PingDS release notes

Known issues

Due to a change to the Java platform between versions 11 and 17, the keys you generate with the dskeymgr and setup commands using Java 11 are incompatible with keys generated using Java 17 and later.

Using different Java versions is a problem if you use deployment ID-based CA certificates. Replication breaks, for example, when you use the setup command for a new server with a more recent version of Java than was used to set up existing servers.

For details on resolving the issue, refer to Incompatible Java versions.

The following important issues remained open at the time of the latest release for each version.

DS 7.5.1

Issue ID Summary Status

OPENDJ-10532

The case of an entryDN can be changed once replicated

Open

OPENDJ-8093

Stale replica information returned from cn=monitor

Open

DS 7.4.3

Issue ID Summary Status1

OPENDJ-10083

Creation of password validator fails if password-character-set:punct characters not surrounded by single quotes at command line

Open

OPENDJ-10010

HTTP/HTTPS connection handler only creates one listener address when multiple addresses are specified

Open

OPENDJ-9935

Some controls are not correctly handled beyond a single backend’s base DN

Open

OPENDJ-9812

Schema updates are not crash resilient

Open

OPENDJ-8093

Stale replica information returned from cn=monitor

Open

OPENDJ-6149

The Global Access Control Policy option within the dsconfig tool is misleading as is the error message returned

Open

1 Upgrade to the listed version or later to get the fix.

DS 7.3.6

Issue ID Summary Status1

OPENDJ-10532

The case of a baseDN can be changed once replicated

Open

OPENDJ-10171

etag in schema config entry leads to schema violation error when attempting to update cn=schema

Fixed in 7.5.0

OPENDJ-9913

Bind via REST API ignores force-change-on-add in password policy

Fixed in 7.5.0

OPENDJ-9812

Schema updates are not crash resilient

Open

OPENDJ-9544

Searches for attributes that do not exist in schema still take time

Fixed in 7.4.0

OPENDJ-9524

create-rc-script: systemd service should run start-ds/stop-ds, and not write a wrapper init script

Fixed in 7.4.0

OPENDJ-9268

Cannot store zero-length mail attribute values

Open

OPENDJ-8093

Stale replica information returned from cn=monitor

Open

1 Upgrade to the listed version or later to get the fix.

DS 7.2.5

Issue ID Summary Status1

OPENDJ-10010

HTTP/HTTPS connection handler only creates one listener address when multiple addresses are specified

Open

OPENDJ-9790

Cannot create GeneralizedTimes with large fractional values

Fixed in 7.3.3, 7.4.0

OPENDJ-9379

Restoring a backup fails if the 02-config.ldif schema file is missing

Open

OPENDJ-9369

RxCachedThreadScheduler threads increase over time

Open

OPENDJ-9300

DS 7.3 upgrade requires a full index rebuild

Fixed in 7.3.0

OPENDJ-9268

Cannot store zero-length mail attribute values

Open

OPENDJ-9250

The max-allowed-client-connections limit should not apply to the admin connector

Fixed in 7.3.0

OPENDJ-9213

The dsconfig list-replication-domains output contains redundant columns

Fixed in 7.3.0

OPENDJ-9167

Reading isMemberOf after adding, deleting, or renaming a static group can block for a long time when there are many static groups

Fixed in 7.3.0

OPENDJ-9128

Entry cache and group manager use too much memory

Fixed in 7.3.0

OPENDJ-9000

Missing RS - RS heartbeats are not detected

Fixed in 7.3.0

OPENDJ-8849

An isolated DS (no RS) should return UNAVAILABLE instead of UNWILLING_TO_PERFORM

Fixed in 7.4.0

OPENDJ-8233

RS connection error reason is not logged when hostname is not resolvable

Fixed in 7.3.0

OPENDJ-8093

Stale replica information returned from cn=monitor

Open

OPENDJ-7925

The searchrate tool does not retrieve data when used simultaneously with the modrate tool on groups

Fixed in 7.3.0

OPENDJ-7844

Difficult to override standard LDAP schema defined in 00-core.ldif

Open

OPENDJ-7763

Proxy service discovery with RS-only and DS-only seems not to route search

Open

OPENDJ-7743

Setting DN-valued properties to a config expression causes startup to fail

Open

OPENDJ-7741

dsrepl add-local-server-to-pre-7-0-topology requires a base DN for an RS

Open

OPENDJ-7219

PreParseAddOperation cannot remove attributes

Open

OPENDJ-6579

Schema is not populated to remote instances if added before enabling replication

Open

OPENDJ-6468

ds-mon-* Prometheus metrics are labeled as gauge but seem to be counters

Open

OPENDJ-6022

PTA to Active Directory returns more than one entry when only one exists

Open

OPENDJ-3409

Retention and rotation policies do not work with CAUD handlers

Fixed in 7.3.0

1 Upgrade to the listed version or later to get the fix.

DS 7.1.8

Issue ID Summary Status1

OPENDJ-10553

DN syntax does not perform strict enforcement of country codes in RDNs if enabled

Open

OPENDJ-10532

The case of an entryDN can be changed once replicated

Open

OPENDJ-9790

Cannot create GeneralizedTimes with large fractional values

Fixed in 7.3.3, 7.4.0

OPENDJ-9250

The max-allowed-client-connections limit should not apply to the admin connector

Fixed in 7.3.0

OPENDJ-9213

The dsconfig list-replication-domains output contains redundant columns

Fixed in 7.3.0

OPENDJ-9200

Backup process logs incorrect number of jdb files

Fixed in 7.2.3, 7.3.0

OPENDJ-9158

AM User/CTS affinity failover doesn’t happen when DS’s disk volume is detached

Fixed in 7.2.3, 7.3.3, 7.4.0

OPENDJ-9033

DS refuses to start and throws an NPE when a subordinate-base-dn is used

Fixed in 7.2.1, 7.3.0

OPENDJ-8917

ReplicationBroker.java swallowed important debugging info

Fixed in 7.2.1, 7.3.0

OPENDJ-8870

RFC2307bis schema is different from the internet-draft

Fixed in 7.2.0

OPENDJ-8831

Log when and why the ChangeNumberIndexer cannot move forward

Fixed in 7.2.1, 7.3.0

OPENDJ-8829

Error messages incorrectly mentions cn=System,cn=monitor

Fixed in 7.2.0

OPENDJ-8808

Potential deadlock between overlapping rename operations

Fixed in 7.2.1, 7.3.0

OPENDJ-8805

dsconfig exits when setting the "bootstrap-replication-server" property with a <null> value in the "Replication Service Discovery Mechanism".

Fixed in 7.2.0

OPENDJ-8778

Setup option --trustStorePassword:file behaves differently than --trustStorePasswordFile

Fixed in 7.2.0

OPENDJ-8473

Upgrade does not migrate ds-cfg-je-property values

Fixed in 7.2.0

OPENDJ-8280

DS will not start when using a non-US locale after changing config

Fixed in 7.2.0

OPENDJ-8233

RS connection error reason is not logged when hostname is not resolvable

Fixed in 7.3.0

OPENDJ-8093

Stale replica information returned from cn=monitor

Open

OPENDJ-8008

OutOfMemoryException in subtree delete

Fixed in 7.2.0

OPENDJ-7942

The server ignores critical VLV request controls when falling back to an unindexed search

Fixed in 7.3.0

OPENDJ-7941

Client connections to proxy time out after 10 seconds regardless of activity

Fixed in 7.2.3, 7.3.0

OPENDJ-7925

The searchrate tool does not retrieve data when used simultaneously with the modrate tool on groups

Fixed in 7.3.0

OPENDJ-7844

Difficult to override standard LDAP schema defined in 00-core.ldif

Open

OPENDJ-7837

Schema replication issues when adding a new server with conflicting schema to an existing topology

Open

OPENDJ-7788

dsrepl initialize from 5.5 causes the ReplicationDomain listener to die with an NPE

Open

OPENDJ-7763

Proxy replication service discovery with RS-only and DS-only seems not to route search

Open

OPENDJ-7743

Setting DN-valued properties to a config expression causes startup to fail

Open

OPENDJ-7741

dsrepl add-local-server-to-pre-7-0-topology requires a base DN for an RS

Open

OPENDJ-7640

Supportextract does not collect all security stores when several keystores have the same basename

Fixed in 7.2.1, 7.3.0

OPENDJ-7596

dsbackup has global connection options that do not work with some subcommands

Fixed in 7.2.0

OPENDJ-7544

dsconfig online sometimes triggers a duplicate server IDs error

Open

OPENDJ-7516

External cn=changelog is not updated while replication initialization is in progress

Fixed in 7.2.1, 7.3.0

OPENDJ-7219

PreParseAddOperation cannot remove attributes

Open

OPENDJ-6579

Schema is not populated to remote instances if added before enabling replication

Open

OPENDJ-6468

ds-mon-* Prometheus metrics are labeled as gauge but seem to be counters

Open

OPENDJ-6022

PTA to Active Directory returns more than one entry when only one exists

Open

OPENDJ-3409

Retention and rotation policies do not work with CAUD handlers

Fixed in 7.3.0

1 Upgrade to the listed version or later to get the fix.

DS 7.0.2

Issue ID Summary Status1

OPENDJ-9790

Cannot create GeneralizedTimes with large fractional values

Fixed in 7.3.3, 7.4.0

OPENDJ-9472

Upgrade does not correctly handle previously patched upgrades

Fixed in 7.1.6, 7.2.3, 7.3.2, 7.4.0

OPENDJ-9347

GSSAPISASLMechanismHandler incorrectly formats the login conf file

Fixed in 7.1.5, 7.2.2, 7.3.0

OPENDJ-9250

The max-allowed-client-connections limit should not apply to the admin connector

Fixed in 7.3.0

OPENDJ-9213

The dsconfig list-replication-domains output contains redundant columns

Fixed in 7.3.0

OPENDJ-9033

DS refuses to start and throws an NPE when a subordinate-base-dn is used

Fixed in 7.2.1, 7.3.0

OPENDJ-8874

Full replica purge should write CSN information right away

Fixed in 7.1.3, 7.2.0

OPENDJ-8870

RFC2307bis schema is different from the internet-draft

Fixed in 7.2.0

OPENDJ-8829

Error messages incorrectly mentions cn=System,cn=monitor

Fixed in 7.2.0

OPENDJ-8815

dsrepl status does not take bad data status into account

Fixed in 7.1.3, 7.2.1, 7.3.0

OPENDJ-8778

Setup option --trustStorePassword:file behaves differently than --trustStorePasswordFile

Fixed in 7.2.0

OPENDJ-8698

DS should write config archive files in a crash consistent way

Fixed in 7.1.3, 7.2.0

OPENDJ-8613

No error is logged when sending of task completion notification email fails

Fixed in 7.1.3, 7.2.0

OPENDJ-8473

Upgrade does not migrate ds-cfg-je-property values

Fixed in 7.2.0

OPENDJ-8383

dsrepl status fails when certificates accepted interactively

Fixed in 7.2.0

OPENDJ-8378

dsrepl status shows deleted replication domains

Fixed in 7.1.3, 7.2.1, 7.3.0

OPENDJ-8280

DS will not start when using a non-US locale after changing config

Fixed in 7.2.0

OPENDJ-8243

Indexes could cause ldapsearch to return multiple copies of the same entry

Fixed in 7.1.1, 7.2.0

OPENDJ-8227

Deadlock between Changelog DB purger and Thread for RS session

Fixed in 7.2.0

OPENDJ-8093

Stale replica information returned from cn=monitor

Open

OPENDJ-8072

dsrepl initialize hangs after re-enabling replication

Open

OPENDJ-8046

Changelog files are not closed after searching cn=changelog

Fixed in 7.1.1, 7.2.0

OPENDJ-8028

Prometheus monitoring doesn’t work with Telegraf

Fixed in 7.1.1, 7.2.0

OPENDJ-8024

Prevent configuration of VLV indexes with scope base-object

Fixed in 7.2.0

OPENDJ-7991

makeldif: "invalid number of arguments" using DateTime tag with colons

Fixed in 7.2.0

OPENDJ-7971

dsbackup fails when JDB file cleaned

Fixed in 7.1.1, 7.2.0

OPENDJ-7970

Ensure that DS is crash resilient for all runtime file changes

Fixed in 7.1.2, 7.2.0

OPENDJ-7942

The server ignores critical VLV request controls when falling back to an unindexed search

Fixed in 7.3.0

OPENDJ-7941

Client connections to proxy time out after 10 seconds regardless of activity

Fixed in 7.2.3, 7.3.0

OPENDJ-7928

JSON normalization cannot handle nested arrays

Fixed in 7.1.0

OPENDJ-7905

Schema replication error after upgrade

Fixed in 7.1.0

OPENDJ-7889

Configuring group-id against DS-only instance requires restart for the change to be reported by monitoring

Fixed in 7.1.1, 7.2.0

OPENDJ-7867

NPE if dsbackup bucket name contains underscores

Fixed in 7.1.0

OPENDJ-7851

Supportextract tool: clobbers the server.out filehandle when kill -3 is used.

Fixed in 7.1.0

OPENDJ-7847

StaticGroup’s objectclass sanity checks are unhelpful

Fixed in 7.1.0

OPENDJ-7844

Difficult to override standard LDAP schema defined in 00-core.ldif

Open

OPENDJ-7837

Schema replication issues when adding a new server with conflicting schema to an existing topology

Open

OPENDJ-7818

Package based upgrade does not support instances running as non-root

Fixed in 7.1.1, 7.2.0

OPENDJ-7816

dsbackup fails when destination is a symbolic link to a real directory

Fixed in 7.1.2, 7.2.0

OPENDJ-7788

dsrepl initialize from 5.5 causes the ReplicationDomain listener to die with an NPE

Open

OPENDJ-7761

DS sporadically hangs while reconnecting to an RS

Fixed in 7.1.0

OPENDJ-7758

DS 7.0 dsrepl add-local-server-to-pre-7-0-topology: NPE if master-key is in different keystore

Fixed in 7.1.0

OPENDJ-7755

DS 7.0 replication with older version, CryptoManager failed to import the symmetric key entry

Fixed in 7.1.1, 7.2.0

OPENDJ-7744

dsrepl initialize in a topology with DS7 and DS 5.5 fails if DS7 serverId starts with 0

Fixed in 7.1.1, 7.2.0

OPENDJ-7743

Setting DN-valued properties to a config expression causes startup to fail

Open

OPENDJ-7737

ConfigurationFramework#initialize0 changes the class loader without clearing the map of registered jar files

Fixed in 7.1.0

OPENDJ-7706

Unable to set up replication between standalone DS and RS servers and older versions of DS or OpenDJ

Open

OPENDJ-7699

Supportextract throws NoSuchElementException when the server.pid file is empty

Fixed in 7.1.0

OPENDJ-7689

dsrepl add-local-server-to-pre-7-0-topology does not tolerate separate keystore and truststore

Fixed in 7.1.0

OPENDJ-7688

Spurious DS disconnections because of missing heartbeat

Fixed in 7.2.1, 7.3.0

OPENDJ-7687

Global Access Control Policy regarding cn=schema is too restrictive

Fixed in 7.1.0

OPENDJ-7655

Replaying multiple MODIFYDN operations is very slow

Fixed in 7.1.0

OPENDJ-7653

replication issue in the cloud after ldapadd

Fixed in 7.1.0

OPENDJ-7596

dsbackup has global connection options that do not work with some subcommands

Fixed in 7.2.0

OPENDJ-7516

External cn=changelog is not updated while replication initialization is in progress

Fixed in 7.2.1, 7.3.0

OPENDJ-7513

Missing subSchemaSubEntry attribute from rootDSE access controls

Fixed in 7.1.0

OPENDJ-7481

JSON logs do not contain proxy auth DN

Fixed in 7.1.0

OPENDJ-7474

Docker sample README.md provides wrong instructions for running the container

Fixed in 7.1.0

OPENDJ-7322

IndexOutOfBoundsException while configuring max-replication-delay-health-check

Fixed in 7.1.0

OPENDJ-7219

PreParseAddOperation cannot remove attributes

Open

OPENDJ-7014

Some operational attributes are not replicated when a restore --dry-run is used against an online server

Open

OPENDJ-7011

RFC 2252 Binary syntax doesn’t use ";binary" transfer encoding

Open

OPENDJ-6791

RS reconnect delay is too aggressive

Fixed in 7.3.3, 7.4.0

OPENDJ-6774

Searches no longer return attributes in the order requested

Open

OPENDJ-6579

Schema is not populated to remote instances if added before enabling replication

Open

OPENDJ-6468

ds-mon-* Prometheus metrics are labeled as gauge but seem to be counters

Open

OPENDJ-6022

PTA to Active Directory returns more than one entry when only one exists

Open

OPENDJ-5602

JDK11: unexpected return code 81 using SASL External

Open

OPENDJ-4935

Replication instability and divergence when using high latency disks

Fixed in 7.1.2, 7.2.0

OPENDJ-3409

Retention and rotation policies do not work with CAUD handlers

Fixed in 7.3.0

1 Upgrade to the listed version or later to get the fix.

DS 6.5.6

Issue ID Summary Status1

OPENDJ-9544

Searches for attributes that do not exist in schema still take time

Fixed in 7.4.0

OPENDJ-8842

Proxy DS does not cancel psearch to Backend DS if psearch is cancelled

Fixed in 7.0.0

OPENDJ-8838

Backslashes in files read via a config expression are mishandled

Open

OPENDJ-8829

Error messages incorrectly mentions cn=System,cn=monitor

Fixed in 7.2.0

OPENDJ-8613

No error is logged when sending of task completion notification email fails

Fixed in 7.1.3, 7.2.0

OPENDJ-8473

Upgrade does not migrate ds-cfg-je-property values

Fixed in 7.2.0

OPENDJ-8460

Deploying DS6.5.5+JDK11 causes continuous hostname resolution errors in pods with DS6.5.5+JDK8

Open

OPENDJ-8234

ADD of large entry is not replicated

Open

OPENDJ-8226

Support Extract tool ignores non-default changelogDb location when collecting domains.state file

Fixed in 7.1.1, 7.2.0

OPENDJ-8205

Log message lists an object’s string representation instead of a file name

Fixed in 7.1.1, 7.2.0

OPENDJ-8137

LDIF backend silently rejects entries that fail schema validation

Fixed in 7.2.0

OPENDJ-8089

rest2ldap gateway returns string instead of boolean

Fixed in 7.1.0

OPENDJ-8046

Changelog files are not closed after searching cn=changelog

Fixed in 7.1.1, 7.2.0

OPENDJ-8024

Prevent configuration of VLV indexes with scope base-object

Fixed in 7.2.0

OPENDJ-8018

Older servers cannot create a new symmetric key in mixed version topologies

Open

OPENDJ-7942

The server ignores critical VLV request controls when falling back to an unindexed search

Fixed in 7.3.0

OPENDJ-7919

A search for modifyTimestamp>=00000101000000Z results in a YEAR error and disconnect

Fixed in 7.0.0

OPENDJ-7810

JMX connections are always considered insecure

Fixed in 7.0.2, 7.1.0

OPENDJ-7687

Global Access Control Policy regarding cn=schema is too restrictive

Fixed in 7.1.0

OPENDJ-7654

DS is sometimes unable to connect to RS after full gc

Fixed in 7.2.0

OPENDJ-7643

Log that is supposedly generated from dsreplication operation is empty or does not exist

Open

OPENDJ-7640

Supportextract does not collect all security stores when several keystores have the same basename

Fixed in 7.2.1, 7.3.0

OPENDJ-7516

External cn=changelog is not updated while replication initialization is in progress

Fixed in 7.2.1, 7.3.0

OPENDJ-7288

LDAPS Handlers "SelectorRunner" thread hangs up in Grizzly SSLUtils.sslEngineUnwrap

Fixed in 7.1.0

OPENDJ-7219

PreParseAddOperation cannot remove attributes

Open

OPENDJ-7099

Query for AclRightsInfos can throw an exception due to invalid attribute description

Fixed in 7.0.0

OPENDJ-7011

RFC 2252 Binary syntax doesn’t use ";binary" transfer encoding

Open

OPENDJ-6977

DS expects root user password instead of admin user password in standalone DS , RS deployments

Open

OPENDJ-6931

DS to RS failover mechanism does not account for non responsive established connections

Fixed in 7.0.0

OPENDJ-6774

Searches no longer return attributes in the order requested

Open

OPENDJ-6579

Schema is not populated to remote instances if added before enabling replication

Open

OPENDJ-6499

Query on rest2ldap over ssl gets stuck after few curl requests using TLSv1.3 on JDK11

Fixed in 7.0.0

OPENDJ-6468

ds-mon-* Prometheus metrics are labeled as gauge but seem to be counters

Open

OPENDJ-6380

Warning message for duplicate objectclass schema definition is misleading

Open

OPENDJ-6378

Entries are returned with attribute names using inconsistent case

Fixed in 7.0.0

OPENDJ-6358

backUpAll doesn’t backup ads-truststore.pin

Open

OPENDJ-6223

Searching telephoneNumber field with a non-numeric value returns all the records

Fixed in 7.0.0

OPENDJ-6221

Logging for CONNECT operations are not saved in Nanosecond format

Fixed in 7.0.0

OPENDJ-6198

Server won’t start if I try to configure a ConnectionHandler to listen on 2 IP addresses

Fixed in 7.0.0

OPENDJ-6149

The Global Access Control Policy option within the dsconfig tool is misleading as is the error message returned

Open

OPENDJ-6116

Unspecified Communications Error when multiple rest2ldap endpoints share configuration elements

Fixed in 7.0.0

OPENDJ-6022

PTA to Active Directory returns more than one entry when only one exists

Open

OPENDJ-5985

Divergence of "cn=admin data" after setting up secure replication and encrypted backends

Open

OPENDJ-5956

Data discrepancy between servers if the same attribute has extra spaces in RDN

Open

OPENDJ-5745

Azure AD Connector Uses Deprecated Untrusted/Unsigned MSOnline Powershell Module

Open

OPENDJ-5664

JDK 11: illegal reflective access warning during import-ldif

Fixed in 7.0.0

OPENDJ-5663

JDK 11: illegal reflective access warning on setup (without profile)

Open

OPENDJ-5661

supportextract tool help and version options are different from other tools

Fixed in 7.0.0

OPENDJ-5660

JDK 11: illegal reflective access warning on setup (with profile)

Fixed in 7.0.0

OPENDJ-5590

Proxy: server discovery fails silently when proxy base-dn differs from backend’s base-dn

Fixed in 7.0.0

OPENDJ-5201

Tools may prompt to trust certificate multiple times for different reasons

Open

OPENDJ-5174

dsreplication initialize-all task sometimes fails with STOPPED_BY_ERROR

Open

OPENDJ-4943

NullPointerException in BackupManager.java when backup --hash is used offline

Open

OPENDJ-4475

Attribute value password validator does not check substrings in reversed password

Fixed in 7.0.0

OPENDJ-4008

dsconfig exits with error when listing global access control policy

Open

1 Upgrade to the listed version or later to get the fix.