---
title: Fixes in 6.5.x
description: Cumulative list of important fixes in PingDS 6.5.x maintenance releases.
component: pingds
version: release-notes
page_id: pingds::fixes-6.5
canonical_url: https://docs.pingidentity.com/pingds/release-notes/fixes-6.5.html
revdate: 2025-11-03T13:32:20Z
keywords: ["LDAP", "Upgrade"]
section_ids:
  ds_6_5_6: DS 6.5.6
  ds_6_5_5: DS 6.5.5
  ds_6_5_4: DS 6.5.4
  ds_6_5_3: DS 6.5.3
  ds_6_5_2: DS 6.5.2
  ds_6_5_1: DS 6.5.1
  ds_6_5_0: DS 6.5.0
---

# Fixes in 6.5.x

This page lists the cumulative fixes in DS 6.5.x releases:

## DS 6.5.6

* OPENDJ-8698: DS should write config archive files in a crash consistent way

* OPENDJ-8845: Bad encoding of PersistentSearch's changeType of the EntryChangeNotificationResponseControl

* OPENDJ-7970: Ensure that DS is crash resilient for all runtime file changes

* OPENDJ-7761: DS sporadically hangs while reconnecting to an RS

* OPENDJ-7653: replication issue in the cloud after ldapadd

* OPENDJ-6349: "RuntimeException: Should never happen" in HttpClientConnection

## DS 6.5.5

* OPENDJ-8028: Prometheus monitoring doesn't work with Telegraf

* OPENDJ-7851: Supportextract tool: clobbers the server.out filehandle when kill -3 is used.

* OPENDJ-7818: Package based upgrade does not support instances running as non-root

* OPENDJ-7737: ConfigurationFramework#initialize0 changes the class loader without clearing the map of registered jar files

* OPENDJ-7699: Supportextract throws NoSuchElementException when the server.pid file is empty

* OPENDJ-7655: Replaying multiple MODIFYDN operations is very slow

* OPENDJ-7481: JSON logs do not contain proxy auth DN

* OPENDJ-7450: The startswith (sw) operator on indexed JSON attribute is slow

* OPENDJ-6992: Persistent search from IDM is blocking worker threads.

* OPENDJ-5927: Server stuck on a DS trying to reconnect to an RS

* CMON-109: Prometheus metrics contains more than one HELP metric line for the same metric

## DS 6.5.4

* OPENDJ-7414: AM: Persistent search with changesOnly gets cancelled by a request timeout

* OPENDJ-7286: Changelog searches can start with incorrect cursors

* OPENDJ-7232: StackOverflowError in Tomcat logs when using external DS

* OPENDJ-7176: Filters with malformed attribute descriptions cannot be parsed

* OPENDJ-7115: DS does not start when deployed with ISTIO side car container in the GCP K8s cloud

* OPENDJ-7031: VLVIndex are incorrectly rebuilt by rebuild-index

* OPENDJ-7020: Rebuild-index offline ignores rebuild-index.offline.java-args

* OPENDJ-7016: Status command outputs malformed JSON in script friendly mode

* OPENDJ-7014: Some operational attributes are not replicated when a restore --dry-run is used against an online server

* OPENDJ-6994: Strict-format-country-string does not affect the server

* OPENDJ-6970: Tamil locales cause illegal matchingRules values

* OPENDJ-6910: Supportextract --maxLogFiles gathers logs but not the latest logs

* OPENDJ-6812: Client tools fail in offline mode when Account Status Notification Handlers are used

* OPENDJ-6711: Replication status reports The provided value "5277383431" could not be parsed as an integer.

* OPENDJ-6498: Profile creation stores AM cts and config global aci's in base64 format

* OPENDJ-6377: Replication replay: issues with ReplaySynchronizer

* OPENDJ-6309: Search operation on whole tree skips nodes if there are DNs without backends in the directory information tree (DIT)

* OPENDJ-5851: ACI: getEffectiveRights with authz do not print out acl rights

* OPENDJ-5439: LeastRequestsStrategy should distribute load randomly when idle

* OPENDJ-4058: IDM Account Status notification handler doesn't look for certificates correctly

## DS 6.5.3

* OPENDJ-6930: Increase interoperability with HSMs when protecting and distributing symmetric keys

* OPENDJ-6929: Support storing ads-certificate key-pair and other instance public keys in an HSM

* OPENDJ-6892: Incorrect units for two updates metrics

* OPENDJ-6830: The supportextract tool should capture stack traces in server.out with SIGQUIT

* OPENDJ-6822: Reduce number of expensive seeks in BlockLogReader

* OPENDJ-6820: dsconfig "-w -" option doesn't prompt for password

* OPENDJ-6787: Changelog searches are extremely slow if any cursors are exhausted

* OPENDJ-6781: example-plugin fails to build on 6.5 branch

* OPENDJ-6778: Proxy server mishandles abandon requests

* OPENDJ-6733: SMTP handler sends incorrect email when account status is modified by manually updating ds-pwp-account-disabled attribute

* OPENDJ-6708: The supportextract tool fails with an error parsing json

* OPENDJ-6695: Heap slowly fills with DomainDBCursors

* OPENDJ-6675: The supportextract tool cannot collect gc files when there are dots in the path

* OPENDJ-6557: IDM Password Sync plugin induces 100% CPU in Apache Http Components when used with JDK 11

* OPENDJ-6540: The supportextract tool hangs when loggers are configured to use /dev/stdout

* OPENDJ-6527: server does not return password policy responses with only warnings

* OPENDJ-6521: setup checks admin port despite options --skipPortCheck --doNotStart

* OPENDJ-6512: Problems when work queue fills

* OPENDJ-6474: REST: some requests fails when stressing embedded http endpoint with Gatling

* OPENDJ-6464: IsMemberOfVirtualAttributeProvider does not process subordinate nested groups

* OPENDJ-6422: Make the supportextract tool compliant with JVM unified logging framework

* OPENDJ-6394: Update forgerock-commons for 6.5.3

* OPENDJ-6371: The supportextract tool generates data but returns 1 instead of 0 on Windows

* OPENDJ-6240: DS not honoring per user resource limits when processing RESTful operation requests

* OPENDJ-6163: The supportextract tool needs to gather archived-configs

* OPENDJ-5960: The supportextract tool should gather basic changelogDb information

* OPENDJ-5895: Unable to rebuild indexes when the Error Log Handler is assigned to a password policy

* OPENDJ-5600: The supportextract tool should capture stack traces with jcmd

## DS 6.5.2

* OPENDJ-6248: NPE when running supportextract without monitoring user configured

* OPENDJ-6235: Stale ds-sync-hist attribute values reappear in the entry after replication is unconfigured

* OPENDJ-6222: SMTP messages are sometimes not encoded with the correct charset

* OPENDJ-6217: NPE when running supportextract tool on upgraded instance

* OPENDJ-6196: HTTP connection handler continues to listen to 0.0.0.0 after setting listen-address

* OPENDJ-6173: cn=monitor memory pool stats do not get updated properly over time

* OPENDJ-6170: supportextract tool misses rotated or non-standard GC log files

* OPENDJ-6128: supportextract tool needs to gather Profile and Data Information

* OPENDJ-6125: supportextract tool needs to gather the rootUser and monitorUser ldif files

* OPENDJ-5972: bin/status command fails when using a french locale

## DS 6.5.1

* OPENDJ-6089: TelephoneNumber syntax in DN creates an incorrect entry DN value

* OPENDJ-6039: AM Config Store Profile doesn't have enough access in ProductionMode when upgrading AM

* OPENDJ-5979: Server does not validate sum of memory used by JE backend caches after upgrade

* OPENDJ-5977: Can not use custom base dn with cts profile because organization unit is forced

* OPENDJ-5955: Missing version fallback feature for profiles

* OPENDJ-5843: Rebuild-index failed with ConfigException on db-cache-size

* OPENDJ-5801: ldap operation fails with "49 Invalid Credentials" when bindDN of 'cn=Directory Manager' is supplied in a properties file

* OPENDJ-5794: JE db-cache-size settings conflicts with shared cache

* OPENDJ-5793: Replication on windows: ChangelogException while adding entries

* OPENDJ-5727: Add optional base DN for each profile

* OPENDJ-5726: Proxy distribution has trouble scaling writes to 3 shards

* OPENDJ-5675: JDK11: supportextract tool cannot find jstack command

* OPENDJ-5611: Change number indexing can lag behind replication under extreme load

* OPENDJ-5584: Server does not validate sum of memory used by JE backend caches in all cases

* OPENDJ-5423: Incorrectly reported missing parent entries cause import-ldif and index rebuilds to fail

## DS 6.5.0

* OPENDJ-5606: Upgrade to DS 6.0 fails if multiple filesystems are involved

* OPENDJ-5594: StackOverflowError with groupOfURLs when isMemberOf is requested

* OPENDJ-5582: LdapClientSocket connection leaked when handshake fails

* OPENDJ-5558: SDK: LdapUrl is not IPv6 clean

* OPENDJ-5553: Rest2Ldap cannot connect to TLSv1.2 servers

* OPENDJ-5496: DS fails to reconnect to an RS, disconnecting in handshake phase, after system restart

* OPENDJ-5481: ERR\_OPERATION\_NOT\_FOUND\_IN\_PENDING message used twice in different contexts

* OPENDJ-5406: Duplicate entry DNs if entry is deleted and then added during export-ldif or dsreplication initialize

* OPENDJ-5293: Proxy: Replication Service Discovery Mechanism logs WARNING

* OPENDJ-5272: "idle-time-limit" global configuration property has no effect

* OPENDJ-5210: Possible memory-leak if request received while bind in progress

* OPENDJ-5140: PersistentSearch heap usage grows

* OPENDJ-5137: Reading compressed or encrypted entries fails to close the InflaterInputStream

* OPENDJ-5115: ldappasswordmodify fails, NPE in PasswordPolicyState updatePasswordHistory

* OPENDJ-4967: Rest2ldap UndeliverableException occurs when a referenced entity cannot be fetched

* OPENDJ-4947: SASL DIGEST-MD5: bind request failed with protocol error

* OPENDJ-4881: Updates via Rest2ldap fail if record does not contain the necessary object class

* OPENDJ-4852: Backup with --backupAll misses a few backends

* OPENDJ-4625: Changelog range searches miss entries

* OPENDJ-4589: dsconfig --offline is not case-insensitive

* OPENDJ-4325: Changelog searches requesting changelogCookie are very slow

* OPENDJ-4229: status command with keystore options throws NullPointerException

* OPENDJ-3480: Updating schema backend properties while it is enabled leaves schema backend in broken state

* OPENDJ-3343: Invalid Conflict resolution on Add sequence when Parent & Child are added on different replica

* OPENDJ-3341: REST to LDAP gateway: HTTP response for API description is empty

* OPENDJ-3153: REST to LDAP gateway: changing password fails when using proxied authorization

* OPENDJ-2356: verify-index displays an inappropriate error message when run in online mode