From e92048d28d9981bda430ae17445fbaf98598b83b Mon Sep 17 00:00:00 2001
From: Mark Craig <mark.craig@forgerock.com>
Date: Tue, 18 Oct 2011 12:30:27 +0000
Subject: [PATCH] Update for recent improvements and new features; cleanup
---
opendj3/src/main/docbkx/release-notes/chap-issues.xml | 40 +++++++------
opendj3/src/main/docbkx/release-notes/chap-support.xml | 2
opendj3/src/main/docbkx/release-notes/chap-testing.xml | 4
opendj3/src/main/docbkx/release-notes/chap-feedback.xml | 8 +-
opendj3/src/main/docbkx/release-notes/chap-compatibility.xml | 8 +-
opendj3/src/main/docbkx/release-notes/chap-whats-new.xml | 63 ++++++++++++++++----
6 files changed, 79 insertions(+), 46 deletions(-)
diff --git a/opendj3/src/main/docbkx/release-notes/chap-compatibility.xml b/opendj3/src/main/docbkx/release-notes/chap-compatibility.xml
index 7ddf0c4..0c0fb3a 100644
--- a/opendj3/src/main/docbkx/release-notes/chap-compatibility.xml
+++ b/opendj3/src/main/docbkx/release-notes/chap-compatibility.xml
@@ -43,7 +43,8 @@
<section xml:id="deprecated-functionality">
<title>Deprecated Functionality</title>
- <para>No functionality is deprecated in OpenDJ <?eval ${product.version}?>.</para>
+ <para>No functionality is deprecated in OpenDJ
+ <?eval ${docTargetVersion}?>.</para>
<para>No functionality is planned to be deprecated at this time.</para>
</section>
@@ -51,10 +52,9 @@
<section xml:id="removed-functionality">
<title>Removed Functionality</title>
- <para>No functionality has been removed in OpenDJ <?eval ${product.version}?>.</para>
+ <para>No functionality has been removed in OpenDJ
+ <?eval ${docTargetVersion}?>.</para>
<para>No functionality is planned to be removed at this time.</para>
</section>
-
</chapter>
-
diff --git a/opendj3/src/main/docbkx/release-notes/chap-feedback.xml b/opendj3/src/main/docbkx/release-notes/chap-feedback.xml
index a819bfb..a66877b 100644
--- a/opendj3/src/main/docbkx/release-notes/chap-feedback.xml
+++ b/opendj3/src/main/docbkx/release-notes/chap-feedback.xml
@@ -44,7 +44,7 @@
<para>When requesting help with a problem, please include the following
information:</para>
-
+
<itemizedlist>
<listitem>
<para>Description of the problem, including when the problem occurs and
@@ -52,16 +52,14 @@
</listitem>
<listitem>
<para>Machine type, operating system version, web container and version,
- JDK version, and OpenDJ release version, including any patches or other
+ Java version, and OpenDJ release version, including any patches or other
software that might be affecting the problem</para>
</listitem>
<listitem>
<para>Steps to reproduce the problem</para>
</listitem>
<listitem>
- <para>Any relevant access and error logs or core dumps</para>
+ <para>Any relevant access and error logs, stack traces, or core dumps</para>
</listitem>
</itemizedlist>
-
</chapter>
-
diff --git a/opendj3/src/main/docbkx/release-notes/chap-issues.xml b/opendj3/src/main/docbkx/release-notes/chap-issues.xml
index 2af0a35..661584d 100644
--- a/opendj3/src/main/docbkx/release-notes/chap-issues.xml
+++ b/opendj3/src/main/docbkx/release-notes/chap-issues.xml
@@ -52,7 +52,8 @@
<section xml:id="limitations">
<title>Limitations</title>
- <para>Release <?eval ${docTargetVersion}?> has the following limitations.</para>
+ <para>Release <?eval ${docTargetVersion}?> has the following limitations,
+ none of which are new since <?eval ${stableServerVersion} ?>.</para>
<itemizedlist>
<listitem>
@@ -60,8 +61,10 @@
alias dereferencing, and limited support for LDAPv2.</para>
</listitem>
<listitem>
- <!-- TODO: explain the mechanism of how lockout works. -->
- <para>Account lockout works on a per-server basis only.</para>
+ <para>When you configure account lockout as part of password policy,
+ OpenDJ locks an account after the specified number of consecutive
+ authentication failures. Account lockout is not transactional across a
+ replication topology, however.</para>
</listitem>
<listitem>
<para>OpenDJ is not fully integrated with Microsoft Windows, yet OpenDJ
@@ -74,20 +77,20 @@
focused only on topologies of up to eight replication servers.</para>
</listitem>
<listitem>
- <para>On Niagara systems such as T2000, hardware SSL crypto acceleration runs
- more slowly than software crypto acceleration. To work around this issue take
- the following actions.</para>
- <orderedlist>
- <listitem>
- <para>Add more request handlers to LDAP (for TLS) and LDAPS (for SSL)
- connection handlers.</para>
- </listitem>
- <listitem>
- <para>Disable hardware acceleration for server's JVM by removing the
- SunPKCS11 security provider from
- <filename>jre/lib/security/java.security</filename>.</para>
- </listitem>
- </orderedlist>
+ <para>On Niagara systems such as T2000, hardware SSL crypto acceleration
+ runs more slowly than software crypto acceleration. To work around this
+ issue take the following actions.</para>
+ <orderedlist>
+ <listitem>
+ <para>Add more request handlers to LDAP (for TLS) and LDAPS (for SSL)
+ connection handlers.</para>
+ </listitem>
+ <listitem>
+ <para>Disable hardware acceleration for server's JVM by removing the
+ SunPKCS11 security provider from
+ <filename>jre/lib/security/java.security</filename>.</para>
+ </listitem>
+ </orderedlist>
</listitem>
</itemizedlist>
</section>
@@ -106,8 +109,7 @@
<para>Furthermore when deploying for production, make sure that you follow
the installation instructions on allowing OpenDJ to use at least 64K (65536)
- file descriptors, tuning the JVM appropriately, and increasing database
- cache size from the default of 10%.</para>
+ file descriptors, and tuning the JVM appropriately.</para>
<para>For the latest status, query the OpenDJ bug database online at
<link xlink:href='https://bugster.forgerock.org/jira/browse/OPENDJ'
diff --git a/opendj3/src/main/docbkx/release-notes/chap-support.xml b/opendj3/src/main/docbkx/release-notes/chap-support.xml
index 5f44532..9f98d36 100644
--- a/opendj3/src/main/docbkx/release-notes/chap-support.xml
+++ b/opendj3/src/main/docbkx/release-notes/chap-support.xml
@@ -38,6 +38,4 @@
partner in your area, see <link
xlink:href='http://www.forgerock.com/partners.html'
>http://www.forgerock.com/partners.html</link>.</para>
-
</chapter>
-
diff --git a/opendj3/src/main/docbkx/release-notes/chap-testing.xml b/opendj3/src/main/docbkx/release-notes/chap-testing.xml
index 25d6b2e..9da91df 100644
--- a/opendj3/src/main/docbkx/release-notes/chap-testing.xml
+++ b/opendj3/src/main/docbkx/release-notes/chap-testing.xml
@@ -44,13 +44,13 @@
<itemizedlist>
<listitem>
- <para>Apple Mac OS X 10.6</para>
+ <para>Apple Mac OS X 10.7</para>
</listitem>
<listitem>
<para>Linux 2.6</para>
</listitem>
<listitem>
- <para>Microsoft Windows 7</para>
+ <para>Microsoft Windows Server 2008</para>
</listitem>
<listitem>
<para>Oracle Solaris 10</para>
diff --git a/opendj3/src/main/docbkx/release-notes/chap-whats-new.xml b/opendj3/src/main/docbkx/release-notes/chap-whats-new.xml
index ad653f5..94ca023 100644
--- a/opendj3/src/main/docbkx/release-notes/chap-whats-new.xml
+++ b/opendj3/src/main/docbkx/release-notes/chap-whats-new.xml
@@ -32,19 +32,24 @@
<title>What's New in OpenDJ <?eval ${docTargetVersion}?></title>
<para>Compared to the OpenDJ <?eval ${stableServerVersion} ?>, OpenDJ
- <?eval ${docTargetVersion}?> fixes a number of issues, and provides the
- following additional features.</para>
+ <?eval ${docTargetVersion}?> fixes a number of issues. OpenDJ
+ <?eval ${docTargetVersion}?> provides the following new features.</para>
<itemizedlist>
<listitem>
- <para>TODO</para>
- </listitem>
- <listitem>
<para>OpenDJ now lets you filter access and audit logs to focus on
messages that interest you. OpenDJ supports many criteria for flexible
log filtering. (OPENDJ-308)</para>
</listitem>
<listitem>
+ <para>OpenDJ now logs use of the proxied authorization V1 control with
+ <literal>obsoleteProxiedAuthzV1Control</literal> (OPENDJ-283).</para>
+ </listitem>
+ <listitem>
+ <para>OpenDJ DSML gateway can now connect over SSL to the LDAP
+ server (OPENDJ-269).</para>
+ </listitem>
+ <listitem>
<para>OpenDJ now lets you delegate authentication to another LDAP
directory service, such as Active Directory. The feature is called
<firstterm>pass through authentication</firstterm> (PTA) (OPENDJ-262).
@@ -57,7 +62,8 @@
the user with the user's entry on the remote directory service. The two
entries must correspond in one of the following ways.</para>
<listitem>
- <para>Both the OpenDJ entry and the remote entry have the same DN.</para>
+ <para>Both the OpenDJ entry and the remote entry have the same
+ DN.</para>
</listitem>
<listitem>
<para>The OpenDJ entry has an attribute that holds the DN of the entry
@@ -78,6 +84,20 @@
<citetitle>Administration Guide</citetitle> for details.</para>
</listitem>
<listitem>
+ <para>OpenDJ now lets you configure attributes to be removed or renamed
+ on update (OPENDJ-258).</para>
+ </listitem>
+ <listitem>
+ <para>OpenDJ now calls Account Status Notification Handlers when an
+ account in enabled or disabled by the <command>manage-account</command>
+ (OPENDJ-248).</para>
+ </listitem>
+ <listitem>
+ <para>OpenDJ now adds <literal>Unindexed</literal> to access log response
+ messages for unindexed searches, making it easier to identify searches
+ rejected by default (OPENDJ-246).</para>
+ </listitem>
+ <listitem>
<para>OpenDJ can now synchronize Samba password attribute values with the
<literal>userPassword</literal> attribute value, ensuring that when users
change their LDAP passwords in OpenDJ or change their LanMan or NT
@@ -86,18 +106,33 @@
Password plugin by using the <command>dsconfig</command> command.</para>
</listitem>
<listitem>
- <para>Collective attributes can now be applied based on the values of
- virtual attributes (OPENDJ-76).</para>
+ <para>OpenDJ now better supports more, and larger static groups
+ (OPENDJ-197).</para>
</listitem>
<listitem>
- <para>OpenDJ now generates <literal>modifiersName</literal> and
- <literal>modifyTimestamp</literal> for add operations (OPENDJ-84).</para>
+ <para>Change log content and configuration has been improved in this
+ release (OPENDJ-194).</para>
</listitem>
<listitem>
- <para>OpenDJ now permits backup of administrative backend types
- such as LDIF and trust stores (OPENDJ-89).</para>
+ <para>Default database cache size, request handler counts, and replication
+ purge delay are now set more sensibly for default installations
+ (OPENDJ-116, OPENDJ-186).</para>
+ </listitem>
+ <listitem>
+ <para>The character set password validator now supports optional character
+ sets (OPENDJ-168).</para>
+ </listitem>
+ <listitem>
+ <para>Collective attributes can now be applied based on the values of
+ virtual attributes (OPENDJ-76).</para>
+ </listitem>
+ <listitem>
+ <para>OpenDJ now lets you configure the access log to display LDAP
+ controls (OPENDJ-60).</para>
+ </listitem>
+ <listitem>
+ <para>OpenDJ now lets you execute control-panel as any user, not only the
+ user who installed OpenDJ (OPENDJ-19).</para>
</listitem>
</itemizedlist>
-
</chapter>
-
--
Gitblit v1.10.0