Red Hat SummitChapter 6. Red Hat Directory Server 12.4
Learn about important updates and new features, known issues, and bug fixes implemented in Directory Server 12.4.
6.1. Important updates and new features in the 389-ds-base package
Important updates in Red Hat Directory Server 12.4 that are included in the 389-ds-base package are documented in Red Hat Enterprise Linux 9.4 Release Notes:
-
389-ds-baserebased to version 2.4.5 -
Transparent Huge Pages are now disabled by default for the
ns-slapdprocess -
The new
lastLoginHistSizeconfiguration attribute is now available for the Account Policy plug-in -
The new
notes=Mmessage in the access log to identify MFA binds -
The new
inchainMatchmatching rule is now available -
The HAProxy protocol is now supported for the
389-ds-basepackage
6.2. Bug fixes
Learn about bugs fixed in Red Hat Directory Server 12.4 that have a significant impact on users.
Directory Server now flushes the entry cache less frequently
Previously, Directory Server flushed its entry cache even when it was not necessary. As a result, in certain situations, Directory Server was unresponsive and had bad performance. With this update, Directory Server flushes the entry cache only when it is necessary.
(BZ#2234613)
The web console no longer changes attribute names to lowercase characters when attributeTypes are added
Previously, when you added an attribute to an object class by using the web console, the uppercase characters in the attribute name were changed to lowercase characters. With this update, the attribute name case is no longer changed.
(BZ#2236181)
Directory Server 12.4 bug fixes that are included in the 389-ds-base package are documented in Red Hat Enterprise Linux 9.4 Release Notes:
6.3. Known issues
Learn about known problems and, if applicable, workarounds in Directory Server 12.4.
Directory Server web console does not automatically update settings that are changed outside the web console
Because of the design of the Directory Server module in the Red Hat Enterprise Linux 8 web console, the web console does not automatically display the latest settings if you change the configuration outside of the console window. For example, if you change the configuration using the command line while the web console is open, the new settings are not automatically updated in the web console. This applies also if you change the configuration by using the web console on a different computer.
To work around the problem, manually refresh the web console in the browser if the configuration was changed outside the console window.
(BZ#1654281) (BZ#1751047)
Directory Server can import LDIF files only from /var/lib/dirsrv/slapd-instance_name/ldif/
Since RHEL 8.3, Red Hat Directory Server (RHDS) uses its own private directories, and the PrivateTmp systemd directive is enabled by default for the LDAP services. As a result, RHDS can only import LDIF files from the /var/lib/dirsrv/slapd-instance_name/ldif/ directory. If the LDIF file is stored in a different directory, such as /var/tmp, /tmp, or /root, the import fails with an error similar to the following:
Could not open LDIF file "/tmp/example.ldif", errno 2 (No such file or directory)
Could not open LDIF file "/tmp/example.ldif", errno 2 (No such file or directory)To work around this problem, complete the following steps:
Move the LDIF file to the
/var/lib/dirsrv/slapd-instance_name/ldif/directory:Copy to Clipboard Copied! Toggle word wrap Toggle overflow mv /tmp/example.ldif /var/lib/dirsrv/slapd-instance_name__/ldif/
# mv /tmp/example.ldif /var/lib/dirsrv/slapd-instance_name__/ldif/Set permissions that allow the
dirsrvuser to read the file:Copy to Clipboard Copied! Toggle word wrap Toggle overflow chown dirsrv /var/lib/dirsrv/slapd-instance_name/ldif/example.ldif
# chown dirsrv /var/lib/dirsrv/slapd-instance_name/ldif/example.ldifRestore the SELinux context:
Copy to Clipboard Copied! Toggle word wrap Toggle overflow restorecon -Rv /var/lib/dirsrv/slapd-instance_name/ldif/
# restorecon -Rv /var/lib/dirsrv/slapd-instance_name/ldif/
For more information, see the solution article LDAP Service cannot access files under the host’s /tmp and /var/tmp directories.
(BZ#2075525)
Interactive installer suggests unsupported LMDB database
When you create an instance by using the dscreate interactive command, you can select mdb as the database type that is not supported. Currently, there is no workaround available.
Known issues in the 389-ds-base package
Red Hat Directory Server 12.4 known issues that affect 389-ds-base package are documented in Red Hat Enterprise Linux 9.4 Release Notes:
'%20d='M201.5%20305.5c-13.8%200-24.9-11.1-24.9-24.6%200-13.8%2011.1-24.9%2024.9-24.9%2013.6%200%2024.6%2011.1%2024.6%2024.9%200%2013.6-11.1%2024.6-24.6%2024.6zM504%20256c0%20137-111%20248-248%20248S8%20393%208%20256%20119%208%20256%208s248%20111%20248%20248zm-132.3-41.2c-9.4%200-17.7%203.9-23.8%2010-22.4-15.5-52.6-25.5-86.1-26.6l17.4-78.3%2055.4%2012.5c0%2013.6%2011.1%2024.6%2024.6%2024.6%2013.8%200%2024.9-11.3%2024.9-24.9s-11.1-24.9-24.9-24.9c-9.7%200-18%205.8-22.1%2013.8l-61.2-13.6c-3-.8-6.1%201.4-6.9%204.4l-19.1%2086.4c-33.2%201.4-63.1%2011.3-85.5%2026.8-6.1-6.4-14.7-10.2-24.1-10.2-34.9%200-46.3%2046.9-14.4%2062.8-1.1%205-1.7%2010.2-1.7%2015.5%200%2052.6%2059.2%2095.2%20132%2095.2%2073.1%200%20132.3-42.6%20132.3-95.2%200-5.3-.6-10.8-1.9-15.8%2031.3-16%2019.8-62.5-14.9-62.5zM302.8%20331c-18.2%2018.2-76.1%2017.9-93.6%200-2.2-2.2-6.1-2.2-8.3%200-2.5%202.5-2.5%206.4%200%208.6%2022.8%2022.8%2087.3%2022.8%20110.2%200%202.5-2.2%202.5-6.1%200-8.6-2.2-2.2-6.1-2.2-8.3%200zm7.7-75c-13.6%200-24.6%2011.1-24.6%2024.9%200%2013.6%2011.1%2024.6%2024.6%2024.6%2013.8%200%2024.9-11.1%2024.9-24.6%200-13.8-11-24.9-24.9-24.9z'/%3e%3c/svg%3e){kind=small}