Upgrade Considerations

Important considerations for upgrading to this version of PingDirectoryProxy Server:

The file remove-sample-directory-data-aci.ldif, which is provided with the Delegated Admin installation package, was updated in version 3.5.0 to reinstate permissions for users to change their own passwords (self-service password reset). If you have used an earlier version of this LDIF file, consider manually adding the following ACI from the updated version:

dn: dc=example,dc=com 
changetype: modify 
add: aci 
aci: (targetattr="userPassword")(version 3.0; acl "Allow users to update their own password"; allow (write) userdn="ldap:///self";)

Resolved Issues

The following issues have been resolved with this release of PingDirectoryProxy Server:

Ticket ID Description

Added a cn=Server Status Timeline,cn=monitor monitor entry to track a history of the local server's last 100 status changes and their timestamps.

Updated the LDAP external server monitor to include attributes that track health-check state changes for external servers. The new attributes include the following information:

  • Number of times a health-check transition has occurred
  • Timestamps of the most recent transitions
  • Messages associated with the most recent transitions
DS-39176, DS-39308

Updated the Groovy scripting language version to 2.5.7. For a list of changes, visit groovy-lang.org and view the Groovy 2.5 Release Notes.

As of this release, only the core Groovy runtime and the groovy-json module are bundled with the server. To deploy a Groovy-scripted Server SDK extension that requires a Groovy module not bundled with the server, such as groovy-xml or groovy-sql, download the appropriate JAR file from groovy-lang.org and place it in the server's lib/extensions directory.

DS-39347 Fixed an issue in which Delegated Admin did not work properly if the name of the REST resource type was not the same as the resource endpoint.
DS-39525, DS-39526

Delegated Admin enhancements for constructed attributes.

  • Allow a required attribute to be read-only if it is constructed.
  • Add a configured list of "Update Constructed Attributes" on the REST resource type, similar to the "Post Create Constructed Attributes", so that constructed attributes can be updated when dependent attributes change.
  • Handle constructed attributes that reference other constructed attributes.
DS-39693 Fixed an issue in which Delegated Admin search results were truncated and invalid upon encountering a Directory entry that contained a Boolean or Integer syntax attribute whose values did not conform to the appropriate syntax. With this fix, the offending values are omitted from the results, and a warning message is logged to the server errors log.