iPlanet Directory Server Issues

Setup Issue

When entering Distinguished Names during installation, use the UTF-8 character set encoding. Other encodings are not supported. Installation operations do not convert data from local character set encoding to UTF-8 character set encoding. LDIF files used to import data must also use UTF-8 character set encoding. Import operations do not convert data from local character set encoding to UTF-8 character set encoding.

Schema Issues

The schema provided with the iPlanet Directory Server 5.1 differs from that specified in RFC 2256 for the groupOfNames and groupOfUniquenames object classes. In the schema provided, the member and uniquemember attribute types are optional. RFC 2256 specifies that at least one value for these types must be present in the respective object class.

The aci attribute is an operational attribute. It is not returned in a search unless you explicitly request it.

Replication Issue

Multi-Master Replication over WAN is currently not supported.

Server Plug-in Issues

iPlanet Directory Server 5.1 provides the UID Uniqueness plug-in. By default the plug-in is not activated. To ensure attribute uniqueness for specific attributes, create a new instance of the Attribute Uniqueness plug-in for each attribute. For more information on the Attribute Uniqueness plug-in, refer to the iPlanet Directory Server 5.1 Administrator's Guide.

The Referential Integrity plug-in is now off by default. The Referential Integrity plug-in should only be enabled on one master replica in a multi-master replication environment to avoid conflict resolution loops. Before enabling the Referential Integrity plug-in on servers issuing chaining requests, analyze your performance resource, time, and integrity needs. Integrity checks can consume significant memory and CPU resources.

Roles and Class of Service Issue

The nsRoleDN attribute is used to define a role. It should not be used for evaluating role membership in a user's entry. When evaluating role membership, look at the nsrole attribute.

Indexing Issue

If VLV indexes encompass more than one database, they do not work correctly.