PingDataMetrics Server 6.0.0.0 Release Notes - PingDirectory - PingDataMetrics - 8.1

Added the ability to search for configuration objects and their properties by name with the dsconfig tool.

Added support for log file rotation listeners, which allow for custom processing whenever a log file is rotated out of service so that the server will no longer write to it. A copy listener (which will copy the rotated log file to an alternate location, optionally compressing it in the process), and a summarize listener (which will invoke the summarize-access-log tool on the rotated log file) are included. The Server SDK also includes an API for creating custom log file rotation listeners.

Updated the default file permissions for new installations on UNIX-based systems. Files and directories included in the zip file will be only be accessible to their owner (the user that unzipped the file) by default.

Newly-created files and directories will also be assigned permissions that allow them to be accessed only by the account used to run the server. Existing configuration options for setting file permissions (the log-file-permissions and db-directory-permissions properties) will continue to behave as before. The new config/server.umask file will control the default permissions for all other newly-created files and directories.

The ability to request server-generated charts from the Metrics Engine has been removed in this release.

Added the server's process ID to the output of the status tool.

Added a new rotate-log tool to request the rotation of one or more log files.

Addressed a few issues in config-diff. In some situations, config-diff would not generate commands in an order that respected all dependencies. This has been fixed. Most expected warnings are now excluded by default but can be included in the output with the --includeAllWarnings option. The --sourceBindPasswordFile and --targetBindPassword are now applied in conjunction with the --targetConfigGroup and --sourceConfigGroup options.

Added a --dry-run option to dsconfig, which can be used in batch mode to validate the configuration changes in a batch file without applying them.

Added support for setting the request header size in the Jetty http configuration server properties.

The setup tool now creates the Postgres database directory under the server root, instead of the user's current directory. The data directory location can be changed by specifying the --databaseDataDir option when invoking setup.

Improved the collect-support-data tool to include information provided by systemd on platforms that support it.

Collect-support-data tool now captures Kerberos config and log information.

The PingDataMetrics Server REST API servlet has a new authentication timeout property to allow a configurable session timeout. Previously, the authentication session timeout was 15 minutes.

Added the ability to create local constants in LDIF template files using the new 'local' keyword.

Updated the Apache commons collections library to address the security vulnerability described by CVE 2015-4852.

Added a monitor entry for each Server SDK extension.

Added a --prettyPrint option to the config-diff tool to make the output more human-readable.

Updated the restore command so that it can no longer be used to restore a backup of the config backend. The command now points the administrator for safer ways to revert configuration changes, including using config-diff.

Updated the server's support for the Twilio Messaging Service so that it uses the newer "Messages" API when sending SMS messages instead of the older "SMS" API. The older API has been deprecated, and Twilio now imposes a 120-character limit for messages sent via that API. The messages API allows the server to take advantage of the full 160 characters per SMS message.

Fixed an issue with the dsjavaproperties tool where java properties for PermSize and MaxPermSize could be added when using JDK 8, which no longer supports these options.

Updated the bcrypt, crypt, PBKDF2 and scrypt password storage schemes so they can be used to create new instances.

Fixed a case where attribute syntax configuration changes would not apply to undefined attributes, which rely on default attribute types.

Server SDK extensions are now built with a Java source version of 1.7 by default.

The former suite of Administrative Console applications, each of which were tied to a particular product (for example the dsconsole.war for the PingDirectory Server) are no longer available, and have been superceded by a new version of the Administrative Console capable of managing any server product. You can choose to access the Administrative Console by hosting it within a server, or by deploying it in an external servlet container. For the former, enable an HTTP Connection Handler and add the Administrative Console Web Application Extension to the handler. For the latter, download and unzip the management-console-[version].zip file, and install the ubid-console.war file according to your container's instructions.

The Configuration API now returns unquoted, native Javascript values for integer, real number, and boolean properties. Duration and size property values, for example '1 w' or '100 G', continue to be represented as Javascript string types.

Improved the error messages and examples for create-rc-script and create-systemd-script by explicitly suggesting the use of sudo so that the scripts can modify protected files.

Changed interactive setup default value for HTTPS enablement.

The monitored-servers tool now enables specifying a monitoring user bind DN when adding servers.

Improved the error messages for create-rc-script and create-systemd-script when the directory in which the script will be created does not exist.

Updated interactive setup to display default values, and improved the overall layout and appearance.

Addressed an issue where dsconfig incorrectly allowed certain configuration objects to be deleted.

Improved the error messages produced by the manage-extensions tool when attempting to install invalid extensions.

Updated the global ACIs that ship with the server to use a separate ACI for each control or extended request to allow by default, rather than grouping all desired controls together in one ACI and all desired extended requests together in a second ACI. This change will only be reflected in new installations, and not when updating an existing deployment.

Root DN User configuration entries can now be fully managed through the configuration management interfaces such as dsconfig and the Administrative Console.

Added more logging information when initializing web application and servlet extensions in case an extension causes conflicts or delays.

Updated setup to encode the root password with the PBKDF2 password storage scheme instead of SSHA512.

Updater tool will increase PermSize and MaxPermSize parameters to recommended value to prevent Java JVM pauses.

Fixed an error that could occur during upgrade when the configuration can not be loaded due to missing custom schema.

Updated the Groovy Scripting Language version to 2.4.6.

Fixed an issue that prevented the deletion of disabled debug loggers.

Updated the version of the XML serialization library XStream from 1.3.1 to 1.4.9 to address a security vulnerability in the prior version.

Updated the sanitize-log tool to add support for JSON-formatted access and error log files.