From 01291e15adbac58faab5371624acabde1e1f0bf9 Mon Sep 17 00:00:00 2001
From: Mark Craig <mark.craig@forgerock.com>
Date: Tue, 02 Jul 2013 05:09:55 +0000
Subject: [PATCH] CR-1883 Fix for OPENDJ-997: Release note the change to default-aci allowing permissive modify control
---
opendj-sdk/opendj3/src/main/docbkx/release-notes/chap-compatibility.xml | 18 +++++++++++++++++-
1 files changed, 17 insertions(+), 1 deletions(-)
diff --git a/opendj-sdk/opendj3/src/main/docbkx/release-notes/chap-compatibility.xml b/opendj-sdk/opendj3/src/main/docbkx/release-notes/chap-compatibility.xml
index 24b3945..2c907ab 100644
--- a/opendj-sdk/opendj3/src/main/docbkx/release-notes/chap-compatibility.xml
+++ b/opendj-sdk/opendj3/src/main/docbkx/release-notes/chap-compatibility.xml
@@ -35,7 +35,7 @@
also deprecated and removed functionality.</para>
<section xml:id="changed-functionality">
- <title>Major Changes to Existing Functionality</title>
+ <title>Important Changes to Existing Functionality</title>
<para>OpenDJ <?eval ${docTargetVersion}?> improves on earlier releases
introducing many new features. Also take the following into account.</para>
@@ -71,6 +71,22 @@
3166</link> such as <literal>US</literal> instead of full names such as
<literal>United States</literal>.</para>
</listitem>
+ <listitem>
+ <para>OpenDJ directory server now allows any client to use the LDAP
+ Permissive Modify Request control, <literal>1.2.840.113556.1.4.1413</literal>,
+ by default for newly installed servers.</para>
+
+ <para>When you upgrade from earlier versions of OpenDJ, however, the
+ previous <literal>global-aci</literal> setting that governs this behavior
+ is not updated. To apply the change manually, change the relevant
+ <literal>global-aci</literal> by using the <command>dsconfig</command>
+ command. An example of how to change a <literal>global-aci</literal>
+ property can be found in the <citetitle>Administration Guide</citetitle>,
+ <link xlink:show="new"
+ xlink:href="admin-guide#access-control-disable-anonymous"
+ xlink:role="http://docbook.org/xlink/role/olink"><citetitle>ACI: Disable
+ Anonymous Access</citetitle></link>.</para>
+ </listitem>
</itemizedlist>
<!-- Not yet for OpenDJ 2.6.0.
--
Gitblit v1.10.0