DEC-X500-OSF DXDA302 Digital X.500 Directory Service V3.0 UNIX ECO Summary
Copyright (c) Digital Equipment Corporation 1996. All rights reserved.
PRODUCT: Digital X.500 Directory Service, Version 3.0
OP/SYS: Digital UNIX[R], Version 3.2C or greater
SOURCE: Digital Equipment Corporation
ECO INFORMATION:
ECO Kit Name: DXDA302
ECO Kits Superseded by This ECO Kit: DXDA301
ECO Kit Approximate Size: DXDA302.TAR - 23100 Blocks
11827200 Bytes
ECO KIT SUMMARY:
An ECO kit exists for Digital X.500 Directory Service V3.0 on Digital
UNIX V3.2C or greater.
Problems addressed in the DXDA301 kit:
o This kit fixes a problem that could occur if an attribute value
modification failed between removing the last existing value and
adding new values. The attribute could sometimes be left with no
values. This caused database corruption errors next time the DSA
was started.
o This kit fixes a problem with the multiple entry management
facility in the DXIM command line utility. If you used these
facilities to write information from the directory to a file, and
one of the attributes had a null value, DXIM failed to create the
output file correctly. It is valid for some attributes to have a
null value, and this kit supports such attributes.
o This kit fixes a problem with searching for attributes which
have the distinguishedNameSyntax.
o This kit fixes a problem that was causing the DSA to crash if
the schema defined a large number of object classes.
o This kit fixes a problem with replication on OpenVMS systems.
Problems with the update log files were causing full updates
instead of incremental updates. These problems have been fixed.
o This kit fixes a problem that was introduced in the ECO kit 1
with the syntax of access controls items. The problem prevented
users from referring to ACIitems using the ACIitem identifier.
o This kit fixes a problem with the storage of supplier knowledge
attributes. Long supplier knowledge attributes were sometimes
encoded incorrectly.
o This kit fixes a problem with the handling of continuation
characters in DXIM command lines.
o This kit fixes a problem with the handling of corrupt updates
log files. Instead of reporting the DIT Corrupt message, the
DSA was crashing.
o The handling of search requests has been changed slightly in
this kit.
If the user specifies a search filter that includes an invalid
attribute value assertion, the DSA ignores the invalid assertion
and only processes valid assertions, if any. In previous kits, the
invalid assertion would cause the search to fail and return an
attribute error. For example, if a user asks for entries that have
a surname longer than the permitted length of surnames, that
element of the search filter is ignored.
o This kit can provide additional diagnostic information for
analyzing problems caused by system crashes. This information
is provided for support staff only.
o A problem that could cause a DSA to exit when attempting to
generate a Distributed Operation Failure event has been fixed.
o A problem encoding network addresses has been fixed.
In previous versions, there was a problem encoding TCP/IP
network addresses that had a 0 as their second element. For
example, the following network address would be incorrectly
encoded: 1.0.16.16.
o A problem encoding attribute keywords in distinguished names
has been fixed.
In V3.0, a distinguished name such as /dec-mts-routing-domain=ACME
would be incorrectly encoded because the keyword dec-mts-routing-domain
contains hyphen characters.
o A problem with DXIM's encoding of the identification labels of
access control items has been fixed.
The labels can now be encoded as either printable or T.61
strings, and labels that contain characters that are not in
those character sets are rejected.
If you use MODIFY ENTRY command to try to refer to existing,
invalid values of a prescriptiveACI attribute, the command
returns an error. Use the SET ENTRY command instead. The SET
ENTRY command enables you to specify the intended state of a
value without having to specify the existing state. You could
also use a MODIFY ENTRY command with a REMOVE ATTRIBUTE clause
to completely remove the prescriptiveACI attribute without
having to specify the existing values.
If you use the access control template, as recommended in the
documentation, you are using a SET ENTRY command, so the errors
never arise.
o The DSA's syntax checking of access control items has been
improved. In previous versions, the DSA accepted access controls
with slightly invalid syntax.
o The DSA thread monitor has been fixed to handle all exceptions
that can be raised during thread creation.
o The DSA Information Tree Schema Incompatible error, which can
arise when you create a DSA, has been extended to cover a
schema problem that previously caused a DSA Information Tree
Corrupt error.
If the schema does not define a class of entry that is present
in the DSA, this is now reported as an incompatibility.
o A memory handling problem with the DXIM SET ENTRY command has
been fixed.
o This kit fixes an access control problem that could occur if
you modified access controls on a Digital UNIX system.
o This kit includes access control diagnostics for use by Digital
support.
Problems addressed in the DXDA301 kit:
o A problem that could cause a DSA to exit when attempting to
generate a Distributed Operation Failure event has been fixed.
o A problem encoding network addresses has been fixed.
In previous versions, there was a problem encoding TCP/IP
network addresses that had a 0 as their second element. For
example, the following network address would be incorrectly
encoded: 1.0.16.16.
o A problem encoding attribute keywords in distinguished names
has been fixed.
In V3.0, a distinguished name such as /dec-mts-routing-domain=ACME
would be incorrectly encoded because the keyword dec-mts-routing-domain
contains hyphen characters.
o A problem with DXIM's encoding of the identification labels of
access control items has been fixed.
The labels can now be encoded as either printable or T.61
strings, and labels that contain characters that are not in
those character sets are rejected.
If you use MODIFY ENTRY command to try to refer to existing,
invalid values of a prescriptiveACI attribute, the command
returns an error. Use the SET ENTRY command instead. The SET
ENTRY command enables you to specify the intended state of a
value without having to specify the existing state. You could
also use a MODIFY ENTRY command with a REMOVE ATTRIBUTE clause
to completely remove the prescriptiveACI attribute without
having to specify the existing values.
If you use the access control template, as recommended in the
documentation, you are using a SET ENTRY command, so the errors
never arise.
o The DSA's syntax checking of access control items has been im-
proved. In previous versions, the DSA accepted access controls
with slightly invalid syntax.
o The DSA thread monitor has been fixed to handle all exceptions
that can be raised during thread creation.
o The DSA Information Tree Schema Incompatible error, which can
arise when you create a DSA, has been extended to cover a
schema problem that previously caused a DSA Information Tree
Corrupt error.
If the schema does not define a class of entry that is present
in the DSA, this is now reported as an incompatibility.
o A memory handling problem with the DXIM SET ENTRY command has
been fixed.
o This kit fixes an access control problem that could occur if
you modified access controls on a Digital UNIX system.
o This kit includes access control diagnostics for use by Digital
support.
INSTALLATION NOTES:
Refer to the Digital X.500 Directory Service V3.0 installation card for
instructions on installing this ECO kit on Digital UNIX systems. The
only change is that the installation subsets are identified by the
number 302 instead of 300, for example, DXDABASE302.
[R] UNIX is a registered trademark in the United States and other
countries licensed exclusively through X/Open Company Limited
This patch can be found at any of these sites:
Colorado Site
Georgia Site
Files on this server are as follows:
dxda301.README
dxda302.CHKSUM
dxda302.CVRLET_TXT
dxda302.tar
|
