Red Hat DIRECTORY SERVER 8.1 - RELEASE NOTES Release Note page 23

Bug Number Description
• Performing a full manual resynchronization.
To manually synchronize Active Directory
and Directory Server, open the Directory
Server Console, and, in the Configuration
tab, click the Replication folder, select
the database, and the right-click on the
synchronization agreement.
182509 The changelog used for replication stores
passwords in clear text in order to replicate
them. In some contexts, this could be a
security risk.
190824 By default, not all attributes are
automatically replicated to consumers
in multi-master replication, including
several password-associated attributes
such as passwordRetryCount,
retryCountResetTime, and
accountUnlockTime.
190862 Global syntax checking attributes should be
enforced if the settings aren't configured in the
local password policy. However, if both global
and local password policies are configured,
the global policies aren't being enforced as the
default.
230808 In Directory Server 8.1, the 00core.ldif file
has be split so that 00core.ldif, correctly,
only contains the schema directly required
for starting the server. The other schema
Workaround
Enable fractional replication
and specifically exclude the
userPassword attribute from
being replicated, which prevents
passwords from being written to
the changelog. For example:
nsds5replicatedAttributeList:
(objectclass=*) $ EXCLUDE
userPassword
To replicate these attributes, set
the passwordIsGlobalPolicy
configuration attribute to 1 in
the cn=config entry using
ldapmodify. For example:
dn: cn=config
changetype: modify
replace:
passwordIsGlobalPolicy
passwordIsGlobalPolicy: 1
1. Enable global syntax
checking.
2. Enable fine-grained password
checking.
3. Edit the local password policy
to contain all password syntax
attributes. Set the values to
something other than the
default settings, as listed in
the Configuration, Command,
and File Reference.
4. Re-edit the local password
policy with the desired values,
even if they are the defaults.
Known Issues
23