Known issues
|
Due to a change to the Java platform between versions 11 and 17,
the keys you generate with the Using different Java versions is a problem if you use deployment ID-based CA certificates.
Replication breaks, for example, when you use the For details on resolving the issue, refer to Incompatible Java versions. |
The following important issues remained open at the time of the latest release for each version.
DS 7.5.0
| Issue ID | Summary | Status1 |
|---|---|---|
OPENDJ-10082 |
Upgrade from DS 7.3.3 fails in Windows environment |
Open |
OPENDJ-10032 |
Inconsistent Password Storage Scheme iteration count can create multiple userPassword attributes for service accounts |
Open |
OPENDJ-8093 |
Stale replica information returned from cn=monitor |
Open |
1 Upgrade to the listed version or later to get the fix.
DS 7.4.1
| Issue ID | Summary | Status1 |
|---|---|---|
OPENDJ-10139 |
Replication status "TOO_LATE" does not mark DS as unhealthy |
7.5.0 |
OPENDJ-10131 |
ds-mon-receive-delay metric is not working |
7.5.0 |
OPENDJ-10083 |
Creation of password validator fails if password-character-set:punct characters not surrounded by single quotes at command line |
Open |
OPENDJ-10082 |
Upgrade from DS 7.3.3 fails in Windows environment |
Open |
OPENDJ-10078 |
Unable to use dsrepl initialize for cn=schema when 99-user.ldif only contains ds-sync-state entries |
7.5.0 |
OPENDJ-10032 |
Inconsistent Password Storage Scheme iteration count can create multiple userPassword attributes for service accounts |
Open |
OPENDJ-10010 |
HTTP/HTTPS connection handler only creates one listener address when multiple addresses are specified |
Open |
OPENDJ-9935 |
Some controls are not correctly handled beyond a single backend’s base DN |
Open |
OPENDJ-9812 |
Schema updates are not crash resilient |
Open |
OPENDJ-8093 |
Stale replica information returned from cn=monitor |
Open |
OPENDJ-6149 |
The Global Access Control Policy option within the dsconfig tool is misleading as is the error message returned |
Open |
1 Upgrade to the listed version or later to get the fix.
DS 7.3.4
| Issue ID | Summary | Status1 |
|---|---|---|
OPENDJ-10306 |
Null pointer exceptions due to unrecognized (UNKNOWN) requests |
7.5.0 |
OPENDJ-10171 |
etag in schema config entry leads to schema violation error when attempting to update cn=schema |
7.5.0 |
OPENDJ-10131 |
ds-mon-receive-delay metric is not working |
7.5.0 |
OPENDJ-10032 |
Inconsistent Password Storage Scheme iteration count can create multiple userPassword attributes for service accounts |
Open |
OPENDJ-9913 |
Bind via REST API ignores force-change-on-add in password policy |
7.5.0 |
OPENDJ-9812 |
Schema updates are not crash resilient |
Open |
OPENDJ-9692 |
Unindexed privilege not enforced for unindexed sorted and paged searches |
Fixed in 7.4.0 |
OPENDJ-9544 |
Searches for attributes that do not exist in schema still take time |
Fixed in 7.4.0 |
OPENDJ-9524 |
create-rc-script: systemd service should run start-ds/stop-ds, and not write a wrapper init script |
Fixed in 7.4.0 |
OPENDJ-9379 |
Restoring any backup will fail if the 02-config.ldif schema file is missing |
Open |
OPENDJ-9369 |
RxCachedThreadScheduler threads increase over time |
Open |
OPENDJ-9268 |
Cannot store zero-length mail attribute values |
Open |
OPENDJ-8093 |
Stale replica information returned from cn=monitor |
Open |
OPENDJ-7544 |
dsconfig online sometimes triggers a Duplicate server IDs error |
Open |
OPENDJ-5041 |
Set resource limits according to proxyAs user instead of the bindDN |
Fixed in 7.4.0 |
1 Upgrade to the listed version or later to get the fix.
DS 7.2.4
| Issue ID | Summary | Status1 |
|---|---|---|
OPENDJ-10131 |
ds-mon-receive-delay metric is not working |
7.5.0 |
OPENDJ-10010 |
HTTP/HTTPS connection handler only creates one listener address when multiple addresses are specified |
Open |
OPENDJ-9790 |
Cannot create GeneralizedTimes with large fractional values |
Fixed in 7.3.3, 7.4.0 |
OPENDJ-9379 |
Restoring any backup will fail if the 02-config.ldif schema file is missing |
Open |
OPENDJ-9369 |
RxCachedThreadScheduler threads increase over time |
Open |
OPENDJ-9300 |
DS 7.3 upgrade requires a full index rebuild |
Fixed in 7.3.0 |
OPENDJ-9268 |
Cannot store zero-length mail attribute values |
Open |
OPENDJ-9250 |
The max-allowed-client-connections limit should not apply to the admin connector |
Fixed in 7.3.0 |
OPENDJ-9213 |
The dsconfig list-replication-domains output contains redundant columns |
Fixed in 7.3.0 |
OPENDJ-9167 |
Reading isMemberOf after adding, deleting, or renaming a static group can block for a long time when there are many static groups |
Fixed in 7.3.0 |
OPENDJ-9128 |
Entry cache and group manager use too much memory |
Fixed in 7.3.0 |
OPENDJ-9000 |
Missing RS - RS heartbeats are not detected |
Fixed in 7.3.0 |
OPENDJ-8849 |
An isolated DS (no RS) should return UNAVAILABLE instead of UNWILLING_TO_PERFORM |
Fixed in 7.4.0 |
OPENDJ-8233 |
RS connection error reason is not logged when hostname is not resolvable |
Fixed in 7.3.0 |
OPENDJ-8093 |
Stale replica information returned from cn=monitor |
Open |
OPENDJ-7925 |
The searchrate tool does not retrieve data when used simultaneously with the modrate tool on groups |
Fixed in 7.3.0 |
OPENDJ-7844 |
Difficult to override standard LDAP schema defined in 00-core.ldif |
Open |
OPENDJ-7763 |
Proxy service discovery with RS-only and DS-only seems not to route search |
Open |
OPENDJ-7743 |
Setting DN-valued properties to a config expression causes startup to fail |
Open |
OPENDJ-7741 |
dsrepl add-local-server-to-pre-7-0-topology requires a base DN for an RS |
Open |
OPENDJ-7219 |
PreParseAddOperation cannot remove attributes |
Open |
OPENDJ-6579 |
Schema is not populated to remote instances if added before enabling replication |
Open |
OPENDJ-6468 |
ds-mon-* Prometheus metrics are labeled as gauge but seem to be counters |
Open |
OPENDJ-6022 |
PTA to Active Directory returns more than one entry when only one exists |
Open |
OPENDJ-3409 |
Retention and rotation policies do not work with CAUD handlers |
Fixed in 7.3.0 |
1 Upgrade to the listed version or later to get the fix.
DS 7.1.7
| Issue ID | Summary | Status1 |
|---|---|---|
OPENDJ-10131 |
ds-mon-receive-delay metric is not working |
7.5.0 |
OPENDJ-9790 |
Cannot create GeneralizedTimes with large fractional values |
Fixed in 7.3.3, 7.4.0 |
OPENDJ-9250 |
The max-allowed-client-connections limit should not apply to the admin connector |
Fixed in 7.3.0 |
OPENDJ-9213 |
The dsconfig list-replication-domains output contains redundant columns |
Fixed in 7.3.0 |
OPENDJ-9200 |
Backup process logs incorrect number of jdb files |
Fixed in 7.2.3, 7.3.0 |
OPENDJ-9158 |
AM User/CTS affinity failover doesn’t happen when DS’s disk volume is detached |
Fixed in 7.2.3, 7.3.3, 7.4.0 |
OPENDJ-9033 |
DS refuses to start and throws an NPE when a subordinate-base-dn is used |
Fixed in 7.2.1, 7.3.0 |
OPENDJ-8917 |
ReplicationBroker.java swallowed important debugging info |
Fixed in 7.2.1, 7.3.0 |
OPENDJ-8870 |
RFC2307bis schema is different from the internet-draft |
Fixed in 7.2.0 |
OPENDJ-8831 |
Log when and why the ChangeNumberIndexer cannot move forward |
Fixed in 7.2.1, 7.3.0 |
OPENDJ-8829 |
Error messages incorrectly mentions cn=System,cn=monitor |
Fixed in 7.2.0 |
OPENDJ-8808 |
Potential deadlock between overlapping rename operations |
Fixed in 7.2.1, 7.3.0 |
OPENDJ-8805 |
dsconfig exits when setting the "bootstrap-replication-server" property with a <null> value in the "Replication Service Discovery Mechanism". |
Fixed in 7.2.0 |
OPENDJ-8778 |
Setup option --trustStorePassword:file behaves differently than --trustStorePasswordFile |
Fixed in 7.2.0 |
OPENDJ-8473 |
Upgrade does not migrate ds-cfg-je-property values |
Fixed in 7.2.0 |
OPENDJ-8280 |
DS will not start when using a non-US locale after changing config |
Fixed in 7.2.0 |
OPENDJ-8233 |
RS connection error reason is not logged when hostname is not resolvable |
Fixed in 7.3.0 |
OPENDJ-8093 |
Stale replica information returned from cn=monitor |
Open |
OPENDJ-8008 |
OutOfMemoryException in subtree delete |
Fixed in 7.2.0 |
OPENDJ-7942 |
The server ignores critical VLV request controls when falling back to an unindexed search |
Fixed in 7.3.0 |
OPENDJ-7941 |
Client connections to proxy time out after 10 seconds regardless of activity |
Fixed in 7.2.3, 7.3.0 |
OPENDJ-7925 |
The searchrate tool does not retrieve data when used simultaneously with the modrate tool on groups |
Fixed in 7.3.0 |
OPENDJ-7844 |
Difficult to override standard LDAP schema defined in 00-core.ldif |
Open |
OPENDJ-7837 |
Schema replication issues when adding a new server with conflicting schema to an existing topology |
Open |
OPENDJ-7788 |
dsrepl initialize from 5.5 causes the ReplicationDomain listener to die with an NPE |
Open |
OPENDJ-7763 |
Proxy service discovery with RS-only and DS-only seems not to route search |
Open |
OPENDJ-7743 |
Setting DN-valued properties to a config expression causes startup to fail |
Open |
OPENDJ-7741 |
dsrepl add-local-server-to-pre-7-0-topology requires a base DN for an RS |
Open |
OPENDJ-7640 |
Supportextract does not collect all security stores when several keystores have the same basename |
Fixed in 7.2.1, 7.3.0 |
OPENDJ-7596 |
dsbackup has global connection options that do not work with some subcommands |
Fixed in 7.2.0 |
OPENDJ-7544 |
dsconfig online sometimes triggers a Duplicate server IDs error |
Open |
OPENDJ-7516 |
External cn=changelog is not updated while replication initialization is in progress |
Fixed in 7.2.1, 7.3.0 |
OPENDJ-7219 |
PreParseAddOperation cannot remove attributes |
Open |
OPENDJ-6579 |
Schema is not populated to remote instances if added before enabling replication |
Open |
OPENDJ-6468 |
ds-mon-* Prometheus metrics are labeled as gauge but seem to be counters |
Open |
OPENDJ-6022 |
PTA to Active Directory returns more than one entry when only one exists |
Open |
OPENDJ-3409 |
Retention and rotation policies do not work with CAUD handlers |
Fixed in 7.3.0 |
1 Upgrade to the listed version or later to get the fix.
DS 7.0.2
| Issue ID | Summary | Status1 |
|---|---|---|
OPENDJ-9790 |
Cannot create GeneralizedTimes with large fractional values |
Fixed in 7.3.3, 7.4.0 |
OPENDJ-9472 |
Upgrade does not correctly handle previously patched upgrades |
Fixed in 7.1.6, 7.2.3, 7.3.2, 7.4.0 |
OPENDJ-9347 |
GSSAPISASLMechanismHandler incorrectly formats the login conf file |
Fixed in 7.1.5, 7.2.2, 7.3.0 |
OPENDJ-9250 |
The max-allowed-client-connections limit should not apply to the admin connector |
Fixed in 7.3.0 |
OPENDJ-9213 |
The dsconfig list-replication-domains output contains redundant columns |
Fixed in 7.3.0 |
OPENDJ-9033 |
DS refuses to start and throws an NPE when a subordinate-base-dn is used |
Fixed in 7.2.1, 7.3.0 |
OPENDJ-8874 |
Full replica purge should write CSN information right away |
Fixed in 7.1.3, 7.2.0 |
OPENDJ-8870 |
RFC2307bis schema is different from the internet-draft |
Fixed in 7.2.0 |
OPENDJ-8829 |
Error messages incorrectly mentions cn=System,cn=monitor |
Fixed in 7.2.0 |
OPENDJ-8815 |
dsrepl status does not take bad data status into account |
Fixed in 7.1.3, 7.2.1, 7.3.0 |
OPENDJ-8778 |
Setup option --trustStorePassword:file behaves differently than --trustStorePasswordFile |
Fixed in 7.2.0 |
OPENDJ-8698 |
DS should write config archive files in a crash consistent way |
Fixed in 7.1.3, 7.2.0 |
OPENDJ-8613 |
No error is logged when sending of task completion notification email fails |
Fixed in 7.1.3, 7.2.0 |
OPENDJ-8473 |
Upgrade does not migrate ds-cfg-je-property values |
Fixed in 7.2.0 |
OPENDJ-8383 |
dsrepl status fails when certificates accepted interactively |
Fixed in 7.2.0 |
OPENDJ-8378 |
dsrepl status shows deleted replication domains |
Fixed in 7.1.3, 7.2.1, 7.3.0 |
OPENDJ-8280 |
DS will not start when using a non-US locale after changing config |
Fixed in 7.2.0 |
OPENDJ-8243 |
Indexes could cause ldapsearch to return multiple copies of the same entry |
Fixed in 7.1.1, 7.2.0 |
OPENDJ-8227 |
Deadlock between Changelog DB purger and Thread for RS session |
Fixed in 7.2.0 |
OPENDJ-8093 |
Stale replica information returned from cn=monitor |
Open |
OPENDJ-8072 |
dsrepl initialize hangs after re-enabling replication |
Open |
OPENDJ-8046 |
Changelog files are not closed after searching cn=changelog |
Fixed in 7.1.1, 7.2.0 |
OPENDJ-8028 |
Prometheus monitoring doesn’t work with Telegraf |
Fixed in 7.1.1, 7.2.0 |
OPENDJ-8024 |
Prevent configuration of VLV indexes with scope base-object |
Fixed in 7.2.0 |
OPENDJ-7991 |
makeldif: "invalid number of arguments" using DateTime tag with colons |
Fixed in 7.2.0 |
OPENDJ-7971 |
dsbackup fails when JDB file cleaned |
Fixed in 7.1.1, 7.2.0 |
OPENDJ-7970 |
Ensure that DS is crash resilient for all runtime file changes |
Fixed in 7.1.2, 7.2.0 |
OPENDJ-7942 |
The server ignores critical VLV request controls when falling back to an unindexed search |
Fixed in 7.3.0 |
OPENDJ-7941 |
Client connections to proxy time out after 10 seconds regardless of activity |
Fixed in 7.2.3, 7.3.0 |
OPENDJ-7928 |
JSON normalization cannot handle nested arrays |
Fixed in 7.1.0 |
OPENDJ-7905 |
Schema replication error after upgrade |
Fixed in 7.1.0 |
OPENDJ-7889 |
Configuring group-id against DS-only instance requires restart for the change to be reported by monitoring |
Fixed in 7.1.1, 7.2.0 |
OPENDJ-7867 |
NPE if dsbackup bucket name contains underscores |
Fixed in 7.1.0 |
OPENDJ-7851 |
Supportextract tool: clobbers the server.out filehandle when kill -3 is used. |
Fixed in 7.1.0 |
OPENDJ-7847 |
StaticGroup’s objectclass sanity checks are unhelpful |
Fixed in 7.1.0 |
OPENDJ-7844 |
Difficult to override standard LDAP schema defined in 00-core.ldif |
Open |
OPENDJ-7837 |
Schema replication issues when adding a new server with conflicting schema to an existing topology |
Open |
OPENDJ-7818 |
Package based upgrade does not support instances running as non-root |
Fixed in 7.1.1, 7.2.0 |
OPENDJ-7816 |
dsbackup fails when destination is a symbolic link to a real directory |
Fixed in 7.1.2, 7.2.0 |
OPENDJ-7788 |
dsrepl initialize from 5.5 causes the ReplicationDomain listener to die with an NPE |
Open |
OPENDJ-7761 |
DS sporadically hangs while reconnecting to an RS |
Fixed in 7.1.0 |
OPENDJ-7758 |
DS 7.0 dsrepl add-local-server-to-pre-7-0-topology: NPE if master-key is in different keystore |
Fixed in 7.1.0 |
OPENDJ-7755 |
DS 7.0 replication with older version, CryptoManager failed to import the symmetric key entry |
Fixed in 7.1.1, 7.2.0 |
OPENDJ-7744 |
dsrepl initialize in a topology with DS7 and DS 5.5 fails if DS7 serverId starts with 0 |
Fixed in 7.1.1, 7.2.0 |
OPENDJ-7743 |
Setting DN-valued properties to a config expression causes startup to fail |
Open |
OPENDJ-7737 |
ConfigurationFramework#initialize0 changes the class loader without clearing the map of registered jar files |
Fixed in 7.1.0 |
OPENDJ-7706 |
Unable to set up replication between standalone DS and RS servers and older versions of DS or OpenDJ |
Open |
OPENDJ-7699 |
Supportextract throws NoSuchElementException when the server.pid file is empty |
Fixed in 7.1.0 |
OPENDJ-7689 |
dsrepl add-local-server-to-pre-7-0-topology does not tolerate separate keystore and truststore |
Fixed in 7.1.0 |
OPENDJ-7688 |
Spurious DS disconnections because of missing heartbeat |
Fixed in 7.2.1, 7.3.0 |
OPENDJ-7687 |
Global Access Control Policy regarding cn=schema is too restrictive |
Fixed in 7.1.0 |
OPENDJ-7655 |
Replaying multiple MODIFYDN operations is very slow |
Fixed in 7.1.0 |
OPENDJ-7653 |
replication issue in the cloud after ldapadd |
Fixed in 7.1.0 |
OPENDJ-7596 |
dsbackup has global connection options that do not work with some subcommands |
Fixed in 7.2.0 |
OPENDJ-7516 |
External cn=changelog is not updated while replication initialization is in progress |
Fixed in 7.2.1, 7.3.0 |
OPENDJ-7513 |
Missing subSchemaSubEntry attribute from rootDSE access controls |
Fixed in 7.1.0 |
OPENDJ-7481 |
JSON logs do not contain proxy auth DN |
Fixed in 7.1.0 |
OPENDJ-7474 |
Docker sample README.md provides wrong instructions for running the container |
Fixed in 7.1.0 |
OPENDJ-7322 |
IndexOutOfBoundsException while configuring max-replication-delay-health-check |
Fixed in 7.1.0 |
OPENDJ-7219 |
PreParseAddOperation cannot remove attributes |
Open |
OPENDJ-7014 |
Some operational attributes are not replicated when a restore --dry-run is used against an online server |
Open |
OPENDJ-7011 |
RFC 2252 Binary syntax doesn’t use ";binary" transfer encoding |
Open |
OPENDJ-6791 |
RS reconnect delay is too aggressive |
Fixed in 7.3.3, 7.4.0 |
OPENDJ-6774 |
Searches no longer return attributes in the order requested |
Open |
OPENDJ-6579 |
Schema is not populated to remote instances if added before enabling replication |
Open |
OPENDJ-6468 |
ds-mon-* Prometheus metrics are labeled as gauge but seem to be counters |
Open |
OPENDJ-6022 |
PTA to Active Directory returns more than one entry when only one exists |
Open |
OPENDJ-5602 |
JDK11: unexpected return code 81 using SASL External |
Open |
OPENDJ-4935 |
Replication instability and divergence when using high latency disks |
Fixed in 7.1.2, 7.2.0 |
OPENDJ-3409 |
Retention and rotation policies do not work with CAUD handlers |
Fixed in 7.3.0 |
1 Upgrade to the listed version or later to get the fix.
DS 6.5.6
| Issue ID | Summary | Status1 |
|---|---|---|
OPENDJ-9544 |
Searches for attributes that do not exist in schema still take time |
Fixed in 7.4.0 |
OPENDJ-8842 |
Proxy DS does not cancel psearch to Backend DS if psearch is cancelled |
Fixed in 7.0.0 |
OPENDJ-8838 |
Backslashes in files read via a config expression are mishandled |
Open |
OPENDJ-8829 |
Error messages incorrectly mentions cn=System,cn=monitor |
Fixed in 7.2.0 |
OPENDJ-8613 |
No error is logged when sending of task completion notification email fails |
Fixed in 7.1.3, 7.2.0 |
OPENDJ-8473 |
Upgrade does not migrate ds-cfg-je-property values |
Fixed in 7.2.0 |
OPENDJ-8460 |
Deploying DS6.5.5+JDK11 causes continuous hostname resolution errors in pods with DS6.5.5+JDK8 |
Open |
OPENDJ-8234 |
ADD of large entry is not replicated |
Open |
OPENDJ-8226 |
Support Extract tool ignores non-default changelogDb location when collecting domains.state file |
Fixed in 7.1.1, 7.2.0 |
OPENDJ-8205 |
Log message lists an object’s string representation instead of a file name |
Fixed in 7.1.1, 7.2.0 |
OPENDJ-8137 |
LDIF backend silently rejects entries that fail schema validation |
Fixed in 7.2.0 |
OPENDJ-8089 |
rest2ldap gateway returns string instead of boolean |
Fixed in 7.1.0 |
OPENDJ-8046 |
Changelog files are not closed after searching cn=changelog |
Fixed in 7.1.1, 7.2.0 |
OPENDJ-8024 |
Prevent configuration of VLV indexes with scope base-object |
Fixed in 7.2.0 |
OPENDJ-8018 |
Older servers cannot create a new symmetric key in mixed version topologies |
Open |
OPENDJ-7942 |
The server ignores critical VLV request controls when falling back to an unindexed search |
Fixed in 7.3.0 |
OPENDJ-7919 |
A search for modifyTimestamp>=00000101000000Z results in a YEAR error and disconnect |
Fixed in 7.0.0 |
OPENDJ-7810 |
JMX connections are always considered insecure |
Fixed in 7.0.2, 7.1.0 |
OPENDJ-7687 |
Global Access Control Policy regarding cn=schema is too restrictive |
Fixed in 7.1.0 |
OPENDJ-7654 |
DS is sometimes unable to connect to RS after full gc |
Fixed in 7.2.0 |
OPENDJ-7643 |
Log that is supposedly generated from dsreplication operation is empty or does not exist |
Open |
OPENDJ-7640 |
Supportextract does not collect all security stores when several keystores have the same basename |
Fixed in 7.2.1, 7.3.0 |
OPENDJ-7516 |
External cn=changelog is not updated while replication initialization is in progress |
Fixed in 7.2.1, 7.3.0 |
OPENDJ-7288 |
LDAPS Handlers "SelectorRunner" thread hangs up in Grizzly SSLUtils.sslEngineUnwrap |
Fixed in 7.1.0 |
OPENDJ-7219 |
PreParseAddOperation cannot remove attributes |
Open |
OPENDJ-7099 |
Query for AclRightsInfos can throw an exception due to invalid attribute description |
Fixed in 7.0.0 |
OPENDJ-7011 |
RFC 2252 Binary syntax doesn’t use ";binary" transfer encoding |
Open |
OPENDJ-6977 |
DS expects root user password instead of admin user password in standalone DS , RS deployments |
Open |
OPENDJ-6931 |
DS to RS failover mechanism does not account for non responsive established connections |
Fixed in 7.0.0 |
OPENDJ-6774 |
Searches no longer return attributes in the order requested |
Open |
OPENDJ-6579 |
Schema is not populated to remote instances if added before enabling replication |
Open |
OPENDJ-6499 |
Query on rest2ldap over ssl gets stuck after few curl requests using TLSv1.3 on JDK11 |
Fixed in 7.0.0 |
OPENDJ-6468 |
ds-mon-* Prometheus metrics are labeled as gauge but seem to be counters |
Open |
OPENDJ-6380 |
Warning message for duplicate objectclass schema definition is misleading |
Open |
OPENDJ-6378 |
Entries are returned with attribute names using inconsistent case |
Fixed in 7.0.0 |
OPENDJ-6358 |
backUpAll doesn’t backup ads-truststore.pin |
Open |
OPENDJ-6223 |
Searching telephoneNumber field with a non-numeric value returns all the records |
Fixed in 7.0.0 |
OPENDJ-6221 |
Logging for CONNECT operations are not saved in Nanosecond format |
Fixed in 7.0.0 |
OPENDJ-6198 |
Server won’t start if I try to configure a ConnectionHandler to listen on 2 IP addresses |
Fixed in 7.0.0 |
OPENDJ-6149 |
The Global Access Control Policy option within the dsconfig tool is misleading as is the error message returned |
Open |
OPENDJ-6116 |
Unspecified Communications Error when multiple rest2ldap endpoints share configuration elements |
Fixed in 7.0.0 |
OPENDJ-6022 |
PTA to Active Directory returns more than one entry when only one exists |
Open |
OPENDJ-5985 |
Divergence of "cn=admin data" after setting up secure replication and encrypted backends |
Open |
OPENDJ-5956 |
Data discrepancy between servers if the same attribute has extra spaces in RDN |
Open |
OPENDJ-5745 |
Azure AD Connector Uses Deprecated Untrusted/Unsigned MSOnline Powershell Module |
Open |
OPENDJ-5664 |
JDK 11: illegal reflective access warning during import-ldif |
Fixed in 7.0.0 |
OPENDJ-5663 |
JDK 11: illegal reflective access warning on setup (without profile) |
Open |
OPENDJ-5661 |
supportextract tool help and version options are different from other tools |
Fixed in 7.0.0 |
OPENDJ-5660 |
JDK 11: illegal reflective access warning on setup (with profile) |
Fixed in 7.0.0 |
OPENDJ-5590 |
Proxy: server discovery fails silently when proxy base-dn differs from backend’s base-dn |
Fixed in 7.0.0 |
OPENDJ-5201 |
Tools may prompt to trust certificate multiple times for different reasons |
Open |
OPENDJ-5174 |
dsreplication initialize-all task sometimes fails with STOPPED_BY_ERROR |
Open |
OPENDJ-4943 |
NullPointerException in BackupManager.java when backup --hash is used offline |
Open |
OPENDJ-4475 |
Attribute value password validator does not check substrings in reversed password |
Fixed in 7.0.0 |
OPENDJ-4008 |
dsconfig exits with error when listing global access control policy |
Open |
1 Upgrade to the listed version or later to get the fix.
DS 6.0.0
| Issue ID | Summary | Status1 |
|---|---|---|
OPENDJ-8845 |
Persistent search entry change notifications cannot be read by JNDI |
Fixed in 6.5.6, 7.1.3, 7.2.0 |
OPENDJ-8829 |
Error messages incorrectly mentions cn=System,cn=monitor |
Fixed in 7.2.0 |
OPENDJ-8613 |
No error is logged when sending of task completion notification email fails |
Fixed in 7.1.3, 7.2.0 |
OPENDJ-8473 |
Upgrade does not migrate ds-cfg-je-property values |
Fixed in 7.2.0 |
OPENDJ-8060 |
Changelog search results in error "Unexpected message type when trying to create changelog entry for dn ou=Service : class org.opends.server.replication.protocol.ReplicaOfflineMsg" |
Open |
OPENDJ-8024 |
Prevent configuration of VLV indexes with scope base-object |
Fixed in 7.2.0 |
OPENDJ-7942 |
The server ignores critical VLV request controls when falling back to an unindexed search |
Fixed in 7.3.0 |
OPENDJ-7919 |
A search for modifyTimestamp>=00000101000000Z results in a YEAR error and disconnect |
Fixed in 7.0.0 |
OPENDJ-7818 |
Package based upgrade does not support instances running as non-root |
Fixed in 6.5.5, 7.1.1, 7.2.0 |
OPENDJ-7810 |
JMX connections are always considered insecure |
Fixed in 7.0.2, 7.1.0 |
OPENDJ-7481 |
JSON logs do not contain proxy auth DN |
Fixed in 6.5.5, 7.1.0 |
OPENDJ-7020 |
rebuild-index offline ignores rebuild-index.offline.java-args |
Fixed in 6.5.4, 7.0.0 |
OPENDJ-7014 |
Some operational attributes are not replicated when a restore --dry-run is used against an online server |
Fixed in 6.5.4 |
OPENDJ-6994 |
strict-format-country-string does not affect the server |
Fixed in 6.5.4, 7.0.0 |
OPENDJ-6977 |
DS expects root user password instead of admin user password in standalone DS , RS deployments |
Open |
OPENDJ-6733 |
SMTP handler sends incorrect email when account status is modified by manually updating ds-pwp-account-disabled attribute |
Fixed in 6.5.3, 7.0.0 |
OPENDJ-6711 |
Replication status reports The provided value "5277383431" could not be parsed as an integer. |
Fixed in 6.5.4, 7.0.0 |
OPENDJ-6579 |
Schema is not populated to remote instances if added before enabling replication |
Open |
OPENDJ-6557 |
IDM Password Sync plugin induces 100% CPU in Apache Http Components when used with JDK 11 |
Fixed in 6.5.3, 7.0.0 |
OPENDJ-6378 |
Entries are returned with attribute names using inconsistent case |
Fixed in 7.0.0 |
OPENDJ-6377 |
Replication replay: issues with ReplaySynchronizer |
Fixed in 6.5.4, 7.0.0 |
OPENDJ-6235 |
Stale ds-sync-hist attribute values reappear in the entry after replication is unconfigured |
Fixed in 6.5.2, 7.0.0 |
OPENDJ-6222 |
SMTP messages are sometimes not encoded with the correct charset |
Fixed in 6.5.2, 7.0.0 |
OPENDJ-6221 |
Logging for CONNECT operations are not saved in Nanosecond format |
Fixed in 7.0.0 |
OPENDJ-6196 |
HTTP connection handler continues to listen to 0.0.0.0 after setting listen-address |
Fixed in 6.5.2, 7.0.0 |
OPENDJ-6188 |
Backend returns an incorrect error type when disk space hits low threshold |
Fixed in 6.5.4, 7.0.0 |
OPENDJ-6173 |
cn=monitor memory pool stats do not get updated properly over time |
Fixed in 6.5.2, 7.0.0 |
OPENDJ-5956 |
Data discrepancy between servers if the same attribute has extra spaces in RDN |
Open |
OPENDJ-5636 |
ServiceDiscoveryMechanism can return incorrect Partition |
Open |
OPENDJ-5606 |
Upgrade to DS 6.0 fails if multiple filesystems are involved |
Fixed in 6.5.0 |
OPENDJ-5594 |
StackOverflowError with groupOfURLs when isMemberOf is requested |
Fixed in 6.5.0 |
OPENDJ-5582 |
LdapClientSocket connection leaked when handshake fails |
Fixed in 6.1.0, 6.5.0 |
OPENDJ-5558 |
SDK: LdapUrl is not IPv6 clean |
Fixed in 6.5.0 |
OPENDJ-5503 |
Change number "not found in pending list" |
Open |
OPENDJ-5496 |
DS fails to reconnect to an RS, disconnecting in handshake phase, after system restart |
Fixed in 6.5.0 |
OPENDJ-5481 |
ERR_OPERATION_NOT_FOUND_IN_PENDING message used twice in different contexts |
Fixed in 6.5.0 |
OPENDJ-5440 |
When disk space goes from "low" to "normal" state for changelog, RS rebinds to port and fails |
Fixed in 6.5.0 |
OPENDJ-5423 |
Incorrectly reported missing parent entries cause import-ldif and index rebuilds to fail |
Fixed in 6.5.0 |
OPENDJ-5406 |
Duplicate entry DNs if entry is deleted and then added during export-ldif or dsreplication initialize |
Fixed in 6.5.0 |
OPENDJ-5301 |
Encrypted or signed backups of task or schema backend cannot be restored |
Fixed in 6.5.0 |
OPENDJ-5272 |
"idle-time-limit" global configuration property has no effect |
Fixed in 6.5.0 |
OPENDJ-5260 |
Grizzly pre-allocates a useless MemoryManager |
Fixed in 6.5.0 |
OPENDJ-5218 |
Changelog "break ordering" logging is too noisy |
Open |
OPENDJ-5210 |
Possible memory-leak if request received while bind in progress |
Fixed in 6.5.0 |
OPENDJ-5140 |
PersistentSearch heap usage grows |
Fixed in 6.5.0 |
OPENDJ-5137 |
Reading compressed or encrypted entries fails to close the InflaterInputStream |
Fixed in 6.5.0 |
OPENDJ-5074 |
dsreplication status reports "No replication information found" after DS 6 upgrade |
Open |
OPENDJ-5039 |
Upgrade task tries to move the opendmk-jarfile to a wrong path on instances with split instance/tool folders |
Open |
OPENDJ-5012 |
Replication: reset-change-number fails when DS exposes different public naming contexts (replicated or not) |
Fixed in 6.5.0 |
OPENDJ-4967 |
Rest2ldap UndeliverableException occurs when a referenced entity cannot be fetched |
Fixed in 6.5.0 |
OPENDJ-4948 |
Certificate Mappers fail to use only local backends when matching user entries |
Open |
OPENDJ-4947 |
SASL DIGEST-MD5: bind request failed with protocol error |
Fixed in 6.5.0 |
OPENDJ-4935 |
Replication instability and divergence when using high latency disks |
Fixed in 7.1.2, 7.2.0 |
OPENDJ-4920 |
LDAPS connections which are still inside handshake do not get idle closed |
Open |
OPENDJ-4898 |
Server fails to ignore attempts to abandon certain operations |
Open |
OPENDJ-4881 |
Updates via Rest2ldap fail if record does not contain the necessary object class |
Fixed in 6.5.0 |
OPENDJ-4877 |
Perf regression on add/delete with default indexes |
Open |
OPENDJ-4852 |
Backup with --backupAll misses a few backends |
Fixed in 6.5.0 |
OPENDJ-4851 |
Exception when uninstalling/stopping replication topology |
Open |
OPENDJ-4775 |
Proxy keeps searching on ports removed from Static Discovery Mechanism |
Open |
OPENDJ-4764 |
REST2LDAP gateway sasl-plain authorization doesn’t handle dn: correctly |
Fixed in 7.0.0 |
OPENDJ-4714 |
SSL handshake now sends 16KB list of CA issuer DNs |
Fixed in 7.0.0 |
OPENDJ-4693 |
Online rebuild-index command ends with a benign error message |
Open |
OPENDJ-4589 |
dsconfig --offline is not case-insensitive |
Fixed in 6.5.0 |
OPENDJ-4475 |
Attribute value password validator does not check substrings in reversed password |
Fixed in 7.0.0 |
OPENDJ-4474 |
Changing the JE db-logging-level to a non-allowed value disables the backend on restart |
Open |
OPENDJ-4058 |
IDM Account Status notification handler doesn’t look for certificates correctly |
Fixed in 6.5.4, 7.0.0 |
OPENDJ-4008 |
dsconfig exits with error when listing global access control policy |
Open |
OPENDJ-390 |
ConcurrentModificationException during backup all |
Open |
1 Upgrade to the listed version or later to get the fix.
DS 5.5.3
| Issue ID | Summary | Status1 |
|---|---|---|
OPENDJ-8845 |
Persistent search entry change notifications cannot be read by JNDI |
Fixed in 6.5.6, 7.1.3, 7.2.0 |
OPENDJ-8712 |
DS replica switching from local RS to remote RS might incur transient high response time |
Open |
OPENDJ-8610 |
RS-RS session thread stuck in Session.send could prevent DS from shutdown |
Fixed in 7.1.5, 7.2.0 |
OPENDJ-8060 |
Changelog search results in error "Unexpected message type when trying to create changelog entry for dn ou=Service : class org.opends.server.replication.protocol.ReplicaOfflineMsg" |
Open |
OPENDJ-8024 |
Prevent configuration of VLV indexes with scope base-object |
Fixed in 7.2.0 |
OPENDJ-7810 |
JMX connections are always considered insecure |
Fixed in 7.0.2, 7.1.0 |
OPENDJ-7788 |
dsrepl initialize from 5.5 causes the ReplicationDomain listener to die with an NPE |
Open |
OPENDJ-7481 |
JSON logs do not contain proxy auth DN |
Fixed in 6.5.5, 7.1.0 |
OPENDJ-7341 |
Changes made after disk space recovery might not be sync’d to other nodes |
Open |
OPENDJ-7020 |
rebuild-index offline ignores rebuild-index.offline.java-args |
Fixed in 6.5.4, 7.0.0 |
OPENDJ-7014 |
Some operational attributes are not replicated when a restore --dry-run is used against an online server |
Fixed in 6.5.4 |
OPENDJ-6994 |
strict-format-country-string does not affect the server |
Fixed in 6.5.4, 7.0.0 |
OPENDJ-6977 |
DS expects root user password instead of admin user password in standalone DS , RS deployments |
Open |
OPENDJ-6697 |
Unique Attribute Plugin fails to clear DN’s on a failed ADD from a Client Unbind |
Open |
OPENDJ-6579 |
Schema is not populated to remote instances if added before enabling replication |
Open |
OPENDJ-6521 |
setup checks admin port despite options --skipPortCheck --doNotStart |
Fixed in 6.5.3, 7.0.0 |
OPENDJ-6378 |
Entries are returned with attribute names using inconsistent case |
Fixed in 7.0.0 |
OPENDJ-6240 |
DS not honoring per user resource limits when processing RESTful operation requests |
Fixed in 6.5.3, 7.0.0 |
OPENDJ-6090 |
Error message 'dsreplication reset-change-number' does not list the affected baseDNs |
Open |
OPENDJ-6074 |
Attribute value uniqueness is not checked for custom attributes when a modify DN request with newSuperiorDN is performed |
Fixed in 7.0.0 |
OPENDJ-5985 |
Divergence of "cn=admin data" after setting up secure replication and encrypted backends |
Open |
OPENDJ-5636 |
ServiceDiscoveryMechanism can return incorrect Partition |
Open |
OPENDJ-5594 |
StackOverflowError with groupOfURLs when isMemberOf is requested |
Fixed in 6.5.0 |
OPENDJ-5558 |
SDK: LdapUrl is not IPv6 clean |
Fixed in 6.5.0 |
OPENDJ-5496 |
DS fails to reconnect to an RS, disconnecting in handshake phase, after system restart |
Fixed in 6.5.0 |
OPENDJ-5481 |
ERR_OPERATION_NOT_FOUND_IN_PENDING message used twice in different contexts |
Fixed in 6.5.0 |
OPENDJ-5474 |
java.awt.AWTError when running status command on system without X11 |
Fixed in 6.0.0 |
OPENDJ-5301 |
Encrypted or signed backups of task or schema backend cannot be restored |
Fixed in 6.5.0 |
OPENDJ-5293 |
Proxy: Replication Service Discovery Mechanism logs WARNING |
Fixed in 6.5.0 |
OPENDJ-5229 |
Objectclass matching fails when objectclass has multiple names |
Fixed in 6.0.0 |
OPENDJ-5217 |
Weird error message in logs for input string |
Fixed in 6.5.0 |
OPENDJ-5140 |
PersistentSearch heap usage grows |
Fixed in 6.5.0 |
OPENDJ-5115 |
ldappasswordmodify fails, NPE in PasswordPolicyState updatePasswordHistory |
Fixed in 6.5.0 |
OPENDJ-5070 |
Over allocation of db-cache-percent for existing backend results in empty error |
Open |
OPENDJ-4935 |
Replication instability and divergence when using high latency disks |
Fixed in 7.1.2, 7.2.0 |
OPENDJ-4920 |
LDAPS connections which are still inside handshake do not get idle closed |
Open |
OPENDJ-4898 |
Server fails to ignore attempts to abandon certain operations |
Open |
OPENDJ-4851 |
Exception when uninstalling/stopping replication topology |
Open |
OPENDJ-4823 |
Adding a third replica breaks key ordering of the changelogDb |
Fixed in 6.0.0 |
OPENDJ-4764 |
REST2LDAP gateway sasl-plain authorization doesn’t handle dn: correctly |
Fixed in 7.0.0 |
OPENDJ-4587 |
Replication: Medium consistency point frozen when a DS+RS is unconfigured or a DS+RS is stopped |
Fixed in 6.0.0 |
OPENDJ-4521 |
JSON logger can eat lots of cpu on an otherwise idle server |
Fixed in 6.0.0 |
OPENDJ-4475 |
Attribute value password validator does not check substrings in reversed password |
Fixed in 7.0.0 |
OPENDJ-4474 |
Changing the JE db-logging-level to a non-allowed value disables the backend on restart |
Open |
OPENDJ-4312 |
addrate raises NoSuchElementException when using numusers |
Open |
OPENDJ-4243 |
Replication status’s Age of Oldest Missing Change (AOMC) is not reset even if Missing Changes (MC) is 0 |
Open |
OPENDJ-4229 |
status command with keystore options throws NullPointerException |
Fixed in 6.5.0 |
OPENDJ-4218 |
RS not sending update for domain cn=admin data |
Fixed in 6.0.0 |
OPENDJ-4109 |
The ldappasswordmodify command fails when requested through a directory proxy server |
Open |
OPENDJ-4106 |
Incorrect error when importing bad LDIF on setup |
Open |
OPENDJ-4058 |
IDM Account Status notification handler doesn’t look for certificates correctly |
Fixed in 6.5.4, 7.0.0 |
OPENDJ-4008 |
dsconfig exits with error when listing global access control policy |
Open |
OPENDJ-390 |
ConcurrentModificationException during backup all |
Open |
1 Upgrade to the listed version or later to get the fix.