------
README
------

Date:   July 23, 2009
Fix:    6.0.0.8-TIV-ITDS-IF0001

VRMF:       6.0.0.59
Webadmin:   3.0023


Component:
==========

    Interim fix 1 for IBM Tivoli Directory Server 6.0 fix pack 8


Contents:
=========

    - General Description
    - Platforms
    - Dependencies
    - Problem Tracking Information
        APARs from 6.0.0.8-TIV-ITDS-IF0001   (6.0.0.59 / 3.0023)
        APARs from 6.0.0-TIV-ITDS-FP0008     (6.0.0.58 / 3.0022)
        APARs from 6.0.0-TIV-ITDS-FP0007     (6.0.0.52 / 3.0019)
        APARs from 6.0.0-TIV-ITDS-FP0006     (6.0.0.45 / 3.0016)
        APARs from 6.0.0-TIV-ITDS-FP0005     (6.0.0.41 / 3.0015)
        APARs from 6.0.0-TIV-ITDS-FP0004     (6.0.0.33 / 3.0011)
        APARs from 6.0.0-TIV-ITDS-FP0003     (6.0.0.19 / 3.0007)
        APARs from 6.0.0-TIV-ITDS-FP0002     (6.0.0.14 / 3.0006)
        APARs from 6.0.0-TIV-ITDS-FP0001     (6.0.0.1  / 3.0001)
    - Functionality/Behavior Impact:
        Impacts from 6.0.0.8-TIV-ITDS-IF0001 (6.0.0.59 / 3.0023)
        Impacts from 6.0.0-TIV-ITDS-FP0008   (6.0.0.58 / 3.0022)
        Impacts from 6.0.0-TIV-ITDS-FP0007   (6.0.0.52 / 3.0019)
        Impacts from 6.0.0-TIV-ITDS-FP0006   (6.0.0.45 / 3.0016)
        Impacts from 6.0.0-TIV-ITDS-FP0005   (6.0.0.41 / 3.0015)
        Impacts from 6.0.0-TIV-ITDS-FP0004   (6.0.0.33 / 3.0011)
        Impacts from 6.0.0-TIV-ITDS-FP0003   (6.0.0.19 / 3.0007)
        Impacts from 6.0.0-TIV-ITDS-FP0002   (6.0.0.14 / 3.0006)
        Impacts from 6.0.0-TIV-ITDS-FP0001   (6.0.0.1  / 3.0001)
    - Fix Contents:
        AIX
        HP-UX (IA64)
        HP-UX (PA-RISC)
        Linux (IA32)
        Linux i/p
        Linux s390
        Solaris (SPARC)
        Solaris (x86-64)
        Windows (IA32)
    - Installing the fix:
        Before you install
    - Verifying the installation:
    - Post-installation considerations:
    - The Web Administration Tool:
        Checking the version of the Web Administration Tool
        Deploying the Web Administration Tool into the application server
    - Querying the version number:
    - Uninstalling the fix:


General Description:
====================

    Contains accumulated fixes for problems encountered in IBM Tivoli
    Directory Server Version 6.0. The APAR numbers for all fixes
    included are listed under "Problem Tracking Information". Refer
    to the specific APAR descriptions for more detail.

    Corrections and clarifications to IBM Tivoli Directory Server 6.0
    documentation (addenda) are documented in technote #1210430:

    http://www.ibm.com/support/docview.wss?rs=767&uid=swg21210430

    This and other featured documents for IBM Tivoli Directory Server
    can be found at:

    http://www.ibm.com/support/docview.wss?rs=767&uid=swg27009603


Platforms:
==========

    Platform               cksum      bytes  filename
    ----------------  ----------  ---------  -------------------------------------
    AIX               2951451102  128645120  6.0.0.8-TIV-ITDS-AIX-IF0001.tar
    HP-UX (IA64)      2723891686  240271360  6.0.0.8-TIV-ITDS-HPUXIA64-IF0001.tar
    HP-UX (PA-RISC)   3788666888   78848000  6.0.0.8-TIV-ITDS-HPUXPARISC-IF0001.tar
    Linux (IA32)      3446119347   75284480  6.0.0.8-TIV-ITDS-Linux32-IF0001.tar
    Linux i/p          626705867   77936640  6.0.0.8-TIV-ITDS-Linuxip32-IF0001.tar
    Linux s390        1009443946   72355840  6.0.0.8-TIV-ITDS-Linuxz31-IF0001.tar
    Solaris (SPARC)   2455104445  168714240  6.0.0.8-TIV-ITDS-SolarisSparc-IF0001.tar
    Solaris (x86-64)  3885830481  136888320  6.0.0.8-TIV-ITDS-SolarisX64-IF0001.tar
    Windows (IA32)    3397009990  146996095  6.0.0.8-TIV-ITDS-Win32-IF0001.zip


Dependencies:
=============

    IBM Tivoli Directory Server 6.0


Problem Tracking Information:
=============================

    The APAR number and abstract for all changes included in this fix
    are listed below. Further detail on individual APARs can be found
    by searching for the APAR number on the IBM Tivoli Directory Server
    Support Web page:

    http://www.ibm.com/software/sysmgmt/products/support/IBMDirectoryServer.html

APARs from 6.0.0.8-TIV-ITDS-IF0001   (6.0.0.59 / 3.0023)
--------------------------------------------------------

    APAR IO10744 (CMVC 106905)
        ldapdiff not generating correct LDIF for controls.

    APAR IO10802 (CMVC 106949)
        Adding a nested group which contains it's own parent will hang
        the server

    APAR IO10892 (CMVC 107095)
        TDS server consumes high CPU and may become unresponsive

    APAR IO10996 (CMVC 106734)
        client does not correctly translate \00 to null as per rfc 4515

    APAR IO11000 (CMVC 107183)
        ibmslapd core dumps on Linux 64 during shutdown with -k option.

    APAR IO11001 (CMVC 106957 106960 107192)
        Routine build maintenance

    APAR IO11003 (CMVC 106739)
        TDS client cannot parse password policy response control from
        other servers, such as Sun or openLDAP.

    APAR IO11006 (CMVC 106883)
        upgrade from 52 to 60 using idsxinst tries to configure database

    APAR IO11007 (CMVC 106961)
        webadmin - replicated peer server role may be shown as replica

    APAR IO11009 (CMVC 107040 107209)
        TDS 6.x proxy does not dereference alias request.

APARs from 6.0.0-TIV-ITDS-FP0008     (6.0.0.58 / 3.0022)
--------------------------------------------------------

    APAR IO09138 (CMVC 98565)
        ibmslapd writes initial log messages to ibmdiradm.log

    APAR IO09199 (CMVC 104608)
        Unable to set ACLs on entry cn=localhost

    APAR IO09365 (CMVC 105131)
        ibmslapd ABEND (SIGSEGV) in do_group_ri() function

    APAR IO09531 (CMVC 99785)
        Java.lang.NullPointerException logged by the Web Admin tool

    APAR IO09532 (CMVC 103228)
        replication schedule set up via web admin not completed

    APAR IO09533 (CMVC 103879)
        TDS 6.x referral builds search request with extra filter of
        objectclass=*

    APAR IO09538 (CMVC 105282 105353 105535)
        Routine build maintenance

    APAR IO09554 (CMVC 105272)
        libibmldap.so calls ber_init() from external library

    APAR IO09584 (CMVC 105760)
        Memory leak in ldap_init() and ldap_url_search_direct() APIs

    APAR IO09669 (CMVC 105787)
        TDS 6.x -  idsdb2ldif -s cn=schema core dumps

    APAR IO09671 (CMVC 105887)
        Routine build maintenance

    APAR IO09879 (CMVC 106198 106636)
        Idsxinst/idsxcfg command fails with JAVA exception on HP-UX 64
        bit Itanium machine.

    APAR IO09891 (CMVC 106346)
        bulkload/ldif2db fails if attr value length is > 4096 in a line

    APAR IO09962 (CMVC 106054)
        idsimigr tool doesn't handle multiple objectclass names

    APAR IO09982 (CMVC 106266)
        TDS 6.x idsdb2ldif does not export pwdHistory attribute

    APAR IO10014 (CMVC 92970)
        "password cannot be changed" error when editing user in webadmin

    APAR IO10018 (CMVC 106419)
        ibmslapd crash deleting entry w/ attribute not in schema

    APAR IO10126 (CMVC 106327)
        TDS server cores during the import of TIM adapter profile

    APAR IO10156 (CMVC 106293)
        rootDSE search returns incorrect lastChangeNumber attribute

    APAR IO10157 (CMVC 98958 106228 106409 106410)
        schema modify terminated with unauthorized user - ITDS6.1

    APAR IO10158 (CMVC 105994)
        Corrections to IDSWebApp release info (IDSWebAppInfo.xml)

    APAR IO10159 (CMVC 105968)
        Server appears unresponsive after 15 minutes

    APAR IO10160 (CMVC 105876)
        Server can become unresponsive

    APAR IO10161 (CMVC 106298 106302 106361)
        Routine build maintenance

    APAR IO10171 (CMVC 106379)
        bulkload/ldif2db fails after applying 6.0.0.7-TIV-ITDS-LA0003

    APAR IO10201 (CMVC 106302)
        Routine build maintenance

    APAR IO10298 (CMVC 94432)
        ibm-allgroups ldap search may result in operations error

    APAR IO10520 (CMVC 101416)
        idsimigr cores while migrating from TDS 5.x to 6.x

    APAR IO10522 (CMVC 106590)
        NAS does not start after migration to TDS 6.x

    APAR IO10523 (CMVC 106351 106353 106425)
        Routine build maintenance

    APAR IO10539 (CMVC 106435 106528)
        idsinstall fails if multiple TDS versions or non-en msgs are
        installed

    APAR IO10544 (CMVC 106689 106790)
        Excessive replication conflicts with large groups

    APAR IO10650 (CMVC 106798 106802 106838)
        TDS server may not sort national language characters properly

    APAR IO10686 (CMVC 106722)
        webadmin removes matchingrule upon attribute indexing

    APAR IO10697 (CMVC 106767)
        webadmin doesn't display matching rules in view attributes
        panel if schema uses descriptive names instead of OIDs

    APAR IO10698 (CMVC 106781)
        TDS migration fails if the db2 instance has an _ in the instance
        name

    APAR IO10716 (CMVC 102731 106766)
        TDS client hangs under heavy load

    APAR IO10717 (CMVC 106422 106705 106779 106823 106835)
        Routine build maintenance

APARs from 6.0.0-TIV-ITDS-FP0007     (6.0.0.52 / 3.0019)
--------------------------------------------------------

    APAR IO06620 (CMVC 102425)
        ibmslapd/idsslapd wrapper fails to manage core files on linux

    APAR IO06810 (CMVC 101257)
        ibmslapd proxy fails to failover

    APAR IO06811 (CMVC 102266)
        ITDS migration may not migrate indexes containing "REVERSE"
        index correctly.

    APAR IO07473 (CMVC 101508)
        generalized time format attributes corrupted under heavy loads

    APAR IO07884 (CMVC 102634)
        Server may core w/ SIGSEGV on Linux w/ > 1000 clients connected

    APAR IO08588 (CMVC 100829)
        ldap client fails to connect to alternate hosts in list

    APAR IO08741 (CMVC 101546)
        Routine build maintenance

    APAR IO08757 (CMVC 101303)
        Error GLPCTL036E from idscfgdb in using DB2 9 in Japanese locale

    APAR IO08768 (CMVC 104286)
        start/stop/restart panel in webadmin polls ibmslapd every second

    APAR IO08839 (CMVC 102059)
        TDS 6.0 Hangs after 1024 concurrent connections on Solaris

    APAR IO08915 (CMVC 102522)
        ibm-allGroups search via proxy may result in "operations error"
        on backend if dataset returned is very large

    APAR IO08922 (CMVC 102765)
        Blind addition of global replication on first startup

    APAR IO08943 (CMVC 101441)
        TDS 6.x webadmin cannot administer Z/OS LDAP server

    APAR IO08946 (CMVC 101814 101828)
        Segmentation Fault from ibmslapd after migration from 5.2 to 6.1

    APAR IO08947 (CMVC 101771)
        glibc errors from db2ldif using -k & -t options

    APAR IO08948 (CMVC 101708 102581 102582 102596)
        Routine build maintenance

    APAR IO09036 (CMVC 102961)
        Server may core (SIGSEGV) on Solaris w/ > 1000 clients connected

    APAR IO09107 (CMVC 103021)
        Error GLPRDB001E when deleting a uniqueMember attribute value

    APAR IO09136 (CMVC 103210)
        Routine build maintenance

    APAR IO09150 (CMVC 102726)
        incorrect error when adding an attribute type to the TDS schema

    APAR IO09168 (CMVC 102807)
        All writes and potentially some or all reads are blocked while
        skipping large number of pending changes in replication queues

    APAR IO09169 (CMVC 103408)
        ldapsearch error using -m DIGEST-MD5 on HP-IA64:
        "ldap_sasl_bind_s: Plugin library not loaded"

    APAR IO09170 (CMVC 103401 103464)
        Routine build maintenance

    APAR IO09284 (CMVC 104219)
        comma appended to DN in TDS v6.0 Web Administration tool

    APAR IO09287 (CMVC 104190)
        Group membership is not correctly determined for LDAP and
        changelog backends

    APAR IO09300 (CMVC 104213 104215 104429)
        Routine build maintenance

    APAR IO09302 (CMVC 103015)
        TDS 6.x - search via referral disregards search filter

    APAR IO09474 (CMVC 104825)
        6.0 proxy server cores at startup if a backend server is down

    APAR IO09475 (CMVC 104528 104530 105222)
        Routine build maintenance

    APAR IO09485 (CMVC 97738 99657)
        LDAP client cores during open_connection call to getaddrinfo

    APAR IO09498 (CMVC 105280)
        Routine build maintenance

APARs from 6.0.0-TIV-ITDS-FP0006     (6.0.0.45 / 3.0016)
--------------------------------------------------------

    APAR IO07362 (CMVC 99835)
        very long userPassword will crash server using AES encryption

    APAR IO07637 (CMVC 99967 100131 100143)
        Security defect in IDSWebApp WnDebugServlet

    APAR IO07729 (CMVC 100052)
        Search displays DB2 tablenames truncated upto 16 characters.

    APAR IO07735 (CMVC 100050)
        memory leak in ldap_explode_rdn() C API call

    APAR IO07766 (CMVC 100100)
        Updates to password history table in db2 can cause db2 deadlock
        when many simultaneous password changes are made.

    APAR IO07767 (CMVC 100148)
        "DSA is unwilling to perform" error (rc=53) from paged search

    APAR IO07813 (CMVC 99679.02)
        Enable simplified login URL for TDS webadmin

    APAR IO07814 (CMVC 100021 100083 100087 100088 100137 100145)
        Routine build maintenance

    APAR IO07815 (CMVC 99833)
        New diagnostic audit log pre-op and post-op records

    APAR IO07837 (CMVC 100013)
        TDS 6.0 proxy fails to resolve localhost if IPV6 is enabled

    APAR IO08235 (CMVC 100650)
        deploy_IDSWebApp -v does not display war file version correctly

    APAR IO08267 (CMVC 100568 100569)
        TDS proxy operations error with custom attr that contains _ char

    APAR IO08308 (CMVC 100265 100399 100422)
        "rc=-1 Unknown error" starting slapd w/ ibmdirctl on SuSE 10

    APAR IO08310 (CMVC 97432)
        proxy crashes with operations error while adding suffix entry

    APAR IO08311 (CMVC 99933)
        The entry DN in proxy error msg GLPPXY023E is incorrect

    APAR IO08314 (CMVC 99934)
        Proxy fails to start if all backends in server group are not up

    APAR IO08317 (CMVC 100641)
        infinite loop in db2ldif if "CN=NULL"

    APAR IO08319 (CMVC 100320 100606)
        Routine build maintenance

    APAR IO08371 (CMVC 100690)
        Error GLPSCH028E after migration to TDS 6.0 or 6.1

    APAR IO08404 (CMVC 95674)
        TDS 6.0 proxy server may audit failed operations as successful

    APAR IO08416 (CMVC 97572)
        TDS proxy server will not re-connect to a backend server which
        was down when the proxy was started

    APAR IO08443 (CMVC 100801)
        TDS 6.0 may allow user to change pwd before pwdMinAge is reached

    APAR IO08508 (CMVC 97106)
        TDS 6.0 proxy server may crash (ABEND) if audit is enabled

    APAR IO08509 (CMVC 99083)
        idssnmp configuration is over-written by update/patch install

    APAR IO08510 (CMVC 100642)
        TLS search returns LDAP_SERVER_DOWN (81) if ibm-slapdAllowAnon =
        FALSE

    APAR IO08543 (CMVC 100688 100689)
        NR IO07815 FIX COMPLETION: audit log pre-op and post-op changes

    APAR IO08547 (CMVC 100839)
        Ship "ldif" utility for TDS 6.x

    APAR IO08548 (CMVC 100827)
        Routine build maintenance

    APAR IO08549 (CMVC 100893)
        NR IO08547 FIX COMPLETION: "ldif" utility missing from Windows

    APAR IO08550 (CMVC 100753 100965)
        NR IO08308 FIX COMPLETION: "rc=-1 Unknown error" starting slapd
        w/ ibmdirctl on Redhat 5

    APAR IO08551 (CMVC 100961)
        Routine build maintenance

APARs from 6.0.0-TIV-ITDS-FP0005     (6.0.0.41 / 3.0015)
--------------------------------------------------------

    APAR IO06239 (CMVC 96969)
        Allow configuring the number of DB2 connections to be greater
        than the number of worker threads

    APAR IO06310 (CMVC 97842)
        Manage Users panel not displayed correctly after deleting the
        single user on its last page.

    APAR IO06311 (CMVC 97844)
        Filtered search results using webadmin display wrong user data.

    APAR IO06315 (CMVC 97840)
        Groups added to a user may not be displayed by Web Admin tool.

    APAR IO06396 (CMVC 98015)
        A memory leak occurs when SSL connections fail to be opened.

    APAR IO06406 (CMVC 97949)
        Users and Groups - inconsistency in adding users while using
        WebAdmin UI.

    APAR IO06410 (CMVC 97932)
        idssnmp agent does not encrypt the idssnmp.properties file

    APAR IO06422 (CMVC 97999)
        Copy User fails while using WebAdmin UI.

    APAR IO06480 (CMVC 98178)
        Server takes long time to start in "configuration only mode"
        after migration from TDS 5.1 or earlier

    APAR IO06489 (CMVC 98580)
        Attributes not displayed after editing a user template to add
        objectclasses

    APAR IO06515 (CMVC 98284)
        "Multiple Values" button is not working in the user add panel

    APAR IO06527 (CMVC 98420)
        db2ldif returns 'CN=NULL' membership in addition to correct
        membership.

    APAR IO06539 (CMVC 97850)
        idslink/idsrmlink -s fullsrv does not update all links

    APAR IO06546 (CMVC 98418)
        [HP IA64 only] start command fails w/ rc=35072 Unknown error

    APAR IO06563 (CMVC 98442)
        ldap_delete or modify returns "No such attribute" (rc=16)

    APAR IO06564 (CMVC 97575)
        Reject add of pwdPolicy operational attributes w/out admin ctrl

    APAR IO06567 (CMVC 98603)
        [AIX only] ibmslapd ulimits are wrong when started via ibmdirctl

    APAR IO06581 (CMVC 94384)
        Enable support for large files (>2GB) on Unix

    APAR IO06585 (CMVC 98578)
        6.0 idsinstall does not update instance copies of "runscript"

    APAR IO06608 (CMVC 98821)
        TDS 6.0 changelog entries are not in proper LDIF format

    APAR IO06624 (CMVC 99267 99513)
        ibm-allGroups incorrect if memberURL uses integer attributes

    APAR IO06644 (CMVC 98897)
        AE IO04842 FIX COMPLETION: server starts in configuration mode
        after applying TDS 6.0 FP04

    APAR IO06648 (CMVC 98919)
        AE IO06216 FIX COMPLETION: ldap_unbind() API's may return
        LDAP_LOCAL_ERROR (82)

    APAR IO06684 (CMVC 99049)
        ldif2db utility cores if attribute value is all whitespace

    APAR IO06709 (CMVC 92665)
        ldapsearch w/ filter may return error 87 (LDAP_FILTER_ERROR)

    APAR IO06711 (CMVC 98818)
        TDS logs of SQL "state" (like db2cli.log) may contain garbage in
        DBCS/MBCS locales

    APAR IO06730 (CMVC 92479)
        memory leak in client API after calling
        ldap_set_iconv_local_charset()

    APAR IO06746 (CMVC 99747 99877)
        idsicrt,idsxinst does not recognize alias IP address on AIX

    APAR IO06841 (CMVC 99722)
        AE IO05042 FIX COMPLETION: Missing attributes after migration

    APAR IO06912 (CMVC 99238)
        Long delays when using SSL/TLS connections to LDAP

    APAR IO06918 (CMVC 99237 99364)
        PROXY server is unstable if started w/ "idsslapd" command

    APAR IO06919 (CMVC 99385)
        [AIX Only] GLPWRP002E error when starting proxy server instance

    APAR IO06920 (CMVC 95054)
        ldapsearch gives duplicate results when attribute cache is on

    APAR IO06921 (CMVC 98804)
        Server may crash if pwdPolicy is enabled w/ pwdSafeModify=TRUE

    APAR IO06922 (CMVC 98640)
        Do not display schema modify options to non-admin users

    APAR IO06926 (CMVC 99139)
        User template displays attribute as both MAY and MUST

    APAR IO06929 (CMVC 99372)
        [6.0.0.33-36 only] idscfgdb fails with GLPCTL036E in non-english
        locale

    APAR IO06936 (CMVC 99444)
        TDS webadmin user template attribute order not retained

    APAR IO07121 (CMVC 92995 93018)
        Server leaks memory when deleting subtree

    APAR IO07124 (CMVC 99421)
        GLPRPL033E Error Timed out occurred for replica ...

    APAR IO07127 (CMVC 99443)
        [AIX only] Add handlers for SIGDANGER and SIGUSR1

    APAR IO07131 (CMVC 99016)
        Proxy server can allow access to malicious client

    APAR IO07170 (CMVC 99602)
        IDSWEBAPP IN FULL WAS ENVIRONMENTS - SSL CONFLICT

    APAR IO07289 (CMVC 99622)
        Server won't start if slapd.pid is empty

    APAR IO07290 (CMVC 99632)
        Possible slow replication when replication table is large

    APAR IO07309 (CMVC 99672 99751 99753)
        [Linux only] Error GLPCOM027E starting proxy on privileged port

    APAR IO07317 (CMVC 93395)
        Event processing can send event messages to closed connections

    APAR IO07370 (CMVC 99670)
        cn=monitor may show opsinitiated < opscompleted

    APAR IO07528 (CMVC 99649)
        pwdChangedTime attribute not updated when admin changes password

    APAR IO07529 (CMVC 99746 99750)
        idsicrt,idsxinst does not recognize alias IP address on Linux

    APAR IO07530 (CMVC 99682)
        Infinite loop in get_filter_list()

    APAR IO07533 (CMVC 99684)
        web admin tries to overwrite SSLTLS value

    APAR IO07535 (CMVC 99864)
        AE IO05197 FIX COMPLETION: passwords in config file corrupted
        after migration to TDS 6.0

    APAR IO07536 (CMVC 99346)
        [AIX Only] anonymous DIGEST-MD5 bind from openldap client may
        crash TDS 6.0 proxy server on AIX

    APAR IO07551 (CMVC 99860)
        Error GLPSRV064E starting with "-a" if change log is enabled

    APAR IO07556 (CMVC 99092)
        AE IO07131 FIX COMPLETION: CRAM-MD5 bind crashes server (SEGV)

APARs from 6.0.0-TIV-ITDS-FP0004     (6.0.0.33 / 3.0011)
--------------------------------------------------------

    APAR IO04810 (CMVC 95981)
        replication conflict on peers after bind failure w/ pwdPolicy

    APAR IO04842 (CMVC 94196 95094)
        Various problems with ibm-nestedGroup & ibm-memberGroup

    APAR IO05020 (CMVC 94532)
        Deadlocks in DynamicGroups W/ACLs

    APAR IO05022 (CMVC 94404 94848)
        Change Autolock wait processing (linux only)

    APAR IO05042 (CMVC 94194 96489 96490)
        migration to 6.0: "Memory Fault" (ABEND) from idsimigr command

    APAR IO05046 (CMVC 95836)
        time stamp errors replicating multiple updates per second

    APAR IO05147 (CMVC 94548)
        Changing encryption from AES 256 to SHA causes secretkey
        attributes to display in encrypted format

    APAR IO05336 (CMVC 94655 94970 95038)
        Add search limit to dynamic group searches

    APAR IO05376 (CMVC 94910)
        Server does not reject integer values < -2,147,483,648

    APAR IO05400 (CMVC 94931)
        Paged search returns incorrect number of entries

    APAR IO05440 (CMVC 95061)
        ldapmodrdn uses shortest alternate name for new RDN attribute

    APAR IO05448 (CMVC 95028)
        Invalid DN in modrdn can trap server.

    APAR IO05474 (CMVC 95099)
        ITIM 4.6 fp25 ldapUpgrade tool kills ibmslapd (itds v60fp3)

    APAR IO05479 (CMVC 94580)
        Error "NO MEMORY, EXITING.." from bulkload

    APAR IO05499 (CMVC 95181 95474)
        pwdChangedTime set to future date results in password expired

    APAR IO05508 (CMVC 95227)
        Correct proxy supportedcontrol and ibm-supportedcapabilities

    APAR IO05509 (CMVC 95673 96292 96416)
        proxy server cores (ABEND) when backend server is down

    APAR IO05579 (CMVC 94945)
        Proxy server leaks 48 bytes per operation

    APAR IO05580 (CMVC 96116)
        Bind or compare using lower or mixed-case "{CRYPT}" tag fails

    APAR IO05588 (CMVC 94176)
        Saving an empty attribute cache list requires server restart

    APAR IO05591 (CMVC 95133)
        increase default page size of DIT table from 20 to 200

    APAR IO05592 (CMVC 94757)
        Webadmin cannot modify attributes if RDN is in UPPERCASE

    APAR IO05596 (CMVC 95142)
        user cannot change expired/reset password from webadmin login if
        anon bind is disabled on 6.0 server

    APAR IO05638 (CMVC 95369)
        There is no password stash files for jks files.

    APAR IO05731 (CMVC 95518)
        ldap client using GSSAPI doesn't fail over to alternate servers
        if first bind fails

    APAR IO05736 (CMVC 95607)
        Proxy may not respond to Bind request

    APAR IO05740 (CMVC 95622)
        member attribute disappears after modifying entryowner

    APAR IO05744 (CMVC 93929)
        server may ABEND (SEGV) or return incorrect search results if
        attribute cache is enabled

    APAR IO05747 (CMVC 95276 95596)
        Allow '.'s in attribute type names

    APAR IO05748 (CMVC 95651)
        Proxy will ABEND on compare operation if trace is enabled

    APAR IO05766 (CMVC 95614)
        TDS V6.0 - SSL enabled webadmin not able to promote replica
        to a master

    APAR IO05863 (CMVC 96086)
        Server cores (ABEND) during ITIM 4.6FP25 LDAPUPGRADE

    APAR IO05903 (CMVC 96056 96142)
        Server fails modify request w/ rc=90 (LDAP_NO_MEMORY)

    APAR IO05972 (CMVC 96503)
        Conflict resolution requiring a re-add of an entry leaks the
        entire entry structure.

    APAR IO05974 (CMVC 96542)
        64-bit replica supplier cannot move failed replication change to
        REPLERROR table (change is not skipped and blocks queue)

    APAR IO06031 (CMVC 95283)
        AE IO04203 FIX COMPLETION: Digest-Md5 bind using credentials
        containing French characters may ABEND server

    APAR IO06034 (CMVC 95495)
        Server ABEND performing search operation

    APAR IO06040 (CMVC 96041)
        mod_replace pwdAccountLockedTime fails w/ rc = 94 LDAP_NO_RESULTS_RETURNED

    APAR IO06042 (CMVC 96792)
        Webadmin cannot expand entry DN's containing "/" characters

    APAR IO06055 (CMVC 96625 96661)
        Return empty sequence as controlValue for password policy when
        there is no warning or error in passwordPolicyResponse control

    APAR IO06057 (CMVC 96878)
        AE IO02432 FIX COMPLETION: SOLARIS ONLY - ibmslapd (supplier)
        leaks connections when consumer is down.

    APAR IO06068 (CMVC 96891)
        Server fails modify request w/ rc=32 (LDAP_NO_SUCH_OBJECT)

    APAR IO06107 (CMVC 97205)
        ldapadd with "do not replicate" control gets replicated

    APAR IO06148 (CMVC 97297)
        SQL0405N errors in db2cli.log

    APAR IO06165 (CMVC 97473 97488 97510)
        TDS v6.0 fix install overwrites DST patched Java (except HP-UX)

    APAR IO06198 (CMVC 97391)
        server cannot create core if started from webadmin or ibmdirctl

    APAR IO06200 (CMVC 97476)
        ibmslapd takes long time to start after db2 reorg / runstats

    APAR IO06216 (CMVC 95307 97453 97487)
        TDS Client connect may fail on Linux w/ errno 9
        (EBADF: INVALID FILE DESCRIPTOR)

    APAR IO06289 (CMVC 95848 96173 97690)
        Usability enhancements to "Users and Realm" webadmin tasks

    APAR IO06296 (CMVC 96109)
        time-units in Password Lockout panel are wrong in translation

    APAR IO06300 (CMVC 96062)
        Add/Edit referral panel displays irrelevant search filter fields

    APAR IO06306 (CMVC 96144)
        Edit filter button does not work on Add/Edit Referral panel

    APAR IO06307 (CMVC 96276)
        View server status panel is not displayed to anonymous user

    APAR IO06316 (CMVC 96892)
        server does not send any result code to client when used with
        ITDI password plugin, during a password modify.

    APAR IO06318 (CMVC 97209)
        Memory leak if "Replication conflict... entry is too large"

    APAR IO06321 (CMVC 96494)
        mod_replace to delete pwd policy attributes fails with rc 94
        (LDAP_NO_RESULTS_RETURNED) if the attribute has no values

    APAR IO06323 (CMVC 96777)
        Proxy server may hang (deadlock)

    APAR IO06324 (CMVC 93483)
        Values in aclEntry cannot be deleted for replication context

    APAR IO06325 (CMVC 97200)
        Error - gethostbyname_r, failed errno=0

    APAR IO06327 (CMVC 97676)
        idsinstall.sh does not validate machine architecture

    APAR IO06328 (CMVC 92379)
        Server returns error during ldap modify operation using JNDI.

    APAR IO06332 (CMVC 95168)
        NullPointerException from com.ibm.ldap.dsml.DsmlValue

    APAR IO06342 (CMVC 97813)
        idsinstall -u fails dependency check for pdksh on SLES10/RHEL5

APARs from 6.0.0-TIV-ITDS-FP0003     (6.0.0.19 / 3.0007)
--------------------------------------------------------

    APAR IO04349 (CMVC 93479)
        Cannot edit attr in WebAdmin if IBMLDAP_ATTRLOWERCASE=FALSE

    APAR IO04587 (CMVC 93597 93898)
        User cannot change expired/reset password from WebAdmin login

    APAR IO04714 (CMVC 93861)
        TDS 6.0 does not replicate SHA encrypted passwords correctly

    APAR IO04794 (CMVC 93820)
        IBMAttributeTypes w/ REVERSE are lost in 6.0 schema migration

    APAR IO04857 (CMVC 93730)
        AE IO02301 FIX COMPLETION: not able to change the attribute
        definition from MAY to MUST.

    APAR IO04868 (CMVC 93912 94211)
        Server does not respond during transaction ex-op

    APAR IO04873 (CMVC 93297)
        idscfgsuf allows invalid suffixes

    APAR IO04884 (CMVC 93920)
        multi-threaded replication may ABEND 6.0 repl supplier

    APAR IO04891 (CMVC 93991)
        AE IO03290 FIX COMPLETION: Adding conflicting schema returns
        error 53 instead of error 20

    APAR IO04950 (CMVC 93945)
        TDS 6.0 multithreaded replication not working

    APAR IO04961 (CMVC 94165)
        Enable trace files > 2GB

    APAR IO04969 (CMVC 94545)
        AE IO03338 FIX COMPLETION: Search filters using NOT (!) may not
        return correct results

    APAR IO04986 (CMVC 93960)
        Asynchronous requests to a TDS 6.0 server may fail w/
        LDAP_OPERATIONS_ERROR (rc=1)

    APAR IO04991 (CMVC 92679 93720 93800)
        6.0 webadmin only shows 1st 200 entries or users

    APAR IO04996 (CMVC 93803)
        WebAdmin add user/group panel does not enforce required realm

    APAR IO05019 (CMVC 94387)
        AE IO04868 FIX COMPLETION: Memory leak in transactions

    APAR IO05039 (CMVC 94493)
        Unable to get server id when click on "GET SERVER ID" and
        SSL is enabled in webadmin tool

    APAR IO05040 (CMVC 94362)
        delete or modrdn via proxy may return LDAP_INSUFFICIENT_ACCESS

    APAR IO05044 (CMVC 94410)
        Improve search performance under heavily concurrent loads

    APAR IO05065 (CMVC 94504)
        Server ABEND on Solaris 10 (SPARC) when modifying schema

    APAR IO05092 (CMVC 94179)
        "ldap_delete: operations error" deleting entry on proxy server

    APAR IO05145 (CMVC 94624)
        TDS V6.0 - SPARCSOLARIS 10 - ITIM ADAPTER IMPORT KILLS IBMSLAPD

    APAR IO05197 (CMVC 93839 94553 94560)
        server does not recognize upper case encryption scheme: {CRYPT}

    APAR IO05200 (CMVC 93954 94520)
        Delete action allowed w/ no members selected in webadmin

    APAR IO05204 (CMVC 93875)
        Search results not refreshed after deleting an entry

    APAR IO05241 (CMVC 92750)
        Enhancements to Add/Edit Referral panels

    APAR IO05251 (CMVC 93871)
        Refresh button on View Worker Status panel does not work

    APAR IO05252 (CMVC 93950)
        Disable actions when advanced option is not selected

    APAR IO05257 (CMVC 94035)
        Cannot edit single-valued, naming attribute (RDN) of an entry

    APAR IO05260 (CMVC 94257)
        Expanding an entry to show its children displays blank table

    APAR IO05261 (CMVC 94527 94531)
        Proxy server on Windows uses high CPU if back end server down

    APAR IO05269 (CMVC 93494)
        Audit operation id to map proxy requests to back end operations

    APAR IO05274 (CMVC 94191 94230 94492 94578)
        Slapi API enhancements for preop plugins

    APAR IO05276 (CMVC 93728)
        proxy server leaks memory processing modify ops

    APAR IO05278 (CMVC 94002)
        ldap_compare does not report locked account if bound as admin

    APAR IO05284 (CMVC 94235)
        "livethreads" attribute of cn=monitor <= 0

    APAR IO05287 (CMVC 94374)
        Proxy server may ABEND performing bind operation

APARs from 6.0.0-TIV-ITDS-FP0002     (6.0.0.14 / 3.0006)
--------------------------------------------------------

    APAR IO02167 (CMVC 92558)
        TDS 6.0 server starts in config mode when started from
        the services panel after installing ldap and db2.

    APAR IO02432 (CMVC 92524 92812)
        60:ldap clients fail to resolve localhost if IPv6 is enabled

    APAR IO02450 (CMVC 92584 92594)
        Subtree replication using AES password encryption and correct
        KSF synchronization fails with error GLPCRY008E on the replica

    APAR IO02479 (CMVC 92542)
        multithreaded search with complex filters may ABEND server

    APAR IO02714 (CMVC 92601 92617)
        SLAPD incorrectly binds using SASL EXTERNAL

    APAR IO02753 (CMVC 92635 92692)
        Modifying schema via the webadmin changes owner of V3.Modifiedschema
        from ldap:ldap to root:root

    APAR IO02853 (CMVC 92661)
        Add support for JNDI fetchSchema() method

    APAR IO02945 (CMVC 92254)
        NULL based subtree search does not chase named reference

    APAR IO02946 (CMVC 92461)
        Directory server performance could be degraded when using the
        unique attribute extended operation

    APAR IO02955 (CMVC 92512)
        If transaction size limit is set very high (or unlimited) and the
        number of operations contained in a transaction is high (in the
        thousands), the server may crash when the transaction is completed

    APAR IO02957 (CMVC 92459)
        By mixing aclentry and ibm-filteraclinherit you can create an
        invalid ibm-filteraclentry w/o any filter

    APAR IO02959 (CMVC 92456)
        Global ibm-slapdTimeLimit and ibm-slapdTimeLimit may not be enforced
        if size or time limit sent with search request is < 0.

    APAR IO02960 (CMVC 92453 92590)
        Server may appear hung after migration from IDS V4 due to use of
        un-indexed DB2 column in replication migration when server starts.

    APAR IO02961 (CMVC 92607)
        Server will deadlock when deleting an entry which is a member of the
        same group(s) as the Bind_DN

    APAR IO02962 (CMVC 92673)
        Memory leak in LDAP client library if SSL operation fails with return
        code 116 (LDAP_SSL_HANDSHAKE_FAILED)

    APAR IO02964 (CMVC 92502)
        asynchronous unbind may deadlock server

    APAR IO02999 (CMVC 92709)
        IDS 6.0 server leaks memory in replication conflict resolution

    APAR IO03005 (CMVC 92741)
        Allow ACLs on cn=changelog

    APAR IO03053 (CMVC 93054)
        TDS 6.0 db2ldif with -t -k parameters may ABEND

    APAR IO03064 (CMVC 92471)
        different handling for failed_create_topology msg

    APAR IO03068 (CMVC 92473)
        editing admin group member on os/400 produces null pointer exception

    APAR IO03069 (CMVC 92678)
        idswebapp add/edit user creates entries with empty values

    APAR IO03076 (CMVC 92760)
        When using a webadmin and the language is Portuguese, adding attribute
        types of sensitive or critical get translated to "sensativa" and
        "critica"

    APAR IO03199 (CMVC 92671)
        ldapexop skip of nonexistent entry cores server

    APAR IO03202 (CMVC 92368)
        "ldaptrace -d" without a value gives erroneous error message:
        "Insufficient access"

    APAR IO03203 (CMVC 92688)
        Use FormatMessage() to log winsock error descriptions

    APAR IO03206 (CMVC 92751 92835)
        New user is able to perform modifies before setting/resetting
        their password.

    APAR IO03219 (CMVC 92694 92695)
        Corrected error in Linux install script that prevented product
        install on Linux platforms.

    APAR IO03290 (CMVC 89055)
        Server allows an objectclass and attribute to have the same OID

    APAR IO03292 (CMVC 92745)
        ex-ops on log files don't audit the type of file

    APAR IO03294 (CMVC 92765)
        Problems w/ '#' in DN after migrating from 4.1 or earlier

    APAR IO03301 (CMVC 92651)
        Failed login which triggers passwordMaxFailure account lock may
        receive incorrect error code.

    APAR IO03305 (CMVC 92525)
        Bulkload load script echo's DB2 user password

    APAR IO03306 (CMVC 92608)
        ddsetup tool fails reading the first entry in the LDIF file

    APAR IO03307 (CMVC 92681)
        memory leak in server and admin daemon

    APAR IO03308 (CMVC 92698)
        Add clause "MINPCTUSED 10 ALLOW REVERSE SCANS" to db2 indexes

    APAR IO03309 (CMVC 92719)
        Bind using Kerberos may ABEND server after applying IO02391

    APAR IO03310 (CMVC 92451 92841)
        Webadmin Manage Objectclasses does not FIND first entry

    APAR IO03311 (CMVC 92449 92769)
        pwdFailureTime is logged twice upon failed login from webadmin

    APAR IO03312 (CMVC 92469)
        Error adding repl. agreement leaves server in quiesced state

    APAR IO03313 (CMVC 92472 92783)
        Webadmin fails to change pwd of admin group member

    APAR IO03334 (CMVC 91948)
        Default connection pool size in Proxy panels should be increased

    APAR IO03335 (CMVC 92625)
        Log a warning if an unindexed attribute is used in search filter

    APAR IO03338 (CMVC 92785)
        Improve search performance for "!" filters

    APAR IO03339 (CMVC 92825)
        log error when write socket times out

    APAR IO03376 (CMVC 92833)
        SSL handshake from <ip address> failed. Connection denied.

    APAR IO03381 (CMVC 92770)
        IDS server might exit or not startup if audit log grows >2GB

    APAR IO03383 (CMVC 92647)
        An invalid search filter could crash or destabilize the server

    APAR IO03513 (CMVC 92935)
        backup .ksf key stash file created by idsdbback may be corrupt

    APAR IO03689 (CMVC 92868)
        "idsicrt" fails on Windows after applying APAR IO02167

    APAR IO03691 (CMVC 92794 93154)
        ldap_compare does not report expired pwd if bound as admin

    APAR IO03692 (CMVC 92300)
        Server may not return correct referral in some situations

    APAR IO03693 (CMVC 92867)
        Improve search performance for "!" filters (part 2)

    APAR IO03697 (CMVC 92911)
        db2ldif -j should not export operational pwdPolicy attributes

    APAR IO03698 (CMVC 92923)
        Improve performance for searches on "objectclass" attribute

    APAR IO03710 (CMVC 92444)
        slapi_XXX_internal() updates are not logged to the change log

    APAR IO03711 (CMVC 92761)
        Password expiration may not account for prior leap years

    APAR IO03713 (CMVC 92899)
        ldapmodify allows invalid LDIF input

    APAR IO03741 (CMVC 92546 92554 92562 92603 92711 92749 92758)
        Enable a configuration procedure to allow for zLinux a 64-bit DB2 server
        to operate as the LDAP server back-end repository.

    APAR IO03759 (CMVC 93041 93070)
        Bugtraq ID: 16593 "... LDAP Memory Corruption Vulnerability"
        http://www.securityfocus.com/bid/16593/info

    APAR IO03760 (CMVC 93080)
        out-of-memory error may go undetected in filter processing

    APAR IO03783 (CMVC 93316 93564 93647 93650 93663)
        "rc=-1 Unknown error" starting slapd w/ ibmdirctl

    APAR IO03861 (CMVC 93362)
        Proxy does not return DN if ibm-allGroups is requested

    APAR IO03882 (CMVC 93039)
        ABEND adding admin group member leaves 0 byte ibmslapd.conf

    APAR IO03885 (CMVC 92805)
        Proxy does not update global admin group when members are del

    APAR IO04000 (CMVC 93234)
        conflict resolution removes replica ACLs

    APAR IO04199 (CMVC 93290)
        v60 migration fails with error GLPRB001E

    APAR IO04202 (CMVC 93116)
        LDAP_OPERATIONS_ERROR when setting aclpropagate incorrectly

    APAR IO04203 (CMVC 93246 93513)
        DIGEST-MD5 bind fails for username containing French characters

    APAR IO04206 (CMVC 93023)
        Attribute cache may not find entry after moddn with new superior

    APAR IO04208 (CMVC 93119)
        proxy returns wrong value of opscompleted in monitor search

    APAR IO04209 (CMVC 93137)
        -u option should not be required for idsdnpw command

    APAR IO04210 (CMVC 93293)
        Minimum supported GSKit level is 7.0.3.24

    APAR IO04214 (CMVC 93140 93398 93400 93412 93423)
        Error reading ldap_user_info file across 32bit/64bit mode

    APAR IO04227 (CMVC 93224)
        "Error code 67" when changing RDN in "Modify Entry" panel

    APAR IO04251 (CMVC 93323)
        ibm-allGroups may return rc=90 (LDAP_NO_MEMORY)

    APAR IO04277 (CMVC 92991)
        6.0 Proxy should not send updates to "forwarder" servers

    APAR IO04317 (CMVC 93383)
        modify-delete & modify-add in 1 operation fails on 64-bit server

    APAR IO04546 (CMVC 93475 93636)
        s390_linux_2_sl9_x86 build missing certain file and address the
        compile flag (-D_GCC3) was missing from makefile.ex

    APAR IO04733 (CMVC 93336)
        admin password policy should not be disabled in safe mode

    APAR IO04739 (CMVC 93428)
        memory leak in server and admin daemon

    APAR IO04742 (CMVC 93458)
        leading TABs in Binary values may be corrupted

    APAR IO04744 (CMVC 93498)
        some audit log records may be corrupted/missing on windows

    APAR IO04761 (CMVC 93640)
        LDAP server fails converting DN from UTF8 to local code page due
        to failure in locking a mutex

    APAR IO04765 (CMVC 93685 93688)
        As an enhancement to serviceability for the Proxy Server, log a
        message for each successful TCP connection opened

    APAR IO04781 (CMVC 93447)
        ldif2db load time grows exponentially if replication is
        configured

    APAR IO04783 (CMVC 93437 93445)
        Data Linkage Table (+z) overflow on HP-UX

    APAR IO04787 (CMVC 93774 93838)
        multi-threaded replication may ABEND 6.0 repl supplier

    APAR IO04808 (CMVC PXY_LIB)
        Proxy server may crash (ABEND) under stress

APARs from 6.0.0-TIV-ITDS-FP0001     (6.0.0.1  / 3.0001)
--------------------------------------------------------

    APAR IO01169 (CMVC 92037)
         OnExpand throws "Administrative limit exceeded" exception.

    APAR IO01480 (CMVC 91960)
         Web Admin Manage Memberships - Browse Groups is broken.

    APAR IO01481 (CMVC 92026)
         Automatic creation of replication topology fails when 6.0 web admin is
         connected to pre 6.0 server and replica is added.

    APAR IO01482 (CMVC 91968)
         Web Admin is unable to create an SSL connection.

    APAR IO01484 (CMVC 92133)
         Web Admin console connection to LDAP Server over SSL does not work.

    APAR IO01485 (CMVC 92114)
         Invalid characters displayed for percentage of cache used in web admin.

    APAR IO01486 (CMVC 92108)
         Web Admin adding servers with a colon as part of the hostname causes
         failure in future login attempts.

    APAR IO01488 (CMVC 92036)
         Web Admin user template for a realm may display duplicate attribute names.

    APAR IO01558 (CMVC 92251)
         If missing TDS 6.0 definitions for Tivoli Access Manager specific attributes,
         the server will not start after a migration.

    APAR IO02274 (CMVC 91795)
         An attribute name in an entry is changed to lower case after a modify.

    APAR IO02275 (CMVC 91904)
         Password Policy used 30 days in a month for password expiration.

    APAR IO02276 (CMVC 91937)
         LDAP server leaks memory if incoming search requests include non-existing
         attributes in the search filter.

    APAR IO02277 (CMVC 92125)
         TDS dynamic tracing does not properly close the output trace file.

    APAR IO02278 (CMVC 91946)
         Use WINSOCK API to report communications errors on Windows.

    APAR IO02279 (CMVC 91981)
         Remove exception handler routine introduced as resolution to IR54428.

    APAR IO02280 (CMVC 92017)
         Modifying ibm-slapdAdminGroupMember objects causes the LDAP server to abend.

    APAR IO02281 (CMVC 92020)
         Java LDAP clients fail to establish an SSL connection if socket read is
         non-blocking.

    APAR IO02284 (CMVC 92021)
         Java LDAP clients attempting an SSL connection using LDAP V2 protocol
         fail with rc=116.

    APAR IO02285 (CMVC 92055)
         Paged search abends the LDAP server if running with trace enabled.

    APAR IO02286 (CMVC 92067)
         LDAP unbind operation is slow to complete.

    APAR IO02287 (CMVC 92084)
         Modify-replace with a NULL value is replicated as an empty string.

    APAR IO02288 (CMVC 92100)
         For certain extended operations, the LDAP server audits an invalid
         return code.

    APAR IO02289 (CMVC 92105)
         Using the C LDAP client library, a client is limited to PTHREAD_KEYS_MAX
         connections.

    APAR IO02290 (CMVC 92115)
         LDAP Server abends if running with audit log enabled.

    APAR IO02291 (CMVC 92131 92429)
         Improved formats for AIX debug output and trace flow output.

    APAR IO02292 (CMVC 92149)
         Requests to unbind a connection by IP should return no such object
         if the IP is invalid.

    APAR IO02293 (CMVC 92153)
         LDAP server hangs (deadlock) when processing an LDAP transaction
         containing 2 or more ADD operations.

    APAR IO02294 (CMVC 92165)
         Internal modifies are not replicated if changelog is enabled.

    APAR IO02295 (CMVC 92183)
         Return non-normalized DNs for an ibm-allGroups and ibm-allMembers
         search.

    APAR IO02296 (CMVC 92189)
         LDAP server hangs (deadlock) if there is a failure normalizing values and
         the associated cached entries are not removed.

    APAR IO02297 (CMVC 92193)
         LDAP server is unstable if REOPT=4 is set in DB2CLI.INI using DB2 8.1/8.2
         Fix Pack 9.

    APAR IO02298 (CMVC 92194)
         When auditing is enabled the LDAP server abends on an add operation with
         a null DN, or with other malformed ber.

    APAR IO02299 (CMVC 92209)
         Modify-delete and Modify-add of INTEGER values fail in finding the specified
         value in the database backend.

    APAR IO02300 (CMVC 92220 92252)
         ibm-allmembers is not evaluated for a nested group.

    APAR IO02301 (CMVC 92241)
         Modify-delete or Modify-replace of an object class from the schema is slow
         for a large directory.

    APAR IO02302 (CMVC 92260)
         ldap_unbind function sleep is longer than the intended duration.

    APAR IO02303 (CMVC 92263)
         LDAP server abends if modrdn is in a transaction.

    APAR IO02304 (CMVC 92275)
         ibmdiradm process abends when ldaptrace is executed.

    APAR IO02305 (CMVC 92280)
         SSL handshake does not timeout correctly.

    APAR IO02306 (CMVC 92288)
         With anonymous binds not allowed, SASL EXTERNAL authentication with DN from client
         certificate fails stating Invalid Credentials.

    APAR IO02307 (CMVC 92290)
         When a transaction fails, the LDAP server leaks memory.

    APAR IO02308 (CMVC 92334)
         LDAP server leaks memory performing an unbind operation.

    APAR IO02318 (CMVC 92400 92441)
         Audit Log does not include all entries that it should.

    APAR IO02321 (CMVC 92477)
         SSL timeout introduced as resolution for IO02305 must be configurable.

    APAR IO02323 (CMVC 82652)
         STRUCTURAL objectclass schema definition with no SUP should identify superior as top.

    APAR IO02329 (CMVC 91893)
         LDAP server memory leak occurs when the Emergency Thread runs.

    APAR IO02333 (CMVC 91942)
         On Linux RH4 ibmdiradm returns error in all cases upon starting the LDAP server.

    APAR IO02343 (CMVC 91965)
         LDAP server memory leak occurs when modifying the server configuration.

    APAR IO02346 (CMVC 91988)
         APIs in the C-client library on AIX query DNS even if IP address is provided.

    APAR IO02351 (CMVC 92038)
         Installation fails for server and client packages on Linux (RHEL 4).

    APAR IO02353 (CMVC 92063)
         Replication of cn=ibmpolicies replication topology entries should not occur if
         replicating to downlevel servers.

    APAR IO02355 (CMVC 92119)
         Modifying an aclentry value which has many characters results in a corrupted ACL
         in the LDAP server.

    APAR IO02356 (CMVC 92132)
         Replication add conflict resolution can fail with entrycache size set to zero.

    APAR IO02360 (CMVC 92147)
         Admin daemon (ibmdiradm) on AIX is not recording the correct client IP address.

    APAR IO02365 (CMVC 92148)
         Client package must pre-req ksh on Linux

    APAR IO02366 (CMVC 92151)
         LDAP server will not start after migration from 4.1 due to duplicate entries in
         the schema files.

    APAR IO02367 (CMVC 92160)
         Replication schedule events do not work correctly.

    APAR IO02368 (CMVC 92212)
         LDAP server through internal subroutine calls truncates ACL strings.

    APAR IO02369 (CMVC 92216)
         Enhance the proxy server to allow modifications of split container entries when
         there is only 1 partition.

    APAR IO02370 (CMVC 92218)
         Password policy attributes are missing on replica after a refresh add due to
         replication conflict.

    APAR IO02371 (CMVC 92219)
         ldap_rename in a transaction causes the renamed entry to become unusable in
         subsequent operations.

    APAR IO02372 (CMVC 92221)
         Objectclass type changes are allowed even though entries using that objectclass
         are present.

    APAR IO02373 (CMVC 92158 92223)
         DDsetup tool fails to create file greater than 2GB on solaris 10.

    APAR IO02374 (CMVC 92232)
         ACL resolution using groups is not operating correctly through the proxy server.

    APAR IO02375 (CMVC 92233)
         Pre-reqing of X11 fileset has moved from AIX client packages and now is in the
         ldap.java package.

    APAR IO02376 (CMVC 92247)
         Replication fails with insufficient access during recovery after a replication
         conflict.

    APAR IO02377 (CMVC 92248 92249 92250)
         Compare, delete, and modrdn operations do not correctly operate through proxy if
         called by a non-administrative user.

    APAR IO02378 (CMVC 92255 92335)
         Proxy server abends processing an ibm-allgroups search.

    APAR IO02379 (CMVC 92256)
         LDAP server hangs (deadlock) if number of add operations in a transaction exceed
         maximum number of operations.

    APAR IO02380 (CMVC 92269)
         LDAP server hangs (deadlock) if modifying the cn=pwdpolicy entry in a transaction.

    APAR IO02381 (CMVC 92271)
         AIX Server package might not install DB2 license - packaging now pre-reqs the DB2
         package.

    APAR IO02382 (CMVC 92299)
         LDAP server memory leak occurs when server is replica and is processing search or
         compare operations.

    APAR IO02383 (CMVC 92301)
         LDAP server referral cache is not updated when processing modrdn operations.

    APAR IO02384 (CMVC 92312 92313)
         Provided support for SASL authentication CRAM-MD5 and DIGEST-MD5 must have means
         to be disabled.

    APAR IO02385 (CMVC 92321)
         Proxy server abends when processing a DIGEST-MD5 authentication.

    APAR IO02386 (CMVC 92322)
         Prior to unlocking an admin account lockout, make sure admin bind from Web Admin
         includes source ip control.

    APAR IO02387 (CMVC 92329)
         Proxy server does not correctly process attribute only searches.

    APAR IO02388 (CMVC 92347)
         Event notification requests are not audited if the event notification plugin is
         not loaded.

    APAR IO02389 (CMVC 92392)
         LDAP server experiences memory corruption with base scoped paged searches or with
         filter cache configured.

    APAR IO02390 (CMVC 92414 92483)
         Add an environment variable named IBMSLAPD_REPL_RESTRICTED_ACCESS used to restrict
         access to replication objects.

    APAR IO02391 (CMVC 92435)
         LDAP server memory leak after DIGEST-MD5 bind fails.

    APAR IO02392 (CMVC 92437)
         LDAP server memory leak on Window in message writing routine slapi_printmessage().

    APAR IO02393 (CMVC 92443)
         LDAP server abends when processing a transaction which includes multiple updates.

    APAR IO02394 (CMVC 92457)
         DDsetup tool makes all DNs uppercase in the output LDIF files.


Functionality/Behavior Impact:
==============================

    Notable or unexpected changes in functionality or behavior associated with
    the APARs documented in this fix:

Impacts from 6.0.0.8-TIV-ITDS-IF0001 (6.0.0.59 / 3.0023)
--------------------------------------------------------

    none

Impacts from 6.0.0-TIV-ITDS-FP0008   (6.0.0.58 / 3.0022)
--------------------------------------------------------

    APAR     Sev   Functionality/Behavior Impact
    -------  ----  ------------------------------------------------------------
    IO09879  med   In addition to the code fixes delivered with this APAR, the
                   Java runtime provided with the GA image must also be replaced
                   with java/hpia32142hybrid-20090302-jre.tar which is included.

    IO09891  high  bulkload/ldif2db fails after applying 6.0.0.7-TIV-ITDS-LA0003

    IO09199  low   The restriction on modifications to entry cn=localhost have been
                   relaxed to allow changes to the "aclEntry" attribute only.

    IO10522  high  This APAR only fixes the migration process. It does not
                   automatically correct schema which has already been corrupted
                   by migration. That must be done manually, or the migration
                   performed over again after applying the fix. Please see APAR
                   IO10522 for details.

    IO10544  low   It is recommended that you disable replication conflict resolution
                   for modifications to group membership by setting the environment
                   variable ibm-slapdEnableConflictResolutionForGroups=FALSE.

                   This can either be done in the operating system shell before
                   starting the server, or can be set directly in the server
                   configuration by adding the following attribute to the "cn=Front
                   End, cn=Configuration" entry:

                       ibm-slapdSetenv:
                        ibm-slapdEnableConflictResolutionForGroups=FALSE

                   See technote 1385679: Disabling conflict resolution for groups:
                   http://www.ibm.com/support/docview.wss?uid=swg21385679

    IO10650  low   This APAR adds a new option to the idscfgdb command: "-collate".
                   Adding the "-collate" option to idscfgdb when creating the
                   database will cause UTF-8 data to be sorted using the UCA
                   (Unicode Collation Algorithm) collation sequence that is based
                   on the Unicode Standard version 4.00 with normalization
                   implicitly set to on. Details of the UCA can be found in the
                   Unicode Technical Standard #10, which is available at the
                   Unicode Consortium Web site (www.unicode.org).

Impacts from 6.0.0-TIV-ITDS-FP0007   (6.0.0.52 / 3.0019)
--------------------------------------------------------

    APAR     Sev   Functionality/Behavior Impact
    -------  ----  ------------------------------------------------------------
    IO08768  low   The server start/stop/restart panel in webadmin under
                   "Server administration" in webadmin starting with
                   6.0.0.6-TIV-ITDS-LA0005, this page in webadmin will no
                   longer track the status of the ibmslapd process if its state
                   is changed outside of webadmin.  If ibmslapd is stopped or
                   started outside of webadmin, this page will reflect an
                   incorrect status for the server.

Impacts from 6.0.0-TIV-ITDS-FP0006   (6.0.0.45 / 3.0016)
--------------------------------------------------------

    APAR     Sev   Functionality/Behavior Impact
    -------  ----  ------------------------------------------------------------
    IO07815  low   To PREOP audit logging, add the following attribute to the
                   cn=Front End entry of the ibmslapd.conf file

                   dn: cn=Front End, cn=Configuration
                   ...
                   ibm-slapdSetenv: IBMSLAPD_PREOP_AUDIT=YES
                   ...

    IO08543  low   PREOP audit logging has been added for bind operations, and the
                   IBMSLAPD_PREOP_AUDIT environment variable is now case-insensitive.
                   It can be enabled w/ "YES", "yes" or any other case, and disabled
                   with any other value (such as "NO" or "Off", etc).

    IO08547  low   "ldif" utility added to server packaging for all platforms:
    IO08549  low
                       Platform          Install location
                       ----------------  -------------------------------
                       AIX               /opt/IBM/ldap/V6.0/sbin/64/ldif
                       HP-UX (IA64)      /opt/IBM/ldap/V6.0/sbin/32/ldif
                       HP-UX (PA-RISC)   /opt/IBM/ldap/V6.0/sbin/32/ldif
                       Linux (IA32)      /opt/ibm/ldap/V6.0/sbin/32/ldif
                       Linux i/p         /opt/ibm/ldap/V6.0/sbin/32/ldif
                       Linux s390        /opt/ibm/ldap/V6.0/sbin/32/ldif
                       Solaris (SPARC)   /opt/IBM/ldap/V6.0/sbin/32/ldif
                       Solaris (x86-64)  /opt/IBM/ldap/V6.0/sbin/32/ldif
                       Windows (IA32)    <install path>\sbin\32\ldif

                   Usage is not documented in V6.0 docs - it is unchanged from V5.2
                   or earlier [ http://publib.boulder.ibm.com/tividd/td/IBMDS/
                   IDSadmin52/en_US/HTML/admin_gd.htm#HDRLDIF ]:

                   ldif utility
                   ------------

                   The LDAP Data Interchange Format (LDIF) tool ldif is a shell-
                   accessible utility that converts arbitrary data values to LDIF.
                   It reads input values from standard input and produces records
                   appropriate for use in an LDIF file.

                   Synopsis:
                       ldif [-b] <attrname>

                   Command Line Option:
                       All options are case sensitive.

                       -b
                           Input is a single raw binary value. Output is a base64
                           encoded value.

                       <attrname>
                           The name of the attribute for which values are to be
                           converted. Without the -b option, ldif considers each
                           line of standard input to be a separate value of the
                           attribute.

Impacts from 6.0.0-TIV-ITDS-FP0005   (6.0.0.41 / 3.0015)
--------------------------------------------------------

    APAR     Sev   Functionality/Behavior Impact
    -------  ----  ------------------------------------------------------------
    IO06239  low   To change the number of DB2 handles, add the following attribute
                   to the cn=Front End entry of the ibmslapd.conf file

                   dn: cn=Front End, cn=Configuration
                   ...
                   ibm-slapdSetenv: ODBCCONN=x
                   ...

                   where # of ibm-slapdDbConnections <= x <= 50

    IO06608  med   The format of the "changes" attribute in the 6.0 changelog
                   is incorrect. This fix corrects it to comply with standard
                   LDIF format. This should restore compatibility w/ previous
                   TDS releases (5.2 and earlier) and other directory vendors.

                   If you applied APAR IO04914 to the Tivoli Directory
                   Integrator changelog connector, it will accept either
                   format. However; if you have other applications which have
                   been changed specifically to parse the TDS 6.0 change log
                   format, they may not work after applying APAR IO06608.

    IO06624  med   Searches for ibm-allGroups or ACL evaluation involving dynamic
                   groups which have memberURL's which use less (<=) or greater
                   (>=) filters on integer attributes may return different results.

    IO07124  low   A replica supplier will now take 60 seconds instead of 15
                   seconds to timeout a replication change to an unresponsive
                   consumer. If this is still not enough time, it can be further
                   increased by setting IBMSLAPD_REPL_UPDATE_EXTRA_SECS to the
                   number of additional seconds to wait beyond 60.

                   It can either be inherited from the process which starts the
                   server (command line, ibmdiradm daemon, boot scripts or other
                   processes), or added directly to the ibmslapd.conf file
                   (recommended):

                   dn: cn=Front End, cn=Configuration
                   ...
                   ibm-slapdSetenv: IBMSLAPD_REPL_UPDATE_EXTRA_SECS=[1..2147483647]
                   ...

Impacts from 6.0.0-TIV-ITDS-FP0004   (6.0.0.33 / 3.0011)
--------------------------------------------------------

    APAR     Sev   Functionality/Behavior Impact
    -------  ----  ------------------------------------------------------------
    IO05336  low   A new environment variable has been added to limit searches of
                   dynamic groups: IDS_GROUP_SEARCH_SIZELIMIT

                   If it is undefined, or <= 0, then search results for dynamic
                   groups remain unlimited. Any value in the range [1..2147483647]
                   will abort any dynamic group search which exceeds that number of
                   entries and return rc = 4 (LDAP_SIZELIMIT_EXCEEDED) to the
                   caller.

                   It can either be inherited from the process which starts the
                   server (command line, ibmdiradm daemon, boot scripts or other
                   processes), or added directly to the ibmslapd.conf file
                   (recommended):

                   dn: cn=Front End, cn=Configuration
                   ...
                   ibm-slapdSetenv: IDS_GROUP_SEARCH_SIZELIMIT=[1..2147483647]
                   ...

    IO05747  high  Setting the environment variable IDS_ATTRNAME_CONTAINS_DOTS=YES
                   (case sensitive) will allow '.'s in attribute names.

                   !!! IMPORTANT !!!

                   This applies to attribute names only. The dbname and table
                   name in ibmattributetypes still will not allow dots.  The
                   mapping of dots to some other db2 supported characters is not
                   done in this fix, so the ibmattributetypes must be defined to
                   specify a valid database and table name.

                   For example:

                   attributetypes=( my.attr.type.OID NAME 'my.attr.type'
                     DESC 'Attribute name containing dots.'
                     EQUALITY 2.5.13.2 SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
                     USAGE userApplications )
                   IBMAttributetypes=( my.attr.type.OID
                     DBNAME( 'my-attr-type'  'my-attr-type' ) ACCESS-CLASS
                     normal LENGTH 128 )

    IO06055  med   In previous product versions, for password policy, if there is
                   no warning or error to report in a returned response control,
                   the control would end without a controlValue present. Under the
                   same conditions, the modified functionality now returns a empty
                   sequence as the controlValue.  Clients must be able to process
                   the type of response control the server is set to return.  The
                   setting is controlled by an environment variable which can be
                   established by adding the attribute identified below to the cn=
                   Front End, cn=Configuration entry in the ibmslapd.conf
                   configuration file:

                       ibm-slapdSetenv: USE_OPENLDAP_PWDPOLICY_CONTROL=YES

                   where YES enables sending the empty sequence as the
                   controlValue, and NO (or anything else) returns no controlValue.

    IO06289  low   <IDSWebApp>/WEB-INF/classes/idswebapp.properties contains a new
                   configuration option: "users.count=200". Setting the users.count
                   value to 0 causes the "Manage users" panel to retrieve all users
                   in the realm. Setting the uses.count value to a value > 200
                   causes the "Manage users" to fetch that many users each time.
                   For example, if set to 1000, the panel is displayed with 1000
                   users. If you scroll beyond the last page, the panel will fetch
                   the next 1000 users, and so on.

                   200 is the minimum page size. Setting users.count to any value <
                   200 (but > 0) will have no effect (page size will remain 200).

                   Also, The Manage users panel now displays a sorted list of users
                   by default. Users are sorted by DN. Assuming all users in a
                   realm are named by the naming attribute specified in the realm
                   definition, this results in users being displayed in the
                   expected order.

Impacts from 6.0.0-TIV-ITDS-FP0003   (6.0.0.19 / 3.0007)
--------------------------------------------------------

    APAR     Sev   Functionality/Behavior Impact
    -------  ----  ------------------------------------------------------------
    IO04873  low   Error GLPCSF008E "The suffix '<SFX>' already exists in the
                   configuration file of the directory server instance." now
                   means that the suffix '<SFX>' already exists OR OVERLAPS (is
                   an ancestor or descendant of) an existing suffix.

    IO04950  high  Multithreaded replication should not be used unless ALL
    IO04986  high  suppliers and consumers are 6.0.0.2-TIV-ITDS-IF0002
                   (6.0.0.16) or later. All suppliers must have APAR IO04950,
                   and all consumers must have APAR IO04986.

    IO05278  low   Prior to this fix, ldap_compare of a user password using an
                   administrator bind would return TRUE if the password matched,
                   even if the account was LOCKED. After this fix, the compare
                   will return FALSE with the appropriate password policy control
                   response.

Impacts from 6.0.0-TIV-ITDS-FP0002   (6.0.0.14 / 3.0006)
--------------------------------------------------------

    APAR     Sev   Functionality/Behavior Impact
    -------  ----  ------------------------------------------------------------
    IO03005  med   ACLs may now be added to the cn=changelog entry to allow
                   read access for users other than the administrator.

    IO03294  low   Please see Technote #1226781: "Handling escaped '#' symbols
                   in a DN" for details and recommendations regarding how to
                   correct this problem.

    IO03311  low   If the maximum number of incorrect logins until password
                   lockout (pwdMaxFailure) has been increased to work around
                   this webadmin defect, it can be reduced after deploying this
                   fix for idswebapp.war

    IO03691  low   Prior to this fix, ldap_compare of a user password using an
                   administrator bind would return TRUE if the password matched,
                   even if the password was expired or otherwise invalid. After
                   this fix, the compare will return FALSE with the appropriate
                   password policy control response.

    IO03698  med   The first time the server is restarted after applying this
                   fix, it may take a "long time" to start while it re-creates the
                   new OBJECTCLASS index. Rough estimates are approximately 1
                   minute per 100,000 entries. However; after the index has been
                   recreated, the server should start much faster in the future,
                   and performance of objectclass searches should be noticeably
                   better overall.

    IO03713  med   The following LDIF format is no longer allowed:

                        dn: cn=schema
                        changetype: modify
                        add: attributetypes
                        attributeTypes: ( etc... )
                        IBMattributetypes: ( etc... )

                   This will now result in an error like:

                        ldapmodify: expected "attributeTypes" but found "IBMattributetypes"...

                   The LDIF must to be corrected as follows:

                        dn: cn=schema
                        changetype: modify
                        add: attributetypes
                        attributeTypes: ( etc... )
                        -
                        add: IBMattributetypes
                        IBMattributetypes: ( etc... )

    IO03741  low   For the zLinux platform (only), it is possible to configure
                   a 64-bit DB2 server to operate as a remotely configured LDAP
                   server back-end repository.  The configuration procedure for
                   allowing a 64-bit DB2 server to operate with the LDAP server
                   process is documented in a technote titled "TDS 6.0 on zLinux:
                   How to configure a 64-bit DB2 server to operate as the LDAP
                   server back-end repository."  In the documentation, the use of
                   the required environment variable IBM_LDAP_REMOTEDB is
                   described.  After performing all configuration steps, startup
                   of the LDAP server with the remote database enabled requires
                   setting the following attribute in the cn=Front End entry of
                   the ibmslapd.conf file to the identified value:

                   ibm-slapdSetenv: IBM_LDAP_REMOTEDB=TRUE

    IO04808  low   A new "proxy_lib" library path has been added exclusively for
                   proxy server instances. The server startup command scripts will
                   detect if the server instance is a proxy and load the correct
                   library automatically. Starting the server any other way is
                   unsupported and may load the wrong libraries. The "proxy_lib"
                   libraries should ONLY be used with proxy server instances.

Impacts from 6.0.0-TIV-ITDS-FP0001   (6.0.0.1  / 3.0001)
--------------------------------------------------------

    APAR     Sev   Functionality/Behavior Impact
    -------  ----  ------------------------------------------------------------
    IO02274  high  After modifying an attribute, subsequent searches will
                   return the attribute name using the case supplied in the
                   modify operation rather than forcing the attribute name to
                   lowercase as before the fix.

                   As always, If IBMLDAP_ATTRLOWERCASE=FALSE or NO then the
                   attribute name is always returned using the case as defined
                   in the schema. Otherwise, if different cases have been
                   supplied by different modify operations, then which one
                   will be returned is undefined.

                   The environment variable IBMLDAP_ATTRLOWERCASE can be set
                   by adding a value to the ibm-slapdSetenv attribute in the
                   cn=Front End entry of the ibmslapd.conf file.  An example
                   of this addition is:

                   ibm-slapdSetenv: IBMLDAP_ATTRLOWERCASE=FALSE

    IO02277  low   The ldaptrace utility can now be used to close and reopen
                   or rename the "-o debugfile" on the fly.

    IO02279  low   The server will ABEND (as it did prior to IR54428) if
                   invalid message catalogs (such as from a previous version)
                   are used.

    IO02284  low   The server will no longer return LDAP_UNWILLING_TO_PERFORM
                   (53) if a client fails to SSL handshake. The connection
                   will simply be closed.

    IO02292  low   The unbind extended operation now returns rc=32 instead
                   of rc=80 if an invalid IP address is provided.

    IO02294  low   Internal updates from server plugins using slapi APIs
                   will now be replicated even if change log is enabled.

    IO02305  low   The translated error message: "A client sent non-secured
                   communications to the SSL port." has been replaced with
                   the English-only message "SSL handshake from {client IP}
                   failed. Connection denied." to show the IP address of the
                   client.

    IO02321  low   The ssl_read timeout is now a configurable environment parameter
                   using the following attribute in the cn=Front End entry of the
                   ibmslapd.conf file:

                   ibm-slapdSetenv: SSL_TIMEOUT_MILLISEC=xxxx

                   where xxxx = is the number of millisec for timeout value. If
                   the environment variable is not present,  the timeout value
                   defaults to 1000 millisec or 1 sec.

    IO02351  high  The fix allowing installation on Linux RHEL 4 satisfies a
                   prerequisite such that now IBM can support the IBM Tivoli
                   Directory Server V6.0 product on RHEL4 for iSeries and pSeries
                   platforms.

    IO02379  med   The maximum number of in-process-to-completion LDAP operations
                   allowed per a single session (connection) is now configurable
                   using the environment variable SLAPD_MAX_OPS_ON_CONN.  This
                   environment variable is used to prevent denial of service
                   conditions where a client continually sends requests while not
                   pacing the send rate to the response rate.  The value is a
                   number identifying the maximum number of unprocessed operations
                   allowed in the session.  The default value is 2000.  The
                   environment variable can be set using the attribute in the
                   cn=Front End entry of the ibmslapd.conf file as illustrated
                   below:

                   ibm-slapdSetenv: SLAPD_MAX_OPS_ON_CONN=xxxx

                   where xxxx = is the maximum number of unprocessed operations
                   allowed.

    IO02384  low   The SASL authentication mechanisms of DIGEST-MD5 and CRAMMD5
                   now have means to be disabled if the directory administrator
                   chooses to not allow users to authenticate using the
                   mechanisms.  The environment variable SLAPD_NO_DIGEST and
                   SLAPD_NO_CRAM are used to disable DIGEST-MD5 and CRAMMD5
                   authentications respectively.  Setting the environment variables
                   to any value disables the respective authentication means.
                   Each environment variable can be set using the attribute in the
                   cn=Front End entry of the ibmslapd.conf file as illustrated
                   below:

                   ibm-slapdSetenv: SLAPD_NO_DIGEST=xxxx
                   ibm-slapdSetenv: SLAPD_NO_CRAM=xxxx

                   where xxxx = can be any value; for example, TRUE.

    IO02390  low   Access to replication objects can now be restricted by setting
                   the IBMSLAPD_REPL_RESTRICTED_ACCESS environment variable to
                   any value.  When set to any value, only the root directory
                   administrator, the local admin group members, and the master
                   server DN are allowed to be granted permissions to modify, add,
                   delete, or modrdn replication related objects.  Setting the
                   environment variable also allows granting the mentioned users /
                   groups permissions to perform replication extended operations.
                   The environment variable can be set using the attribute in the
                   cn=Front End entry of the ibmslapd.conf file as illustrated
                   below:

                   ibm-slapdSetenv: IBMSLAPD_REPL_RESTRICTED_ACCESS=xxxx

                   where xxxx = can be any value; for example, TRUE.


Fix Contents:
=============

AIX
----------------

    The archive for this fix is named 6.0.0.8-TIV-ITDS-AIX-IF0001.tar
    and contains the following files:

    File
    ================================================================================
    6.0.0.8-TIV-ITDS-AIX-IF0001/idsinstall
    6.0.0.8-TIV-ITDS-AIX-IF0001/images/idsldap.clt32bit60
    6.0.0.8-TIV-ITDS-AIX-IF0001/images/idsldap.clt64bit60
    6.0.0.8-TIV-ITDS-AIX-IF0001/images/idsldap.cltbase60
    6.0.0.8-TIV-ITDS-AIX-IF0001/images/idsldap.webadmin60
    6.0.0.8-TIV-ITDS-AIX-IF0001/images/idsldap.cltjava60
    6.0.0.8-TIV-ITDS-AIX-IF0001/images/idsldap.msg60.en_US
    6.0.0.8-TIV-ITDS-AIX-IF0001/images/idsldap.srv64bit60
    6.0.0.8-TIV-ITDS-AIX-IF0001/images/idsldap.srvproxy64bit60
    6.0.0.8-TIV-ITDS-AIX-IF0001/images/idsldap.clt_max_crypto32bit60
    6.0.0.8-TIV-ITDS-AIX-IF0001/images/idsldap.clt_max_crypto64bit60
    6.0.0.8-TIV-ITDS-AIX-IF0001/images/idsldap.webadmin_max_crypto60
    6.0.0.8-TIV-ITDS-AIX-IF0001/images/idsldap.cltjava_max_crypto60
    6.0.0.8-TIV-ITDS-AIX-IF0001/images/idsldap.srv_max_cryptoproxy64bit60
    6.0.0.8-TIV-ITDS-AIX-IF0001/images/.toc
    6.0.0.8-TIV-ITDS-AIX-IF0001/tools/idswmigr.sh
    6.0.0.8-TIV-ITDS-AIX-IF0001/tools/migbkup.ksh

HP-UX (IA64)
----------------

    The archive for this fix is named 6.0.0.8-TIV-ITDS-HPUXIA64-IF0001.tar
    and contains the following files:

    File
    ================================================================================
    6.0.0.8-TIV-ITDS-HPUXIA64-IF0001/idsinstall
    6.0.0.8-TIV-ITDS-HPUXIA64-IF0001/images/idsldap.clt32bit60.depot
    6.0.0.8-TIV-ITDS-HPUXIA64-IF0001/images/idsldap.clt64bit60.depot
    6.0.0.8-TIV-ITDS-HPUXIA64-IF0001/images/idsldap.cltbase60.depot
    6.0.0.8-TIV-ITDS-HPUXIA64-IF0001/images/idsldap.webadmin60.depot
    6.0.0.8-TIV-ITDS-HPUXIA64-IF0001/images/idsldap.cltjava60.depot
    6.0.0.8-TIV-ITDS-HPUXIA64-IF0001/images/idsldap.msg60.en.depot
    6.0.0.8-TIV-ITDS-HPUXIA64-IF0001/images/idsldap.srv32bit60.depot
    6.0.0.8-TIV-ITDS-HPUXIA64-IF0001/images/idsldap.srvproxy32bit60.depot
    6.0.0.8-TIV-ITDS-HPUXIA64-IF0001/tools/idswmigr.sh
    6.0.0.8-TIV-ITDS-HPUXIA64-IF0001/tools/migbkup.ksh
    6.0.0.8-TIV-ITDS-HPUXIA64-IF0001/java/hpia32142hybrid-20090302-jre.tar

HP-UX (PA-RISC)
----------------

    The archive for this fix is named 6.0.0.8-TIV-ITDS-HPUXPARISC-IF0001.tar
    and contains the following files:

    File
    ================================================================================
    6.0.0.8-TIV-ITDS-HPUXPARISC-IF0001/idsinstall
    6.0.0.8-TIV-ITDS-HPUXPARISC-IF0001/images/idsldap.clt32bit60.depot
    6.0.0.8-TIV-ITDS-HPUXPARISC-IF0001/images/idsldap.clt64bit60.depot
    6.0.0.8-TIV-ITDS-HPUXPARISC-IF0001/images/idsldap.cltbase60.depot
    6.0.0.8-TIV-ITDS-HPUXPARISC-IF0001/images/idsldap.webadmin60.depot
    6.0.0.8-TIV-ITDS-HPUXPARISC-IF0001/images/idsldap.cltjava60.depot
    6.0.0.8-TIV-ITDS-HPUXPARISC-IF0001/images/idsldap.msg60.en.depot
    6.0.0.8-TIV-ITDS-HPUXPARISC-IF0001/images/idsldap.srv32bit60.depot
    6.0.0.8-TIV-ITDS-HPUXPARISC-IF0001/images/idsldap.srvproxy32bit60.depot
    6.0.0.8-TIV-ITDS-HPUXPARISC-IF0001/tools/idswmigr.sh
    6.0.0.8-TIV-ITDS-HPUXPARISC-IF0001/tools/migbkup.ksh

Linux (IA32)
----------------

    The archive for this fix is named 6.0.0.8-TIV-ITDS-Linux32-IF0001.tar
    and contains the following files:

    File
    ================================================================================
    6.0.0.8-TIV-ITDS-Linux32-IF0001/idsinstall
    6.0.0.8-TIV-ITDS-Linux32-IF0001/images/idsldap-clt32bit60-6.0.0-59.i386.rpm
    6.0.0.8-TIV-ITDS-Linux32-IF0001/images/idsldap-cltbase60-6.0.0-59.i386.rpm
    6.0.0.8-TIV-ITDS-Linux32-IF0001/images/idsldap-webadmin60-6.0.0-59.i386.rpm
    6.0.0.8-TIV-ITDS-Linux32-IF0001/images/idsldap-cltjava60-6.0.0-59.i386.rpm
    6.0.0.8-TIV-ITDS-Linux32-IF0001/images/idsldap-msg60-en-6.0.0-59.i386.rpm
    6.0.0.8-TIV-ITDS-Linux32-IF0001/images/idsldap-srv32bit60-6.0.0-59.i386.rpm
    6.0.0.8-TIV-ITDS-Linux32-IF0001/images/idsldap-srvproxy32bit60-6.0.0-59.i386.rpm
    6.0.0.8-TIV-ITDS-Linux32-IF0001/tools/idswmigr.sh
    6.0.0.8-TIV-ITDS-Linux32-IF0001/tools/migbkup.ksh

Linux i/p
----------------

    The archive for this fix is named 6.0.0.8-TIV-ITDS-Linuxip32-IF0001.tar
    and contains the following files:

    File
    ================================================================================
    6.0.0.8-TIV-ITDS-Linuxip32-IF0001/idsinstall
    6.0.0.8-TIV-ITDS-Linuxip32-IF0001/images/idsldap-clt32bit60-6.0.0-59.ppc.rpm
    6.0.0.8-TIV-ITDS-Linuxip32-IF0001/images/idsldap-cltbase60-6.0.0-59.ppc.rpm
    6.0.0.8-TIV-ITDS-Linuxip32-IF0001/images/idsldap-webadmin60-6.0.0-59.ppc.rpm
    6.0.0.8-TIV-ITDS-Linuxip32-IF0001/images/idsldap-cltjava60-6.0.0-59.ppc.rpm
    6.0.0.8-TIV-ITDS-Linuxip32-IF0001/images/idsldap-msg60-en-6.0.0-59.ppc.rpm
    6.0.0.8-TIV-ITDS-Linuxip32-IF0001/images/idsldap-srv32bit60-6.0.0-59.ppc.rpm
    6.0.0.8-TIV-ITDS-Linuxip32-IF0001/images/idsldap-srvproxy32bit60-6.0.0-59.ppc.rpm
    6.0.0.8-TIV-ITDS-Linuxip32-IF0001/images/idsldap-clt64bit60-6.0.0-59.ppc64.rpm
    6.0.0.8-TIV-ITDS-Linuxip32-IF0001/tools/idswmigr.sh
    6.0.0.8-TIV-ITDS-Linuxip32-IF0001/tools/migbkup.ksh

Linux s390
----------------

    The archive for this fix is named 6.0.0.8-TIV-ITDS-Linuxz31-IF0001.tar
    and contains the following files:

    File
    ================================================================================
    6.0.0.8-TIV-ITDS-Linuxz31-IF0001/idsinstall
    6.0.0.8-TIV-ITDS-Linuxz31-IF0001/images/idsldap-clt32bit60-6.0.0-59.s390.rpm
    6.0.0.8-TIV-ITDS-Linuxz31-IF0001/images/idsldap-cltbase60-6.0.0-59.s390.rpm
    6.0.0.8-TIV-ITDS-Linuxz31-IF0001/images/idsldap-webadmin60-6.0.0-59.s390.rpm
    6.0.0.8-TIV-ITDS-Linuxz31-IF0001/images/idsldap-cltjava60-6.0.0-59.s390.rpm
    6.0.0.8-TIV-ITDS-Linuxz31-IF0001/images/idsldap-msg60-en-6.0.0-59.s390.rpm
    6.0.0.8-TIV-ITDS-Linuxz31-IF0001/images/idsldap-srv32bit60-6.0.0-59.s390.rpm
    6.0.0.8-TIV-ITDS-Linuxz31-IF0001/images/idsldap-srvproxy32bit60-6.0.0-59.s390.rpm
    6.0.0.8-TIV-ITDS-Linuxz31-IF0001/images/idsldap-clt64bit60-6.0.0-59.s390x.rpm
    6.0.0.8-TIV-ITDS-Linuxz31-IF0001/tools/idswmigr.sh
    6.0.0.8-TIV-ITDS-Linuxz31-IF0001/tools/migbkup.ksh

Solaris (SPARC)
----------------

    The archive for this fix is named 6.0.0.8-TIV-ITDS-SolarisSparc-IF0001.tar
    and contains the following files:

    File
    ================================================================================
    6.0.0.8-TIV-ITDS-SolarisSparc-IF0001/idsinstall
    6.0.0.8-TIV-ITDS-SolarisSparc-IF0001/images/idsldap.clt32bit60.pkg
    6.0.0.8-TIV-ITDS-SolarisSparc-IF0001/images/idsldap.clt64bit60.pkg
    6.0.0.8-TIV-ITDS-SolarisSparc-IF0001/images/idsldap.cltbase60.pkg
    6.0.0.8-TIV-ITDS-SolarisSparc-IF0001/images/idsldap.webadmin60.pkg
    6.0.0.8-TIV-ITDS-SolarisSparc-IF0001/images/idsldap.cltjava60.pkg
    6.0.0.8-TIV-ITDS-SolarisSparc-IF0001/images/idsldap.msg60.en.pkg
    6.0.0.8-TIV-ITDS-SolarisSparc-IF0001/images/idsldap.srv32bit60.pkg
    6.0.0.8-TIV-ITDS-SolarisSparc-IF0001/images/idsldap.srvproxy32bit60.pkg
    6.0.0.8-TIV-ITDS-SolarisSparc-IF0001/tools/idswmigr.sh
    6.0.0.8-TIV-ITDS-SolarisSparc-IF0001/tools/migbkup.ksh

Solaris (x86-64)
----------------

    The archive for this fix is named 6.0.0.8-TIV-ITDS-SolarisX64-IF0001.tar
    and contains the following files:

    File
    ================================================================================
    6.0.0.8-TIV-ITDS-SolarisX64-IF0001/idsinstall
    6.0.0.8-TIV-ITDS-SolarisX64-IF0001/images/idsldap.clt32bit60.pkg
    6.0.0.8-TIV-ITDS-SolarisX64-IF0001/images/idsldap.clt64bit60.pkg
    6.0.0.8-TIV-ITDS-SolarisX64-IF0001/images/idsldap.cltbase60.pkg
    6.0.0.8-TIV-ITDS-SolarisX64-IF0001/images/idsldap.webadmin60.pkg
    6.0.0.8-TIV-ITDS-SolarisX64-IF0001/images/idsldap.cltjava60.pkg
    6.0.0.8-TIV-ITDS-SolarisX64-IF0001/images/idsldap.msg60.en.pkg
    6.0.0.8-TIV-ITDS-SolarisX64-IF0001/images/idsldap.srv32bit60.pkg
    6.0.0.8-TIV-ITDS-SolarisX64-IF0001/images/idsldap.srvproxy32bit60.pkg

Windows (IA32)
----------------

    The archive for this fix is named 6.0.0.8-TIV-ITDS-Win32-IF0001.zip
    and contains the following files:

    File
    ================================================================================
    6.0.0.8-TIV-ITDS-Win32-IF0001\archive.jar
    6.0.0.8-TIV-ITDS-Win32-IF0001\consoleSetup.exe
    6.0.0.8-TIV-ITDS-Win32-IF0001\license\LA_cs
    6.0.0.8-TIV-ITDS-Win32-IF0001\license\LA_de
    6.0.0.8-TIV-ITDS-Win32-IF0001\license\LA_en
    6.0.0.8-TIV-ITDS-Win32-IF0001\license\LA_es
    6.0.0.8-TIV-ITDS-Win32-IF0001\license\LA_fr
    6.0.0.8-TIV-ITDS-Win32-IF0001\license\LA_it
    6.0.0.8-TIV-ITDS-Win32-IF0001\license\LA_ja
    6.0.0.8-TIV-ITDS-Win32-IF0001\license\LA_ko
    6.0.0.8-TIV-ITDS-Win32-IF0001\license\LA_pl
    6.0.0.8-TIV-ITDS-Win32-IF0001\license\LA_pt
    6.0.0.8-TIV-ITDS-Win32-IF0001\license\LA_tr
    6.0.0.8-TIV-ITDS-Win32-IF0001\license\LA_zh
    6.0.0.8-TIV-ITDS-Win32-IF0001\license\LA_zh_TW
    6.0.0.8-TIV-ITDS-Win32-IF0001\license\LI_cs
    6.0.0.8-TIV-ITDS-Win32-IF0001\license\LI_de
    6.0.0.8-TIV-ITDS-Win32-IF0001\license\LI_en
    6.0.0.8-TIV-ITDS-Win32-IF0001\license\LI_es
    6.0.0.8-TIV-ITDS-Win32-IF0001\license\LI_fr
    6.0.0.8-TIV-ITDS-Win32-IF0001\license\LI_it
    6.0.0.8-TIV-ITDS-Win32-IF0001\license\LI_ja
    6.0.0.8-TIV-ITDS-Win32-IF0001\license\LI_ko
    6.0.0.8-TIV-ITDS-Win32-IF0001\license\LI_pl
    6.0.0.8-TIV-ITDS-Win32-IF0001\license\LI_pt
    6.0.0.8-TIV-ITDS-Win32-IF0001\license\LI_tr
    6.0.0.8-TIV-ITDS-Win32-IF0001\license\LI_zh
    6.0.0.8-TIV-ITDS-Win32-IF0001\license\LI_zh_TW
    6.0.0.8-TIV-ITDS-Win32-IF0001\media.inf
    6.0.0.8-TIV-ITDS-Win32-IF0001\neededFiles\adrights.exe
    6.0.0.8-TIV-ITDS-Win32-IF0001\neededFiles\configAppSrv.bat
    6.0.0.8-TIV-ITDS-Win32-IF0001\neededFiles\db2.rsp
    6.0.0.8-TIV-ITDS-Win32-IF0001\neededFiles\execidsxinst.bat
    6.0.0.8-TIV-ITDS-Win32-IF0001\neededFiles\gskit.iss
    6.0.0.8-TIV-ITDS-Win32-IF0001\neededFiles\idswmigr.bat
    6.0.0.8-TIV-ITDS-Win32-IF0001\neededFiles\installAppSrv.bat
    6.0.0.8-TIV-ITDS-Win32-IF0001\neededFiles\installDB2.bat
    6.0.0.8-TIV-ITDS-Win32-IF0001\optionsFiles\InstallServer.txt
    6.0.0.8-TIV-ITDS-Win32-IF0001\optionsFiles\UnInstallServer.txt
    6.0.0.8-TIV-ITDS-Win32-IF0001\setup.exe
    6.0.0.8-TIV-ITDS-Win32-IF0001\tools\idswmigr.bat
    6.0.0.8-TIV-ITDS-Win32-IF0001\tools\migbkup.bat


Installing the fix:
===================

Before you install
-------------------

    The procedure for backing out a fix for IBM Tivoli Directory Server 6.0 is
    very different from previous versions of the IBM Tivoli Directory product
    and may require uninstalling and reinstalling the product.  By using the
    procedure to uninstall and then reinstall, no configured directory server
    instances are destroyed.

    Before installing the fix, read the "Uninstalling the fix" section to
    understand the procedure for uninstallation.


Installation
-------------------

    To install the fix:

    ==> VERY IMPORTANT NOTE <==

    YOU MUST TERMINATE ALL DAEMON PROCESSES ASSOCIATED WITH THE IBM TIVOLI
    DIRECTORY SERVER V6.0 PRODUCT PRIOR TO INSTALLING THE FIX.  THE DAEMON
    PROCESS SET INCLUDES THE DIRECTORY SERVER, THE ADMINISTRATION SERVER,
    AND THE PROXY SERVER IF INCLUDED.  THE REQUIREMENT TO STOP EXTENDS TO
    ANY DIRECTORY SERVER PROCESS OR ANY PROXY SERVER PROCESS RUNNING IN ANY
    DIRECTORY INSTANCE.  THIS REQUIREMENT IS RESTATED IN STEP 2 OF THE
    INSTRUCTIONS.


    1. Extract (untar or unzip) the fix archive to a directory with adequate free
       space.

       This will create a new subdirectory as shown in the following table:

            Platform          Space Required  Subdirectory Created
            ----------------  --------------  ---------------------------------
            AIX                   123 MB      6.0.0.8-TIV-ITDS-AIX-IF0001
            HP-UX (IA64)          230 MB      6.0.0.8-TIV-ITDS-HPUXIA64-IF0001
            HP-UX (PA-RISC)        76 MB      6.0.0.8-TIV-ITDS-HPUXPARISC-IF0001
            Linux (IA32)           72 MB      6.0.0.8-TIV-ITDS-Linux32-IF0001
            Linux i/p              75 MB      6.0.0.8-TIV-ITDS-Linuxip32-IF0001
            Linux s390             70 MB      6.0.0.8-TIV-ITDS-Linuxz31-IF0001
            Solaris (SPARC)       161 MB      6.0.0.8-TIV-ITDS-SolarisSparc-IF0001
            Solaris (x86-64)      131 MB      6.0.0.8-TIV-ITDS-SolarisX64-IF0001
            Windows (IA32)        142 MB      6.0.0.8-TIV-ITDS-Win32-IF0001

       The new subdirectory will have a file set as identified in the previous
       "Fix Contents" section for your specific platform.

    2. Stop all IBM Tivoli Directory Server client or server processes, including
       the directory server, administration daemon, and custom LDAP applications.
       Programs and libraries cannot be replaced while they are in use. If tracing is
       enabled, run "ldtrc off" to turn it off.  For instructions on how to stop the
       directory server instances and administration daemons, reference the
       Administration Guide sections titled "Basic Server Administration Tasks" and
       "Directory Administration Daemon".

    3. Use the appropriate step for your operating system:

       - On AIX, Linux, Solaris, and HP-UX systems, go to the subdirectory where you
         extracted the fix, and then run the idsinstall -u -f command as "root".

       - On Windows systems, go to the subdirectory where you extracted the fix, and
         then run the setup.exe command as a user with Administrator privilege. Follow
         the instructions on the InstallShield GUI panels that are displayed.

    The installation program installs updates to the components that are already
    installed on your system.


Verifying the installation:
===========================

    The installation program displays a message indicating whether the installation
    was successful or not.

    After installation, if you received a message that not all packages were installed,
    check the installation log.

    On AIX, Linux, Solaris, and HP-UX systems, the log file is
    /tmp/idsinstall_<timestamp>.log

    On Windows systems, the log file is <install_directory>\var\ldapinst.log. (For
    example, if you installed in the default location, the log file is
    c:\Program Files\IBM\LDAP\V6.0\var\ldapinst.log.)

    If installation errors are logged, correct the error based on the error message
    and then run the installation program again. For example, if some of the packages
    failed to install, correct the error shown (for example, insufficient disk space)
    and then run the installation program again.

    Note: On Solaris systems only, if you find the error message
         "exec failed. errno=2." in the installation log, you can ignore it.

    Be sure that all packages installed successfully. You can check the version number
    of the packages to verify that they are all at the correct level. See "Querying
    the version number" for instructions.

    Note: For the Web Administration Tool only, see "The Web Administration Tool" for
          information about checking the version of the Web Administration Tool.


Post-installation considerations:
=================================

    N/A

The Web Administration Tool:
============================

IMPORTANT: The deploy_IDSWebApp tool can be used with the WAS 5.1.1 embedded which
           is bundled with TDS 6.0. To deploy to any other version of WAS, please
           refer to the WAS documentation.

    If you have the Web Administration Tool installed, see "Checking the version of
    the Web Administration Tool" to check whether an update to the Web Administration
    Tool was installed. If there is a new version, see "Deploying the Web Administration
    Tool into the application server."


Checking the version of the Web Administration Tool:
----------------------------------------------------

IMPORTANT: The deploy_IDSWebApp tool can be used with the WAS 5.1.1 embedded which
           is bundled with TDS 6.0. To deploy to any other version of WAS, please
           refer to the WAS documentation.

    If the Web Administration Tool is installed on your system, after you install
    the fix, check the version of the Web Administration Tool to see if it was
    updated.

    To check the version of the Web Administration Tool:

    1. Go to the <LDAPHome>/idstools directory. <LDAPHome> is the directory where
       IBM Tivoli Directory Server 6.0 is installed. This directory is:

       - On AIX, Solaris, and HP-UX systems: /opt/IBM/ldap/V6.0
       - On Linux systems: /opt/ibm/ldap/V6.0
       - On Windows systems: c:\Program Files\IBM\LDAP\V6.0 by default

    2. Type the following:

       - On Windows systems:

         deploy_IDSWebApp.bat -v

       - On AIX, Linux, Solaris, or HP-UX systems:

         deploy_IDSWebApp.sh -v

    This command displays the following:

       - the version and date strings for the deploy_IDSWebApp script
       - the version and date for the newly installed IDSWebApp.war file
       - the version and date for the currently deployed IDSWebApp.war file

    If the version and date for the new IDSWebApp.war file is different from
    the version and date for the currently deployed IDSWebApp.war file, you
    must deploy the new Web Administration Tool into the application server.


Deploying the Web Administration Tool into the application server:
------------------------------------------------------------------

IMPORTANT: The deploy_IDSWebApp tool can be used with the WAS 5.1.1 embedded which
           is bundled with TDS 6.0. To deploy to any other version of WAS, please
           refer to the WAS documentation.

    If the Web Administration Tool was updated, use the deploy_IDSWebApp script
    to do the following:

    - Remove the previous Web Administration Tool (the IDSWebApp.war file) from
      the embedded version of WebSphere Application Server - Express (the application
      server)
    - Deploy the updated Web Administration Tool into the embedded version of
      WebSphere Application Server - Express
    - Start the Application Server

    If there were any configuration settings for the Web Administration Tool, these
    settings are retained for the new version.

    To use the deploy_IDSWebApp script:

    1. Go to the <LDAPHome>/idstools directory. <LDAPHome> is the directory where
       IBM Tivoli Directory Server 6.0 is installed. This directory is:

       - On AIX, Solaris, and HP-UX systems: /opt/IBM/ldap/V6.0
       - On Linux systems: /opt/ibm/ldap/V6.0
       - On Windows systems: c:\Program Files\IBM\LDAP\V6.0 by default

    2. Type the following:

       - On Windows systems:

         deploy_IDSWebApp.bat -w <path_to_war_file> -p <emb_WAS_installed_path>

       - On AIX, Linux, Solaris, or HP-UX systems:

         deploy_IDSWebApp.sh -w <path_to_war_file> -p <emb_WAS_installed_path>

where:

    <path_to_war_file> is the fully qualified file path to the IDSWebApp.war file
        that is being deployed. If not specified, this path defaults to
        <LDAPHome>\idstools\IDSWebApp.war. The old IDSWebApp.war file (in
        <emb_WAS_installed_path>\installableApps\) is renamed to
        IDSWebApp.war_bkup_mm-dd-yy_HH-MM-SS before the new IDSWebApp.war file is
        copied to <emb_WAS_installed_path>\installableApps\.

    <emb_WAS_installed_path> is the fully qualified file path to the installed
        embedded version of WebSphere Application Server- Express. If not specified,
        this path defaults to <LDAPHome>/appsrv.

    In addition, on Windows systems only, you can use the -n parameter to suppress
    the "Press any key to continue..." prompt that is displayed by default
    at the end of the script.


Querying the version number:
============================

    When you install the fix, the fix level is updated to 6.0.0.59

    To query the version that is installed, use the following commands:

    - On AIX systems: lslpp -l 'idsldap*'

    - On Linux systems: rpm -qa | grep idsldap

    - On Solaris systems:

      1. First type the following:

         pkginfo | grep IDSl

      This command lists the installed packages.

      2. Then type the following for each installed package:

         pkgparam <Package name with prefix "IDS"> VERSION

      This command queries the version for a particular package. For example, to
      query the version for the base client package, type the following:

         pkgparam IDSlbc60 VERSION

    - On HP-UX systems: swlist | grep idsldap

    - On Windows systems: regedit

      Then look in the following registry area:
      My Computer\HKEY_LOCAL_MACHINE\SOFTWARE\IBM\IDSLDAP\6.0

    Be sure that all packages are at the 6.0.0.59 level.


Uninstalling the fix:
=====================

    Uninstalling the fix uninstalls IBM Tivoli Directory Server 6.0 along
    with the fix. You must then reinstall IBM Tivoli Directory Server 6.0 to
    return to the previous level. Your configuration files and instances are
    left intact.

    To uninstall:

    - On all systems:

    1. Stop all IBM Tivoli Directory Server client or server processes, including
       the directory server, administration daemon, and custom LDAP applications.
       Programs and libraries cannot be replaced while they are in use. If tracing is
       enabled, run "ldtrc off" to turn it off.

    2. Use the instructions in the "IBM Tivoli Directory Server Version 6.0 Installation
       and Configuration Guide" (see the chapter called "Uninstalling IBM Tivoli Directory
       Server") to uninstall IBM Tivoli Directory Server along with the fix pack.

    Note: The package names on Linux systems are slightly different for updates than
          for the GA version. For example, the package name for the base client for the
          GA version on xSeries Linux is idsldap-cltbase60-6.0.0-0.i386.rpm. For
          interim fix 1, however, the package name is idsldap-cltbase60-6.0.0-2.i386.rpm.
          When using the instructions for uninstalling, be aware of this difference.
          You can use the rpm -qa command to list all packages.

    3. Reinstall IBM Tivoli Directory Server 6.0 at the General Availability level,
       using the instructions in the "Installation and Configuration Guide."


-------------
END OF README
-------------
