Comments on: Sun Java Directory Server 6.X impressions

By: EHF

EHF — Thu, 03 Apr 2008 16:49:57 +0000

How have things gone since the recommended hot fix was installed?

I’m running into the same issues with v6.2.

Things run ok and no db corruptions occur if I *do not* have multi-master replication enabled. For now, I kept one master and demoted all my other directory servers to consumers. that seems to have kept things stable…but I’m still keeping my fingers crossed.

By: Ludovic Poitou

Ludovic Poitou — Thu, 03 Jan 2008 11:35:50 +0000

Directory Server 6.2 makes use of an updated version of the SleepyCat Berkeley DB that contains some specific performance improvement. It turns out that these changes are introducing a bug where some pages will be incorrectly Zero’d resulting in a database panic.
The corresponding defect for the Sun Directory Server is 6642430: DB corruption (zero’d pages) when performing db2ldif against large 20GB ldif file

The defect has been fixed and will be integrated in DS 6.3 available in a few months. Meanwhile a hot-fix is available from the Sun Support organization. To get it, open a support call.

By: Quanah

Quanah — Mon, 19 Nov 2007 18:52:53 +0000

Interesting, I used to get those same corruption errors when Stanford had Netscape DS servers. And those were back from 1996 or so. Sad to see that the underlying problems with the Netscape/Fedora/Sun DS products have with database reliability still exist. That routine data corruption was part of what spurred Stanford to move to something with reliability (i.e., OpenLDAP).

By: eldapo - Sun JSDS 6.1 Review

eldapo - Sun JSDS 6.1 Review — Wed, 14 Nov 2007 18:49:14 +0000

[...] a short review of Sun’s Java Systems Directory Server 6.1 by another working directory admin here. In it Kostas Kalevras talks about his recent experience deploying the product in his org’s [...]

By: wyang

wyang — Sat, 20 Oct 2007 00:53:38 +0000

6.2 has an installer like 5.2 as well. You need to download JES 5 update 1 to use that installer (you might also just be able to download the identity management subset only). Also, the interactive installer uses sun web console instead of requiring sun app server (which I think the ZIP dist requires, but I may be wrong). However, the JES5u1 dist doesn’t include identity sync or directory editor components.

By: kkalev

kkalev — Tue, 09 Oct 2007 09:35:06 +0000

I installed using the zip package. And i am sorry but i personally actually find it easier to just run the installer and answer the installer questions (like in 5.2) and then just lauch the java console instead of running dsee_deploy, numerous *adm commands and deploying the dscc with the sun console. Maybe it’s just a matter of personal taste, that’s my taste anyway.
I am not trying to say that 6.X posses security risks i am just stating the fact that we needed to block more than a few ports in order to stay safe of outside threats.

By: Karl H. Beckers

Karl H. Beckers — Tue, 09 Oct 2007 09:01:54 +0000

Hmm,

I don’t see how the installation is harder. There is still a zip packaged offering if you prefer that. And that can be easily installed (even on an unsupported plattform like ubuntu in 6 easy steps http://charly4711.wordpress.com/2007/09/18/directory-server-enterprise-edition-dsee-62-on-ubuntu/).

About security issues around ports, I also don’t feel like the situation has degraded in any way. In previous versions you had the admin server with similar issues, now it’s the cacao agent.

Karl