Chapter 1. General information

For details, see the Red Hat Directory Server Errata Support Policy document.

You cannot install Directory Server on a system that has a Red Hat Enterprise Linux Identity Management (IdM) server installed. Likewise, no Red Hat Enterprise Linux IdM server can be installed on a system with a Directory Server instance.

Before migrating, review the following considerations.

PassSync has been removed from Red Hat Directory Server 13

The PassSync package that was used for synchronization with Windows has been removed in Red Hat Directory Server 13.0 because PassSync is not maintained upstream.

Consider using Identity Management (IdM) and cross-forest trust with AD for synchronization with Windows. For details, see Integrating RHEL systems directly with Windows Active Directory.

In addition, note that the Winsync plug-in has been deprecated starting with Red Hat Directory Server 12.6 and will be removed in future releases.

Starting with Directory Server 12, the default password storage scheme is PBKDF2-SHA512

Directory Server 13 uses the PBKDF2-SHA512 scheme as the default password storage scheme, which is more secure than SSHA, SSHA512, and other schemes. Therefore, if some of your applications, such as freeradius, do not support the PBKDF2-SHA512 scheme, and you must set a weaker password storage scheme back, note that Directory Server updates user passwords not only when an application adds or modifies the user entry, but also during a successful bind operation. However, you can disable an update on bind operations by setting the nsslapd-enable-upgrade-hash parameter in the cn=config entry to off.

New command-line utilities starting Directory Server 11

Since version 11, Directory Server provides new command line utilities to manage server instances and users. These utilities replace the Perl scripts used for management tasks in Directory Server 10 and earlier versions.

For a list of commands in previous versions and their replacements in Directory Server 12, see the Command-line utilities replaced in Red Hat Directory Server 11 appendix in the Red Hat Directory Server Installation Guide.