Bugs Fixed in Directory Server 6.3.1

This section lists the bugs fixed since the last release of Directory Server.

6344894

When synchronizing multi-domain Active Directory with Identity Synchronization for Windows, synchronization fails on Directory Server because of Active Directory's referrals.

6439482

An ACI problem may enable users to guess correct values.

6490419

A filter using a wildcard for an integer attribute may lead to inconsistent ldapsearch results.

6557125

When Active Directory servers are unavailable, Directory Server hangs in Identity Synchronization for Windows plug-ins.

6557128

When logging through a stale connector, Directory Server crashes in Identity Synchronization for Windows plug-ins.

6557499

After deploying Directory Server Enterprise Edition, defunct processes are created. This issue affects only the ZIP distribution on HP-UX.

6579286

The dsrepair tool does not work correctly on Microsoft Windows systems.

6579820

The replcheck tool does not work correctly on Microsoft Windows systems.

6586725

Replication over SSL may create memory leaks.

6593775

In the Suffix Usage tab of the DSCC console on versions of Directory Server Enterprise Edition 6, refresh does not display all suffixes.

6626454

When a long ACI is added, versions of Directory Server Enterprise Edition 6 might crash.

6632250

With large compound search filters, search performance is poor.

6634048

Use of the reversible password plug-in (des-plugin) might break replication.

6640464

Versions of Directory Server Enterprise Edition 6 do not support multiple certificate-authority certificates using the same dn in the certificate database.

6643813

Use of a large number of masters prevents proper monitoring of replication.

6645742

Enabling a password policy in a replication topology that includes both Directory Server Enterprise Edition 5.2 and Directory Server Enterprise Edition 6 causes replication to fail.

6650039

A race condition can cause a crash at the end of a replication session.

6650749

Some maintenance operations can cause a database recovery when the server restarts.

6651645

Use of pwdReset in a password policy prevents changing a password through proxy authorization.

6663553

A space after the quotation marks in an ACI string can cause erroneous ACI evaluations.

6670977

The DSCC console might fail to display a long ACI.

6675384

A complex CoS can reduce performance.

6680718

Insufficient access rights during logfile rotation cause versions of Directory Server Enterprise Edition 6 to hang.

6683182

Password policies now support a password timeout limit of 315360000 seconds (slightly less than 10 years), reduced from 2147483647 seconds (approximately 68 years).

6683353

If the NSS pin code is longer than eight characters, versions of Directory Server Enterprise Edition 6 do not start.

6683818

A candidate list of more than 2.5 million entries causes a server crash.

6683870

Using DSCC to edit an attribute with a binary syntax corrupts the attribute's value.

6685118

A race condition in opening and closing a connection can crash versions of Directory Server Enterprise Edition 6 in connection_getIp_string.

6686199

If attribute uniqueness plug-in is configured but not enabled, versions of Directory Server Enterprise Edition 6 can crash.

6686632

A race condition in ACI evaluation can cause the directory server to crash.

6687533

If a maintenance operation occurs while changelog trimming is running, a database panic or crash can occur.

6688454

Pass-through authentication prevents ns-slapd from shutting down.

6688891

When the password policy is running in compatibility mode, the password values are displayed in the clear in auditlog regardless of the value of passwordStorageScheme.

6689454

Restoring a backup containing a large changelog (larger than 30,000 database pages) logs the following messages:

DEBUG - conn=-1 op=-1 msgId=-1 - libdb: Lock table is out of available locks ERROR<8232> - Replication - conn=-1 op=-1 msgId=-1 - Internal error Truncate of changelog file failed, error 12 (Not enough space)

6698812

Under Sun Cluster 3.2 control on Solaris 10 AMD64, Directory Server fails to start.

6700232

A race condition between changelog trimming and operation on the trimmed entry can cause the directory server to hang.

6704259

If the replication group size is larger than one, etimes of replicated operations are incorrectly computed.

6704261

An index can be imported incorrectly in multi-pass import.

6705319

Referral cannot be disabled with DSCC once it has been enabled.

6706009

DSCC does not handle attributes with subtypes correctly.

6707089

A race condition with an ACI containing DNS rules causes in DS crash.

6707164

The Replication changelog gets emptied after a backup restore with message as below

INFORMATION - NSMMReplicationPlugin - conn=-1 op=-1 msgId=-1 - replica_reload_ruv: Warning: new data for replica does not match the data in the changelog. Recreating the changelog file. This could affect replication with replica's consumers in which case the consumers should be reinitialized.

6708615

Directory Server crashes when stopping the server while indexing is occurring.

6710024

If Directory Server crashes while under Sun Cluster 3.2 control, cluster failover is initiated, but it requires more than 4 minutes.

6711123

Rarely updated masters might result in backups becoming quickly obsolete.

6717507

In a replication configuration, deleting entries creates incorrect VLV indexes.

6718308

Database restore messages are inconsistent between DSCC and error log files.

6726890

In a race condition, the Directory Server Enterprise Edition 6.3 changelog is not trimmed.

6732563

In a race condition, deleting a suffix can result in a database panic error.

6740791

When a password policy is assigned using CoS, the directory server might not release memory.

6750240

In versions of Directory Server Enterprise Edition 6, the des-plugin.so is not signed.

6754084

The zipped distribution delivers JRE 1.5.0_12 instead 1.5.0_9 as in previous releases.

6756826

A race condition between updating and flushing database pages can cause a directory server crash, database panic errors, or lose of updates.

6759200

A SASL bind on a connection can lead to a directory server crash

6772870

Consumers can become out of sync when ds-polling-thread-count is greater than 1 (which is likely on a CMT machine).