1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
|
Release notes for Gerrit 2.0.24, 2.0.24.1, 2.0.24.2
===================================================
Gerrit 2.0.24 is now available in the usual location:
link:http://code.google.com/p/gerrit/downloads/list[http://code.google.com/p/gerrit/downloads/list]
Schema Change
-------------
*WARNING: This version contains a schema change* (since 2.0.21)
Apply the database specific schema script:
----
java -jar gerrit.war --cat sql/upgrade018_019_postgres.sql | psql reviewdb
java -jar gerrit.war --cat sql/upgrade018_019_mysql.sql | mysql reviewdb
----
LDAP Change
-----------
LDAP groups are now bound via their full distinguished name, and not
by their common name. Sites using LDAP groups will need to have the
site administrator visit every LDAP backed group through the web UI
(Admin > Groups), search for, and select the underlying LDAP group
from the directory server.
This change was made to remove some of the guesswork when it comes
to setting up an LDAP enabled group, as well as to permit creating
new LDAP enabled groups completely from the web UI. It also removes
an ambiguous case when different parts of the same directory space
create identically named groups.
New Features
------------
* Check if the user has permission to upload changes
+
The new READ +2 permission is required to upload a change to a
project, while READ +1 permits read but denies uploading a change.
The schema upgrade script automatically converts READ +1 to +2.
* Use LDAP DN to match LDAP group to Gerrit group
* issue 297 Allow admins to search for and bind to LDAP groups
+
As noted above, LDAP groups now use the full DN to match to their
Gerrit database counterpart, rather than just the common name.
Administrators may now create Gerrit groups and attach them to
any LDAP group, by performing a query on the LDAP directory for
matching groups and selecting a result.
* issue 301 Try to prevent forgotten `git add` during replace
+
Users are now stopped from performing a replace of a patch set if
they have not made a meaningful change (modify a file, or modify
the commit message). If only the commit message was modified,
a warning is printed, but the replace still occurs.
* issue 126 Link to our issue tracker in the page footer
+
The footer now includes a link to the Gerrit project's issue
tracker, so end-users can more easily report bugs or feature
requests back to the developers.
* issue 300 Support SMTP over SSL/TLS
+
Encrypted SMTP is now supported natively within Gerrit, see
link:http://gerrit.googlecode.com/svn/documentation/2.0/config-gerrit.html#sendemail.smtpEncryption[sendemail.smtpEncryption]
Bug Fixes
---------
* issue 290 Fix invalid drop index in upgrade017_018_mysql
+
Minor syntax error in SQL script.
* Fixed ActiveDirectory LDAP group support. Allows recu...
* issue 307 Set proper LDAP defaults for Active Directory
+
ActiveDirectory is now better supported out of the box. Defaults
for the LDAP configuration settings are automatically guessed at
startup based upon the type of server configured in ldap.server.
Recursive groups (group which is a member of a group) is also
now supported when using an ActiveDirectory server. Other LDAP
servers (e.g. OpenLDAP) probably don't support this.
* "250-AUTH " will be returned if 'AUTH' response does ...
* Fix: Authentication fail when authTypes is empty
* Fix a typo that broke the gerrit build
+
Outgoing SMTP sometimes failed to authenticate against a
SMTP server due to slightly incorrect handling of the AUTH
advertisement.
* Correct scp commands in documentation to include -p
+
Our documentation of how to copy the commit-msg hook down via
scp did not include the -p option, which is necessary to make
the client preserve the executable flag on the hook script.
* issue 291 Suggest latin1 charset for MySQL databases
+
Documentation was updated to encourage using latin1 for MySQL
as MySQL fails with key too long errors during schema creation
when the database is using the UTF-8 character set.
* issue 294 Fix OpenID self registration dialog
+
OpenID 'Register' hyperlink was broken due to the dialog having
no content added to it before display. This bug was fixed by
using the proper OpenID login dialog.
* issue 309 Clear message on publish comments screen after submit...
+
The publish comments button preserved your last comment, making
it easy for a user to accidentally publish the same message on
the same change twice. The message is now cleared after it has
been successfully sent.
* issue 299 Remove the branches table from the database
* Display current branch SHA-1 in Branches tab
* issue 299 Display not-yet-born HEAD branch in Branches tab
+
The not-yet-born branch in an empty project is now shown in the
Branches tab. (This is based on the value of the HEAD symbolic
reference within the project's Git repository.)
The branches table was removed from the database. We now fully
rely upon the Git repository to determine which branches exist
and thus permit changes to be uploaded to.
* issue 296 Make help more friendly over SSH
+
`ssh -p 29418 localhost help` is now more user friendly.
* Don't request registration if the account exists
* issue 38 Fix OpenID delegate authentication
+
OpenID authentication was sometimes asking providers for
registation data when we already had it on hand, fixed.
OpenID delegate identities were being stored rather than claimed
identities when the claimed identity is just a delegate to the
delegate provider. We now store both in the account.
Fixes in 2.0.24.1
-----------------
* Fix unused import in OpenIdServiceImpl
* dev-readme: Fix formatting of initdb command
+
Minor documentation/code fixes with no impact on execution.
* Fix LDAP account lookup when user not in group
+
Fixes a NullPointerException when a user is not in any group
and the underlying LDAP server is ActiveDirectory.
* issue 315 Correct sendemail.smtppass
+
Fixes sendemail configuration to use the documented smtppass
variable and not the undocumented smtpuserpass variable.
Fixes in 2.0.24.2
-----------------
* Fix CreateSchema to create Administrators group
* Fix CreateSchema to set type of Registered Users group
* Default AccountGroup instances to type INTERNAL
* Document the various AccountGroup.Type states better
+
CreateSchema was broken in 2.0.24 and 2.0.24.1 due to the default
groups being misconfigured during insertion. Fixed.
* Grant anonymous uses READ +1, registered users READ +...
+
Default permissions were a bit confusing, there is no point in an
anonymous user having READ +2.
* Use the H2 database for unit tests
* Unit test for SystemConfigProvider and CreateSchema
+
Added unit tests to validate CreateSchema works properly, so we
don't have a repeat of breakage here.
Other Changes
-------------
* Start 2.0.24 development
* Merge change Ie16b8ca2
* Switch to the new org.eclipse.jgit package
* Allow default of $JETTY_HOME in to_jetty.sh
* LdapRealm: Remove unused throws declaration
* LdapRealm: Fix missing type parameter warnings
* Remove dead exists method from AccountManager
* Document ldap.groupPattern
* AuthSMTPClient: Fix formatting errors
* style fixup: remote trailing whitespace from our sour...
* show-caches: Correct example output in documentation
* Move server programs section under User Guide
* Revert "Remove dead exists method from AccountManager"
* Ensure prior commit body is parsed before comparing m...
* Gerrit 2.0.24
|
