/share/dirsrv/inf/defaults.inf
/usr/share/dirsrv/inf/slapd.inf
/usr/share/dirsrv/mibs
/usr/share/dirsrv/mibs/redhat-directory.mib
/usr/share/dirsrv/schema
/usr/share/dirsrv/schema/00core.ldif
/usr/share/dirsrv/schema/01core389.ldif
/usr/share/dirsrv/schema/02common.ldif
/usr/share/dirsrv/schema/03entryuuid.ldif
/usr/share/dirsrv/schema/05rfc2927.ldif
/usr/share/dirsrv/schema/05rfc4523.ldif
/usr/share/dirsrv/schema/05rfc4524.ldif
/usr/share/dirsrv/schema/06inetorgperson.ldif
/usr/share/dirsrv/schema/10automember-plugin.ldif
/usr/share/dirsrv/schema/10dna-plugin.ldif
/usr/share/dirsrv/schema/10mep-plugin.ldif
/usr/share/dirsrv/schema/10rfc2307compat.ldif
/usr/share/dirsrv/schema/20subscriber.ldif
/usr/share/dirsrv/schema/25java-object.ldif
/usr/share/dirsrv/schema/28pilot.ldif
/usr/share/dirsrv/schema/30ns-common.ldif
/usr/share/dirsrv/schema/50ns-admin.ldif
/usr/share/dirsrv/schema/50ns-certificate.ldif
/usr/share/dirsrv/schema/50ns-directory.ldif
/usr/share/dirsrv/schema/50ns-mail.ldif
/usr/share/dirsrv/schema/50ns-value.ldif
/usr/share/dirsrv/schema/50ns-web.ldif
/usr/share/dirsrv/schema/60acctpolicy.ldif
/usr/share/dirsrv/schema/60autofs.ldif
/usr/share/dirsrv/schema/60eduperson.ldif
/usr/share/dirsrv/schema/60mozilla.ldif
/usr/share/dirsrv/schema/60nss-ldap.ldif
/usr/share/dirsrv/schema/60pam-plugin.ldif
/usr/share/dirsrv/schema/60posix-winsync-plugin.ldif
/usr/share/dirsrv/schema/60pureftpd.ldif
/usr/share/dirsrv/schema/60rfc2739.ldif
/usr/share/dirsrv/schema/60rfc3712.ldif
/usr/share/dirsrv/schema/60sabayon.ldif
/usr/share/dirsrv/schema/60samba3.ldif
/usr/share/dirsrv/schema/60sudo.ldif
/usr/share/dirsrv/schema/60trust.ldif
/usr/share/doc/389-ds-base
/usr/share/doc/389-ds-base/LICENSE
/usr/share/doc/389-ds-base/LICENSE.GPLv3+
/usr/share/doc/389-ds-base/LICENSE.openssl
/usr/share/doc/389-ds-base/README.jemalloc
/usr/share/gdb/auto-load/usr
/usr/share/gdb/auto-load/usr/sbin
/usr/share/gdb/auto-load/usr/sbin/ns-slapd-gdb.py
/usr/share/licenses/389-ds-base
/usr/share/licenses/389-ds-base/COPYING.jemalloc
/usr/share/man/man1/dbscan.1.gz
/usr/share/man/man1/ds-logpipe.py.1.gz
/usr/share/man/man1/ds-replcheck.1.gz
/usr/share/man/man1/ldclt.1.gz
/usr/share/man/man1/logconv.pl.1.gz
/usr/share/man/man1/pwdhash.1.gz
/usr/share/man/man5/99user.ldif.5.gz
/usr/share/man/man5/certmap.conf.5.gz
/usr/share/man/man5/dirsrv.5.gz
/usr/share/man/man5/dirsrv.systemd.5.gz
/usr/share/man/man5/slapd-collations.conf.5.gz
/usr/share/man/man8/ns-slapd.8.gz
/usr/share/man/man8/openldap_to_ds.8.gz
/var/lib/dirsrv
/var/lock/dirsrv
/var/log/dirsrv

Generated by rpm2html 1.8.1

Fabrice Bellet, Thu Oct 29 06:34:09 2026