IBM(R) Directory Server 4.1 Release Notes

IBM(R) Directory Server 4.1 Release Notes

Note

Before using this information and the product it supports, read the general information under Appendix A, Notices.

First Edition (April, 2002)

This edition applies to version 4, release 1, of The IBM Directory Server and to all subsequent releases and modifications until otherwise indicated in new editions. See the IBM Directory Server Version 4.1 README Addendum for later updates.

(C) Copyright International Business Machines Corporation 2001. All rights reserved.
U.S. Government Users Restricted Rights -- Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp.


Contents

Preface

Environments

  • Supported platforms
  • Software requirements
  • Support for industry standards
  • Interoperability
  • National Language Support (NLS)
  • New Function

  • 64-bit client (AIX 5.1)
  • Dynamic groups
  • Improved performance
  • InstallShield MultiPlatform
  • Nested groups
  • Network Authentication Services (Kerberos) 1.2
  • Paged search
  • Process size limit increase and local loopback connections
  • Sorted search
  • Special characters in distinguished names
  • Changed Functionality

    Appendix A. Notices

  • Notices
  • Trademarks

  • Preface

    This document is a supplement to the IBM Directory 4.1 product documentation and describes features and functions made available to you in this release.


    Environments


    Supported platforms

    IBM Directory 4.1 is supported on the following platforms:


    Software requirements

    IBM Directory server requires the following software to be installed:


    Support for industry standards

    The following standards were implemented in this release:


    Interoperability

    The IBM Directory client interoperates with:

    The IBM Directory server interoperates with:

    DMT interoperates with:


    National Language Support (NLS)

    The IBM Directory is NLS-enabled. Sever Administration and Directory Management Tool, as well as messages, helps and documentation are translated into all French, Italian, German, Spanish, Japanese, Korean, Simplified Chinese, Traditional Chinese and Brazilian Portuguese on all platforms except HP-UX. In addition, the AIX operating system is translated into Russian, Slovakian, Polish, Hungarian, Czech and Catalan.

    IBM Directory 4.1 on HP-UX is not translated at this time.

    Linux operating system Intel distributions now include translation where supported by the distribution and IBM. Please see the following tables for languages supported by the Linux distributions:

    Linux single byte language support:


    Distribution English French Italian German Spanish Brazilian Portuguese
    Red Hat 7.1 Yes Yes Yes Yes Yes No
    SuSE 7.2 Yes Yes Yes Yes Yes Yes
    Turbolinux 6.5 Yes No No No No No

    Linux double byte language support:


    Distribution Japanese Korean Simplified Chinese Traditional Chinese
    Red Hat 7.1 Yes No No No
    SuSE 7.2 No No No No
    Turbolinux 6.5 Yes Yes Yes Yes

    New Function

    The following functions have been added in the 4.1 release:


    64-bit client (AIX 5.1)

    The C API for the AIX 5.1 client expands the previous SDK and allows non-SSL 64-bit IBM Directory applications.


    Dynamic groups

    Dynamic groups are groups that are defined using a search expression. When an attribute is added to a directory entry, the entry automatically becomes a member of the group. In addition, simple, efficient methods are provided for client applications to:

    The search expressions can be used in combination with existing group attributes.

    These groups can be used for access control.


    Improved performance

    Several performance improvements are featured in this release. For example, it is now possible for multiple clients to update their directories simultaneously. Communciation between the server and plugins has been significantly improved, as well as search and compare performance. For more detailed information about performance tuning for IBM Directory 4.1, see the IBM Directory Server Version 4.1 Tuning Guide.


    InstallShield MultiPlatform

    The IBM Directory installation program uses InstallShield MultiPlatform, which gives the installation program the same look and feel across all supported platforms except HP-UX and Linux 390. The installation program now includes an integrated installation of DB2(R) V7.2, IBM HTTP Server V1.3.12, and GSKit Version 5.0.4.48, and componentized installation of the client and DMT.


    Nested groups

    Nesting of groups enables the creation of hierarchical relationships that can be used to define inherited group membership. A nested group is defined as a child group entry whose DN is referenced by an attribute contained within a parent group entry. A new attribute has been defined to explicitly distinguish nested groups from ordinary members.


    Network Authentication Services (Kerberos) 1.2

    The IBM Directory C client and server now use the Network Authentication 1.2 C client on AIX, Windows NT, and Windows 2000 operating systems. The IBM Directory server is compatible with the authentication services provided by Microsoft.


    Paged search

    The paged results control allows you to manage the amount of data returned from a search request. You can request a subset of entries (a page) instead of receiving all the results at once. Subsequent search requests display the next page of results until the operation is canceled or the last result is returned. For example, if you have a hundred entries that match your search, you can specify that the entries be displayed on pages containing 25 results each.


    Process size limit increase and local loopback connections

    The process size limit for slapd on the AIX, Solaris, and Linux operating systems has been increased from 256 MB to 2 GB. This allows for increased cache sizes and better scalability. In addition, database connections on all UNIX platforms now use local loopback TCP/IP connections, which eliminate the need for shared memory segments and make 2 GB of memory available for a server running on an AIX operating system. This also greatly increases the number of available database connections.


    Sorted search

    The sorted search control allows a client to receive search results sorted based on a list of criteria, where each criteria represents a sort key. This moves the responsibility of sorting from the client application to the server, where it might be done more efficiently. For example, you might want to sort a list of employees by surname, common name, and telephone number. Instead of building the search list twice so it can be sorted (once at the server and then again at the client after all the results are returned), the search list is built only once, and then sorted, before returning the results to the client application.


    Special characters in distinguished names

    A distinguished name (DN) can now contain the following special characters: , (comma), = (equals), + (plus), <, >, #, ; (semicolon), \ (backslash), and "" (quotation marks).

    Instructions are provided for using these special characters in an attribute value in a DN string.


    Changed Functionality

    IBM Directory 4.1 no longer supports IBM JNDI. IBM Directory 4.1 includes the Sun Microsystems JNDI. Please see Sun documentation for information about Sun JNDI. There might be some functional differences between IBM and Sun implementations that require changes to existing JNDI applications. In Chapter 11 of IBM Directory Server Version 4.1 Installation and Configuration Guide for Multiplatforms, there are instructions that show you how to back up your IBM JNDI code. IBM JNDI applications might still run, but it is recommended that you begin using Sun JNDI immediately.


    Appendix A. Notices


    Notices

    This information was developed for products and services offered in the U.S.A. IBM might not offer the products, services, or features discussed in this document in other countries. Consult your local IBM representative for information on the products and services currently available in your area. Any reference to an IBM product, program, or service is not intended to state or imply that only that IBM product, program, or service may be used. Any functionally equivalent product, program, or service that does not infringe any IBM intellectual property right may be used instead. However, it is the user's responsibility to evaluate and verify the operation of any non-IBM product, program, or service.

    IBM may have patents or pending patent applications covering subject matter in this document. The furnishing of this document does not give you any license to these patents. You can send license inquiries, in writing, to:

    IBM Director of Licensing
    IBM Corporation
    North Castle Drive
    Armonk, NY 10504-1785
    U.S.A.

    For license inquiries regarding double-byte (DBCS) information, contact the IBM Intellectual Property Department in your country or send inquiries, in writing, to:

    IBM World Trade Asia Corporation Licensing
    2-31 Roppongi 3-chome, Minato-ku
    Tokyo 106, Japan

    The following paragraph does not apply to the United Kingdom or any other country where such provisions are inconsistent with local law: INTERNATIONAL BUSINESS MACHINES CORPORATION PROVIDES THIS PUBLICATION "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF NON-INFRINGEMENT, MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Some states do not allow disclaimer of express or implied warranties in certain transactions, therefore, this statement may not apply to you.

    This information could include technical inaccuracies or typographical errors. Changes are periodically made to the information herein; these changes will be incorporated in new editions of the information. IBM may make improvements and/or changes in the product(s) and/or the program(s) described in this information at any time without notice.

    Any references in this information to non-IBM Web sites are provided for convenience only and do not in any manner serve as an endorsement of those Web sites. The materials at those Web sites are not part of the materials for this IBM product and use of those Web sites is at your own risk.

    IBM may use or distribute any of the information you supply in any way it believes appropriate without incurring any obligation to you.

    Licensees of this program who wish to have information about it for the purpose of enabling: (i) the exchange of information between independently created programs and other programs (including this one) and (ii) the mutual use of the information which has been exchanged, should contact:

    IBM Corporation
    Department LZKS
    11400 Burnet Road
    Austin, TX 78758
    U.S.A.

    Such information may be available, subject to appropriate terms and conditions, including in some cases, payment of a fee.

    The licensed program described in this document and all licensed material available for it are provided by IBM under terms of the IBM Customer Agreement, IBM International Program License Agreement, or any equivalent agreement between us.

    Any performance data contained herein was determined in a controlled environment. Therefore, the results obtained in other operating environments may vary significantly. Some measurements may have been made on development-level systems and there is no guarantee that these measurements will be the same on generally available systems. Furthermore, some measurement may have been estimated through extrapolation. Actual results may vary. Users of this document should verify the applicable data for their specific environment.

    Information concerning non-IBM products was obtained from the suppliers of those products, their published announcements or other publicly available sources. IBM has not tested those products and cannot confirm the accuracy of performance, compatibility or any other claims related to non-IBM products. Questions on the capabilities of non-IBM products should be addressed to the suppliers of those products.

    All statements regarding IBM's future direction or intent are subject to change or withdrawal without notice, and represent goals and objectives only.

    All IBM prices shown are IBM's suggested retail prices, are current and are subject to change without notice. Dealer prices may vary.


    Trademarks

    The following terms are trademarks of International Business Machines Corporation in the United States, or other countries, or both:

    AIX DB2 IBM

    Microsoft, MS-DOS, Windows, and Windows NT are registered trademarks of Microsoft Corporation

    Other company, product, and service names may be trademarks or service marks of others.