HP-UX Directory Server release notes HP-UX Directory Server Version 8.1 (B.08.10.04) (5900-2440, November 2012)

The following new and changed features are introduced with HP-UX Directory Server 8.1
(B.08.10.04):
• Subtree rename and Entry Move - This feature provides the following functionalities:
Ability to rename a node that has children.◦
◦ Ability to move a node, with or without children to another parent node.
• Syntax Validation Check - The current version of Directory Server does not perform any sort
of syntax validation, but this release addresses this issue by providing the capability to enforce
the syntax validation. Syntax validation checks every modification to attributes to make sure
that the new value has the required syntax for that attribute type.
• Strict DN Syntax Enforcement - A new configurable parameter
nsslapd-dn-validate-strict is introduced to enable strict DN parsing as described
in RFC 4514.
• Upgrade to new DN format.
• Support additional standard attribute syntaxes - Additional standard attribute syntaxes
supported in this release are:
◦ Numeric String
◦ Bit String
◦ Delivery Method
◦ Enhanced Guide
◦ Facsimile Telephone Number
◦ Fax, Guide, Name and Optional UID
◦ Printable String
◦ Teletex Terminal Identifier
◦ Telex Number.
• Thread Aware Regex - A new thread aware library is included to improve the throughput of
complex regex searches.
• Ability to shut off anonymous access - This feature adds a new config switch in cn=config,
nsslapd-allow-anonymous-access that allows you to restrict all anonymous access.
• Resource limits for anonymously bound clients - Enables to set resource limits (sizelimit, timelimit,
lookthroughlimit) specifically for anonymous connections.
• Requiring Secure Binds - A new configuration attribute named
nsslapd-require-secure-binds, when enabled, allows a simple bind over a secure
transport (SSL/TLS or a SASL privacy layer).
• Access based on the security strength of the connection - Based on how secure the connection
is, a new ACI keyword minssf allows to set access control and a new global server setting
in cn=config, nsslapd-minssf allows to reject operations.
• Linked attributes - This feature provides the ability to link two attributes bidirectionally together
across entries, so that when one attribute in one entry is altered, a corresponding attribute on
a related entry is automatically updated.
• Entry USN (Update Sequence Number) - This feature adds the USN to each updated entry.
update includes add, modify, modrdn and delete operations. Replicated operation is also
6