| = Release notes for Gerrit 2.0.24, 2.0.24.1, 2.0.24.2 |
| |
| Gerrit 2.0.24 is now available in the usual location: |
| |
| link:https://www.gerritcodereview.com/download/index.html[https://www.gerritcodereview.com/download/index.html] |
| |
| |
| == Schema Change |
| |
| *WARNING: This version contains a schema change* (since 2.0.21) |
| |
| Apply the database specific schema script: |
| ---- |
| java -jar gerrit.war --cat sql/upgrade018_019_postgres.sql | psql reviewdb |
| java -jar gerrit.war --cat sql/upgrade018_019_mysql.sql | mysql reviewdb |
| ---- |
| |
| |
| == LDAP Change |
| |
| LDAP groups are now bound via their full distinguished name, and not |
| by their common name. Sites using LDAP groups will need to have the |
| site administrator visit every LDAP backed group through the web UI |
| (Admin > Groups), search for, and select the underlying LDAP group |
| from the directory server. |
| |
| This change was made to remove some of the guesswork when it comes |
| to setting up an LDAP enabled group, as well as to permit creating |
| new LDAP enabled groups completely from the web UI. It also removes |
| an ambiguous case when different parts of the same directory space |
| create identically named groups. |
| |
| |
| == New Features |
| * Check if the user has permission to upload changes |
| + |
| The new READ +2 permission is required to upload a change to a |
| project, while READ +1 permits read but denies uploading a change. |
| The schema upgrade script automatically converts READ +1 to +2. |
| |
| * Use LDAP DN to match LDAP group to Gerrit group |
| * issue 297 Allow admins to search for and bind to LDAP groups |
| + |
| As noted above, LDAP groups now use the full DN to match to their |
| Gerrit database counterpart, rather than just the common name. |
| Administrators may now create Gerrit groups and attach them to |
| any LDAP group, by performing a query on the LDAP directory for |
| matching groups and selecting a result. |
| |
| * issue 301 Try to prevent forgotten `git add` during replace |
| + |
| Users are now stopped from performing a replace of a patch set if |
| they have not made a meaningful change (modify a file, or modify |
| the commit message). If only the commit message was modified, |
| a warning is printed, but the replace still occurs. |
| |
| * issue 126 Link to our issue tracker in the page footer |
| + |
| The footer now includes a link to the Gerrit project's issue |
| tracker, so end-users can more easily report bugs or feature |
| requests back to the developers. |
| |
| * issue 300 Support SMTP over SSL/TLS |
| + |
| Encrypted SMTP is now supported natively within Gerrit, see |
| link:http://gerrit.googlecode.com/svn/documentation/2.0/config-gerrit.html#sendemail.smtpEncryption[sendemail.smtpEncryption] |
| |
| == Bug Fixes |
| * issue 290 Fix invalid drop index in upgrade017_018_mysql |
| + |
| Minor syntax error in SQL script. |
| |
| * Fixed ActiveDirectory LDAP group support. Allows recu... |
| * issue 307 Set proper LDAP defaults for Active Directory |
| + |
| ActiveDirectory is now better supported out of the box. Defaults |
| for the LDAP configuration settings are automatically guessed at |
| startup based upon the type of server configured in ldap.server. |
| Recursive groups (group which is a member of a group) is also |
| now supported when using an ActiveDirectory server. Other LDAP |
| servers (e.g. OpenLDAP) probably don't support this. |
| |
| * "250-AUTH " will be returned if 'AUTH' response does ... |
| * Fix: Authentication fail when authTypes is empty |
| * Fix a typo that broke the gerrit build |
| + |
| Outgoing SMTP sometimes failed to authenticate against a |
| SMTP server due to slightly incorrect handling of the AUTH |
| advertisement. |
| |
| * Correct scp commands in documentation to include -p |
| + |
| Our documentation of how to copy the commit-msg hook down via |
| scp did not include the -p option, which is necessary to make |
| the client preserve the executable flag on the hook script. |
| |
| * issue 291 Suggest latin1 charset for MySQL databases |
| + |
| Documentation was updated to encourage using latin1 for MySQL |
| as MySQL fails with key too long errors during schema creation |
| when the database is using the UTF-8 character set. |
| |
| * issue 294 Fix OpenID self registration dialog |
| + |
| OpenID 'Register' hyperlink was broken due to the dialog having |
| no content added to it before display. This bug was fixed by |
| using the proper OpenID login dialog. |
| |
| * issue 309 Clear message on publish comments screen after submit... |
| + |
| The publish comments button preserved your last comment, making |
| it easy for a user to accidentally publish the same message on |
| the same change twice. The message is now cleared after it has |
| been successfully sent. |
| |
| * issue 299 Remove the branches table from the database |
| * Display current branch SHA-1 in Branches tab |
| * issue 299 Display not-yet-born HEAD branch in Branches tab |
| + |
| The not-yet-born branch in an empty project is now shown in the |
| Branches tab. (This is based on the value of the HEAD symbolic |
| reference within the project's Git repository.) |
| The branches table was removed from the database. We now fully |
| rely upon the Git repository to determine which branches exist |
| and thus permit changes to be uploaded to. |
| |
| * issue 296 Make help more friendly over SSH |
| + |
| `ssh -p 29418 localhost help` is now more user friendly. |
| |
| * Don't request registration if the account exists |
| * issue 38 Fix OpenID delegate authentication |
| + |
| OpenID authentication was sometimes asking providers for |
| registation data when we already had it on hand, fixed. |
| OpenID delegate identities were being stored rather than claimed |
| identities when the claimed identity is just a delegate to the |
| delegate provider. We now store both in the account. |
| |
| == Fixes in 2.0.24.1 |
| * Fix unused import in OpenIdServiceImpl |
| * dev-readme: Fix formatting of initdb command |
| + |
| Minor documentation/code fixes with no impact on execution. |
| |
| * Fix LDAP account lookup when user not in group |
| + |
| Fixes a NullPointerException when a user is not in any group |
| and the underlying LDAP server is ActiveDirectory. |
| |
| * issue 315 Correct sendemail.smtppass |
| + |
| Fixes sendemail configuration to use the documented smtppass |
| variable and not the undocumented smtpuserpass variable. |
| |
| == Fixes in 2.0.24.2 |
| * Fix CreateSchema to create Administrators group |
| * Fix CreateSchema to set type of Registered Users group |
| * Default AccountGroup instances to type INTERNAL |
| * Document the various AccountGroup.Type states better |
| + |
| CreateSchema was broken in 2.0.24 and 2.0.24.1 due to the default |
| groups being misconfigured during insertion. Fixed. |
| |
| * Grant anonymous uses READ +1, registered users READ +... |
| + |
| Default permissions were a bit confusing, there is no point in an |
| anonymous user having READ +2. |
| |
| * Use the H2 database for unit tests |
| * Unit test for SystemConfigProvider and CreateSchema |
| + |
| Added unit tests to validate CreateSchema works properly, so we |
| don't have a repeat of breakage here. |
| |
| == Other Changes |
| * Start 2.0.24 development |
| * Merge change Ie16b8ca2 |
| * Switch to the new org.eclipse.jgit package |
| * Allow default of $JETTY_HOME in to_jetty.sh |
| * LdapRealm: Remove unused throws declaration |
| * LdapRealm: Fix missing type parameter warnings |
| * Remove dead exists method from AccountManager |
| * Document ldap.groupPattern |
| * AuthSMTPClient: Fix formatting errors |
| * style fixup: remote trailing whitespace from our sour... |
| * show-caches: Correct example output in documentation |
| * Move server programs section under User Guide |
| * Revert "Remove dead exists method from AccountManager" |
| * Ensure prior commit body is parsed before comparing m... |
| * Gerrit 2.0.24 |