Chapter 10. Red Hat Directory Server 11.1 10.1. Highlighted updates and new features This section documents new features and important updates in Directory Server 11.1. Directory Server rebased to version 1.4.2.4 The 389-ds-base packages have been upgraded to upstream version 1.4.2.4, which provides a number of bug fixes and enhancements over the version. For a complete list of notable changes, read the upstream release notes before updating: https://directory.fedoraproject.org/docs/389ds/releases/release-1-4-2-4.html https://directory.fedoraproject.org/docs/389ds/releases/release-1-4-2-3.html https://directory.fedoraproject.org/docs/389ds/releases/release-1-4-2-2.html https://directory.fedoraproject.org/docs/389ds/releases/release-1-4-2-1.html A health check feature has been added to Directory Server This enhancement adds a health check feature to Directory Server. The dsctl healthcheck command performs read-only operations on a Directory Server instance and reports, for example, if the instance is configured properly or if replication agreements are working correctly. Highlighted updates and new features in the 389-ds-base packages Features in Red Hat Directory Server, that are included in the 389-ds-base packages, are documented in the Red Hat Enterprise Linux 8.2 Release Notes: Certain legacy scripts have been replaced in Directory Server Directory Server sets the sslVersionMin parameter based on the system-wide crypto policy 10.2. Bug fixes This section describes bugs fixed in Directory Server 11.1 that have a significant impact on users. Bug fixes in the 389-ds-base packages Bug fixes in Red Hat Directory Server, that are included in the 389-ds-base packages, are documented in the Red Hat Enterprise Linux 8.2 Release Notes: Directory Server instance names can now have up to 103 characters The dsctl utility no longer fails to manage instances with a hyphen in their name 10.3. Known issues This section documents known problems and, if applicable, workarounds in Directory Server 11.1. Directory Server settings that are changed outside the web console's window are not automatically visible Because of the design of the Directory Server module in the Red Hat Enterprise Linux 8 web console, the web console does not automatically display the latest settings if a user changes the configuration outside of the console's window. For example, if you change the configuration using the command line while the web console is open, the new settings are not automatically updated in the web console. This applies also if you change the configuration using the web console on a different computer. To work around the problem, manually refresh the web console in the browser if the configuration has been changed outside the console's window. The Directory Server Web Console does not provide an LDAP browser The web console enables administrators to manage and configure Directory Server 11 instances. However, it does not provide an integrated LDAP browser. To manage users and groups in Directory Server, use the dsidm utility. To display and modify directory entries, use a third-party LDAP browser or the OpenLDAP client utilities provided by the openldap-clients package. Known issues in the 389-ds-base packages Known issues in Red Hat Directory Server, that are included in the 389-ds-base packages, are documented in the Red Hat Enterprise Linux 8.2 Release Notes: Directory Server warns about missing attributes in the schema if those attributes are used in a search filter 10.4. Removed Functionality This section documents features that have been removed from Directory Server 11.1. The nunc-stans framework has been removed The nunc-stans framework has been removed from Directory Server, and the server now uses the improved core connection handling mechanism in Directory Server. If you previously enabled the framework manually, Directory Server logs the following warning: WARN - slapd_daemon - cn=config: nsslapd-enable-nunc-stans is on. nunc-stans has been deprecated and this flag is now ignored. WARN - slapd_daemon - cn=config: nsslapd-enable-nunc-stans should be set to off or deleted from cn=config. To prevent Directory Server from logging this warning, remove the nsslapd-enable-nunc-stans from the cn=config entry: USD ldapmodify -D "cn=Directory Manager" -W -p 389 -h server.example.com -x dn: cn=config changetype: modify delete: nsslapd-enable-nunc-stans

Commands:
WARN - slapd_daemon - cn=config: nsslapd-enable-nunc-stans is on. nunc-stans has been deprecated and this flag is now ignored. WARN - slapd_daemon - cn=config: nsslapd-enable-nunc-stans should be set to off or deleted from cn=config.
ldapmodify -D "cn=Directory Manager" -W -p 389 -h server.example.com -x dn: cn=config changetype: modify delete: nsslapd-enable-nunc-stans