Documentation

Corrected an example in Audit Configuration Changes.

Fixed the LDAP Metrics Reference and Prometheus Metrics Reference to remove obsolete metrics that were previously identified as removed in the release notes.

Fixed the text to align with the example in When Adding New Servers.

Updated Configure a NIST-Inspired Subentry Policy to clarify the default PBKDF2 iteration settings for the enabled password storage schemes.

Updated Java to clarify that to use TLS 1.3 with PKCS#11, DS requires Java 11.0.8 or later.

Updated Deployment Keys to clarify that the need for a single, unique deployment key and password per deployment.

Mentioned support for Java 17 in What’s New.

Updated Encrypt changelog data to clarify that changelog encryption affects only data on disk.

Updated JMX-Based Monitoring to show how to connect with a user using a simple bind and an insecure connection.

Updated Fractional Replication to clarify which attributes are replicated everywhere in the fractional replication deployment pattern.

Updated Deployment Keys to clarify that a deployment key is required for all deployments.

Updated Antivirus interference to limit the scope of what you allow antivirus and intrusion detection software to scan.

Updated When Adding New Servers and Clean Up Admin Data to be more explicit about when to start new DS 7 servers, and when to retire older servers.

Added a note to After You Upgrade to clarify that cn=Directory Manager stands for the name of the directory superuser account in DS 6.5 and earlier.

Added Cloud storage samples to show realistic commands for backing up and restoring data at cloud providers.

Added Stop replicating permanently to clarify how to remove a server from a replication topology.

Added Filtering results (Prometheus) demonstrating how to filter Prometheus output by changing configuration settings.

Clearly indicate in the Java requirements that DS requires Java 11.0.6 or later.

Updated Clean Up Admin Data to clarify that before removing admin data, you must replace or remove references to admin data from your configuration.

Corrected the command in Read-Only Replicas that configures a server to accept replication updates, and refuse updates from client applications.

Updated the list of actions at the beginning of After You Upgrade to clarify when and how to change bootstrap replication server settings in an upgrade that involves adding new servers and retiring old servers.

Updated Troubleshooting to clarify that proxied authorization as an anonymous user is supported, but not recommended.

Added Add a Bootstrap Replication Server to demonstrate the command to configure a new bootstrap replication server.

Updated Enable StartTLS and Set the HTTPS Port to clarify when you might need to use the ssl-cert-nickname setting.

Updated Install DS for AM Identities and Install DS for User Data to clarify why to use the am-identity-store setup profile when storing AM identities.

Added Check Profiles to indicate how to list the profiles selected at setup time.

Fixed the procedures in After You Upgrade to retain access to required secret keys when upgrading a production-mode server in place.

Updated Manual Initialization to clarify the limitations of alternative methods for manually initializing replicas.

Added Replication Status (LDAP) to explain the ds-mon-status attribute values, and actions to take when the status is not Normal.

Updated Install DS for Custom Cases to clarify the steps to follow when you set up DS replicas without a setup profile, and then create backends that you want to replicate.

Corrected Replication and Data Sovereignty to indicate that the top entries in the example domain should not be replicated.

Added a note to Initialize From LDIF that clarifies when to follow the steps in Restore to a Known State instead.

Described how to Add a Monitor User Account after upgrading a service without a replicated account for monitoring.

Added Install With Existing Cryptographic Keys, and procedures for using your own keystores and truststores for transport layer security in Key Management.

Updated Delete Entries and Delete to clarify that deleting a subtree can be a resource-intensive operation. The resources required to remove a branch depend on the number of LDAP entries to delete.

Updated Incompatible Changes to clarify that the dskeymgr command no longer supports using the --alias and --outputFile options together.

Updated Learn About the Evaluation Setup Profile and Proxied Authorization to clarify that if you are not using the DS evaluation setup profile, you must correctly configure access for successful proxied authorization.

Adapted the Upgrade pages to make them easier to use:

Added Back Up Using Snapshots and Restore From a Snapshot to explain the constraints when using file system snapshots for backing up and restoring directory data.

Updated Rebuild Indexes to reflect best practices.

Updated Cache Internal Nodes to clarify what to monitor when determining whether to add memory for DB cache.

Restored Estimate Minimum DB Cache Size.

Updated Add a Base DN to a Backend to show how to create a replication domain for the new base DN.

Updated Cloud Storage to mention the need for access to delete files, and the need to restart DS after setting environment variables.

Updated Read Schema to explain key features of attribute type definitions.

Added an example password policy that configures account lockout in Lock Accounts After Repeated Bind Failures.

Updated ACI Subjects to clarify how the security strength factor (ssf) setting in ACIs can help neutralize STRIPTLS attacks.

Added a table of default global access control policies in Proxy Global Policies.

Updated REST API Documentation as the setup process disables API descriptors by default.