HP-UX Directory Server Version 8.1 (B.08.10.07) Release Notes (766146-001, March 2014)

Teletex Terminal Identifier
Telex Number
Thread Aware Regex—A new thread aware library is included to improve the throughput of
complex regex searches.
Ability to shut off anonymous access—This feature adds a new config switch in cn=config,
nsslapd-allow-anonymous-access that allows you to restrict all anonymous access.
Resource limits for anonymously bound clients—Enables to set resource limits (sizelimit, timelimit,
lookthroughlimit) specifically for anonymous connections.
Requiring Secure Binds—A new configuration attribute
namednsslapd-require-secure-binds, when enabled, allows a simple bind over a
secure transport (SSL/TLS or a SASL privacy layer).
Access based on the security strength of the connection—Based on how secure the connection
is, a new ACI keyword minssf allows to set access control and a new global server setting
in cn=config, nsslapd-minssf allows to reject operations.
Linked attributes—This feature provides the ability to link two attributes bidirectionally together
across entries, so that when one attribute in one entry is altered, a corresponding attribute on
a related entry is automatically updated.
Entry USN (Update Sequence Number)—This feature adds the USN to each updated entry.
update includes add, modify, modrdn and delete operations. Replicated operation is also
considered as update. The USN Plug-in provides a way for LDAP clients to know that the
database has been updated.
Named pipe log script—This feature allows the server to send the log output to a named pipe
instead of a log file. The named pipe log script has the following characteristics:
Logs only certain events
Logs only lines that match a certain pattern
Sends a notification when a certain event is detected
Logs only the last N lines attached to a script, which is useful for enabling full error log
debug levels in production environments
Simple paged results—A simple paged results control allows to set the number of entries to
be displayed at a time. The results can be scrolled through a page at a time, which makes
the results easier to digest. This feature is supported only for OpenLDAP clients.
Move change log—The replication changelog is now moved into the main server database
environment. When backup or restore of the main DB is done, the changelog DB is also
included with the main DB.
Dereferencing control—This control is intended to provide a concise means to collect extra
information related to cross-links present in entries returned as part of search responses. This
control is only appropriate for the search operation. This feature is supported only for
OpenLDAP clients.
Plug-in ordering—This feature allows you to define the execution order of plug-ins within the
same plug-in type. It will be useful to plug-in developers to define an order for plug-in execution.
9