https://bugzilla.redhat.com/show_bug.cgi?id=644608

Description:
Previous cherry-pick commit 5cd9fc9826fd88b8672129e41523065c0b692c3b
failed the merge for setting a special dup compare callback
ai_dup_cmp_fn when it is set.

https://bugzilla.redhat.com/show_bug.cgi?id=644608

Description: Upgrade script ##upgradednformat.pl generates an
ancestorid index file in which the entry IDs are not sorted
in the index values.
This was caused because
1. upgradednformat.pl copies db files to a work dir
     /path/to/db/<inst>/dnupgrade/<inst>
   and run upgradednformat against the work dir.
2. Since ancestorid index needs to be created from the scratch,
   import/upgradednformat code deletes the index and recreates
   it.
3. When creating the index file, dblayer_open_file checks if
   the to-be-opened index file is (in the standard location AND
   the file exists) or not.  In this case, the condition is
   satisfied.  Thus, the db is created using an absolute path
   and closed once.  Then, it is reopened using a relative path.
4. Before opening an index file, callback functions for libdb
   are set.  idl_new_compare_dups is one of them which is used
   to sort entry IDs in the secondary index attribute values.
   The setting is discarded by the close described in 3.
   This patch resets the db callbacks and flags after the close.

Note: cherry-picked 058299aeaf48e34f4359f00cc05eb7186a80fc48

https://bugzilla.redhat.com/show_bug.cgi?id=629681

Description: As reporter Oliver Thalmann (oliver.thalmann@chuv.ch)
pointed out, retrocl_init_trimming was repeating the retrocl_
housekeeping event every 5000 minutes instead of 5 minutes.
This patch fixes it to 5 minutes.

are not upgraded in the server instance schema dir

https://bugzilla.redhat.com/show_bug.cgi?id=645061

Description: To replace 06inetorgperson.ldif and 05rfc4524.ldif
in teh server instance schema dir, adding the 2 schema files to
the toremove list in the schema upgrade script 60upgradeschemafiles.pl.

the entrydn in id2entry

https://bugzilla.redhat.com/show_bug.cgi?id=592397

Description: If entries created by the 389 v1.2.5 or older,
the primary db (id2entry.db4) contains "entrydn: <normalized dn>".
Upgrading from the old version to v1.2.6 keeps the entrydn
attribute type and its value even though v1.2.6 is not supposed
to store the entrydn in the database.
1) This patch drops the entrydn attribute and value in upgrading
   the db.
2) If an ldif file contains entrydn attribute type and value,
   import (ldif2db[.pl]) ignores it.
3) A leak was found in the export (db2ldif[.pl]) which is fixed.
4) When nsslapd-subtree-rename-switch configuration attribute has
   the value "on", entrydn is not used nor created.  But the
   server accepted reindexing entrydn request and generated an
   entrydn index file.  This patch rejects it.
5) Entry and dn cache clear calls (cache_clear) are added to
   dblayer_instance_close in "#if defined(_USE_VALGRIND)", which
   is not defined.  To enable the code, the server needs to be
   rebuilt with defining the macro.  This is purely for debugging.

This patch allows an empty modify operation.  We currently reject
an empty modify operation, but this patch makes the empty operation
update the modifyTimestamp and modifiersName attributes similar to
a touch-type operation.

https://bugzilla.redhat.com/show_bug.cgi?id=644013
Resolves: bug 644013
Bug Description: uniqueness plugin segfault bug
Reviewed by: self - one liner
Branch: master
Fix Description: Access the array pointer correctly
Platforms tested: RHEL5 x86_64
Flag Day: no
Doc impact: no

The flags used to identity the replication protocol versions for
7.1 and 9.0 are not being initialized.  This can cause the wrong
protocol to be used when replicating to another server.  This
patch initializes the flags to 0 when the structures are created.

https://bugzilla.redhat.com/show_bug.cgi?id=643532

Description: Some of the functions in ldbm_entryrdn.c uses
static memory for reading data from the entryrdn index, where
the static initializer should not have been used since the
memory cannot be shared among threads.  This patch fixes it.

https://bugzilla.redhat.com/show_bug.cgi?id=244229

Description:
1. When acl contains targetattr keyword:
   (targetattr [!]= "attribute_1 || attribute_2 ...|| attribute_n"),
   where attribute_n does not contain '*', the current ACL plugin
   accepts any attribute_n value even if it is not defined in the
   schema.  This patch rejects the aci if it contains attribute_n
   not defined in schema with this error message:
   NSACLPlugin - targetattr "attribute_n" does not exist in schema.
   Please add attributeTypes "attribute_n" to schema if necessary.
   The message is logged in the error log as well as returned to
   the client.
2. To implement 1, slapi APIs slapi_attr_syntax_exists is added.
3. An attributeTypes "connection" is added to 01core389.ldif which
   is referred in an aci of cn=monitor.