From Fedora Project Wiki

< Changes

Revision as of 17:03, 7 November 2023 by Progier (talk | contribs) (389-ds-base upgrade from version 2.4.4 to the latest upstream version 3.0.0 in Fedora. Newly created instances now are using LDMB database by default instead of BerkeleyDB.)

389_Directory_Server_30

Important.png
This is a proposed Change for Fedora Linux.
This document represents a proposed Change. As part of the Changes process, proposals are publicly announced in order to receive community feedback. This proposal will only be implemented if approved by the Fedora Engineering Steering Committee.

Summary

389-ds-base upgrade from version 2.4.4 to the latest upstream version 3.0.0 in Fedora. Newly created instances now are using LDMB database by default instead of BerkeleyDB.


Owner

  • Name: 389ds Group
  • Email: <your email address so we can contact you, invite you to meetings, etc. Please provide your Bugzilla email address if it is different from your email in FAS>

Primary contact:


Current status

  • Targeted release: Fedora Linux 40
  • Last updated: 2023-11-07
  • [<will be assigned by the Wrangler> devel thread]
  • FESCo issue: <will be assigned by the Wrangler>
  • Tracker bug: <will be assigned by the Wrangler>
  • Release notes tracker: <will be assigned by the Wrangler>

Detailed Description

Since Fedora 36 (389-ds-base 2.1.0) The 389 ldap directory server supports two kinds of underlying database: 

- Berkeley Database (bdb)
- Lightning Memory-Mapped Database Manager (lmdb)

Newly created instances are still created with bdb by default while libdb is flagged as [deprecated since Fedora 33](Changes/Libdb deprecated - Fedora Project Wiki), this change is about to create lmdb instances by default


Feedback

No feedback yet.

Benefit to Fedora

A step on a way to remove a deprecated piece of software.


Scope

  • Proposal owners:
  • Other developers:
  • Policies and guidelines: N/A (not needed for this Change)
  • Trademark approval: N/A (not needed for this Change)
  • Alignment with Community Initiatives:

Upgrade/compatibility impact

No impact on upgrade because existing instances still use the previously installed backend interface.

There should not have any compatibility issue (bug excepted) with the ldap requests but performances may be impacted.

There may be issue with application that explicitly:

- configures 389 directory server instances (like freeipa) because the set of configuration attribute for the backend depends of the underlying database implementation. 

 The unused parameter are ignored so it should not impact the compatibility
 But there is a risk for the new parameters: The "20 Gb" default value for the lmdb database maximum size may not be large enough for the application need.

- monitor 389 directory server backends because the the set of attributes in the monitoring entries also depends of the underlying database implementation.

more details about these points are described in [389 Directory Server FAQ - BerkeleyDB backend deprecation](https://www.port389.org/docs/389ds/FAQ/Berkeley-DB-deprecation.html)


How To Test

a COPR project https://copr.fedorainfracloud.org/coprs/g/389ds/389-ds-base-freeipa-tests/

contains the build that can be tested ( F37, F38, F39, rawhide on x86_64 and s390x ) So you can install them by using:

sudo dnf copr enable -y @389ds/389-ds-base-freeipa-tests sudo dnf install 389-ds-base-3.0.0

Then you can create new directory server instances and use them.



User Experience

Dependencies

Mainly freeipa packages:

dnf repoquery --whatrequires 389-ds-base --recursive

| Package | Risk mitigation | | ----------------------- | ---------------------------------------------------------------------------------------------------------------------- | | 389-ds-base-snmp | Tested by 389ds CI test | | 389-ds-base-snmp | Tested by 389ds CI test | | cockpit-389-ds | Tested by 389ds CI test | | cockpit-389-ds | Tested by 389ds CI test | | freeipa-fas | Tested by freeipa CI test | | freeipa-healthcheck | Tested by freeipa CI test | | freeipa-healthcheck | Tested by freeipa CI test | | freeipa-server | Tested by freeipa CI test | | freeipa-server | Tested by freeipa CI test | | freeipa-server-dns | Tested by freeipa CI test | | freeipa-server-dns | Tested by freeipa CI test | | freeipa-server-trust-ad | Tested by freeipa CI test | | freeipa-server-trust-ad | Tested by freeipa CI test | | migrationtools | Not impacted by the change (these script working on ldap entries using ldap protocol which is tested by 389ds CI test) | | slapi-nis | Tested by freeipa CI test |


Contingency Plan

  • Contingency mechanism: (What to do? Who will do it?) N/A (not a System Wide Change)
  • Contingency deadline: N/A (not a System Wide Change)
  • Blocks release? N/A (not a System Wide Change), Yes/No


Documentation

389 Directory Server FAQ - BerkeleyDB backend deprecation: https://www.port389.org/docs/389ds/FAQ/Berkeley-DB-deprecation.html

Release Notes

Need add write release notes for 3.0.0 in https://www.port389.org/docs/389ds/releases/release-notes.html

Retrieved from "https://fedoraproject.org/w/index.php?title=Changes/389_Directory_Server_3.0.0&oldid=693850"