OpenDJ Fixes, Limitations, & Known IssuesThe current list of fixes and issues reflects OpenDJ
in progress as of July 23, 2012.OpenDJ issues are tracked at https://bugster.forgerock.org/jira/browse/OPENDJ.Fixes Since Last ReleaseThe following bugs were fixed in this release.OPENDJ-538: NPE during initialization of quick upgradeOPENDJ-537: Broken link from Control Panel to Admin GuideOPENDJ-528: rebuild-index doesn't rebuild properly DN2ID after an upgrade from OpenDS 2.2.OPENDJ-524: CME in LDAPClientConnection when writing many large responses concurrently to the same connectionOPENDJ-520: Worker threads are too greedy when caching memory used for encoding/decoding entries and protocol messagesOPENDJ-519: Exception raised when bind fails and debug logging is enabledOPENDJ-507: Index may go untrusted without a message in the errors log.OPENDJ-506: NoSuchElementException thrown during replication in java.util.TreeMap.key(TreeMap.java:1221)OPENDJ-504: Performing Query on telephoneNumber attribute thats not a number returns all entriesOPENDJ-500: Upgrade trunk (2.5.0) to JE 5.0.48OPENDJ-494: dsreplication initialize reports negative percentage of completionOPENDJ-488: Cancel request succeeds with result code 118 (CANCELED) when it should receive result code 0 (SUCCESS)OPENDJ-487: Normal acis under cn=config are not loaded at startupOPENDJ-477: Adding an entry with binary options fails during reading ldif fileOPENDJ-476: Manage Account fails with NPE if target DN does not existOPENDJ-475: Incorrect behaviour/result code regarding non-critical controlsOPENDJ-472: Offline import LDIF reject entries, doesn't report the correct count of them, and store them in both rejected and skipped files.OPENDJ-471: FIFOEntryCache may leave stalled data when low in memory.OPENDJ-470: AttributeBuilder's SmallSet doesn't implement the Contains method of a SetOPENDJ-465: WhoAmI Extended operation code duplicates supported controlsOPENDJ-462: Spinning threads in JE backend importerOPENDJ-459: User's privileges not working with SASL EXTERNAL authOPENDJ-456: OpenDJ schema replication fails for 3rd server of topologyOPENDJ-447: OpenDJ Quicksetup: Problems when hostname cannot be resolvedOPENDJ-439: export-ldif on jeb produces duplicate entriesOPENDJ-436: Inconsistency between hostname specified in setup and DIGEST-MD5 fqdn of server.OPENDJ-433: Every other permissions-subjects pair in ACI is ignoredOPENDJ-432: LDAPURL doesn't always url-decode baseDNOPENDJ-423: Single AND component filter causes an uncatch exception in ECL (ECLSearchOperation.java:1467)OPENDJ-420: Rare SSLExceptions while handling LDAPS connections and big LDAP searchesOPENDJ-414: Avoid displaying debug messages to stdout when running various toolsOPENDJ-413: verify-index with "-c" option doesn't work for certain indexesOPENDJ-410: Frequent corruption in ds-sync-hist ordering index.OPENDJ-401: Replication fails with Java 7.OPENDJ-400: ControlPanel issue with values containing \n (such as sunxmlkeyvalue)OPENDJ-398: Misleading replication messages: "Replication server XXXX was attempting to connect to replication server YYYY but has disconnected in handshake phase"OPENDJ-396: Remove support for ServiceTag.OPENDJ-387: dsreplication initialize-all reports negative percentage of completionOPENDJ-384: Substring search on entryUUID fails with a NullPointerExceptionOPENDJ-380: index-entry-limit=0 not working as expectedOPENDJ-379: Improve help for the db-evictor-nodes-per-scan parameter.OPENDJ-378: Remove activation.jar as it's bundled with Java 6OPENDJ-377: Kerberos authentication with AD KDC fails with LoginException(Client not found in Kerberos database (6))OPENDJ-363: Make it more obvious in the setup tool that the fully-qualified hostname is critical for all secured connectionsOPENDJ-361: AttributeBuilderTest unit test fails on OpenJDKOPENDJ-359: Fix typo in account status notification property name "time-unti-expiration"OPENDJ-356: Task email shows as from opends-task-notificationOPENDJ-349: manage-account returns Seconds Until Idle Account Lockout: 0 (zero) if the last log on date is more than 24 days before the idle lock out interval.OPENDJ-339: Don't register alert handler in unique attribute plugin until we are sure that the configuration is validOPENDJ-338: Referential integrity plugin updates internal state when validating configurationOPENDJ-337: dsconfig allows users to create hidden components such as network group pluginOPENDJ-333: Missing entryUUID attributes in "cn=admin data" backend prevent updates from being replicated.OPENDJ-327: NPE in access log on clicking "Do not Accept" certificate in Control PanelOPENDJ-322: Binary encoding option causing problems in replace operationsOPENDJ-311: setup --cli throws IllegalStateException in getConnectTimeoutOPENDJ-310: Replicated changes to referral entries are not applied on replicasOPENDJ-306: Misleading access log error message when client resets the connection.OPENDJ-304: The result code 53 (unwillingToPerform) should only be used for service errorsOPENDJ-298: Review screen content is wrong when using QuickSetupOPENDJ-293: InternalClientConnection memory leak when performing password modify/state extended operations or SASL bindsOPENDJ-292: LDAP PTA NPE when base-dn or bind-dn not exist on secondary serverOPENDJ-290: LDAP PTA valid auth attempt rejected if AD reset connectionOPENDJ-288: Use INVALID_CREDENTIALS result code when disconnecting users because their entry has been deletedOPENDJ-285: Unable to modify users entry after LDAP PTA Policy appliedOPENDJ-282: dsreplication enable fails with duplicate server ID, while it's about the same server being referenced.OPENDJ-278: ldapSubentry entries should have an implicit scope of { base="" } when no subtree specification is specifiedOPENDJ-277: Initialize GSSAPI extension after back ends and connectorsOPENDJ-274: Replication mishandles a Modify operation with multiple modifications on the same attribute.OPENDJ-266: Extra white space in some of the schema files shipped with OpenDJ 2.4OPENDJ-256: Fix regular unit test failures on 2.4 branch and trunkOPENDJ-255: Incorrect dsconfig usage for setting multiple property values at onceOPENDJ-254: The show-all-attributes flag breaks schema modification, when enabled.OPENDJ-252: ControlPanel fails with a Null Pointer Exception with Oracle JDK7.OPENDJ-249: dsreplication disable --disableAll error removing contents of "cn=admin data"OPENDJ-247: Rename max-entries property in JE backend to something more clearly related to index analysisOPENDJ-242: Password Policy State Extended Operation anomalities...OPENDJ-241: Unexpected authorization failure when using the assertion control with internal root connectionsOPENDJ-237: Password modification by deleting the value and adding a new one fails with unwilling to perform (would result in multiple password in the entry)OPENDJ-236: Support dn: and u: authid notation in SambaPasswordPluginOPENDJ-224: Replication fails when replication server is configured for a network interface which is not an alias of localhost/127.0.0.1OPENDJ-223: Modify operation isn't replayed on replica exactly as on original server.OPENDJ-219: Replication server and draft changelog DB code may attempt to reference closed DBOPENDJ-211: missing ";" in cookie exchange control causes StringIndexOutOfBoundsExceptionOPENDJ-209: dsframework cannot connectOPENDJ-190: Look for tools.properties, etc. in ~/.opendj rather than ~/.opendsOPENDJ-188: Change of ~/.opends to ~/.opendj directory for tools.properties should be documentedOPENDJ-184: Transient errors when accessing cn=changelog DraftCN DB result in complete shutdown of the replication service.OPENDJ-181: DirectoryException provided value has an invalid length for a UUIDOPENDJ-173: External ChangeLog cookies content is altered by Change purging and prevents from continuing search with a previous returned cookie.OPENDJ-172: External ChangeLog Cookie varies when searching with an empty cookie. Cookie should be reproducible.OPENDJ-171: OpenDJ does not support a NULL ChangeLog Cookie valueOPENDJ-170: External ChangeLog returns the Cookie Control even when not requestedOPENDJ-161: Windows services still refers to the OpenDJ server as opends.OPENDJ-150: ChangeLogEntry schema is not compliant with internet-draftOPENDJ-146: java.lang.OutOfMemoryError: Java heap spaceOPENDJ-142: Message.raw() with treats first arg as format string even when there are no format argumentsOPENDJ-136: On Windows, upgrade fails with NPE during Verify phaseOPENDJ-135: upgrade -r fails on WindowsOPENDJ-134: upgrade fails when server registered as Windows serviceOPENDJ-132: upgrade utility does not accept relative pathOPENDJ-130: External change log, used in compliance with Internet-draft, shows a divergence between replicas under load.OPENDJ-126: Bad syntax for lastChangeNumber, firstChangeNumber, and lastExternalChangelogCookieOPENDJ-121: Replication failure on startup due to generation ID of -1OPENDJ-117: Replicated server slow to shutdown and ugly exceptionsOPENDJ-115: Make replication connection timeouts and various monitoring intervals configurableOPENDJ-113: Permissive Modify Control fails when deleting non existing attributeOPENDJ-112: The changelog virtual attribute appears in all entries, should only apply to the rootDSEOPENDJ-111: Bugs in ECL changelog creation of changeInitiatorsName attributeOPENDJ-107: Potential for leaking DB cursors in replication databases.OPENDJ-106: QuickStart Welcome Panel calls for Java 5, although OpenDJ now requires Java 6OPENDJ-105: Replication protocol error. Bad message type. org.opends.server.replication.protocol.StopMsg received, ReplServerStartMsg requiredOPENDJ-103: Replication in 2.4 head and trunk are no longer compatible with 2.4.0 and 2.4.1OPENDJ-101: NPE when processing UniqueAttributePlugin/AuthenticatedUsers ChangeListener post-sync for moddn operations with conflictsOPENDJ-100: ControlPanel display schema elements as Custom schema when using remote connection a server (and standard for local)OPENDJ-99: NoSuchElementExceptions while replaying replicated operations.OPENDJ-98: Searches on cn=monitor take a long timeOPENDJ-97: Very many minor problems with the error logging for replicationOPENDJ-96: Replication server monitor data computation takes too long / blocks rest of server when another RS is cannot be reachedOPENDJ-95: Socket leak and constant disconnect/reconnect when a directory server can no longer reach its connected replication serverOPENDJ-94: NullPointerException when shutting down worker threadsOPENDJ-92: Replication thread naming is confusing and inconsistentOPENDJ-91: Unique Attribute plugin rejects valid modification of unique value.OPENDJ-90: DS disconnecting for more suitable RS even though this RS process is actually STOPedOPENDJ-83: ECL: changeInitiatorsName and potentially changeTime are wrong for delete operationsOPENDJ-82: Improve dsreplication status script friendly mode.OPENDJ-75: Combine RFC 3672 and relative subtree specification syntaxOPENDJ-73: Memory leak in DITCacheMapOPENDJ-72: cn=Changelog DENY ACI is badOPENDJ-71: The "container" objectclass used by ECL top entry is missing in the schema.OPENDJ-70: Build does not create the proper reference schema in the config/upgrade directoryOPENDJ-69: Binary option not included in userCertificate attribute in change log entries.OPENDJ-65: Host domain name lost from FQDN while enabling replication for a new replica using disreplication enableOPENDJ-64: Exception and stacktrace while running dsreplicationOPENDJ-61: Log LDAP protocol version in bind request loggingOPENDJ-59: search with paged result control issueOPENDJ-58: cn:schema attribute stored twice in 99-user.ldif schema fileOPENDJ-57: ECL: lastChangeNumber and firstChangeNumber reset to zero when the changelog is purged to emptyOPENDJ-55: Failing modify operations causing memory leakOPENDJ-51: ECL: virtual attributes are calculated twice per retrieval and gratuitously allocate memoryOPENDJ-50: ECL base object search operations on cn=changelog take a long time if the change log is bigOPENDJ-48: Draft ECL: lastChangeNumber still not calculated correctlyOPENDJ-46: Extensible filters which use dnAttributes are not processed correctly when there is an existing index for the named attributeOPENDJ-28: Investigate why Virtual Attribute unit tests take so long.OPENDJ-27: Schema parsing fails with extensions (X-xxxx) on Syntaxes, but also when spaces are missingOPENDJ-26: Fix OpenDS issue 4585: ConcurrentModificationException in ReplicationBrokerOPENDJ-25: Over-verbose logging of LDAP compare operations in access logOPENDJ-24: Fix OpenDS issue 4583: during a search op, ACI with targetfilter and targetattrs gets evaluated wronglyOPENDJ-23: Exception while replaying a delete operation using assured replication.OPENDJ-22: Abandon operations are not always removed from pending list on completion.OPENDJ-21: Account Status Notifications (password changed/reset) are not sent for the Password Modify Extended OperationOPENDJ-17: Generated RC script does not run if run as other than root.LimitationsRelease has the following limitations,
none of which are new since .OpenDJ directory server provides full LDAP v3 support, except for
alias dereferencing, and limited support for LDAPv2.When you configure account lockout as part of password policy,
OpenDJ locks an account after the specified number of consecutive
authentication failures. Account lockout is not transactional across a
replication topology, however. Global account lockout occurs as soon as
the authentication failure times have been replicated.OpenDJ is not fully integrated with Microsoft Windows, yet OpenDJ
directory server can be run as a service, and thus displayed in the
Windows Services Control Panel.OpenDJ replication is designed to permit an unlimited number
of replication servers in your topology. Project testing has, however,
focused only on topologies of up to eight replication servers.On Niagara systems such as T2000, hardware SSL crypto acceleration
runs more slowly than software crypto acceleration. To work around this
issue take the following actions.Add more request handlers to LDAP (for TLS) and LDAPS (for SSL)
connection handlers.Disable hardware acceleration for server's JVM by removing the
SunPKCS11 security provider from
jre/lib/security/java.security.Known IssuesFor the latest status, query the OpenDJ bug database online at
https://bugster.forgerock.org/jira/browse/OPENDJ.Furthermore when deploying for production, make sure that you follow
the installation instructions on allowing OpenDJ to use at least 64K (65536)
file descriptors, and tuning the JVM appropriately.The following known issues remained open at the time release
became available.OPENDJ-542: ExceptionInInitializerError during upgrade with QuickSetup.jnlpOPENDJ-541: Severe Warning about file permissions in error logs when starting OpenDJOPENDJ-527: rebuild-index --rebuildAll corrupts the indexes for certain data setsOPENDJ-505: dsreplication enable fails when hostname contains an underscoreOPENDJ-502: DSML gateway not correctly forwarding modifications to userCertificate;binary attributesOPENDJ-501: dsconfig advanced properties for the attribute syntaxes inconsistentOPENDJ-457: Sleeping replication threads prevent server from shutting downOPENDJ-454: Naming conflict of 2 adds with same DN leaves DIT inconsistentOPENDJ-449: modifiersName and modifyTimestamp not included in 99-user.ldif for replicaOPENDJ-443: dsconfig should return wider range of error codesOPENDJ-431: Server side sort control only works on result sets of less than 100000 entriesOPENDJ-405: Upgrade fails in many cases when configuration modified in the server to upgrade.OPENDJ-399: DirectoryException thrown processing of virtual static groups during backend initializationOPENDJ-340: dsreplication disable takes --bindDN, but --adminPassword instead of --bindPasswordOPENDJ-270: dsreplication disable takes a long timeOPENDJ-253: search for draft changeNumber on disabled suffix requires full resyncOPENDJ-202: All bind request APIs should take byte or char arrays for passwordsOPENDJ-180: SSL handshake failed after restarting replication serverOPENDJ-169: Modifying an existing object class definition requires server restartOPENDJ-137: Windows Service management flakinessOPENDJ-118: RS load balancing does not occur after an RS becomes available after an outageOPENDJ-110: Searches on dc=replicationchanges return incomplete results for certain types of LDAP modifications.OPENDJ-104: Remove Thread.sleep() synchronization design anti-pattern in replication code.OPENDJ-88: Online backup of cn=config does not workOPENDJ-49: Replication replay does not take into consideration the server/backend's writability mode.