chap-issues.xml revision 62da52c144e8d6ba69f611c45deeeb4f985ea24c
1965c5d21403c3d66eb1efa29c670378311b1077Paul Bryan ! CCPL HEADER START
1965c5d21403c3d66eb1efa29c670378311b1077Paul Bryan ! This work is licensed under the Creative Commons
1965c5d21403c3d66eb1efa29c670378311b1077Paul Bryan ! Attribution-NonCommercial-NoDerivs 3.0 Unported License.
1965c5d21403c3d66eb1efa29c670378311b1077Paul Bryan ! To view a copy of this license, visit
1965c5d21403c3d66eb1efa29c670378311b1077Paul Bryan ! http://creativecommons.org/licenses/by-nc-nd/3.0/
1965c5d21403c3d66eb1efa29c670378311b1077Paul Bryan ! or send a letter to Creative Commons, 444 Castro Street,
1965c5d21403c3d66eb1efa29c670378311b1077Paul Bryan ! Suite 900, Mountain View, California, 94041, USA.
1965c5d21403c3d66eb1efa29c670378311b1077Paul Bryan ! You can also obtain a copy of the license at
1965c5d21403c3d66eb1efa29c670378311b1077Paul Bryan ! See the License for the specific language governing permissions
dc53767f6614db736c8a95a165beae870ac1e3d9Jake Feasel ! and limitations under the License.
4eb529f0471672590d77cf89ef23987ba2c95ff4Laszlo Hordos ! If applicable, add the following below this CCPL HEADER, with the fields
4eb529f0471672590d77cf89ef23987ba2c95ff4Laszlo Hordos ! enclosed by brackets "[]" replaced with your own identifying information:
1965c5d21403c3d66eb1efa29c670378311b1077Paul Bryan ! Portions Copyright [yyyy] [name of copyright owner]
1965c5d21403c3d66eb1efa29c670378311b1077Paul Bryan ! CCPL HEADER END
1965c5d21403c3d66eb1efa29c670378311b1077Paul Bryan ! Copyright 2011-2013 ForgeRock AS
7c64421614d420f1951773af3ce6a6111cef84b2Jake Feasel xmlns='http://docbook.org/ns/docbook' version='5.0' xml:lang='en'
7c64421614d420f1951773af3ce6a6111cef84b2Jake Feasel xmlns:xsi='http://www.w3.org/2001/XMLSchema-instance'
b564baaca75789be41eba24bb96e31f3ce5b10eeJake Feasel xsi:schemaLocation='http://docbook.org/ns/docbook http://docbook.org/xml/5.0/xsd/docbook.xsd'
3f09f5b4acc8cefb61799cd3bb7b34dea90d1958Jake Feasel xmlns:xinclude='http://www.w3.org/2001/XInclude'>
3f09f5b4acc8cefb61799cd3bb7b34dea90d1958Jake Feasel <title>OpenDJ Fixes, Limitations, & Known Issues</title>
3f09f5b4acc8cefb61799cd3bb7b34dea90d1958Jake Feasel <para>This chapter covers the status of key issues and limitations for OpenDJ
3f09f5b4acc8cefb61799cd3bb7b34dea90d1958Jake Feasel <?eval ${docTargetVersion}?> and OpenDJ SDK <?eval ${docTargetVersion}?>.
596fa6db662266170abd38371893c621541d1881Jake Feasel For details and information on other issues, see the <link xlink:show="new"
1965c5d21403c3d66eb1efa29c670378311b1077Paul Bryan xlink:href="https://bugster.forgerock.org/jira/browse/OPENDJ" >OpenDJ issue
8166b048bd3e2106dbdeaa1a2b8a728952d788f4Laszlo Hordos <para>The following important bugs were fixed in this release.</para>
0389b442e8bd8d112b977faae238cc8bb66201e2Bruno Lavit <para>TODO</para><!-- https://github.com/markcraig/release-notes-list-builder -->
596fa6db662266170abd38371893c621541d1881Jake Feasel <para>Release <?eval ${docTargetVersion}?> has the following limitations,
3f09f5b4acc8cefb61799cd3bb7b34dea90d1958Jake Feasel none of which are new since <?eval ${stableServerVersion}?>.</para>
3f09f5b4acc8cefb61799cd3bb7b34dea90d1958Jake Feasel <itemizedlist>
3f09f5b4acc8cefb61799cd3bb7b34dea90d1958Jake Feasel <para>OpenDJ directory server provides full LDAP v3 support, except for
3f09f5b4acc8cefb61799cd3bb7b34dea90d1958Jake Feasel alias dereferencing, and limited support for LDAPv2.</para>
b1956df730d5941cbe4edcc9e68272aeb6b4f1bdNicolasPhilippe <para>When you configure account lockout as part of password policy,
b1956df730d5941cbe4edcc9e68272aeb6b4f1bdNicolasPhilippe OpenDJ locks an account after the specified number of consecutive
b1956df730d5941cbe4edcc9e68272aeb6b4f1bdNicolasPhilippe authentication failures. Account lockout is not transactional across a
b1956df730d5941cbe4edcc9e68272aeb6b4f1bdNicolasPhilippe replication topology, however. Global account lockout occurs as soon as
b1956df730d5941cbe4edcc9e68272aeb6b4f1bdNicolasPhilippe the authentication failure times have been replicated.</para>
e5c203467ee4398ae81a6adb63da7477451b2e77Laszlo Hordos <para>OpenDJ is not fully integrated with Microsoft Windows, yet OpenDJ
e5c203467ee4398ae81a6adb63da7477451b2e77Laszlo Hordos directory server can be run as a service, and thus displayed in the
e5c203467ee4398ae81a6adb63da7477451b2e77Laszlo Hordos Windows Services Control Panel.</para>
e5c203467ee4398ae81a6adb63da7477451b2e77Laszlo Hordos <para>OpenDJ replication is designed to permit an unlimited number
e5c203467ee4398ae81a6adb63da7477451b2e77Laszlo Hordos of replication servers in your topology. Project testing has, however,
8166b048bd3e2106dbdeaa1a2b8a728952d788f4Laszlo Hordos focused only on topologies of up to eight replication servers.</para>
8166b048bd3e2106dbdeaa1a2b8a728952d788f4Laszlo Hordos <para>On Niagara systems such as T2000, hardware SSL crypto acceleration
8166b048bd3e2106dbdeaa1a2b8a728952d788f4Laszlo Hordos runs more slowly than software crypto acceleration. To work around this
8166b048bd3e2106dbdeaa1a2b8a728952d788f4Laszlo Hordos issue take the following actions.</para>
8166b048bd3e2106dbdeaa1a2b8a728952d788f4Laszlo Hordos <orderedlist>
8166b048bd3e2106dbdeaa1a2b8a728952d788f4Laszlo Hordos <para>Add more request handlers to LDAP (for TLS) and LDAPS (for SSL)
8166b048bd3e2106dbdeaa1a2b8a728952d788f4Laszlo Hordos connection handlers.</para>
8166b048bd3e2106dbdeaa1a2b8a728952d788f4Laszlo Hordos <para>Disable hardware acceleration for server's JVM by removing the
1965c5d21403c3d66eb1efa29c670378311b1077Paul Bryan SunPKCS11 security provider from
73bedec6a263fc6f6a15e58fb55eb1f2045b85a8Bruno Lavit <filename>jre/lib/security/java.security</filename>.</para>
73bedec6a263fc6f6a15e58fb55eb1f2045b85a8Bruno Lavit </orderedlist>
73bedec6a263fc6f6a15e58fb55eb1f2045b85a8Bruno Lavit </itemizedlist>
a14db14686bf9f6817c47e5c14e887d74dd615f0Laszlo Hordos <para>When deploying for production, make sure that you follow the
2d7019e19039fd083850f76e54b6b26a7b06a8f2yaromin installation instructions on allowing OpenDJ to use at least 64K (65536)
2d7019e19039fd083850f76e54b6b26a7b06a8f2yaromin file descriptors, and on tuning the JVM appropriately.</para>
00689490237ac7e37aa116d443e4e5882c5552dcMatthias Tristl <para>The following important issues remained open at the time this release
00689490237ac7e37aa116d443e4e5882c5552dcMatthias Tristl became available.</para>
2d7019e19039fd083850f76e54b6b26a7b06a8f2yaromin <para>TODO</para><!-- https://github.com/markcraig/release-notes-list-builder -->