You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@directory.apache.org by Stefan Seelmann <ma...@stefan-seelmann.de> on 2020/03/01 20:07:48 UTC
Re: [VOTE] Apache DS 2.0.0.AM26 release
+1
* Verified checksums and signatures
* Built source package with Java 8
Yay, many thanks Emmanuel!
Kind Regards,
Stefan
On 2/28/20 3:23 PM, Emmanuel Lécharny wrote:
> Hi,
>
> This is a major release of ApacheDS. It brings many bug fixes, and is
> the first version implementing LDAP transactions,
> which are now used internally for atomic operations, but can also be
> used through an extended operation, to apply many
> operations in one transaction.
> We also have changed the Cache system we were using (ehcache) to use the
> more efficient and lighter Caffeine
> (https://github.com/ben-manes/caffeine/wiki).
> Otherwise, we don't anymore store certificates in the server by default,
> but use an external keystore.
>
> We can't anymore produce the Mac OSX installer package, we are working
> on finding a solution for that issue (Apple
> deprecated the MakePackage tool and is now applying way more stringent
> checks and controls for packages, like
> and Apple signature). This will most certainly be fixed in the next
> revision.
>
> It uses the Apache LDAP API 2.0.0 release
>
> Here are the fixed issues :
>
>
> Bugs :
> ------
>
> * DIRSERVER-1414 - Normalization is not handling correctly (buit this
> has no impact)
> * DIRSERVER-1580 - Numerous JUnit tests failing on Windows, again.
> * DIRSERVER-1878 - Bad warning from 'maven-shade-plugin' when creating
> the 'apacheds-service' jar
> * DIRSERVER-1924 - The MavibotPartition entry cache is not correctly set
> * DIRSERVER-1974 - Rename Operation Issue - ApacheDS
> * DIRSERVER-2049 - Queries interrupted with delete/add operations
> * DIRSERVER-2066 - Maven 3.3.x produces Invalid installers/archives
> * DIRSERVER-2070 - Null pointer exception on kerberos password changing
> * DIRSERVER-2071 - MinaKerberosDecoder fails with NullPointerException
> if the kerberos message is split in multiple packets
> * DIRSERVER-2074 - small default TCP receive/send buffer size causing
> TCP packet fragmentation on some platforms
> * DIRSERVER-2089 - AttributeType breaks the equals/hashCode override
> contract
> * DIRSERVER-2099 - NOTICE and LICENSE files for DS 2.0.0-M20 are
> incorrect
> * DIRSERVER-2146 - Using special chars in uid makes problem
> * DIRSERVER-2197 - Debian installer package contains the binary 4 times
> * DIRSERVER-2237 - Application opens but can't 'Open Connection' -
> IllegalArgumentException
> * DIRSERVER-2247 - Invalid signature file digest for Manifest main
> attributes - When switching from 2.0.0-M24 to 2.0.0-AM25
> * DIRSERVER-2253 - NIS schema object class and attribute problem
> * DIRSERVER-2264 - missing schema type for NIS: nisMapName
> * DIRSERVER-2273 - Le serveur ne démarre plus
> * DIRSERVER-2275 - Les schemas LDIF générés à partir du schema browser
> font planter Directory au démarrage
> * DIRSERVER-2289 - Paging support to retrieve all the entries available
> in ApacheDS between different client and LDAP server connections
>
>
> Improvements :
> --------------
>
> * DIRSERVER-959 - We nedd a global cache
> * DIRSERVER-1639 - Add support for specifying cipher suites in
> LdapServer's configuration
> * DIRSERVER-1892 - We don't need to clone the full entry when returning
> it from the backen
> * DIRSERVER-1916 - Don't drop 'top' from ObjectClass index, it's never
> present in the BTree
> * DIRSERVER-2044 - The CacheService.initialize() method takes an unused
> InstanceID argument
> * DIRSERVER-2132 - Add the structuralObjectClass attribute to every
> returned entry
> * DIRSERVER-2133 - Add the hasSubordinates operational attribute to entries
> * DIRSERVER-2145 - A BIND request will do 2 lookups of the entry trying
> to bind
> * DIRSERVER-2168 - Possible performance improvement in the Add operation
> * DIRSERVER-2262 - The LdapServer.loadkeyStore() method do the work
> twice if there is no KeyStore defined
> * DIRSERVER-2270 - Inconsistent log level practices
>
>
> New features :
> --------------
>
> * DIRSERVER-279 - Transaction support
> * DIRSERVER-1422 - Delegation of Authentication
> * DIRSERVER-1956 - Add support for rfc4525 (increment)
> * DIRSERVER-2245 - Implement the transaction support in ApachedS
> * DIRSERVER-2248 - The server generates some errors when starting
> (Schema isues)
> Tasks :
> -------
>
> * DIRSERVER-1245 - Source audit
> * DIRSERVER-2063 - Automat testing of installers
> * DIRSERVER-2097 - Fix usage of default charset|locale|timezone and
> enable forbiddenapis check
> * DIRSERVER-2271 - Replace Ehcache with Caffeine
>
> Tests :
> -------
> * DIRSERVER-1847 - Introduce time provider for time dependent tests
>
>
>
> Here are the associated links :
>
> ApacheDS 2.0.0.AM26
> -------------------
> - GIT tag :
>
> https://gitbox.apache.org/repos/asf?p=directory-server.git;a=commit;h=8c9b56bdcc0703b04b8e2dbdc4f045ed5d83a064
> <https://gitbox.apache.org/repos/asf?p=directory-server.git;a=commit;h=40ab08d93c6125ccb59d692b25759361307195d3>
>
>
> - Nexus repository:
> https://repository.apache.org/content/repositories/orgapachedirectory-1188
> <https://repository.apache.org/content/repositories/orgapachedirectory-1172>
>
>
> - Distribution packages and sources :
> https://dist.apache.org/repos/dist/dev/directory/apacheds/2.0.0.AM26/
> <https://dist.apache.org/repos/dist/dev/directory/apacheds/2.0.0-M24/>
>
>
> [ ] +1 : release ApacheDS 2.0.0.AM26
> [ ] ± 0 : I don't care
> [ ] -1 : No, don't release ApacheDS 2.0.0.AM26
>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@directory.apache.org
For additional commands, e-mail: dev-help@directory.apache.org
Re: [VOTE] Apache DS 2.0.0.AM26 release
Posted by Stefan Seelmann <ma...@stefan-seelmann.de>.
Can we call the vote successful?
On 3/3/20 3:17 PM, Shawn McKinney wrote:
>
>> On Mar 3, 2020, at 6:10 AM, Emmanuel Lécharny <el...@gmail.com> wrote:
>>
>> I'll investigate those erros, and the ones you mentionned (and Brian, etc).
>>
>> I'm not sure it would forces me to generate a new release, IMO, I think the best we can do is to cut this release, and get the errors fixed in a coming new release.
>>
>> Thoughts ?
>
> Kind of where I ended up. It does build, (on most platforms) and the installer works, why I’m a +1 on release.
>
> —
> Shawn
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@directory.apache.org
> For additional commands, e-mail: dev-help@directory.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@directory.apache.org
For additional commands, e-mail: dev-help@directory.apache.org
Re: [VOTE] Apache DS 2.0.0.AM26 release
Posted by Shawn McKinney <sm...@apache.org>.
> On Mar 3, 2020, at 6:10 AM, Emmanuel Lécharny <el...@gmail.com> wrote:
>
> I'll investigate those erros, and the ones you mentionned (and Brian, etc).
>
> I'm not sure it would forces me to generate a new release, IMO, I think the best we can do is to cut this release, and get the errors fixed in a coming new release.
>
> Thoughts ?
Kind of where I ended up. It does build, (on most platforms) and the installer works, why I’m a +1 on release.
—
Shawn
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@directory.apache.org
For additional commands, e-mail: dev-help@directory.apache.org
Re: [VOTE] Apache DS 2.0.0.AM26 release
Posted by Emmanuel Lécharny <el...@gmail.com>.
Thanks Shawn.
I have tested the build on Debian, with Java 8, and got these errors :
[ERROR] Tests run: 14, Failures: 0, Errors: 2, Skipped: 0, Time elapsed:
14.183 s <<< FAILURE! - in
org.apache.directory.shared.client.api.CertificateValidationTest
[ERROR]
testLdaps_Valid_RootCaTrustManager(org.apache.directory.shared.client.api.CertificateValidationTest)
Time elapsed: 1.022 s <<< ERROR!
org.apache.directory.api.ldap.model.exception.LdapTlsHandshakeException:
ERR_04120_TLS_HANDSHAKE_ERROR The TLS handshake failed, reason:
Unspecified: TrustAnchor with subject "CN=ApacheDS, OU=Directory, O=ASF,
C=US" is not a CA certificate
at
org.apache.directory.shared.client.api.CertificateValidationTest.connectOk(CertificateValidationTest.java:337)
at
org.apache.directory.shared.client.api.CertificateValidationTest.testLdaps_Valid_RootCaTrustManager(CertificateValidationTest.java:243)
Caused by: javax.net.ssl.SSLHandshakeException: SSL handshake failed.
Caused by: javax.net.ssl.SSLHandshakeException: General SSLEngine problem
Caused by: javax.net.ssl.SSLHandshakeException: General SSLEngine problem
Caused by: sun.security.validator.ValidatorException: PKIX path
validation failed: sun.security.validator.ValidatorException:
TrustAnchor with subject "CN=ApacheDS, OU=Directory, O=ASF, C=US" is not
a CA certificate
Caused by: sun.security.validator.ValidatorException: TrustAnchor with
subject "CN=ApacheDS, OU=Directory, O=ASF, C=US" is not a CA certificate
[ERROR]
testStartTls_Valid_RootCaTrustManager(org.apache.directory.shared.client.api.CertificateValidationTest)
Time elapsed: 1.011 s <<< ERROR!
org.apache.directory.api.ldap.model.exception.LdapTlsHandshakeException:
ERR_04120_TLS_HANDSHAKE_ERROR The TLS handshake failed, reason:
Unspecified: TrustAnchor with subject "CN=ApacheDS, OU=Directory, O=ASF,
C=US" is not a CA certificate
at
org.apache.directory.shared.client.api.CertificateValidationTest.connectOk(CertificateValidationTest.java:333)
at
org.apache.directory.shared.client.api.CertificateValidationTest.testStartTls_Valid_RootCaTrustManager(CertificateValidationTest.java:253)
Caused by: javax.net.ssl.SSLHandshakeException: SSL handshake failed.
Caused by: javax.net.ssl.SSLHandshakeException: General SSLEngine problem
Caused by: javax.net.ssl.SSLHandshakeException: General SSLEngine problem
Caused by: sun.security.validator.ValidatorException: PKIX path
validation failed: sun.security.validator.ValidatorException:
TrustAnchor with subject "CN=ApacheDS, OU=Directory, O=ASF, C=US" is not
a CA certificate
Caused by: sun.security.validator.ValidatorException: TrustAnchor with
subject "CN=ApacheDS, OU=Directory, O=ASF, C=US" is not a CA certificate
[INFO] Running org.apache.directory.shared.client.api.LdapConnectionTest
[INFO] Tests run: 14, Failures: 0, Errors: 0, Skipped: 0, Time elapsed:
2.222 s - in org.apache.directory.shared.client.api.LdapConnectionTest
[INFO] Running org.apache.directory.shared.client.api.ServerSchemaLoaderTest
[INFO] Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed:
1.069 s - in org.apache.directory.shared.client.api.ServerSchemaLoaderTest
[INFO] Running org.apache.directory.shared.client.api.LdapSSLConnectionTest
[INFO] Tests run: 21, Failures: 0, Errors: 0, Skipped: 0, Time elapsed:
33.424 s - in org.apache.directory.shared.client.api.LdapSSLConnectionTest
[INFO] Running org.apache.directory.shared.client.api.AdsSchemaLoaderTest
[INFO] Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed:
1.1 s - in org.apache.directory.shared.client.api.AdsSchemaLoaderTest
[INFO] Running
org.apache.directory.ldap.client.template.LdapConnectionTemplateTest
[INFO] Tests run: 9, Failures: 0, Errors: 0, Skipped: 0, Time elapsed:
1.278 s - in
org.apache.directory.ldap.client.template.LdapConnectionTemplateTest
[INFO]
[INFO] Results:
[INFO]
[ERROR] Errors:
[ERROR]
CertificateValidationTest.testLdaps_Valid_RootCaTrustManager:243->connectOk:337
? LdapTlsHandshake
[ERROR]
CertificateValidationTest.testStartTls_Valid_RootCaTrustManager:253->connectOk:333
? LdapTlsHandshake
$ mvn --version
Apache Maven 3.6.3 (cecedd343002696d0abb50b32b541b8a6ba2883f)
Maven home: /opt/apache-maven-3.6.3
Java version: 1.8.0_242, vendor: Oracle Corporation, runtime:
/usr/lib/jvm/java-8-openjdk-amd64/jre
Default locale: en_US, platform encoding: ANSI_X3.4-1968
OS name: "linux", version: "4.9.0-11-amd64", arch: "amd64", family: "unix"
I'll investigate those erros, and the ones you mentionned (and Brian, etc).
I'm not sure it would forces me to generate a new release, IMO, I think
the best we can do is to cut this release, and get the errors fixed in a
coming new release.
Thoughts ?
On 03/03/2020 00:41, Shawn McKinney wrote:
> +1, built on centos 7, 8, Java 8. Also installed binaries on centos 8 and ran fortress unit tests.
>
> —
> Shawn
>
>> On Mar 2, 2020, at 12:02 PM, Colm O hEigeartaigh <co...@apache.org> wrote:
>>
>> +1. Built and verified distribution, tested the upgrade works OK for various other Apache projects that depend on it.
>>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@directory.apache.org
> For additional commands, e-mail: dev-help@directory.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@directory.apache.org
For additional commands, e-mail: dev-help@directory.apache.org
Re: [VOTE] Apache DS 2.0.0.AM26 release
Posted by Shawn McKinney <sm...@apache.org>.
+1, built on centos 7, 8, Java 8. Also installed binaries on centos 8 and ran fortress unit tests.
—
Shawn
> On Mar 2, 2020, at 12:02 PM, Colm O hEigeartaigh <co...@apache.org> wrote:
>
> +1. Built and verified distribution, tested the upgrade works OK for various other Apache projects that depend on it.
>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@directory.apache.org
For additional commands, e-mail: dev-help@directory.apache.org
Re: [VOTE] Apache DS 2.0.0.AM26 release
Posted by Colm O hEigeartaigh <co...@apache.org>.
+1. Built and verified distribution, tested the upgrade works OK for
various other Apache projects that depend on it.
Colm.
On Sun, Mar 1, 2020 at 8:08 PM Stefan Seelmann <ma...@stefan-seelmann.de>
wrote:
> +1
>
> * Verified checksums and signatures
> * Built source package with Java 8
>
> Yay, many thanks Emmanuel!
>
> Kind Regards,
> Stefan
>
> On 2/28/20 3:23 PM, Emmanuel Lécharny wrote:
> > Hi,
> >
> > This is a major release of ApacheDS. It brings many bug fixes, and is
> > the first version implementing LDAP transactions,
> > which are now used internally for atomic operations, but can also be
> > used through an extended operation, to apply many
> > operations in one transaction.
> > We also have changed the Cache system we were using (ehcache) to use the
> > more efficient and lighter Caffeine
> > (https://github.com/ben-manes/caffeine/wiki).
> > Otherwise, we don't anymore store certificates in the server by default,
> > but use an external keystore.
> >
> > We can't anymore produce the Mac OSX installer package, we are working
> > on finding a solution for that issue (Apple
> > deprecated the MakePackage tool and is now applying way more stringent
> > checks and controls for packages, like
> > and Apple signature). This will most certainly be fixed in the next
> > revision.
> >
> > It uses the Apache LDAP API 2.0.0 release
> >
> > Here are the fixed issues :
> >
> >
> > Bugs :
> > ------
> >
> > * DIRSERVER-1414 - Normalization is not handling correctly (buit this
> > has no impact)
> > * DIRSERVER-1580 - Numerous JUnit tests failing on Windows, again.
> > * DIRSERVER-1878 - Bad warning from 'maven-shade-plugin' when creating
> > the 'apacheds-service' jar
> > * DIRSERVER-1924 - The MavibotPartition entry cache is not correctly set
> > * DIRSERVER-1974 - Rename Operation Issue - ApacheDS
> > * DIRSERVER-2049 - Queries interrupted with delete/add operations
> > * DIRSERVER-2066 - Maven 3.3.x produces Invalid installers/archives
> > * DIRSERVER-2070 - Null pointer exception on kerberos password changing
> > * DIRSERVER-2071 - MinaKerberosDecoder fails with NullPointerException
> > if the kerberos message is split in multiple packets
> > * DIRSERVER-2074 - small default TCP receive/send buffer size causing
> > TCP packet fragmentation on some platforms
> > * DIRSERVER-2089 - AttributeType breaks the equals/hashCode override
> > contract
> > * DIRSERVER-2099 - NOTICE and LICENSE files for DS 2.0.0-M20 are
> > incorrect
> > * DIRSERVER-2146 - Using special chars in uid makes problem
> > * DIRSERVER-2197 - Debian installer package contains the binary 4 times
> > * DIRSERVER-2237 - Application opens but can't 'Open Connection' -
> > IllegalArgumentException
> > * DIRSERVER-2247 - Invalid signature file digest for Manifest main
> > attributes - When switching from 2.0.0-M24 to 2.0.0-AM25
> > * DIRSERVER-2253 - NIS schema object class and attribute problem
> > * DIRSERVER-2264 - missing schema type for NIS: nisMapName
> > * DIRSERVER-2273 - Le serveur ne démarre plus
> > * DIRSERVER-2275 - Les schemas LDIF générés à partir du schema browser
> > font planter Directory au démarrage
> > * DIRSERVER-2289 - Paging support to retrieve all the entries available
> > in ApacheDS between different client and LDAP server connections
> >
> >
> > Improvements :
> > --------------
> >
> > * DIRSERVER-959 - We nedd a global cache
> > * DIRSERVER-1639 - Add support for specifying cipher suites in
> > LdapServer's configuration
> > * DIRSERVER-1892 - We don't need to clone the full entry when returning
> > it from the backen
> > * DIRSERVER-1916 - Don't drop 'top' from ObjectClass index, it's never
> > present in the BTree
> > * DIRSERVER-2044 - The CacheService.initialize() method takes an unused
> > InstanceID argument
> > * DIRSERVER-2132 - Add the structuralObjectClass attribute to every
> > returned entry
> > * DIRSERVER-2133 - Add the hasSubordinates operational attribute to
> entries
> > * DIRSERVER-2145 - A BIND request will do 2 lookups of the entry trying
> > to bind
> > * DIRSERVER-2168 - Possible performance improvement in the Add operation
> > * DIRSERVER-2262 - The LdapServer.loadkeyStore() method do the work
> > twice if there is no KeyStore defined
> > * DIRSERVER-2270 - Inconsistent log level practices
> >
> >
> > New features :
> > --------------
> >
> > * DIRSERVER-279 - Transaction support
> > * DIRSERVER-1422 - Delegation of Authentication
> > * DIRSERVER-1956 - Add support for rfc4525 (increment)
> > * DIRSERVER-2245 - Implement the transaction support in ApachedS
> > * DIRSERVER-2248 - The server generates some errors when starting
> > (Schema isues)
> > Tasks :
> > -------
> >
> > * DIRSERVER-1245 - Source audit
> > * DIRSERVER-2063 - Automat testing of installers
> > * DIRSERVER-2097 - Fix usage of default charset|locale|timezone and
> > enable forbiddenapis check
> > * DIRSERVER-2271 - Replace Ehcache with Caffeine
> >
> > Tests :
> > -------
> > * DIRSERVER-1847 - Introduce time provider for time dependent tests
> >
> >
> >
> > Here are the associated links :
> >
> > ApacheDS 2.0.0.AM26
> > -------------------
> > - GIT tag :
> >
> >
> https://gitbox.apache.org/repos/asf?p=directory-server.git;a=commit;h=8c9b56bdcc0703b04b8e2dbdc4f045ed5d83a064
>
> > <
> https://gitbox.apache.org/repos/asf?p=directory-server.git;a=commit;h=40ab08d93c6125ccb59d692b25759361307195d3
> >
> >
> >
> > - Nexus repository:
> >
> https://repository.apache.org/content/repositories/orgapachedirectory-1188
>
> > <
> https://repository.apache.org/content/repositories/orgapachedirectory-1172
> >
> >
> >
> > - Distribution packages and sources :
> > https://dist.apache.org/repos/dist/dev/directory/apacheds/2.0.0.AM26/
> > <https://dist.apache.org/repos/dist/dev/directory/apacheds/2.0.0-M24/>
> >
> >
> > [ ] +1 : release ApacheDS 2.0.0.AM26
> > [ ] ± 0 : I don't care
> > [ ] -1 : No, don't release ApacheDS 2.0.0.AM26
> >
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@directory.apache.org
> For additional commands, e-mail: dev-help@directory.apache.org
>
>