PingDS release notes

Fixes in 6.5.x

This page lists the cumulative fixes in DS 6.5.x releases since 5.5.0:

DS 6.5.6

  • OPENDJ-8698: DS should write config archive files in a crash consistent way

  • OPENDJ-8845: Bad encoding of PersistentSearch’s changeType of the EntryChangeNotificationResponseControl

  • OPENDJ-7970: Ensure that DS is crash resilient for all runtime file changes

  • OPENDJ-7761: DS sporadically hangs while reconnecting to an RS

  • OPENDJ-7653: replication issue in the cloud after ldapadd

  • OPENDJ-6349: "RuntimeException: Should never happen" in HttpClientConnection

DS 6.5.5

  • OPENDJ-8028: Prometheus monitoring doesn’t work with Telegraf

  • OPENDJ-7851: Supportextract tool: clobbers the server.out filehandle when kill -3 is used.

  • OPENDJ-7818: Package based upgrade does not support instances running as non-root

  • OPENDJ-7737: ConfigurationFramework#initialize0 changes the class loader without clearing the map of registered jar files

  • OPENDJ-7699: Supportextract throws NoSuchElementException when the server.pid file is empty

  • OPENDJ-7655: Replaying multiple MODIFYDN operations is very slow

  • OPENDJ-7481: JSON logs do not contain proxy auth DN

  • OPENDJ-7450: The startswith (sw) operator on indexed JSON attribute is slow

  • OPENDJ-6992: Persistent search from IDM is blocking worker threads.

  • OPENDJ-5927: Server stuck on a DS trying to reconnect to an RS

  • CMON-109: Prometheus metrics contains more than one HELP metric line for the same metric

DS 6.5.4

  • OPENDJ-7414: AM: Persistent search with changesOnly gets cancelled by a request timeout

  • OPENDJ-7286: Changelog searches can start with incorrect cursors

  • OPENDJ-7232: StackOverflowError in Tomcat logs when using external DS

  • OPENDJ-7176: Filters with malformed attribute descriptions cannot be parsed

  • OPENDJ-7115: DS does not start when deployed with ISTIO side car container in the GCP K8s cloud

  • OPENDJ-7031: VLVIndex are incorrectly rebuilt by rebuild-index

  • OPENDJ-7020: Rebuild-index offline ignores rebuild-index.offline.java-args

  • OPENDJ-7016: Status command outputs malformed JSON in script friendly mode

  • OPENDJ-7014: Some operational attributes are not replicated when a restore --dry-run is used against an online server

  • OPENDJ-6994: Strict-format-country-string does not affect the server

  • OPENDJ-6970: Tamil locales cause illegal matchingRules values

  • OPENDJ-6910: Supportextract --maxLogFiles gathers logs but not the latest logs

  • OPENDJ-6812: Client tools fail in offline mode when Account Status Notification Handlers are used

  • OPENDJ-6711: Replication status reports The provided value "5277383431" could not be parsed as an integer.

  • OPENDJ-6498: Profile creation stores AM cts and config global aci’s in base64 format

  • OPENDJ-6377: Replication replay: issues with ReplaySynchronizer

  • OPENDJ-6309: Search operation on whole tree skips nodes if there are DNs without backends in the directory information tree (DIT)

  • OPENDJ-5851: ACI: getEffectiveRights with authz do not print out acl rights

  • OPENDJ-5439: LeastRequestsStrategy should distribute load randomly when idle

  • OPENDJ-4058: IDM Account Status notification handler doesn’t look for certificates correctly

DS 6.5.3

  • OPENDJ-6930: Increase interoperability with HSMs when protecting and distributing symmetric keys

  • OPENDJ-6929: Support storing ads-certificate key-pair and other instance public keys in an HSM

  • OPENDJ-6892: Incorrect units for two updates metrics

  • OPENDJ-6830: The supportextract tool should capture stack traces in server.out with SIGQUIT

  • OPENDJ-6822: Reduce number of expensive seeks in BlockLogReader

  • OPENDJ-6820: dsconfig "-w -" option doesn’t prompt for password

  • OPENDJ-6787: Changelog searches are extremely slow if any cursors are exhausted

  • OPENDJ-6781: example-plugin fails to build on 6.5 branch

  • OPENDJ-6778: Proxy server mishandles abandon requests

  • OPENDJ-6733: SMTP handler sends incorrect email when account status is modified by manually updating ds-pwp-account-disabled attribute

  • OPENDJ-6708: The supportextract tool fails with an error parsing json

  • OPENDJ-6695: Heap slowly fills with DomainDBCursors

  • OPENDJ-6675: The supportextract tool cannot collect gc files when there are dots in the path

  • OPENDJ-6557: IDM Password Sync plugin induces 100% CPU in Apache Http Components when used with JDK 11

  • OPENDJ-6540: The supportextract tool hangs when loggers are configured to use /dev/stdout

  • OPENDJ-6527: server does not return password policy responses with only warnings

  • OPENDJ-6521: setup checks admin port despite options --skipPortCheck --doNotStart

  • OPENDJ-6512: Problems when work queue fills

  • OPENDJ-6474: REST: some requests fails when stressing embedded http endpoint with Gatling

  • OPENDJ-6464: IsMemberOfVirtualAttributeProvider does not process subordinate nested groups

  • OPENDJ-6422: Make the supportextract tool compliant with JVM unified logging framework

  • OPENDJ-6394: Update forgerock-commons for 6.5.3

  • OPENDJ-6371: The supportextract tool generates data but returns 1 instead of 0 on Windows

  • OPENDJ-6240: DS not honoring per user resource limits when processing RESTful operation requests

  • OPENDJ-6163: The supportextract tool needs to gather archived-configs

  • OPENDJ-5960: The supportextract tool should gather basic changelogDb information

  • OPENDJ-5895: Unable to rebuild indexes when the Error Log Handler is assigned to a password policy

  • OPENDJ-5600: The supportextract tool should capture stack traces with jcmd

DS 6.5.2

  • OPENDJ-6248: NPE when running supportextract without monitoring user configured

  • OPENDJ-6235: Stale ds-sync-hist attribute values reappear in the entry after replication is unconfigured

  • OPENDJ-6222: SMTP messages are sometimes not encoded with the correct charset

  • OPENDJ-6217: NPE when running supportextract tool on upgraded instance

  • OPENDJ-6196: HTTP connection handler continues to listen to 0.0.0.0 after setting listen-address

  • OPENDJ-6173: cn=monitor memory pool stats do not get updated properly over time

  • OPENDJ-6170: supportextract tool misses rotated or non-standard GC log files

  • OPENDJ-6128: supportextract tool needs to gather Profile and Data Information

  • OPENDJ-6125: supportextract tool needs to gather the rootUser and monitorUser ldif files

  • OPENDJ-5972: bin/status command fails when using a french locale

DS 6.5.1

  • OPENDJ-6089: TelephoneNumber syntax in DN creates an incorrect entry DN value

  • OPENDJ-6039: AM Config Store Profile doesn’t have enough access in ProductionMode when upgrading AM

  • OPENDJ-5979: Server does not validate sum of memory used by JE backend caches after upgrade

  • OPENDJ-5977: Can not use custom base dn with cts profile because organization unit is forced

  • OPENDJ-5955: Missing version fallback feature for profiles

  • OPENDJ-5843: Rebuild-index failed with ConfigException on db-cache-size

  • OPENDJ-5801: ldap operation fails with "49 Invalid Credentials" when bindDN of 'cn=Directory Manager' is supplied in a properties file

  • OPENDJ-5794: JE db-cache-size settings conflicts with shared cache

  • OPENDJ-5793: Replication on windows: ChangelogException while adding entries

  • OPENDJ-5727: Add optional base DN for each profile

  • OPENDJ-5726: Proxy distribution has trouble scaling writes to 3 shards

  • OPENDJ-5675: JDK11: supportextract tool cannot find jstack command

  • OPENDJ-5611: Change number indexing can lag behind replication under extreme load

  • OPENDJ-5584: Server does not validate sum of memory used by JE backend caches in all cases

  • OPENDJ-5423: Incorrectly reported missing parent entries cause import-ldif and index rebuilds to fail

DS 6.5.0

  • OPENDJ-5606: Upgrade to DS 6.0 fails if multiple filesystems are involved

  • OPENDJ-5594: StackOverflowError with groupOfURLs when isMemberOf is requested

  • OPENDJ-5582: LdapClientSocket connection leaked when handshake fails

  • OPENDJ-5558: SDK: LdapUrl is not IPv6 clean

  • OPENDJ-5553: Rest2Ldap cannot connect to TLSv1.2 servers

  • OPENDJ-5496: DS fails to reconnect to an RS, disconnecting in handshake phase, after system restart

  • OPENDJ-5481: ERR_OPERATION_NOT_FOUND_IN_PENDING message used twice in different contexts

  • OPENDJ-5406: Duplicate entry DNs if entry is deleted and then added during export-ldif or dsreplication initialize

  • OPENDJ-5293: Proxy: Replication Service Discovery Mechanism logs WARNING

  • OPENDJ-5272: "idle-time-limit" global configuration property has no effect

  • OPENDJ-5210: Possible memory-leak if request received while bind in progress

  • OPENDJ-5140: PersistentSearch heap usage grows

  • OPENDJ-5137: Reading compressed or encrypted entries fails to close the InflaterInputStream

  • OPENDJ-5115: ldappasswordmodify fails, NPE in PasswordPolicyState updatePasswordHistory

  • OPENDJ-4967: Rest2ldap UndeliverableException occurs when a referenced entity cannot be fetched

  • OPENDJ-4947: SASL DIGEST-MD5: bind request failed with protocol error

  • OPENDJ-4881: Updates via Rest2ldap fail if record does not contain the necessary object class

  • OPENDJ-4852: Backup with --backupAll misses a few backends

  • OPENDJ-4625: Changelog range searches miss entries

  • OPENDJ-4589: dsconfig --offline is not case-insensitive

  • OPENDJ-4325: Changelog searches requesting changelogCookie are very slow

  • OPENDJ-4229: status command with keystore options throws NullPointerException

  • OPENDJ-3480: Updating schema backend properties while it is enabled leaves schema backend in broken state

  • OPENDJ-3343: Invalid Conflict resolution on Add sequence when Parent & Child are added on different replica

  • OPENDJ-3341: REST to LDAP gateway: HTTP response for API description is empty

  • OPENDJ-3153: REST to LDAP gateway: changing password fails when using proxied authorization

  • OPENDJ-2356: verify-index displays an inappropriate error message when run in online mode

DS 6.0.0

  • OPENDJ-4983: IllegalStateException in change number indexer

  • OPENDJ-4943: NullPointerException in BackupManager.java when backup --hash is used offline

  • OPENDJ-4845: Crypto manager uses TLSv1, fails if admin connector ssl-protocol is TLSv1.2

  • OPENDJ-4823: Adding a third replica breaks key ordering of the changelogDb

  • OPENDJ-4729: WorkerThread is blocked in BlockingBackpressureOperator after disconnection

  • OPENDJ-4725: Cannot reset change-log change number

  • OPENDJ-4598: Replication Server cursoring through obsolete replica ID’s causing high CPU spin

  • OPENDJ-4587: Replication: Medium consistency point frozen when a DS+RS is unconfigured or a DS+RS is stopped

  • OPENDJ-4559: All worker threads blocked on ReentrantReadWriteLock in GroupManager

  • OPENDJ-4557: isMemberOf search result excludes entries' operational attributes

  • OPENDJ-4555: Server not responding

  • OPENDJ-4533: NullPointerException in TTL reaper

  • OPENDJ-4497: ttl-enabling an index requires a restart

  • OPENDJ-4485: MODRDN with a blank newrdn: value is not rejected.

  • OPENDJ-4464: Collective attributes do not consider if an attribute is single or multi-valued.

  • OPENDJ-4296: Rebuilding index on two backends at the same time causes NPE

  • OPENDJ-4210: Cannot import/export LDIF in offline mode after configuring Password Synchronization Plugin

  • OPENDJ-4125: Extremely poor performance under connect/disconnect load and eventual port exhaustion

  • OPENDJ-3896: Change number indexer exits due to uncaught IllegalStateException

  • OPENDJ-3878: Example plugin POM has wrong parent and is missing repositories

  • OPENDJ-3504: LDAP bytesRead/Written and SNMP counters (dsApplIfInBytes and dsApplIfOutBytes) are not incremented

  • OPENDJ-3437: Cannot delete access log publisher when it is disabled

  • OPENDJ-1881: OPENDJ JMX monitoring report statistics as type String instead of Number

  • OPENDJ-1158: rebuild-index leaves backend offline if a backup is running

  • OPENDJ-934: Changes to RS window-size property require a server restart

  • OPENDJ-431: Server-side sort control only works on result sets of less than 100000 entries

DS 5.5.0

  • OPENDJ-4341: setup with production mode with java 9

  • OPENDJ-4316: HTTP Connector leaks Session objects

  • OPENDJ-4275: Changelog searches cursor through inappropriate replica DBs

  • OPENDJ-4234: Poor changelog search performance using changenumber ranges

  • OPENDJ-4228: status command with keystore options throws ArrayIndexOutOfBoundsException

  • OPENDJ-4178: Performance drop with complex subtree searches between 2.x and 3.5.1/4.0.0

  • OPENDJ-4125: Extremely poor performance under connect/disconnect load and eventual port exhaustion

  • OPENDJ-4115: build and publish missing changes gets confused with non-local changes

  • OPENDJ-4011: Setup requires TLS to be enabled when using --productionMode

  • OPENDJ-4007: Referential Integrity plugin checks all modifications when run as preModifyOperation

  • OPENDJ-4006: forgerock-je included in releases does not work with Azul Zulu

  • OPENDJ-3966: The Bcrypt storage scheme displays the wrong syntax Range and default for the bcrypt-cost

  • OPENDJ-3963: JMXClientConnections are leaked

  • OPENDJ-3931: Replication fails to propagate all changes added after a backup/restore to a newly created instance

  • OPENDJ-3904: Delivery includes QuickSetup.app and Uninstall.app files for commands that were removed

  • OPENDJ-3886: Modifying Json File-Based Access Logger configuration can cause a corrupt log record

  • OPENDJ-3868: Proxied persistent searches are not cancelled/abandoned when the client abandons them or disconnects

  • OPENDJ-3825: Spring daylight savings change can break recurring tasks

  • OPENDJ-3645: SASL DIGEST-MD5: "digest-uri" parameter is not taken into account

  • OPENDJ-3643: On Windows "java.properties" does not support values containing "=" character

  • OPENDJ-3507: After upgrading a 2.6.2 server to 3.5.1 server is spinning at 93% CPU

  • OPENDJ-3471: ldifsearch command fails to consume @objectclass notation in attribute list

  • OPENDJ-3380: Creating a backend with null base DN can render the instance unusable

  • OPENDJ-2850: SDK SASL integrity/confidentiality violates protocol

  • OPENDJ-2842: Load balancing algorithms are not optimum after failure of a connection factory

  • OPENDJ-2190: Replicas cannot always keep up with sustained high write throughput

  • OPENDJ-1135: DS sometimes fails to connect to RS after server restart

  • OPENDJ-609: Replicas out of sync after add/delete operations in sustained stress testing