--- title: Deprecated description: Lists functionality deprecated in PingDS releases that is likely to be removed in a future version. component: pingds version: release-notes page_id: pingds::deprecation canonical_url: https://docs.pingidentity.com/pingds/release-notes/deprecation.html revdate: 2026-04-20T12:00:00Z keywords: ["Compatibility", "LDAP"] section_ids: deprecated-81: Since DS 8.1 deprecated-80: Since DS 8.0 deprecated-75: Since DS 7.5.1 since_ds_7_5: Since DS 7.5 deprecated-74: Since DS 7.4.2 since_ds_7_4: Since DS 7.4 deprecated-73: Since DS 7.3.5 since_ds_7_3: Since DS 7.3 deprecated-72: Since DS 7.2.5 since_ds_7_2: Since DS 7.2 deprecated-71: Since DS 7.1.8 since_ds_7_1_3: Since DS 7.1.3 since_ds_7_1: Since DS 7.1 deprecated-70: Since DS 7.0 since_ds_6_5: Since DS 6.5 --- # Deprecated The functionality listed here is deprecated, and likely to be removed in a future release. ## Since DS 8.1 * Commands using keystores and truststores now indicate the path, type, and provider with separate options: | Deprecated option | Use this instead | | ---------------------------------------- | -------------------------------------------------------------------------- | | `--providerArg {argument}` | `--keyStoreProviderArg {argument}` or `--trustStoreProviderArg {argument}` | | `--providerClass {class}` | `--keyStoreProviderClass {class}` or `--trustStoreProviderClass {class}` | | `--providerName {name}` | `--keyStoreProviderName {name}` or `--trustStoreProviderName {name}` | | `--useJavaKeyStore {keyStorePath}` | `--keyStorePath {keyStorePath} --keyStoreType JKS` | | `--useJavaTrustStore {trustStorePath}` | `--trustStorePath {trustStorePath} --trustStoreType JKS` | | `--useJceKeyStore {keyStorePath}` | `--keyStorePath {keyStorePath} --keyStoreType JCEKS` | | `--useJceTrustStore {trustStorePath}` | `--trustStorePath {trustStorePath} --trustStoreType JCEKS` | | `--useJvmTrustStore` | `--trustStoreType JVM` | | `--usePkcs11KeyStore` | `--keyStoreType PKCS11` | | `--usePkcs12KeyStore {keyStorePath}` | `--keyStorePath {keyStorePath} --keyStoreType PKCS12` | | `--usePkcs12TrustStore {trustStorePath}` | `--trustStorePath {trustStorePath} --trustStoreType PKCS12` | * The following environment variables names are changing: | Deprecated environment variable | Use this instead | | ------------------------------- | ---------------- | | `OPENDJ_JAVA_ARGS` | `DS_JAVA_ARGS` | | `OPENDJ_JAVA_BIN` | `DS_JAVA_BIN` | | `OPENDJ_JAVA_HOME` | `DS_JAVA_HOME` | * The DS cloud storage plugin is deprecated. Mount your cloud storage as a directory in the local filesystem and back up to it. Learn more in [Cloud Storage](https://docs.pingidentity.com/pingds/8.1/maintenance-guide/backup-restore.html#cloud-storage). * Support for creating your own setup profiles is deprecated. Use `dsconfig` and the other commands located with the DS server to script the configuration instead. You can use the `dsconfig --batch` or `dsconfig --batchFilePath` option to run a set of configuration changes in a single command. * Support for Graphite is deprecated. Use [Prometheus](https://prometheus.io/) and the PromQL query language instead. ## Since DS 8.0 * The HTTP OAuth2 OpenAM authorization scheme is deprecated. * The `ds-rlim-lookthrough-limit` setting is no longer deprecated. * The following table lists deprecated metrics and their replacements: | Deprecated metric | Use this instead | | ------------------------------------- | -------------------------------------- | | `ds-mon-backend-degraded-index` | `ds-mon-backend-untrusted-index` | | `ds-mon-backend-degraded-index-count` | `ds-mon-backend-untrusted-index-count` | | `ds_backend_degraded_index_count` | `ds_backend_untrusted_index_count` | ## Since DS 7.5.1 * The `setup-profile --instancePath` is deprecated. Run the `setup-profile` command located with the server instance. ## Since DS 7.5 * The Prometheus endpoint configuration property `legacy-format` is deprecated. Update your applications to work with the [Prometheus text format](https://prometheus.io/docs/instrumenting/exposition_formats/#text-based-format). * To prepare for compliance with the OpenMetrics standard, all Prometheus counter metrics end in `_total` going forward. The following table lists deprecated metrics with their replacements: | Deprecated counter | Use this instead | | -------------------------------------------------------------- | -------------------------------------------------------------------- | | `ds_connection_handlers_ldap_abandoned_requests` | `ds_connection_handlers_ldap_abandoned_requests_total` | | `ds_replication_replica_replayed_internal_updates` | `ds_replication_replica_replayed_internal_updates_total` | | `ds_replication_replica_replayed_updates_conflicts_resolved` | `ds_replication_replica_replayed_updates_conflicts_resolved_total` | | `ds_replication_replica_replayed_updates_conflicts_unresolved` | `ds_replication_replica_replayed_updates_conflicts_unresolved_total` | | `ds_replication_replica_sent_updates` | `ds_replication_replica_sent_updates_total` | | `ds_replication_replica_updates_already_in_progress` | `ds_replication_replica_updates_already_in_progress_total` | ## Since DS 7.4.2 * The `dsrepl start-disaster-recovery` and `dsrepl end-disaster-recovery` commands are deprecated. For instructions on what to use, refer to the [disaster recovery](https://docs.pingidentity.com/pingds/7.4/maintenance-guide/disaster-recovery.html) documentation instead. ## Since DS 7.4 * Support for REST to LDAP is deprecated in favor of HDAP for future applications. REST to LDAP remains supported [as documented for DS 7.3](https://docs.pingidentity.com/pingds/7.3/rest-guide/preface.html). For details about HDAP, refer to [Use HDAP](https://docs.pingidentity.com/pingds/7.4/rest-guide/preface.html). * Support for `/admin/config` is deprecated. Use the `dsconfig` command to change the DS server configuration. * Support for `/metrics/api` is deprecated. Use Prometheus for HTTP monitoring instead. For details, refer to [HTTP-based monitoring](https://docs.pingidentity.com/pingds/7.4/monitoring-guide/http-monitoring.html). * Support for the backwards-compatible [file-based access log publisher](https://docs.pingidentity.com/pingds/7.4/logging-guide/ldap-access.html#log-ldap-access) is deprecated. Use the JSON format log publishers, which new DS servers use by default since the 5.0 release. * Support for the JMX connection handler is deprecated. JMX MBeans remain supported. ## Since DS 7.3.5 * The `dsrepl start-disaster-recovery` and `dsrepl end-disaster-recovery` commands are deprecated. For instructions on what to use, refer to the [disaster recovery](https://docs.pingidentity.com/pingds/7.3/maintenance-guide/disaster-recovery.html) documentation instead. ## Since DS 7.3 This release does not deprecate any functionality. ## Since DS 7.2.5 * The `dsrepl start-disaster-recovery` and `dsrepl end-disaster-recovery` commands are deprecated. For instructions on what to use, refer to the [disaster recovery](https://docs.pingidentity.com/pingds/7.2/maintenance-guide/disaster-recovery.html) documentation instead. ## Since DS 7.2 * The `ds-pwp-last-login-time` attribute, which has directory string syntax, is deprecated. Use the new `ds-last-login-time` attribute instead. For an example, refer to [Active accounts](https://docs.pingidentity.com/pingds/7.2/ldap-guide/search-ldap.html#extensible-match-search). * Support for CSV, Elasticsearch, JDBC, JMS, Splunk, and Syslog access logs is deprecated. * The DSML gateway is deprecated. For deployments that require HTTP access to directory data, consider HDAP as an alternative. ## Since DS 7.1.8 * The `dsrepl start-disaster-recovery` and `dsrepl end-disaster-recovery` commands are deprecated. For instructions on what to use, refer to the disaster recovery documentation instead. ## Since DS 7.1.3 * The following Prometheus counter metrics are deprecated: * `ds_connection_handlers_ldap_abandoned_requests{ldap_handler}` * `ds_replication_replica_replayed_internal_updates{domain_name,server_id}` * `ds_replication_replica_replayed_updates_conflicts_resolved` * `ds_replication_replica_replayed_updates_conflicts_unresolved` * `ds_replication_replica_sent_updates` * `ds_replication_replica_updates_already_in_progress{domain_name,server_id}` They are expected to be replaced with metrics whose names end in `_total` in a future release. ## Since DS 7.1 * The previous format for password file options is deprecated. The options remain supported until removal, but are now hidden in online help. This affects the following options: | Deprecated form | Use this form | | ----------------------------- | ------------------------------------------------------------ | | `--bindPasswordFile` | `--bindPassword:file` | | `--deploymentKeyPasswordFile` | `--deploymentIdPassword:file` | | `--keyStorePasswordFile` | `--keyStorePassword:file``--keyStorePasswordFilePath`(1) | | `--monitorUserPasswordFile` | `--monitorUserPassword:file` | | `--rootUserPasswordFile` | `--rootUserPassword:file` | | `--trustStorePasswordFile` | `--trustStorePassword:file``--trustStorePasswordFilePath`(1) | (1) The `--keyStorePasswordFilePath` and `--trustStorePasswordFilePath` options apply only to the `setup`. They retain the path to the file in the configuration. The other options copy the cleartext password at setup time. * The `dsrepl add-local-server-to-pre-7-0-topology` command `--masterKeyPairCertAlias` and `--rootCaCertAlias` options are deprecated. The command now finds the certificates by introspecting the configuration. The options are now hidden in online help. ## Since DS 7.0 * Support for SNMP. DS software provides better options for monitoring servers, including support for Prometheus, Graphite, and LDAP. For details, refer to *Monitoring*. DS server software also includes a sample monitoring dashboard for Prometheus and Grafana, which is described in `opendj/samples/grafana/README.md`. * The `pwdValidatorPolicy` object class. For subentry password policies, use the object classes derived from `ds-pwp-validator` instead. * Reversible password storage schemes, and the `cn=admin data` base DN and `adminData` backend used to support them. This includes the following password storage schemes: * `3DES` * `AES` * `Blowfish` * `RC4` The `3DES`, `Blowfish`, and `RC4` are supported for compatibility purposes only. If you must use reversible encryption, use the `AES` scheme. * The `ds-rlim-lookthrough-limit` setting is deprecated. ## Since DS 6.5 * Regarding replication monitoring metrics, including those deprecated since 6.0: | | | | - | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | | In mixed topologies, a directory server version 6 or earlier connected to a replication server version 6.5 or later can't consume messages about other servers going offline. The monitoring framework reflects this as a delay on the directory server that could not consume the message.The delay is calculated correctly again once all servers in the topology are upgraded to at least version 6.5, or when the offline server comes back online and has seen a change to directory data. | Monitor replication delay instead of using the deprecated metrics. For details, refer to *Replication delay (LDAP)* or *Replication delay (Prometheus)*.