---
title: Known issues
description: Lists known issues open at the time of each PingDS release, including Java version incompatibilities and other unresolved defects.
component: pingds
version: release-notes
page_id: pingds::known-issues
canonical_url: https://docs.pingidentity.com/pingds/release-notes/known-issues.html
revdate: 2026-04-22T12:00:00Z
keywords: ["LDAP", "Upgrade"]
section_ids:
  known-issues-81: DS 8.1.0
  known-issues-80: DS 8.0.3
  ds_8_0_2: DS 8.0.2
  ds_8_0_1: DS 8.0.1
  ds_8_0_0: DS 8.0.0
  known-issues-75: DS 7.5.3
  known-issues-74: DS 7.4.4
  known-issues-73: DS 7.3.6
  known-issues-72: DS 7.2.5
  known-issues-71: DS 7.1.8
  known-issues-70: DS 7.0.2
  ds_6_5_6: DS 6.5.6
---

# Known issues

|   |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               |
| - | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
|   | Due to a change to the Java platform between versions 11 and 17, the keys you generate with the `dskeymgr` and `setup` commands using Java 11 are incompatible with keys generated using Java 17 and later.Using different Java versions is a problem if you use deployment ID-based CA certificates. Replication breaks, for example, when you use the `setup` command for a new server with a more recent version of Java than was used to set up existing servers.Learn how to resolve the issue in [Incompatible Java versions](https://docs.pingidentity.com/pingds/8.1/maintenance-guide/troubleshooting.html#troubleshoot-incompatible-java-versions). |

The following important issues remained open at the time of the latest release for each version.

## DS 8.1.0

| Issue ID     | Summary                                                                                | Status |
| ------------ | -------------------------------------------------------------------------------------- | ------ |
| OPENDJ-12257 | dsconfig --batch and --batchfile don't strip whitespace after backslash before newline | Open   |
| OPENDJ-11821 | JE exceptions under high modification load with Java 25.0.2                            | Open   |

## DS 8.0.3

No known issues at the time of release.

## DS 8.0.2

No known issues at the time of release.

## DS 8.0.1

No known issues at the time of release.

## DS 8.0.0

No known issues at the time of release.

## DS 7.5.3

| Issue ID     | Summary                                                                                                    | Status1        |
| ------------ | ---------------------------------------------------------------------------------------------------------- | -------------- |
| OPENDJ-11486 | Index processing failure: IndexOutOfBoundsException in EntryContainer.java when processing complex filters | Fixed in 8.0.1 |
| OPENDJ-11191 | Upgrade fails in Windows environment if directory path contains spaces                                     | Fixed in 8.0.0 |
| OPENDJ-11001 | manage-tasks stuck after creating backup and backup purge                                                  | Fixed in 8.0.0 |
| OPENDJ-8093  | Stale replica information returned from cn=monitor                                                         | Open           |

1 Upgrade to the listed version or later to get the fix.

## DS 7.4.4

| Issue ID     | Summary                                                                                                                         | Status1               |
| ------------ | ------------------------------------------------------------------------------------------------------------------------------- | --------------------- |
| OPENDJ-10674 | Dynamic groups not initialized after restart in platform deployment                                                             | Fixed in 7.5.2, 8.0.0 |
| OPENDJ-10083 | Creation of password validator fails if password-character-set:punct characters not surrounded by single quotes at command line | Open                  |
| OPENDJ-10010 | HTTP/HTTPS connection handler only creates one listener address when multiple addresses are specified                           | Fixed in 8.0.0        |
| OPENDJ-9812  | Schema updates are not crash resilient                                                                                          | Open                  |
| OPENDJ-8093  | Stale replica information returned from cn=monitor                                                                              | Open                  |

1 Upgrade to the listed version or later to get the fix.

## DS 7.3.6

| Issue ID     | Summary                                                                                            | Status1        |
| ------------ | -------------------------------------------------------------------------------------------------- | -------------- |
| OPENDJ-10532 | The case of a baseDN can be changed once replicated                                                | Fixed in 7.5.2 |
| OPENDJ-10171 | etag in schema config entry leads to schema violation error when attempting to update cn=schema    | Fixed in 7.5.0 |
| OPENDJ-9913  | Bind via REST API ignores force-change-on-add in password policy                                   | Fixed in 7.5.0 |
| OPENDJ-9812  | Schema updates are not crash resilient                                                             | Open           |
| OPENDJ-9544  | Searches for attributes that do not exist in schema still take time                                | Fixed in 7.4.0 |
| OPENDJ-9524  | create-rc-script: systemd service should run start-ds/stop-ds, and not write a wrapper init script | Fixed in 7.4.0 |
| OPENDJ-9268  | Cannot store zero-length mail attribute values                                                     | Open           |
| OPENDJ-8093  | Stale replica information returned from cn=monitor                                                 | Open           |

1 Upgrade to the listed version or later to get the fix.

## DS 7.2.5

| Issue ID     | Summary                                                                                                                           | Status1               |
| ------------ | --------------------------------------------------------------------------------------------------------------------------------- | --------------------- |
| OPENDJ-10010 | HTTP/HTTPS connection handler only creates one listener address when multiple addresses are specified                             | Fixed in 8.0.0        |
| OPENDJ-9790  | Cannot create GeneralizedTimes with large fractional values                                                                       | Fixed in 7.3.3, 7.4.0 |
| OPENDJ-9379  | Restoring a backup fails if the 02-config.ldif schema file is missing                                                             | Open                  |
| OPENDJ-9369  | RxCachedThreadScheduler threads increase over time                                                                                | Open                  |
| OPENDJ-9300  | DS 7.3 upgrade requires a full index rebuild                                                                                      | Fixed in 7.3.0        |
| OPENDJ-9268  | Cannot store zero-length mail attribute values                                                                                    | Open                  |
| OPENDJ-9250  | The max-allowed-client-connections limit should not apply to the admin connector                                                  | Fixed in 7.3.0        |
| OPENDJ-9213  | The dsconfig list-replication-domains output contains redundant columns                                                           | Fixed in 7.3.0        |
| OPENDJ-9167  | Reading isMemberOf after adding, deleting, or renaming a static group can block for a long time when there are many static groups | Fixed in 7.3.0        |
| OPENDJ-9128  | Entry cache and group manager use too much memory                                                                                 | Fixed in 7.3.0        |
| OPENDJ-9000  | Missing RS - RS heartbeats are not detected                                                                                       | Fixed in 7.3.0        |
| OPENDJ-8849  | An isolated DS (no RS) should return UNAVAILABLE instead of UNWILLING\_TO\_PERFORM                                                | Fixed in 7.4.0        |
| OPENDJ-8233  | RS connection error reason is not logged when hostname is not resolvable                                                          | Fixed in 7.3.0        |
| OPENDJ-8093  | Stale replica information returned from cn=monitor                                                                                | Open                  |
| OPENDJ-7925  | The searchrate tool does not retrieve data when used simultaneously with the modrate tool on groups                               | Fixed in 7.3.0        |
| OPENDJ-7844  | Difficult to override standard LDAP schema defined in 00-core.ldif                                                                | Open                  |
| OPENDJ-7763  | Proxy service discovery with RS-only and DS-only seems not to route search                                                        | Open                  |
| OPENDJ-7743  | Setting DN-valued properties to a config expression causes startup to fail                                                        | Open                  |
| OPENDJ-7741  | dsrepl add-local-server-to-pre-7-0-topology requires a base DN for an RS                                                          | Open                  |
| OPENDJ-7219  | PreParseAddOperation cannot remove attributes                                                                                     | Open                  |
| OPENDJ-6579  | Schema is not populated to remote instances if added before enabling replication                                                  | Open                  |
| OPENDJ-6468  | ds-mon-\* Prometheus metrics are labeled as gauge but seem to be counters                                                         | Open                  |
| OPENDJ-6022  | PTA to Active Directory returns more than one entry when only one exists                                                          | Open                  |
| OPENDJ-3409  | Retention and rotation policies do not work with CAUD handlers                                                                    | Fixed in 7.3.0        |

1 Upgrade to the listed version or later to get the fix.

## DS 7.1.8

| Issue ID     | Summary                                                                                                                                        | Status1                      |
| ------------ | ---------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------- |
| OPENDJ-10553 | DN syntax does not perform strict enforcement of country codes in RDNs if enabled                                                              | Open                         |
| OPENDJ-10532 | The case of a baseDN can be changed once replicated                                                                                            | Fixed in 8.0.0               |
| OPENDJ-9790  | Cannot create GeneralizedTimes with large fractional values                                                                                    | Fixed in 7.3.3, 7.4.0        |
| OPENDJ-9250  | The max-allowed-client-connections limit should not apply to the admin connector                                                               | Fixed in 7.3.0               |
| OPENDJ-9213  | The dsconfig list-replication-domains output contains redundant columns                                                                        | Fixed in 7.3.0               |
| OPENDJ-9200  | Backup process logs incorrect number of jdb files                                                                                              | Fixed in 7.2.3, 7.3.0        |
| OPENDJ-9158  | AM User/CTS affinity failover doesn't happen when DS's disk volume is detached                                                                 | Fixed in 7.2.3, 7.3.3, 7.4.0 |
| OPENDJ-9033  | DS refuses to start and throws an NPE when a subordinate-base-dn is used                                                                       | Fixed in 7.2.1, 7.3.0        |
| OPENDJ-8917  | ReplicationBroker.java swallowed important debugging info                                                                                      | Fixed in 7.2.1, 7.3.0        |
| OPENDJ-8870  | RFC2307bis schema is different from the internet-draft                                                                                         | Fixed in 7.2.0               |
| OPENDJ-8831  | Log when and why the ChangeNumberIndexer cannot move forward                                                                                   | Fixed in 7.2.1, 7.3.0        |
| OPENDJ-8829  | Error messages incorrectly mentions cn=System,cn=monitor                                                                                       | Fixed in 7.2.0               |
| OPENDJ-8808  | Potential deadlock between overlapping rename operations                                                                                       | Fixed in 7.2.1, 7.3.0        |
| OPENDJ-8805  | dsconfig exits when setting the "bootstrap-replication-server" property with a \<null> value in the "Replication Service Discovery Mechanism". | Fixed in 7.2.0               |
| OPENDJ-8778  | Setup option --trustStorePassword:file behaves differently than --trustStorePasswordFile                                                       | Fixed in 7.2.0               |
| OPENDJ-8473  | Upgrade does not migrate ds-cfg-je-property values                                                                                             | Fixed in 7.2.0               |
| OPENDJ-8280  | DS will not start when using a non-US locale after changing config                                                                             | Fixed in 7.2.0               |
| OPENDJ-8233  | RS connection error reason is not logged when hostname is not resolvable                                                                       | Fixed in 7.3.0               |
| OPENDJ-8093  | Stale replica information returned from cn=monitor                                                                                             | Open                         |
| OPENDJ-8008  | OutOfMemoryException in subtree delete                                                                                                         | Fixed in 7.2.0               |
| OPENDJ-7942  | The server ignores critical VLV request controls when falling back to an unindexed search                                                      | Fixed in 7.3.0               |
| OPENDJ-7941  | Client connections to proxy time out after 10 seconds regardless of activity                                                                   | Fixed in 7.2.3, 7.3.0        |
| OPENDJ-7925  | The searchrate tool does not retrieve data when used simultaneously with the modrate tool on groups                                            | Fixed in 7.3.0               |
| OPENDJ-7844  | Difficult to override standard LDAP schema defined in 00-core.ldif                                                                             | Open                         |
| OPENDJ-7837  | Schema replication issues when adding a new server with conflicting schema to an existing topology                                             | Open                         |
| OPENDJ-7788  | dsrepl initialize from 5.5 causes the ReplicationDomain listener to die with an NPE                                                            | Open                         |
| OPENDJ-7763  | Proxy replication service discovery with RS-only and DS-only seems not to route search                                                         | Open                         |
| OPENDJ-7743  | Setting DN-valued properties to a config expression causes startup to fail                                                                     | Open                         |
| OPENDJ-7741  | dsrepl add-local-server-to-pre-7-0-topology requires a base DN for an RS                                                                       | Open                         |
| OPENDJ-7640  | Supportextract does not collect all security stores when several keystores have the same basename                                              | Fixed in 7.2.1, 7.3.0        |
| OPENDJ-7596  | dsbackup has global connection options that do not work with some subcommands                                                                  | Fixed in 7.2.0               |
| OPENDJ-7544  | dsconfig online sometimes triggers a duplicate server IDs error                                                                                | Open                         |
| OPENDJ-7516  | External cn=changelog is not updated while replication initialization is in progress                                                           | Fixed in 7.2.1, 7.3.0        |
| OPENDJ-7219  | PreParseAddOperation cannot remove attributes                                                                                                  | Open                         |
| OPENDJ-6579  | Schema is not populated to remote instances if added before enabling replication                                                               | Open                         |
| OPENDJ-6468  | ds-mon-\* Prometheus metrics are labeled as gauge but seem to be counters                                                                      | Open                         |
| OPENDJ-6022  | PTA to Active Directory returns more than one entry when only one exists                                                                       | Open                         |
| OPENDJ-3409  | Retention and rotation policies do not work with CAUD handlers                                                                                 | Fixed in 7.3.0               |

1 Upgrade to the listed version or later to get the fix.

## DS 7.0.2

| Issue ID    | Summary                                                                                                      | Status1                             |
| ----------- | ------------------------------------------------------------------------------------------------------------ | ----------------------------------- |
| OPENDJ-9790 | Cannot create GeneralizedTimes with large fractional values                                                  | Fixed in 7.3.3, 7.4.0               |
| OPENDJ-9472 | Upgrade does not correctly handle previously patched upgrades                                                | Fixed in 7.1.6, 7.2.3, 7.3.2, 7.4.0 |
| OPENDJ-9347 | GSSAPISASLMechanismHandler incorrectly formats the login conf file                                           | Fixed in 7.1.5, 7.2.2, 7.3.0        |
| OPENDJ-9250 | The max-allowed-client-connections limit should not apply to the admin connector                             | Fixed in 7.3.0                      |
| OPENDJ-9213 | The dsconfig list-replication-domains output contains redundant columns                                      | Fixed in 7.3.0                      |
| OPENDJ-9033 | DS refuses to start and throws an NPE when a subordinate-base-dn is used                                     | Fixed in 7.2.1, 7.3.0               |
| OPENDJ-8874 | Full replica purge should write CSN information right away                                                   | Fixed in 7.1.3, 7.2.0               |
| OPENDJ-8870 | RFC2307bis schema is different from the internet-draft                                                       | Fixed in 7.2.0                      |
| OPENDJ-8829 | Error messages incorrectly mentions cn=System,cn=monitor                                                     | Fixed in 7.2.0                      |
| OPENDJ-8815 | dsrepl status does not take bad data status into account                                                     | Fixed in 7.1.3, 7.2.1, 7.3.0        |
| OPENDJ-8778 | Setup option --trustStorePassword:file behaves differently than --trustStorePasswordFile                     | Fixed in 7.2.0                      |
| OPENDJ-8698 | DS should write config archive files in a crash consistent way                                               | Fixed in 7.1.3, 7.2.0               |
| OPENDJ-8613 | No error is logged when sending of task completion notification email fails                                  | Fixed in 7.1.3, 7.2.0               |
| OPENDJ-8473 | Upgrade does not migrate ds-cfg-je-property values                                                           | Fixed in 7.2.0                      |
| OPENDJ-8383 | dsrepl status fails when certificates accepted interactively                                                 | Fixed in 7.2.0                      |
| OPENDJ-8378 | dsrepl status shows deleted replication domains                                                              | Fixed in 7.1.3, 7.2.1, 7.3.0        |
| OPENDJ-8280 | DS will not start when using a non-US locale after changing config                                           | Fixed in 7.2.0                      |
| OPENDJ-8243 | Indexes could cause ldapsearch to return multiple copies of the same entry                                   | Fixed in 7.1.1, 7.2.0               |
| OPENDJ-8227 | Deadlock between Changelog DB purger and Thread for RS session                                               | Fixed in 7.2.0                      |
| OPENDJ-8093 | Stale replica information returned from cn=monitor                                                           | Open                                |
| OPENDJ-8072 | dsrepl initialize hangs after re-enabling replication                                                        | Open                                |
| OPENDJ-8046 | Changelog files are not closed after searching cn=changelog                                                  | Fixed in 7.1.1, 7.2.0               |
| OPENDJ-8028 | Prometheus monitoring doesn't work with Telegraf                                                             | Fixed in 7.1.1, 7.2.0               |
| OPENDJ-8024 | Prevent configuration of VLV indexes with scope base-object                                                  | Fixed in 7.2.0                      |
| OPENDJ-7991 | makeldif: "invalid number of arguments" using DateTime tag with colons                                       | Fixed in 7.2.0                      |
| OPENDJ-7971 | dsbackup fails when JDB file cleaned                                                                         | Fixed in 7.1.1, 7.2.0               |
| OPENDJ-7970 | Ensure that DS is crash resilient for all runtime file changes                                               | Fixed in 7.1.2, 7.2.0               |
| OPENDJ-7942 | The server ignores critical VLV request controls when falling back to an unindexed search                    | Fixed in 7.3.0                      |
| OPENDJ-7941 | Client connections to proxy time out after 10 seconds regardless of activity                                 | Fixed in 7.2.3, 7.3.0               |
| OPENDJ-7928 | JSON normalization cannot handle nested arrays                                                               | Fixed in 7.1.0                      |
| OPENDJ-7905 | Schema replication error after upgrade                                                                       | Fixed in 7.1.0                      |
| OPENDJ-7889 | Configuring group-id against DS-only instance requires restart for the change to be reported by monitoring   | Fixed in 7.1.1, 7.2.0               |
| OPENDJ-7867 | NPE if dsbackup bucket name contains underscores                                                             | Fixed in 7.1.0                      |
| OPENDJ-7851 | Supportextract tool: clobbers the server.out filehandle when kill -3 is used.                                | Fixed in 7.1.0                      |
| OPENDJ-7847 | StaticGroup's objectclass sanity checks are unhelpful                                                        | Fixed in 7.1.0                      |
| OPENDJ-7844 | Difficult to override standard LDAP schema defined in 00-core.ldif                                           | Open                                |
| OPENDJ-7837 | Schema replication issues when adding a new server with conflicting schema to an existing topology           | Open                                |
| OPENDJ-7818 | Package based upgrade does not support instances running as non-root                                         | Fixed in 7.1.1, 7.2.0               |
| OPENDJ-7816 | dsbackup fails when destination is a symbolic link to a real directory                                       | Fixed in 7.1.2, 7.2.0               |
| OPENDJ-7788 | dsrepl initialize from 5.5 causes the ReplicationDomain listener to die with an NPE                          | Open                                |
| OPENDJ-7761 | DS sporadically hangs while reconnecting to an RS                                                            | Fixed in 7.1.0                      |
| OPENDJ-7758 | DS 7.0 dsrepl add-local-server-to-pre-7-0-topology: NPE if master-key is in different keystore               | Fixed in 7.1.0                      |
| OPENDJ-7755 | DS 7.0 replication with older version, CryptoManager failed to import the symmetric key entry                | Fixed in 7.1.1, 7.2.0               |
| OPENDJ-7744 | dsrepl initialize in a topology with DS7 and DS 5.5 fails if DS7 serverId starts with 0                      | Fixed in 7.1.1, 7.2.0               |
| OPENDJ-7743 | Setting DN-valued properties to a config expression causes startup to fail                                   | Open                                |
| OPENDJ-7737 | ConfigurationFramework#initialize0 changes the class loader without clearing the map of registered jar files | Fixed in 7.1.0                      |
| OPENDJ-7706 | Unable to set up replication between standalone DS and RS servers and older versions of DS or OpenDJ         | Open                                |
| OPENDJ-7699 | Supportextract throws NoSuchElementException when the server.pid file is empty                               | Fixed in 7.1.0                      |
| OPENDJ-7689 | dsrepl add-local-server-to-pre-7-0-topology does not tolerate separate keystore and truststore               | Fixed in 7.1.0                      |
| OPENDJ-7688 | Spurious DS disconnections because of missing heartbeat                                                      | Fixed in 7.2.1, 7.3.0               |
| OPENDJ-7687 | Global Access Control Policy regarding cn=schema is too restrictive                                          | Fixed in 7.1.0                      |
| OPENDJ-7655 | Replaying multiple MODIFYDN operations is very slow                                                          | Fixed in 7.1.0                      |
| OPENDJ-7653 | replication issue in the cloud after ldapadd                                                                 | Fixed in 7.1.0                      |
| OPENDJ-7596 | dsbackup has global connection options that do not work with some subcommands                                | Fixed in 7.2.0                      |
| OPENDJ-7516 | External cn=changelog is not updated while replication initialization is in progress                         | Fixed in 7.2.1, 7.3.0               |
| OPENDJ-7513 | Missing subSchemaSubEntry attribute from rootDSE access controls                                             | Fixed in 7.1.0                      |
| OPENDJ-7481 | JSON logs do not contain proxy auth DN                                                                       | Fixed in 7.1.0                      |
| OPENDJ-7474 | Docker sample README.md provides wrong instructions for running the container                                | Fixed in 7.1.0                      |
| OPENDJ-7322 | IndexOutOfBoundsException while configuring max-replication-delay-health-check                               | Fixed in 7.1.0                      |
| OPENDJ-7219 | PreParseAddOperation cannot remove attributes                                                                | Open                                |
| OPENDJ-7014 | Some operational attributes are not replicated when a restore --dry-run is used against an online server     | Open                                |
| OPENDJ-7011 | RFC 2252 Binary syntax doesn't use ";binary" transfer encoding                                               | Open                                |
| OPENDJ-6791 | RS reconnect delay is too aggressive                                                                         | Fixed in 7.3.3, 7.4.0               |
| OPENDJ-6774 | Searches no longer return attributes in the order requested                                                  | Open                                |
| OPENDJ-6579 | Schema is not populated to remote instances if added before enabling replication                             | Open                                |
| OPENDJ-6468 | ds-mon-\* Prometheus metrics are labeled as gauge but seem to be counters                                    | Open                                |
| OPENDJ-6022 | PTA to Active Directory returns more than one entry when only one exists                                     | Open                                |
| OPENDJ-5602 | JDK11: unexpected return code 81 using SASL External                                                         | Open                                |
| OPENDJ-4935 | Replication instability and divergence when using high latency disks                                         | Fixed in 7.1.2, 7.2.0               |
| OPENDJ-3409 | Retention and rotation policies do not work with CAUD handlers                                               | Fixed in 7.3.0                      |

1 Upgrade to the listed version or later to get the fix.

## DS 6.5.6

| Issue ID    | Summary                                                                                                         | Status1               |
| ----------- | --------------------------------------------------------------------------------------------------------------- | --------------------- |
| OPENDJ-9544 | Searches for attributes that do not exist in schema still take time                                             | Fixed in 7.4.0        |
| OPENDJ-8842 | Proxy DS does not cancel psearch to Backend DS if psearch is cancelled                                          | Fixed in 7.0.0        |
| OPENDJ-8838 | Backslashes in files read via a config expression are mishandled                                                | Open                  |
| OPENDJ-8829 | Error messages incorrectly mentions cn=System,cn=monitor                                                        | Fixed in 7.2.0        |
| OPENDJ-8613 | No error is logged when sending of task completion notification email fails                                     | Fixed in 7.1.3, 7.2.0 |
| OPENDJ-8473 | Upgrade does not migrate ds-cfg-je-property values                                                              | Fixed in 7.2.0        |
| OPENDJ-8460 | Deploying DS6.5.5+JDK11 causes continuous hostname resolution errors in pods with DS6.5.5+JDK8                  | Open                  |
| OPENDJ-8234 | ADD of large entry is not replicated                                                                            | Open                  |
| OPENDJ-8226 | Support Extract tool ignores non-default changelogDb location when collecting domains.state file                | Fixed in 7.1.1, 7.2.0 |
| OPENDJ-8205 | Log message lists an object's string representation instead of a file name                                      | Fixed in 7.1.1, 7.2.0 |
| OPENDJ-8137 | LDIF backend silently rejects entries that fail schema validation                                               | Fixed in 7.2.0        |
| OPENDJ-8089 | rest2ldap gateway returns string instead of boolean                                                             | Fixed in 7.1.0        |
| OPENDJ-8046 | Changelog files are not closed after searching cn=changelog                                                     | Fixed in 7.1.1, 7.2.0 |
| OPENDJ-8024 | Prevent configuration of VLV indexes with scope base-object                                                     | Fixed in 7.2.0        |
| OPENDJ-8018 | Older servers cannot create a new symmetric key in mixed version topologies                                     | Open                  |
| OPENDJ-7942 | The server ignores critical VLV request controls when falling back to an unindexed search                       | Fixed in 7.3.0        |
| OPENDJ-7919 | A search for modifyTimestamp>=00000101000000Z results in a YEAR error and disconnect                            | Fixed in 7.0.0        |
| OPENDJ-7810 | JMX connections are always considered insecure                                                                  | Fixed in 7.0.2, 7.1.0 |
| OPENDJ-7687 | Global Access Control Policy regarding cn=schema is too restrictive                                             | Fixed in 7.1.0        |
| OPENDJ-7654 | DS is sometimes unable to connect to RS after full gc                                                           | Fixed in 7.2.0        |
| OPENDJ-7643 | Log that is supposedly generated from dsreplication operation is empty or does not exist                        | Open                  |
| OPENDJ-7640 | Supportextract does not collect all security stores when several keystores have the same basename               | Fixed in 7.2.1, 7.3.0 |
| OPENDJ-7516 | External cn=changelog is not updated while replication initialization is in progress                            | Fixed in 7.2.1, 7.3.0 |
| OPENDJ-7288 | LDAPS Handlers "SelectorRunner" thread hangs up in Grizzly SSLUtils.sslEngineUnwrap                             | Fixed in 7.1.0        |
| OPENDJ-7219 | PreParseAddOperation cannot remove attributes                                                                   | Open                  |
| OPENDJ-7099 | Query for AclRightsInfos can throw an exception due to invalid attribute description                            | Fixed in 7.0.0        |
| OPENDJ-7011 | RFC 2252 Binary syntax doesn't use ";binary" transfer encoding                                                  | Open                  |
| OPENDJ-6977 | DS expects root user password instead of admin user password in standalone DS , RS deployments                  | Open                  |
| OPENDJ-6931 | DS to RS failover mechanism does not account for non responsive established connections                         | Fixed in 7.0.0        |
| OPENDJ-6774 | Searches no longer return attributes in the order requested                                                     | Open                  |
| OPENDJ-6579 | Schema is not populated to remote instances if added before enabling replication                                | Open                  |
| OPENDJ-6499 | Query on rest2ldap over ssl gets stuck after few curl requests using TLSv1.3 on JDK11                           | Fixed in 7.0.0        |
| OPENDJ-6468 | ds-mon-\* Prometheus metrics are labeled as gauge but seem to be counters                                       | Open                  |
| OPENDJ-6380 | Warning message for duplicate objectclass schema definition is misleading                                       | Open                  |
| OPENDJ-6378 | Entries are returned with attribute names using inconsistent case                                               | Fixed in 7.0.0        |
| OPENDJ-6358 | backUpAll doesn't backup ads-truststore.pin                                                                     | Open                  |
| OPENDJ-6223 | Searching telephoneNumber field with a non-numeric value returns all the records                                | Fixed in 7.0.0        |
| OPENDJ-6221 | Logging for CONNECT operations are not saved in Nanosecond format                                               | Fixed in 7.0.0        |
| OPENDJ-6198 | Server won't start if I try to configure a ConnectionHandler to listen on 2 IP addresses                        | Fixed in 7.0.0        |
| OPENDJ-6149 | The Global Access Control Policy option within the dsconfig tool is misleading as is the error message returned | Open                  |
| OPENDJ-6116 | Unspecified Communications Error when multiple rest2ldap endpoints share configuration elements                 | Fixed in 7.0.0        |
| OPENDJ-6022 | PTA to Active Directory returns more than one entry when only one exists                                        | Open                  |
| OPENDJ-5985 | Divergence of "cn=admin data" after setting up secure replication and encrypted backends                        | Open                  |
| OPENDJ-5956 | Data discrepancy between servers if the same attribute has extra spaces in RDN                                  | Open                  |
| OPENDJ-5745 | Azure AD Connector Uses Deprecated Untrusted/Unsigned MSOnline Powershell Module                                | Open                  |
| OPENDJ-5664 | JDK 11: illegal reflective access warning during import-ldif                                                    | Fixed in 7.0.0        |
| OPENDJ-5663 | JDK 11: illegal reflective access warning on setup (without profile)                                            | Open                  |
| OPENDJ-5661 | supportextract tool help and version options are different from other tools                                     | Fixed in 7.0.0        |
| OPENDJ-5660 | JDK 11: illegal reflective access warning on setup (with profile)                                               | Fixed in 7.0.0        |
| OPENDJ-5590 | Proxy: server discovery fails silently when proxy base-dn differs from backend's base-dn                        | Fixed in 7.0.0        |
| OPENDJ-5201 | Tools may prompt to trust certificate multiple times for different reasons                                      | Open                  |
| OPENDJ-5174 | dsreplication initialize-all task sometimes fails with STOPPED\_BY\_ERROR                                       | Open                  |
| OPENDJ-4943 | NullPointerException in BackupManager.java when backup --hash is used offline                                   | Open                  |
| OPENDJ-4475 | Attribute value password validator does not check substrings in reversed password                               | Fixed in 7.0.0        |
| OPENDJ-4008 | dsconfig exits with error when listing global access control policy                                             | Open                  |

1 Upgrade to the listed version or later to get the fix.
