File ctdb.changes of Package ctdb

-------------------------------------------------------------------
Fri Jul 10 10:47:08 UTC 2015 - lmuelle@suse.com

- Add missing rcctdb shortcut.

-------------------------------------------------------------------
Thu Apr 16 12:49:19 UTC 2015 - lmuelle@suse.com

- Update to version 2.5.5; (bsc#937646)
  User-visible changes
  * Dump stack traces for hung RPC processes (mountd, rquotad, statd)
  * Add vaccuming latency to database statistics
  * Add -X option to ctdb tool that uses '|' as a separator to correctly handle
    IPv6 addresses
  * Configuration variable VerifyRecoveryLock is now marked obsolete
  * Improved log messages when trying to set obsolete tunables
  Important bug fixes
  * Fix handling of IPv6 addresses
  * Use correct tdb flags when using robust mutex feature
  * Fix regression in client socket handling code
  * Fix regression in statd callout and make it more scalable
  * Change default log level to NOTICE, so the messages are correctly
    displayed from CTDB tool
  Important internal changes
  * Vacuuming performance improvements
    - stagger multiple vacuuming child processes
    - process all vacuum fetch requests in a loop
  * Improve handling of recovery lock
  * Many test improvements and additions.
  * Avoid logging every 10 seconds for locks that could not be obtained to
    prevent flooding logs

-------------------------------------------------------------------
Sun Dec 21 20:10:48 UTC 2014 - lmuelle@suse.com

- Update to version 2.5.4
  User-visible changes
  * New command "ctdb detach" to detach a database.
  * Support for TDB robust mutexes.  To enable set TDBMutexEnabled=1.
    The setting is per node.
  * New manual page ctdb-statistics.7.
  Important bug fixes
  * Verify policy routing configuration when starting up to make sure that
    policy routing tables do not override default routing tables.
  * "ctdb scriptstatus" should correctly list the number of scripts executed.
  * Do not run eventscripts at real-time priority.
  * Make sure "ctdb restoredb" and "ctdb wipedb" cannot affect an ongoing
    recovery.
  * If a readonly record revokation fails, CTDB does not abort anymore.
    It will retry revoke.
  * pending_calls statistic now gets updated correctly.
  Important internal changes
  * Vacuuming performance has been improved.
  * Fix the order of setting recovery mode and freezing databases.
  * Remove NAT gateway "monitor" event.
  * Add per database queue for lock requests.  This improves the lock
    scheduling performance.
  * When processing dmaster packets (DMASTER_REQUEST and DMASTER_REPLY) defer
    all call processing for that record.  This avoids the temporary
    inconsistency in dmaster information which causes rapid bouncing of call
    request between two nodes.
  * Correctly capture the output from lock helper processes, so it can be
    logged.
  * Many test improvements and additions.

-------------------------------------------------------------------
Tue Oct 28 20:07:30 UTC 2014 - lmuelle@suse.com

- Conditionally exclude the CTDB Perforance Co-Pilot monitoring agent for the
  SLE 12 target due to a missing but required libpcp-devel package.

-------------------------------------------------------------------
Mon Aug 18 15:09:02 UTC 2014 - ddiss@suse.com

- Fix ctdb.service file permissions; (bnc#892368).

-------------------------------------------------------------------
Fri Aug  8 13:57:29 UTC 2014 - ddiss@suse.com

- Add tdbdump runtime requirement; (bnc#886095).

-------------------------------------------------------------------
Tue Jul  1 17:07:26 UTC 2014 - ddiss@suse.com

- Fix the configure-time socketpath to match the path used by the CTDB
  resource agent; (bnc#885341).

-------------------------------------------------------------------
Wed Jun 18 13:52:20 UTC 2014 - lmuelle@suse.com

- Align BuildRequires libxslt for Fedora with CentOS and RHEL.

-------------------------------------------------------------------
Tue Jun 10 15:07:19 UTC 2014 - ddiss@suse.com

- Fix temp file vulnerabilities; CVE-2013-4159; (bnc#836064).
  + Create and specify runtime directory for .socket_lock; (bnc#885049).
    + added patch 0001-build-offer-with-rundir-configure-argument.patch
    + added patch 0002-tcp-use-RUNDIR-for-.socket_lock-path.patch

-------------------------------------------------------------------
Mon May  5 18:01:59 UTC 2014 - lmuelle@suse.com

- Update to version 2.5.3
  User-visible changes
  * New configuration variable CTDB_NATGW_STATIC_ROUTES allows NAT gateway
    feature to create static host/network routes instead of default routes.
    See the documentation. Use with care.
  Important bug fixes
  * ctdbd no longer crashes when tickles are processed after reloading the
    nodes file.
  * "ctdb reloadips" works as expected because the DEL_PUBLIC_IP control now
    waits until public IP addresses are released before returning.
 Important internal changes
  * Vacuuming performance has been improved.
  * Record locking now compares records based on their hashes to avoid
    scheduling multiple requests for records on the same hashchain.
  * An internal timeout for revoking read-only record relegations has been
    changed from hard-coded 5 seconds to the value of the ControlTimeout
    tunable. This makes it less likely that ctdbd will abort.
  * Many test improvements and additions.
- Remove upstream merged ctdb-pmda-Fix-metric-identifiers.patch

-------------------------------------------------------------------
Fri Mar 21 17:22:29 UTC 2014 - lmuelle@suse.com

- Use RPM default optimization instead of -O0 passed via CFLAGS.

-------------------------------------------------------------------
Fri Mar 21 16:48:07 UTC 2014 - lmuelle@suse.com

- Update to version 2.5.2
  User-visible changes
  * Much improved manpages from CTDB 2.5 are now installed and packaged.
  Important bug fixes
  * "ctdb reloadips" now waits for replies to addip/delip controls before
    returning.
  Important internal changes
  * The event scripts are now executed using vfork(2) and a helper binary
    instead of fork(2) providing a performance improvement.
  * "ctdb reloadips" will now works if some nodes are inactive. This means
    that public IP addresses can be reconfigured even if nodes are stopped.

-------------------------------------------------------------------
Thu Mar 20 14:39:17 UTC 2014 - ddiss@suse.com

- Fix Performance Co-Pilot metric identifiers; (bnc#869185).
  + ctdb-pmda-Fix-metric-identifiers.patch

-------------------------------------------------------------------
Wed Mar 12 19:17:53 UTC 2014 - ddiss@suse.com

- Avoid lockwait congestion by using an overflow queue; (bnc#867815).

-------------------------------------------------------------------
Tue Feb  4 13:28:39 UTC 2014 - lmuelle@suse.com

- Create /run/ctdb with systemd-tmpfiles on post-12.2 systems; (bnc#862075).

-------------------------------------------------------------------
Thu Dec  5 22:00:24 UTC 2013 - lmuelle@suse.com

- Fix build for SUSE Linux Enterprise 10 and non SUSE systems.

-------------------------------------------------------------------
Thu Dec  5 15:52:06 UTC 2013 - lmuelle@suse.com

- Update to version 2.5.1
  Important bug fixes
  * The locking code now correctly implements a per-database active
    locks limit.  Whole database lock requests can no longer be denied
    because there are too many active locks - this is particularly
    important for freezing databases during recovery.
  * The debug_locks.sh script locks against itself.  If it is already
    running then subsequent invocations will exit immediately. 
  * ctdb tool commands that operate on databases now work correctly when
    a database ID is given.
  * Various code fixes for issues found by Coverity.
  Important internal changes
  * statd-callout has been updated so that statd client information is
    always up-to-date across the cluster.  This is implemented by
    storing the client information in a persistent database using a new
    "ctdb ptrans" command.
  * The transaction code for persistent databases now retries until it
    is able to take the transaction lock.  This makes the transation
    semantics compatible with Samba's implementation.
  * Locking helpers are created with vfork(2) instead of fork(2),
    providing a performance improvement.
  * config.guess has been updated to the latest upstream version so CTDB
    should build on more platforms.
- Update to version 2.5
  User-visible changes
  * Use of CTDB_OPTIONS to set ctdbd command-line options is no longer
    supported.  Please use individual configuration variables instead.
  * Obsolete tunables VacuumDefaultInterval, VacuumMinInterval and
    VacuumMaxInterval have been removed.  Setting them had no effect but
    if you now try to set them in a configuration files via CTDB_SET_X=Y
    then CTDB will not start.
  * Much improved manual pages.  Added new manpages ctdb(7),
    ctdbd.conf(5), ctdb-tunables(7).  Still some work to do.
  * Most CTDB-specific configuration can now be set in
    /etc/ctdb/ctdbd.conf.
    This avoids cluttering distribution-specific configuration files,
    such as /etc/sysconfig/ctdb.  It also means that we can say: see
    ctdbd.conf(5) for more details.  :-)
  * Configuration variable NFS_SERVER_MODE is deprecated and has been
    replaced by CTDB_NFS_SERVER_MODE.  See ctdbd.conf(5) for more
    details.
  * "ctdb reloadips" is much improved and should be used for reloading
    the public IP configuration.
    This commands attempts to yield much more predictable IP allocations
    than using sequences of delip and addip commands.  See ctdb(1) for
    details.
  * Ability to pass comma-separated string to ctdb(1) tool commands via
    the -n option is now documented and works for most commands.  See
    ctdb(1) for details.
  * "ctdb rebalancenode" is now a debugging command and should not be
    used in normal operation.  See ctdb(1) for details.
  * "ctdb ban 0" is now invalid.
    This was documented as causing a permanent ban.  However, this was
    not implemented and caused an "unban" instead.  To avoid confusion,
    0 is now an invalid ban duration.  To administratively "ban" a node
    use "ctdb stop" instead.
  * The systemd configuration now puts the PID file in /run/ctdb (rather
    than /run/ctdbd) for consistency with the initscript and other uses
    of /var/run/ctdb.
  Important bug fixes
  * Traverse regression fixed.
  * The default recovery method for persistent databases has been
    changed to use database sequence numbers instead of doing
    record-by-record recovery (using record sequence numbers).  This
    fixes issues including registry corruption.
  * Banned nodes are no longer told to run the "ipreallocated" event
    during a takeover run, when in fallback mode with nodes that don't
    support the IPREALLOCATED control.
  Important internal changes
  * Persistent transactions are now compatible with Samba and work
    reliably.
  * The recovery master role has been made more stable by resetting the
    priority time each time a node becomes inactive.  This means that
    nodes that are active for a long time are more likely to retain the
    recovery master role.
  * The incomplete libctdb library has been removed.
  * Test suite now starts ctdbd with the --sloppy-start option to speed
    up startup.  However, this should not be done in production.
- Set logdir and socketpath while configure.
- Use autogen.sh and no longer autoreconf.
- BuildRequire libtalloc-devel, libtdb-devel, and libtevent-devel.
- BuildRequire docbook-xsl-stylesheets and libxslt-tools.
- Add some plaintext and HTML documentation.

-------------------------------------------------------------------
Thu Dec  5 15:13:24 UTC 2013 - lmuelle@suse.com

- Call systemd macros from pre and preun for post-12.2 systems.

-------------------------------------------------------------------
Thu Nov 14 17:08:53 UTC 2013 - lmuelle@suse.com

- Replace >= 1230 by > 1220 as this type of condition is used anywhere else in
  the ctdb spec file.

-------------------------------------------------------------------
Sun Oct 27 13:59:54 UTC 2013 - p.drouand@gmail.com

- Update to version 2.4
  * A missing network interface now causes monitoring to fail and the
    node to become unhealthy.
  * Changed ctdb command's default control timeout from 3s to 10s.
  * debug-hung-script.sh now includes the output of "ctdb scriptstatus"
    to provide more information.
  * Starting CTDB daemon by running ctdbd directly should not remove
    existing unix socket unconditionally.
  * ctdbd once again successfully kills client processes on releasing
    public IPs.    It was checking for them as tracked child processes
    and not finding them, so wasn't killing them.
  * ctdbd_wrapper now exports CTDB_SOCKET so that child processes of
    ctdbd (such as uses of ctdb in eventscripts) use the correct socket.
  * Always use Jenkins hash when creating volatile databases.    There
    were a few places where TDBs would be attached with the wrong flags.
  * Vacuuming code fixes in CTDB 2.2 introduced bugs in the new code
    which led to header corruption for empty records.    This resulted
    in inconsistent headers on two nodes and a request for such a record
    keeps bouncing between nodes indefinitely and logs "High hopcount"
    messages in the log. This also caused performance degradation.
  * ctdbd was losing log messages at shutdown because they weren't being
    given time to flush.    ctdbd now sleeps for a second during shutdown
    to allow time to flush log messages.
  * Improved socket handling introduced in CTDB 2.2 caused ctdbd to
    process a large number of packets available on single FD before
    polling other FDs.    Use fixed size queue buffers to allow fair
    scheduling across multiple FDs.
  * A node that fails to take/release multiple IPs will only incur a
    single banning credit.    This makes a brief failure less likely to
    cause node to be banned.
  * ctdb killtcp has been changed to read connections from stdin and
    10.interface now uses this feature to improve the time taken to kill
    connections.
  * Improvements to hot records statistics in ctdb dbstatistics.
  * Recovery daemon now assembles up-to-date node flags information
    from remote nodes before checking if any flags are inconsistent and
    forcing a recovery.
  * ctdbd no longer creates multiple lock sub-processes for the same
    key.    This reduces the number of lock sub-processes substantially.
  * Changed the nfsd RPC check failure policy to failover quickly
    instead of trying to repair a node first by restarting NFS.    Such
    restarts would often hang if the cause of the RPC check failure was
    the cluster filesystem or storage.
  * Logging improvements relating to high hopcounts and sticky records.
  * Make sure lower level tdb messages are logged correctly.
  * CTDB commands disable/enable/stop/continue are now resilient to
    individual control failures and retry in case of failures.
- Improve systemd support for openSUSE >= 12.3
- Use download url as source

-------------------------------------------------------------------
Thu Jul 11 14:47:15 UTC 2013 - ddiss@suse.com

- Conditionally package the CTDB Perforance Co-Pilot monitoring agent.
  + Only built if suse_version is greater than 1140.
  + Add ctdb-pcp-pmda-rpmlintrc to filter out devel-file-in-non-devel-package
    warning.

-------------------------------------------------------------------
Thu Jul 11 13:22:36 UTC 2013 - ddiss@suse.com

- Update to version 2.3
  + 2 new configuration variables for 60.nfs eventscript:
    - CTDB_MONITOR_NFS_THREAD_COUNT
    - CTDB_NFS_DUMP_STUCK_THREADS
  + Removed DeadlockTimeout tunable.  To enable debug of locking issues set
     CTDB_DEBUG_LOCKS=/etc/ctdb/debug_locks.sh
  + In overall statistics and database statistics, lock buckets have been
    updated to use following timings:
     < 1ms, < 10ms, < 100ms, < 1s, < 2s, < 4s, < 8s, < 16s, < 32s, < 64s, >= 64s
  + Initscript is now simplified with most CTDB-specific functionality
    split out to ctdbd_wrapper, which is used to start and stop ctdbd.
  + Add systemd support.
  + CTDB subprocesses are now given informative names to allow them to
    be easily distinguished when using programs like "top" or "perf".
  + ctdb tool should not exit from a retry loop if a control times out
    (e.g. under high load).  This simple fix will stop an exit from the
    retry loop on any error.
  + When updating flags on all nodes, use the correct updated flags.  This
    should avoid wrong flag change messages in the logs.
  + The recovery daemon will not ban other nodes if the current node
    is banned.
  + ctdb dbstatistics command now correctly outputs database statistics.
  + Fixed a panic with overlapping shutdowns (regression in 2.2).
  + Fixed 60.ganesha "monitor" event (regression in 2.2).
  + Fixed a buffer overflow in the "reloadips" implementation.
  + Fixed segmentation faults in ping_pong (called with incorrect
    argument) and test binaries (called when ctdbd not running).
  + The recovery daemon on stopped or banned node will stop participating in any
    cluster activity.
  + Improve cluster wide database traverse by sending the records directly from
    traverse child process to requesting node.
  + TDB checking and dropping of all IPs moved from initscript to "init"
    event in 00.ctdb.
  + To avoid "rogue IPs" the release IP callback now fails if the
    released IP is still present on an interface.

- Update to version 2.2
  + The "stopped" event has been removed.
  + New --pidfile option for ctdbd, used by initscript
  + The 60.nfs eventscript now uses configuration files in
    /etc/ctdb/nfs-rpc-checks.d/ for timeouts and actions instead of
    hardcoding them into the script.
  + Notification handler scripts can now be dropped into /etc/ctdb/notify.d/.
  + The NoIPTakeoverOnDisabled tunable has been renamed to
    NoIPHostOnAllDisabled and now works properly when set on individual
    nodes.
  + New ctdb subcommand "runstate" prints the current internal runstate.
    Runstates are used for serialising startup.
  + The Unix domain socket is now set to non-blocking after the
    connection succeeds.  This avoids connections failing with EAGAIN
    and not being retried.
  + Fetching from the log ringbuffer now succeeds if the buffer is full.
  + Fix a severe recovery bug that can lead to data corruption for SMB clients.
  + The statd-callout script now runs as root via sudo.
  + "ctdb delip" no longer fails if it is unable to move the IP.
  + A race in the ctdb tool's ipreallocate code was fixed.  This fixes
    potential bugs in the "disable", "enable", "stop", "continue",
    "ban", "unban", "ipreallocate" and "sync" commands.
  + The monitor cancellation code could sometimes hang indefinitely.
    This could cause "ctdb stop" and "ctdb shutdown" to fail.
  + The socket I/O handling has been optimised to improve performance.
  + IPs will not be assigned to nodes during CTDB initialisation.  They
    will only be assigned to nodes that are in the "running" runstate.
  + Improved database locking code.  One improvement is to use a
    standalone locking helper executable - the avoids creating many
    forked copies of ctdbd and potentially running a node out of memory.
  + New control CTDB_CONTROL_IPREALLOCATED is now used to generate
    "ipreallocated" events.
  + Message handlers are now indexed, providing a significant
    performance improvement.

-------------------------------------------------------------------
Fri Oct 19 09:33:59 UTC 2012 - ddiss@suse.com

- Update to version 1.2.52
  + util: ctdb_fork() closes all sockets opened by the main daemon
  + Logging: Map TEVENT_DEBUG_FATAL to DEBUG_CRIT
  + Eventscripts: "recovered" event should not fail on NATGW failure
  + common: Debug ctdb_addr_to_str() using new function ctdb_external_trace()
  + Initscript: Kill any existing ctdbd processes if the ping succeeds
  + Eventscripts: new functions set_proc() and get_proc().
  + Eventscripts: Add "reconfigure" pseudo-event for policy routing

-------------------------------------------------------------------
Wed Aug  8 17:45:25 UTC 2012 - lmuelle@suse.com

- Update to version 1.2.46
  + Add ltdbtool and man page

-------------------------------------------------------------------
Tue Feb 28 14:24:59 UTC 2012 - lmuelle@suse.de

- Split the PreReq in separate lines.
- PreReq coreutils instead of fileutils.

-------------------------------------------------------------------
Tue Feb  7 17:07:09 CET 2012 - ddiss@suse.de

- Remove stop_on_removal and restart_on_update pre/post uninstall hooks, ctdbd
  processes are managed by the CTDB resource agent; (bnc#745388).

-------------------------------------------------------------------
Tue Feb  7 11:05:59 CET 2012 - ddiss@suse.de

- Mark event scripts as %verify(not mode) to ensure rpm --verify does not
  complain about mode changes made by enablescript; (bnc#694262).

-------------------------------------------------------------------
Thu Jan 26 14:42:32 UTC 2012 - lmuelle@suse.de

- Use correct license, GPLv3+ for the package.

-------------------------------------------------------------------
Mon Jan 23 16:36:00 UTC 2012 - lmuelle@suse.de

- Simplify conditional BuildRrequires of pkg-config.

-------------------------------------------------------------------
Wed Dec 21 12:59:18 UTC 2011 - coolo@suse.com

- Add autoconf as buildrequire to avoid implicit dependency for post-11.4
  systems.

-------------------------------------------------------------------
Tue Dec 20 20:24:22 UTC 2011 - coolo@suse.com

- Remove call to suse_update_config macro for post-11.4 systems.

-------------------------------------------------------------------
Sun Sep 18 00:07:30 UTC 2011 - jengelh@medozas.de

- Remove redundant tags/sections from specfile

-------------------------------------------------------------------
Tue May 10 09:23:00 UTC 2011 - jmcdonough@suse.de

- Update to version 1.2.29
  + Interface handling updates
  + Reduce logging at lower levels
  + Event checking updates
  + Various other fixes

-------------------------------------------------------------------
Fri Apr  1 21:14:00 UTC 2011 - jmcdonough@suse.de

- Update to version 1.2.27
  + Lots of fixes
  + Remove nfstickle event script
  + Add ganesha event script

-------------------------------------------------------------------
Mon Aug 23 09:22:20 UTC 2010 - jmcdonough@suse.de

- Update to version 1.2.
  + Many tdb cleanups and fixups by rusty.
  + Create cnfs event script and crash cleanup script.
  + Create libctdb and reorganize headers.
  + Expand test suite significantly.
  + Remove "ctdb freeze" command.
  + Lots of fixes.

-------------------------------------------------------------------
Sun Apr 25 15:37:24 UTC 2010 - lmuelle@suse.de

- Buildrequire pkg-config only for SUSE based products.

-------------------------------------------------------------------
Sat Apr 24 11:38:16 UTC 2010 - coolo@novell.com

- buildrequire pkg-config to fix provides

-------------------------------------------------------------------
Fri Apr  2 17:03:00 UTC 2010 - jmcdonough@suse.de

- Update to version 1.0.114.
  + Lots of changes from Metze
- Update to version 1.0.113.
  + Incorrect use of dup2() could cause ctdb to spin eating 100% cpu.
- Update to version 1.0.112.
  + Revert the use of wbinfo --ping-dc as it is proving too unreliable.
  + Minor testsuite changes.
- Update to version 1.0.111.
  + Fix a logging bug when an eventscript is aborted that could cause a crash.
  + Add back cb_status that was lost in a previous commit.
- Update to version 1.0.110.
  + Metxe: fix for filedescriptor leak in the new eventscript code.
  + Rusty: fix for a crash bug in the eventscript code.
- Update to version 1.0.109.
  + Massive eventscript updates. (bz58828)
  + Nice the daemon instead of using realtime scheduler, also use mlockall() to
    reduce the risk of blockign due to paging.
  + Workarounds for valgrind when forking once for each script. Valgrind consumes
    massive cpu when terminating the scripts on virtual systems.
  + Sync the tdb library with upstream, and use the new TDB_DISALLOW_NESTING flag.
  + Add new command "ctdb dumpdbbackup"
  + Start using the new tdb check framework to validate tdb files upon startup.
  + A new framework where we can control health for individual tdb databases.
  + Fix a crash bug in the logging code.
  + New transaction code for persistent databases.
  + Various other smaller fixes.
- Update to version 1.0.108.
  + Transaction updates from Michael Adam.
  + Use the new wbinfo --ping-dc instead of -p in the eventscript for samba
    the check if winbindd is ok.
  + Add a better "process-exist" for samba so it will automatically
    reap smbd's on stopped and banned nodes to reclaim subrecords.
    This will be done a bit differently in the next release.
  + Use a statically allocated buffer for the 'first-time' capture buffer
    to reduce the pressure on malloc/free.
- Update to version 1.0.107.
  + fix for rusty to solve a double-free that can happen when there are
    multiple packets queued and the connection is destroyed before
    all packets are processed.
- Update to version 1.0.106.
  + Buildscript changes from Michael Adam
  + Dont do a full recovery when there is a mismatch detected for ip addresses,
    just do a less disruptive ip-reallocation
  + When starting ctdbd, wait until all initial recoveries have finished
    before we issue the "startup" event.
    So dont start services or monitoring until the cluster has
    stabilized.
  + Major eventscript overhaul by Ronnie, Rusty and Martins and fixes of a few
    bugs found.

-------------------------------------------------------------------
Thu Feb 11 00:33:34 UTC 2010 - jengelh@medozas.de

- Use %{configure} macro to ensure --libdir=..lib64 is passed to configure on
  64-bit architectures.
- Add %{_smp_mflags} macro while calling make.

-------------------------------------------------------------------
Thu Dec 17 22:34:34 CET 2009 - jengelh@medozas.de

- Enable parallel building.

-------------------------------------------------------------------
Wed Dec  9 18:53:22 CET 2009 - jmcdonough@suse.de

- Save and restore scheduling policy to prevent fatal error
  with nonzero priority; (bnc#552845).

-------------------------------------------------------------------
Wed Nov 19 13:39:51 CET 2009 - lmuelle@suse.de

- Update to version 1.0.105.
  + Fix a bug where we could SEGV if multiple concurrent "ctdb eventscript
    ..." are used and some of them block.
  + Monitor the daemon from the syslog child process so we shutdown cleanly
    when the main daemon terminates.
  + Add a 500k line ringbuffer in memory where all log messages are stored.
  + Add a "ctdb getlog <level>" command to pull log messages from the in
    memory ringbuffer.
  + Fixes to cifs and nfs autotests
  + Fix a bashism in 11.natgw
- Update to version 1.0.104.
  + We can now use killtcp to kill local connections for nfs so change the
    killtcp script to kill both directions of an NFS connection.
  + When using natgw, try to avoid using a UNHEALTHY node as the natgw master.
  + Fix a SEGV bug in the recent change to the eventscripts to allow the
    timeout to apply to each individual script.
  + Fix a talloc bug in teh vacuuming code that produced nasty valgrind
    warnings.
  + Set up ulimit to create core files for ctdb, and spawned processes by
    default.
  + Remove the wbinfo -t check from the startup check that winbindd is happy.
  + Enhance the test for bond devices so we also check if the sysadmin have
    disabled all slave devices using "ifdown".
- Update to version 1.0.103.
  + Dont use vacuuming on persistent databases.
  + Transaction updates to persistent databases.
  + Dont activate service automatically when installing the RPM.
  + Create a child process to send all log messages to, to prevent a hung/
    slow syslogd from blocking the main daemon. In this case, discard log
    messages instead and let the child process block.
- Update to version 1.0.102.
  + Fix for the vacuuming code.
  + Stronger tests for persistent database filename tests.
  + Improve the log message when we refuse to startup since wbinfo -t fails
    to make it easier to spot in the log.
  + Update the uptime command output and the man page to indicate that "time
    since last ..." if from either the last recovery OR the last failover.
  + Transaction updates.
- Update to version 1.0.101.
  + Create a separate context for non-monitoring events so they dont interfere
    with the monitor event.
  + Make sure to return status 0 in teh callback when we abort an event.
- Update to version 1.0.100.
  + Change eventscript handling to allow EventScriptTimeout for each
    individual script instead of for all scripts as a whole.
  + Enhanced logging from the eventscripts, log the name and the duration for
    each script as it finishes.
  + Add a check to use wbinfo -t for the startup event of samba.
  + TEMP: allow clients to attach to databases even when teh node is in
    recovery mode.
  + Dont run the monitor event as frequently after an event has failed.
  + DEBUG: in the eventloops, check the local time and warn if the time
    changes backward or rapidly forward.
  + Fix a bug where recovery master becoming unhealthy did not trigger an ip
    failover.
  + Disable the multipath script by default.
  + Automatically re-activate the reclock checking if the reclock file is
    specified at runtime. Update manpage to reflect this.
  + Add a mechanism where samba can register a SRVID and if samba unexpectedly
    disconnects, a message will be broadcasted to all other samba daemons.
  + Log the pstree on hung scripts to a file in /tmp instead of
    /var/log/messages.
  + Change ban count before unhealthy/banned to 10.
- Update to version 1.0.99.
  + Fix a SEGV in the new db priority code.
  + Eliminate a ctdb_fatal() if there is a dmaster violation detected.
  + During testing we often add/delete eventscripts at runtime. This could
    cause an eventscript to fail and mark the node unhealthy if an eventscript
    was deleted while we were listing the names. Handle the errorcode and make
    sure the node does not becomne unhealthy in this case.
  + Lower the debuglevel for the messages when ctdb creates a filedescruiptor
    so we dont spam the logs with these messages.
  + Dont have the RPM automatically restart ctdb.
  + Add a missing transaction_cancel() in the handling of persistent
    databases.
  + Treat interfaces with the anme ethX* as bond devices in 10.interfaces so
    we do the correct test for if they are up or not.
- Update to version 1.0.98.
  + Fix for the vacuuming database.
  + Create a directory where the test framework can put temporary overrides
    to variables and functions.
  + Wait a lot longer before shutting down the node when the reclock file is
    incorrectly configured, and log where it is configured.
  + Try to avoid running the "monitor" event when databases are frozen.
  + Add logging for every time we create a filedescriptor so we can trap fd
    leaks.
- Update to version 1.0.97.
  + Update onnode to allow specifying an alternative nodes file from the
    command line and also to be able to specify hostnames on the list of
    targets : onnode host1,host2,...   
- Update to version 1.0.96.
  + Add more debugging output when eventscripts have trouble. Print a 
   "pstree -p" to the log when scripts have hung.
  + Update the initscript,  only print the "No reclock file used" warning when
    we do "service ctdb start", dont also print them for all other actions.
  + When changing between unhealthy/healthy state, push a request to the
    recovery master to perform an ip reallocation instead of waiting for the
    recovery master to pull and check the state change.
  + Fix a bug in the new db-priority handling where a pre-.95 recovery master
    could no longer lock the databases on a post-.95 daemon.
  + Always create the nfs state directories during the "monitor" event.  This
    makes it easier to configure and enable nfs at runtime.
  + Forward-port a simper deadlock avoiding patch from the 1.0.82 branch. This
    is a simpler versionof the "db priority lock order" patch that went into
    1.0.95, and will be kept for a few versions until samba has been updated
    to use the functionality from 1.0.95.
- Update to version 1.0.95.
  + Add database priorities. Allow samba to set the priority of databases and
    lock the databases in priority order during recovery to avoid a deadlock
    when samba locks one database then blocks indefinitely while waiting for
    the second databaso to become locked.
  + Be aggressive and ban nodes where the recovery transaction start call
    fails.
- Update to version 1.0.94.
  + Be very aggressive and quickly ban nodes that can not freeze their
    databases.
- Update to version 1.0.93.
  + When adding an ip, make sure to update this assignment on all nodes so it
    wont show up as -1 on other nodes.
  + When adding an ip and immediately deleting it, it was possible that the
    daemon would crash accessing already freed memory.  Readjust the memory
    hierarchy so the destructors are called in the right order.
  + Add a handshake to the recovery daemon to eliminate some rare cases where
    addip/delip might cause a recovery to occur.
  + Updated onnode documenation.
  + Updates to the natgw eventscript to allow disabling natgw at runtime.
- Update to version 1.0.92.
  + Test updates and merge.
  + Add notification for "startup".
  + Add documentation for notification.
  + Fix for restarting vsftpd in the eventscript.
- Update to version 1.0.91.
  + New vacuum and repack design.
  + Add a new eventscript 01.reclock that will first mark a node unhealthy and
    later ban the node if the reclock file can not be accessed.
  + Add machinereadable output to the ctdb getreclock command.
  + Merge transaction updates.
  + In the new banning code, reset the culprit count to 0 for all nodes that
    could successfully compelte a full recovery.
  + Dont mark the recovery master as a ban culprit because a node in the
    cluster needs a recovery.  This happens naturally when using ctdb recover
    command so dont make this cause a node to be banned.
- Update to version 1.0.90.
  + Be more forgiving for eventscripts that hang during startup.
  + Fix for a banning bug in the new banning logic.

-------------------------------------------------------------------
Wed Nov 18 18:07:34 CET 2009 - lmuelle@suse.de

- Default socket path to /var/lib/ctdb/.

-------------------------------------------------------------------
Tue Sep 22 15:50:00 CEST 2009 - jmcdonough@suse.de

- Update to version 1.0.89
  + Make it possible to manage winbind independently of samba.
  + Add new prototype banning code
  + Overwrite the vsftpd state file instead of appending. This eliminates
    annoying errors in the log.
  + Redirect some iptables commands to dev null
  + From Michael A, explicitely set the broadcast when we takeover a public ip
  + Remove a reclock file check we no longer need
  + Skip any persistent database files ending in .bak
- Version 1.0.88
  + Add a new state for eventscripts : DISABLED.
    Add two new commands "ctdb enablescript/disablescript" to enable/disable
    eventscripts at runtime.
  + Bugfixes for TDB from rusty.
  + Merge/Port changes from upstream TDB library by rusty.
  + Additional new tests from MartinS. Tests for stop/continue.
  + Initial patch to rework vacuuming/repacking process from Wolfgang Mueller.
  + Updates from Michael Adam for persistent writes.
  + Updates from MartinS to handle the new STOPPED bit in the test framework.
  + Make it possible to enable/disable the RECMASTER and LMASTER roles
    at runtime. Add two new commands 
    "ctdb setlmasterrole/setrecmasterrole on/off"
  + Make it possible to enable/disable the natgw feature at runtime. Add
    the command "ctdb setnatgwstate on/off"
- Version 1.0.87
  + Add a new event "stopped" that is called when a node is stopped.
  + Documentation of the STOPPED flag and the stop/continue commands
  + Make it possible to start a node in STOPPED mode.
  + Add a new node flag : STOPPED and commands "ctdb stop" "ctdb continue"
    These commands are similar to "diasble/enable" but will also remove the 
    node from the vnnmap, while disable only fails all ip addresses over.
  + tests for NFS , CIFS by martins
  + major updates to the init script by martins
  + Send gratious arps with a 1.1 second stride instead of a 1 second stride
    to workaround interesting "features" of common linux stacks.
  + Various test enhancements from martins:
    - additional other tests
    - add tests for grat arp generation, ping during failover, ssh and failover
    - New/updated tcp tickle tests and supprot functions
    - provide better debugging when a test fails
    - make ctdbd restarts more reliable in the tests
    - update the "wait bar" to  make the wait progress in tests more obvious
    - various cleanups 
  + when dispatching a message to a handler, make the message a real talloc
     object so that we can reparent the object in the tallic hierarchy.
  + document the ipreallocate command
  + Updates to enable/disable to use the ipreallocate command to block until 
    the following ipreallocation has completed.
  + Update the main daemon and the tools to allow debug level to be a string
    instead of an integer.
  + Update the sysconfig file to show using string literals instead of numeric
    values for the debuglevels used.
  + If no debuglevel is specific, make "ctdb setdebug" show the available 
    options.
  + When trying to allocate network packets, add explicit checks if the network
    transport has been shutdown before trying and failing, to make log messages
    easier to read. Add this extra check and logging to every plave packets are
    allocated.
- Version 1.0.86
  + Do not access the reclock at all if VerifyRecoveryLock is zero, not even
    try to probe it.
  + Allow setting the reclock file as "", which means that no reclock file at
    all should be used.
  + Document that a reclock file is no longer required, but that it is
    dangerous.
  + Add a control that can be used to set/clear/change the reclock file in the
    daemon during runtime.
  + Update the recovery daemon to poll whether a reclock file should be sued
    and if so which file at runtime in each monitoring cycle.
  + Automatically disable VerifyRecoveryLock everytime a user changes the
    location of the reclock file.
  + do not allow the VerifyRecoveryLock to be set using ctdb setvar if there is
    no recovery lock file specified.
  + Add two commands "ctdb getreclock" and "ctdb setreclock" to modify the
    reclock file.
- Version 1.0.85
  + From William Jojo : Dont use getopt on AIX
  + Make it possible to use "ctdb listnodes" also when the daemon is not running
  + Provide machinereadable output to "ctdb listnodes"
  + Dont list DELETED nodes in the ctdb listnodes output
  + Try to avoid causing a recovery for the average case when
    adding/deleting/moving an ip
  + When banning a node, drop the IPs on that node only and not all nodes.
  + Add tests for NFS and CIFS tickles
  + Rename 99.routing to 11.routing so it executes before NFS and LVS scripts
  + Increase the default timeout before we deem an unresponsive recovery daemon
    hung and shutdown
  + Reduce the reclock timout to 5 seconds
  + Spawn a child process in the recovery daemon ot check the reclock file to
    avoid blocking the process if the underlying filesystem is unresponsive
  + fix for filedescriptor leak when a child process timesout
  + Dont log errors if waitpid() returns -1
  + Onnode updates by Martins
  + Test and initscript cleanups from Martin S
- Version 1.0.84
  + Fix a bug in onnode that could not handle dead nodes
- Version 1.0.83
  + Document how to remove a ndoe from a running cluster.
  + Hide all deleted nodes from ctdb output.
  + Lower the loglevel on some eventscript related items
  + Dont queue packets to deleted nodes
  + When building initial vnnmap, ignode any nonexisting nodes
  + Add a new nodestate : DELETED that is used when deleting a node from an
    existing cluster.
  + dont remove the ctdb socket when shutting down. This prevents a race in the
    initscripts when restarting ctdb quickly after stopping it.
  + TDB nesting reworked.
  + Remove obsolete ipmux
  + From Flavio Carmo Junior: Add eventscript and documentation for ClamAV
    antivirus engine
  + From Sumit Bose: fix the regex in the test to handle the new ctdb
    statistics output that was recently added.
  + change the socket type we use for grauitious arps from the obsolete
    AF_INET/SOCK_PACKET to instead use PF_PACKET/SOCK_RAW.
  + Check return codes for some functions, from Sumit Bose, based on codereview
    by Jim Meyering.
  + Sumit Bose: Remove structure memeber node_list_file that is no longer used.
  + Sumit Bose: fix configure warning for netfilter.h
  + Updates to the webpages by Volker.
  + Remove error messages about missing /var/log/log.ctdb file from
    ctdb_diagnostics.sh from christian Ambach
  + Additional error logs if hte eventscript switching from dameon to client
    mode fails.
  + track how long it takes for ctdbd and the recovery daemon to perform the
    rec-lock fcntl() lock attemt and show this in the ctdb statistics output.
- Version 1.0.82
  + Update the "ctdb lvsmaster" command to return -1 on error.
  + Add a -Y flag to "ctdb lvsmaster"
  + RHEL5 apache leaks semaphores when crashing. Add semaphore cleanup to the 
    41.httpd eventscript and try to restart apache when it has crashed.
  + Fixes to some tests
  + Add a -o option to "onnode" which will redirect all stdout to a file for
    each of the nodes.
  + Add a natgw and a lvs node specifier to onnode so that we can use 
    "onnode natgw ..."
  + Assign the natgw address to lo instead of the private network so it can also
    be used where private and public networks are the same.
  + Add GPL boilerplates to two missing scripts.
  + Change the natgw prefix NATGW_ to CTDB_NATGW_
- Version 1.0.81
  + use smbstatus -np instead of smbstatus -n in the 50.samba eventscript 
    since this avoids performing an expensive traverse on the locking and brlock
    databases.
  + make ctdb automatically terminate all traverse child processes clusterwide
    associated to a client application that terminates before the traversal is
    completed.
  + From Sumit Bose : fixes to AC_INIT handling.
  + From Michael Adam, add Tridge's "ping_pong" tool the the ctdb distro since 
    this is very useful for testing the backend filesystem.
  + From Sumit bose, add support for additional 64 bit platforms.
  + Add a link from the webpage to Michael Adams SambaXP paper on CTDB.
- Version 1.0.80
  + change init shutdown level to 01 for ctdb so it stops before any of the
    other services
  + if we can not pull a database from a remote node during recovery, mark that
    node as a culprit so it becomes banned
  + increase the loglevel when we volunteer to drop all ip addresses after
    beeing in recovery mode for too long. Make this timeout tuneable with
    "RecoveryDropAllIPs" and have it default to 60 seconds
  + Add a new flag TDB_NO_NESTING to the tdb layer to prevent nested
    transactions which ctdb does not use and does not expect. Have ctdb set
    this flag to prevent nested transactions from occuring.
  + dont unconditionally kill off ctdb and restrat it on "service ctdb start".
    Fail "service ctdb start" with an error if ctdb is already running.
  + Add a new tunable "VerifyRecoveryLock" that can be set to 0 to prevent the
    main ctdb daemon to verify that the recovery master has locked the reclock
    file correctly before allowing it to set the recovery mode to active.
  + fix a cosmetic bug with ctdb statistics where certain counters could become
    negative.

-------------------------------------------------------------------
Mon Jun 15 16:28:45 CEST 2009 - lmuelle@suse.de

- Remove description, type, default and comment next to the ulimit example.

-------------------------------------------------------------------
Mon Jun 15 16:03:00 CEST 2009 - lmuelle@suse.de

- Add missing service descriptions for SUSE based systems.
- Remove leading # from CTDB_MANAGES_NFS setting and add a description.

-------------------------------------------------------------------
Wed Jun 10 18:29:50 CEST 2009 - lmuelle@suse.de

- Add modified sysconfig file for SUSE based systems.
- Add default log, /var/log/ctdb and lib, /var/lib/ctdb directories.

-------------------------------------------------------------------
Tue Jun  9 15:14:43 CEST 2009 - ro@suse.de

- fix lib64 for ppc64 and s390x (really should never be hardcoded
  in configure.ac ...) 

-------------------------------------------------------------------
Tue May 19 18:37:44 CEST 2009 - lmuelle@suse.de

- Call %fillup_and_insserv for SUSE based systems from %post.

-------------------------------------------------------------------
Thu May  7 22:54:42 CEST 2009 - lmuelle@suse.de

- Package man page files independent of the used compression method (gz,lzma).

-------------------------------------------------------------------
Thu May  7 21:18:21 CEST 2009 - lmuelle@suse.de

- Update to version 1.0.79 based on the upstream spec file.
  + From Mathieu Parent: add a ctdb pkgconfig file
  + Fix bug 6250
  + add a funciton remove_ip to safely remove an ip from an interface, taking
    care to workaround an issue with linux alias interfaces.
  + Update the natgw eventscript to use the safe remove_ip() function
  + fix a bug in the eventscript child process that would cause the socket to
    be removed.
  + dont verify nodemap on banned nodes during cluster monitoring
  + Update the dodgy SeqnumInterval to have ms resolution

-----------------------------------------------------------------
Wed Apr 8 12:00:00 CEST 2009 - samba@samba.org

- Version 1.0.79
  + From Mathieu Parent: add a ctdb pkgconfig file
  + Fix bug 6250
  + add a funciton remove_ip to safely remove an ip from an interface, taking
    care to workaround an issue with linux alias interfaces.
  + Update the natgw eventscript to use the safe remove_ip() function
  + fix a bug in the eventscript child process that would cause the socket to
    be removed.
  + dont verify nodemap on banned nodes during cluster monitoring
  + Update the dodgy SeqnumInterval to have ms resolution

-----------------------------------------------------------------
Tue Mar 31 12:00:00 CEST 2009 - samba@samba.org

- Version 1.0.78
  + Add a notify mechanism so we can send snmptraps/email to external
    management systems when the node becomes unhealthy
  + include 11.natgw eventscript in thew install so that the NATGW feature works

-----------------------------------------------------------------
Tue Mar 31 12:00:00 CEST 2009 - samba@samba.org

- Version 1.0.77
  + Update the 99.routing eventscript to also try to add the routes (back)
    during a releaseip event. Similar to the reasons why we must add addresses
    back during releaseip in 10.interfaces

-----------------------------------------------------------------
Wed Mar 24 12:00:00 CEST 2009 - samba@samba.org

- Version 1.0.76
  + Add a debugging command "xpnn" which can print the pnn of the node even
    when ctdbd is not running.
  + Redo the NATGW implementation to allow multiple disjoing NATGW groups in
    the same cluster.

-----------------------------------------------------------------
Tue Mar 24 12:00:00 CEST 2009 - samba@samba.org

- Version 1.0.75
  + Various updates to LVS
  + Fix a bug in the killtcp control where we did not set the port correctly
  + add a new "ctdb scriptstatus" command that shows the status of the
    eventrscripts.

-----------------------------------------------------------------
Mon Mar 16 12:00:00 CEST 2009 - samba@samba.org

- Version 1.0.74
  + Fixes to AIX from C Cowan.
  + Fixes to ctdb_diagnostics so we collect correct GPFS data
  + Fixes to the net conf list command in ctdb_diagnostics
  + Check the static-routes file IFF it exists in ctdb_diagnostics

-------------------------------------------------------------------
Tue Mar 10 18:09:29 CET 2009 - lmuelle@suse.de

- Initial SUSE ctdb package of version 1.0.70 based on the upstream spec file.

-----------------------------------------------------------------
Wed Mar 4 12:00:00 CEST 2009 - samba@samba.org

- Version 1.0.73
  + Add possibility to disable the check of shares for NFS and Samba
  + From Sumit Bose, fix dependencies so make -j works

-----------------------------------------------------------------
Wed Feb 18 12:00:00 CEST 2009 - samba@samba.org

- Version 1.0.72
  + Updates to test scripts by martin s
  + Adding a COPYING file
  + Use netstat to check for services and ports and fallback to netcat
    only if netstat is unavailable.

-----------------------------------------------------------------
Mon Feb 2 12:00:00 CEST 2009 - samba@samba.org

- Version 1.0.71
  + Additional ipv6 fixes from Michael Adams

-----------------------------------------------------------------
Fri Jan 16 12:00:00 CEST 2009 - samba@samba.org

- Version 1.0.70
  + IPv6 support is completed. this is backward compatible with ipv4-only
    systems. To use IPv6 with samba and ctdb you need current GIT of samba 3.3
    or michael adams samba-ctdeb branch.
  + Many enhancements to the build system and scripts to make it more SUSE
    friendly by Michael Adams.
  + Change of how the naming of the package is structured. We are now
    using "1.0.70" as a release and "-1" as the revision instead of as
    previously using "1.0" as release and ".70" as the revision.
    By Michael Adams.

-----------------------------------------------------------------
Thu Dec 18 12:00:00 CEST 2008 - samba@samba.org

- Version 1.0.69
  + Various fixes to scripts by M Adam
  + Dont call ctdb_fatal() when the transport is down during shutdown

-----------------------------------------------------------------
Fri Dec 12 12:00:00 CEST 2008 - samba@samba.org

- Version 1.0.68
  + Fixes for monitoring of interfaces status from Michael Adam.
  + Use -q instead of >/dev/null for grep to enhance readability of the
    scripts from Michael Adam.
  + Update to the "ctdb recover" command. This command now block until the
    has completed. This makes it much easier to use in scripts and avoids
    the common workaround :
       ctdb recover
       ... loop while waiting for recovery completes ...
       continue ...
  + Add a CTDB_TIMEOUT variable. If set, this variable provides an automatic
    timeout for "ctdb <command>", similar to using -T <timeout>
  + Set a unique errorcode for "ctdb <command>" when it terminates due to a 
    timeout so that scripts can distinguish between a hung command and what was
    just a failure.
  + Update "ctdb ban/unban" so that if the cluster is in recovery these commands
    blocks and waits until after recovery is complete before the perform the
    ban/unban operation. This is necessary since the recovery process can cause
    nodes to become automatically unbanned.
  + Update "ctdb ban/unban" to block until the recovery that will follow shortly
    after this command has completed.
    This makes it much easier to use in scripts and avoids the common
    workaround :
       ctdb ban/unban
       ... loop while waiting for recovery completes ...
       continue ...
  + Bugfix for the new flags handling in 1.0.67. Abort and restart monitoring
    if we failed to get proper nodemaps from a remote node instead of
    dereferencing a null pointer.
  + If ctdbd was explicitely started with the '--socket' argument, make
    ctdbd automatically set CTDB_SOCKET to the specified argument.
    This ensures that eventscripts spawned by the ctdb daemon will default to
    using the same socket and talk to the correct daemon.
    This primarily affects running multiple daemons on the same host and where 
    you want each instance of ctdb daemons have their eventscripts talk to the
    "correct" daemon.
  + Update "ctdb ping" to return an error code if the ping fail so that it
    can be used in scripts.
  + Update to how to synchronize management of node flags across the cluster.

-----------------------------------------------------------------
Thu Dec 3 12:00:00 CEST 2008 - samba@samba.org

- Version 1.0.67
  + Add a document describing the recovery process.
  + Fix a bug in "ctdb setdebug" where it would refuse to set a negative
    debug level.
  + Print the list of literals for debug names if an invalid one was given
    to "ctdb setdebug"
  + Redesign how "ctdb reloadnodes" works and reduce the amont of tcp teardowns
    used during this event.
  + Make it possible to delete a public ip from all nodes at once using
    "ctdb delip -n all"

-----------------------------------------------------------------
Mon Nov 24 12:00:00 CEST 2008 - samba@samba.org

- Version 1.0.66
  + Allow to change the recmaster even when we are not frozen.
  + Remove two redundant SAMBA_CHECK variables from the sysconf example
  + After a node failure it can take very long before some lock operations
    ctdb needs to perform are allowed/works with gpfs again. Workaround this
    by treating a hang/timeout as success.
  + Dont override CTDB_BASE is fet in the shell already
  + Always send keepalive packets regardless of whether the link is idle or not.
  + Rewrite the disable/enable flag update logic to prevent a race between 
    "ctdb disable/enable" and the recovery daemon when updating the flags to 
    all nodes.

-----------------------------------------------------------------
Thu Nov 13 12:00:00 CEST 2008 - samba@samba.org

- Version 1.0.65
  + Update the sysconfig example: The default debug level is 2 (NOTICE) and not
    0 (ERROR)
  + Add support for a CTDB_SOCKET environment variable for the ctdb command
    line tool. If set, this overrides the default socket the ctdb tool will
    use.
  + Add logging of high latency operations.

-----------------------------------------------------------------
Mon Oct 22 12:00:00 CEST 2008 - samba@samba.org

- Version 1.0.64
  + Add a context and a timed event so that once we have been in recovery for
    too long we drop all public addresses.

-----------------------------------------------------------------
Mon Oct 20 12:00:00 CEST 2008 - samba@samba.org

- Version 1.0.63
  + Remove logging of "periodic cleanup ..." in 50.samba
  + When we reload a nodes file, we must detect this and reload the file also
    in the recovery daemon before we try to dereference somethoung beyond the
    end of the nodes array.

-----------------------------------------------------------------
Thu Oct 16 12:00:00 CEST 2008 - samba@samba.org

- Version 1.0.62
  + Allow multiple eventscritps using the same prefix number.
    It is undefined which order scripts with the same prefix will execute in.

-----------------------------------------------------------------
Wed Oct 15 12:00:00 CEST 2008 - samba@samba.org

- Version 1.0.61
  + Use "route add -net" instead of "ip route add" when adding routes in
    99.routing
  + lower the loglevel os several debug statements
  + check the status returned from ctdb_ctrl_get_tickles() before we try to
    print them out to the screen.
  + install a new eventscript 20.multipathd whoich can be used to monitor that
    multipath devices are healthy

-----------------------------------------------------------------
Wed Oct 15 12:00:00 CEST 2008 - samba@samba.org

- Version 1.0.60
  + Verify that nodes we try to ban/unban are reachable and print an error
    othervise.
  + Update the client and server sides of TAKEIP/RELEASEIP/GETPUBLICIPS and
    GETNODEMAP to fall back to the old style ipv4-only controls if the new
    ipv4/ipv6 controls fail. This allows an ipv4/v6 enabled ctdb daemon to
    interoperate with earlier ipv4-only versions of the daemons.
  + From Mathieu Parent : log debian systems log the package versions in ctdb
    diagnostics
  + From Mathieu Parent : specify logdir location for debian (this patch was
    later reversed)
  + From Michael Adams : allow # comments in nodes/public_addresses files

-----------------------------------------------------------------
Tue Oct 7 12:00:00 CEST 2008 - samba@samba.org

- Version 1.0.59
  + Updated "reloadnodes" logic. Instead of bouncing the entire tcp layer it
    is sufficient to just close and reopen all outgoing tcp connections.
  + New eventscript 99.routing which can be used to re-attach routes to public
    interfaces after a takeip event. (routes may be deleted by the kernel when
    we release an ip)
  + IDR tree fix from Jim Houston
  + Better handling of critical events if the local clock is suddenly changed
    forward by a lot.
  + Fix three slow memory leaks in the recovery daemon
  + New ctdb command : ctdb recmaster   which prints the pnn of the recmaster
  + Onnode enhancements from Martin S : "healthy" and "connected" are now
    possible nodespecifiers
  + From Martin S : doc fixes
  + lowering some debug levels for some nonvital informational messages
  + Make the daemon daemon monitoring stronger and allow ctdbd to detect a hung
    recovery daemon.
  + From C Cowan : patches to compile ipv6 under AIX
  + zero out some structs to keep valgrind happy

-----------------------------------------------------------------
Wed Aug 27 12:00:00 CEST 2008 - samba@samba.org

- Version 1.0.58
  + revert the name change tcp_tcp_client back to tcp_control_tcp so
    samba can build.
  + Updates to the init script from Abhijith Das <adas@redhat.com>

-----------------------------------------------------------------
Mon Aug 25 12:00:00 CEST 2008 - samba@samba.org

- Version 1.0.57
  + initial support for IPv6

-----------------------------------------------------------------
Mon Aug 11 12:00:00 CEST 2008 - samba@samba.org

- Version 1.0.56
  + fix a memory leak in the recovery daemon.

-----------------------------------------------------------------
Mon Aug 11 12:00:00 CEST 2008 - samba@samba.org

- Version 1.0.55
  + Fix the releaseip message we seond to samba.

-----------------------------------------------------------------
Fri Aug 8 12:00:00 CEST 2008 - samba@samba.org

- Version 1.0.54
  + fix a looping error in the transaction code
  + provide a more detailed error code for persistent store errors
    so clients can make more intelligent choices on how to try to recover

-----------------------------------------------------------------
Thu Aug 7 12:00:00 CEST 2008 - samba@samba.org

- Version 1.0.53
  + Remove the reclock.pnn file   it can cause gpfs to fail to umount
  + New transaction code

-----------------------------------------------------------------
Mon Aug 4 12:00:00 CEST 2008 - samba@samba.org

- Version 1.0.52
  + Send an explicit gratious arp when starting sending the tcp tickles.
  + When doing failover, issue a killtcp to non-NFS/non-CIFS clients
    so that they fail quickly. NFS and CIFS already fail and recover 
    quickly.
  + Update the test scripts to handle CTRL-C to kill off the test.

-----------------------------------------------------------------
Mon Jul 28 12:00:00 CEST 2008 - samba@samba.org

- Version 1.0.51
  + Strip off the vlan tag from bond devices before we check in /proc
    if the interface is up or not.
  + Use testparm in the background in the scripts to allow probing
    that the shares do exist.
  + Fix a bug in the logging code to handle multiline entries better
  + Rename private elements from private to private_data

-----------------------------------------------------------------
Fri Jul 18 12:00:00 CEST 2008 - samba@samba.org

- Version 1.0.50
  + Dont assume that just because we can establish a TCP connection
    that we are actually talking to a functioning ctdb daemon.
    So dont mark the node as CONNECTED just because the tcp handshake
    was successful.
  + Dont try to set the recmaster to ourself during elections for those
    cases we know this will fail. To remove some annoying benign but scary
    looking entries from the log.
  + Bugfix for eventsystem for signal handling that could cause a node to
    hang.

-----------------------------------------------------------------
Thu Jul 17 12:00:00 CEST 2008 - samba@samba.org

- Version 1.0.49
  + Update the safe persistent update fix to work with unpatched samba
    servers.

-----------------------------------------------------------------
Thu Jul 17 12:00:00 CEST 2008 - samba@samba.org

- Version 1.0.48
  + Update the spec file.
  + Do not start new user-triggered eventscripts if we are already
    inside recovery mode.
  + Add two new controls to start/cancel a persistent update.
    A client such as samba can use these to tell ctdbd that it will soon
    be writing directly to the persistent database tdb file. So if
    samba is -9ed before it has eitehr done the persistent_store or
    canceled the operation, ctdb knows that the persistent databases
    'may' be out of sync and therefore a full blown recovery is called for.
  + Add two new options :
    CTDB_SAMBA_SKIP_CONF_CHECK and CTDB_SAMBA_CHECK_PORTS that can be used
    to override what checks to do when monitoring samba health.
    We can no longer use the smbstatus, net or testparm commands to check
    if samba or its config is healthy since these commands may block
    indefinitely and thus can not be used in scripts.

-----------------------------------------------------------------
Fri Jul 11 12:00:00 CEST 2008 - samba@samba.org

- Version 1.0.47
  + Fix a double free bug where if a user striggered (ctdb eventscript)
    hung and while the timeout handler was being processed a new user
    triggered eventscript was started we would free state twice.
  + Rewrite of onnode and associated documentation.

-----------------------------------------------------------------
Thu Jul 10 12:00:00 CEST 2008 - samba@samba.org

- Version 1.0.46
  + Document both the LVS:cingle-ip-address and the REMOTE-NODE:wan-accelerator
    capabilities.
  + Add commands "ctdb pnn", "ctdb lvs", "ctdb lvsmaster".
  + LVS improvements. LVS is the single-ip-address mode for a ctdb cluster.
  + Fixes to supress rpmlint warnings
  + AXI compile fixes.
  + Change \s to [[:space:]] in some scripts. Not all RHEL5 packages come
    with a egrep that handles \s   even same version but different arch.
  + Revert the change to NFS restart. CTDB should NOT attempt to restart
    failed services.
  + Rewrite of the waitpid() patch to use the eventsystem for handling
    signals.

-----------------------------------------------------------------
Tue Jul 8 12:00:00 CEST 2008 - samba@samba.org

- Version 1.0.45
  + Try to restart the nfs service if it has failed to respond 3 times in a row.
  + waitpid() can block if the child does not respond promptly to SIGTERM.
    ignore all SIGCHILD signals by setting SIGCHLD to SIG_DEF.
    get rid of all calls to waitpid().
  + make handling of eventscripts hanging more liberal.
    only consider the script to have failed and making the node unhealthy
    IF the eventscript terminated wiht an error
    OR the eventscript hung 5 or more times in a row

-----------------------------------------------------------------
Mon Jul 7 12:00:00 CEST 2008 - samba@samba.org

- Version 1.0.44
  + Add a CTDB_VALGRIND option to /etc/sysconfig/ctdb to make it start ctdb
    under valgrind. Logs go to /var/log/ctdb_valgrind.PID
  + Add a hack to show the control opcode that caused uninitialized data
    in the valgrind output by encoding the opcode as the line number.
  + Initialize structures and allocated memory in various places in
    ctdb to make it valgrind-clean and remove all valgrind errors/warnings.
  + If/when we destroy a lockwait child, also make sure we cancel any pending
    transactions
  + If a transaction_commit fails, delete/cancel any pending transactions and
    return an error instead of calling ctdb_fatal()
  + When running ctdb under valgrind, make sure we run it with --nosetsched
    and also ensure that we do not use mem-mapped i/o when accessing the
    tdb's.
  + zero out ctdb->freeze_handle when we free/destroy a freeze-child.
    This prevent a heap corruption/ctdb crash bug that could trigger
    if the freeze child times out.
  + we dont need to explicitely thaw the databases from the recovery daemon
    since this is done implicitely when we restore the recovery mode back to
    normal.
  + track when we start and stop a recovery. Add the 'time it took to complete
    the recovery' to the 'ctdb uptime' output.
    Ensure by tracking the start/stop recovery timestamps that we do not
    check that the ip allocation is consistend from inside the recovery daemon
    while a different node (recovery master) is performing a recovery.
    This prevent a race that could cause a full recovery to trigger if the
    'ctdb disable/enable' commands took very long.
  + The freeze child indicates to the master daemon that all databases are
    locked by writing data to the pipe shared with the master daemon.
    This write sometimes fail and thus the master daemon never notices that
    the databases are locked cvausing long timeouts and extra recoveries.
    Check that the write is successful and try the write again if it failed.
  + In each node, verify that the recmaster have the right node flags for us
    and force a push of our flags to the recmaster if wrong.

-----------------------------------------------------------------
Tue Jul 1 12:00:00 CEST 2008 - samba@samba.org

- Version 1.0.43
  + Updates and bugfixes to the specfile to keep rpmlint happy
  + Force a global flags update after each recovery event.
  + Verify that the recmaster agrees with our node flags and update the
    recmaster othervise.
  + When writing back to the parent from a freeze-child across the pipe, loop
    over the write in case the write failed with an error othervise the parent
    will never be notified tha the child has completed the operation.
  + Automatically thaw all databases when recmaster marks us as being in
    normal mode instead of recovery mode.

-----------------------------------------------------------------
Fri Jun 13 12:00:00 CEST 2008 - samba@samba.org

- Version 1.0.42
  + When event scripts have hung/timedout more than EventScriptBanCount times
    in a row the node will ban itself.
  + Many updates to persistent write tests and the test scripts.

-----------------------------------------------------------------
Wed May 28 12:00:00 CEST 2008 - samba@samba.org

- Version 1.0.41
  + Reactivate the safe writes to persistent databases and solve the
    locking issues. Locking issues are solved the only possible way,
    by using a child process to do the writes.  Expensive and slow but... . 

-----------------------------------------------------------------
Tue May 27 12:00:00 CEST 2008 - samba@samba.org

- Version 1.0.40
  + Read the samba sysconfig file from the 50.samba eventscript
  + Fix some emmory hierarchical bugs in the persistent write handling

-----------------------------------------------------------------
Thu May 22 12:00:00 CEST 2008 - samba@samba.org

- Version 1.0.39
  + Moved a CTDB_MANAGES_NFS, CTDB_MANAGES_ISCSI and CTDB_MANAGES_CSFTPD
    into /etc/sysconfig/ctdb
  + Lowered some debug messages to not fill the logfile with entries
    that normally occur in the default configuration.

-----------------------------------------------------------------
Fri May 16 12:00:00 CEST 2008 - samba@samba.org

- Version 1.0.38
  + Add machine readable output support to "ctdb getmonmode"
  + Lots of tweaks and enhancements if the event scripts are "slow"
  + Merge from tridge: an attempt to break the chicken-and-egg deadlock that
    net conf introduces if used from an eventscript.
  + Enhance tickles so we can tickle an ipv6 connection.
  + Start adding ipv6 support : create a new container to replace sockaddr_in.
  + Add a checksum routine for ipv6/tcp
  + When starting up ctdb, let the init script do a tdbdump on all
    persistent databases and verify that they are good (i.e. not corrupted).
  + Try to use "safe transactions" when writing to a persistent database
    that was opened with the TDB_NOSYNC flag. If we can get the transaction
    thats great, if we cant  we have to write anyway since we cant block here.

-----------------------------------------------------------------
Mon May 12 12:00:00 CEST 2008 - samba@samba.org

- Version 1.0.37
  + When we shutdown ctdb we close the transport down before we run the 
    "shutdown" eventscripts. If ctdb decides to send a packet to a remote node
    after we have shutdown the transport but before we have shutdown ctdbd
    itself this could lead to a SEGV instead of a clean shutdown. Fix.
  + When using the "exportfs" command to extract which NFS export directories
    to monitor,  exportfs violates the "principle of least surprise" and
    sometimes report a single export line as two lines of text output
    causing the monitoring to fail.

-----------------------------------------------------------------
Fri May 9 12:00:00 CEST 2008 - samba@samba.org

- Version 1.0.36
  + fix a memory corruption bug that could cause the recovery daemon to crash.
  + fix a bug with distributing public ip addresses during recovery.
    If the node that is the recovery master did NOT use public addresses,
    then it assumed that no other node in the cluster used them either and
    thus skipped the entire step of reallocating public addresses.

-----------------------------------------------------------------
Wed May 7 12:00:00 CEST 2008 - samba@samba.org

- Version 1.0.35
  + During recovery, when we define the new set of lmasters (vnnmap)
    only consider those nodes that have the can-be-lmaster capability
    when we create the vnnmap. unless there are no nodes available which
    supports this capability in which case we allow the recmaster to
    become lmaster capable (temporarily).
  + Extend the async framework so that we can use paralell async calls
    to controls that return data.
  + If we do not have the "can be recmaster" capability, make sure we will
    lose any recmaster elections, unless there are no nodes available that
    have the capability, in which case we "take/win" the election anyway.
  + Close and reopen the reclock pnn file at regular intervals.
    Make it a non-fatal event if we occasionally fail to open/read/write
    to this file.
  + Monitor that the recovery daemon is still running from the main ctdb
    daemon and shutdown the main daemon when recovery daemon has terminated.
  + Add a "ctdb getcapabilities" command to read the capabilities off a node.
  + Define two new capabilities : can be recmaster and can be lmaster
    and default both capabilities to YES.
  + Log denied tcp connection attempts with DEBUG_ERR and not DEBUG_WARNING

-----------------------------------------------------------------
Thu Apr 24 12:00:00 CEST 2008 - samba@samba.org

- Version 1.0.34
  + When deleting a public ip from a node, try to migrate the ip to a
    different node first.
  + Change catdb to produce output similar to tdbdump
  + When adding a new public ip address, if this ip does not exist yet in the
    cluster, then grab the ip on the local node and activate it.
  + When a node disagrees with the recmaster on WHO is the recmaster, then
    mark that node as a recovery culprit so it will eventually become banned.
  + Make ctdb eventscript support the -n all argument.

-----------------------------------------------------------------
Thu Apr 10 12:00:00 CEST 2008 - samba@samba.org

- Version 1.0.33
  + Add facilities to include site local adaptations to the eventscript by
    /etc/ctdb/rc.local which will be read by all eventscripts.
  + Add a "ctdb version" command.
  + Secure the domain socket with proper permissions from Chris Cowan
  + Bugfixes for AIX from Chris Cowan

-----------------------------------------------------------------
Wed Apr 02 12:00:00 CEST 2008 - samba@samba.org

- Version 1.0.32
  + Add a control to have a node execute the eventscripts with arbitrary
    command line arguments.
  + Add a control "rddumpmemory" that will dump the talloc memory allocations
    for the recovery daemon.
  + Decorate the talloc memdump to produce better and easier memory leak
    tracking. 
  + Update the RHEL5 iscsi tgtd scripts to allow one iscsi target for each
    public address.
  + Add two new controls "addip/delip" that can be used to add/remove public
    addresses to a node at runtime. After using these controls a "ctdb
    recover" if required to make the changes take.
  + Fix a couple of slow memory leaks.

-----------------------------------------------------------------
Tue Mar 25 12:00:00 CEST 2008 - samba@samba.org

- Version 1.0.31
  + Add back controls to disable/enable monitoring on a node.
  + Fix a memory leak where we used to attach CALL data to the ctdb structure
    when performing a local call. Memory which would be lost if the call was
    aborted.
  + Reduce the loglevel for the log output when someone connects to a non
    public ip address for samba.
  + Redo and optimize the vacuuming process to send only one control to each
    other node containing all records to be vacuumed instead of one control
    per node per record.

-----------------------------------------------------------------
Tue Mar 04 12:00:00 CEST 2008 - samba@samba.org

- Version 1.0.30
  + Update documentation cor new commands and tuneables
  + Add machinereadable output to the ip,uptime and getdebug commands
  + Add a moveip command to manually failover/failback public ips
  + Add NoIPFallback tuneable that prevents ip address failback
  + Use file locking inside the CFS as alternative to verify when other nodes
   Are connected/disconnected to be able to recover from split network
  + Add DisableWhenUnhealthy tunable
  + Add CTDB_START_AS_DISABLED sysconfig param
  + Add --start-as-disabled flag to ctdb
  + Add ability to monitor for OOM condition

-----------------------------------------------------------------
Thu Feb 21 12:00:00 CEST 2008 - samba@samba.org

- Version 1.0.29
  + Add a new command to make expansion of an existing cluster easier
  + Fix bug with references to freed objects in the ctdb structure
  + Propagate debuglevel changes to the recovery daemon
  + Merge patches to event scripts from Mathieu Parent :
  + MP: Simulate "service" on systems which do not provide this tool
  + MP: Set correct permissions for events.d/README
  + Add nice helper functions to start/stop nfs from the event scripts

-----------------------------------------------------------------
Fri Feb 08 12:00:00 CEST 2008 - samba@samba.org

- Version 1.0.28
  + Fix a problem where we tried to use ethtool on non-ethernet interfaces
  + Warn if the ipvsadm packege is missing when LVS is used
  + Dont use absolute pathnames in some of the event scripts
  + Fix for persistent tdbs growing inifinitely.

-----------------------------------------------------------------
Wed Feb 06 12:00:00 CEST 2008 - samba@samba.org

- Version 1.0.27
  + Add eventscript for iscsi

-----------------------------------------------------------------
Thu Jan 31 12:00:00 CEST 2008 - samba@samba.org

- Version 1.0.26
  + Fix crashbug in tdb transaction code

-----------------------------------------------------------------
Tue Jan 29 12:00:00 CEST 2008 - samba@samba.org

- Version 1.0.25
  + added async recovery code
  + make event scripts more portable
  + fixed ctdb dumpmemory
  + more efficient tdb allocation code
  + improved machine readable ctdb status output
  + added ctdb uptime

-----------------------------------------------------------------
Wed Jan 16 12:00:00 CEST 2008 - samba@samba.org

- Version 1.0.24
  + added syslog support
  + documentation updates

-----------------------------------------------------------------
Wed Jan 16 12:00:00 CEST 2008 - samba@samba.org

- Version 1.0.23
  + fixed a memory leak in the recoveryd
  + fixed a corruption bug in the new transaction code
  + fixed a case where an packet for a disconnected client could be processed
  + added http event script
  + updated documentation

-----------------------------------------------------------------
Thu Jan 10 12:00:00 CEST 2008 - samba@samba.org

- Version 1.0.22
  + auto-run vacuum and repack ops

-----------------------------------------------------------------
Wed Jan 09 12:00:00 CEST 2008 - samba@samba.org

- Version 1.0.21
  + added ctdb vacuum and ctdb repack code

-----------------------------------------------------------------
Sun Jan 06 12:00:00 CEST 2008 - samba@samba.org

- Version 1.0.20
  + new transaction based recovery code

-----------------------------------------------------------------
Sat Jan 05 12:00:00 CEST 2008 - samba@samba.org

- Version 1.0.19
  + fixed non-master bug
  + big speedup in recovery for large databases
  + lots of changes to improve tdb and ctdb for high churn databases

-----------------------------------------------------------------
Thu Dec 27 12:00:00 CEST 2007 - samba@samba.org

- Version 1.0.18
  + fixed crash bug in monitor_handler

-----------------------------------------------------------------
Tue Dec 04 12:00:00 CEST 2007 - samba@samba.org

- Version 1.0.17
  + fixed bugs related to ban/unban of nodes
  + fixed a race condition that could lead to monitoring being permanently
    disabled, which would lead to long recovery times
  + make deterministic IPs the default
  + fixed a bug related to continuous recovery 
  + added a debugging option --node-ip