OpenDJ Fixes, Limitations, & Known Issues The current list of fixes and issues reflects OpenDJ in progress as of July 23, 2012. OpenDJ issues are tracked at https://bugster.forgerock.org/jira/browse/OPENDJ.
Fixes Since Last Release The following bugs were fixed in this release. OPENDJ-538: NPE during initialization of quick upgrade OPENDJ-537: Broken link from Control Panel to Admin Guide OPENDJ-528: rebuild-index doesn't rebuild properly DN2ID after an upgrade from OpenDS 2.2. OPENDJ-524: CME in LDAPClientConnection when writing many large responses concurrently to the same connection OPENDJ-520: Worker threads are too greedy when caching memory used for encoding/decoding entries and protocol messages OPENDJ-519: Exception raised when bind fails and debug logging is enabled OPENDJ-507: Index may go untrusted without a message in the errors log. OPENDJ-506: NoSuchElementException thrown during replication in java.util.TreeMap.key(TreeMap.java:1221) OPENDJ-504: Performing Query on telephoneNumber attribute thats not a number returns all entries OPENDJ-500: Upgrade trunk (2.5.0) to JE 5.0.48 OPENDJ-494: dsreplication initialize reports negative percentage of completion OPENDJ-488: Cancel request succeeds with result code 118 (CANCELED) when it should receive result code 0 (SUCCESS) OPENDJ-487: Normal acis under cn=config are not loaded at startup OPENDJ-477: Adding an entry with binary options fails during reading ldif file OPENDJ-476: Manage Account fails with NPE if target DN does not exist OPENDJ-475: Incorrect behaviour/result code regarding non-critical controls OPENDJ-472: Offline import LDIF reject entries, doesn't report the correct count of them, and store them in both rejected and skipped files. OPENDJ-471: FIFOEntryCache may leave stalled data when low in memory. OPENDJ-470: AttributeBuilder's SmallSet doesn't implement the Contains method of a Set OPENDJ-465: WhoAmI Extended operation code duplicates supported controls OPENDJ-462: Spinning threads in JE backend importer OPENDJ-459: User's privileges not working with SASL EXTERNAL auth OPENDJ-456: OpenDJ schema replication fails for 3rd server of topology OPENDJ-447: OpenDJ Quicksetup: Problems when hostname cannot be resolved OPENDJ-439: export-ldif on jeb produces duplicate entries OPENDJ-436: Inconsistency between hostname specified in setup and DIGEST-MD5 fqdn of server. OPENDJ-433: Every other permissions-subjects pair in ACI is ignored OPENDJ-432: LDAPURL doesn't always url-decode baseDN OPENDJ-423: Single AND component filter causes an uncatch exception in ECL (ECLSearchOperation.java:1467) OPENDJ-420: Rare SSLExceptions while handling LDAPS connections and big LDAP searches OPENDJ-414: Avoid displaying debug messages to stdout when running various tools OPENDJ-413: verify-index with "-c" option doesn't work for certain indexes OPENDJ-410: Frequent corruption in ds-sync-hist ordering index. OPENDJ-401: Replication fails with Java 7. OPENDJ-400: ControlPanel issue with values containing \n (such as sunxmlkeyvalue) OPENDJ-398: Misleading replication messages: "Replication server XXXX was attempting to connect to replication server YYYY but has disconnected in handshake phase" OPENDJ-396: Remove support for ServiceTag. OPENDJ-387: dsreplication initialize-all reports negative percentage of completion OPENDJ-384: Substring search on entryUUID fails with a NullPointerException OPENDJ-380: index-entry-limit=0 not working as expected OPENDJ-379: Improve help for the db-evictor-nodes-per-scan parameter. OPENDJ-378: Remove activation.jar as it's bundled with Java 6 OPENDJ-377: Kerberos authentication with AD KDC fails with LoginException(Client not found in Kerberos database (6)) OPENDJ-363: Make it more obvious in the setup tool that the fully-qualified hostname is critical for all secured connections OPENDJ-361: AttributeBuilderTest unit test fails on OpenJDK OPENDJ-359: Fix typo in account status notification property name "time-unti-expiration" OPENDJ-356: Task email shows as from opends-task-notification OPENDJ-349: manage-account returns Seconds Until Idle Account Lockout: 0 (zero) if the last log on date is more than 24 days before the idle lock out interval. OPENDJ-339: Don't register alert handler in unique attribute plugin until we are sure that the configuration is valid OPENDJ-338: Referential integrity plugin updates internal state when validating configuration OPENDJ-337: dsconfig allows users to create hidden components such as network group plugin OPENDJ-333: Missing entryUUID attributes in "cn=admin data" backend prevent updates from being replicated. OPENDJ-327: NPE in access log on clicking "Do not Accept" certificate in Control Panel OPENDJ-322: Binary encoding option causing problems in replace operations OPENDJ-311: setup --cli throws IllegalStateException in getConnectTimeout OPENDJ-310: Replicated changes to referral entries are not applied on replicas OPENDJ-306: Misleading access log error message when client resets the connection. OPENDJ-304: The result code 53 (unwillingToPerform) should only be used for service errors OPENDJ-298: Review screen content is wrong when using QuickSetup OPENDJ-293: InternalClientConnection memory leak when performing password modify/state extended operations or SASL binds OPENDJ-292: LDAP PTA NPE when base-dn or bind-dn not exist on secondary server OPENDJ-290: LDAP PTA valid auth attempt rejected if AD reset connection OPENDJ-288: Use INVALID_CREDENTIALS result code when disconnecting users because their entry has been deleted OPENDJ-285: Unable to modify users entry after LDAP PTA Policy applied OPENDJ-282: dsreplication enable fails with duplicate server ID, while it's about the same server being referenced. OPENDJ-278: ldapSubentry entries should have an implicit scope of { base="" } when no subtree specification is specified OPENDJ-277: Initialize GSSAPI extension after back ends and connectors OPENDJ-274: Replication mishandles a Modify operation with multiple modifications on the same attribute. OPENDJ-266: Extra white space in some of the schema files shipped with OpenDJ 2.4 OPENDJ-256: Fix regular unit test failures on 2.4 branch and trunk OPENDJ-255: Incorrect dsconfig usage for setting multiple property values at once OPENDJ-254: The show-all-attributes flag breaks schema modification, when enabled. OPENDJ-252: ControlPanel fails with a Null Pointer Exception with Oracle JDK7. OPENDJ-249: dsreplication disable --disableAll error removing contents of "cn=admin data" OPENDJ-247: Rename max-entries property in JE backend to something more clearly related to index analysis OPENDJ-242: Password Policy State Extended Operation anomalities... OPENDJ-241: Unexpected authorization failure when using the assertion control with internal root connections OPENDJ-237: Password modification by deleting the value and adding a new one fails with unwilling to perform (would result in multiple password in the entry) OPENDJ-236: Support dn: and u: authid notation in SambaPasswordPlugin OPENDJ-224: Replication fails when replication server is configured for a network interface which is not an alias of localhost/127.0.0.1 OPENDJ-223: Modify operation isn't replayed on replica exactly as on original server. OPENDJ-219: Replication server and draft changelog DB code may attempt to reference closed DB OPENDJ-211: missing ";" in cookie exchange control causes StringIndexOutOfBoundsException OPENDJ-209: dsframework cannot connect OPENDJ-190: Look for tools.properties, etc. in ~/.opendj rather than ~/.opends OPENDJ-188: Change of ~/.opends to ~/.opendj directory for tools.properties should be documented OPENDJ-184: Transient errors when accessing cn=changelog DraftCN DB result in complete shutdown of the replication service. OPENDJ-181: DirectoryException provided value has an invalid length for a UUID OPENDJ-173: External ChangeLog cookies content is altered by Change purging and prevents from continuing search with a previous returned cookie. OPENDJ-172: External ChangeLog Cookie varies when searching with an empty cookie. Cookie should be reproducible. OPENDJ-171: OpenDJ does not support a NULL ChangeLog Cookie value OPENDJ-170: External ChangeLog returns the Cookie Control even when not requested OPENDJ-161: Windows services still refers to the OpenDJ server as opends. OPENDJ-150: ChangeLogEntry schema is not compliant with internet-draft OPENDJ-146: java.lang.OutOfMemoryError: Java heap space OPENDJ-142: Message.raw() with treats first arg as format string even when there are no format arguments OPENDJ-136: On Windows, upgrade fails with NPE during Verify phase OPENDJ-135: upgrade -r fails on Windows OPENDJ-134: upgrade fails when server registered as Windows service OPENDJ-132: upgrade utility does not accept relative path OPENDJ-130: External change log, used in compliance with Internet-draft, shows a divergence between replicas under load. OPENDJ-126: Bad syntax for lastChangeNumber, firstChangeNumber, and lastExternalChangelogCookie OPENDJ-121: Replication failure on startup due to generation ID of -1 OPENDJ-117: Replicated server slow to shutdown and ugly exceptions OPENDJ-115: Make replication connection timeouts and various monitoring intervals configurable OPENDJ-113: Permissive Modify Control fails when deleting non existing attribute OPENDJ-112: The changelog virtual attribute appears in all entries, should only apply to the rootDSE OPENDJ-111: Bugs in ECL changelog creation of changeInitiatorsName attribute OPENDJ-107: Potential for leaking DB cursors in replication databases. OPENDJ-106: QuickStart Welcome Panel calls for Java 5, although OpenDJ now requires Java 6 OPENDJ-105: Replication protocol error. Bad message type. org.opends.server.replication.protocol.StopMsg received, ReplServerStartMsg required OPENDJ-103: Replication in 2.4 head and trunk are no longer compatible with 2.4.0 and 2.4.1 OPENDJ-101: NPE when processing UniqueAttributePlugin/AuthenticatedUsers ChangeListener post-sync for moddn operations with conflicts OPENDJ-100: ControlPanel display schema elements as Custom schema when using remote connection a server (and standard for local) OPENDJ-99: NoSuchElementExceptions while replaying replicated operations. OPENDJ-98: Searches on cn=monitor take a long time OPENDJ-97: Very many minor problems with the error logging for replication OPENDJ-96: Replication server monitor data computation takes too long / blocks rest of server when another RS is cannot be reached OPENDJ-95: Socket leak and constant disconnect/reconnect when a directory server can no longer reach its connected replication server OPENDJ-94: NullPointerException when shutting down worker threads OPENDJ-92: Replication thread naming is confusing and inconsistent OPENDJ-91: Unique Attribute plugin rejects valid modification of unique value. OPENDJ-90: DS disconnecting for more suitable RS even though this RS process is actually STOPed OPENDJ-83: ECL: changeInitiatorsName and potentially changeTime are wrong for delete operations OPENDJ-82: Improve dsreplication status script friendly mode. OPENDJ-75: Combine RFC 3672 and relative subtree specification syntax OPENDJ-73: Memory leak in DITCacheMap OPENDJ-72: cn=Changelog DENY ACI is bad OPENDJ-71: The "container" objectclass used by ECL top entry is missing in the schema. OPENDJ-70: Build does not create the proper reference schema in the config/upgrade directory OPENDJ-69: Binary option not included in userCertificate attribute in change log entries. OPENDJ-65: Host domain name lost from FQDN while enabling replication for a new replica using disreplication enable OPENDJ-64: Exception and stacktrace while running dsreplication OPENDJ-61: Log LDAP protocol version in bind request logging OPENDJ-59: search with paged result control issue OPENDJ-58: cn:schema attribute stored twice in 99-user.ldif schema file OPENDJ-57: ECL: lastChangeNumber and firstChangeNumber reset to zero when the changelog is purged to empty OPENDJ-55: Failing modify operations causing memory leak OPENDJ-51: ECL: virtual attributes are calculated twice per retrieval and gratuitously allocate memory OPENDJ-50: ECL base object search operations on cn=changelog take a long time if the change log is big OPENDJ-48: Draft ECL: lastChangeNumber still not calculated correctly OPENDJ-46: Extensible filters which use dnAttributes are not processed correctly when there is an existing index for the named attribute OPENDJ-28: Investigate why Virtual Attribute unit tests take so long. OPENDJ-27: Schema parsing fails with extensions (X-xxxx) on Syntaxes, but also when spaces are missing OPENDJ-26: Fix OpenDS issue 4585: ConcurrentModificationException in ReplicationBroker OPENDJ-25: Over-verbose logging of LDAP compare operations in access log OPENDJ-24: Fix OpenDS issue 4583: during a search op, ACI with targetfilter and targetattrs gets evaluated wrongly OPENDJ-23: Exception while replaying a delete operation using assured replication. OPENDJ-22: Abandon operations are not always removed from pending list on completion. OPENDJ-21: Account Status Notifications (password changed/reset) are not sent for the Password Modify Extended Operation OPENDJ-17: Generated RC script does not run if run as other than root.
Limitations Release has the following limitations, none of which are new since . OpenDJ directory server provides full LDAP v3 support, except for alias dereferencing, and limited support for LDAPv2. When you configure account lockout as part of password policy, OpenDJ locks an account after the specified number of consecutive authentication failures. Account lockout is not transactional across a replication topology, however. Global account lockout occurs as soon as the authentication failure times have been replicated. OpenDJ is not fully integrated with Microsoft Windows, yet OpenDJ directory server can be run as a service, and thus displayed in the Windows Services Control Panel. OpenDJ replication is designed to permit an unlimited number of replication servers in your topology. Project testing has, however, focused only on topologies of up to eight replication servers. On Niagara systems such as T2000, hardware SSL crypto acceleration runs more slowly than software crypto acceleration. To work around this issue take the following actions. Add more request handlers to LDAP (for TLS) and LDAPS (for SSL) connection handlers. Disable hardware acceleration for server's JVM by removing the SunPKCS11 security provider from jre/lib/security/java.security.
Known Issues For the latest status, query the OpenDJ bug database online at https://bugster.forgerock.org/jira/browse/OPENDJ. Furthermore when deploying for production, make sure that you follow the installation instructions on allowing OpenDJ to use at least 64K (65536) file descriptors, and tuning the JVM appropriately. The following known issues remained open at the time release became available. OPENDJ-542: ExceptionInInitializerError during upgrade with QuickSetup.jnlp OPENDJ-541: Severe Warning about file permissions in error logs when starting OpenDJ OPENDJ-527: rebuild-index --rebuildAll corrupts the indexes for certain data sets OPENDJ-505: dsreplication enable fails when hostname contains an underscore OPENDJ-502: DSML gateway not correctly forwarding modifications to userCertificate;binary attributes OPENDJ-501: dsconfig advanced properties for the attribute syntaxes inconsistent OPENDJ-457: Sleeping replication threads prevent server from shutting down OPENDJ-454: Naming conflict of 2 adds with same DN leaves DIT inconsistent OPENDJ-449: modifiersName and modifyTimestamp not included in 99-user.ldif for replica OPENDJ-443: dsconfig should return wider range of error codes OPENDJ-431: Server side sort control only works on result sets of less than 100000 entries OPENDJ-405: Upgrade fails in many cases when configuration modified in the server to upgrade. OPENDJ-399: DirectoryException thrown processing of virtual static groups during backend initialization OPENDJ-340: dsreplication disable takes --bindDN, but --adminPassword instead of --bindPassword OPENDJ-270: dsreplication disable takes a long time OPENDJ-253: search for draft changeNumber on disabled suffix requires full resync OPENDJ-202: All bind request APIs should take byte or char arrays for passwords OPENDJ-180: SSL handshake failed after restarting replication server OPENDJ-169: Modifying an existing object class definition requires server restart OPENDJ-137: Windows Service management flakiness OPENDJ-118: RS load balancing does not occur after an RS becomes available after an outage OPENDJ-110: Searches on dc=replicationchanges return incomplete results for certain types of LDAP modifications. OPENDJ-104: Remove Thread.sleep() synchronization design anti-pattern in replication code. OPENDJ-88: Online backup of cn=config does not work OPENDJ-49: Replication replay does not take into consideration the server/backend's writability mode.