HP-UX Directory Server release notes HP-UX Directory Server Version 8.1 (B.08.10.04) (5900-2440, November 2012)

• Additional options for secure communication between servers – Server to server connections,

such as those used in replication, are enhanced to support SASL/Digest-MD5 and SASL/GSSAPI

(Kerberos) authentication, and encryption with Start TLS.

• More flexibility in schema management – Schema can be deployed or modified on-disk and

then reloaded using a new task-based mechanism. Previously, dynamic schema changes could

only be performed via LDAP which offered less control over the organization of the schema

in its persistent on-disk storage.

• Improved Get Effective Rights operation – Whereas the GER operation in RHDS only showed

effective rights for attributes that already existed in an entry, with HPDS, the operation can

now display any effective rights for potential attributes as well (operational attributes, and

those that currently do not exist in the entry but are allowed by schema).

• More tuning for Windows synchronization – In previous releases, the interval at which the

Directory Server checked the Active Directory Server for updates was fixed at five minutes.

This interval is now configurable.

• Option to disallow unauthenticated bind operations – A new configuration attribute allows

the administrator to deny access to LDAP clients that do not provide a password. This allows

improved compatibility with server applications that might misinterpret a Directory Server's

success response to bind operations that lack a password.

• Account policy plug-in provides control over inactive accounts – The new account policy plug-in

tracks login time stamps and provides the administrator with the option to lock accounts based

on the duration of inactivity since the last login time.

• Replication agreements can be prioritized – The multi-master replication plug-in has been

enhanced to allow prioritization of replication agreements. This allows the administrator to

control the order in which multiple replicas are updated. This may be useful, for example,

when you require that a backup master replica be updated completely before updating one

or more read-only replicas accessible by client applications.

3 Upgrade and migration notes

NOTE: For information about migration (upgrade) paths, see Migration (Upgrade) from Netscape

or Red Hat Directory Server to HP-UX Directory Server 8.10.04 Whitepaper.

4 Known problems that have been fixed

4.1 Known problems fixed in B.08.10.04

Table 1 Fixes in HP-UX Directory Server B.08.10.04

Description of corrected problemDefect

Issue of null valued attributes getting added by ldapModify replace in replication

environment.

QXCR1001179927

ns-slapd process creates a core when a new operation is initiated before cleanup of previous

operation is completed on the same connection object.

QXCR1001175156

'db2ldif' adds extra 'ou' to the 'dn' when data is migrated from RHDS to HPDS.QXCR1001168613

HPDS 8.10.03 Replication problems updating from RHDS 7.0.10.50QXCR1001168383

ns-slapd process crashes when put in to readonly mode while updates are happening.QXCR1001179380