The Apache Software Foundation

ChangeLog

Bug

* [DIRSERVER-935] - Test hangs on non-existant schema entry lookup
* [DIRSERVER-1214] - Searches done with an empty baseDN are not accepted, except for the rootDSE
* [DIRSERVER-1314] - Helpless error message while a LDIF import fails in unit tests
* [DIRSERVER-1340] - Search the schema partition for (objectClass=metaTop) returns no results
* [DIRSERVER-1401] - Infinite loop on moddn, when moving an entry below itself
* [DIRSERVER-1404] - NullPointerException when a client disconnects
* [DIRSERVER-1459] - Adding members to a groupOfNames results in polynomial increase in JDBM partition size
* [DIRSERVER-1462] - Empty Depends field in .deb package breaks repository
* [DIRSERVER-1465] - objectClass, entryUUID, entryCSN indices not used in search optimizer
* [DIRSERVER-1470] - Error code 80 - OTHER is thrown when trying to remove a value from the objectClass attribute
* [DIRSERVER-1473] - The typesOnly flag is not correctly handled
* [DIRSERVER-1474] - IllegalStateException when restarting the LdapServer programmatically
* [DIRSERVER-1475] - The sizeLimit must be a long, not an int
* [DIRSERVER-1476] - Incorrect attribute description value set for AttributeValueAssertion in the transformFilter( ExprNode ) method of LdapTransformer
* [DIRSHARED-47] - Testfailures on jdk1.5, jdk1.6 works in shared-ldap-schema-manager

Improvement

* [DIRSERVER-1466] - Support SHA-256 for userPassword values
* [DIRSERVER-1472] - Use Generic Type Parameter for ID in XDBM instead of Long
* IRSHARED-13] - Replace the MultiHashMap in RDN by a MultiValueMap
* [DIRSHARED-15] - Create a Fast DN parser handling simple DNs
* [DIRSHARED-49] - Add i18n translation for error messages and other

Task

* [DIRSHARED-43] - Rename LdapDN to DN
* [DIRSHARED-44] - Rename Rdn to RDN
* [DIRSHARED-45] - Rename AttributeTypeAndValue to AVA

Below are the JIRA issues that were resolved since the release of Apache Directory Studio 1.5.1:
* Bug
  - [DIRSTUDIO-601] - The 'Perform Search/Search Again' button in the Search Result Editor does not work correctly
  - [DIRSTUDIO-602] - Unable to start an Apache DS version 1.5.5 server
  - [DIRSTUDIO-603] - Error browsing/entering rfc2307 compliant host entry
* Task
  - [DIRSTUDIO-605] - Update the help content of the configuration editor for version 1.5.5 of Apache DS

* Bug
 - [DIRSTUDIO-576] - Context menu not shown after a right-click on a non-cached entry
 - [DIRSTUDIO-577] - LDIF editor doesn't notify Eclipse that the LDIF file has changed when saving
 - [DIRSTUDIO-580] - Setting "Validate certificates for secure LDAP connections" is not saved
 - [DIRSTUDIO-587] - UI flickers on quick search
 - [DIRSTUDIO-589] - InvalidNameException: unexpected token for user ids starting with hash sign
 - [DIRSTUDIO-590] - The 'Quick Search' string has not been externalized in the LDAP Browser view
 - [DIRSTUDIO-591] - Error reading objects with # in DN
 - [DIRSTUDIO-592] - LDAP Browser view is refreshed twice after the initialization of the children of an entry
 - [DIRSTUDIO-593] - Missing string and typo in the french translation of the Password Editor
 - [DIRSTUDIO-594] - The 'Show new password details' checkbox does not display the 'Enter new password' text field as clear text when checked in the Password Editor
 - [DIRSTUDIO-596] - Various typos in the french translation
 - [DIRSTUDIO-597] - Modification sent to the server while browsing through the DIT and refreshing entries
 - [DIRSTUDIO-598] - Base64 encoded DN marked as invalid in LDIF editor

* Improvement
 - [DIRSTUDIO-595] - The icon of the entry in the 'Outline' view should be the same as the one in the 'LDAP Browser' view

 * Sub-task
   - [DIRSTUDIO-516] - Create a new Entry Editor extension point
   - [DIRSTUDIO-517] - Create a new single-window Entry Editor
   - [DIRSTUDIO-518] - Create a new multi-window Entry Editor
   - [DIRSTUDIO-519] - Create a new LDIF Entry Editor
 * Bug
   - [DIRSTUDIO-282] - Save failed: null, when adding an attribute to a class, if attribute is also open in gui
   - [DIRSTUDIO-331] - Instant error when importing schema in a new schema-project
   - [DIRSTUDIO-334] - Built-in help doesn't show icons for "Icons" and "Toolbars" tables in "LDAP Browser View"
   - [DIRSTUDIO-370] - Welcome screen subpages mouse-over images displays red crosses
   - [DIRSTUDIO-402] - The ManageDsaIT control should be activable for a single request, not at the connection level
   - [DIRSTUDIO-403] - Cannot add refs when the ExtensibleObject OC has been added to a referral
   - [DIRSTUDIO-409] - No error message in some special case
   - [DIRSTUDIO-410] - Referral handling is problematic
   - [DIRSTUDIO-418] - Slow LDIF/CSV export
   - [DIRSTUDIO-429] - Meaningless error message on importing schema
   - [DIRSTUDIO-437] - Alias are not exposed as such in the browser
   - [DIRSTUDIO-441] - New ObjectClass and AttributeType wizards always show a warning indicating that the item does not have any name
   - [DIRSTUDIO-443] - The warning and error overlay for OCs and ATs sometimes (often) lacks forgets some items
   - [DIRSTUDIO-473] - Import OpenLDAP core schema
   - [DIRSTUDIO-481] - Improve refreshing of attributes and children
   - [DIRSTUDIO-483] - DN Editor escapes all non-ascii characters
   - [DIRSTUDIO-484] - Rename dialog does not work with escaped RDNs
   - [DIRSTUDIO-486] - Include Version Specifier in LDIF export
   - [DIRSTUDIO-488] - New context entry creation is not shown just after connection
   - [DIRSTUDIO-489] - LDIF Import very slow
   - [DIRSTUDIO-490] - Copy/Paste a search from one connection to another doesn't work
   - [DIRSTUDIO-493] - Aliased attributes show only one attribute name in the RDN selection list instead of the full aliases list
   - [DIRSTUDIO-495] - Cannot edit password field
   - [DIRSTUDIO-497] - LdapSchema plugin 'Save' is erratic
   - [DIRSTUDIO-499] - SOCKS proxy settings not used on startup
   - [DIRSTUDIO-502] - Copy/Paste the context entry from one connection to another doesn't work
   - [DIRSTUDIO-503] - New Entry -> Available object classes list remains stale after new objectclasses added
   - [DIRSTUDIO-504] - Timestamp attribute with an invalid time in it is read only - editor ignores entry
   - [DIRSTUDIO-506] - Export Schemas for ApacheDS: object classes must be sorted by hierarchy
   - [DIRSTUDIO-507] - Attempt to rename the rdn results in message contain {0} and {1}
   - [DIRSTUDIO-512] - Deletion of entries very slow
   - [DIRSTUDIO-514] - Unable to restore last opened ldif-editors on restart
   - [DIRSTUDIO-520] - NPE when saving a 1.5.0 server configuration
   - [DIRSTUDIO-524] - Operational attributes are not show, although enabled under preferences
   - [DIRSTUDIO-527] - Unable to display Active Directory GUIDs
   - [DIRSTUDIO-529] - Unpretty 2-3 pixels height margin at the top of the Browser view
   - [DIRSTUDIO-530] - Unpretty 2-3 pixels height margin at the top of the Entry editor
   - [DIRSTUDIO-531] - Unpretty 2-3 pixels height margin at the top of the Search Results editor
   - [DIRSTUDIO-532] - Refreshing parent of referral may give ConcurrentModificationException
   - [DIRSTUDIO-537] - Error in the title of the Properties window of a server in the Apache DS plugin
   - [DIRSTUDIO-545] - Widget disposed too early
   - [DIRSTUDIO-547] - Editor for Classes userClass saves or reloads incorrect value
   - [DIRSTUDIO-549] - subtree userClass editor does not keep full DN for base component upon its selection
   - [DIRSTUDIO-550] - Root DSE properties: Directory types IBM Tivoli Directory Server 6.1 and 6.2 not detected correctly
   - [DIRSTUDIO-552] - NullPointerException if Root DSE of IBM Tivoli Directory Server displayed in Entry Editor
   - [DIRSTUDIO-553] - Add descriptions for server specific OIDs of IBM Tivoli Directory Server 6.1 and 6.2
   - [DIRSTUDIO-557] - Edit value and edit entry are not working if DN is invalid
   - [DIRSTUDIO-565] - Inconsistent handling of the 'modified schemas' flag
   - [DIRSTUDIO-568] - When editing an AT or OC, using the scroll wheel may trigger a combo change
   - [DIRSTUDIO-569] - Exceptions showing up in the log when starting a server in the Apache DS plugin
   - [DIRSTUDIO-570] - Integer Value Editor does not accept negative numbers
   - [DIRSTUDIO-571] - Modification is logged even if referred to another directory server
   - [DIRSTUDIO-575] - Bookmarks not working
 * Improvement
   - [DIRSTUDIO-145] - Multiple tabs for entry editor
   - [DIRSTUDIO-263] - Add certificate validation for ldaps and StartTLS
   - [DIRSTUDIO-371] - Entries with a ref attribute should be shown N times in the browser (N = number of ref values)
   - [DIRSTUDIO-444] - Allow the user to enter the names of an item inline (using ',' as separator) in the OC and AT Editors
   - [DIRSTUDIO-485] - Provide default IAuthHandler and IReferralHandler to be used in connections core without connections ui
   - [DIRSTUDIO-487] - Empty namingcontexts causes javax.naming.InvalidNameException: Bad DN
   - [DIRSTUDIO-496] - Password editor improvements
   - [DIRSTUDIO-509] - Load schema from the directory server
   - [DIRSTUDIO-513] - Do delete before add when modifying attribute values
   - [DIRSTUDIO-521] - Replace the XSLT transformation by the use of the Dom4J OutputFormat class for XML pretty print
   - [DIRSTUDIO-533] - Only show referral handling dialog when opening or expanding referral entry
   - [DIRSTUDIO-534] - Re-order the preference pages for better understanding
   - [DIRSTUDIO-535] - Use SWT.SEARCH and SWT.CANCEL style bits on search text field for a native search field on Mac OS X
   - [DIRSTUDIO-541] - Add support for version 1.5.5 of the Apache DS
   - [DIRSTUDIO-548] - SubtreeSpecification Editor does not accept empty filter if it's selected
   - [DIRSTUDIO-554] - Add option to save tabular entry editor automatically or manually
   - [DIRSTUDIO-555] - Human readable descriptions of OIDs in binary attributes preference page
   - [DIRSTUDIO-558] - Load special entries (aliases, referrals, subentries) per request, add menu items to browser's context menu
   - [DIRSTUDIO-574] - Add 'Cancel' button to "Select copy strategy" (was Abort of copy/paste not possible)
 * New Feature
   - [DIRSTUDIO-62] - Add GSSAPI authentication - Cannot connect to Active Directory if not using Simple authentication
   - [DIRSTUDIO-434] - Add value editor for Active Directory objectGUID and objectSid attributes
   - [DIRSTUDIO-462] - Add Export to Open Document Format
   - [DIRSTUDIO-494] - Add value editor for certificates (syntax 1.3.6.1.4.1.1466.115.121.1.8)
   - [DIRSTUDIO-510] - Add functionality to copy/merge schema elements between schema projects
   - [DIRSTUDIO-515] - Add extensibility to Entry Editor
   - [DIRSTUDIO-536] - Add support for version 1.5.5 of the Apache DS server.xml configuration file
   - [DIRSTUDIO-556] - Add value editor for UUID
   - [DIRSTUDIO-562] - Add 'Copy Display Value' action, default copy action should copy displayed value
 * Task
   - [DIRSTUDIO-479] - Object classes of an entry should always be present
   - [DIRSTUDIO-523] - Update Eclipse dependencies to version 3.5 Galileo
   - [DIRSTUDIO-525] - Remove support for the Linux PPC distribution
   - [DIRSTUDIO-573] - Update bundled Apache DS Schema files to version 1.5.5
 * Wish
   - [DIRSTUDIO-167] - Show custom icons for various kinds of schema elements while browsing schema data

What's new ?
------------

- More than 62 bugs have been fixed.
- We switched to MINA 2.0.0-M6
- entryUUID and entryCSN are now injected for every new entry
- huge search requests don't eat all the memory
- Addition of a Client-API (eliminary work)
- Jetty has been integrated into the server
- Addition of a Journal
- The server.xml file has been modified

Change in Server.xml
--------------------

<defaultDirectoryService...> takes some new attributes :
 - replicaId (an integer) OPTIONAL
 - maxPDUSize (an integer, the maximum number of bytes a incoming message can be) OPTIONAL

<interceptors> :
 - the <referralInterceptor/> bean must be present

servers : the configuration has changed for all the servers (changePasswordServer, kdcServer,
ntpServer, dnsServer. They all take a <transports> set of transports, instead of sharing some
SocketAcceptor/DatagramAcceptor. For instance :

 <kdcServer ipPort="60088">
  <directoryService>#directoryService</directoryService>
  <datagramAcceptor>#datagramAcceptor</datagramAcceptor>
  <socketAcceptor>#socketAcceptor</socketAcceptor>
 </kdcServer>


becomes :

 <dnsServer>
  <transports>
    <tcpTransport port="8053"/>
    <udpTransport port="8053"/>
  </transports>
  <directoryService>#directoryService</directoryService>
 </dnsServer>

The <LdapService> bean has been renamed <LdapServer>, to have a consistent naming scheme.

<LdapServer> supports both the LDAP and LDAPS protocols, the transports are used to define
LDAPS if needed. :

  <transports>
    <tcpTransport address="0.0.0.0" port="10389" nbThreads="8" backLog="50" enableSSL="false"/>
    <tcpTransport address="localhost" port="10686" enableSSL="true"/>
  </transports>

The second transport is used for SSL

<ApacheDS> bean does not contain a reference to a directory service anymore, each server which
need to rely on such a service will refer it into its own configuration.


ChangeLog
---------

Bug

  * [DIRSERVER-644] - Memory Leak in Persistent search ?
  * [DIRSERVER-776] - entryUUID only created when entries are added with Mitosis enabled
  * [DIRSERVER-1106] - Hot partition removal leaves server in inconsistent state (removal is buggy)
  * [DIRSERVER-1139] - Loop detected on ldapcompare
  * [DIRSERVER-1157] - Deleting Alias entry failure
  * [DIRSERVER-1161] - search results are not streamed to the client until final done response is queued
  * [DIRSERVER-1181] - Too many results when using searchfilter with escaped asterisks \2A
  * [DIRSERVER-1199] - Improperly named/missing getter/setter for Registries SchemaLoader
  * [DIRSERVER-1201] - Interceptors not working (XBean)
  * [DIRSERVER-1226] - Search request causing schema exception on apacheHierarchy attribute type which was probably renamed
  * [DIRSERVER-1231] - Some operation can't be reverted with a single reverseLdif element
  * [DIRSERVER-1250] - An error (noSuchObject - code32) should be raised when trying to delete an entry that does not exist
  * [DIRSERVER-1253] - An error is shown in the log at the first start up of ApacheDS 1.5.4
  * [DIRSERVER-1254] - An error and a warning are shown in the log when accessing the RootDSE
  * [DIRSERVER-1255] - unit tests fail on windows (jdbm-store and core-integ)
  * [DIRSERVER-1256] - bad # hex escape in RDN doesn't throw InvalidNameException
  * [DIRSERVER-1258] - memory leak (outstanding requests) in SearchHandler
  * [DIRSERVER-1266] - The new referal handling generate 2 lookup instead of one for every search request
  * [DIRSERVER-1267] - Searching for a non existing entry now end with NPE inside the server
  * [DIRSERVER-1269] - Lowercased attributes after modify-replace operation
  * [DIRSERVER-1272] - The Core API does not handle referrals
  * [DIRSERVER-1276] - unescaping binary string corrupts values
  * [DIRSERVER-1278] - Error while trying to create new partition
  * [DIRSERVER-1279] - kerberos test failing on IBM JDK
  * [DIRSERVER-1283] - installers/apacheds-noarch no longer builds apacheds-noarch-installer-1.5.5-SNAPSHOT-app.jar
  * [DIRSERVER-1287] - Substring search with special chars not working
  * [DIRSERVER-1289] - NTP/KDC not starting
  * [DIRSERVER-1292] - Enabling NIS schema causes core-integ unit test to NPE
  * [DIRSERVER-1296] - integer attribute types are not compared correctly
  * [DIRSERVER-1300] - Only adding from LDIF is possible with injectEntries() in IntegrationUtils
  * [DIRSERVER-1303] - The documentation should mention that @ApplyLdifFiles annotation is unused
  * [DIRSERVER-1304] - Searching for a Telephone number don't work
  * [DIRSERVER-1306] - Searching an attribute which is a DN ends with a 80 Ldap error (Other)
  * [DIRSERVER-1308] - Can't delete objectClass with mandatory attribute
  * [DIRSERVER-1311] - Entry with an escaped comma in DN not found in searches with some filters
  * [DIRSERVER-1313] - Potential NPEs while loading LDIFs in unit tests
  * [DIRSERVER-1316] - apacheds.bat in noarch installer causes NoClassDefFoundError on Windows
  * [DIRSERVER-1317] - Apache Studio ldif export
  * [DIRSERVER-1318] - Binary installer does not allow installation with a simple user
  * [DIRSERVER-1324] - In default configuration not possible to connect via LDAP and LDAPS from computers other than the one the server has been started from
  * [DIRSERVER-1326] - Unable to search on a custom attribute of type directory string unless I've set a matching rule
  * [DIRSERVER-1333] - Server is unable to handle valid 'not' filter
  * [DIRSERVER-1335] - The windows installer produce errors
  * [DIRSERVER-1343] - Replacing indexed attribute always grows JDBM database
  * [DIRSERVER-1344] - DefaultPartitionNexus tries to add the system context entry every time the server is started
  * [DIRSERVER-1347] - escaping french accents in filter
  * [DIRSERVER-1348] - Core Integ tests are badly failing on Windows due to the inability to remove the 'server-work' folder
  * [DIRSERVER-1352] - Infinite Loop when deleting an alias with suffix size > 1
  * [DIRSERVER-1356] - KeyDerivationServiceIT class fails with an IBM JDK
  * [DIRSERVER-1365] - Modification on the current init script (at least version 1.5.4) placed under /etc/init.d
  * [DIRSERVER-1366] - Delete take forever when having a lot of entries
  * [DIRSERVER-1367] - Protocol error when requesting attribute with the space character only
  * [DIRSERVER-1368] - Using Extended Objectclass fails
  * [DIRSERVER-1369] - Concurrent bind and unbind of objects puts ADS in an inconsistent (unusable) state.
  * [DIRSERVER-1376] - sublevel index grows without limit
  * [DIRSERVER-1377] - Potential concurrency issue when adding/modifying/deleting entries at a high rate
  * [DIRSERVER-1379] - ou=system shows multiple time in ldapsearch with different createTimestamps
  * [DIRSERVER-1381] - problem using apacheds-tools.jar : ClassCastException during import
  * [DIRSERVER-1383] - There is a confusion between Anonymous access and Access to rootDSE
  * [DIRSERVER-1384] - Abandonned requests are not abandonned...
  * [DIRSERVER-1391] - filter "(attr=*+*)" causes infinite loop
  * [DIRSERVER-1397] - Removal of an non existing value from an attribute does not generate an error
  * [DIRSHARED-31] - LdapDN.endsWith(javax.naming.Name) fails for javax.naming.ldap.LdapName

Improvement

  * [DIRSERVER-639] - allow to run ldaps only
  * [DIRSERVER-649] - transport explanations in NamingExceptions why searches fail back to the client
  * [DIRSERVER-666] - Wrap LDIF generated String every 80 characters
  * [DIRSERVER-785] - When searching the directory with broken search expressions the search never returns (infinite loop)
  * [DIRSERVER-1048] - Need to improve LDIF load procedures
  * [DIRSERVER-1122] - Limit the number of messages sent but not yet acknowledged
  * [DIRSERVER-1165] - Adding some logs when the server has started
  * [DIRSERVER-1247] - removing unrequired escaping in DNs / filters
  * [DIRSERVER-1251] - Update the dependencies to the latest version
  * [DIRSERVER-1257] - some additional unit tests re MODIFY requests
  * [DIRSERVER-1274] - spelling typo
  * [DIRSERVER-1280] - make server connection backlog configurable
  * [DIRSERVER-1288] - put apacheds-server-unit-1.5.4.jar dependencies into Manifest
  * [DIRSERVER-1297] - Create default index on some attributeTypes like ObjectClass, ...
  * [DIRSERVER-1298] - Use AT names instead of OIDs for the indexed attributes
  * [DIRSERVER-1320] - Vestigial attribute workingDirectory in directoryService configuration may no longer be needed
  * [DIRSERVER-1332] - Create apacheds-all OSGi bundle
  * [DIRSERVER-1334] - Create module for OSGi bundle
  * [DIRSERVER-1374] - Use JUnit 4.5 for integration testing framework
  * [DIRSERVER-1375] - Support variable length salts for SSHA and SMD5
  * [DIRSERVER-1386] - Get rid of the MANIFEST.MF file of the server-tools project
  * [DIRSHARED-23] - Organize schema description parsers and value objects

New Feature

  * [DIRSERVER-1260] - Add a protection agains DoS attacks
  * [DIRSERVER-1262] - Add a Jetty container

Task

  * [DIRSERVER-811] - Make schema bootstrap code disregard deleted entries
  * [DIRSERVER-882] - Adding a tool to convert Schema files to Ldif Files
  * [DIRSERVER-1218] - Investigate the altered lookup() (returns empty entries) does not cause issues
  * [DIRSERVER-1329] - Fix expression vs default-value in maven plugins
  * [DIRSERVER-1337] - Add system level indexes for objectClass, entryCSN and entryUUID attributes
  * [DIRSERVER-1372] - Switch to MINA-2.0.0-M6 asap

Sub-task

  * [DIRSERVER-1238] - Move to MINA 2.0 where we can make a bigger impact with the networking code
  * [DIRSHARED-32] - Create Antlr based DN parser